Function at 0x140003fd4
Capabilities:
Create process on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x128]
sub rsp, 0x228
mov rax, qword [0x14004f0c0]
xor rax, rsp
mov qword [rbp + 0x110], rax
mov r15, qword [rbp + 0x190]
mov r12, qword [rbp + 0x198]
xor r14d, r14d
lea rdi, [rcx - 0x10]
mov qword [rsp + 0x48], r8
mov rbx, rdx
inc dword [rdi + 0x40]
mov qword [rsp + 0x40], rdx
mov rsi, rcx
lea r8d, [r14 + 8]
lea rdx, str.Navigate
lea rcx, [rbp - 0x28]
mov r13, r9
mov qword [rbp - 0x10], 0xf
mov qword [rbp - 0x18], r14
mov byte [rbp - 0x28], r14b
call fcn.140001d10
test r13, r13
je 0x14000405c
cmp word [r13], r14w
jne 0x14000407b
test r15, r15
je 0x140004067
cmp word [r15], r14w
jne 0x14000407b
test r12, r12
je 0x14000420b
cmp word [r12], r14w
je 0x14000420b
lea rcx, str._n___CCustomInternetExplorer::Navigate::TargetFrameName_p__PostData__p__Headers_p_n
mov r9, r12
mov r8, r15
mov rdx, r13
call fcn.1400012fc
lea rbx, [rsi + 0x90]
mov rcx, rbx
call fcn.140002880
mov rcx, rdi
call fcn.14000efa0
or rdi, 0xffffffffffffffff
mov r14d, eax
test eax, eax
js 0x1400040f6
mov rcx, qword [rsi + 0x160]
test rcx, rcx
je 0x1400040f6
mov rax, qword [rcx]
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
mov r9, r13
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r15
call qword [rax + 0x58]
cmp dword [rsi + 0x38], 1
mov r14d, eax
jne 0x1400040f6
mov rcx, qword [rsi + 0x160]
mov edx, edi
mov rax, qword [rcx]
call qword [rax + 0x148]
xor esi, esi
lea rcx, [rbp + 1]
xor edx, edx
mov r8d, 0x103
mov qword [rbp - 0x70], 0xf
mov qword [rbp - 0x78], rsi
mov byte [rsp + 0x78], sil
mov byte [rbp], sil
call fcn.140021140
lea rdx, [0x140044d68]
test r12, r12
mov dword [rsp + 0x38], r14d
mov rcx, rdx
lea rax, str.Headers
lea r8, str.PostData
cmovne rcx, rax
mov rax, rdx
test r15, r15
cmovne rax, r8
mov qword [rsp + 0x30], rcx
lea r8, str.TargetFrameName
mov qword [rsp + 0x28], rax
test r13, r13
lea r9, str._s_s_sCallIE_hr0x_0x_
cmovne rdx, r8
lea rcx, [rbp]
mov r8, rdi
mov qword [rsp + 0x20], rdx
mov edx, 0x104
call fcn.14001f8e0
cmp byte [rbp], sil
jne 0x14000418b
mov edi, esi
jmp 0x140004198
lea rax, [rbp]
inc rdi
cmp byte [rax + rdi], sil
jne 0x14000418f
lea rdx, [rbp]
lea rcx, [rsp + 0x78]
mov r8, rdi
call fcn.140001d10
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.1400027c0
lea rcx, [rsp + 0x78]
xor r9d, r9d
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x28]
mov edx, 0x7d4
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
call fcn.1400167f4
cmp qword [rsp + 0x68], 0x10
jb 0x1400041f1
mov rcx, qword [rsp + 0x50]
call fcn.14001edb8
cmp qword [rbp - 0x70], 0x10
jb 0x14000466c
mov rcx, qword [rsp + 0x78]
call fcn.14001edb8
jmp 0x14000466c
lea rcx, [rbp - 0x48]
mov qword [rbp - 0x30], 7
mov qword [rbp - 0x38], r14
mov word [rbp - 0x48], r14w
call fcn.14000f79c
test al, al
je 0x140004520
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
lea rcx, str.__force_qb_trident_mode___url
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x1400046a2
lea rcx, [rsp + 0x70]
mov rdx, rbx
call fcn.140002900
cmp qword [rbp - 0x30], 8
mov rbx, qword [rsp + 0x70]
lea r8, [rbp - 0x48]
lea rdx, [0x140045930]
mov r9, rbx
cmovae r8, qword [rbp - 0x48]
xor ecx, ecx
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r14
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, str._n___CCustomInternetExplorer::Navigate::succeeded_GetQQBrowserRegExePath__hShellEcecute0x_0x__bstrParam__ws__n
mov rdx, rax
mov r8, rbx
mov r14, rax
mov qword [rsp + 0x70], rax
call fcn.1400012fc
cmp r14d, 0x20
ja 0x140004438
lea rcx, [rsi + 0x90]
call fcn.140002880
mov rcx, rdi
call fcn.14000efa0
or rdi, 0xffffffffffffffff
mov r14d, eax
test eax, eax
js 0x140004316
mov rcx, qword [rsi + 0x160]
test rcx, rcx
je 0x140004316
mov rax, qword [rcx]
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
mov r9, r13
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r15
call qword [rax + 0x58]
cmp dword [rsi + 0x38], 1
mov r14d, eax
jne 0x140004316
mov rcx, qword [rsi + 0x160]
mov edx, edi
mov rax, qword [rcx]
call qword [rax + 0x148]
mov r12d, 0xf
xor r15d, r15d
lea rdx, str.Navigate
lea r8d, [r12 - 7]
lea rcx, [rbp - 0x68]
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x58], r15
mov byte [rbp - 0x68], r15b
call fcn.140001d10
lea rcx, [rbp + 1]
xor edx, edx
mov r8d, 0x103
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x78], r15
mov byte [rsp + 0x78], r15b
mov byte [rbp], r15b
call fcn.140021140
mov rax, qword [rsp + 0x70]
lea r9, str.ShellExecute_failed__d__CallIE0x_0x
lea rcx, [rbp]
mov r8, rdi
mov edx, 0x104
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], eax
call fcn.14001f8e0
cmp byte [rbp], r15b
jne 0x140004393
mov edi, r15d
jmp 0x1400043a0
lea rax, [rbp]
inc rdi
cmp byte [rax + rdi], r15b
jne 0x140004397
lea rdx, [rbp]
lea rcx, [rsp + 0x78]
mov r8, rdi
call fcn.140001d10
lea rdx, [rsp + 0x50]
lea rcx, [rsi + 0x90]
call fcn.1400027c0
lea rcx, [rsp + 0x78]
mov edx, 0x7d4
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x68]
mov r9d, 1
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
call fcn.1400167f4
cmp qword [rsp + 0x68], 0x10
jb 0x140004401
mov rcx, qword [rsp + 0x50]
call fcn.14001edb8
cmp qword [rbp - 0x70], 0x10
jb 0x140004412
mov rcx, qword [rsp + 0x78]
call fcn.14001edb8
cmp qword [rbp - 0x50], 0x10
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x78], r15
mov byte [rsp + 0x78], r15b
jb 0x140004512
mov rcx, qword [rbp - 0x68]
call fcn.14001edb8
jmp 0x140004512
inc dword [rdi + 0x44]
mov edi, 0xf
xor r15d, r15d
lea rdx, str.success
lea rcx, [rsp + 0x78]
lea r8d, [rdi - 8]
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x78], r15
mov byte [rsp + 0x78], r15b
call fcn.140001d10
lea r8d, [rdi - 7]
lea rdx, str.Navigate
lea rcx, [rbp - 0x68]
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x58], r15
mov byte [rbp - 0x68], r15b
call fcn.140001d10
lea rcx, [rsi + 0x90]
lea rdx, [rsp + 0x50]
call fcn.1400027c0
lea rcx, [rsp + 0x78]
xor r9d, r9d
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x68]
mov edx, 0x7d4
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
call fcn.1400167f4
cmp qword [rsp + 0x68], 0x10
jb 0x1400044d2
mov rcx, qword [rsp + 0x50]
call fcn.14001edb8
cmp qword [rbp - 0x50], 0x10
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x60], r15
mov byte [rsp + 0x50], r15b
jb 0x1400044f1
mov rcx, qword [rbp - 0x68]
call fcn.14001edb8
cmp qword [rbp - 0x70], 0x10
mov r14d, r15d
jb 0x140004505
mov rcx, qword [rsp + 0x78]
call fcn.14001edb8
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x78], r15
mov byte [rsp + 0x78], r15b
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x14000464b
lea rbx, [rsi + 0x90]
mov rcx, rbx
call fcn.140002880
mov rcx, rdi
call fcn.14000efa0
or rdi, 0xffffffffffffffff
mov r14d, eax
test eax, eax
js 0x140004586
mov rcx, qword [rsi + 0x160]
test rcx, rcx
je 0x140004586
mov rax, qword [rcx]
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
mov r9, r13
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r15
call qword [rax + 0x58]
cmp dword [rsi + 0x38], 1
mov r14d, eax
jne 0x140004586
mov rcx, qword [rsi + 0x160]
mov edx, edi
mov rax, qword [rcx]
call qword [rax + 0x148]
xor r15d, r15d
lea rcx, [rbp + 1]
xor edx, edx
mov r8d, 0x103
mov qword [rbp - 0x50], 0xf
mov qword [rbp - 0x58], r15
mov byte [rbp - 0x68], r15b
mov byte [rbp], r15b
call fcn.140021140
lea r9, str.getqb_failed__callIE0x_0x
lea rcx, [rbp]
mov r8, rdi
mov edx, 0x104
mov dword [rsp + 0x20], r14d
call fcn.14001f8e0
cmp byte [rbp], r15b
jne 0x1400045d6
mov edi, r15d
jmp 0x1400045e3
lea rax, [rbp]
inc rdi
cmp byte [rax + rdi], r15b
jne 0x1400045da
lea rdx, [rbp]
lea rcx, [rbp - 0x68]
mov r8, rdi
call fcn.140001d10
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.1400027c0
lea rcx, [rbp - 0x68]
xor r9d, r9d
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x28]
mov edx, 0x7d4
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
call fcn.1400167f4
cmp qword [rsp + 0x68], 0x10
jb 0x14000463b
mov rcx, qword [rsp + 0x50]
call fcn.14001edb8
cmp qword [rbp - 0x50], 0x10
jb 0x14000464b
mov rcx, qword [rbp - 0x68]
call fcn.14001edb8
cmp qword [rbp - 0x30], 8
jb 0x14000465b
mov rcx, qword [rbp - 0x48]
call fcn.14001edb8
mov qword [rbp - 0x30], 7
mov qword [rbp - 0x38], r15
mov word [rbp - 0x48], r15w
cmp qword [rbp - 0x10], 0x10
jb 0x14000467c
mov rcx, qword [rbp - 0x28]
call fcn.14001edb8
mov eax, r14d
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.14001edd0
add rsp, 0x228
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x8007000e
call fcn.14000130c
int3