Function at 0x14004b7c0
Capabilities:
Accept command line arguments
Create thread
Enumerate gui resources

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x990]
sub rsp, 0xa90
mov rax, qword [0x14017a390]
xor rax, rsp
mov qword [rbp + 0x980], rax
xor r14d, r14d
mov esi, r14d
mov dword [rbp + 0x2a0], r14d
mov qword [0x140182380], rcx
mov byte [rbp + 0x438], sil
lea rax, str.dll_dirs_F67BB3AD_7B5E_4C2D_A22B_747BC163AB78
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x2a0], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x14004b861
lea rdx, str.SetDefaultDllDirectories
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14004b861
mov ecx, 0x1000
call qword [case.0x14002c3eb.0]
lea rcx, [rbp + 0x168]
call fcn.140043e20
mov ebx, 7
cmp byte [rax + 0x20], sil
je 0x14004b8bf
cmp byte [rbp + 0x438], sil
je 0x14004b895
mov rdx, rax
lea rcx, [rbp + 0x418]
call fcn.140003c60
jmp 0x14004b926
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x418], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x428], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], rbx
mov word [rax], r14w
mov byte [rbp + 0x438], 1
jmp 0x14004b926
cmp byte [rbp + 0x438], sil
je 0x14004b926
mov rdx, qword [rbp + 0x430]
cmp rdx, 8
jb 0x14004b90e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x418]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b909
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004ccaa
call fcn.1400f35f0
movdqa xmm0, xmmword [0x140154050]
movdqu xmmword [rbp + 0x428], xmm0
mov word [rbp + 0x418], r14w
lea rcx, [rbp + 0x168]
call fcn.14004f0f0
lea rcx, [rbp + 0x520]
call fcn.140054ff0
call fcn.140044560
mov byte [rbp + 0x4b0], sil
cmp byte [rax + 0x20], sil
je 0x14004b97b
mov rdx, rax
lea rcx, [rbp + 0x490]
call fcn.140002430
mov byte [rbp + 0x4b0], 1
lea rdx, [rbp + 0x490]
lea rcx, [rbp + 0x4b8]
call fcn.140043360
jmp 0x14004b982
mov byte [rbp + 0x4d8], sil
lea rcx, [rbp + 0x490]
call fcn.14004f0f0
lea rcx, [rbp + 0x4b8]
call fcn.1400445e0
mov byte [rbp + 0x4e0], al
test al, al
jne 0x14004b9ae
mov edi, 5
jmp 0x14004cc36
mov qword [rbp + 0x350], r14
mov qword [rbp + 0x360], r14
mov qword [rbp + 0x368], rbx
lea rcx, [0x140147fbc]
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
call fcn.140044560
mov byte [rbp + 0x410], sil
lea rcx, [rbp + 0x3f0]
cmp byte [rax + 0x20], sil
je 0x14004cc95
mov rdx, rax
call fcn.140002430
mov byte [rbp + 0x410], 1
lea rcx, [rbp + 0x3f0]
cmp qword [rbp + 0x408], 8
cmovae rcx, qword [rbp + 0x3f0]
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
cmp byte [rbp + 0x410], sil
je 0x14004ccb0
lea rdx, [rbp + 0x3f0]
cmp qword [rbp + 0x408], 8
cmovae rdx, qword [rbp + 0x3f0]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], si
jne 0x14004ba44
mov qword [rbp + 0x370], r14
movdqa xmm0, xmmword [0x140154050]
movdqu xmmword [rbp + 0x380], xmm0
lea rcx, [rbp + 0x370]
call fcn.1400021f0
mov qword [rbp - 0x10], r14
movdqa xmm0, xmmword [0x140154050]
movdqu xmmword [rbp], xmm0
mov r8, rbx
lea rdx, str.Safepay
lea rcx, [rbp - 0x10]
call fcn.1400021f0
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x370]
call fcn.140013ee0
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x14004bae5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004bae0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004ccb6
call fcn.1400f35f0
movdqa xmm0, xmmword [0x140154050]
movdqu xmmword [rbp], xmm0
mov word [rbp - 0x10], r14w
lea rcx, [rbp + 0x370]
cmp qword [rbp + 0x388], 8
cmovae rcx, qword [rbp + 0x370]
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0x50]
call fcn.140002430
mov rdx, qword [rbp + 0x368]
cmp rdx, 8
jb 0x14004bb6a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x350]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004bb65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004ccbc
call fcn.1400f35f0
movups xmm0, xmmword [rbp + 0x50]
movups xmmword [rbp + 0x350], xmm0
movups xmm1, xmmword [rbp + 0x60]
movups xmmword [rbp + 0x360], xmm1
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x68], rbx
mov word [rbp + 0x50], r14w
mov rdx, qword [rbp + 0x388]
cmp rdx, 8
jb 0x14004bbd3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004bbce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004ccbc
call fcn.1400f35f0
movdqa xmm0, xmmword [0x140154050]
movdqu xmmword [rbp + 0x380], xmm0
mov word [rbp + 0x370], r14w
lea rcx, [rbp + 0x3f0]
call fcn.14004f0f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3e0], xmm0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
lea r15, [0x14017aff0]
lea rdi, [0x14017afd0]
test eax, eax
js 0x14004bc26
mov qword [rbp + 0x3e8], rdi
jmp 0x14004bc39
mov dword [rbp + 0x30], eax
mov qword [rbp + 0x38], r15
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0x3e0], xmm0
xor ecx, ecx
call qword [sym.imp.ole32.dll_OleInitialize]
mov dword [rbp + 0x334], eax
lea rcx, str.3AC4E6ED_4D84_408D_A7B7_F5766DDE17A2
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov r13d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x3d0], xmm0
mov r12d, r14d
mov qword [rbp + 0x3c0], r14
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [rbp + 0x2a0], r14d
lea rdx, [rbp + 0x2a0]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov rbx, rax
test rax, rax
jne 0x14004bd18
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov dword [rbp + 0x40], eax
mov qword [rbp + 0x48], r15
movaps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x3d0], xmm0
mov qword [rbp + 0x3b0], r14
mov r15, r14
mov qword [rbp + 0x3b8], r14
mov rbx, r14
mov rax, r14
test edi, edi
je 0x14004bd37
lea r8, str.wWinMain
mov edx, 4
lea rcx, [rbp + 0x70]
call fcn.140012de0
cmp byte [rbp + 0xf0], bl
je 0x14004bd0a
lea rdx, str.GetCommandLine_error
lea rcx, [rbp + 0x70]
call fcn.14000d030
cmp byte [rbp + 0xf0], bl
je 0x14004bd0a
mov edx, edi
lea rcx, [rbp + 0x70]
call fcn.1400191f0
lea rcx, [rbp + 0x70]
call fcn.140013d20
jmp 0x14004cb71
mov qword [rbp + 0x3d8], rdi
movsxd r15, dword [rbp + 0x2a0]
mov qword [rbp + 0x3b0], rax
mov qword [rbp + 0x3b8], r15
mov rax, r15
lea r14, [rbx + rax*8]
cmp rbx, r14
je 0x14004bda7
mov eax, 7
nop word [rax + rax]
mov rdi, qword [rbx]
mov r8, rax
lea rdx, str.__type
mov rcx, rdi
call fcn.1401056b0
test eax, eax
je 0x14004be68
lea rdx, str._stop
mov rcx, rdi
call fcn.1400ff9c0
test eax, eax
je 0x14004be38
lea rdx, str._sourcemain
mov rcx, rdi
call fcn.1400ff9c0
test eax, eax
mov eax, 7
cmove r12d, eax
add rbx, 8
cmp rbx, r14
jne 0x14004bd50
xor r14d, r14d
mov qword [rbp + 0x320], r14
mov qword [rbp + 0x298], r14
lea r8, [rbp + 0x260]
lea rcx, [rbp + 0x320]
call fcn.14004a470
mov rax, qword [rbp + 0x320]
test rax, rax
je 0x14004bf2b
mov rcx, qword [rax]
test rcx, rcx
je 0x14004bf2b
movzx eax, byte [rcx + 0x28]
test al, al
jne 0x14004bf24
mov qword [rbp + 0x2a8], r14
lea rdx, [rbp + 0x2a8]
lea rcx, [0x14004b730]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rbx, qword [rbp + 0x2a8]
test rbx, rbx
je 0x14004be74
lea edx, [r14 + 9]
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov edi, r14d
jmp 0x14004cb48
mov dword [rbp + 0x330], 8
xor ebx, ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8d, r13d
lea rdx, [rbp + 0x330]
mov ecx, 0x92
call qword [sym.imp.USER32.dll_BroadcastSystemMessageW]
mov edi, ebx
jmp 0x14004cb71
call fcn.1400645d0
mov edi, eax
jmp 0x14004cb71
mov ecx, dword [0x140182324]
mov eax, dword [0x140182320]
add ecx, eax
je 0x14004beeb
mov dword [rbp - 0x40], r14d
call fcn.140004ab0
mov qword [rbp - 0x48], rax
lock inc dword [rbp - 0x40]
mov rax, qword [rbp - 0x48]
test rax, rax
jne 0x14004beab
call fcn.140004ab0
mov qword [rbp - 0x48], rax
lock inc dword [rbp - 0x40]
mov rcx, qword [rbp - 0x48]
mov dword [rbp - 0x38], 0x20
lea rax, str.IPD:_IPD_window_not_found
mov qword [rsp + 0x28], rax
lea r14, str.wWinMain
mov qword [rsp + 0x20], r14
lea r9, [0x140000000]
lea r8, [rbp - 0x38]
xor eax, eax
movsx edx, ax
call fcn.140004000
mov esi, 1
xor r14d, r14d
test sil, 1
je 0x14004bf1c
mov qword [rbp - 0x48], r14
mov eax, 0xffffffff
lock xadd dword [rbp - 0x40], eax
cmp eax, 1
js 0x14004bf18
call fcn.140004c10
mov eax, 0xffffffff
lock xadd dword [rbp - 0x40], eax
cmp eax, 1
jns 0x14004bf04
lock inc dword [rbp - 0x40]
mov edi, r14d
jmp 0x14004cb48
mov r15, qword [rbp + 0x3b8]
mov qword [rbp + 0x328], r14
lea rcx, [rbp + 0x328]
call fcn.140048040
mov rbx, qword [rbp + 0x328]
test rbx, rbx
je 0x14004c14a
call fcn.140049810
test al, al
je 0x14004c14a
mov byte [rbp - 0x14], sil
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], 0xf
mov r8d, 0x26
lea rdx, str.5F3481A0_5BA7_4ABF_828B_F4D306C81FAB
lea rcx, [rbp + 0x10]
call fcn.1400078c0
call qword [sym.imp.WINMM.dll_timeGetTime]
mov dword [rbp + 0x560], eax
mov r9, 0xffffffffffffffff
lea r8, str.bd::process_broker::client::spawn_process_with_current_params
mov edx, 0x102
lea rcx, [rbp + 0x564]
call fcn.1400ff100
lea r8, [0x140148214]
mov edx, 0x104
lea rcx, [rbp + 0x564]
call fcn.1400ffc40
mov r9, 0xffffffffffffffff
lea r8, str.bd::process_broker::client::spawn_process_with_current_params
mov edx, 0x104
lea rcx, [rbp + 0x76c]
call fcn.1400ff100
mov ecx, dword [0x140182324]
mov eax, dword [0x140182320]
add ecx, eax
je 0x14004c0aa
mov dword [rsp + 0x50], r14d
call fcn.140004ab0
mov qword [rsp + 0x48], rax
lock inc dword [rsp + 0x50]
mov rax, qword [rsp + 0x48]
test rax, rax
jne 0x14004c028
call fcn.140004ab0
mov qword [rsp + 0x48], rax
lock inc dword [rsp + 0x50]
mov rcx, qword [rsp + 0x48]
mov dword [rbp - 0x34], 0x20
mov r14d, 1
lea rax, [rbp + 0x564]
mov qword [rsp + 0x30], rax
lea rax, str.____s
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x76c]
mov qword [rsp + 0x20], rax
lea r9, [0x140000000]
lea r8, [rbp - 0x34]
movsx edx, r14w
call fcn.140004000
xor r14d, r14d
mov qword [rsp + 0x48], r14
mov eax, 0xffffffff
lock xadd dword [rsp + 0x50], eax
cmp eax, 1
js 0x14004c0a5
nop word [rax + rax]
call fcn.140004c10
mov eax, 0xffffffff
lock xadd dword [rsp + 0x50], eax
cmp eax, 1
jns 0x14004c090
lock inc dword [rsp + 0x50]
mov byte [rbp + 0x1b0], sil
mov rax, qword [rbp - 0x18]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x190]
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x4e8]
call fcn.140048760
lea rcx, [rbp + 0x560]
call fcn.140004060
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x14004c118
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c113
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004ccc2
call fcn.1400f35f0
cmp byte [rbp + 0x518], sil
jne 0x14004c12d
cmp byte [rbp + 0x4ec], sil
mov edi, r14d
jne 0x14004c132
mov edi, 5
lea rcx, [rbp + 0x4e8]
call fcn.14004dd20
mov rbx, qword [rbp + 0x328]
jmp 0x14004cb2e
call fcn.140004ab0
mov byte [rbp + 0x2b0], sil
mov qword [rbp + 0x2b8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x2c0], xmm0
mov qword [rbp + 0x2d0], r14
mov byte [rbp + 0x318], sil
lea rcx, [rbp + 0x2b0]
call fcn.14003a380
test eax, eax
js 0x14004c318
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
call fcn.1400392b0
mov r14d, eax
xor dil, dil
xor eax, eax
mov qword [rbp + 0x340], rax
mov qword [rbp + 0x338], rax
mov qword [rbp + 0x348], rax
lea rcx, [rbp + 0x338]
call fcn.140001c90
mov rcx, qword [rbp + 0x338]
test eax, eax
jne 0x14004c1eb
mov dil, 1
test rcx, rcx
je 0x14004c20c
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
mov qword [rbp + 0x338], rax
mov dword [rbp + 0x340], eax
jmp 0x14004c21d
test rcx, rcx
je 0x14004c20c
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor r14d, r14d
mov qword [rbp + 0x338], r14
mov dword [rbp + 0x340], r14d
jmp 0x14004c318
xor eax, eax
mov dword [rbp + 0x340], eax
test dil, dil
je 0x14004c315
test r14d, r14d
js 0x14004c315
mov edx, 0xb8
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140182850], eax
jle 0x14004c26a
lea rcx, [0x140182850]
call fcn.1400f2fe0
cmp dword [0x140182850], 0xffffffff
jne 0x14004c26a
mov dword [0x140182854], r14d
lea rcx, [0x140182850]
call fcn.1400f2f80
xor r14d, r14d
mov ecx, r14d
mov rdx, qword [0x140182608]
lea r8, str.crash
nop
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x14004c29e
cmp rcx, 8
jne 0x14004c280
lea r8, [0x140039240]
jmp 0x14004c2dd
mov rax, r14
lea r8, str.abort
nop dword [rax + rax]
movzx ecx, word [rdx + rax*2]
inc rax
cmp cx, word [r8 + rax*2 - 2]
jne 0x14004c2cb
cmp rax, 8
jne 0x14004c2b0
cmp cx, word [r8 + rax*2 - 2]
lea r8, [0x140039290]
lea rax, [0x140039270]
cmove r8, rax
lea rax, [0x140182854]
mov r9, r14
cmp dword [0x140182854], esi
cmova r9, rax
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x14004c318
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14004c318
xor r14d, r14d
cmp byte [rbp + 0x318], sil
je 0x14004c34e
mov rcx, qword [rbp + 0x310]
test rcx, rcx
je 0x14004c34e
lea rdx, [rbp + 0x2d8]
cmp rcx, rdx
mov rax, qword [rcx]
setne dl
mov rax, qword [rax + 0x20]
call qword [case.0x14002c3eb.0]
mov qword [rbp + 0x310], r14
mov byte [rsp + 0x41], 1
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x390]
call fcn.14004b170
mov edi, dword [rbp + 0x3d0]
test edi, edi
je 0x14004c3c8
lea r8, str.wWinMain
mov edx, 4
lea rcx, [rbp + 0x70]
call fcn.140012de0
cmp byte [rbp + 0xf0], sil
je 0x14004c3b2
lea rdx, str.Failed_to_get_URL_from_file:_ec
lea rcx, [rbp + 0x70]
call fcn.14000d030
cmp byte [rbp + 0xf0], sil
je 0x14004c3b2
mov edx, edi
lea rcx, [rbp + 0x70]
call fcn.1400191f0
lea rcx, [rbp + 0x70]
call fcn.140013d20
mov edi, 0x65b
xor r14d, r14d
jmp 0x14004cabe
xorps xmm0, xmm0
movups xmmword [rbp + 0x440], xmm0
movups xmmword [rbp + 0x450], xmm0
movups xmmword [rbp + 0x460], xmm0
movups xmmword [rbp + 0x470], xmm0
movups xmmword [rbp + 0x480], xmm0
lea rcx, [rbp + 0x1c0]
call fcn.140046550
mov rdx, rax
lea rcx, [rbp + 0x440]
call fcn.140046210
lea rcx, [rbp + 0x218]
call fcn.140046940
lea rcx, [rbp + 0x200]
call fcn.140052110
lea rcx, [rbp + 0x1e8]
call fcn.1400528d0
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 0x10
jb 0x14004c46e
inc rdx
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c469
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004ccc8
call fcn.1400f35f0
movdqa xmm0, xmmword [0x140154060]
movdqa xmmword [rbp + 0x1d0], xmm0
mov byte [rbp + 0x1c0], sil
call fcn.140038950
mov edi, eax
cmp eax, 1
je 0x14004c4ce
mov rbx, qword [rbp + 0x3b0]
lea r15, [rbx + r15*8]
cmp rbx, r15
je 0x14004c4ce
mov r14d, 1
nop word [rax + rax]
lea rdx, str.__force_container
mov rcx, qword [rbx]
call fcn.1400ff9c0
test eax, eax
cmove edi, r14d
add rbx, 8
cmp rbx, r15
jne 0x14004c4b0
cmp edi, 1
sete bl
mov ecx, dword [0x140182324]
mov eax, dword [0x140182320]
lea r14, str.wWinMain
lea r15, [0x1401520d4]
add ecx, eax
je 0x14004c569
mov dword [rsp + 0x60], esi
call fcn.140004ab0
mov qword [rsp + 0x58], rax
lock inc dword [rsp + 0x60]
mov rax, qword [rsp + 0x58]
test rax, rax
jne 0x14004c51e
call fcn.140004ab0
mov qword [rsp + 0x58], rax
lock inc dword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
mov dword [rbp - 0x30], 0x20
mov rax, r15
cmp edi, 1
lea rdx, [0x1401520e0]
cmove rax, rdx
mov qword [rsp + 0x30], rax
lea rax, str.Using_CEF_before_legacy_check:__s
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
lea r9, [0x140000000]
lea r8, [rbp - 0x30]
movsx edx, si
call fcn.140004000
mov esi, 2
test sil, 2
je 0x14004c5aa
and esi, 0xfffffffd
xor eax, eax
mov qword [rsp + 0x58], rax
mov eax, 0xffffffff
lock xadd dword [rsp + 0x60], eax
cmp eax, 1
js 0x14004c5a5
nop dword [rax]
call fcn.140004c10
mov eax, 0xffffffff
lock xadd dword [rsp + 0x60], eax
cmp eax, 1
jns 0x14004c590
lock inc dword [rsp + 0x60]
cmp edi, 1
jne 0x14004c740
mov ecx, dword [0x140182324]
mov eax, dword [0x140182320]
add ecx, eax
je 0x14004c642
or esi, 4
xor edi, edi
mov dword [rsp + 0x70], edi
call fcn.140004ab0
mov qword [rsp + 0x68], rax
lock inc dword [rsp + 0x70]
mov rax, qword [rsp + 0x68]
test rax, rax
jne 0x14004c5f4
call fcn.140004ab0
mov qword [rsp + 0x68], rax
lock inc dword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
lea rax, [rbp + 0x350]
cmp qword [rbp + 0x368], 8
cmovae rax, qword [rbp + 0x350]
mov dword [rbp - 0x2c], 0x20
mov qword [rsp + 0x30], rax
lea rax, str.__cef_legacy::CEFNeedsDowngrade:_strSafepayPath_s
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
lea r9, [0x140000000]
lea r8, [rbp - 0x2c]
movsx edx, di
call fcn.140004000
jmp 0x14004c644
xor edi, edi
test sil, 4
je 0x14004c67c
and esi, 0xfffffffb
mov qword [rsp + 0x68], rdi
mov eax, 0xffffffff
lock xadd dword [rsp + 0x70], eax
cmp eax, 1
js 0x14004c677
call fcn.140004c10
mov eax, 0xffffffff
lock xadd dword [rsp + 0x70], eax
cmp eax, 1
jns 0x14004c662
lock inc dword [rsp + 0x70]
call fcn.14001db00
test al, al
je 0x14004c740
lea rcx, [rbp + 0x350]
call fcn.14001de00
test al, al
je 0x14004c740
mov ecx, dword [0x140182324]
mov eax, dword [0x140182320]
add ecx, eax
je 0x14004c709
or esi, 8
mov dword [rbp - 0x80], edi
call fcn.140004ab0
mov qword [rsp + 0x78], rax
lock inc dword [rbp - 0x80]
mov rax, qword [rsp + 0x78]
test rax, rax
jne 0x14004c6d9
call fcn.140004ab0
mov qword [rsp + 0x78], rax
lock inc dword [rbp - 0x80]
mov rcx, qword [rsp + 0x78]
mov dword [rbp - 0x28], 0x20
lea rax, str.CEF_needs_downgrade__legacy_OS._Disabling_use_of_CEF_container.
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
lea r9, [0x140000000]
lea r8, [rbp - 0x28]
movsx edx, di
call fcn.140004000
test sil, 8
je 0x14004c73e
and esi, 0xfffffff7
mov qword [rsp + 0x78], rdi
mov eax, 0xffffffff
lock xadd dword [rbp - 0x80], eax
cmp eax, 1
js 0x14004c73a
call fcn.140004c10
mov eax, 0xffffffff
lock xadd dword [rbp - 0x80], eax
cmp eax, 1
jns 0x14004c726
lock inc dword [rbp - 0x80]
xor bl, bl
mov ecx, dword [0x140182324]
mov eax, dword [0x140182320]
add ecx, eax
je 0x14004c7be
or esi, 0x10
xor edi, edi
mov dword [rbp - 0x70], edi
call fcn.140004ab0
mov qword [rbp - 0x78], rax
lock inc dword [rbp - 0x70]
mov rax, qword [rbp - 0x78]
test rax, rax
jne 0x14004c77b
call fcn.140004ab0
mov qword [rbp - 0x78], rax
lock inc dword [rbp - 0x70]
mov rcx, qword [rbp - 0x78]
mov dword [rbp - 0x24], 0x20
test bl, bl
lea rax, [0x1401520e0]
cmovne r15, rax
mov qword [rsp + 0x30], r15
lea rax, str.Using_CEF_after_legacy_check:__s
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
lea r9, [0x140000000]
lea r8, [rbp - 0x24]
movsx edx, di
call fcn.140004000
jmp 0x14004c7c0
xor edi, edi
test sil, 0x10
je 0x14004c7f8
and esi, 0xffffffef
mov qword [rbp - 0x78], rdi
mov eax, 0xffffffff
lock xadd dword [rbp - 0x70], eax
cmp eax, 1
js 0x14004c7f4
nop dword [rax]
call fcn.140004c10
mov eax, 0xffffffff
lock xadd dword [rbp - 0x70], eax
cmp eax, 1
jns 0x14004c7e0
lock inc dword [rbp - 0x70]
mov ecx, dword [0x140182324]
mov eax, dword [0x140182320]
test bl, bl
je 0x14004c91a
add ecx, eax
je 0x14004c868
or esi, 0x20
mov dword [rbp - 0x60], edi
call fcn.140004ab0
mov qword [rbp - 0x68], rax
lock inc dword [rbp - 0x60]
mov rax, qword [rbp - 0x68]
test rax, rax
jne 0x14004c839
call fcn.140004ab0
mov qword [rbp - 0x68], rax
lock inc dword [rbp - 0x60]
mov rcx, qword [rbp - 0x68]
mov dword [rbp - 0x20], 0x20
lea rax, str.startup_type:_container
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
lea r9, [0x140000000]
lea r8, [rbp - 0x20]
movsx edx, di
call fcn.140004000
test sil, 0x20
je 0x14004c899
mov qword [rbp - 0x68], rdi
mov eax, 0xffffffff
lock xadd dword [rbp - 0x60], eax
cmp eax, 1
js 0x14004c895
call fcn.140004c10
mov eax, 0xffffffff
lock xadd dword [rbp - 0x60], eax
cmp eax, 1
jns 0x14004c881
lock inc dword [rbp - 0x60]
lea rdx, str.ipbtrue
lea rcx, [rbp + 0x390]
call fcn.1400026c0
mov edx, r13d
lea rcx, [rbp + 0x390]
call fcn.1400647e0
mov edi, eax
test eax, eax
je 0x14004c910
mov r8, r14
mov edx, 4
lea rcx, [rbp + 0x70]
call fcn.140012de0
cmp byte [rbp + 0xf0], 0
je 0x14004c8ff
lea rdx, str.Failed_to_start_CEF_container__error
lea rcx, [rbp + 0x70]
call fcn.14000d030
cmp byte [rbp + 0xf0], 0
je 0x14004c8ff
mov edx, edi
lea rcx, [rbp + 0x70]
call fcn.1400191f0
lea rcx, [rbp + 0x70]
call fcn.140013d20
xor r14d, r14d
jmp 0x14004ca1b
mov edx, 7
jmp 0x14004c9b9
add ecx, eax
je 0x14004c976
or esi, 0x40
mov dword [rbp - 0x50], edi
call fcn.140004ab0
mov qword [rbp - 0x58], rax
lock inc dword [rbp - 0x50]
mov rax, qword [rbp - 0x58]
test rax, rax
jne 0x14004c947
call fcn.140004ab0
mov qword [rbp - 0x58], rax
lock inc dword [rbp - 0x50]
mov rcx, qword [rbp - 0x58]
mov dword [rbp - 0x1c], 0x20
lea rax, str.startup_type:_browser
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
lea r9, [0x140000000]
lea r8, [rbp - 0x1c]
movsx edx, di
call fcn.140004000
test sil, 0x40
je 0x14004c9a8
mov qword [rbp - 0x58], rdi
mov eax, 0xffffffff
lock xadd dword [rbp - 0x50], eax
cmp eax, 1
js 0x14004c9a4
nop
call fcn.140004c10
mov eax, 0xffffffff
lock xadd dword [rbp - 0x50], eax
cmp eax, 1
jns 0x14004c990
lock inc dword [rbp - 0x50]
lea rcx, [rbp + 0x390]
call fcn.140064ed0
mov edx, 6
lea r8, [rbp + 0x390]
mov ecx, r12d
call fcn.14003ca40
test eax, eax
mov ebx, eax
je 0x14004ca15
mov r8, r14
mov edx, 4
lea rcx, [rbp + 0x70]
call fcn.140012de0
cmp byte [rbp + 0xf0], 0
je 0x14004ca0c
lea rdx, str.Failed_to_send_EC_Event__error
lea rcx, [rbp + 0x70]
call fcn.14000d030
cmp byte [rbp + 0xf0], 0
je 0x14004ca0c
mov edx, ebx
lea rcx, [rbp + 0x70]
call fcn.1400191f0
lea rcx, [rbp + 0x70]
call fcn.140013d20
xor r14d, r14d
mov edi, r14d
lea rcx, [rbp + 0x440]
call fcn.140044e90
lea rcx, [rbp + 0x468]
call fcn.140051ec0
mov rcx, qword [rbp + 0x468]
mov qword [rbp + 0x468], r14
mov edx, 0x10
call fcn.1400f35f0
mov rdx, qword [rbp + 0x460]
cmp rdx, 0x10
jb 0x14004ca8c
inc rdx
mov rcx, qword [rbp + 0x448]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ca87
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004ccce
call fcn.1400f35f0
mov qword [rbp + 0x458], r14
mov qword [rbp + 0x460], 0xf
mov byte [rbp + 0x448], 0
mov rdx, qword [rbp + 0x440]
test rdx, rdx
je 0x14004cab7
call fcn.140052080
nop
mov rbx, qword [rbp + 0x328]
mov rdx, qword [rbp + 0x3a8]
cmp rdx, 8
jb 0x14004cb04
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004caff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004cca4
call fcn.1400f35f0
mov qword [rbp + 0x3a0], r14
mov eax, 7
mov qword [rbp + 0x3a8], rax
mov word [rbp + 0x390], r14w
lea rcx, [rsp + 0x40]
call fcn.14004cce0
call fcn.140004c10
test rbx, rbx
je 0x14004cb48
mov rcx, rbx
call fcn.140044df0
mov edx, 0x50
mov rcx, rbx
call fcn.1400f35f0
mov rdx, qword [rbp + 0x320]
test rdx, rdx
je 0x14004cb71
mov qword [rbp + 0x320], r14
call fcn.140051cc0
mov rdx, qword [rbp + 0x320]
test rdx, rdx
je 0x14004cb71
call fcn.140051cc0
mov rcx, qword [rbp + 0x3b0]
test rcx, rcx
je 0x14004cba1
call qword [sym.imp.KERNEL32.dll_LocalFree]
test rax, rax
je 0x14004cba1
mov r8d, 0xf
lea rdx, str.E:xml_data_build_dirCODRU_CL23M_SOURCES_extern_baseincludewinapi_shelldetailslocal_free.h
lea rcx, str.ans__nullptr
call fcn.140100428
cmp dword [rbp + 0x334], 0
jl 0x14004cbb0
call qword [sym.imp.ole32.dll_OleUninitialize]
mov rcx, qword [0x14017afd8]
mov rax, qword [rbp + 0x3e8]
cmp qword [rax + 8], rcx
jne 0x14004cbd3
cmp dword [rbp + 0x3e0], 0
jne 0x14004cbd3
call qword [sym.imp.ole32.dll_CoUninitialize]
xor r14d, r14d
lea ebx, [r14 + 7]
mov rdx, qword [rbp + 0x368]
cmp rdx, 8
jb 0x14004cc20
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x350]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cc1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004cca4
call fcn.1400f35f0
mov qword [rbp + 0x360], r14
mov qword [rbp + 0x368], rbx
mov word [rbp + 0x350], r14w
cmp byte [rbp + 0x4d8], 0
je 0x14004cc4b
lea rcx, [rbp + 0x4b8]
call fcn.140043cd0
lea rcx, [rbp + 0x520]
call fcn.14004ce60
lea rcx, [rbp + 0x418]
call fcn.14004f0f0
mov eax, edi
mov rcx, qword [rbp + 0x980]
xor rcx, rsp
call fcn.1400f2e00
lea r11, [rsp + 0xa90]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14004f0f0
mov edi, 0x1f
jmp 0x14004cbda
call fcn.1400f9bf0
int3
call fcn.1400f9bf0
int3
call fcn.1400356d0
int3
call fcn.1400f9bf0
int3
call fcn.1400f9bf0
int3
call fcn.1400f9bf0
int3
call fcn.1400f9bf0
nop
call fcn.1400f9bf0
nop
int3