Function at 0x140028388
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2160]
mov eax, 0x2260
call fcn.14003d0d0
sub rsp, rax
mov rax, qword [0x1400502a8]
xor rax, rsp
mov qword [rbp + 0x2150], rax
xor edi, edi
mov qword [rsp + 0x38], r8
mov r14, r9
mov rsi, r8
mov r12, rdx
lea r13d, [rdi + 1]
test r9, r9
je 0x14002998b
cmp qword [rdx], rdi
je 0x1400299a1
mov rcx, qword [r8]
test rcx, rcx
je 0x14002998b
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14002998b
mov rcx, qword [rsi]
lea rdx, str.ServiceInfo
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140028599
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028431
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, [0x1400467e8]
lea rcx, [rsp + 0x30]
call fcn.14001bf20
or rsi, 0xffffffffffffffff
lea r15d, [rsi + 3]
test eax, eax
jne 0x1400284d3
mov rcx, qword [r14]
test rcx, rcx
je 0x140028465
call fcn.14003c408
mov qword [r14], rdi
lea rax, [rbp + 0x150]
mov rbx, rsi
inc rbx
cmp word [rax + rbx*2], di
jne 0x14002846f
add rbx, r13
mov rax, r15
mul rbx
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [r14], rax
test rax, rax
je 0x1400284bb
lea r8, [rbp + 0x150]
mov rdx, rbx
mov rcx, rax
call fcn.140001470
test eax, eax
jns 0x1400284bb
mov rcx, qword [r14]
test rcx, rcx
je 0x1400284bb
call fcn.14003c408
mov qword [r14], rdi
lea r8, [rbp + 0x150]
mov ecx, 3
lea rdx, str.The_XML_default_service_is:__S._r_n
call fcn.1400168a8
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400284ee
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.ContentPartner
lea rcx, [rsp + 0x30]
call fcn.14001bf20
test eax, eax
jne 0x140029962
lea rbx, [r14 + 0xa0]
test rbx, rbx
je 0x140029962
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002852e
call fcn.14003c408
mov qword [rbx], rdi
lea rax, [rbp + 0x150]
mov rdi, rsi
xor ecx, ecx
inc rdi
cmp word [rax + rdi*2], cx
jne 0x14002853a
add rdi, r13
mov rax, r15
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
xor esi, esi
mov qword [rbx], rax
test rax, rax
je 0x140029962
lea r8, [rbp + 0x150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
test eax, eax
jns 0x140029962
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029962
call fcn.14003c408
mov qword [rbx], rsi
jmp 0x140029962
mov rcx, qword [rsi]
lea rdx, str.FriendlyName
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x1400285f4
mov rcx, qword [r12]
lea rdx, [rsp + 0x38]
mov qword [rsp + 0x38], rdi
mov rax, qword [rcx]
mov rax, qword [rax + 0xd0]
call qword [0x14003f118]
mov r13d, eax
test eax, eax
js 0x140028658
mov rdx, qword [rsp + 0x38]
lea rcx, [r14 + 0x18]
call fcn.140016d18
lea r8, str.FriendlyName
lea rdx, [0x140045e30]
jmp 0x140028649
mov rcx, qword [rsi]
lea rdx, str.DESCRIPTION
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140028668
mov rcx, qword [r12]
lea rdx, [rsp + 0x38]
mov qword [rsp + 0x38], rdi
mov rax, qword [rcx]
mov rax, qword [rax + 0xd0]
call qword [0x14003f118]
mov r13d, eax
test eax, eax
js 0x140028658
mov rdx, qword [rsp + 0x38]
lea rcx, [r14 + 0x20]
call fcn.140016d18
lea r8, str.DESCRIPTION
lea rdx, str.XML_Parser:_Parsing_element__S:__S._r_n
mov r9, qword [rsp + 0x38]
mov ecx, 6
call fcn.1400168a8
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x140029967
mov rcx, qword [rsi]
lea rdx, str.Color
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140028832
mov rcx, qword [r12]
mov word [rbp + 0x150], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400286a2
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.MediaPlayer
lea rcx, [rsp + 0x30]
call fcn.14001bf20
or rsi, 0xffffffffffffffff
lea r15d, [rsi + 7]
test eax, eax
jne 0x140028763
lea rbx, [r14 + 0xc8]
test rbx, rbx
je 0x140028746
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400286e6
call fcn.14003c408
mov qword [rbx], rdi
lea rcx, [rbp + 0x150]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x1400286f2
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x140028744
lea r8, [rbp + 0x150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140028746
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028746
call fcn.14003c408
mov qword [rbx], rdi
jmp 0x140028746
xor edi, edi
lea r9, [rbp + 0x150]
mov ecx, r15d
lea r8, str.MediaPlayer
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.1400168a8
mov rcx, qword [r12]
mov word [rbp + 0x150], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028785
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.MediaPlayerText
lea rcx, [rsp + 0x30]
call fcn.14001bf20
test eax, eax
jne 0x140029962
lea rbx, [r14 + 0xd0]
test rbx, rbx
je 0x14002881f
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400287c1
call fcn.14003c408
mov qword [rbx], rdi
lea rax, [rbp + 0x150]
mov rdi, rsi
xor r14d, r14d
inc rdi
cmp word [rax + rdi*2], r14w
jne 0x1400287ce
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x14002881f
lea r8, [rbp + 0x150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x14002881f
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002881f
call fcn.14003c408
mov qword [rbx], rdi
lea r9, [rbp + 0x150]
lea r8, str.MediaPlayerText
jmp 0x140029953
mov rcx, qword [rsi]
lea rdx, str.ServiceTask1
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140028aba
mov rcx, qword [r12]
mov word [rbp + 0x150], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x14002886c
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.ButtonText
lea rcx, [rsp + 0x30]
call fcn.14001bd04
or rsi, 0xffffffffffffffff
lea r15d, [rsi + 7]
test eax, eax
jne 0x1400289eb
lea rax, [rbp + 0x150]
mov rdx, rsi
inc rdx
cmp word [rax + rdx*2], di
jne 0x14002889e
cmp rdx, 0x104
jae 0x140028952
mov r8d, r13d
mov rcx, rdi
movzx eax, word [rbp + rcx*2 + 0x150]
cmp ax, 0x5c
je 0x1400288ea
cmp word [rbp + rcx*2 + 0x152], 0x6e
je 0x1400288ea
cmp rcx, rdx
jae 0x1400288e7
mov word [rsp + rcx*2 + 0x40], ax
add rcx, r13
cmp rcx, rdx
jbe 0x1400288ba
jmp 0x1400288ea
mov r8d, edi
cmp rcx, rdx
sbb eax, eax
test r8d, eax
je 0x140028929
mov r8d, 0xa
lea rax, [rcx + 2]
mov word [rsp + rcx*2 + 0x40], r8w
add rcx, r13
jmp 0x140028924
movzx r8d, word [rbp + rax*2 + 0x150]
test r8w, r8w
je 0x140028929
mov word [rsp + rcx*2 + 0x40], r8w
add rcx, r13
add rax, r13
cmp rax, rdx
jbe 0x140028909
add rcx, rcx
cmp rcx, 0x20a
jae 0x1400299d9
mov word [rsp + rcx + 0x40], di
lea r8, [rsp + 0x40]
lea rcx, [rbp + 0x150]
inc rdx
call fcn.140001470
lea rbx, [r14 + 0xd8]
test rbx, rbx
je 0x1400289ce
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002896e
call fcn.14003c408
mov qword [rbx], rdi
lea rcx, [rbp + 0x150]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x14002897a
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x1400289cc
lea r8, [rbp + 0x150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x1400289ce
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400289ce
call fcn.14003c408
mov qword [rbx], rdi
jmp 0x1400289ce
xor edi, edi
lea r9, [rbp + 0x150]
mov ecx, r15d
lea r8, str.ButtonText
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.1400168a8
mov rcx, qword [r12]
mov word [rbp + 0x150], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028a0d
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.ButtonTip
lea rcx, [rsp + 0x30]
call fcn.14001bd04
test eax, eax
jne 0x140029962
lea rbx, [r14 + 0xf0]
test rbx, rbx
je 0x140028aa7
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028a49
call fcn.14003c408
mov qword [rbx], rdi
lea rax, [rbp + 0x150]
mov rdi, rsi
xor r14d, r14d
inc rdi
cmp word [rax + rdi*2], r14w
jne 0x140028a56
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x140028aa7
lea r8, [rbp + 0x150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140028aa7
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028aa7
call fcn.14003c408
mov qword [rbx], rdi
lea r9, [rbp + 0x150]
lea r8, str.ButtonTip
jmp 0x140029953
mov rcx, qword [rsi]
lea rdx, str.ServiceTask2
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140028cf1
mov rcx, qword [r12]
mov word [rbp + 0x150], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028af4
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.ButtonText
lea rcx, [rsp + 0x30]
call fcn.14001bd04
or rsi, 0xffffffffffffffff
lea r15d, [rsi + 7]
test eax, eax
jne 0x140028c73
lea rax, [rbp + 0x150]
mov rdx, rsi
inc rdx
cmp word [rax + rdx*2], di
jne 0x140028b26
cmp rdx, 0x104
jae 0x140028bda
mov r8d, r13d
mov rcx, rdi
movzx eax, word [rbp + rcx*2 + 0x150]
cmp ax, 0x5c
je 0x140028b72
cmp word [rbp + rcx*2 + 0x152], 0x6e
je 0x140028b72
cmp rcx, rdx
jae 0x140028b6f
mov word [rsp + rcx*2 + 0x40], ax
add rcx, r13
cmp rcx, rdx
jbe 0x140028b42
jmp 0x140028b72
mov r8d, edi
cmp rcx, rdx
sbb eax, eax
test r8d, eax
je 0x140028bb1
mov r8d, 0xa
lea rax, [rcx + 2]
mov word [rsp + rcx*2 + 0x40], r8w
add rcx, r13
jmp 0x140028bac
movzx r8d, word [rbp + rax*2 + 0x150]
test r8w, r8w
je 0x140028bb1
mov word [rsp + rcx*2 + 0x40], r8w
add rcx, r13
add rax, r13
cmp rax, rdx
jbe 0x140028b91
add rcx, rcx
cmp rcx, 0x20a
jae 0x1400299d9
mov word [rsp + rcx + 0x40], di
lea r8, [rsp + 0x40]
lea rcx, [rbp + 0x150]
inc rdx
call fcn.140001470
lea rbx, [r14 + 0xe0]
test rbx, rbx
je 0x140028c56
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028bf6
call fcn.14003c408
mov qword [rbx], rdi
lea rcx, [rbp + 0x150]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140028c02
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x140028c54
lea r8, [rbp + 0x150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140028c56
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028c56
call fcn.14003c408
mov qword [rbx], rdi
jmp 0x140028c56
xor edi, edi
lea r9, [rbp + 0x150]
mov ecx, r15d
lea r8, str.ButtonText
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.1400168a8
mov rcx, qword [r12]
mov word [rbp + 0x150], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028c95
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.ButtonTip
lea rcx, [rsp + 0x30]
call fcn.14001bd04
test eax, eax
jne 0x140029962
lea rbx, [r14 + 0xf8]
test rbx, rbx
je 0x140028aa7
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028cd5
call fcn.14003c408
mov qword [rbx], rdi
lea rax, [rbp + 0x150]
mov rdi, rsi
xor r14d, r14d
inc rdi
cmp word [rax + rdi*2], r14w
jne 0x140028ce2
jmp 0x140028a60
mov rcx, qword [rsi]
lea rdx, str.ServiceTask3
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140028f28
mov rcx, qword [r12]
mov word [rbp + 0x150], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028d2b
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.ButtonText
lea rcx, [rsp + 0x30]
call fcn.14001bd04
or rsi, 0xffffffffffffffff
lea r15d, [rsi + 7]
test eax, eax
jne 0x140028eaa
lea rax, [rbp + 0x150]
mov rdx, rsi
inc rdx
cmp word [rax + rdx*2], di
jne 0x140028d5d
cmp rdx, 0x104
jae 0x140028e11
mov r8d, r13d
mov rcx, rdi
movzx eax, word [rbp + rcx*2 + 0x150]
cmp ax, 0x5c
je 0x140028da9
cmp word [rbp + rcx*2 + 0x152], 0x6e
je 0x140028da9
cmp rcx, rdx
jae 0x140028da6
mov word [rsp + rcx*2 + 0x40], ax
add rcx, r13
cmp rcx, rdx
jbe 0x140028d79
jmp 0x140028da9
mov r8d, edi
cmp rcx, rdx
sbb eax, eax
test r8d, eax
je 0x140028de8
mov r8d, 0xa
lea rax, [rcx + 2]
mov word [rsp + rcx*2 + 0x40], r8w
add rcx, r13
jmp 0x140028de3
movzx r8d, word [rbp + rax*2 + 0x150]
test r8w, r8w
je 0x140028de8
mov word [rsp + rcx*2 + 0x40], r8w
add rcx, r13
add rax, r13
cmp rax, rdx
jbe 0x140028dc8
add rcx, rcx
cmp rcx, 0x20a
jae 0x1400299d9
mov word [rsp + rcx + 0x40], di
lea r8, [rsp + 0x40]
lea rcx, [rbp + 0x150]
inc rdx
call fcn.140001470
lea rbx, [r14 + 0xe8]
test rbx, rbx
je 0x140028e8d
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028e2d
call fcn.14003c408
mov qword [rbx], rdi
lea rcx, [rbp + 0x150]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140028e39
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x140028e8b
lea r8, [rbp + 0x150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140028e8d
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028e8d
call fcn.14003c408
mov qword [rbx], rdi
jmp 0x140028e8d
xor edi, edi
lea r9, [rbp + 0x150]
mov ecx, r15d
lea r8, str.ButtonText
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.1400168a8
mov rcx, qword [r12]
mov word [rbp + 0x150], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028ecc
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.ButtonTip
lea rcx, [rsp + 0x30]
call fcn.14001bd04
test eax, eax
jne 0x140029962
lea rbx, [r14 + 0x100]
test rbx, rbx
je 0x140028aa7
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028f0c
call fcn.14003c408
mov qword [rbx], rdi
lea rax, [rbp + 0x150]
mov rdi, rsi
xor r14d, r14d
inc rdi
cmp word [rax + rdi*2], r14w
jne 0x140028f19
jmp 0x140028a60
mov rcx, qword [rsi]
lea rdx, str.Install
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140029526
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028f5b
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.CodeURL
lea rcx, [rsp + 0x30]
call fcn.14001bf20
or rsi, 0xffffffffffffffff
lea r15d, [rsi + 7]
test eax, eax
jne 0x140029019
lea rbx, [r14 + 0x48]
test rbx, rbx
je 0x140028ffc
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028f9c
call fcn.14003c408
mov qword [rbx], rdi
lea rcx, [rbp + 0x150]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140028fa8
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x140028ffa
lea r8, [rbp + 0x150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140028ffc
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028ffc
call fcn.14003c408
mov qword [rbx], rdi
jmp 0x140028ffc
xor edi, edi
lea r9, [rbp + 0x150]
mov ecx, r15d
lea r8, str.CodeURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.1400168a8
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140029034
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.CatalogURL
lea rcx, [rsp + 0x30]
call fcn.14001bf20
test eax, eax
jne 0x1400290ea
lea rbx, [r14 + 0x50]
test rbx, rbx
je 0x1400290cd
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002906d
call fcn.14003c408
mov qword [rbx], rdi
lea rcx, [rbp + 0x150]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140029079
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x1400290cb
lea r8, [rbp + 0x150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x1400290cd
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400290cd
call fcn.14003c408
mov qword [rbx], rdi
jmp 0x1400290cd
xor edi, edi
lea r9, [rbp + 0x150]
mov ecx, r15d
lea r8, str.CatalogURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.1400168a8
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140029105
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.EULAURL
lea rcx, [rsp + 0x30]
call fcn.14001bf20
test eax, eax
jne 0x1400291bb
lea rbx, [r14 + 0x28]
test rbx, rbx
je 0x14002919e
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002913e
call fcn.14003c408
mov qword [rbx], rdi
lea rcx, [rbp + 0x150]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x14002914a
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x14002919c
lea r8, [rbp + 0x150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x14002919e
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002919e
call fcn.14003c408
mov qword [rbx], rdi
jmp 0x14002919e
xor edi, edi
lea r9, [rbp + 0x150]
mov ecx, r15d
lea r8, str.EULAURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.1400168a8
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400291d6
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.PrivacyInfoURL
lea rcx, [rsp + 0x30]
call fcn.14001bf20
test eax, eax
jne 0x14002928c
lea rbx, [r14 + 0x40]
test rbx, rbx
je 0x14002926f
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002920f
call fcn.14003c408
mov qword [rbx], rdi
lea rcx, [rbp + 0x150]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x14002921b
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x14002926d
lea r8, [rbp + 0x150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x14002926f
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002926f
call fcn.14003c408
mov qword [rbx], rdi
jmp 0x14002926f
xor edi, edi
lea r9, [rbp + 0x150]
mov ecx, r15d
lea r8, str.PrivacyInfoURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.1400168a8
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400292a7
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.InstallApp
lea rcx, [rsp + 0x30]
call fcn.14001bf20
test eax, eax
jne 0x140029362
lea rbx, [r14 + 0x88]
test rbx, rbx
je 0x140029343
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400292e3
call fcn.14003c408
mov qword [rbx], rdi
lea rcx, [rbp + 0x150]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x1400292ef
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x140029341
lea r8, [rbp + 0x150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140029343
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029343
call fcn.14003c408
mov qword [rbx], rdi
jmp 0x140029343
xor edi, edi
lea r9, [rbp + 0x150]
mov ecx, r15d
lea r8, str.InstallApp
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.1400168a8
jmp 0x1400293c3
mov rax, qword [r14 + 0x48]
test rax, rax
je 0x140029377
movzx eax, word [rax]
cmp ax, word [0x14003f4a0]
jne 0x1400293c3
mov rcx, qword [0x140050310]
cmp rcx, rsi
jne 0x140029399
mov edx, 2
call fcn.140016188
mov rcx, qword [0x140050310]
cmp rcx, rsi
je 0x1400293c3
cmp dword [0x1400516e0], 2
jl 0x1400293c3
lea r9, [rsp + 0x30]
mov dword [rsp + 0x30], edi
mov r8d, 0x52
mov qword [rsp + 0x20], rdi
lea rdx, str.ERROR:_Code_URL_specified_but_no_InstallApp_indicated.__Install_is_not_possible._r_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400293de
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.InstallData
lea rcx, [rsp + 0x30]
call fcn.14001bf20
test eax, eax
jne 0x140029493
lea rbx, [r14 + 0x90]
test rbx, rbx
je 0x140029476
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002941a
call fcn.14003c408
mov qword [rbx], rdi
lea rcx, [rbp + 0x150]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140029426
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x140029476
lea r8, [rbp + 0x150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140029476
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029476
call fcn.14003c408
mov qword [rbx], rdi
lea r9, [rbp + 0x150]
mov ecx, r15d
lea r8, str.InstallData
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.1400168a8
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400294ae
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x150]
lea rdx, str.NonAdmin
lea rcx, [rsp + 0x30]
call fcn.14001bf20
test eax, eax
jne 0x140029962
lea rdx, [rbp + 0x150]
lea rcx, [0x140040b28]
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
je 0x14002951a
lea rdx, [rbp + 0x150]
lea rcx, [0x14004012c]
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
je 0x14002951a
lea rdx, [rbp + 0x150]
lea rcx, str.true
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140029962
mov dword [r14 + 0x11c], r13d
jmp 0x140029962
mov rcx, qword [rsi]
lea rdx, str.Image
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140029967
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140029559
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x1150]
lea rdx, str.MenuURL
lea rcx, [rsp + 0x30]
call fcn.14001bf20
or rsi, 0xffffffffffffffff
lea r15d, [rsi + 7]
test eax, eax
jne 0x14002961a
lea rbx, [r14 + 0xa8]
test rbx, rbx
je 0x1400295fd
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002959d
call fcn.14003c408
mov qword [rbx], rdi
lea rcx, [rbp + 0x1150]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x1400295a9
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x1400295fb
lea r8, [rbp + 0x1150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x1400295fd
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400295fd
call fcn.14003c408
mov qword [rbx], rdi
jmp 0x1400295fd
xor edi, edi
lea r9, [rbp + 0x1150]
mov ecx, r15d
lea r8, str.MenuURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.1400168a8
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140029635
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x1150]
lea rdx, str.ServiceSmallURL
lea rcx, [rsp + 0x30]
call fcn.14001bf20
test eax, eax
jne 0x1400296ee
lea rbx, [r14 + 0xb0]
test rbx, rbx
je 0x1400296d1
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029671
call fcn.14003c408
mov qword [rbx], rdi
lea rcx, [rbp + 0x1150]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x14002967d
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x1400296cf
lea r8, [rbp + 0x1150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x1400296d1
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400296d1
call fcn.14003c408
mov qword [rbx], rdi
jmp 0x1400296d1
xor edi, edi
lea r9, [rbp + 0x1150]
mov ecx, r15d
lea r8, str.ServiceSmallURL
lea rdx, str.XML_Parser:_Parsing_Element__S:__S._r_n
call fcn.1400168a8
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140029709
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x1150]
lea rdx, str.ServiceLargeURL
lea rcx, [rsp + 0x30]
call fcn.14001bf20
test eax, eax
jne 0x1400297c2
lea rbx, [r14 + 0xb8]
test rbx, rbx
je 0x1400297a5
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029745
call fcn.14003c408
mov qword [rbx], rdi
lea rcx, [rbp + 0x1150]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140029751
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x1400297a3
lea r8, [rbp + 0x1150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x1400297a5
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400297a5
call fcn.14003c408
mov qword [rbx], rdi
jmp 0x1400297a5
xor edi, edi
lea r9, [rbp + 0x1150]
mov ecx, r15d
lea r8, str.ServiceLargeURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.1400168a8
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400297dd
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x1150]
lea rdx, str.SetupURL
lea rcx, [rsp + 0x30]
call fcn.14001bf20
test eax, eax
jne 0x140029893
lea rbx, [r14 + 0x30]
test rbx, rbx
je 0x140029876
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029816
call fcn.14003c408
mov qword [rbx], rdi
lea rcx, [rbp + 0x1150]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140029822
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x140029874
lea r8, [rbp + 0x1150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140029876
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029876
call fcn.14003c408
mov qword [rbx], rdi
jmp 0x140029876
xor edi, edi
lea r9, [rbp + 0x1150]
mov ecx, r15d
lea r8, str.SetupURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.1400168a8
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400298ae
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0x1150]
lea rdx, str.EulaURL
lea rcx, [rsp + 0x30]
call fcn.14001bf20
test eax, eax
jne 0x140029962
lea rbx, [r14 + 0x38]
test rbx, rbx
je 0x140029945
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400298e7
call fcn.14003c408
mov qword [rbx], rdi
lea rax, [rbp + 0x1150]
mov rdi, rsi
xor r14d, r14d
inc rdi
cmp word [rax + rdi*2], r14w
jne 0x1400298f4
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c460
mov qword [rbx], rax
test rax, rax
je 0x140029945
lea r8, [rbp + 0x1150]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140029945
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029945
call fcn.14003c408
mov qword [rbx], rdi
lea r9, [rbp + 0x1150]
lea r8, str.EULAURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
mov ecx, r15d
call fcn.1400168a8
mov rsi, qword [rsp + 0x38]
mov rcx, qword [r12]
test rcx, rcx
je 0x14002997d
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [0x14003f118]
mov rcx, qword [rsi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, r13d
jmp 0x1400299af
mov rcx, qword [r12]
test rcx, rcx
je 0x1400299a1
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [0x14003f118]
mov rcx, qword [rsi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, 0x80004003
mov rcx, qword [rbp + 0x2150]
xor rcx, rsp
call fcn.14003c810
mov rbx, qword [rsp + 0x22a0]
add rsp, 0x2260
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14003c9e8
int3