Function at 0x140051f30
Capabilities:
Get file version info

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2e8]
sub rsp, 0x3c0
mov qword [rbp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x14035d8c0]
xor rax, rsp
mov qword [rbp + 0x2b0], rax
mov r13, rcx
mov byte [rbp - 0x60], 0
lea rcx, [rbp - 0x58]
call fcn.140015830
nop
lea r12, [0x1402f8ce8]
lea rdi, [0x1402f0688]
mov rdx, rdi
cmp byte [rbp - 0x60], 0
cmovne rdx, r12
mov r15, 0xffffffffffffffff
mov rax, r15
inc rax
cmp word [rdx + rax*2], 0
jne 0x140051fa3
mov r8d, eax
lea rcx, [rbp - 0x58]
call fcn.140002a7c
mov rbx, qword [rbp - 0x58]
mov r9, rbx
xor r8d, r8d
mov edx, 0x1175e
mov rcx, qword [r13]
call fcn.14001fdd0
nop
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
lea rsi, vtable.ATL::CAtlStringMgr.0
lea r14, vtable.ATL::CWin32Heap.0
sub eax, 1
jg 0x140052028
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rsi
jne 0x140052c26
mov rcx, qword [rcx + 8]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r14
jne 0x140052c26
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
lea rax, [rsp + 0x48]
mov qword [rsp + 0x38], rax
call fcn.140011f18
mov rcx, rax
test rax, rax
je 0x140052c2e
mov rax, qword [rax]
mov rdx, qword [rax + 0x18]
cmp rax, rsi
jne 0x140052c39
lock inc dword [rcx + 0x20]
lea rax, [rcx + 0x10]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rdx, [0x1402f4148]
cmp rdx, 0x10000
jae 0x140052083
movzx edx, dx
lea rcx, [rsp + 0x48]
call fcn.140012700
jmp 0x14005209e
mov rax, r15
inc rax
cmp word [rdx + rax*2], 0
jne 0x140052086
mov r8d, eax
lea rcx, [rsp + 0x48]
call fcn.140002a7c
nop
lea rcx, [rsp + 0x50]
call fcn.140015830
nop
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.140002b88
mov edx, 0x2c
lea rcx, [rsp + 0x50]
call fcn.14007d450
mov r9, qword [rsp + 0x50]
xor r8d, r8d
mov edx, 0x1175f
mov rcx, qword [r13]
call fcn.14001fdd0
nop
lea rcx, [rsp + 0x48]
call fcn.14004b210
lea rdx, [rbp + 0x60]
lea rcx, str.windows_systemappsmicrosoft.microsoftedge
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp rax, 0xffffffffffffffff
je 0x140052be0
mov byte [rbp - 0x50], 1
lea rcx, [rbp - 0x48]
call fcn.140015830
nop
cmp byte [rbp - 0x50], 0
cmovne rdi, r12
mov rax, r15
nop dword [rax]
inc rax
cmp word [rdi + rax*2], 0
jne 0x140052120
mov r8d, eax
mov rdx, rdi
lea rcx, [rbp - 0x48]
call fcn.140002a7c
mov rbx, qword [rbp - 0x48]
mov r9, rbx
xor r8d, r8d
mov edx, 0x1175e
mov rcx, qword [r13]
call fcn.14001fdd0
nop
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14005219a
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rsi
jne 0x140052c40
mov rcx, qword [rcx + 8]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r14
jne 0x140052c40
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
call fcn.140011f18
mov rcx, rax
test rax, rax
je 0x140052c48
mov rax, qword [rax]
mov rdx, qword [rax + 0x18]
cmp rax, rsi
jne 0x140052c53
lock inc dword [rcx + 0x20]
lea rax, [rcx + 0x10]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rdx, str.windows_systemapps_
cmp rdx, 0x10000
jae 0x1400521eb
movzx edx, dx
lea rcx, [rsp + 0x30]
call fcn.140012700
jmp 0x140052208
mov rax, r15
nop
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400521f0
mov r8d, eax
lea rcx, [rsp + 0x30]
call fcn.140002a7c
nop
lea rcx, [rbp + 0x8c]
mov rax, r15
inc rax
cmp word [rcx + rax*2], 0
jne 0x140052212
lea rcx, [rbp + 0x8c]
mov qword [rsp + 0x38], rcx
lea rsi, [rbp + 0x8c]
mov rbx, qword [rsp + 0x30]
sub rsi, rbx
sar rsi, 1
mov r12d, dword [rbx - 0x10]
test eax, eax
js 0x140052c5a
movsxd rdx, eax
lea rcx, [rbp + 0x8c]
call fcn.140235730
mov r14, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r12d
jl 0x140052c65
lea edi, [rax + r12]
test edi, edi
js 0x140052c70
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x140052296
mov edx, edi
lea rcx, [rsp + 0x30]
call fcn.140002a1c
mov rbx, qword [rsp + 0x30]
cmp rsi, r12
ja 0x1400522a4
lea rcx, [rbx + rsi*2]
mov qword [rsp + 0x38], rcx
movsxd rdx, r14d
lea rcx, [rbx + r12*2]
mov r9d, r14d
mov r8, qword [rsp + 0x38]
call fcn.140002c18
cmp edi, dword [rbx - 0xc]
jg 0x140052c1b
mov dword [rbx - 0x10], edi
movsxd rax, edi
xor ecx, ecx
mov word [rbx + rax*2], cx
lea rdi, str.microsoftedge.exe
mov rax, r15
inc rax
cmp word [rdi + rax*2], cx
jne 0x1400522d7
mov r14, rdi
sub r14, rbx
sar r14, 1
mov esi, dword [rbx - 0x10]
mov dword [rsp + 0x38], esi
test eax, eax
js 0x140052c7b
movsxd rdx, eax
mov rcx, rdi
call fcn.140235730
mov r12, rax
mov eax, 0x7fffffff
sub eax, r12d
cmp eax, esi
jl 0x140052c86
add esi, r12d
js 0x140052c91
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, esi
or eax, ecx
jge 0x140052341
mov edx, esi
lea rcx, [rsp + 0x30]
call fcn.140002a1c
mov rbx, qword [rsp + 0x30]
mov eax, dword [rsp + 0x38]
cmp r14, rax
ja 0x14005234e
lea rdi, [rbx + r14*2]
movsxd rdx, r12d
lea rcx, [rbx + rax*2]
mov r9d, r12d
mov r8, rdi
call fcn.140002c18
cmp esi, dword [rbx - 0xc]
jg 0x140052c10
mov dword [rbx - 0x10], esi
movsxd rax, esi
xor ecx, ecx
mov word [rbx + rax*2], cx
call fcn.140011f18
mov rcx, rax
test rax, rax
je 0x140052c9c
mov rax, qword [rax]
mov rdx, qword [rax + 0x18]
lea rsi, vtable.ATL::CAtlStringMgr.0
cmp rax, rsi
jne 0x140052ca7
lock inc dword [rcx + 0x20]
lea rax, [rcx + 0x10]
mov rbx, qword [rsp + 0x30]
add rax, 0x18
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x58]
mov rcx, rbx
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov edi, eax
lea r14, str.Edge
test eax, eax
je 0x140052954
mov ecx, edi
call fcn.140238610
mov r12, rax
test rax, rax
je 0x140052954
mov r9, rax
mov r8d, edi
mov edx, dword [rsp + 0x58]
mov rcx, rbx
call qword [sym.imp.VERSION.dll_GetFileVersionInfoW]
mov rcx, r12
test eax, eax
je 0x14005294f
lea r9, [rbp - 0x40]
lea r8, [rbp - 0x38]
lea rdx, [0x1402f4224]
call qword [sym.imp.VERSION.dll_VerQueryValueW]
mov rcx, r12
test eax, eax
je 0x14005294f
mov rax, qword [rbp - 0x38]
mov esi, dword [rax + 8]
mov r14d, esi
shr r14d, 0x10
mov ebx, dword [rax + 0xc]
mov edi, ebx
shr edi, 0x10
call fcn.140235920
movzx eax, bx
movzx r9d, si
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], edi
mov r8d, r14d
lea rdx, str._d._d._d._d
lea rcx, [rsp + 0x40]
call fcn.14004d920
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
mov rdi, qword [rsp + 0x40]
lea rcx, [rdi - 0x18]
call fcn.140002c94
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x78]
call fcn.140015830
nop
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x78]
call fcn.140002b88
mov edx, 0x2c
lea rcx, [rsp + 0x78]
call fcn.14007d450
mov r9, qword [rsp + 0x78]
xor r8d, r8d
mov edx, 0x1175f
mov rcx, qword [r13]
call fcn.14001fdd0
nop
lea rcx, [rsp + 0x70]
call fcn.14004b210
mov byte [rbp - 0x30], 1
lea rcx, [rbp - 0x28]
call fcn.140015830
nop
lea r9, [rbp - 0x30]
xor r8d, r8d
mov edx, 0x1175e
mov rcx, r13
call fcn.140085650
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
lea rsi, vtable.ATL::CAtlStringMgr.0
jg 0x14005254a
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rsi
jne 0x140052cb6
mov rcx, qword [rcx + 8]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
lea r12, vtable.ATL::CWin32Heap.0
cmp rax, r12
jne 0x140052cae
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140052551
lea r12, vtable.ATL::CWin32Heap.0
call fcn.140011f18
mov rcx, rax
test rax, rax
je 0x140052cbe
mov rax, qword [rax]
mov rdx, qword [rax + 0x18]
cmp rax, rsi
jne 0x140052cc9
lock inc dword [rcx + 0x20]
lea rax, [rcx + 0x10]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea r14, str.Edge
cmp r14, 0x10000
jae 0x1400525a3
movzx edx, r14w
lea rcx, [rsp + 0x60]
call fcn.140012700
jmp 0x1400525cc
mov rax, r15
nop word [rax + rax]
inc rax
cmp word [r14 + rax*2], 0
jne 0x1400525b0
mov r8d, eax
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.140002a7c
nop
mov rbx, qword [rsp + 0x60]
mov r9, rbx
mov r8d, dword [0x14036cb90]
mov edx, 0x116b9
mov rcx, qword [r13]
call fcn.14001fdd0
nop
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140052631
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rsi
jne 0x140052cd0
mov rcx, qword [rcx + 8]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r12
jne 0x140052cd0
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [rbp - 0x80]
mov qword [rsp + 0x38], rax
lea rcx, [rdi - 0x18]
call fcn.140002c94
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rcx, [rbp - 0x78]
call fcn.140015830
nop
mov ebx, dword [0x14036cb90]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x78]
call fcn.140002b88
mov edx, 0x2c
lea rcx, [rbp - 0x78]
call fcn.14007d450
mov r9, qword [rbp - 0x78]
mov r8d, ebx
mov edx, 0x116b8
mov rcx, qword [r13]
call fcn.14001fdd0
nop
lea rcx, [rbp - 0x80]
call fcn.14004b210
mov byte [rbp - 0x20], 0
lea rcx, [rbp - 0x18]
call fcn.140015830
nop
lea r9, [rbp - 0x20]
mov r8d, dword [0x14036cb90]
mov edx, 0x1177b
mov rcx, r13
call fcn.140085650
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140052708
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rsi
jne 0x140052cd8
mov rcx, qword [rcx + 8]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r12
jne 0x140052cd8
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov byte [rbp - 0x10], 0
lea rcx, [rbp - 8]
call fcn.140015830
nop
lea r9, [rbp - 0x10]
mov r8d, dword [0x14036cb90]
mov edx, 0x1177e
mov rcx, r13
call fcn.140085650
nop
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14005277b
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rsi
jne 0x140052ce0
mov rcx, qword [rcx + 8]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r12
jne 0x140052ce0
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov byte [rbp], 0
lea rcx, [rbp + 8]
call fcn.140015830
nop
lea r9, [rbp]
mov r8d, dword [0x14036cb90]
mov edx, 0x1177c
mov rcx, r13
call fcn.140085650
nop
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400527ee
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rsi
jne 0x140052ce8
mov rcx, qword [rcx + 8]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r12
jne 0x140052ce8
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov byte [rbp + 0x10], 0
lea rcx, [rbp + 0x18]
call fcn.140015830
nop
lea r9, [rbp + 0x10]
mov r8d, dword [0x14036cb90]
mov edx, 0x11780
mov rcx, r13
call fcn.140085650
nop
mov rdx, qword [rbp + 0x18]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140052861
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rsi
jne 0x140052cf0
mov rcx, qword [rcx + 8]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r12
jne 0x140052cf0
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov byte [rbp + 0x20], 1
lea rcx, [rbp + 0x28]
call fcn.140015830
nop
lea r9, [rbp + 0x20]
mov r8d, dword [0x14036cb90]
mov edx, 0x1177f
mov rcx, r13
call fcn.140085650
nop
mov rdx, qword [rbp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400528d4
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rsi
jne 0x140052cf8
mov rcx, qword [rcx + 8]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r12
jne 0x140052cf8
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov byte [rbp + 0x30], 0
lea rcx, [rbp + 0x38]
call fcn.140015830
nop
lea r9, [rbp + 0x30]
mov r8d, dword [0x14036cb90]
mov edx, 0x1177d
mov rcx, r13
call fcn.140085650
nop
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140052947
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rsi
jne 0x140052d00
mov rcx, qword [rcx + 8]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r12
jne 0x140052d00
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
inc dword [0x14036cb90]
jmp 0x140052954
call fcn.140235920
mov rcx, qword [0x14036cdf8]
cmp dword [rcx - 0x10], 0
jl 0x140052b41
lea rdx, str.edge
call fcn.14022f5d8
test rax, rax
je 0x140052b41
sub rax, qword [0x14036cdf8]
sar rax, 1
test eax, eax
js 0x140052b41
call fcn.140011f18
mov rcx, rax
test rax, rax
je 0x140052d08
mov rax, qword [rax]
mov rdx, qword [rax + 0x18]
cmp rax, rsi
jne 0x140052d13
lock inc dword [rcx + 0x20]
lea rax, [rcx + 0x10]
add rax, 0x18
mov qword [rsp + 0x68], rax
cmp r14, 0x10000
jae 0x1400529d7
movzx edx, r14w
lea rcx, [rsp + 0x68]
call fcn.140012700
jmp 0x1400529fc
mov rax, r15
nop word [rax + rax]
inc rax
cmp word [r14 + rax*2], 0
jne 0x1400529e0
mov r8d, eax
mov rdx, r14
lea rcx, [rsp + 0x68]
call fcn.140002a7c
nop
mov rbx, qword [rsp + 0x68]
mov r9, rbx
xor r8d, r8d
mov edx, 0x11717
mov rcx, qword [r13]
call fcn.14001fdd0
nop
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140052a66
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rsi
jne 0x140052d22
mov rcx, qword [rcx + 8]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
lea rbx, vtable.ATL::CWin32Heap.0
cmp rax, rbx
jne 0x140052d1a
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140052a6d
lea rbx, vtable.ATL::CWin32Heap.0
lea rax, [rbp - 0x70]
mov qword [rsp + 0x38], rax
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
call fcn.140002c94
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rcx, [rbp - 0x68]
call fcn.140015830
nop
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x68]
call fcn.140002b88
mov edx, 0x2c
lea rcx, [rbp - 0x68]
call fcn.14007d450
mov r9, qword [rbp - 0x68]
xor r8d, r8d
mov edx, 0x11724
mov rcx, qword [r13]
call fcn.14001fdd0
nop
lea rcx, [rbp - 0x70]
call fcn.14004b210
mov byte [rbp + 0x40], 1
lea rcx, [rbp + 0x48]
call fcn.140015830
nop
lea r9, [rbp + 0x40]
xor r8d, r8d
mov edx, 0x11760
mov rcx, r13
call fcn.140085650
nop
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140052b3f
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rsi
jne 0x140052d2a
mov rcx, qword [rcx + 8]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rbx
jne 0x140052d2a
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
jmp 0x140052b48
lea rbx, vtable.ATL::CWin32Heap.0
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140052b95
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rsi
jne 0x140052d32
mov rcx, qword [rcx + 8]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rbx
jne 0x140052d32
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r15d
sub r15d, 1
jg 0x140052be0
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rsi
jne 0x140052d3a
mov rcx, qword [rcx + 8]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, rbx
jne 0x140052d3a
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rbp + 0x2b0]
xor rcx, rsp
call fcn.14022b1a0
lea r11, [rsp + 0x3c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80070057
call fcn.140002d3c
int3
mov ecx, 0x80070057
call fcn.140002d3c
nop
call r8
jmp 0x140052028
mov ecx, 0x80004005
call fcn.140002d3c
int3
call rdx
jmp 0x14005205b
call r8
jmp 0x14005219a
mov ecx, 0x80004005
call fcn.140002d3c
int3
call rdx
jmp 0x1400521c3
mov ecx, 0x80070057
call fcn.140002d3c
int3
mov ecx, 0x80070057
call fcn.140002d3c
int3
mov ecx, 0x80070057
call fcn.140002d3c
int3
mov ecx, 0x80070057
call fcn.140002d3c
int3
mov ecx, 0x80070057
call fcn.140002d3c
int3
mov ecx, 0x80070057
call fcn.140002d3c
int3
mov ecx, 0x80004005
call fcn.140002d3c
int3
call rdx
jmp 0x1400523aa
call r8
jmp 0x140052551
call r8
jmp 0x14005254a
mov ecx, 0x80004005
call fcn.140002d3c
int3
call rdx
jmp 0x14005257a
call r8
jmp 0x140052631
call r8
jmp 0x140052708
call r8
jmp 0x14005277b
call r8
jmp 0x1400527ee
call r8
jmp 0x140052861
call r8
jmp 0x1400528d4
call r8
jmp 0x140052947
mov ecx, 0x80004005
call fcn.140002d3c
int3
call rdx
jmp 0x1400529b5
call r8
jmp 0x140052a6d
call r8
jmp 0x140052a66
call r8
jmp 0x140052b3f
call r8
jmp 0x140052b95
call r8
jmp 0x140052be0