Function at 0x140086ab0
Capabilities:
Get file version info
Reference http user-agent string

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x328]
sub rsp, 0x400
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14018a090]
xor rax, rsp
mov qword [rbp + 0x2d0], rax
mov r13, rdx
xor r14d, r14d
mov dword [rbp - 0x70], r14d
mov qword [rbp - 0x70], r14
lea rdx, str.Win32
lea rcx, [rbp - 0x70]
call fcn.140099220
nop
mov qword [rsp + 0x70], r14
lea rdx, str.browser_platform
lea rcx, [rsp + 0x70]
call fcn.140098070
nop
lea rdx, [rsp + 0x70]
mov rcx, r13
call fcn.1400993e0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.140098070
nop
mov rcx, rbx
call fcn.140099eb0
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x140086b5a
mov qword [rbx], rcx
mov qword [rbp - 0x70], r14
lea rcx, [rbp - 0x70]
call fcn.140099eb0
mov qword [rbp + 8], r14
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], 7
mov word [rbp + 8], r14w
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x68], 7
mov word [rbp + 0x50], r14w
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb8], r14
mov qword [rbp + 0xc0], 7
mov word [rbp + 0xa8], r14w
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x110], r14
mov qword [rbp + 0x118], 7
mov word [rbp + 0x100], r14w
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x130], r14
mov qword [rbp + 0x138], 7
mov word [rbp + 0x120], r14w
mov qword [rbp + 0x140], r14
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x158], 7
mov word [rbp + 0x140], r14w
mov qword [rbp + 0x188], r14
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a0], 7
mov word [rbp + 0x188], r14w
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r14w
mov r8d, 6
lea rdx, str.ProgId
lea rcx, [rsp + 0x30]
call fcn.140008ee0
nop
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r14w
mov r8d, 0x4c
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerFileExts.htmlUserChoice
lea rcx, [rsp + 0x50]
call fcn.140008ee0
nop
lea r9, [rbp + 0x188]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x50]
mov rcx, 0xffffffff80000001
call fcn.140086930
movzx ebx, al
lea rcx, [rsp + 0x50]
call fcn.140008e70
nop
lea rcx, [rsp + 0x30]
call fcn.140008e70
test bl, bl
je 0x14008810e
lea r8, str._shellopencommand
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x1a8]
call fcn.140023a40
nop
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r14w
xor r8d, r8d
lea rdx, [0x14015c818]
lea rcx, [rsp + 0x30]
call fcn.140008ee0
nop
lea rdx, [rbp + 0x1a8]
cmp qword [rbp + 0x1c0], 8
cmovae rdx, qword [rbp + 0x1a8]
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r14w
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x140086d54
lea rcx, [rsp + 0x50]
call fcn.140008ee0
nop
lea r9, [rbp + 0x50]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x50]
mov rcx, 0xffffffff80000000
call fcn.140086930
movzx ebx, al
lea rcx, [rsp + 0x50]
call fcn.140008e70
nop
lea rcx, [rsp + 0x30]
call fcn.140008e70
test bl, bl
je 0x140088101
xorps xmm0, xmm0
movsxd rdi, dword [rbp + 0x60]
mov ebx, edi
add ebx, 1
cmovb rbx, rsi
movdqu xmmword [rbp + 0xe8], xmm0
mov qword [rbp + 0xf8], r14
movabs rax, 0x7fffffffffffffff
test rbx, rbx
je 0x140086e11
cmp rbx, rax
ja 0x1400881ab
mov rdx, rbx
lea rcx, [rbp + 0xe8]
call fcn.140009010
mov qword [rbp + 0xe8], rax
lea r8, [rbx + rbx]
lea rbx, [rax + r8]
mov qword [rbp + 0xf8], rbx
xor edx, edx
mov rcx, rax
call fcn.1400fc160
mov qword [rbp + 0xf0], rbx
mov rbx, rdi
mov r8, rdi
cmp qword [rbp + 0x60], rdi
cmovb r8, qword [rbp + 0x60]
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 8
cmovae rdx, qword [rbp + 0x50]
cmp r8, rdi
ja 0x1400881a5
add r8, r8
mov rcx, qword [rbp + 0xe8]
call fcn.1400fbab0
mov rcx, qword [rbp + 0xe8]
mov word [rcx + rdi*2], r14w
mov rax, r14
test edi, edi
jle 0x140086e95
mov edx, 0x22
lea r8d, [rdx - 2]
cmp dx, word [rcx + rax*2]
jne 0x140086e6d
mov word [rcx + rax*2], r8w
inc rax
cmp rax, rbx
jl 0x140086e62
mov rax, r14
mov rdx, rcx
nop dword [rax + rax]
cmp r8w, word [rcx + rax*2]
jne 0x140086e98
add rdx, 2
inc rax
cmp rax, rbx
jl 0x140086e80
jmp 0x140086e98
mov rdx, rcx
mov qword [rbp + 0x88], r14
mov qword [rbp + 0x98], r14
mov qword [rbp + 0xa0], 7
mov word [rbp + 0x88], r14w
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140086ec0
lea rcx, [rbp + 0x88]
call fcn.140008ee0
nop
lea r14, [rbp + 0x88]
mov r12, qword [rbp + 0x88]
mov rax, qword [rbp + 0xa0]
mov r15, qword [rbp + 0x98]
cmp rax, 8
jb 0x140086f06
mov rdi, r12
lea rbx, [r12 + r15*2]
mov r14, r12
jmp 0x140086f18
lea rbx, [rbp + 0x88]
lea rbx, [rbx + r15*2]
lea rdi, [rbp + 0x88]
cmp rdi, rbx
je 0x140086f4b
sub r14, rdi
movzx ecx, word [rdi]
call fcn.14010af74
mov word [r14 + rdi], ax
add rdi, 2
cmp rdi, rbx
jne 0x140086f20
mov rax, qword [rbp + 0xa0]
mov r15, qword [rbp + 0x98]
mov r12, qword [rbp + 0x88]
lea rcx, [rbp + 0x88]
cmp rax, 8
setae bl
cmovae rcx, r12
mov qword [rsp + 0x20], 4
lea r9, str..exe
xor r8d, r8d
mov rdx, r15
call fcn.140026cb0
cmp rax, 0xffffffffffffffff
jne 0x140086f85
xor bl, bl
jmp 0x1400880e7
xor edi, edi
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x40], 7
mov word [rbp + 0x28], di
lea r8, [rax + 4]
cmp r15, r8
cmovb r8, r15
lea rdx, [rbp + 0x88]
test bl, bl
cmovne rdx, r12
lea rcx, [rbp + 0x28]
call fcn.140008ee0
nop
lea rdx, [rbp + 0x28]
lea rcx, [rbp - 0x48]
call fcn.140023840
nop
lea rcx, [rbp - 0x48]
cmp qword [rbp - 0x30], 8
cmovae rcx, qword [rbp - 0x48]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
lea rdx, [0x14015c818]
test rax, rax
cmovne rdx, rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 7
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x140087003
lea rcx, [rsp + 0x50]
call fcn.140008ee0
mov eax, 3
mov dword [rbp - 0x70], eax
lea rcx, [rbp + 0x50]
call fcn.140008e70
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rbp + 0x50], xmm0
movups xmm6, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x60], xmm6
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], di
lea rcx, [rsp + 0x50]
call fcn.140008e70
nop
lea rcx, [rbp - 0x48]
call fcn.140008e70
movq rax, xmm6
test rax, rax
je 0x140087137
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x30], rdi
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 8
cmovae rdx, qword [rbp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.140098180
nop
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x1400870a9
cmp qword [rdx + 0x18], 0x10
jb 0x1400870ac
mov rdx, qword [rdx]
jmp 0x1400870ac
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.140099220
nop
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
mov qword [rsp + 0x30], rdi
lea rdx, str.browser_type
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
lea rdx, [rsp + 0x30]
mov rcx, r13
call fcn.1400993e0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
mov rcx, rbx
call fcn.140099eb0
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140087112
mov qword [rbx], rcx
mov qword [rsp + 0x70], rdi
lea rcx, [rsp + 0x70]
call fcn.140099eb0
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 8
cmovae rdx, qword [rbp + 0x50]
mov r8, qword [rbp + 0x60]
lea rcx, [rbp + 8]
call fcn.1400190c0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc8], xmm1
mov qword [rbp + 0xd8], rdi
mov ecx, 0x401
call fcn.1400f9588
mov qword [rbp + 0xc8], rax
lea rbx, [rax + 0x401]
mov qword [rbp + 0xd8], rbx
xor edx, edx
mov r8d, 0x401
mov rcx, rax
call fcn.1400fc160
mov qword [rbp + 0xd0], rbx
mov rdx, qword [rbp + 0xc8]
sub rbx, rdx
mov dword [rbp + 0xe0], ebx
lea r8, [rbp + 0xe0]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_ObtainUserAgentString]
mov qword [rbp + 0x168], rdi
mov qword [rbp + 0x178], rdi
mov qword [rbp + 0x180], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x168], 0
mov rdx, qword [rbp + 0xc8]
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400871d0
lea rcx, [rbp + 0x168]
call fcn.1400090e0
nop
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x168]
call fcn.14001b490
mov r12, qword [rbp + 0xb8]
test r12, r12
je 0x140087230
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 8
cmovae rdx, qword [rbp + 0xa8]
mov r8, r12
lea rcx, [rbp + 8]
call fcn.1400190c0
mov r12, qword [rbp + 0xb8]
lea r15, [rbp + 0x28]
mov r14, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x38]
cmp qword [rbp + 0x40], 8
jb 0x14008724f
mov rdi, r14
lea rbx, [r14 + rdx*2]
mov r15, r14
jmp 0x14008725b
lea rbx, [rbp + 0x28]
lea rbx, [rbx + rdx*2]
lea rdi, [rbp + 0x28]
cmp rdi, rbx
je 0x140087281
sub r15, rdi
movzx ecx, word [rdi]
call fcn.14010af74
mov word [r15 + rdi], ax
add rdi, 2
cmp rdi, rbx
jne 0x140087263
mov rdx, qword [rbp + 0x38]
mov r14, qword [rbp + 0x28]
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rcx, r14
mov qword [rsp + 0x20], select
lea r9, str.iexplore.exe
xor r8d, r8d
call fcn.140026cb0
xor r15d, r15d
cmp rax, 0xffffffffffffffff
je 0x140087348
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
lea r8d, [r15 + 5]
lea rdx, str.Build
lea rcx, [rsp + 0x30]
call fcn.140008ee0
nop
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea r8d, [r15 + 0x24]
lea rdx, str.SoftwareMicrosoftInternet_Explorer
lea rcx, [rsp + 0x50]
call fcn.140008ee0
nop
lea r9, [rbp + 0x100]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x50]
mov rcx, 0xffffffff80000002
call fcn.140086930
nop
lea rcx, [rsp + 0x50]
call fcn.140008e70
nop
lea rcx, [rsp + 0x30]
call fcn.140008e70
mov r14, qword [rbp + 0x28]
mov rbx, qword [rbp + 0x110]
test rbx, rbx
je 0x1400874bd
lea rax, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rax, qword [rbp + 8]
mov qword [rbp + 0x18], r15
mov word [rax], r15w
lea r8, [0x14015d2c8]
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x48]
call fcn.140023a40
nop
lea rdx, [rbp + 0x100]
cmp qword [rbp + 0x118], 8
cmovae rdx, qword [rbp + 0x100]
mov r8, rbx
mov rcx, rax
call fcn.1400190c0
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov r8d, 1
lea rdx, [0x14015d2c8]
lea rcx, [rsp + 0x30]
call fcn.1400190c0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 8
cmovae rdx, qword [rbp + 0xa8]
mov r8, r12
lea rcx, [rsp + 0x50]
call fcn.1400190c0
movups xmm7, xmmword [rax]
movups xmmword [rbp - 0x68], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm6
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov eax, 0x1f
mov dword [rbp - 0x70], eax
lea rcx, [rbp + 8]
call fcn.140008e70
movups xmmword [rbp + 8], xmm7
movups xmmword [rbp + 0x18], xmm6
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r15w
lea rcx, [rbp - 0x68]
call fcn.140008e70
nop
lea rcx, [rsp + 0x50]
call fcn.140008e70
nop
lea rcx, [rsp + 0x30]
call fcn.140008e70
nop
lea rcx, [rbp - 0x48]
call fcn.140008e70
mov r12, qword [rbp + 0xb8]
mov r14, qword [rbp + 0x28]
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rcx, r14
xor edx, edx
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
movsxd rdi, eax
test eax, eax
jne 0x140087590
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x30], r15
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x30]
call fcn.140098180
nop
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x140087516
cmp qword [rdx + 0x18], 0x10
jb 0x140087519
mov rdx, qword [rdx]
jmp 0x140087519
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.140099220
nop
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
mov qword [rsp + 0x30], r15
lea rdx, str.browser_user_agent
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
lea rdx, [rsp + 0x30]
mov rcx, r13
call fcn.1400993e0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
mov rcx, rbx
call fcn.140099eb0
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14008757f
mov qword [rbx], rcx
mov qword [rsp + 0x70], r15
lea rcx, [rsp + 0x70]
call fcn.140099eb0
xor bl, bl
jmp 0x14008807e
xorps xmm0, xmm0
mov rbx, rdi
movdqu xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r15
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x1400881b1
cmp rbx, 0x1000
jb 0x1400875ea
lea rcx, [rdi + 0x27]
cmp rcx, rbx
jbe 0x1400881b7
call fcn.1400f9588
mov rcx, rax
test rax, rax
je 0x1400881c3
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400875f2
mov rcx, rbx
call fcn.1400f9588
mov qword [rbp + 0x70], rax
add rbx, rax
mov qword [rbp + 0x80], rbx
mov r8, rbx
sub r8, rax
xor edx, edx
mov rcx, rax
call fcn.1400fc160
mov qword [rbp + 0x78], rbx
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rcx, qword [rbp + 0x28]
mov r9, qword [rbp + 0x70]
mov r8d, edi
xor edx, edx
call qword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
jne 0x1400876ec
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x30], r15
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x30]
call fcn.140098180
nop
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x140087672
cmp qword [rdx + 0x18], 0x10
jb 0x140087675
mov rdx, qword [rdx]
jmp 0x140087675
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.140099220
nop
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
mov qword [rsp + 0x30], r15
lea rdx, str.browser_user_agent
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
lea rdx, [rsp + 0x30]
mov rcx, r13
call fcn.1400993e0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
mov rcx, rbx
call fcn.140099eb0
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400876db
mov qword [rbx], rcx
mov qword [rsp + 0x70], r15
lea rcx, [rsp + 0x70]
call fcn.140099eb0
xor bl, bl
jmp 0x140088032
mov dword [rbp + 0x48], r15d
lea r9, [rbp + 0x48]
lea r8, [rbp - 8]
lea rdx, str.VarFileInfoTranslation
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
jne 0x1400877c4
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x30], r15
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x30]
call fcn.140098180
nop
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x14008774a
cmp qword [rdx + 0x18], 0x10
jb 0x14008774d
mov rdx, qword [rdx]
jmp 0x14008774d
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.140099220
nop
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
mov qword [rsp + 0x30], r15
lea rdx, str.browser_user_agent
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
lea rdx, [rsp + 0x30]
mov rcx, r13
call fcn.1400993e0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
mov rcx, rbx
call fcn.140099eb0
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400877b3
mov qword [rbx], rcx
mov qword [rsp + 0x70], r15
lea rcx, [rsp + 0x70]
call fcn.140099eb0
xor bl, bl
jmp 0x140088032
mov rax, qword [rbp - 8]
movzx ebx, word [rax]
xor ecx, ecx
call fcn.140027000
mov dword [rsp + 0x20], 0x12c
lea r9, str.CMLLocaleChart
xor r8d, r8d
lea rdx, [0x14007d0d0]
mov rcx, rax
call fcn.1400272d0
lea r14, [rax + 0x30]
mov r15, qword [r14]
mov rax, qword [r15 + 8]
mov qword [rsp + 0x50], rax
xor edx, edx
mov dword [rsp + 0x58], edx
mov rcx, r15
cmp byte [rax + 0x19], dl
jne 0x140087838
mov qword [rsp + 0x50], rax
cmp dword [rax + 0x20], ebx
jge 0x140087825
mov dword [rsp + 0x58], edx
mov rax, qword [rax + 0x10]
jmp 0x140087833
mov dword [rsp + 0x58], 1
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], dl
je 0x140087811
cmp byte [rcx + 0x19], dl
jne 0x140087846
cmp ebx, dword [rcx + 0x20]
jge 0x1400878ff
movabs rax, 0x276276276276276
cmp qword [r14 + 8], rax
je 0x1400881bd
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], rdx
mov ecx, 0x68
call fcn.1400f9588
mov rdi, rax
mov qword [rsp + 0x78], rax
mov dword [rax + 0x20], ebx
lea rbx, [rax + 0x28]
mov qword [rsp + 0x30], rbx
xor eax, eax
mov qword [rbx], rax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 7
mov word [rbx], ax
xor r8d, r8d
lea rdx, [0x14015c818]
mov rcx, rbx
call fcn.140008ee0
nop
lea rcx, [rbx + 0x20]
xor eax, eax
mov qword [rcx], rax
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], 7
mov word [rcx], ax
xor r8d, r8d
lea rdx, [0x14015c818]
call fcn.140008ee0
nop
mov qword [rdi], r15
mov qword [rdi + 8], r15
mov qword [rdi + 0x10], r15
mov word [rdi + 0x18], 0
movups xmm0, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0x30], xmm0
mov r8, rdi
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.14001f350
mov rcx, rax
lea rdx, [rcx + 0x28]
lea rax, [rbp + 0x140]
cmp rax, rdx
je 0x140087929
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 8
jb 0x14008791d
mov rdx, qword [rdx]
lea rcx, [rbp + 0x140]
call fcn.140008ee0
xor r15d, r15d
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x30], r15
lea rdx, [rbp + 0x140]
cmp qword [rbp + 0x158], 8
cmovae rdx, qword [rbp + 0x140]
lea rcx, [rsp + 0x30]
call fcn.140098180
nop
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x14008796e
cmp qword [rdx + 0x18], 0x10
jb 0x140087971
mov rdx, qword [rdx]
jmp 0x140087971
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.140099220
nop
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
mov qword [rsp + 0x30], r15
lea rdx, str.browser_language
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
lea rdx, [rsp + 0x30]
mov rcx, r13
call fcn.1400993e0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
mov rax, qword [rbx]
test rax, rax
jne 0x1400879fa
lea ecx, [rax + 0x58]
call fcn.1400f9588
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
mov qword [rax + 0x50], rcx
mov rcx, rax
call fcn.1400984a0
nop
mov qword [rbx], rax
mov dword [rax], 1
lea rbx, [rax + 0x30]
mov qword [rsp + 0x30], r15
mov rdx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
je 0x140087a22
mov qword [rdx], r15
mov qword [rsp + 0x30], r15
add qword [rbx + 8], 8
jmp 0x140087a30
lea r8, [rsp + 0x30]
mov rcx, rbx
call fcn.14009a3a0
nop
lea rcx, [rsp + 0x30]
call fcn.140099eb0
mov rcx, qword [rbx]
mov rax, qword [rbx + 8]
sub rax, rcx
sar rax, 3
lea rbx, [rcx + rax*8]
lea rcx, [rbx - 8]
call fcn.140099eb0
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x140087a68
mov qword [rbx - 8], rax
mov qword [rsp + 0x70], r15
lea rcx, [rsp + 0x70]
call fcn.140099eb0
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x1d0]
call fcn.1400fc160
lea rcx, [rbp + 0x1d0]
call fcn.140006680
nop
lea rdx, str.StringFileInfo_
lea rcx, [rbp + 0x1e0]
call fcn.14000af40
mov rbx, rax
mov edx, 4
lea rcx, [rsp + 0x30]
call fcn.1400f7a70
mov r8, qword [rax]
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov rdx, qword [rax + 8]
call r8
mov rcx, qword [rbx]
movsxd r8, dword [rcx + 4]
mov eax, 0x30
mov word [r8 + rbx + 0x58], ax
mov rax, qword [rbx]
movsxd rcx, dword [rax + 4]
add rcx, rbx
call fcn.140089480
mov rax, qword [rbp - 8]
movzx edx, word [rax]
mov rcx, rbx
call fcn.140007480
mov rbx, rax
mov edx, 4
lea rcx, [rsp + 0x70]
call fcn.1400f7a70
mov r8, qword [rax]
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov rdx, qword [rax + 8]
call r8
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
call fcn.140089480
mov rax, qword [rbp - 8]
movzx edx, word [rax + 2]
mov rcx, rbx
call fcn.140007480
mov rcx, rax
lea rdx, [0x1401652c8]
call fcn.14000af40
mov qword [rbp], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x40], r15
mov r9d, 7
mov qword [rsp + 0x48], r9
mov word [rsp + 0x30], r15w
or dword [rbp - 0x70], 0x40
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rax
mov ecx, dword [rbp + 0x258]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140087bc0
mov rax, qword [rbp + 0x228]
mov r8, qword [rax]
test r8, r8
je 0x140087bc0
mov rax, qword [rbp + 0x208]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x250]
cmovb r8, qword [rbp + 0x250]
sub r8, rdx
sar r8, 1
jmp 0x140087c00
test cl, 4
jne 0x140087bf6
mov rax, qword [rbp + 0x220]
mov rcx, qword [rax]
test rcx, rcx
je 0x140087bf6
mov rax, qword [rbp + 0x200]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x238]
movsxd r8, dword [rax]
add r8, r8
sub r8, rdx
add r8, rcx
sar r8, 1
jmp 0x140087c00
mov r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
test rdx, rdx
je 0x140087c14
lea rcx, [rsp + 0x30]
call fcn.140008ee0
mov r9, qword [rsp + 0x48]
lea rdx, [rsp + 0x30]
cmp r9, 8
cmovae rdx, qword [rsp + 0x30]
lea r9, [rbp + 0x48]
lea r8, [rbp]
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.VERSION.dll_VerQueryValueW]
mov ebx, eax
lea rcx, [rsp + 0x30]
call fcn.140008e70
test ebx, ebx
jne 0x140087cfc
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x30], r15
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x30]
call fcn.140098180
nop
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x140087c82
cmp qword [rdx + 0x18], 0x10
jb 0x140087c85
mov rdx, qword [rdx]
jmp 0x140087c85
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.140099220
nop
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
mov qword [rsp + 0x30], r15
lea rdx, str.browser_user_agent
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
lea rdx, [rsp + 0x30]
mov rcx, r13
call fcn.1400993e0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
mov rcx, rbx
call fcn.140099eb0
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140087ceb
mov qword [rbx], rcx
mov qword [rsp + 0x70], r15
lea rcx, [rsp + 0x70]
call fcn.140099eb0
xor bl, bl
jmp 0x140088025
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov rdx, qword [rbp]
inc rsi
cmp word [rdx + rsi*2], 0
jne 0x140087d13
mov r8, rsi
lea rcx, [rsp + 0x50]
call fcn.140008ee0
lea rcx, [rbp + 0x120]
call fcn.140008e70
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rbp + 0x120], xmm0
movups xmm6, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x130], xmm6
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea rcx, [rsp + 0x50]
call fcn.140008e70
movq rbx, xmm6
test rbx, rbx
je 0x140087f77
lea rax, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rax, qword [rbp + 8]
mov qword [rbp + 0x18], r15
mov word [rax], r15w
lea r8, [0x14015d2c8]
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x28]
call fcn.140023a40
nop
lea rdx, [rbp + 0x120]
cmp qword [rbp + 0x138], 8
cmovae rdx, qword [rbp + 0x120]
mov r8, rbx
mov rcx, rax
call fcn.1400190c0
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov r8d, 1
lea rdx, [0x14015d2c8]
lea rcx, [rbp - 0x68]
call fcn.1400190c0
mov qword [rsp + 0x70], r15
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rdx, [rbp + 0x100]
cmp qword [rbp + 0x118], 8
cmovae rdx, qword [rbp + 0x100]
mov r8, qword [rbp + 0x110]
lea rcx, [rsp + 0x70]
call fcn.1400190c0
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov r8d, 1
lea rdx, [0x14015d2c8]
lea rcx, [rsp + 0x30]
call fcn.1400190c0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 8
cmovae rdx, qword [rbp + 0xa8]
mov r8, r12
lea rcx, [rsp + 0x50]
call fcn.1400190c0
movups xmm7, xmmword [rax]
movups xmmword [rbp - 0x48], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm6
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rcx, [rbp + 8]
call fcn.140008e70
movups xmmword [rbp + 8], xmm7
movups xmmword [rbp + 0x18], xmm6
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], 7
mov word [rbp - 0x48], r15w
lea rcx, [rbp - 0x48]
call fcn.140008e70
nop
lea rcx, [rsp + 0x50]
call fcn.140008e70
nop
lea rcx, [rsp + 0x30]
call fcn.140008e70
nop
lea rcx, [rsp + 0x70]
call fcn.140008e70
nop
lea rcx, [rbp - 0x68]
call fcn.140008e70
nop
lea rcx, [rbp - 0x28]
call fcn.140008e70
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x30], r15
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rdx, qword [rbp + 8]
lea rcx, [rsp + 0x30]
call fcn.140098180
nop
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x140087fb0
cmp qword [rdx + 0x18], 0x10
jb 0x140087fb3
mov rdx, qword [rdx]
jmp 0x140087fb3
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.140099220
nop
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
mov qword [rsp + 0x30], r15
lea rdx, str.browser_user_agent
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
lea rdx, [rsp + 0x30]
mov rcx, r13
call fcn.1400993e0
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140098070
nop
mov rcx, rbx
call fcn.140099eb0
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140088019
mov qword [rbx], rcx
mov qword [rsp + 0x70], r15
lea rcx, [rsp + 0x70]
call fcn.140099eb0
mov bl, 1
lea rcx, [rbp + 0x1d0]
call fcn.140005620
nop
mov rcx, qword [rbp + 0x70]
test rcx, rcx
je 0x14008807e
mov rdx, qword [rbp + 0x80]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008806a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400881c3
call fcn.1400f9580
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r15
lea rcx, [rbp + 0x168]
call fcn.140009080
nop
mov rcx, qword [rbp + 0xc8]
test rcx, rcx
je 0x1400880dd
mov rdx, qword [rbp + 0xd8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400880c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008819f
call fcn.1400f9580
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xc8], xmm0
mov qword [rbp + 0xd8], r15
lea rcx, [rbp + 0x28]
call fcn.140008e70
nop
lea rcx, [rbp + 0x88]
call fcn.140008e70
nop
lea rcx, [rbp + 0xe8]
call fcn.140008e10
nop
lea rcx, [rbp + 0x1a8]
call fcn.140008e70
nop
lea rcx, [rbp + 0x188]
call fcn.140008e70
nop
lea rcx, [rbp + 0x140]
call fcn.140008e70
nop
lea rcx, [rbp + 0x120]
call fcn.140008e70
nop
lea rcx, [rbp + 0x100]
call fcn.140008e70
nop
lea rcx, [rbp + 0xa8]
call fcn.140008e70
nop
lea rcx, [rbp + 0x50]
call fcn.140008e70
nop
lea rcx, [rbp + 8]
call fcn.140008e70
movzx eax, bl
mov rcx, qword [rbp + 0x2d0]
xor rcx, rsp
call fcn.1400f9560
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14010402c
nop
call fcn.14010402c
nop
call fcn.14000c670
nop
call fcn.14000c670
int3
call fcn.1400012e0
nop
call fcn.14001f720
nop
call fcn.14010402c
int3