Function at 0x14001aa70
Capabilities:
Check mutex on windows
Set current directory

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x238
movaps xmmword [rsp + 0x220], xmm6
mov rax, qword [0x140190038]
xor rax, rsp
mov qword [rsp + 0x218], rax
lea rdi, [rsp + 0xec]
xor esi, esi
mov r8d, VarUI4FromDisp
mov rcx, rdi
xor edx, edx
call fcn.1400d47c0
mov dword [rdi - 0xc], 0x11c
mov rbx, qword [sym.imp.KERNEL32.dll_VerSetConditionMask]
xor ecx, ecx
mov edx, 2
mov r8b, 3
call rbx
mov rcx, rax
mov edx, 1
mov r8b, 3
call rbx
mov rcx, rax
mov edx, 0x20
mov r8b, 3
call rbx
mov qword [rdi - 8], 0xa
mov word [rdi + 0x108], 0
lea rdi, [rsp + 0xe0]
mov rcx, rdi
mov edx, 0x23
mov r8, rax
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
test eax, eax
je 0x14001ab5d
lea r8, str.386F52B3_6031_41B9_94A1_FE3D7CF1DCAD
xor esi, esi
xor ecx, ecx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x14001ac31
lea rdx, [0x14016d8fa]
lea r8, [0x14016d8e4]
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14001ab76
lea rdx, [0x14016d856]
lea r8, str._rN_e
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [rsp + 0x218]
xor rcx, rsp
call fcn.1400d2660
mov eax, esi
movaps xmm6, xmmword [rsp + 0x220]
add rsp, 0x238
pop rbx
pop rdi
pop rsi
pop r14
ret
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x1401a0db0], eax
mov ecx, 0x18
call fcn.1400d0b94
movups xmmword [rax], xmm6
mov dword [rax + 0x10], 0
mov qword [0x1401a0db8], rax
test rax, rax
je 0x14001abd4
mov qword [0x1401a0dc0], 0
call fcn.14001a710
lea rcx, [0x1401a0d60]
call fcn.14001aee0
mov rcx, qword [rsp + 0x20]
call sub.gdiplus.dll_GdiplusShutdown
lea rcx, [rsp + 0xe0]
call fcn.1401312b0
xor esi, esi
lea rcx, [rsp + 0x40]
call fcn.14003e3d0
lea rcx, [rsp + 0x70]
call fcn.140090910
lea rcx, [rsp + 0x90]
call fcn.140090910
lea rcx, [rsp + 0xb0]
call fcn.14004d010
jmp 0x14001ab76
movabs r14, 0xaaaaaaaaaaaaaaaa
movaps xmm6, xmmword [0x14016ceb0]
lea rcx, [rsp + 0xb0]
movaps xmmword [rcx + 0x20], xmm6
movaps xmmword [rcx + 0x10], xmm6
movaps xmmword [rcx], xmm6
call fcn.14004cfb0
xor ecx, ecx
xor edx, edx
call fcn.14004a740
call fcn.14003ed20
call fcn.14003ed40
call fcn.14003e800
call fcn.140092d20
mov rcx, rax
call fcn.14003e820
call fcn.14003e2e0
lea rsi, [rsp + 0x90]
mov qword [rsi + 0x10], r14
movaps xmmword [rsi], xmm6
mov rcx, rsi
call fcn.140090690
mov ecx, 1
mov rdx, rsi
call fcn.1400436f0
mov rcx, rsi
mov rdx, rdi
call fcn.140091300
cmp byte [rsp + 0xf7], 0
mov rcx, rdi
jns 0x14001acc8
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov rcx, rdi
call fcn.140090910
lea rsi, [rsp + 0x70]
mov qword [rsi + 0x10], r14
movaps xmmword [rsi], xmm6
mov rcx, rsi
call fcn.140023250
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x58], 7
cmp byte [rsi + 0x17], 0
jns 0x14001ad0b
mov rsi, qword [rsp + 0x70]
lea rcx, [rsp + 0x58]
mov qword [rcx + 8], rsi
call fcn.1400475a0
mov ecx, 0xfffffffd
call fcn.140131d60
call fcn.140092d20
mov rsi, rax
xor ecx, ecx
call fcn.14008f360
test al, al
je 0x14001ad9f
lea rdx, str.....yeschromeinstallerinstaller123browser_installer_main.cc
lea rcx, [rsp + 0xe0]
mov r8d, 0x5c
xor r9d, r9d
call fcn.1400477a0
lea rdi, [rsp + 0xf0]
lea rbx, [rsp + 0x40]
mov rcx, rsi
mov rdx, rbx
call fcn.14004c7c0
cmp byte [rbx + 0x17], 0
jns 0x14001ad76
mov rbx, qword [rsp + 0x40]
mov rcx, rdi
mov rdx, rbx
call fcn.140131420
cmp byte [rsp + 0x57], 0
jns 0x14001ad92
mov rcx, qword [rsp + 0x40]
call fcn.1400d0be4
lea rcx, [rsp + 0xe0]
call fcn.140047cd0
lea rdi, [rsp + 0x40]
mov qword [rdi + 0x10], r14
movaps xmmword [rdi], xmm6
mov rcx, rdi
xor edx, edx
call fcn.14003e310
mov rcx, rdi
call fcn.14003e450
test al, al
jne 0x14001ae22
mov ecx, 2
call fcn.14008f360
mov esi, 1
test al, al
je 0x14001abfe
lea rdx, str.....yeschromeinstallerinstaller123browser_installer_main.cc
lea rdi, [rsp + 0xe0]
mov rcx, rdi
mov r8d, 0x61
mov r9d, 2
call fcn.1400477a0
lea rcx, [rsp + 0xf0]
lea rdx, str.com_initializer_error
mov r8d, 0x16
call fcn.14010ad60
mov rcx, rdi
call fcn.140047cd0
jmp 0x14001abfe
lea rdx, str.hide_ui
mov rcx, rsi
call fcn.140092d30
test al, al
je 0x14001ae52
lea rdx, str.yes_browser_update_22
mov rcx, rsi
call fcn.140092d30
test al, al
je 0x14001ae52
call fcn.140021830
jmp 0x14001abfc
lea rcx, [rsp + 0xe0]
mov qword [rcx + 0x10], r14
movaps xmmword [rcx], xmm6
mov edx, 1
call fcn.1400446e0
lea rdx, [rsp + 0x28]
mov qword [rdx], r14
mov dword [rdx], 1
xorps xmm6, xmm6
movups xmmword [rdx + 8], xmm6
lea rcx, [rsp + 0x20]
mov qword [rcx], r14
xor r8d, r8d
call sub.gdiplus.dll_GdiplusStartup
mov qword [0x1401a0da8], 0
mov rsi, qword [0x1401a0cc0]
mov rax, qword [0x1401a0cc8]
jmp 0x14001aec2
mov rax, qword [rcx + 0x38]
mov cl, 1
call qword [0x1401bc008]
mov rax, qword [0x1401a0cc8]
add rsi, 8
cmp rsi, rax
jae 0x14001ab9d
mov rcx, qword [rsi]
test rcx, rcx
jne 0x14001aeab
jmp 0x14001aebe