Function at 0x1400947d0
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rbx, rcx
xor edi, edi
mov r15d, edi
mov dword [rbp - 0x50], edi
lea rcx, [rbp - 0x30]
call fcn.14008b450
nop
mov rax, qword [rbp - 0x30]
lea r14, [rdi - 1]
cmp dword [rax - 0x10], edi
jne 0x140094831
lea r9d, [rdi + 0x10]
lea r8d, [r9 + 0x71]
lea rdx, str.Failed_to_locate_web_browser
mov rcx, qword [rbx + 8]
call fcn.140055b80
jmp 0x140094dea
mov r9d, 2
mov r8, r14
mov edx, 0x100c
mov rcx, qword [rbx + 0xb8]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rcx, eax
mov rax, qword [rbx + 0xe8]
mov r12, qword [rax + rcx*8]
shl r12, 4
add r12, qword [rbx + 0xd0]
mov rbx, qword [r12]
add rbx, 0x60
cmp qword [rbx + 0x18], 8
jb 0x140094877
mov rbx, qword [rbx]
call fcn.140008180
mov rcx, rax
test rax, rax
je 0x140094e6f
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
test rbx, rbx
je 0x1400948c1
cmp rbx, 0x10000
jae 0x1400948b2
movzx edx, bx
lea rcx, [rbp - 0x48]
call fcn.140006660
jmp 0x1400948d3
mov rax, r14
inc rax
cmp word [rbx + rax*2], 0
jne 0x1400948b5
jmp 0x1400948c3
mov eax, edi
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.1400068f0
nop
mov edx, 0x5c
mov rbx, qword [rbp - 0x48]
mov rcx, rbx
call fcn.14009eee8
test rax, rax
je 0x14009499f
sub rax, rbx
sar rax, 1
test eax, eax
js 0x14009499f
lea r8d, [rax + 1]
mov r9d, dword [rbx - 0x10]
sub r9d, r8d
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x48]
call fcn.14000a580
mov edi, 4
mov dword [rbp - 0x50], edi
mov rdx, qword [rbp - 0x20]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140094973
cmp dword [rbx + 0x10], 0
jl 0x140094966
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140094966
call fcn.140006780
mov rsi, rax
mov ecx, r14d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14009495c
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rVariantCopy + 8]
lea rax, [rsi + 0x18]
mov qword [rbp - 0x48], rax
jmp 0x140094973
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x48]
call fcn.1400068f0
and edi, 0xfffffffb
mov dword [rbp - 0x50], edi
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140094997
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov r15d, dword [rbp - 0x50]
mov rbx, qword [rbp - 0x48]
mov rax, qword [r12]
test byte [rax + 0x118], 1
je 0x140094b49
lea r12, [rbx - 0x18]
mov rcx, qword [r12]
test rcx, rcx
je 0x1400949cb
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x1400949e5
call fcn.140008180
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
je 0x140094e7a
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rbp - 0x18], rdi
or r15d, 8
mov dword [rbp - 0x50], r15d
mov eax, dword [rbx - 0x10]
mov dword [rbp - 0x40], eax
lea rdx, str.File_not_found:
mov rsi, r14
nop dword [rax + rax]
inc rsi
cmp word [rdx + rsi*2], 0
jne 0x140094a10
lea r13d, [rax + rsi]
test r13d, r13d
js 0x140094e90
mov ecx, 1
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, r13d
or eax, ecx
jge 0x140094a50
mov edx, r13d
lea rcx, [rbp - 0x18]
call fcn.140006870
mov rdi, qword [rbp - 0x18]
lea rdx, str.File_not_found:
movsxd rax, esi
lea rsi, [rax + rax]
test rsi, rsi
je 0x140094a7e
test rdi, rdi
jne 0x140094a73
call fcn.1400a31cc
mov dword [rax], 0x16
call fcn.1400a3060
jmp 0x140094a7e
mov r8, rsi
mov rcx, rdi
call fcn.14009d3c0
movsxd r8, dword [rbp - 0x40]
add r8, r8
lea rcx, [rsi + rdi]
je 0x140094aaa
test rcx, rcx
jne 0x140094aa2
call fcn.1400a31cc
mov dword [rax], 0x16
call fcn.1400a3060
jmp 0x140094aaa
mov rdx, rbx
call fcn.14009d3c0
cmp r13d, dword [rdi - 0xc]
jg 0x140094e90
mov dword [rdi - 0x10], r13d
movsxd rax, r13d
xor ecx, ecx
mov word [rdi + rax*2], cx
lea rbx, [rdi - 0x18]
cmp rbx, r12
je 0x140094b20
cmp dword [r12 + 0x10], ecx
jl 0x140094b10
mov rax, qword [r12]
cmp qword [rbx], rax
jne 0x140094b10
mov rcx, rbx
call fcn.140006780
mov rdi, rax
mov ecx, r14d
lock xadd dword [r12 + 0x10], ecx
sub ecx, 1
jg 0x140094b02
mov rcx, qword [r12]
mov r8, qword [rcx]
mov rdx, r12
call qword [rVariantCopy + 8]
lea rax, [rdi + 0x18]
mov qword [rbp - 0x48], rax
mov r15d, dword [rbp - 0x50]
jmp 0x140094b20
mov r8d, dword [rdi - 0x10]
mov rdx, rdi
lea rcx, [rbp - 0x48]
call fcn.1400068f0
and r15d, 0xfffffff7
mov dword [rbp - 0x50], r15d
mov eax, r14d
lock xadd dword [rbx + 0x10], eax
sub eax, 1
jg 0x140094b41
mov rcx, qword [rbx]
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + VariantCopy]
mov rbx, qword [rbp - 0x48]
mov r15d, dword [rbp - 0x50]
lea rax, [rbx - 0x18]
mov qword [rbp - 0x38], rax
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x140094b68
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140094b82
call fcn.140008180
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
je 0x140094e85
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rbp - 0x10], rdi
or r15d, 1
mov dword [rbp - 0x50], r15d
movsxd r13, dword [rbx - 0x10]
lea rdx, [0x1400da668]
mov rsi, r14
inc rsi
cmp word [rdx + rsi*2], 0
jne 0x140094ba6
lea r12d, [rsi + r13]
test r12d, r12d
js 0x140094e64
mov ecx, 1
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, r12d
or eax, ecx
jge 0x140094be6
mov edx, r12d
lea rcx, [rbp - 0x10]
call fcn.140006870
mov rdi, qword [rbp - 0x10]
lea rdx, [0x1400da668]
movsxd rax, esi
lea rsi, [rax + rax]
test rsi, rsi
je 0x140094c14
test rdi, rdi
jne 0x140094c09
call fcn.1400a31cc
mov dword [rax], 0x16
call fcn.1400a3060
jmp 0x140094c14
mov r8, rsi
mov rcx, rdi
call fcn.14009d3c0
mov r8, r13
add r8, r8
lea rcx, [rsi + rdi]
je 0x140094c3f
test rcx, rcx
jne 0x140094c37
call fcn.1400a31cc
mov dword [rax], 0x16
call fcn.1400a3060
jmp 0x140094c3f
mov rdx, rbx
call fcn.14009d3c0
cmp r12d, dword [rdi - 0xc]
jg 0x140094e64
mov dword [rdi - 0x10], r12d
movsxd rax, r12d
xor ecx, ecx
mov word [rdi + rax*2], cx
mov rcx, qword [rdi - 0x18]
test rcx, rcx
je 0x140094c6d
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140094c87
call fcn.140008180
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
je 0x140094e9b
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 8], rbx
or r15d, 2
mov dword [rbp - 0x50], r15d
lea rax, [0x1400f4b34]
mov rsi, r14
nop word [rax + rax]
inc rsi
cmp word [rax + rsi*2], 0
jne 0x140094cb0
mov eax, dword [rdi - 0x10]
mov dword [rbp - 0x40], eax
lea r12d, [rsi + rax]
test r12d, r12d
js 0x140094e59
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r12d
or eax, ecx
jge 0x140094cef
mov edx, r12d
lea rcx, [rbp - 8]
call fcn.140006870
mov rbx, qword [rbp - 8]
movsxd rax, dword [rbp - 0x40]
lea r8, [rax + rax]
mov qword [rbp - 0x40], r8
test r8, r8
je 0x140094d22
test rbx, rbx
jne 0x140094d17
call fcn.1400a31cc
mov dword [rax], 0x16
call fcn.1400a3060
jmp 0x140094d22
mov rdx, rdi
mov rcx, rbx
call fcn.14009d3c0
movsxd r8, esi
add r8, r8
mov rcx, qword [rbp - 0x40]
lea rcx, [rcx + rbx]
je 0x140094d55
test rcx, rcx
jne 0x140094d49
call fcn.1400a31cc
mov dword [rax], 0x16
call fcn.1400a3060
jmp 0x140094d55
lea rdx, [0x1400f4b34]
call fcn.14009d3c0
cmp r12d, dword [rbx - 0xc]
jg 0x140094e59
mov dword [rbx - 0x10], r12d
movsxd rax, r12d
xor ecx, ecx
mov word [rbx + rax*2], cx
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], rcx
mov r9, rbx
mov r8, qword [rbp - 0x30]
lea rdx, str.Open
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
and r15d, 0xfffffffd
mov dword [rbp - 0x50], r15d
lea rdx, [rbx - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140094daf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
and dword [rbp - 0x50], 0xfffffffe
mov eax, r14d
lock xadd dword [rdi - 8], eax
sub eax, 1
jg 0x140094dcf
mov rcx, qword [rdi - 0x18]
mov rax, qword [rcx]
lea rdx, [rdi - 0x18]
call qword [rax + VariantCopy]
nop
mov eax, r14d
mov rdx, qword [rbp - 0x38]
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140094dea
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
nop
lea rax, [rbp - 0x28]
mov qword [rbp - 0x38], rax
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140094e11
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
nop
lea rax, [rbp - 0x30]
mov qword [rbp - 0x38], rax
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r14d
sub r14d, 1
jg 0x140094e36
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
xor eax, eax
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80070057
call fcn.140007f00
nop
mov ecx, 0x80070057
call fcn.140007f00
nop
mov ecx, 0x80004005
call fcn.140007f00
nop
mov ecx, 0x80004005
call fcn.140007f00
nop
mov ecx, 0x80004005
call fcn.140007f00
nop
mov ecx, 0x80070057
call fcn.140007f00
nop
mov ecx, 0x80004005
call fcn.140007f00
int3