Function at 0x1400122e0
Capabilities:
Create thread
Get uefi variable
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rsi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x9e0]
sub rsp, 0xae0
mov rax, qword [0x140093010]
xor rax, rsp
mov qword [rbp + 0x9d0], rax
mov r15, qword [rbp + 0xa50]
mov esi, r9d
mov r12, qword [rbp + 0xa58]
mov r14, rdx
mov r13, qword [rbp + 0xa60]
mov rbx, rcx
cmp r8d, 0x100
jne 0x1400123a4
xor edx, edx
lea rcx, [rbp + 0x5b0]
mov r8d, 0x208
call fcn.140043ce0
call fcn.14001df50
mov r8, rax
lea rcx, [rbp + 0x5b0]
mov edx, 0x104
call fcn.140049578
mov qword [rsp + 0x40], r14
lea rsi, [0x1400815c8]
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x30], rsi
lea rcx, str.GetVersionString
xor ebx, ebx
mov qword [rsp + 0x28], rax
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
mov edx, 0x100
call fcn.140013d10
jmp 0x140013101
cmp r8d, 0x101
jne 0x14001240b
lea rsi, [0x1400815c8]
test r15, r15
je 0x1400123d2
lea rbx, [0x140096b80]
mov r8, r15
mov rcx, rbx
mov edx, 0x104
call fcn.140049578
jmp 0x1400123d5
mov rbx, rsi
mov qword [rsp + 0x40], r14
lea rcx, str.SetAppFolder
mov qword [rsp + 0x38], rsi
xor r9d, r9d
mov qword [rsp + 0x30], rsi
xor r8d, r8d
mov qword [rsp + 0x28], rbx
mov edx, 0x101
xor ebx, ebx
mov dword [rsp + 0x20], ebx
call fcn.140013d10
jmp 0x140013101
cmp r8d, 0x102
jne 0x14001241e
call fcn.140013830
jmp 0x140013101
mov qword [rsp + 0xb30], rdi
cmp r8d, 0x103
jne 0x14001243e
mov edx, 1
call fcn.140013c40
jmp 0x1400130f9
cmp r8d, 0x200
jne 0x140012558
mov ecx, dword [reloc.OLEAUT32.dll_SysReAllocString]
xor ebx, ebx
cmp ecx, 2
jne 0x14001253d
cmp dword [0x140096714], ebx
lea rax, str.SOFTWAREASUSASUS_Switch
lea rdx, str.SOFTWAREASUSASUS_System_Control_InterfaceAsusSwitch
mov dword [reloc.OLEAUT32.dll_SysReAllocString], ebx
cmovne rdx, rax
mov qword [rsp + 0x50], rbx
lea rax, [rsp + 0x50]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
mov esi, ebx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
test eax, eax
jne 0x140012537
mov rcx, qword [rsp + 0x50]
lea rax, [rsp + 0x5c]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x64]
lea rax, [rsp + 0x60]
mov dword [rsp + 0x5c], 4
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.CheckASUS
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
lea edi, [rbx + 1]
test eax, eax
jne 0x1400124ed
cmp dword [rsp + 0x60], edi
cmove esi, edi
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test esi, esi
je 0x140012537
movzx eax, word [0x140096750]
cmp ax, word [0x1400815c8]
jne 0x140012511
call fcn.140018270
lea rdx, [0x140081d30]
lea rcx, [0x140096750]
call fcn.140048b10
mov ecx, dword [reloc.OLEAUT32.dll_SysReAllocString]
test eax, eax
cmove ecx, edi
mov dword [reloc.OLEAUT32.dll_SysReAllocString], ecx
jmp 0x14001253d
mov ecx, dword [reloc.OLEAUT32.dll_SysReAllocString]
cmp ecx, 1
mov r8d, ebx
mov edx, 0x200
lea rcx, str.GetASUSProduct
sete r8b
jmp 0x1400130d2
cmp r8d, 0x500
jne 0x140012624
mov edx, dword [rcx]
lea eax, [r9 - 1]
xor ebx, ebx
cmp eax, 1
jbe 0x1400125ea
cmp esi, 3
jne 0x1400125d1
mov qword [rsp + 0x28], rbx
lea r8, [0x140019820]
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
test rax, rax
je 0x1400125bb
mov rcx, rax
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov edi, 1
lea rcx, str.LaunchOptions
mov r8d, edi
mov edx, 0x500
jmp 0x1400130d2
mov edi, ebx
lea rcx, str.LaunchOptions
mov r8d, ebx
mov edx, 0x500
jmp 0x1400130d2
mov edi, 0xffffffff
lea rcx, str.LaunchOptions
mov r8d, edi
mov edx, 0x500
jmp 0x1400130d2
mov qword [rsp + 0x40], rbx
xor ecx, ecx
mov qword [rsp + 0x38], rbx
mov r8d, 0x500
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
call fcn.14000c1d0
mov edi, eax
lea rcx, str.LaunchOptions
mov r8d, eax
mov edx, 0x500
jmp 0x1400130d2
cmp r8d, 0x501
jne 0x140012744
xor ebx, ebx
mov r15d, ebx
mov qword [rsp + 0x50], rbx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x50]
lea edx, [rbx + 0x28]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_OpenProcessToken]
lea edi, [rbx + 1]
test eax, eax
je 0x1400126a8
lea r8, [rsp + 0x6c]
xor ecx, ecx
lea rdx, str.SeSystemEnvironmentPrivilege
call qword [sym.imp.api_ms_win_security_lsalookup_l2_1_0.dll_LookupPrivilegeValueW]
mov rcx, qword [rsp + 0x50]
lea r8, [rsp + 0x68]
xor r9d, r9d
mov qword [rsp + 0x28], rbx
xor edx, edx
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x74], 2
mov qword [rsp + 0x20], rbx
call qword [sym.imp.api_ms_win_security_base_l1_1_0.dll_AdjustTokenPrivileges]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x1400126a8
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov r9d, edi
lea r8, [rsp + 0x58]
lea rdx, str.607005d5_3f75_4b2e_98f0_85ba66797a3e
lea rcx, str.CloudRecoverySupport
call qword [sym.imp.api_ms_win_core_firmware_l1_1_0.dll_GetFirmwareEnvironmentVariableW]
test eax, eax
je 0x1400126d4
cmp byte [rsp + 0x58], dil
mov eax, ebx
sete al
jmp 0x14001271d
xor edx, edx
lea rcx, [rbp + 0x7c0]
mov r8d, 0x100
call fcn.140043ce0
mov r9d, 0x100
lea r8, [rbp + 0x7c0]
lea rdx, str.91b89306_5bac_4ae0_aab3_207ec12e989b
lea rcx, str.WRSG
call qword [sym.imp.api_ms_win_core_firmware_l1_1_0.dll_GetFirmwareEnvironmentVariableW]
test eax, eax
jne 0x140012721
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 0x7a
je 0x140012721
call fcn.140010d20
test eax, eax
je 0x14001272c
call fcn.140006620
test eax, eax
cmovne r15d, edi
or r15d, 0x10
lea rcx, str.GetOptions
mov r8d, r15d
mov edx, 0x501
jmp 0x1400130d2
cmp r8d, 0x800
jne 0x1400127f5
mov eax, dword [0x140096d88]
xor ebx, ebx
mov edi, dword [rcx]
cmp eax, 1
jne 0x140012782
cmp esi, 3
jne 0x1400127d7
cmp dword [0x1400a0a48], eax
jne 0x14001278f
lea edx, [rbx + 0x66]
mov ecx, edi
call fcn.14001a110
mov eax, dword [0x140096d88]
cmp eax, 1
je 0x14001278f
cmp eax, 2
jne 0x1400127dc
lea eax, [rsi - 2]
cmp eax, 1
ja 0x1400127dc
mov eax, dword [rbp + 0xa40]
mov r9d, esi
mov qword [rsp + 0x40], rbx
mov r8d, 0x820
mov qword [rsp + 0x38], rbx
mov edx, edi
mov qword [rsp + 0x30], rbx
mov ecx, 1
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call fcn.14000c1d0
mov edi, eax
lea rcx, str.NetworkConnection
mov r8d, eax
mov edx, 0x800
jmp 0x1400130d2
cmp esi, 1
je 0x14001278f
mov edi, 0xffffffff
lea rcx, str.NetworkConnection
mov r8d, edi
mov edx, 0x800
jmp 0x1400130d2
cmp r8d, 0x900
jne 0x140012866
mov edx, dword [rcx]
xor ebx, ebx
cmp dword [0x140096d88], 1
jne 0x14001284d
mov qword [rsp + 0x40], rbx
mov edi, 1
mov qword [rsp + 0x38], rbx
mov r9d, edi
mov qword [rsp + 0x30], rbx
mov r8d, 0x920
mov dword [rsp + 0x28], ebx
mov ecx, edi
mov dword [rsp + 0x20], ebx
call fcn.14000c1d0
mov edi, eax
lea rcx, str.GetPinCode
mov r8d, eax
mov edx, 0x900
jmp 0x1400130d2
mov edi, 0xffffffff
lea rcx, str.GetPinCode
mov r8d, edi
mov edx, 0x900
jmp 0x1400130d2
cmp r8d, 0x901
jne 0x1400128d0
mov edx, dword [rcx]
xor ebx, ebx
cmp dword [0x140096d88], 2
mov r15d, dword [rbp + 0xa40]
jne 0x1400128b4
mov qword [rsp + 0x40], rbx
mov edi, 1
mov qword [rsp + 0x38], rbx
mov r9d, edi
mov qword [rsp + 0x30], rbx
mov r8d, 0x921
mov dword [rsp + 0x28], ebx
mov ecx, edi
mov dword [rsp + 0x20], r15d
call fcn.14000c1d0
mov edi, eax
jmp 0x1400128b9
mov edi, 0xffffffff
mov r9d, r15d
lea rcx, str.SetPinCode
mov r8d, edi
mov edx, 0x901
jmp 0x1400130d5
cmp r8d, 0x1000
jne 0x1400128f1
mov r8d, dword [0x140096d88]
lea rcx, str.GetComputerRole
mov edx, 0x1000
jmp 0x1400130d0
cmp r8d, 0x1001
jne 0x140012a64
mov r13d, dword [rcx]
xor ebx, ebx
cmp esi, 4
jbe 0x140012910
lea edi, [rbx - 1]
jmp 0x140012a03
mov r12d, dword [0x140093b9c]
cmp r12d, 0xffffffff
je 0x14001299a
cmp r12d, r13d
je 0x14001299a
cmp dword [0x140096d88], ebx
je 0x14001299a
cmp r12d, 0xffffffff
je 0x14001299a
mov edx, dword [0x14009d850]
mov ecx, ebx
test edx, edx
je 0x14001299a
lea r8, [0x14009d7d0]
mov eax, ecx
mov rdi, qword [r8 + rax*8]
cmp dword [rdi], r12d
jne 0x140012954
cmp qword [rdi + 0x18], rbx
jne 0x14001295c
inc ecx
cmp ecx, edx
jb 0x140012943
jmp 0x14001299a
test rdi, rdi
je 0x14001299a
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0x630
call fcn.140043ce0
lea rdx, [rbp - 0x80]
mov dword [rbp - 0x80], r12d
mov rcx, rdi
mov dword [rbp - 0x7c], 0x3000
mov dword [rbp - 0x74], 5
call fcn.140014300
mov rcx, qword [rdi + 0x18]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_SetEvent]
mov qword [rsp + 0x40], rbx
mov r9d, esi
mov qword [rsp + 0x38], rbx
mov r8d, 0x1001
mov qword [rsp + 0x30], rbx
mov edx, r13d
mov dword [rsp + 0x28], ebx
xor ecx, ecx
mov dword [rsp + 0x20], ebx
mov dword [0x140093b9c], r13d
mov dword [0x140096d88], esi
call fcn.14000c1d0
cmp esi, 2
jne 0x140012a01
mov qword [rsp + 0x40], rbx
lea ecx, [rsi - 1]
mov qword [rsp + 0x38], rbx
mov r9d, esi
mov qword [rsp + 0x30], r15
mov r8d, 0x1021
mov dword [rsp + 0x28], ebx
mov edx, r13d
mov dword [rsp + 0x20], ebx
call fcn.14000c1d0
mov edi, esi
xor edx, edx
lea rcx, [rbp + 0x5b0]
mov r8d, 0x208
call fcn.140043ce0
mov r8, r15
lea rcx, [rbp + 0x5b0]
mov edx, 0x104
call fcn.140049578
mov qword [rsp + 0x40], r14
lea rsi, [0x1400815c8]
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x30], rsi
lea rcx, str.SetComputerRole
mov qword [rsp + 0x28], rax
xor r9d, r9d
mov r8d, edi
mov edx, 0x1001
jmp 0x1400130f0
cmp r8d, 0x1010
jne 0x140012b1a
xor edx, edx
lea rcx, [rbp + 0x7c0]
mov r8d, 0x208
call fcn.140043ce0
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0x208
call fcn.140043ce0
xor edx, edx
lea rcx, [rbp + 0x5b0]
mov r8d, 0x208
call fcn.140043ce0
cmp dword [0x140096d88], 4
jne 0x140012ad6
mov r9d, dword [rbx]
lea r8, [rbp + 0x5b0]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x7c0]
call fcn.140010710
neg eax
sbb edi, edi
and edi, 2
jmp 0x140012adb
mov edi, 0xffffffff
mov qword [rsp + 0x40], r14
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x38], rax
lea rcx, str.GetDropboxToken
lea rax, [rbp - 0x80]
xor ebx, ebx
mov qword [rsp + 0x30], rax
xor r9d, r9d
lea rax, [rbp + 0x7c0]
mov r8d, edi
mov qword [rsp + 0x28], rax
mov edx, 0x1010
jmp 0x1400130f0
cmp r8d, 0x1011
jne 0x140012c2b
mov edi, dword [rcx]
xor ebx, ebx
cmp dword [0x140096d88], 4
jne 0x140012b77
mov qword [rsp + 0x40], r13
xor r9d, r9d
mov qword [rsp + 0x38], r12
mov r8d, 0x1000
mov qword [rsp + 0x30], r15
mov edx, edi
mov dword [rsp + 0x28], ebx
xor ecx, ecx
mov dword [rsp + 0x20], ebx
call fcn.14000c1d0
mov r9d, edi
mov r8, r13
mov rdx, r12
mov rcx, r15
call fcn.1400108c0
neg eax
sbb edi, edi
and edi, 2
jmp 0x140012b7c
mov edi, 0xffffffff
xor edx, edx
lea rcx, [rbp + 0x7c0]
mov r8d, 0x208
call fcn.140043ce0
mov r8, r15
lea rcx, [rbp + 0x7c0]
mov edx, 0x104
call fcn.140049578
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0x208
call fcn.140043ce0
mov r8, r12
lea rcx, [rbp - 0x80]
mov edx, 0x104
call fcn.140049578
xor edx, edx
lea rcx, [rbp + 0x5b0]
mov r8d, 0x208
call fcn.140043ce0
mov r8, r13
lea rcx, [rbp + 0x5b0]
mov edx, 0x104
call fcn.140049578
mov qword [rsp + 0x40], r14
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x38], rax
lea rcx, str.SetDropboxToken
lea rax, [rbp - 0x80]
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov r8d, edi
lea rax, [rbp + 0x7c0]
mov edx, 0x1011
mov qword [rsp + 0x28], rax
jmp 0x1400130f0
cmp r8d, 0x1100
jne 0x140012c54
mov edx, dword [rbp + 0xa40]
mov r9, r12
mov qword [rsp + 0x28], r14
mov r8, r15
mov qword [rsp + 0x20], r13
call fcn.140013130
jmp 0x1400130f9
cmp r8d, 0x1101
jne 0x140012d82
xor edx, edx
lea rcx, [rbp + 0x5b0]
mov r8d, 0x208
call fcn.140043ce0
mov r8, r15
lea rcx, [rbp + 0x5b0]
mov edx, 0x104
call fcn.140049578
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0x208
call fcn.140043ce0
mov r8, r12
lea rcx, [rbp - 0x80]
mov edx, 0x104
call fcn.140049578
xor edx, edx
lea rcx, [rbp + 0x7c0]
mov r8d, 0x208
call fcn.140043ce0
mov r8, r13
lea rcx, [rbp + 0x7c0]
mov edx, 0x104
call fcn.140049578
mov edx, dword [rbx]
xor ebx, ebx
mov eax, dword [0x140096d88]
mov esi, dword [rbp + 0xa40]
cmp eax, 2
jne 0x140012cfa
mov edi, 1
mov r8d, 0x1121
mov r9d, edi
mov ecx, edi
jmp 0x140012d15
add eax, 0xfffffffd
cmp eax, 1
jbe 0x140012d09
mov edi, 0xffffffff
jmp 0x140012d45
xor ecx, ecx
mov r8d, 0x1101
lea r9d, [rcx + 1]
lea rax, [rbp + 0x7c0]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], esi
call fcn.14000c1d0
mov edi, eax
mov qword [rsp + 0x40], r14
lea rax, [rbp + 0x7c0]
mov qword [rsp + 0x38], rax
lea rcx, str.GetFileCollectionFiles
lea rax, [rbp - 0x80]
mov r9d, esi
mov qword [rsp + 0x30], rax
mov r8d, edi
lea rax, [rbp + 0x5b0]
mov edx, 0x1101
mov qword [rsp + 0x28], rax
jmp 0x1400130f0
cmp r8d, 0x1300
jne 0x140012e73
xor edx, edx
lea rcx, [rbp + 0x5b0]
mov r8d, 0x208
call fcn.140043ce0
mov r8, r15
lea rcx, [rbp + 0x5b0]
mov edx, 0x104
call fcn.140049578
mov edx, dword [rbx]
xor ebx, ebx
mov eax, dword [0x140096d88]
cmp eax, 2
jne 0x140012dfd
mov qword [rsp + 0x40], rbx
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x38], rbx
mov edi, 1
mov qword [rsp + 0x30], rax
mov r9d, edi
mov dword [rsp + 0x28], ebx
mov r8d, 0x1320
mov ecx, edi
mov dword [rsp + 0x20], ebx
call fcn.14000c1d0
mov edi, eax
jmp 0x140012e3a
cmp eax, 3
jne 0x140012e35
mov qword [rsp + 0x40], rbx
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x38], rbx
xor ecx, ecx
mov qword [rsp + 0x30], rax
mov r8d, 0x1300
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
lea r9d, [rcx + 1]
call fcn.14000c1d0
mov edi, eax
jmp 0x140012e3a
mov edi, 0xffffffff
mov qword [rsp + 0x40], r14
lea rsi, [0x1400815c8]
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x30], rsi
lea rcx, str.GetSystemSettingSupported
mov qword [rsp + 0x28], rax
xor r9d, r9d
mov r8d, edi
mov edx, 0x1300
jmp 0x1400130f0
cmp r8d, 0x1400
jne 0x140012f68
xor edx, edx
lea rcx, [rbp + 0x5b0]
mov r8d, 0x208
call fcn.140043ce0
mov r8, r15
lea rcx, [rbp + 0x5b0]
mov edx, 0x104
call fcn.140049578
mov edx, dword [rbx]
xor ebx, ebx
mov eax, dword [0x140096d88]
cmp eax, 2
jne 0x140012eee
mov qword [rsp + 0x40], rbx
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x38], rbx
mov edi, 1
mov qword [rsp + 0x30], rax
mov r9d, edi
mov dword [rsp + 0x28], edi
mov r8d, 0x1420
mov ecx, edi
mov dword [rsp + 0x20], ebx
call fcn.14000c1d0
mov edi, eax
jmp 0x140012f2f
cmp eax, 3
jne 0x140012f2a
mov qword [rsp + 0x40], rbx
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x38], rbx
mov edi, 1
mov qword [rsp + 0x30], rax
mov r9d, edi
mov dword [rsp + 0x28], edi
xor ecx, ecx
mov r8d, 0x1400
mov dword [rsp + 0x20], ebx
call fcn.14000c1d0
mov edi, eax
jmp 0x140012f2f
mov edi, 0xffffffff
mov qword [rsp + 0x40], r14
lea rsi, [0x1400815c8]
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x30], rsi
lea rcx, str.GetApplicationSupported
mov qword [rsp + 0x28], rax
xor r9d, r9d
mov r8d, edi
mov edx, 0x1400
jmp 0x1400130f0
cmp r8d, 0x2000
jne 0x140012f84
mov r9, r14
mov r8, r12
mov rdx, r15
call fcn.140013400
jmp 0x1400130f9
cmp r8d, 0x2100
jne 0x14001309f
xor edx, edx
lea rcx, [rbp + 0x7c0]
mov r8d, 0x208
call fcn.140043ce0
mov r8, r15
lea rcx, [rbp + 0x7c0]
mov edx, 0x104
call fcn.140049578
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0x208
call fcn.140043ce0
mov r8, r12
lea rcx, [rbp - 0x80]
mov edx, 0x104
call fcn.140049578
xor edx, edx
lea rcx, [rbp + 0x5b0]
mov r8d, 0x208
call fcn.140043ce0
mov r8, r13
lea rcx, [rbp + 0x5b0]
mov edx, 0x104
call fcn.140049578
mov eax, dword [0x140096d88]
cmp eax, 3
jne 0x140013060
mov ecx, dword [rbp + 0xa40]
lea eax, [rcx - 1]
cmp eax, 1
jbe 0x140013073
mov edi, 0xffffffff
mov qword [rsp + 0x40], r14
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x38], rax
lea rcx, str.SetBackupRestore
lea rax, [rbp - 0x80]
xor ebx, ebx
mov qword [rsp + 0x30], rax
xor r9d, r9d
lea rax, [rbp + 0x7c0]
mov r8d, edi
mov qword [rsp + 0x28], rax
mov edx, 0x2100
jmp 0x1400130f0
cmp eax, 4
jne 0x14001301c
mov ecx, dword [rbp + 0xa40]
lea eax, [rcx - 4]
cmp eax, 1
ja 0x14001301c
mov eax, dword [rbp + 0xa48]
lea r9, [rbp - 0x80]
mov edx, dword [rbx]
lea r8, [rbp + 0x7c0]
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x20], rax
call fcn.14001a360
mov edi, eax
jmp 0x140013021
cmp r8d, 0x3000
jne 0x1400130af
call fcn.1400135f0
jmp 0x1400130f9
cmp r8d, 0x3001
jne 0x1400130f9
mov ecx, dword [rcx]
mov edx, esi
call fcn.1400198d0
mov r8d, eax
lea rcx, str.SetProgress
mov edx, 0x3001
xor ebx, ebx
xor r9d, r9d
lea rsi, [0x1400815c8]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], ebx
call fcn.140013d10
mov rdi, qword [rsp + 0xb30]
mov rcx, qword [rbp + 0x9d0]
xor rcx, rsp
call fcn.14001f4e0
add rsp, 0xae0
pop r15
pop r14
pop r13
pop r12
pop rsi
pop rbx
pop rbp
ret