Function at 0x14000175c
Capabilities:
Create process on windows
Create thread
Enumerate files on windows
Query environment variable
Set current directory

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x3690
call fcn.140008f50
sub rsp, rax
mov qword [rsp + 0x138], 0xfffffffffffffffe
mov qword [rsp + 0x36c8], rbx
mov qword [rsp + 0x36d8], rsi
mov rax, qword [0x140012728]
xor rax, rsp
mov qword [rsp + 0x3688], rax
mov r15, r8
mov qword [rsp + 0xe8], r8
mov qword [rsp + 0x110], rcx
xor edi, edi
mov esi, edi
mov r13d, edi
mov ebx, 0x208
mov r8d, ebx
xor edx, edx
lea rcx, [rsp + 0x520]
call sub.msvcrt.dll_memset
mov r8d, ebx
xor edx, edx
lea rcx, [rsp + 0x310]
call sub.msvcrt.dll_memset
mov r14d, 0x104
mov r8d, r14d
lea rdx, [rsp + 0x310]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ebx, [rdi + 1]
test eax, eax
je 0x14000187d
mov edx, r14d
lea rcx, [rsp + 0x520]
lea r8, [rsp + 0x310]
lea rax, [rsp + 0x520]
sub r8, rax
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x140001844
movzx eax, word [r8 + rcx]
test ax, ax
je 0x140001844
mov word [rcx], ax
add rcx, 2
sub rdx, rbx
jne 0x140001822
lea rax, [rcx - 2]
test rdx, rdx
cmovne rax, rcx
mov word [rax], di
je 0x14000187d
mov edx, 0x5c
lea rcx, [rsp + 0x520]
call qword [sym.imp.msvcrt.dll_wcsrchr]
test rax, rax
je 0x14000186f
mov word [rax], di
lea rcx, [rsp + 0x520]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov r8d, r14d
lea rdx, [rsp + 0x2a40]
lea rcx, str._windir_System32OOBESetupPlatform
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
dec eax
cmp eax, 0x103
ja 0x1400018c5
lea rdx, [rsp + 0x2a40]
lea rcx, [rsp + 0x520]
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
sete r13b
test eax, eax
jne 0x1400018c5
mov esi, ebx
call fcn.140001178
mov dword [rsp + 0x10c], esi
test r15, r15
jne 0x1400018d9
lea eax, [rsi - 1]
jmp 0x1400033e3
mov r14d, edi
mov dword [rsp + 0x58], edi
mov dword [rsp + 0xd4], edi
mov dword [rsp + 0xbc], edi
mov dword [rsp + 0x5c], edi
mov dword [rsp + 0x60], edi
mov dword [rsp + 0x64], edi
mov dword [rsp + 0x68], edi
mov r12d, edi
mov dword [rsp + 0xd0], edi
mov dword [rsp + 0x6c], edi
mov dword [rsp + 0x54], edi
mov dword [rsp + 0xd8], edi
mov dword [rsp + 0x88], edi
mov dword [rsp + 0x70], edi
mov dword [rsp + 0x50], edi
mov dword [rsp + 0xb8], edi
mov dword [rsp + 0xe0], edi
mov dword [rsp + 0xf0], edi
mov qword [rsp + 0x90], rdi
xor edx, edx
lea rcx, [rsp + 0xf8]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
mov ecx, 3
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [rsp + 0x108], eax
mov ecx, eax
or ecx, 3
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
xor edx, edx
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
mov ecx, 0x18
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rsi, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x1400019b5
mov rdx, r15
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::String::constructor_unsigned_short_int_const____ptr64____ptr64]
lea r15, vtable.UnBCL::String.0
mov qword [rsi], r15
jmp 0x1400019bf
mov rsi, rdi
lea r15, vtable.UnBCL::String.0
mov rdx, rsi
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, [0x14000b160]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::StartsWith_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
jne 0x14000233a
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, str._executeInstall:
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::StartsWith_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
jne 0x14000233a
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, [0x14000b1d0]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::StartsWith_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
jne 0x14000232e
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, str._communication
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::StartsWith_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
jne 0x14000232e
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, [0x14000b210]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::StartsWith_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
jne 0x1400022a3
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, str._presysprep
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::StartsWith_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
jne 0x1400022a3
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, [0x14000b258]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::StartsWith_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
jne 0x14000221a
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, str._postsysprep
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::StartsWith_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
jne 0x14000221a
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, [0x14000b2b0]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::StartsWith_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
jne 0x140002193
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, str._preoobe
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::StartsWith_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
jne 0x140002193
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, [0x14000b2f0]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::StartsWith_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
jne 0x14000210f
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, str._postoobe
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::StartsWith_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
jne 0x14000210f
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, [0x14000b338]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::CompareTo_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
je 0x140002096
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, str._rollback
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::CompareTo_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
je 0x140002096
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, [0x14000b380]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::CompareTo_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
je 0x14000201c
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, str._rollbackonlinesystem
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::CompareTo_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
je 0x14000201c
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, [0x14000b410]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::CompareTo_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
je 0x140001f91
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, str._rollbackonlineuser
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::CompareTo_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
je 0x140001f91
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, [0x14000b488]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::CompareTo_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
je 0x140001f1b
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, str._validateUninstall
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::CompareTo_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
je 0x140001f1b
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, [0x14000b500]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::CompareTo_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
je 0x140001ea5
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, str._removeUninstall
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::CompareTo_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
je 0x140001ea5
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, [0x14000b570]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::CompareTo_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
je 0x140001e24
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, str._uninstall
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::CompareTo_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
je 0x140001e24
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, [0x14000b5b8]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::CompareTo_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
je 0x140001da6
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
lea rdx, str._onerror
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::CompareTo_unsigned_short_int_const____ptr64__int_const___ptr64]
test eax, eax
jne 0x1400024db
mov ecx, 0x18
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rsi, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x140001dd6
lea rdx, str.onError
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::String::constructor_unsigned_short_int_const____ptr64____ptr64]
mov qword [rsi], r15
jmp 0x140001dd9
mov rsi, rdi
mov rdx, rsi
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
mov r10d, ebx
mov dword [rsp + 0x50], ebx
mov r15d, dword [rsp + 0x6c]
mov eax, r15d
jmp 0x1400024e6
mov ecx, 0x18
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rsi, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x140001e54
lea rdx, str.uninstall
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::String::constructor_unsigned_short_int_const____ptr64____ptr64]
mov qword [rsi], r15
jmp 0x140001e57
mov rsi, rdi
mov rdx, rsi
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
mov r11d, ebx
mov dword [rsp + 0x70], ebx
mov r15d, dword [rsp + 0x6c]
mov eax, r15d
mov r10d, eax
jmp 0x1400024e9
mov ecx, 0x18
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rsi, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x140001ed5
lea rdx, str.removeUninstall
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::String::constructor_unsigned_short_int_const____ptr64____ptr64]
mov qword [rsi], r15
jmp 0x140001ed8
mov rsi, rdi
mov rdx, rsi
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
mov dword [rsp + 0x88], ebx
jmp 0x1400024db
mov ecx, 0x18
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rsi, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x140001f4b
lea rdx, str.validateUninstall
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::String::constructor_unsigned_short_int_const____ptr64____ptr64]
mov qword [rsi], r15
jmp 0x140001f4e
mov rsi, rdi
mov rdx, rsi
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
mov dword [rsp + 0xd8], ebx
jmp 0x1400024db
mov ecx, 0x18
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rsi, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x140001fc1
lea rdx, str.rollbackonlineuser
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::String::constructor_unsigned_short_int_const____ptr64____ptr64]
mov qword [rsi], r15
jmp 0x140001fc4
mov rsi, rdi
mov rdx, rsi
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
mov eax, ebx
mov dword [rsp + 0x54], ebx
mov r15d, dword [rsp + 0x6c]
mov ecx, r15d
mov edx, ecx
mov r8d, ecx
mov r9d, ecx
mov r10d, ecx
mov r11d, ecx
jmp 0x1400024f3
mov ecx, 0x18
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rsi, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x14000204c
lea rdx, str.rollbackonlinesystem
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::String::constructor_unsigned_short_int_const____ptr64____ptr64]
mov qword [rsi], r15
jmp 0x14000204f
mov rsi, rdi
mov rdx, rsi
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
mov r15d, ebx
mov dword [rsp + 0x6c], ebx
mov eax, dword [rsp + 0x54]
jmp 0x1400024e3
mov ecx, 0x18
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rsi, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x1400020c6
lea rdx, str.rollback
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::String::constructor_unsigned_short_int_const____ptr64____ptr64]
mov qword [rsi], r15
jmp 0x1400020c9
mov rsi, rdi
mov rdx, rsi
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
mov r12d, ebx
mov dword [rsp + 0xd0], ebx
jmp 0x1400024db
mov ecx, 0x18
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rsi, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x14000213f
lea rdx, str.postoobe
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::String::constructor_unsigned_short_int_const____ptr64____ptr64]
mov qword [rsi], r15
jmp 0x140002142
mov rsi, rdi
mov rdx, rsi
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
mov r9d, ebx
mov dword [rsp + 0x68], ebx
mov r15d, dword [rsp + 0x6c]
mov eax, r15d
mov r10d, eax
mov r11d, eax
jmp 0x1400024ec
mov ecx, 0x18
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rsi, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x1400021c3
lea rdx, str.preoobe
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::String::constructor_unsigned_short_int_const____ptr64____ptr64]
mov qword [rsi], r15
jmp 0x1400021c6
mov rsi, rdi
mov rdx, rsi
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
mov r8d, ebx
mov dword [rsp + 0x64], ebx
mov r15d, dword [rsp + 0x6c]
mov eax, r15d
mov r9d, eax
mov r10d, eax
mov r11d, eax
jmp 0x1400024ef
mov ecx, 0x18
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rsi, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x14000224a
lea rdx, str.postsysprep
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::String::constructor_unsigned_short_int_const____ptr64____ptr64]
mov qword [rsi], r15
jmp 0x14000224d
mov rsi, rdi
mov rdx, rsi
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
mov edx, ebx
mov dword [rsp + 0x60], ebx
mov r15d, dword [rsp + 0x6c]
mov eax, r15d
mov r8d, eax
mov r9d, eax
mov r10d, eax
mov r11d, eax
jmp 0x1400024f1
mov ecx, 0x18
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rsi, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x1400022d3
lea rdx, str.presysprep
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::String::constructor_unsigned_short_int_const____ptr64____ptr64]
mov qword [rsi], r15
jmp 0x1400022d6
mov rsi, rdi
mov rdx, rsi
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
mov ecx, ebx
mov dword [rsp + 0x5c], ebx
mov r15d, dword [rsp + 0x6c]
mov eax, r15d
mov edx, eax
mov r8d, eax
mov r9d, eax
mov r10d, eax
mov r11d, eax
jmp 0x1400024f3
mov dword [rsp + 0xd4], ebx
jmp 0x1400024db
mov ecx, 0x18
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rsi, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x14000236a
lea rdx, str.executeInstall
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::String::constructor_unsigned_short_int_const____ptr64____ptr64]
mov qword [rsi], r15
jmp 0x14000236d
mov rsi, rdi
mov rdx, rsi
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
mov dword [rsp + 0xbc], ebx
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
xor edx, edx
lea r8d, [rdx + 0x10]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::String::Remove_int__int_const___ptr64]
mov rdx, rax
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_unsigned_short_int_const____ptr64___cdecl_UnBCL::String::get_CString_void_const___ptr64]
cmp word [rax], 0x22
jne 0x1400024c8
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov r8d, ebx
xor edx, edx
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::String::Remove_int__int_const___ptr64]
mov rdx, rax
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_int___cdecl_UnBCL::String::get_Length_void_const___ptr64]
mov esi, eax
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
lea r8d, [rsi - 1]
xor edx, edx
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::String::Substring_int__int_const___ptr64]
mov rdx, rax
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0xf8]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
mov r15d, dword [rsp + 0x6c]
mov eax, r15d
mov r10d, eax
mov r11d, eax
mov r9d, eax
mov r8d, eax
mov edx, eax
mov ecx, eax
mov esi, dword [rsp + 0xbc]
cmp dword [rsp + 0xd4], edi
jne 0x140002547
test esi, esi
jne 0x140002547
test ecx, ecx
jne 0x140002547
test edx, edx
jne 0x140002547
test r8d, r8d
jne 0x140002547
test r9d, r9d
jne 0x140002547
test r12d, r12d
jne 0x140002547
test r15d, r15d
jne 0x140002547
test eax, eax
jne 0x140002547
cmp dword [rsp + 0xd8], edi
jne 0x140002547
cmp dword [rsp + 0x88], edi
jne 0x140002547
test r11d, r11d
jne 0x140002547
test r10d, r10d
je 0x140003410
test r13d, r13d
je 0x14000296d
test r15d, r15d
je 0x14000296d
mov dword [rsp + 0x88], edi
mov r15d, 0x105
mov dword [rsp + 0x50], edi
mov r12d, 0x20a
mov ecx, r12d
call fcn.1400081c8
mov rsi, rax
test rax, rax
je 0x1400025bb
mov r8d, r12d
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov dword [rsp + 0x50], r15d
mov r9, rsi
lea r8, [rsp + 0x50]
xor edx, edx
lea rcx, [rsp + 0x310]
call qword [sym.imp.KERNEL32.dll_FindFirstFileNameW]
mov r12, rax
or r13, 0xffffffffffffffff
cmp rax, r13
je 0x1400025bf
jmp 0x14000264e
or r13, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xea
jne 0x140002960
mov eax, dword [rsp + 0x50]
add eax, 0xfffffefa
cmp eax, 0x7ef9
ja 0x140002960
mov rcx, rsi
call sub.msvcrt.dll_free
mov r15d, dword [rsp + 0x50]
inc r15d
mov r12d, r15d
mov eax, 2
mul r12
cmovo rax, r13
mov rcx, rax
call fcn.1400081c8
mov rsi, rax
test rax, rax
je 0x140002960
lea r8, [r15 + r15]
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov dword [rsp + 0x50], r15d
mov r9, rsi
lea r8, [rsp + 0x50]
xor edx, edx
lea rcx, [rsp + 0x310]
call qword [sym.imp.KERNEL32.dll_FindFirstFileNameW]
mov r12, rax
cmp rax, r13
je 0x140002960
lea rax, [rsp + 0x310]
mov qword [rsp + 0xd8], rax
movzx ecx, word [rsp + 0x310]
call qword [sym.imp.msvcrt.dll_iswalpha]
test eax, eax
je 0x140002697
lea rax, [rsp + 0x314]
cmp word [rsp + 0x312], 0x3a
lea rcx, [rsp + 0x310]
cmovne rax, rcx
mov qword [rsp + 0xd8], rax
jmp 0x14000269f
lea rax, [rsp + 0x310]
mov rdx, rsi
mov rcx, rax
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
je 0x1400026bb
mov dword [rsp + 0x88], ebx
jmp 0x140002760
mov dword [rsp + 0x50], r15d
mov r8, rsi
lea rdx, [rsp + 0x50]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileNameW]
test eax, eax
mov rax, qword [rsp + 0xd8]
jne 0x14000269f
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xea
jne 0x140002760
cmp dword [rsp + 0x50], r15d
jbe 0x140002760
cmp dword [rsp + 0x50], 0x8000
jae 0x140002760
mov rcx, rsi
call sub.msvcrt.dll_free
mov r15d, dword [rsp + 0x50]
inc r15d
mov ecx, r15d
mov eax, 2
mul rcx
cmovo rax, r13
mov rcx, rax
call fcn.1400081c8
mov rsi, rax
test rax, rax
je 0x140002760
mov r8d, r15d
add r8, r8
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov dword [rsp + 0x50], r15d
mov r8, rsi
lea rdx, [rsp + 0x50]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileNameW]
test eax, eax
mov rax, qword [rsp + 0xd8]
jne 0x14000269f
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [rsp + 0x88], 0
je 0x140002960
mov rcx, r13
mov rax, qword [rsp + 0xe8]
inc rcx
cmp word [rax + rcx*2], di
jne 0x140002782
mov rax, r13
inc rax
cmp word [rsi + rax*2], di
jne 0x14000278e
lea r12, [rax + 4]
add r12, rcx
mov eax, 2
mul r12
cmovo rax, r13
mov rcx, rax
call fcn.1400081c8
mov r15, rax
test rax, rax
je 0x140002960
lea r8, [r12 + r12]
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
movzx ecx, word [rsp + 0x310]
call qword [sym.imp.msvcrt.dll_iswalpha]
test eax, eax
je 0x140002812
cmp word [rsp + 0x312], 0x3a
jne 0x140002812
movzx eax, word [rsp + 0x310]
mov word [r15], ax
movzx eax, word [rsp + 0x312]
mov word [r15 + 2], ax
mov r8, rsi
mov rdx, r12
mov rcx, r15
call fcn.140001008
jmp 0x140002868
lea rax, [r12 - 1]
mov edx, 0x7ffffffe
cmp rax, rdx
ja 0x14000285f
mov r8, r12
mov rcx, r15
sub rdx, r12
mov r9, rsi
sub r9, r15
lea rax, [rdx + r8]
test rax, rax
je 0x14000284f
movzx eax, word [r9 + rcx]
test ax, ax
je 0x14000284f
mov word [rcx], ax
add rcx, 2
sub r8, rbx
jne 0x140002830
lea rax, [rcx - 2]
test r8, r8
cmovne rax, rcx
mov word [rax], di
jmp 0x140002868
test r12, r12
je 0x140002868
mov word [r15], di
lea r8, [0x14000b680]
mov rdx, r12
mov rcx, r15
call fcn.140001008
mov r8, qword [rsp + 0xe8]
mov rdx, r12
mov rcx, r15
call fcn.140001008
mov r12d, 0x68
mov r8d, r12d
xor edx, edx
lea rcx, [rsp + 0x2a0]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x2a0], r12d
mov dword [rsp + 0x2dc], ebx
mov word [rsp + 0x2e0], di
lea rax, [rsp + 0x98]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x2a0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140002958
or ebx, 0xffffffff
mov edx, ebx
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x80
je 0x14000293c
cmp eax, ebx
je 0x14000293c
mov dword [rsp + 0x88], edi
lea rdx, [rsp + 0x88]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r15
call sub.msvcrt.dll_free
mov rcx, rsi
call sub.msvcrt.dll_free
jmp 0x140003330
lea rcx, [rsp + 0xf8]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::get_P_void_const___ptr64]
test rax, rax
jne 0x140002a39
test esi, esi
jne 0x1400029a9
cmp dword [rsp + 0x5c], edi
jne 0x1400029a9
cmp dword [rsp + 0x60], edi
jne 0x1400029a9
cmp dword [rsp + 0x64], edi
jne 0x1400029a9
cmp dword [rsp + 0x68], edi
jne 0x1400029a9
test r12d, r12d
je 0x140002a39
lea rdx, str.SetupPlatform.ini
lea rcx, [rsp + 0x288]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::String::constructor_unsigned_short_int_const____ptr64____ptr64]
mov rsi, rax
lea rdx, [rsp + 0x520]
lea rcx, [rsp + 0x270]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::String::constructor_unsigned_short_int_const____ptr64____ptr64]
nop
mov rdx, rsi
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_static_class_UnBCL::String____ptr64___cdecl_UnBCL::Path::Combine_class_UnBCL::String_const____ptr64__class_UnBCL::String_const____ptr64_]
mov rdx, rax
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::constructor_class_UnBCL::String____ptr64____ptr64]
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xf8]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::SmartPtr_class_UnBCL::String_____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator_class_UnBCL::SmartPtr_class_UnBCL::String__const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x270]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::String::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x288]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::String::destructor_void____ptr64]
mov r13d, edi
mov esi, dword [rsp + 0x54]
test r12d, r12d
jne 0x140002a4e
test r15d, r15d
jne 0x140002a4e
test esi, esi
je 0x140002a51
mov r13d, ebx
mov r9d, 0x104
lea r8, [rsp + 0x2c50]
mov edx, 0x201
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.USER32.dll_LoadStringW]
lea rcx, str.SeBackupPrivilege
call fcn.140001380
test eax, eax
je 0x14000353d
lea rcx, str.SeRestorePrivilege
call fcn.140001380
test eax, eax
je 0x14000353d
cmp dword [rsp + 0xbc], edi
jne 0x140002ab5
test r12d, r12d
jne 0x140002ab5
test r15d, r15d
jne 0x140002ab5
test esi, esi
je 0x140002c38
lea rcx, [rsp + 0xf8]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::get_P_void_const___ptr64]
mov rcx, rax
call fcn.140001664
test eax, eax
jne 0x140002c38
mov esi, edi
mov r15, rdi
mov dword [rsp + 0xe8], edi
lea rcx, str._windir_SetupScriptsdisablecmdrequest.tag
call fcn.14000763c
mov r14, rax
test rax, rax
je 0x140002b02
mov rcx, rax
call fcn.1400076dc
test eax, eax
mov r12d, edi
je 0x140002b05
mov r12d, ebx
test r14, r14
je 0x140002b1e
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
test r12d, r12d
je 0x140002b33
mov dword [rsp + 0xe0], 0x80070032
jmp 0x140002c30
xor r9d, r9d
xor r8d, r8d
mov edx, ebx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov r12, rax
test rax, rax
je 0x140002bc8
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
mov r9, r12
lea r8, [0x140006c50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r15, rax
test rax, rax
je 0x140002b8a
mov edx, 0x3e8
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x140002bbd
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
mov r14d, 0x80070000
or ecx, r14d
test eax, eax
cmovle ecx, eax
test ecx, ecx
jns 0x140002bb8
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, r14d
test eax, eax
cmovle esi, eax
jmp 0x140002bbd
mov esi, 0x80004005
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140002bfb
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
mov r14d, 0x80070000
or ecx, r14d
test eax, eax
cmovle ecx, eax
test ecx, ecx
jns 0x140002bf6
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, r14d
test eax, eax
cmovle esi, eax
jmp 0x140002bfb
mov esi, 0x80004005
test esi, esi
js 0x140002c0f
mov eax, dword [rsp + 0xe8]
mov dword [rsp + 0xf0], eax
jmp 0x140002c20
test r15, r15
je 0x140002c29
mov ecx, dword [rsp + 0xe8]
call fcn.140006d40
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp + 0xe0], esi
mov r12d, dword [rsp + 0xd0]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::get_P_void_const___ptr64]
mov r8d, ebx
mov rdx, rax
call fcn.14000145c
lea rcx, [rsp + 0xf8]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::get_P_void_const___ptr64]
test rax, rax
je 0x140002c7d
lea rcx, [rsp + 0xf8]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::operator___void_const___ptr64]
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_unsigned_short_int_const____ptr64___cdecl_UnBCL::String::get_CString_void_const___ptr64]
jmp 0x140002c80
mov rax, rdi
mov r8d, r12d
xor r8d, ebx
lea rcx, [rsp + 0x90]
mov qword [rsp + 0x20], rcx
mov r9d, r13d
lea rdx, [rsp + 0x2c50]
mov rcx, rax
call qword [sym.imp.SetupPlatform.dll__CreateSetupPlatformPrivate]
mov r14d, eax
mov dword [rsp + 0x58], eax
test eax, eax
js 0x140003479
lea rcx, [rsp + 0x150]
call fcn.140003628
nop
mov esi, 0x208
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x730]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x730]
mov qword [rsp + 0x150], rax
mov r13d, 0x104
mov r9d, r13d
lea r8, [rsp + 0x730]
lea edx, [rsi - 0x14]
mov r15, qword [rsp + 0x110]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x940]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x940]
mov qword [rsp + 0x158], rax
mov r9d, r13d
lea r8, [rsp + 0x940]
lea edx, [rsi - 6]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0xb50]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0xb50]
mov qword [rsp + 0x160], rax
mov r9d, r13d
lea r8, [rsp + 0xb50]
lea edx, [rsi - 5]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0xd60]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0xd60]
mov qword [rsp + 0x168], rax
mov r9d, r13d
lea r8, [rsp + 0xd60]
lea edx, [rsi - 4]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0xf70]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0xf70]
mov qword [rsp + 0x170], rax
mov r9d, r13d
lea r8, [rsp + 0xf70]
lea edx, [rsi - 3]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x1180]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x1180]
mov qword [rsp + 0x180], rax
mov r9d, r13d
lea r8, [rsp + 0x1180]
mov edx, esi
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x1390]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x1390]
mov qword [rsp + 0x188], rax
mov r9d, r13d
lea r8, [rsp + 0x1390]
lea edx, [rsi + 1]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
xor edx, edx
mov r8d, 0x820
lea rcx, [rsp + 0x2e60]
call sub.msvcrt.dll_memset
mov r9d, r13d
lea r8, [rsp + 0x2e60]
lea edx, [rsi - 0x13]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r9d, r13d
lea r8, [rsp + 0x3068]
lea edx, [rsi - 0x12]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r9d, r13d
lea r8, [rsp + 0x3270]
lea edx, [rsi - 0x11]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r9d, r13d
lea r8, [rsp + 0x3478]
lea edx, [rsi - 0x10]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov esi, edi
cmp esi, 4
jae 0x140002f02
mov eax, esi
imul rcx, rax, 0x208
lea rdx, [rsp + 0x2e60]
add rdx, rcx
lea rcx, [rsp + 0x200]
call fcn.140003d10
add esi, ebx
jmp 0x140002ed8
mov dword [rsp + 0x210], edi
mov esi, 0x208
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x15a0]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x15a0]
mov qword [rsp + 0x218], rax
mov r9d, r13d
lea r8, [rsp + 0x15a0]
lea edx, [rsi - 2]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x17b0]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x17b0]
mov qword [rsp + 0x220], rax
mov r9d, r13d
lea r8, [rsp + 0x17b0]
lea edx, [rsi - 1]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x19c0]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x19c0]
mov qword [rsp + 0x228], rax
mov r9d, r13d
lea r8, [rsp + 0x19c0]
lea edx, [rsi - 8]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x1bd0]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x1bd0]
mov qword [rsp + 0x230], rax
mov r9d, r13d
lea r8, [rsp + 0x1bd0]
lea edx, [rsi - 9]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x1de0]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x1de0]
mov qword [rsp + 0x238], rax
mov r9d, r13d
lea r8, [rsp + 0x1de0]
lea edx, [rsi - 0xc]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x1ff0]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x1ff0]
mov qword [rsp + 0x240], rax
mov r9d, r13d
lea r8, [rsp + 0x1ff0]
lea edx, [rsi - 0xd]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x2200]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x2200]
mov qword [rsp + 0x248], rax
mov r9d, r13d
lea r8, [rsp + 0x2200]
lea edx, [rsi - 0xb]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x2410]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x2410]
mov qword [rsp + 0x250], rax
mov r9d, r13d
lea r8, [rsp + 0x2410]
lea edx, [rsi - 0xf]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x2620]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x2620]
mov qword [rsp + 0x258], rax
mov r9d, r13d
lea r8, [rsp + 0x2620]
lea edx, [rsi - 0xa]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x2830]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x2830]
mov qword [rsp + 0x260], rax
mov r9d, r13d
lea r8, [rsp + 0x2830]
lea edx, [rsi - 0xe]
mov rcx, r15
call qword [sym.imp.USER32.dll_LoadStringW]
cmp dword [rsp + 0xd4], edi
je 0x14000316b
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
mov rax, qword [rax + 0x30]
call qword [0x14000ad10]
jmp 0x140003259
cmp dword [rsp + 0xbc], edi
je 0x14000317f
mov dword [rsp + 0x210], ebx
xor edx, edx
jmp 0x1400031cf
cmp dword [rsp + 0x5c], edi
je 0x140003194
mov dword [rsp + 0x210], 2
mov edx, ebx
jmp 0x1400031cf
cmp dword [rsp + 0x60], edi
je 0x1400031ac
mov dword [rsp + 0x210], 2
mov edx, 2
jmp 0x1400031cf
cmp dword [rsp + 0x64], edi
je 0x1400031b9
mov edx, 3
jmp 0x1400031c4
cmp dword [rsp + 0x68], edi
je 0x1400031f8
mov edx, 4
mov dword [rsp + 0x210], 3
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
lea r9, [rsp + 0xb8]
lea r8, [rsp + 0x150]
mov rax, qword [rax]
call qword [0x14000ad10]
jmp 0x1400032e6
test r12d, r12d
je 0x14000320e
lea rdx, [rsp + 0x150]
mov qword [rsp + 0x20], rdx
xor edx, edx
jmp 0x14000323e
cmp dword [rsp + 0x6c], 0
je 0x140003226
lea rdx, [rsp + 0x150]
mov qword [rsp + 0x20], rdx
mov edx, ebx
jmp 0x14000323e
cmp dword [rsp + 0x54], edi
je 0x14000325e
lea rdx, [rsp + 0x150]
mov qword [rsp + 0x20], rdx
mov edx, 2
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
mov r9d, ebx
mov r8d, ebx
mov rax, qword [rax + 8]
call qword [0x14000ad10]
jmp 0x14000330b
cmp dword [rsp + 0xd8], edi
je 0x140003278
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
jmp 0x140003290
cmp dword [rsp + 0x88], edi
je 0x140003298
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [0x14000ad10]
jmp 0x1400032e6
cmp dword [rsp + 0x70], 0
je 0x1400032ef
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [0x14000ad10]
mov r14d, eax
mov dword [rsp + 0x58], eax
test eax, eax
js 0x1400034db
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
mov rax, qword [rax + 0x40]
call qword [0x14000ad10]
mov qword [rsp + 0x90], rdi
call qword [sym.imp.SetupPlatform.dll__FinalizeUninstall]
mov r14d, eax
mov dword [rsp + 0x58], eax
jmp 0x14000330b
cmp dword [rsp + 0x50], 0
je 0x14000330b
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
mov rax, qword [rax + 0x28]
call qword [0x14000ad10]
test r14d, r14d
js 0x1400034db
lea rcx, [rsp + 0x1c0]
call fcn.1400037b4
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::Object::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x78]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
nop
jmp 0x140003345
mov rcx, qword [rsp + 0x90]
test rcx, rcx
je 0x14000335f
mov rax, qword [rcx]
mov rax, qword [rax + 0x40]
call qword [0x14000ad10]
mov ecx, dword [rsp + 0x108]
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public:_class_UnBCL::String____ptr64___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::get_P_void_const___ptr64]
mov rdx, rax
xor r8d, r8d
call fcn.14000145c
cmp dword [rsp + 0xe0], edi
jl 0x14000339e
mov ecx, dword [rsp + 0xf0]
test ecx, ecx
je 0x14000339e
call fcn.140006d40
test r14d, r14d
js 0x1400033b6
mov eax, dword [rsp + 0xb8]
neg eax
sbb ebx, ebx
and ebx, 0xbc2
jmp 0x1400033c4
movzx ebx, r14w
cmp dword [rsp + 0x10c], edi
cmovne ebx, edi
lea rcx, [rsp + 0xc0]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xf8]
call qword [sym.imp.unbcl.dll_public_virtual:_void___cdecl_UnBCL::SmartPtr_class_UnBCL::String_::destructor_void____ptr64]
mov eax, ebx
mov rcx, qword [rsp + 0x3688]
xor rcx, rsp
call fcn.140008670
lea r11, [rsp + 0x3690]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov dword [rsp + 0x58], 0x80070057
lea ecx, [rsi + 0x40]
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rbx, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x140003452
lea r8, str.incorrect_arguments
mov edx, 0x80070057
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::Win32Exception::constructor_unsigned_long_int__unsigned_short_int_const____ptr64____ptr64]
lea rax, vtable.UnBCL::Win32Exception.0
mov qword [rbx], rax
jmp 0x140003455
mov rbx, rdi
mov rcx, rbx
call fcn.140004ee8
mov qword [rsp + 0x128], rax
lea rdx, [0x14000f410]
lea rcx, [rsp + 0x128]
call sub.msvcrt.dll__CxxThrowException
mov ecx, 0x40
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rbx, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x1400034b3
lea r8, str.Failed_to_create_Setup_Platform
mov edx, r14d
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::Win32Exception::constructor_unsigned_long_int__unsigned_short_int_const____ptr64____ptr64]
lea rax, vtable.UnBCL::Win32Exception.0
mov qword [rbx], rax
jmp 0x1400034b6
mov rbx, rdi
mov rcx, rbx
call fcn.140004ee8
mov qword [rsp + 0x130], rax
lea rdx, [0x14000f410]
lea rcx, [rsp + 0x130]
call sub.msvcrt.dll__CxxThrowException
nop
mov ecx, 0x40
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rbx, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x140003515
lea r8, str.Failed_during_Setup_Platform_execution
mov edx, r14d
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::Win32Exception::constructor_unsigned_long_int__unsigned_short_int_const____ptr64____ptr64]
lea rax, vtable.UnBCL::Win32Exception.0
mov qword [rbx], rax
jmp 0x140003518
mov rbx, rdi
mov rcx, rbx
call fcn.140004ee8
mov qword [rsp + 0x118], rax
lea rdx, [0x14000f410]
lea rcx, [rsp + 0x118]
call sub.msvcrt.dll__CxxThrowException
nop
mov ecx, 0x40
call qword [sym.imp.unbcl.dll_public:_static_void____ptr64___cdecl_UnBCL::Object::operator_new_unsigned_long_long_unsigned___int64__]
mov rbx, rax
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x140003576
lea r8, str.cannot_enable_privileges
xor edx, edx
mov rcx, rax
call qword [sym.imp.unbcl.dll_public:_void___cdecl_UnBCL::Win32Exception::constructor_unsigned_long_int__unsigned_short_int_const____ptr64____ptr64]
lea rax, vtable.UnBCL::Win32Exception.0
mov qword [rbx], rax
jmp 0x140003579
mov rbx, rdi
mov rcx, rbx
call fcn.140004ee8
mov qword [rsp + 0x120], rax
lea rdx, [0x14000f410]
lea rcx, [rsp + 0x120]
call sub.msvcrt.dll__CxxThrowException
int3