Function at 0x140013f70
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x58
mov qword [rbp - 0x18], 0xfffffffffffffffe
mov rdi, r9
mov eax, edx
mov r14, qword [rcx + 8]
mov qword [rbp + 0x48], r14
mov r12, qword [rcx + 0x10]
mov r15, qword [rcx + 0x18]
mov r13, qword [rcx + 0x38]
xor r8d, r8d
test edx, edx
js 0x14001432a
cmp byte [rcx + 0xa3], r8b
jne 0x14001432a
mov rcx, r9
call fcn.1400151f4
mov rsi, qword [rdi]
xor ecx, ecx
mov ebx, ecx
movzx eax, word [rsi]
test ax, ax
je 0x14001405e
xor r14d, r14d
movzx ecx, ax
call fcn.140039acc
test eax, eax
je 0x140013fff
mov rax, rsi
test rbx, rbx
cmovne rax, rbx
mov rbx, rax
jmp 0x140014002
mov rbx, r14
add rsi, 2
movzx eax, word [rsi]
test ax, ax
jne 0x140013fe4
xor esi, esi
test rbx, rbx
mov r14, qword [rbp + 0x48]
je 0x140014060
mov rax, qword [rdi]
sub rbx, rax
sar rbx, 1
test ebx, ebx
js 0x140014368
lea ecx, [rsi + 1]
sub ecx, dword [rax - 8]
mov eax, dword [rax - 0xc]
sub eax, ebx
or eax, ecx
jge 0x140014043
mov edx, ebx
mov rcx, rdi
call fcn.14000e350
mov rax, qword [rdi]
cmp ebx, dword [rax - 0xc]
jg 0x140014373
mov dword [rax - 0x10], ebx
movsxd rcx, ebx
mov rax, qword [rdi]
mov word [rax + rcx*2], si
jmp 0x140014060
xor esi, esi
mov r8, qword [rdi]
cmp dword [r8 - 0x10], esi
je 0x1400140b1
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
mov rdx, qword [rdi]
sub rdx, 0x18
or ebx, 0xffffffff
mov ecx, ebx
lock xadd dword [rdx + 0x10], ecx
add ecx, ebx
test ecx, ecx
jg 0x1400140aa
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
mov al, 1
jmp 0x14001434c
call fcn.14000de5c
mov rcx, rax
test rax, rax
je 0x14001437e
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x48], rax
lea r9, [rbp + 0x48]
mov r8, r15
mov rdx, r12
mov rcx, r14
call fcn.14001c6dc
test al, al
jne 0x140014110
lea rax, [rbp + 0x48]
mov qword [rsp + 0x28], rax
lea rax, str.browse_crashinfo.php
mov qword [rsp + 0x20], rax
lea r9, str.https:__
mov r8, r15
mov rdx, r12
mov rcx, r14
call fcn.14001ca1c
lea rdx, str._vendor
lea rcx, [rbp + 0x48]
call fcn.140015300
test r14, r14
jne 0x140014129
mov eax, esi
jmp 0x140014131
mov rcx, r14
call fcn.14002adf0
mov r8d, eax
mov rdx, r14
lea rcx, [rbp + 0x48]
call fcn.1400195a8
lea rdx, str.app
lea rcx, [rbp + 0x48]
call fcn.140015300
test r12, r12
jne 0x140014159
mov eax, esi
jmp 0x140014161
mov rcx, r12
call fcn.14002adf0
mov r8d, eax
mov rdx, r12
lea rcx, [rbp + 0x48]
call fcn.1400195a8
lea rdx, str.version
lea rcx, [rbp + 0x48]
call fcn.140015300
test r15, r15
jne 0x140014189
mov eax, esi
jmp 0x140014191
mov rcx, r15
call fcn.14002adf0
mov r8d, eax
mov rdx, r15
lea rcx, [rbp + 0x48]
call fcn.1400195a8
test r13, r13
je 0x1400141d9
mov rcx, r13
call fcn.14002adf0
test rax, rax
je 0x1400141d9
lea rdx, str.key
lea rcx, [rbp + 0x48]
call fcn.140015300
mov rcx, r13
call fcn.14002adf0
mov r8d, eax
mov rdx, r13
lea rcx, [rbp + 0x48]
call fcn.1400195a8
call fcn.14000de5c
mov rcx, rax
test rax, rax
je 0x140014389
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x28], rax
mov r8d, dword [rbp + 0x50]
lea rdx, [0x140068238]
lea rcx, [rbp - 0x28]
call fcn.14001559c
lea rdx, str.id
lea rcx, [rbp + 0x48]
call fcn.140015300
mov rdx, qword [rbp - 0x28]
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x48]
call fcn.1400195a8
call fcn.14000de5c
mov rcx, rax
test rax, rax
je 0x14001435d
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x20], rax
mov r8d, dword [rbp + 0x58]
lea rdx, [0x140068238]
lea rcx, [rbp - 0x20]
call fcn.14001559c
lea rdx, str.row
lea rcx, [rbp + 0x48]
call fcn.140015300
mov rbx, qword [rbp - 0x20]
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x48]
call fcn.1400195a8
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, qword [rbp + 0x48]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rdx, [rbx - 0x18]
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400142c6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400142e5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140014304
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rdi]
sub rdx, 0x18
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400140aa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x1400140aa
mov rdx, qword [r9]
sub rdx, 0x18
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14001434a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor al, al
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x80004005
call fcn.14000fc30
nop
mov ecx, 0x80070057
call fcn.14000fc30
int3
mov ecx, 0x80070057
call fcn.14000fc30
int3
mov ecx, 0x80004005
call fcn.14000fc30
nop
mov ecx, 0x80004005
call fcn.14000fc30
int3