Function at 0x14007f5f0
Capabilities:
Inspect section memory permissions

Disassembly:
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rsp + 0x90], rbx
mov r14, rdx
mov rbx, rcx
mov qword [rsp + 0x20], rdx
lea r9, str.lpszCmdLine_s
lea r8, str.CreateSetupFlags
lea rdx, str.CSetupApp
call fcn.140080c70
test r14, r14
je 0x14008057e
lea rdx, [0x140106f18]
mov rcx, rbx
call fcn.140080880
mov ecx, 0x7fffffff
mov rax, r14
nop
nop
xor ebp, ebp
cmp word [rax], bp
je 0x14007f673
add rax, 2
sub rcx, 1
jne 0x14007f660
jmp 0x14007f682
test rcx, rcx
je 0x14007f682
mov eax, 0x7fffffff
sub rax, rcx
jmp 0x14007f685
mov rax, rbp
lea esi, [rax + 0x104]
mov dword [rsp + 0xa8], esi
movsxd rax, esi
lea r8, [rax + rax + 2]
mov rcx, qword [rbx + 0x140]
mov r15, rbp
test r8, r8
je 0x14007f6ba
mov edx, 8
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r15, rax
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x140106f30]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f6e3
mov rcx, qword [rbx + 0x148]
or qword [rcx], 1
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x140106f38]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f70c
mov rax, qword [rbx + 0x148]
or qword [rax], 0x10
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x140106f40]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f738
mov rax, qword [rbx + 0x148]
or qword [rax], 0x400
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x140106f48]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f764
mov rax, qword [rbx + 0x148]
or qword [rax], 0x200
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, str.NODISP
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f790
mov rax, qword [rbx + 0x148]
or qword [rax], 0x1800
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, str.NOCOPYGAUGE
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f7c2
mov rax, qword [rbx + 0x148]
movabs rcx, 0x100000000
or qword [rax], rcx
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, str.NOLA
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f7ee
mov rax, qword [rbx + 0x148]
or qword [rax], 0x1000
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, str.NOPOPUP
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f81a
mov rax, qword [rbx + 0x148]
or qword [rax], 0x2000
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, str.SHOWCOPYRIGHT
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f846
mov rax, qword [rbx + 0x148]
or qword [rax], 0x1000000
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x140106fb8]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f872
mov rax, qword [rbx + 0x148]
or qword [rax], 0x4000000
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x140106fc0]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f89e
mov rax, qword [rbx + 0x148]
or qword [rax], 0x100000
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x140106fc8]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f8ca
mov rax, qword [rbx + 0x148]
or qword [rax], 0x20000000
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x140106fd0]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f8f6
mov rax, qword [rbx + 0x148]
or qword [rax], 0x40000000
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x140106fd8]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f923
mov rax, qword [rbx + 0x148]
mov ecx, 0x80000000
or qword [rax], rcx
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, str.SKIPS
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f94f
mov rax, qword [rbx + 0x148]
or qword [rax], 0x2000000
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, str.INDEPEND
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f981
mov rax, qword [rbx + 0x148]
movabs rcx, 0x400000000
or qword [rax], rcx
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x140107008]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f9b3
mov rax, qword [rbx + 0x148]
movabs rcx, 0x800000000
or qword [rax], rcx
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x140107010]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007f9e5
mov rax, qword [rbx + 0x148]
movabs rcx, 0x1000000000
or qword [rax], rcx
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, str.NOSDP
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007fa17
mov rax, qword [rbx + 0x148]
movabs rcx, 0x2000000000
or qword [rax], rcx
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x140107024]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007fa49
mov rax, qword [rbx + 0x148]
movabs rcx, 0x10000000000
or qword [rax], rcx
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x140107030]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007fa7b
mov rax, qword [rbx + 0x148]
movabs rcx, 0x20000000000
or qword [rax], rcx
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x140107038]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007faad
mov rax, qword [rbx + 0x148]
movabs rcx, 0x40000000000
or qword [rax], rcx
mov dword [rsp + 0xa0], esi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [0x140107040]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007fb30
cmp dword [rsp + 0xa0], ebp
jbe 0x14007fb25
mov r9, qword [rbx + 0x148]
test r15, r15
jne 0x14007faf3
mov ecx, ebp
jmp 0x14007fb06
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r15
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov r8d, ecx
mov rdx, r15
lea rcx, [r9 + 0x150]
call fcn.140003940
mov rdx, qword [rbx + 0x148]
or qword [rdx], 4
jmp 0x14007fb30
mov rax, qword [rbx + 0x148]
or qword [rax], 2
mov dword [rsp + 0xa0], esi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [0x140107048]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007fba6
cmp dword [rsp + 0xa0], ebp
jbe 0x14007fba6
mov r9, qword [rbx + 0x148]
test r15, r15
jne 0x14007fb76
mov ecx, ebp
jmp 0x14007fb89
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r15
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov r8d, ecx
mov rdx, r15
lea rcx, [r9 + 0xe0]
call fcn.140003940
mov rdx, qword [rbx + 0x148]
or qword [rdx], 0x40
mov dword [rsp + 0xa0], esi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [0x1401011bc]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007fc38
cmp dword [rsp + 0xa0], ebp
jbe 0x14007fc38
mov rdi, qword [rbx + 0x150]
mov qword [rsp + 0x20], r15
lea r9, str.lpszPath_s
lea r8, str.SetEifFile
lea rdx, str.CScriptFileIF
mov rcx, qword [rdi + 0x40]
call fcn.140081070
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x14007fc1e
mov rax, qword [rcx]
mov edx, 1
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rdi + 0x10], rbp
mov rdx, r15
lea rcx, [rdi + 0x10]
call fcn.14005ce20
mov rdx, qword [rbx + 0x148]
or qword [rdx], 0x80
mov dword [rsp + 0xa0], esi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [0x140107050]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007fcb1
cmp dword [rsp + 0xa0], ebp
jbe 0x14007fcb1
mov r9, qword [rbx + 0x148]
test r15, r15
jne 0x14007fc7e
mov ecx, ebp
jmp 0x14007fc91
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r15
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov r8d, ecx
mov rdx, r15
lea rcx, [r9 + 0x140]
call fcn.140003940
mov rdx, qword [rbx + 0x148]
or qword [rdx], 0x100
mov dword [rsp + 0xa0], esi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [0x140107058]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
jne 0x14007fd0b
mov dword [rsp + 0xa0], esi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [0x140107060]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007fd5b
cmp dword [rsp + 0xa0], ebp
jbe 0x14007fd5b
mov rcx, r15
call fcn.14002b1a0
mov rdi, rax
movzx ecx, ax
and cx, 0x3ff
cmp cx, 1
je 0x14007fd33
cmp cx, 0x29
jne 0x14007fd42
mov ecx, 0x4a
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x14007fd5b
mov rax, qword [rbx + 0x148]
mov word [rax + 0x40], di
mov rax, qword [rbx + 0x148]
or qword [rax], 0x4000
mov dword [rsp + 0xa0], esi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [0x140107068]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007fdd1
cmp dword [rsp + 0xa0], ebp
jbe 0x14007fdc3
mov rcx, r15
call fcn.14002b1a0
mov rcx, qword [rbx + 0x148]
test rcx, rcx
je 0x14007fdb4
bt qword [rcx], 0x10
jb 0x14007fdba
mov dword [rbx + 0x174], eax
jmp 0x14007fdba
mov dword [rbx + 0x174], eax
or qword [rcx], 0x10000
jmp 0x14007fdd1
mov rax, qword [rbx + 0x148]
or qword [rax], 0x8000
mov dword [rsp + 0xa0], esi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, str.OSID
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14007ffb9
cmp dword [rsp + 0xa0], ebp
jbe 0x14007ffb9
xor r9d, r9d
mov r8w, 0x2e
mov rdx, r15
mov rcx, qword [rbx + 0x140]
call fcn.140010520
mov r13, rax
test rax, rax
je 0x14007ffb9
movabs rax, 0x8000000080000000
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], eax
mov rcx, qword [r13 + 0x10]
xor esi, esi
test rcx, rcx
jle 0x14007ff2d
nop
nop
test rsi, rsi
js 0x14007fe86
cmp rsi, rcx
jge 0x14007fe86
test rsi, rsi
js 0x14007ff27
cmp rsi, rcx
jge 0x14007ff27
mov rax, qword [r13 + 8]
mov rdi, qword [rax + rsi*8]
jmp 0x14007fe88
xor edi, edi
mov ecx, 0x7fffffff
lea rax, [0x1400fc3a8]
cmp word [rax], 0
je 0x14007fea6
add rax, 2
sub rcx, 1
jne 0x14007fe94
jmp 0x14007feb5
test rcx, rcx
je 0x14007feb5
mov eax, 0x7fffffff
sub rax, rcx
jmp 0x14007feb7
xor eax, eax
movsxd r8, eax
mov rdx, rdi
lea rcx, [0x1400fc3a8]
call fcn.1400ce2c0
test eax, eax
jne 0x14007fee5
lea r8d, [rax + 0x10]
lea rdx, [rsp + 0xa0]
mov rcx, rdi
call fcn.1400cf260
mov edi, eax
jmp 0x14007fef0
mov rcx, rdi
call fcn.1400cf2a0
mov rdi, rax
call fcn.1400cf300
cmp dword [rax], 0x22
je 0x14007ff04
call fcn.1400cf300
cmp dword [rax], 0x16
jne 0x14007ff0b
mov rdi, 0xffffffff80000000
mov dword [rsp + rsi*4 + 0x38], edi
add ebp, 1
add rsi, 1
mov rcx, qword [r13 + 0x10]
movsxd rax, ebp
cmp rax, rcx
jge 0x14007ff2d
jmp 0x14007fe60
call fcn.1400a0610
int3
mov rsi, qword [rbx + 0x148]
mov rbp, qword [rsi + 0x190]
mov r8, qword [rsi + 0x78]
test r8, r8
je 0x14007ff50
xor edx, edx
mov rcx, qword [rbp]
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r12d, r12d
lea edx, [r12 + 8]
lea r8d, [r12 + 0x14]
mov rcx, qword [rbp]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
test rax, rax
je 0x14007ff9d
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x38]
mov rdx, r9
mov rcx, rax
call fcn.1400cd500
test eax, eax
jne 0x14007ff8e
mov r12, rdi
jmp 0x14007ff9d
mov r8, rdi
xor edx, edx
mov rcx, qword [rbp]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rsi + 0x78], r12
mov rax, qword [r13]
mov edx, 1
mov rcx, r13
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov esi, dword [rsp + 0xa8]
xor ebp, ebp
mov dword [rsp + 0xa0], esi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [0x140107080]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x140080033
cmp dword [rsp + 0xa0], 0
jbe 0x140080033
mov r9, qword [rbx + 0x148]
test r15, r15
jne 0x140080000
mov ecx, ebp
jmp 0x140080013
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r15
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov r8d, ecx
mov rdx, r15
lea rcx, [r9 + 0x148]
call fcn.140003940
mov rdx, qword [rbx + 0x148]
or qword [rdx], 0x200000
mov dword [rsp + 0xa0], esi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [0x140107088]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x1400801f1
mov r13d, dword [rsp + 0xa0]
test r13d, r13d
je 0x1400801e3
mov r12, r15
cmp word [r15], 0
je 0x1400801d3
lea r14, method.CPtrArray.virtual_0
nop
nop
test r13d, r13d
jle 0x1400801c4
mov rsi, qword [rbx + 0x148]
cmp qword [rsi + 0x50], 0
jne 0x1400800e7
mov ecx, 0x30
call fcn.140091360
mov rdi, rax
mov qword [rsp + 0xa0], rax
test rax, rax
je 0x1400800e0
mov rcx, rax
call fcn.1400aa430
nop
mov qword [rdi], r14
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapCreate]
mov qword [rdi + 0x28], rax
jmp 0x1400800e3
mov rdi, rbp
mov qword [rsi + 0x50], rdi
mov rbp, qword [rsi + 0x50]
mov ecx, 0x3fffffff
mov rax, r12
cmp word [rax], 0
je 0x140080105
add rax, 2
sub rcx, 1
jne 0x1400800f3
jmp 0x14008016b
test rcx, rcx
je 0x14008016b
mov eax, 0x3fffffff
sub rax, rcx
lea rdi, [rax + rax + 2]
test rdi, rdi
jle 0x14008016b
mov r8, rdi
mov edx, 8
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rsi, rax
test rax, rax
je 0x14008016b
mov r9, rdi
mov r8, r12
mov rdx, rdi
mov rcx, rax
call fcn.1400cd500
test eax, eax
jne 0x14008015c
mov r8, rsi
mov rdx, qword [rbp + 0x10]
mov rcx, rbp
call fcn.1400aa678
jmp 0x14008016b
mov r8, rsi
xor edx, edx
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, 0x7fffffff
mov rax, r12
xor ebp, ebp
mov edx, ebp
cmp word [rax], dx
je 0x140080188
add rax, 2
sub rcx, 1
jne 0x140080177
jmp 0x14008018d
test rcx, rcx
jne 0x140080197
mov edx, 0x80070057
mov rax, rbp
jmp 0x14008019f
mov eax, 0x7fffffff
sub rax, rcx
test edx, edx
jns 0x1400801ac
mov rax, rbp
test edx, edx
cmovs rax, rbp
lea ecx, [rax + 1]
movsxd rax, ecx
lea r12, [r12 + rax*2]
sub r13d, ecx
cmp word [r12], bp
jne 0x140080090
mov r14, qword [rsp + 0x98]
mov esi, dword [rsp + 0xa8]
mov rax, qword [rbx + 0x148]
or qword [rax], 0x80000
jmp 0x1400801f1
mov rax, qword [rbx + 0x148]
or qword [rax], 0x40000
mov dword [rsp + 0xa0], esi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [0x14010708c]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x1400803a1
mov r13d, dword [rsp + 0xa0]
test r13d, r13d
je 0x1400803a1
mov r12, r15
cmp word [r15], 0
je 0x140080393
lea r14, method.CPtrArray.virtual_0
nop
nop
test r13d, r13d
jle 0x140080384
mov rsi, qword [rbx + 0x148]
cmp qword [rsi + 0x48], 0
jne 0x1400802a7
mov ecx, 0x30
call fcn.140091360
mov rdi, rax
mov qword [rsp + 0xa0], rax
test rax, rax
je 0x1400802a0
mov rcx, rax
call fcn.1400aa430
nop
mov qword [rdi], r14
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapCreate]
mov qword [rdi + 0x28], rax
jmp 0x1400802a3
mov rdi, rbp
mov qword [rsi + 0x48], rdi
mov rbp, qword [rsi + 0x48]
mov ecx, 0x3fffffff
mov rax, r12
cmp word [rax], 0
je 0x1400802c5
add rax, 2
sub rcx, 1
jne 0x1400802b3
jmp 0x14008032b
test rcx, rcx
je 0x14008032b
mov eax, 0x3fffffff
sub rax, rcx
lea rdi, [rax + rax + 2]
test rdi, rdi
jle 0x14008032b
mov r8, rdi
mov edx, 8
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rsi, rax
test rax, rax
je 0x14008032b
mov r9, rdi
mov r8, r12
mov rdx, rdi
mov rcx, rax
call fcn.1400cd500
test eax, eax
jne 0x14008031c
mov r8, rsi
mov rdx, qword [rbp + 0x10]
mov rcx, rbp
call fcn.1400aa678
jmp 0x14008032b
mov r8, rsi
xor edx, edx
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, 0x7fffffff
mov rax, r12
xor ebp, ebp
mov edx, ebp
cmp word [rax], dx
je 0x140080348
add rax, 2
sub rcx, 1
jne 0x140080337
jmp 0x14008034d
test rcx, rcx
jne 0x140080357
mov edx, 0x80070057
mov rax, rbp
jmp 0x14008035f
mov eax, 0x7fffffff
sub rax, rcx
test edx, edx
jns 0x14008036c
mov rax, rbp
test edx, edx
cmovs rax, rbp
lea ecx, [rax + 1]
movsxd rax, ecx
lea r12, [r12 + rax*2]
sub r13d, ecx
cmp word [r12], bp
jne 0x140080250
mov r14, qword [rsp + 0x98]
mov esi, dword [rsp + 0xa8]
mov rax, qword [rbx + 0x148]
or qword [rax], 0x400000
mov dword [rsp + 0xa0], esi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [0x1401011b0]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x1400803f9
cmp dword [rsp + 0xa0], 0
jbe 0x1400803f9
mov rcx, r15
call fcn.14002b1a0
mov rcx, qword [rbx + 0x148]
mov qword [rcx + 0x38], rax
mov rax, qword [rbx + 0x148]
or qword [rax], 0x8000000
mov dword [rsp + 0xa0], esi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [0x140107090]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x140080482
movzx eax, word [r15]
cmp ax, 0x57
je 0x140080472
cmp ax, 0x77
je 0x140080472
cmp ax, 0x41
je 0x140080460
cmp ax, 0x61
je 0x140080460
cmp ax, 0x4a
je 0x14008044e
cmp ax, 0x6a
jne 0x140080482
mov rax, qword [rbx + 0x148]
mov word [rax + 0x178], 0x4a
jmp 0x140080482
mov rax, qword [rbx + 0x148]
mov word [rax + 0x178], 0x41
jmp 0x140080482
mov rax, qword [rbx + 0x148]
mov word [rax + 0x178], 0x57
mov dword [rsp + 0xa0], esi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [0x140107098]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x1400804e3
movzx eax, word [r15]
test ax, ax
je 0x1400804be
cmp ax, 0x30
jne 0x1400804cb
mov rax, qword [rbx + 0x148]
mov dword [rax + 0x188], ebp
cmp word [r15], 0x31
jne 0x1400804e3
mov rax, qword [rbx + 0x148]
mov dword [rax + 0x188], 1
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, str.BDMS
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x14008050c
mov rax, qword [rbx + 0x148]
or qword [rax], 8
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x1401011b8]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x140080538
mov rax, qword [rbx + 0x148]
or qword [rax], 0x800000
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [0x1401070a0]
mov rdx, r14
mov rcx, rbx
call fcn.1400874f0
test eax, eax
je 0x140080564
mov rax, qword [rbx + 0x148]
or qword [rax], 0x10000000
test r15, r15
je 0x14008057e
mov rcx, qword [rbx + 0x140]
mov r8, r15
xor edx, edx
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret