Function at 0x140085d10
Capabilities:
Get file version info
Reference http user-agent string

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x328]
sub rsp, 0x400
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140189090]
xor rax, rsp
mov qword [rbp + 0x2d0], rax
mov r13, rdx
xor r14d, r14d
mov dword [rbp - 0x70], r14d
mov qword [rbp - 0x70], r14
lea rdx, str.Win32
lea rcx, [rbp - 0x70]
call fcn.1400985e0
nop
mov qword [rsp + 0x70], r14
lea rdx, str.browser_platform
lea rcx, [rsp + 0x70]
call fcn.140097430
nop
lea rdx, [rsp + 0x70]
mov rcx, r13
call fcn.1400987a0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.140097430
nop
mov rcx, rbx
call fcn.140099270
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x140085dba
mov qword [rbx], rcx
mov qword [rbp - 0x70], r14
lea rcx, [rbp - 0x70]
call fcn.140099270
mov qword [rbp + 8], r14
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], 7
mov word [rbp + 8], r14w
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x68], 7
mov word [rbp + 0x50], r14w
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb8], r14
mov qword [rbp + 0xc0], 7
mov word [rbp + 0xa8], r14w
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x110], r14
mov qword [rbp + 0x118], 7
mov word [rbp + 0x100], r14w
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x130], r14
mov qword [rbp + 0x138], 7
mov word [rbp + 0x120], r14w
mov qword [rbp + 0x140], r14
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x158], 7
mov word [rbp + 0x140], r14w
mov qword [rbp + 0x188], r14
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a0], 7
mov word [rbp + 0x188], r14w
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r14w
mov r8d, 6
lea rdx, str.ProgId
lea rcx, [rsp + 0x30]
call fcn.140009050
nop
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r14w
mov r8d, 0x4c
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerFileExts.htmlUserChoice
lea rcx, [rsp + 0x50]
call fcn.140009050
nop
lea r9, [rbp + 0x188]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x50]
mov rcx, 0xffffffff80000001
call fcn.140085b90
movzx ebx, al
lea rcx, [rsp + 0x50]
call fcn.140008fe0
nop
lea rcx, [rsp + 0x30]
call fcn.140008fe0
test bl, bl
je 0x14008736e
lea r8, str._shellopencommand
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x1a8]
call fcn.140024180
nop
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r14w
xor r8d, r8d
lea rdx, [0x14015b7e0]
lea rcx, [rsp + 0x30]
call fcn.140009050
nop
lea rdx, [rbp + 0x1a8]
cmp qword [rbp + 0x1c0], 8
cmovae rdx, qword [rbp + 0x1a8]
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r14w
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x140085fb4
lea rcx, [rsp + 0x50]
call fcn.140009050
nop
lea r9, [rbp + 0x50]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x50]
mov rcx, 0xffffffff80000000
call fcn.140085b90
movzx ebx, al
lea rcx, [rsp + 0x50]
call fcn.140008fe0
nop
lea rcx, [rsp + 0x30]
call fcn.140008fe0
test bl, bl
je 0x140087361
xorps xmm0, xmm0
movsxd rdi, dword [rbp + 0x60]
mov ebx, edi
add ebx, 1
cmovb rbx, rsi
movdqu xmmword [rbp + 0xe8], xmm0
mov qword [rbp + 0xf8], r14
movabs rax, 0x7fffffffffffffff
test rbx, rbx
je 0x140086071
cmp rbx, rax
ja 0x14008740b
mov rdx, rbx
lea rcx, [rbp + 0xe8]
call fcn.140009180
mov qword [rbp + 0xe8], rax
lea r8, [rbx + rbx]
lea rbx, [rax + r8]
mov qword [rbp + 0xf8], rbx
xor edx, edx
mov rcx, rax
call fcn.1400fb5b0
mov qword [rbp + 0xf0], rbx
mov rbx, rdi
mov r8, rdi
cmp qword [rbp + 0x60], rdi
cmovb r8, qword [rbp + 0x60]
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 8
cmovae rdx, qword [rbp + 0x50]
cmp r8, rdi
ja 0x140087405
add r8, r8
mov rcx, qword [rbp + 0xe8]
call fcn.1400faf00
mov rcx, qword [rbp + 0xe8]
mov word [rcx + rdi*2], r14w
mov rax, r14
test edi, edi
jle 0x1400860f5
mov edx, 0x22
lea r8d, [rdx - 2]
cmp dx, word [rcx + rax*2]
jne 0x1400860cd
mov word [rcx + rax*2], r8w
inc rax
cmp rax, rbx
jl 0x1400860c2
mov rax, r14
mov rdx, rcx
nop dword [rax + rax]
cmp r8w, word [rcx + rax*2]
jne 0x1400860f8
add rdx, 2
inc rax
cmp rax, rbx
jl 0x1400860e0
jmp 0x1400860f8
mov rdx, rcx
mov qword [rbp + 0x88], r14
mov qword [rbp + 0x98], r14
mov qword [rbp + 0xa0], 7
mov word [rbp + 0x88], r14w
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140086120
lea rcx, [rbp + 0x88]
call fcn.140009050
nop
lea r14, [rbp + 0x88]
mov r12, qword [rbp + 0x88]
mov rax, qword [rbp + 0xa0]
mov r15, qword [rbp + 0x98]
cmp rax, 8
jb 0x140086166
mov rdi, r12
lea rbx, [r12 + r15*2]
mov r14, r12
jmp 0x140086178
lea rbx, [rbp + 0x88]
lea rbx, [rbx + r15*2]
lea rdi, [rbp + 0x88]
cmp rdi, rbx
je 0x1400861ab
sub r14, rdi
movzx ecx, word [rdi]
call fcn.14010a3c4
mov word [r14 + rdi], ax
add rdi, 2
cmp rdi, rbx
jne 0x140086180
mov rax, qword [rbp + 0xa0]
mov r15, qword [rbp + 0x98]
mov r12, qword [rbp + 0x88]
lea rcx, [rbp + 0x88]
cmp rax, 8
setae bl
cmovae rcx, r12
mov qword [rsp + 0x20], 4
lea r9, str..exe
xor r8d, r8d
mov rdx, r15
call fcn.140027030
cmp rax, 0xffffffffffffffff
jne 0x1400861e5
xor bl, bl
jmp 0x140087347
xor edi, edi
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x40], 7
mov word [rbp + 0x28], di
lea r8, [rax + 4]
cmp r15, r8
cmovb r8, r15
lea rdx, [rbp + 0x88]
test bl, bl
cmovne rdx, r12
lea rcx, [rbp + 0x28]
call fcn.140009050
nop
lea rdx, [rbp + 0x28]
lea rcx, [rbp - 0x48]
call fcn.140023f80
nop
lea rcx, [rbp - 0x48]
cmp qword [rbp - 0x30], 8
cmovae rcx, qword [rbp - 0x48]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
lea rdx, [0x14015b7e0]
test rax, rax
cmovne rdx, rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 7
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x140086263
lea rcx, [rsp + 0x50]
call fcn.140009050
mov eax, 3
mov dword [rbp - 0x70], eax
lea rcx, [rbp + 0x50]
call fcn.140008fe0
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rbp + 0x50], xmm0
movups xmm6, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x60], xmm6
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], di
lea rcx, [rsp + 0x50]
call fcn.140008fe0
nop
lea rcx, [rbp - 0x48]
call fcn.140008fe0
movq rax, xmm6
test rax, rax
je 0x140086397
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x30], rdi
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 8
cmovae rdx, qword [rbp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.140097540
nop
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x140086309
cmp qword [rdx + 0x18], 0x10
jb 0x14008630c
mov rdx, qword [rdx]
jmp 0x14008630c
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.1400985e0
nop
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
mov qword [rsp + 0x30], rdi
lea rdx, str.browser_type
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
lea rdx, [rsp + 0x30]
mov rcx, r13
call fcn.1400987a0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
mov rcx, rbx
call fcn.140099270
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140086372
mov qword [rbx], rcx
mov qword [rsp + 0x70], rdi
lea rcx, [rsp + 0x70]
call fcn.140099270
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 8
cmovae rdx, qword [rbp + 0x50]
mov r8, qword [rbp + 0x60]
lea rcx, [rbp + 8]
call fcn.1400191f0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc8], xmm1
mov qword [rbp + 0xd8], rdi
mov ecx, 0x401
call fcn.1400f89d8
mov qword [rbp + 0xc8], rax
lea rbx, [rax + 0x401]
mov qword [rbp + 0xd8], rbx
xor edx, edx
mov r8d, 0x401
mov rcx, rax
call fcn.1400fb5b0
mov qword [rbp + 0xd0], rbx
mov rdx, qword [rbp + 0xc8]
sub rbx, rdx
mov dword [rbp + 0xe0], ebx
lea r8, [rbp + 0xe0]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_ObtainUserAgentString]
mov qword [rbp + 0x168], rdi
mov qword [rbp + 0x178], rdi
mov qword [rbp + 0x180], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x168], 0
mov rdx, qword [rbp + 0xc8]
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140086430
lea rcx, [rbp + 0x168]
call fcn.140009250
nop
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x168]
call fcn.14001b5c0
mov r12, qword [rbp + 0xb8]
test r12, r12
je 0x140086490
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 8
cmovae rdx, qword [rbp + 0xa8]
mov r8, r12
lea rcx, [rbp + 8]
call fcn.1400191f0
mov r12, qword [rbp + 0xb8]
lea r15, [rbp + 0x28]
mov r14, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x38]
cmp qword [rbp + 0x40], 8
jb 0x1400864af
mov rdi, r14
lea rbx, [r14 + rdx*2]
mov r15, r14
jmp 0x1400864bb
lea rbx, [rbp + 0x28]
lea rbx, [rbx + rdx*2]
lea rdi, [rbp + 0x28]
cmp rdi, rbx
je 0x1400864e1
sub r15, rdi
movzx ecx, word [rdi]
call fcn.14010a3c4
mov word [r15 + rdi], ax
add rdi, 2
cmp rdi, rbx
jne 0x1400864c3
mov rdx, qword [rbp + 0x38]
mov r14, qword [rbp + 0x28]
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rcx, r14
mov qword [rsp + 0x20], DosDateTimeToVariantTime
lea r9, str.iexplore.exe
xor r8d, r8d
call fcn.140027030
xor r15d, r15d
cmp rax, 0xffffffffffffffff
je 0x1400865a8
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
lea r8d, [r15 + 5]
lea rdx, str.Build
lea rcx, [rsp + 0x30]
call fcn.140009050
nop
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea r8d, [r15 + 0x24]
lea rdx, str.SoftwareMicrosoftInternet_Explorer
lea rcx, [rsp + 0x50]
call fcn.140009050
nop
lea r9, [rbp + 0x100]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x50]
mov rcx, 0xffffffff80000002
call fcn.140085b90
nop
lea rcx, [rsp + 0x50]
call fcn.140008fe0
nop
lea rcx, [rsp + 0x30]
call fcn.140008fe0
mov r14, qword [rbp + 0x28]
mov rbx, qword [rbp + 0x110]
test rbx, rbx
je 0x14008671d
lea rax, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rax, qword [rbp + 8]
mov qword [rbp + 0x18], r15
mov word [rax], r15w
lea r8, [0x14015c278]
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x48]
call fcn.140024180
nop
lea rdx, [rbp + 0x100]
cmp qword [rbp + 0x118], 8
cmovae rdx, qword [rbp + 0x100]
mov r8, rbx
mov rcx, rax
call fcn.1400191f0
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov r8d, 1
lea rdx, [0x14015c278]
lea rcx, [rsp + 0x30]
call fcn.1400191f0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 8
cmovae rdx, qword [rbp + 0xa8]
mov r8, r12
lea rcx, [rsp + 0x50]
call fcn.1400191f0
movups xmm7, xmmword [rax]
movups xmmword [rbp - 0x68], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm6
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov eax, 0x1f
mov dword [rbp - 0x70], eax
lea rcx, [rbp + 8]
call fcn.140008fe0
movups xmmword [rbp + 8], xmm7
movups xmmword [rbp + 0x18], xmm6
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r15w
lea rcx, [rbp - 0x68]
call fcn.140008fe0
nop
lea rcx, [rsp + 0x50]
call fcn.140008fe0
nop
lea rcx, [rsp + 0x30]
call fcn.140008fe0
nop
lea rcx, [rbp - 0x48]
call fcn.140008fe0
mov r12, qword [rbp + 0xb8]
mov r14, qword [rbp + 0x28]
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rcx, r14
xor edx, edx
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
movsxd rdi, eax
test eax, eax
jne 0x1400867f0
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x30], r15
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x30]
call fcn.140097540
nop
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x140086776
cmp qword [rdx + 0x18], 0x10
jb 0x140086779
mov rdx, qword [rdx]
jmp 0x140086779
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.1400985e0
nop
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
mov qword [rsp + 0x30], r15
lea rdx, str.browser_user_agent
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
lea rdx, [rsp + 0x30]
mov rcx, r13
call fcn.1400987a0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
mov rcx, rbx
call fcn.140099270
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400867df
mov qword [rbx], rcx
mov qword [rsp + 0x70], r15
lea rcx, [rsp + 0x70]
call fcn.140099270
xor bl, bl
jmp 0x1400872de
xorps xmm0, xmm0
mov rbx, rdi
movdqu xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r15
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x140087411
cmp rbx, 0x1000
jb 0x14008684a
lea rcx, [rdi + 0x27]
cmp rcx, rbx
jbe 0x140087417
call fcn.1400f89d8
mov rcx, rax
test rax, rax
je 0x140087423
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140086852
mov rcx, rbx
call fcn.1400f89d8
mov qword [rbp + 0x70], rax
add rbx, rax
mov qword [rbp + 0x80], rbx
mov r8, rbx
sub r8, rax
xor edx, edx
mov rcx, rax
call fcn.1400fb5b0
mov qword [rbp + 0x78], rbx
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rcx, qword [rbp + 0x28]
mov r9, qword [rbp + 0x70]
mov r8d, edi
xor edx, edx
call qword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
jne 0x14008694c
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x30], r15
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x30]
call fcn.140097540
nop
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x1400868d2
cmp qword [rdx + 0x18], 0x10
jb 0x1400868d5
mov rdx, qword [rdx]
jmp 0x1400868d5
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.1400985e0
nop
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
mov qword [rsp + 0x30], r15
lea rdx, str.browser_user_agent
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
lea rdx, [rsp + 0x30]
mov rcx, r13
call fcn.1400987a0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
mov rcx, rbx
call fcn.140099270
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14008693b
mov qword [rbx], rcx
mov qword [rsp + 0x70], r15
lea rcx, [rsp + 0x70]
call fcn.140099270
xor bl, bl
jmp 0x140087292
mov dword [rbp + 0x48], r15d
lea r9, [rbp + 0x48]
lea r8, [rbp - 8]
lea rdx, str.VarFileInfoTranslation
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
jne 0x140086a24
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x30], r15
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x30]
call fcn.140097540
nop
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x1400869aa
cmp qword [rdx + 0x18], 0x10
jb 0x1400869ad
mov rdx, qword [rdx]
jmp 0x1400869ad
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.1400985e0
nop
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
mov qword [rsp + 0x30], r15
lea rdx, str.browser_user_agent
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
lea rdx, [rsp + 0x30]
mov rcx, r13
call fcn.1400987a0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
mov rcx, rbx
call fcn.140099270
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140086a13
mov qword [rbx], rcx
mov qword [rsp + 0x70], r15
lea rcx, [rsp + 0x70]
call fcn.140099270
xor bl, bl
jmp 0x140087292
mov rax, qword [rbp - 8]
movzx ebx, word [rax]
xor ecx, ecx
call fcn.140027380
mov dword [rsp + 0x20], 0x12c
lea r9, str.CMLLocaleChart
xor r8d, r8d
lea rdx, [0x14007c330]
mov rcx, rax
call fcn.140027650
lea r14, [rax + 0x30]
mov r15, qword [r14]
mov rax, qword [r15 + 8]
mov qword [rsp + 0x50], rax
xor edx, edx
mov dword [rsp + 0x58], edx
mov rcx, r15
cmp byte [rax + 0x19], dl
jne 0x140086a98
mov qword [rsp + 0x50], rax
cmp dword [rax + 0x20], ebx
jge 0x140086a85
mov dword [rsp + 0x58], edx
mov rax, qword [rax + 0x10]
jmp 0x140086a93
mov dword [rsp + 0x58], 1
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], dl
je 0x140086a71
cmp byte [rcx + 0x19], dl
jne 0x140086aa6
cmp ebx, dword [rcx + 0x20]
jge 0x140086b5f
movabs rax, 0x276276276276276
cmp qword [r14 + 8], rax
je 0x14008741d
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], rdx
mov ecx, 0x68
call fcn.1400f89d8
mov rdi, rax
mov qword [rsp + 0x78], rax
mov dword [rax + 0x20], ebx
lea rbx, [rax + 0x28]
mov qword [rsp + 0x30], rbx
xor eax, eax
mov qword [rbx], rax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 7
mov word [rbx], ax
xor r8d, r8d
lea rdx, [0x14015b7e0]
mov rcx, rbx
call fcn.140009050
nop
lea rcx, [rbx + 0x20]
xor eax, eax
mov qword [rcx], rax
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], 7
mov word [rcx], ax
xor r8d, r8d
lea rdx, [0x14015b7e0]
call fcn.140009050
nop
mov qword [rdi], r15
mov qword [rdi + 8], r15
mov qword [rdi + 0x10], r15
mov word [rdi + 0x18], 0
movups xmm0, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0x30], xmm0
mov r8, rdi
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.14001fa60
mov rcx, rax
lea rdx, [rcx + 0x28]
lea rax, [rbp + 0x140]
cmp rax, rdx
je 0x140086b89
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 8
jb 0x140086b7d
mov rdx, qword [rdx]
lea rcx, [rbp + 0x140]
call fcn.140009050
xor r15d, r15d
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x30], r15
lea rdx, [rbp + 0x140]
cmp qword [rbp + 0x158], 8
cmovae rdx, qword [rbp + 0x140]
lea rcx, [rsp + 0x30]
call fcn.140097540
nop
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x140086bce
cmp qword [rdx + 0x18], 0x10
jb 0x140086bd1
mov rdx, qword [rdx]
jmp 0x140086bd1
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.1400985e0
nop
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
mov qword [rsp + 0x30], r15
lea rdx, str.browser_language
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
lea rdx, [rsp + 0x30]
mov rcx, r13
call fcn.1400987a0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
mov rax, qword [rbx]
test rax, rax
jne 0x140086c5a
lea ecx, [rax + 0x58]
call fcn.1400f89d8
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
mov qword [rax + 0x50], rcx
mov rcx, rax
call fcn.140097860
nop
mov qword [rbx], rax
mov dword [rax], 1
lea rbx, [rax + 0x30]
mov qword [rsp + 0x30], r15
mov rdx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
je 0x140086c82
mov qword [rdx], r15
mov qword [rsp + 0x30], r15
add qword [rbx + 8], 8
jmp 0x140086c90
lea r8, [rsp + 0x30]
mov rcx, rbx
call fcn.140099760
nop
lea rcx, [rsp + 0x30]
call fcn.140099270
mov rcx, qword [rbx]
mov rax, qword [rbx + 8]
sub rax, rcx
sar rax, 3
lea rbx, [rcx + rax*8]
lea rcx, [rbx - 8]
call fcn.140099270
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x140086cc8
mov qword [rbx - 8], rax
mov qword [rsp + 0x70], r15
lea rcx, [rsp + 0x70]
call fcn.140099270
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x1d0]
call fcn.1400fb5b0
lea rcx, [rbp + 0x1d0]
call fcn.1400067f0
nop
lea rdx, str.StringFileInfo_
lea rcx, [rbp + 0x1e0]
call fcn.14000b190
mov rbx, rax
mov edx, 4
lea rcx, [rsp + 0x30]
call fcn.1400f6ec0
mov r8, qword [rax]
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov rdx, qword [rax + 8]
call r8
mov rcx, qword [rbx]
movsxd r8, dword [rcx + 4]
mov eax, 0x30
mov word [r8 + rbx + 0x58], ax
mov rax, qword [rbx]
movsxd rcx, dword [rax + 4]
add rcx, rbx
call fcn.1400886e0
mov rax, qword [rbp - 8]
movzx edx, word [rax]
mov rcx, rbx
call fcn.1400075f0
mov rbx, rax
mov edx, 4
lea rcx, [rsp + 0x70]
call fcn.1400f6ec0
mov r8, qword [rax]
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov rdx, qword [rax + 8]
call r8
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
call fcn.1400886e0
mov rax, qword [rbp - 8]
movzx edx, word [rax + 2]
mov rcx, rbx
call fcn.1400075f0
mov rcx, rax
lea rdx, [0x140163f38]
call fcn.14000b190
mov qword [rbp], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x40], r15
mov r9d, 7
mov qword [rsp + 0x48], r9
mov word [rsp + 0x30], r15w
or dword [rbp - 0x70], 0x40
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rax
mov ecx, dword [rbp + 0x258]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140086e20
mov rax, qword [rbp + 0x228]
mov r8, qword [rax]
test r8, r8
je 0x140086e20
mov rax, qword [rbp + 0x208]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x250]
cmovb r8, qword [rbp + 0x250]
sub r8, rdx
sar r8, 1
jmp 0x140086e60
test cl, 4
jne 0x140086e56
mov rax, qword [rbp + 0x220]
mov rcx, qword [rax]
test rcx, rcx
je 0x140086e56
mov rax, qword [rbp + 0x200]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x238]
movsxd r8, dword [rax]
add r8, r8
sub r8, rdx
add r8, rcx
sar r8, 1
jmp 0x140086e60
mov r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
test rdx, rdx
je 0x140086e74
lea rcx, [rsp + 0x30]
call fcn.140009050
mov r9, qword [rsp + 0x48]
lea rdx, [rsp + 0x30]
cmp r9, 8
cmovae rdx, qword [rsp + 0x30]
lea r9, [rbp + 0x48]
lea r8, [rbp]
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.VERSION.dll_VerQueryValueW]
mov ebx, eax
lea rcx, [rsp + 0x30]
call fcn.140008fe0
test ebx, ebx
jne 0x140086f5c
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x30], r15
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x30]
call fcn.140097540
nop
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x140086ee2
cmp qword [rdx + 0x18], 0x10
jb 0x140086ee5
mov rdx, qword [rdx]
jmp 0x140086ee5
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.1400985e0
nop
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
mov qword [rsp + 0x30], r15
lea rdx, str.browser_user_agent
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
lea rdx, [rsp + 0x30]
mov rcx, r13
call fcn.1400987a0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
mov rcx, rbx
call fcn.140099270
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140086f4b
mov qword [rbx], rcx
mov qword [rsp + 0x70], r15
lea rcx, [rsp + 0x70]
call fcn.140099270
xor bl, bl
jmp 0x140087285
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov rdx, qword [rbp]
inc rsi
cmp word [rdx + rsi*2], 0
jne 0x140086f73
mov r8, rsi
lea rcx, [rsp + 0x50]
call fcn.140009050
lea rcx, [rbp + 0x120]
call fcn.140008fe0
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rbp + 0x120], xmm0
movups xmm6, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x130], xmm6
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea rcx, [rsp + 0x50]
call fcn.140008fe0
movq rbx, xmm6
test rbx, rbx
je 0x1400871d7
lea rax, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rax, qword [rbp + 8]
mov qword [rbp + 0x18], r15
mov word [rax], r15w
lea r8, [0x14015c278]
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x28]
call fcn.140024180
nop
lea rdx, [rbp + 0x120]
cmp qword [rbp + 0x138], 8
cmovae rdx, qword [rbp + 0x120]
mov r8, rbx
mov rcx, rax
call fcn.1400191f0
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov r8d, 1
lea rdx, [0x14015c278]
lea rcx, [rbp - 0x68]
call fcn.1400191f0
mov qword [rsp + 0x70], r15
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rdx, [rbp + 0x100]
cmp qword [rbp + 0x118], 8
cmovae rdx, qword [rbp + 0x100]
mov r8, qword [rbp + 0x110]
lea rcx, [rsp + 0x70]
call fcn.1400191f0
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov r8d, 1
lea rdx, [0x14015c278]
lea rcx, [rsp + 0x30]
call fcn.1400191f0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 8
cmovae rdx, qword [rbp + 0xa8]
mov r8, r12
lea rcx, [rsp + 0x50]
call fcn.1400191f0
movups xmm7, xmmword [rax]
movups xmmword [rbp - 0x48], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm6
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rcx, [rbp + 8]
call fcn.140008fe0
movups xmmword [rbp + 8], xmm7
movups xmmword [rbp + 0x18], xmm6
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], 7
mov word [rbp - 0x48], r15w
lea rcx, [rbp - 0x48]
call fcn.140008fe0
nop
lea rcx, [rsp + 0x50]
call fcn.140008fe0
nop
lea rcx, [rsp + 0x30]
call fcn.140008fe0
nop
lea rcx, [rsp + 0x70]
call fcn.140008fe0
nop
lea rcx, [rbp - 0x68]
call fcn.140008fe0
nop
lea rcx, [rbp - 0x28]
call fcn.140008fe0
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x30], r15
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x30]
call fcn.140097540
nop
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x140087210
cmp qword [rdx + 0x18], 0x10
jb 0x140087213
mov rdx, qword [rdx]
jmp 0x140087213
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.1400985e0
nop
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
mov qword [rsp + 0x30], r15
lea rdx, str.browser_user_agent
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
lea rdx, [rsp + 0x30]
mov rcx, r13
call fcn.1400987a0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140097430
nop
mov rcx, rbx
call fcn.140099270
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140087279
mov qword [rbx], rcx
mov qword [rsp + 0x70], r15
lea rcx, [rsp + 0x70]
call fcn.140099270
mov bl, 1
lea rcx, [rbp + 0x1d0]
call fcn.140005790
nop
mov rcx, qword [rbp + 0x70]
test rcx, rcx
je 0x1400872de
mov rdx, qword [rbp + 0x80]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400872ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140087423
call fcn.1400f89d0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r15
lea rcx, [rbp + 0x168]
call fcn.1400091f0
nop
mov rcx, qword [rbp + 0xc8]
test rcx, rcx
je 0x14008733d
mov rdx, qword [rbp + 0xd8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140087326
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400873ff
call fcn.1400f89d0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xc8], xmm0
mov qword [rbp + 0xd8], r15
lea rcx, [rbp + 0x28]
call fcn.140008fe0
nop
lea rcx, [rbp + 0x88]
call fcn.140008fe0
nop
lea rcx, [rbp + 0xe8]
call fcn.140008f80
nop
lea rcx, [rbp + 0x1a8]
call fcn.140008fe0
nop
lea rcx, [rbp + 0x188]
call fcn.140008fe0
nop
lea rcx, [rbp + 0x140]
call fcn.140008fe0
nop
lea rcx, [rbp + 0x120]
call fcn.140008fe0
nop
lea rcx, [rbp + 0x100]
call fcn.140008fe0
nop
lea rcx, [rbp + 0xa8]
call fcn.140008fe0
nop
lea rcx, [rbp + 0x50]
call fcn.140008fe0
nop
lea rcx, [rbp + 8]
call fcn.140008fe0
movzx eax, bl
mov rcx, qword [rbp + 0x2d0]
xor rcx, rsp
call fcn.1400f89b0
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14010347c
nop
call fcn.14010347c
nop
call fcn.14000c7a0
nop
call fcn.14000c7a0
int3
call fcn.1400012e0
nop
call fcn.14001fe30
nop
call fcn.14010347c
int3