Function at 0x14001320c
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov dword [rax + 0x18], r8d
mov dword [rax + 0x10], edx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x88
mov qword [rbp + 0xf], 0xfffffffffffffffe
mov r14, r9
mov r15, qword [rcx + 8]
mov r13, qword [rcx + 0x10]
mov r12, qword [rcx + 0x18]
mov rax, qword [rcx + 0x38]
mov qword [rbp - 9], rax
xor esi, esi
test edx, edx
js 0x1400136c9
cmp byte [rcx + 0xa2], sil
jne 0x1400136c9
mov rcx, r9
call fcn.14000ce6c
mov rdi, qword [r14]
movzx ecx, word [rdi]
jmp 0x140013286
mov rcx, rdi
call qword [sym.imp.USER32.dll_CharNextW]
mov rdi, rax
movzx ecx, word [rax]
call fcn.14002a9e0
test eax, eax
jne 0x140013277
mov rcx, qword [r14]
mov rax, rdi
sub rax, rcx
sar rax, 1
mov ebx, dword [rcx - 8]
sub ebx, eax
lea eax, [rbx + 1]
movsxd r8, eax
add r8, r8
mov rdx, rdi
call fcn.140027d80
mov rax, qword [r14]
mov dword [rax - 8], ebx
mov rcx, r14
call fcn.14000ce6c
mov rdi, qword [r14]
mov rbx, rsi
movzx eax, word [rdi]
test ax, ax
je 0x14001330e
movzx ecx, ax
call fcn.14002a9e0
test eax, eax
je 0x1400132e3
test rbx, rbx
jne 0x1400132e6
mov rbx, rdi
jmp 0x1400132e6
mov rbx, rsi
mov rcx, rdi
call qword [sym.imp.USER32.dll_CharNextW]
mov rdi, rax
movzx eax, word [rax]
test ax, ax
jne 0x1400132cd
test rbx, rbx
je 0x14001330e
mov word [rbx], si
mov rax, qword [r14]
sub rbx, rax
sar rbx, 1
mov dword [rax - 8], ebx
mov r8, qword [r14]
cmp dword [r8 - 8], esi
je 0x14001336c
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
mov rax, qword [r14]
add rax, 0xfffffffffffffff4
lea rsi, [0x140060bd0]
cmp rax, rsi
je 0x140013365
or edi, 0xffffffff
mov ecx, edi
lock xadd dword [rax], ecx
add ecx, edi
test ecx, ecx
jg 0x140013365
mov rcx, qword [r14]
sub rcx, 0xc
call fcn.140029150
mov al, 1
jmp 0x1400136f9
mov rax, qword [0x140060be0]
mov qword [rbp + 0x67], rax
lea r9, [rbp + 0x67]
mov r8, r12
mov rdx, r13
mov rcx, r15
call fcn.14001d7f4
test al, al
jne 0x1400133b7
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
lea rax, [0x140052198]
mov qword [rsp + 0x20], rax
lea r9, str.https:__
mov r8, r12
mov rdx, r13
mov rcx, r15
call fcn.14001da70
lea rdx, str._vendor
lea rcx, [rbp + 7]
call fcn.1400186f4
nop
mov rbx, qword [rbp + 7]
mov r8, rbx
mov edx, dword [rbx - 8]
lea rcx, [rbp + 0x67]
call fcn.140018170
nop
lea rcx, [rbx - 0xc]
lea rsi, [0x140060bd0]
or edi, 0xffffffff
cmp rcx, rsi
je 0x140013400
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x140013400
call fcn.140029150
test r15, r15
jne 0x140013409
xor eax, eax
jmp 0x140013412
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8, r15
mov edx, eax
lea rcx, [rbp + 0x67]
call fcn.140018170
lea rdx, str.app
lea rcx, [rbp - 0x19]
call fcn.1400186f4
nop
mov rbx, qword [rbp - 0x19]
mov r8, rbx
mov edx, dword [rbx - 8]
lea rcx, [rbp + 0x67]
call fcn.140018170
nop
lea rcx, [rbx - 0xc]
cmp rcx, rsi
je 0x14001345f
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x14001345f
call fcn.140029150
test r13, r13
jne 0x140013468
xor eax, eax
jmp 0x140013471
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8, r13
mov edx, eax
lea rcx, [rbp + 0x67]
call fcn.140018170
lea rdx, str.version
lea rcx, [rbp - 0x29]
call fcn.1400186f4
nop
mov rbx, qword [rbp - 0x29]
mov r8, rbx
mov edx, dword [rbx - 8]
lea rcx, [rbp + 0x67]
call fcn.140018170
nop
lea rcx, [rbx - 0xc]
cmp rcx, rsi
je 0x1400134be
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x1400134be
call fcn.140029150
test r12, r12
jne 0x1400134c7
xor eax, eax
jmp 0x1400134d0
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8, r12
mov edx, eax
lea rcx, [rbp + 0x67]
call fcn.140018170
mov r15, qword [rbp - 9]
test r15, r15
je 0x14001354a
mov rcx, r15
call fcn.1400285ac
test rax, rax
je 0x14001354a
lea rdx, str.key
lea rcx, [rbp - 0x21]
call fcn.1400186f4
nop
mov rbx, qword [rbp - 0x21]
mov r8, rbx
mov edx, dword [rbx - 8]
lea rcx, [rbp + 0x67]
call fcn.140018170
nop
lea rcx, [rbx - 0xc]
cmp rcx, rsi
je 0x140013533
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x140013533
call fcn.140029150
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8, r15
mov edx, eax
lea rcx, [rbp + 0x67]
call fcn.140018170
mov rax, qword [0x140060be0]
mov qword [rbp - 0x39], rax
mov r8d, dword [rbp + 0x6f]
lea rdx, [0x14005261c]
lea rcx, [rbp - 0x39]
call fcn.140018634
lea rdx, str.id
lea rcx, [rbp - 0x11]
call fcn.1400186f4
nop
mov rbx, qword [rbp - 0x11]
mov r8, rbx
mov edx, dword [rbx - 8]
lea rcx, [rbp + 0x67]
call fcn.140018170
nop
lea rcx, [rbx - 0xc]
cmp rcx, rsi
je 0x1400135a8
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x1400135a8
call fcn.140029150
mov rax, qword [rbp - 0x39]
mov r8, rax
mov edx, dword [rax - 8]
lea rcx, [rbp + 0x67]
call fcn.140018170
mov rax, qword [0x140060be0]
mov qword [rbp - 0x31], rax
mov r8d, dword [rbp + 0x77]
lea rdx, [0x14005261c]
lea rcx, [rbp - 0x31]
call fcn.140018634
lea rdx, str.row
lea rcx, [rbp - 1]
call fcn.1400186f4
nop
mov rbx, qword [rbp - 1]
mov r8, rbx
mov edx, dword [rbx - 8]
lea rcx, [rbp + 0x67]
call fcn.140018170
nop
lea rcx, [rbx - 0xc]
cmp rcx, rsi
je 0x140013619
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x140013619
call fcn.140029150
mov rbx, qword [rbp - 0x31]
mov r8, rbx
mov edx, dword [rbx - 8]
lea rcx, [rbp + 0x67]
call fcn.140018170
mov dword [rsp + 0x28], 1
and qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x67]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rbx - 0xc]
cmp rcx, rsi
je 0x14001366c
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x14001366c
call fcn.140029150
nop
mov rcx, qword [rbp - 0x39]
add rcx, 0xfffffffffffffff4
cmp rcx, rsi
je 0x14001368b
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x14001368b
call fcn.140029150
nop
mov rcx, qword [rbp + 0x67]
add rcx, 0xfffffffffffffff4
cmp rcx, rsi
je 0x1400136aa
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x1400136aa
call fcn.140029150
nop
mov rax, qword [r14]
lea rcx, [rax - 0xc]
cmp rcx, rsi
je 0x140013365
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jmp 0x140013357
mov rax, qword [r9]
lea rcx, [rax - 0xc]
lea rsi, [0x140060bd0]
cmp rcx, rsi
je 0x1400136f7
or edi, 0xffffffff
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x1400136f7
mov rcx, qword [r9]
sub rcx, 0xc
call fcn.140029150
xor al, al
add rsp, 0x88
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret