Function at 0x1400336ec
Capabilities:
Write file on windows

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
mov qword [r11 + 0x10], rdx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
xor ebp, ebp
mov r15d, r9d
mov r13, rcx
mov ebx, 1
mov esi, ebp
cmp rdx, 0xffffffffffffffff
je 0x14003395c
test r9d, r9d
mov dword [rsp + 0x28], ebx
lea rcx, str.REGISTEROCXS
lea rax, str.UNREGISTEROCXS
cmovne rax, rcx
lea r9, str.DEFAULTINSTALL
test r8, r8
mov qword [r11 - 0x68], rax
lea rdx, [r11 + 0x10]
cmovne r9, r8
lea r8, [r11 - 0x48]
xor ecx, ecx
call fcn.140030854
test eax, eax
je 0x14003395c
mov eax, r15d
neg eax
sbb ecx, ecx
add ecx, 0x26db
call fcn.140015bb4
lea rcx, [rsp + 0x40]
call fcn.140030704
mov qword [rsp + 0x38], rax
mov r14, rax
test rax, rax
je 0x14003395c
lea rdx, [0x140043808]
mov rcx, rax
call qword [sym.imp.msvcrt.dll_wcstok]
mov rdi, rax
test rax, rax
je 0x14003394c
mov r8, rdi
lea rdx, str._Parsing_RegisterOCX_INFSection:_S._r_n
mov ecx, 4
call fcn.1400168a8
lea rcx, str.setupapi.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x1400337f5
mov rcx, qword [rsp + 0x98]
lea r9, [rsp + 0x40]
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, rdi
call fcn.14001b0b0
jmp 0x1400337f7
mov eax, ebp
test eax, eax
je 0x14003392c
mov rcx, qword [rsp + 0x98]
mov rdx, rdi
mov ebp, 1
call fcn.14001af24
mov ecx, eax
mov r12d, eax
call fcn.140015a28
cmp r12d, ebp
jb 0x14003392a
xor r14d, r14d
mov ecx, ebp
call fcn.140015b2c
lea rcx, [rsp + 0x40]
inc ebp
call fcn.140030704
mov rdi, rax
test rax, rax
je 0x14003390d
mov edx, 0x2c
mov rcx, rax
call qword [sym.imp.msvcrt.dll_wcschr]
test rax, rax
je 0x140033860
mov word [rax], r14w
mov r8d, dword [rsp + 0xb0]
mov edx, r15d
mov rcx, rdi
call fcn.140019bdc
mov ebx, eax
test r15d, r15d
je 0x140033891
mov rcx, qword [r13 + 0x10]
test rcx, rcx
je 0x140033891
mov r8d, 1
mov rdx, rdi
call fcn.140024800
test ebx, ebx
jns 0x140033905
test r15d, r15d
jne 0x140033903
cmp ebx, 2
je 0x1400338af
cmp ebx, 0x80070002
je 0x1400338af
cmp ebx, 0x80004005
jne 0x140033903
mov rcx, qword [0x140050310]
mov ebx, 1
cmp rcx, 0xffffffffffffffff
jne 0x1400338d6
lea edx, [rbx + 3]
call fcn.140016188
mov rcx, qword [0x140050310]
cmp rcx, 0xffffffffffffffff
je 0x140033905
cmp dword [0x1400516e0], 4
jl 0x140033905
lea r9, [rsp + 0x30]
mov dword [rsp + 0x30], r14d
mov r8d, 0x60
mov qword [rsp + 0x20], r14
lea rdx, str.__Unregistration_failure_ignored:_file_is_either_not_present_or_has_already_been_unregistered._r_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x140033905
mov esi, ebx
mov rcx, rdi
call fcn.14003c408
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x40]
call qword [sym.imp.SETUPAPI.dll_SetupFindNextLine]
test eax, eax
je 0x14003392a
cmp ebp, r12d
jbe 0x14003382a
xor ebp, ebp
lea rdx, [0x140043808]
xor ecx, ecx
call qword [sym.imp.msvcrt.dll_wcstok]
mov rdi, rax
test rax, rax
jne 0x1400337b0
mov r14, qword [rsp + 0x38]
mov rcx, r14
call fcn.14003c408
test ebx, ebx
js 0x14003395c
test esi, esi
jne 0x14003395e
mov esi, ebx
lea r11, [rsp + 0x60]
mov eax, esi
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret