Function at 0x14005a300
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
push rbp
push rdi
push r14
lea rbp, [rax - 0x228]
sub rsp, 0x310
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1400a3010]
xor rax, rsp
mov qword [rbp + 0x200], rax
test rcx, rcx
je 0x14005a743
cmp word [rcx], 0
je 0x14005a743
mov qword [rbp - 0x18], 7
xor edi, edi
mov qword [rbp - 0x20], rdi
mov word [rbp - 0x30], di
or r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp word [rcx + r8*2], di
jne 0x14005a363
mov rdx, rcx
lea rcx, [rbp - 0x30]
call fcn.1400113d0
nop
mov edx, 0x3a
xor r8d, r8d
lea rcx, [rbp - 0x30]
call fcn.140008ba0
cmp rax, 0xffffffffffffffff
jne 0x14005a3f6
lea r8, [rbp - 0x30]
lea rdx, str.http:__
lea rcx, [rbp - 0x50]
call fcn.140023df0
mov rbx, rax
lea rax, [rbp - 0x30]
cmp rax, rbx
je 0x14005a3de
cmp qword [rbp - 0x18], 8
jb 0x14005a3c2
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.mfc120u.dll_Ordinal_1486]
mov qword [rbp - 0x18], 7
mov qword [rbp - 0x20], rdi
mov word [rbp - 0x30], di
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.140011e10
cmp qword [rbp - 0x38], 8
jb 0x14005a3ef
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.mfc120u.dll_Ordinal_1486]
mov bl, 1
jmp 0x14005a59e
mov r9, rax
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x30]
call fcn.140008ca0
nop
mov r9, qword [rbp - 0x40]
mov r11, qword [rbp - 0x50]
mov r10, qword [rbp - 0x38]
test r9, r9
je 0x14005a4a6
lea rax, [rbp - 0x50]
cmp r10, 8
cmovae rax, r11
lea rcx, [rbp - 0x50]
cmovae rcx, r11
lea rcx, [rcx + r9*2]
cmp rax, rcx
je 0x14005a4a6
mov r11d, 0x80
lea r10, [0x140076c90]
lea r9, [0x140077d58]
movzx r8d, word [rax]
cmp r8w, r11w
jae 0x14005a470
lea edx, [r8 - 0x41]
cmp dl, 0x19
movsx edx, r8b
ja 0x14005a46a
add edx, 0x20
movsx r8d, dl
jmp 0x14005a48d
mov rdx, r10
cmp word [rdx], r8w
je 0x14005a484
add rdx, 4
cmp rdx, r9
jne 0x14005a473
jmp 0x14005a489
movzx r8d, word [rdx + 2]
movzx r8d, r8w
mov word [rax], r8w
add rax, 2
cmp rax, rcx
jne 0x14005a450
mov r10, qword [rbp - 0x38]
mov r9, qword [rbp - 0x40]
mov r11, qword [rbp - 0x50]
lea rcx, [rbp - 0x50]
cmp r10, 8
cmovae rcx, r11
mov r8d, 4
cmp r9, r8
cmovb r8, r9
test r8, r8
je 0x14005a4f6
lea rdx, str.http
nop dword [rax + rax]
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14005a4e7
add rcx, 2
add rdx, 2
dec r8
jne 0x14005a4d0
jmp 0x14005a4f6
mov r8d, 1
cmp word [rcx], ax
cmovb r8d, r14d
jmp 0x14005a4f9
mov r8d, edi
movsxd rax, r8d
test r8d, r8d
jne 0x14005a515
cmp r9, 4
jae 0x14005a50c
mov eax, r14d
jmp 0x14005a515
mov eax, edi
cmp r9, 4
setne al
test eax, eax
je 0x14005a58d
lea rcx, [rbp - 0x50]
cmp r10, 8
cmovae rcx, r11
mov r8d, 5
cmp r9, r8
cmovb r8, r9
test r8, r8
je 0x14005a566
lea rdx, str.https
nop
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14005a557
add rcx, 2
add rdx, 2
dec r8
jne 0x14005a540
jmp 0x14005a566
mov r8d, 1
cmp word [rcx], ax
cmovb r8d, r14d
jmp 0x14005a569
mov r8d, edi
movsxd rax, r8d
test r8d, r8d
jne 0x14005a585
cmp r9, 5
jae 0x14005a57c
mov eax, r14d
jmp 0x14005a585
mov eax, edi
cmp r9, 5
setne al
test eax, eax
je 0x14005a58d
xor bl, bl
jmp 0x14005a58f
mov bl, 1
cmp r10, 8
jb 0x14005a59e
mov rcx, r11
call qword [sym.imp.mfc120u.dll_Ordinal_1486]
mov dword [rsp + 0x40], 0x70
xor edx, edx
lea r8d, [rdx + 0x6c]
lea rcx, [rsp + 0x44]
call sub.MSVCR120.dll_memset
mov dword [rsp + 0x44], 0x4500
lea rax, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rax, qword [rbp - 0x30]
mov qword [rsp + 0x58], rax
lea rsi, str.open
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x70], 1
lea rcx, [rsp + 0x40]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x14005a5fb
mov bl, 1
jmp 0x14005a72d
test bl, bl
je 0x14005a72b
mov word [rbp - 0x10], di
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp - 0xe]
call sub.MSVCR120.dll_memset
mov dword [rsp + 0x30], Ordinal_266
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r9, rsi
lea r8, str.http
mov edx, 1
xor ecx, ecx
call qword [sym.imp.SHLWAPI.dll_AssocQueryStringW]
test eax, eax
js 0x14005a72b
mov qword [rbp - 0x38], 7
mov qword [rbp - 0x40], rdi
mov word [rbp - 0x50], di
cmp word [rbp - 0x10], 0
jne 0x14005a66e
mov r8, rdi
jmp 0x14005a680
lea rax, [rbp - 0x10]
mov r8, r14
inc r8
cmp word [rax + r8*2], 0
jne 0x14005a675
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x50]
call fcn.1400113d0
nop
mov r9d, 2
xor r8d, r8d
lea rdx, [0x14007c634]
lea rcx, [rbp - 0x50]
call fcn.140009710
lea rcx, [rbp - 0x50]
cmp rax, 0xffffffffffffffff
je 0x14005a6cf
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x30]
mov r8d, 2
mov rdx, rax
call fcn.140011610
jmp 0x14005a6ed
mov r8d, 0x20
call fcn.140011120
mov r9, r14
xor r8d, r8d
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.140011f20
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
call fcn.14005a1f0
nop
test al, al
je 0x14005a71a
cmp qword [rbp - 0x38], 8
jb 0x14005a716
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.mfc120u.dll_Ordinal_1486]
mov bl, 1
jmp 0x14005a72d
cmp qword [rbp - 0x38], 8
jb 0x14005a72b
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.mfc120u.dll_Ordinal_1486]
xor bl, bl
cmp qword [rbp - 0x18], 8
jb 0x14005a73e
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.mfc120u.dll_Ordinal_1486]
movzx eax, bl
jmp 0x14005a745
xor al, al
mov rcx, qword [rbp + 0x200]
xor rcx, rsp
call fcn.140065260
lea r11, [rsp + 0x310]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret