Function at 0x14000bd80
Capabilities:
Accept command line arguments
Create process on windows
Self delete

Disassembly:
push rbp
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x600]
sub rsp, 0x700
mov rax, qword [0x140040650]
xor rax, rsp
mov qword [rbp + 0x5f0], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor edi, edi
mov qword [rbp + 0x178], 7
mov qword [rbp + 0x170], rdi
mov word [rbp + 0x160], di
cmp word [rax], di
jne 0x14000bdd4
mov r8d, edi
jmp 0x14000bdea
or r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], di
jne 0x14000bde0
lea rcx, [rbp + 0x160]
mov rdx, rax
call fcn.140002360
lea rdx, str.__action
lea rcx, [rbp + 0x370]
mov r8d, 8
mov qword [rbp + 0x388], 7
mov qword [rbp + 0x380], rdi
mov word [rbp + 0x370], di
call fcn.140002360
lea rdx, str.__log
lea rcx, [rbp + 0x410]
mov r8d, 5
mov qword [rbp + 0x428], 7
mov qword [rbp + 0x420], rdi
mov word [rbp + 0x410], di
call fcn.140002360
lea rdx, str.__deferlog
lea rcx, [rbp + 0x3b0]
mov r8d, 0xa
mov qword [rbp + 0x3c8], 7
mov qword [rbp + 0x3c0], rdi
mov word [rbp + 0x3b0], di
call fcn.140002360
lea rdx, str.__verbose
lea rcx, [rbp + 0x350]
mov r8d, 9
mov qword [rbp + 0x368], 7
mov qword [rbp + 0x360], rdi
mov word [rbp + 0x350], di
call fcn.140002360
lea rdx, str.__elevate
lea rcx, [rbp + 0x2b0]
mov r8d, 9
mov qword [rbp + 0x2c8], 7
mov qword [rbp + 0x2c0], rdi
mov word [rbp + 0x2b0], di
call fcn.140002360
lea rdx, str.__inf
lea rcx, [rbp + 0x2d0]
mov r8d, 5
mov qword [rbp + 0x2e8], 7
mov qword [rbp + 0x2e0], rdi
mov word [rbp + 0x2d0], di
call fcn.140002360
lea rdx, str.__id
lea rcx, [rbp + 0x238]
mov r8d, 4
mov qword [rbp + 0x250], 7
mov qword [rbp + 0x248], rdi
mov word [rbp + 0x238], di
call fcn.140002360
lea rdx, str.__event
lea rcx, [rbp + 0x218]
mov r8d, 7
mov qword [rbp + 0x230], 7
mov qword [rbp + 0x228], rdi
mov word [rbp + 0x218], di
call fcn.140002360
lea rdx, str.__port
lea rcx, [rbp + 0x3d0]
mov r8d, 6
mov qword [rbp + 0x3e8], 7
mov qword [rbp + 0x3e0], rdi
mov word [rbp + 0x3d0], di
call fcn.140002360
lea rdx, str.__source
lea rcx, [rbp + 0x390]
mov r8d, 8
mov qword [rbp + 0x3a8], 7
mov qword [rbp + 0x3a0], rdi
mov word [rbp + 0x390], di
call fcn.140002360
lea rdx, str.__dll
lea rcx, [rbp + 0x2f0]
mov r8d, 5
mov qword [rbp + 0x308], 7
mov qword [rbp + 0x300], rdi
mov word [rbp + 0x2f0], di
call fcn.140002360
mov qword [rbp + 0x408], 7
lea rdx, str.__oa
lea rcx, [rbp + 0x3f0]
mov r8d, 4
mov qword [rbp + 0x400], rdi
mov word [rbp + 0x3f0], di
call fcn.140002360
lea r8, [rbp + 0x1f8]
lea rdx, [rbp + 0x410]
lea rcx, [rbp + 0x160]
mov qword [rbp + 0x210], 7
mov qword [rbp + 0x208], rdi
mov word [rbp + 0x1f8], di
call fcn.14000bab0
test al, al
jne 0x14000c0a1
lea rdx, str.TeamViewer11_Hooks.log
lea rcx, [rbp + 0x1f8]
mov r8d, 0x16
call fcn.140002360
lea r8, [rbp + 0x310]
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x160]
mov qword [rbp + 0x328], 7
mov qword [rbp + 0x320], rdi
mov word [rbp + 0x310], di
call fcn.14000bab0
lea r8, [rbp + 0x310]
lea rdx, [rbp + 0x350]
test al, al
lea rcx, [rbp + 0x160]
sete r14b
call fcn.14000bab0
mov r12d, 0xc8
test al, al
mov r13d, 0x64
lea rdx, [rbp + 0x1f8]
cmovne r12d, r13d
xor eax, eax
cmp qword [rbp + 0x210], 8
cmovae rdx, qword [rbp + 0x1f8]
lea rcx, [rbp + 0x110]
mov r8d, r12d
mov qword [rbp + 0x110], rax
call fcn.14000a6d0
test r14b, r14b
je 0x14000c146
mov rcx, qword [rbp + 0x110]
call fcn.14000a640
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea r8, str.Loader_started_with:__ls
lea rcx, [rbp + 0x110]
mov r9, rax
mov edx, 0xc8
call fcn.14000a820
lea r8, [rbp + 0x330]
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0x160]
mov qword [rbp + 0x348], 7
mov qword [rbp + 0x340], rdi
mov word [rbp + 0x330], di
call fcn.14000bab0
test al, al
jne 0x14000c1bb
lea r8, str.Type_missing_in_command_line
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
jmp 0x14000c99d
lea rcx, [rbp + 0x430]
xor edx, edx
mov r8d, 0xb8
mov qword [rsp + 0x730], rbx
call fcn.14001b2d0
lea rcx, [rbp + 0x430]
call fcn.1400094d0
lea rdx, [rbp + 0x330]
call fcn.14000fe00
mov rcx, qword [0x140043ae8]
mov rbx, rax
cmp rax, rcx
je 0x14000c220
lea rdx, [rax + 0x20]
lea rcx, [rbp + 0x330]
call fcn.140004480
mov rcx, qword [0x140043ae8]
mov qword [rbp + 0x98], rbx
test eax, eax
jns 0x14000c227
mov qword [rbp + 0x98], rcx
lea rax, [rbp + 0x98]
mov qword [rsp + 0x738], rsi
mov esi, edi
mov rax, qword [rax]
cmp rcx, rax
je 0x14000c243
mov esi, dword [rax + 0x40]
lea r8, [rbp + 0x310]
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x160]
mov qword [rsp + 0x740], r15
call fcn.14000bab0
test al, al
je 0x14000c5dd
mov qword [rbp + 0x98], rdi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r9, qword [rbp + 0x438]
test r9, r9
je 0x14000c5b7
lea r8, [rbp + 0x98]
mov edx, 0x10000000
mov rcx, rax
call r9
test eax, eax
je 0x14000c5b7
mov rax, qword [rbp + 0x430]
mov dword [rbp + 0x138], edi
test rax, rax
je 0x14000c979
lea rcx, [rbp + 0x138]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rcx
mov rcx, qword [rbp + 0x98]
lea edx, [r9 + 0x14]
call rax
mov dword [rsp + 0x30], eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x14000c2ff
cmp eax, 0x18
je 0x14000c2ff
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.GetTokenInformation_1__failed__d
jmp 0x14000c5c4
mov ebx, dword [rbp + 0x138]
mov ecx, ebx
call fcn.140013e1c
mov r15, rax
cmp qword [rbp + 0x430], rdi
je 0x14000c5a8
mov rdx, qword [rbp + 0x98]
lea rax, [rsp + 0x30]
lea rcx, [rbp + 0x430]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x138]
mov r9d, ebx
mov r8, r15
mov qword [rsp + 0x20], rax
call fcn.140009c70
test al, al
je 0x14000c5a8
cmp dword [rsp + 0x30], edi
je 0x14000c5a8
mov ebx, dword [r15]
mov rcx, r15
call fcn.140018fb8
test ebx, ebx
jne 0x14000c5dd
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x140]
call fcn.140004590
lea rcx, [rbp + 0x140]
call fcn.14000deb0
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x140]
mov r9, rax
xor r8d, r8d
mov rbx, rax
call fcn.140008000
lea rcx, [rbp + 0x140]
mov r8, rbx
xor edx, edx
call fcn.140003270
lea rcx, [rbp + 0x2b0]
call fcn.140007da0
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x140]
xor r8d, r8d
mov rbx, rax
call fcn.140007dc0
lea rcx, [rbp + 0x140]
mov r8, rbx
mov rdx, rax
call fcn.140003270
lea rcx, [rbp + 0x1d0]
mov edx, 0x22
xor r8d, r8d
call fcn.140007f00
cmp rax, 0xffffffffffffffff
je 0x14000c43f
nop dword [rax]
lea rcx, [rbp + 0x1d0]
mov r8d, 1
mov rdx, rax
call fcn.140003270
lea rcx, [rbp + 0x1d0]
mov edx, 0x22
xor r8d, r8d
call fcn.140007f00
cmp rax, 0xffffffffffffffff
jne 0x14000c410
lea rcx, [rbp + 0x1d0]
call fcn.14000ded0
cmp rax, 0xffffffffffffffff
je 0x14000c461
lea rdx, [rax + 1]
lea rcx, [rbp + 0x1d0]
call fcn.140003220
xor edx, edx
lea rcx, [rbp + 0xa0]
lea r8d, [rdx + 0x70]
call fcn.14001b2d0
lea rax, str.runas
lea rcx, [rbp + 0x1d0]
mov qword [rbp + 0xb0], rax
mov dword [rbp + 0xa0], 0x70
call fcn.140001e50
lea rcx, [rbp + 0x140]
mov qword [rbp + 0xb8], rax
call fcn.140001e50
lea rcx, [rbp + 0xa0]
mov dword [rbp + 0xd0], 1
mov qword [rbp + 0xc0], rax
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x14000c6fd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.ShellExecuteEx___failed__d
lea rcx, [rbp + 0x110]
mov r9d, eax
mov edx, 0xc8
call fcn.14000a820
lea eax, [rsi - 2]
cmp eax, 3
ja 0x14000c6fd
lea rcx, [rbp + 0x180]
call fcn.140007ce0
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
je 0x14000c59c
lea rcx, [rbp + 0x260]
call fcn.14000d8b0
lea rcx, [rbp + 0x1f8]
call fcn.140001e50
lea rcx, [rbp + 0x118]
mov rdx, rax
call fcn.140001cd0
lea rax, [rbp + 0x430]
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x260]
movzx r9d, r14b
mov qword [rsp + 0x20], rax
call fcn.140004700
lea rcx, [rbp + 0x118]
call fcn.140001bc0
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x260]
call fcn.140005d00
lea rcx, [rbp + 0x260]
call fcn.140004a20
lea rcx, [rbp + 0x180]
jmp 0x14000c6f8
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.GetTokenInformation_2__failed__d
jmp 0x14000c5c4
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.OpenProcessToken___failed__d
lea rcx, [rbp + 0x110]
mov r9d, eax
mov edx, 0xc8
call fcn.14000a820
jmp 0x14000c979
lea eax, [rsi - 1]
cmp eax, 0xc
ja case.default.0x14000c5fc
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0xd874]
add rcx, rdx
jmp rcx
lea rcx, [rbp + 0x180]
call fcn.14000d8e0
lea rcx, [rbp + 0x1f8]
call fcn.140001e50
lea rcx, [rbp + 0x180]
movzx r9d, r14b
mov rdx, rax
mov r8d, r12d
call fcn.140009ea0
lea rcx, [rbp + 0x180]
call fcn.140009ff0
lea rcx, [rbp + 0x180]
mov edi, eax
call fcn.140009f40
jmp 0x14000c979
lea rcx, [rbp + 0x140]
call fcn.140007ce0
lea rcx, [rbp + 0x1d0]
call fcn.140007ce0
lea rcx, [rbp + 0x118]
call fcn.140007ce0
lea r8, [rbp + 0x1d0]
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
jne 0x14000c696
lea r8, str.missing_id
jmp 0x14000c6e0
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x160]
movzx ebx, al
call fcn.14000bab0
test bl, bl
jne 0x14000c71a
lea eax, [rsi - 2]
cmp eax, 1
ja 0x14000c71a
lea r8, str.missing_inf
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x118]
call fcn.140001bc0
lea rcx, [rbp + 0x1d0]
call fcn.140001bc0
lea rcx, [rbp + 0x140]
call fcn.140001bc0
jmp 0x14000c979
lea rcx, [rbp + 0x180]
call fcn.14000d8b0
lea rcx, [rbp + 0x1f8]
call fcn.140001e50
lea rcx, [rbp + 0x18]
mov rdx, rax
call fcn.140001cd0
lea rax, [rbp + 0x430]
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x180]
movzx r9d, r14b
mov qword [rsp + 0x20], rax
call fcn.140004700
lea rcx, [rbp + 0x18]
call fcn.140001bc0
sub esi, 2
je 0x14000c890
dec esi
je 0x14000c7aa
dec esi
jne 0x14000c910
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x180]
call fcn.140004f80
cmp eax, 1
je 0x14000c910
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.Remove_failed__d
jmp 0x14000c8fc
lea r8, [rbp + 0x1d0]
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x180]
call fcn.140004e70
mov ebx, eax
cmp eax, 1
je 0x14000c7ec
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.Update_failed__d
lea rcx, [rbp + 0x110]
mov r9d, eax
mov edx, 0xc8
call fcn.14000a820
cmp ebx, 3
jne 0x14000c910
lea r8, str.DevInst_not_found__attempting_Rescan
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x180]
call fcn.140005bd0
cmp eax, 1
jne 0x14000c881
lea r8, str.Rescan_successful__attempting_Update
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
lea r8, [rbp + 0x1d0]
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x180]
call fcn.140004e70
cmp eax, 1
jne 0x14000c872
lea r8, str.Update_successful
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
jmp 0x14000c910
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.Update_failed__d
jmp 0x14000c8fc
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.Rescan_failed__d
jmp 0x14000c8fc
lea r8, [rbp + 0x1d0]
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x180]
call fcn.140004ab0
mov ebx, eax
cmp eax, 1
je 0x14000c910
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.Install_failed__d
lea rcx, [rbp + 0x110]
mov r9d, eax
mov edx, 0xc8
call fcn.14000a820
cmp ebx, 6
jne 0x14000c910
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x180]
call fcn.140005fd0
cmp eax, 1
je 0x14000c910
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.RemoveRescan_failed__d
lea rcx, [rbp + 0x110]
mov r9d, eax
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x118]
call fcn.140007db0
test al, al
jne 0x14000c933
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x180]
call fcn.140005d00
lea rcx, [rbp + 0x180]
call fcn.140004a20
lea rcx, [rbp + 0x118]
call fcn.140001bc0
lea rcx, [rbp + 0x1d0]
call fcn.140001bc0
lea rcx, [rbp + 0x140]
call fcn.140001bc0
lea r8, str.Loader_shutdown...
lea rcx, [rbp + 0x110]
mov edx, r13d
call fcn.14000a820
lea rcx, [rbp + 0x430]
call fcn.140009c00
mov r15, qword [rsp + 0x740]
mov rsi, qword [rsp + 0x738]
mov rbx, qword [rsp + 0x730]
lea rcx, [rbp + 0x330]
call fcn.140001bc0
lea rcx, [rbp + 0x110]
call fcn.14000a7b0
lea rcx, [rbp + 0x310]
call fcn.140001bc0
lea rcx, [rbp + 0x1f8]
call fcn.140001bc0
lea rcx, [rbp + 0x3f0]
call fcn.140001bc0
lea rcx, [rbp + 0x2f0]
call fcn.140001bc0
lea rcx, [rbp + 0x390]
call fcn.140001bc0
lea rcx, [rbp + 0x3d0]
call fcn.140001bc0
lea rcx, [rbp + 0x218]
call fcn.140001bc0
lea rcx, [rbp + 0x238]
call fcn.140001bc0
lea rcx, [rbp + 0x2d0]
call fcn.140001bc0
lea rcx, [rbp + 0x2b0]
call fcn.140001bc0
lea rcx, [rbp + 0x350]
call fcn.140001bc0
lea rcx, [rbp + 0x3b0]
call fcn.140001bc0
lea rcx, [rbp + 0x410]
call fcn.140001bc0
lea rcx, [rbp + 0x370]
call fcn.140001bc0
lea rcx, [rbp + 0x160]
call fcn.140001bc0
mov eax, edi
mov rcx, qword [rbp + 0x5f0]
xor rcx, rsp
call fcn.1400184d0
add rsp, 0x700
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret
lea rcx, [rbp + 0x118]
call fcn.140007ce0
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
lea rcx, [rbp + 0x180]
call fcn.14000d8b0
lea rcx, [rbp + 0x1f8]
call fcn.140001e50
lea rcx, [rbp - 0x28]
mov rdx, rax
call fcn.140001cd0
lea rax, [rbp + 0x430]
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x180]
movzx r9d, r14b
mov qword [rsp + 0x20], rax
call fcn.140004700
lea rcx, [rbp - 0x28]
call fcn.140001bc0
lea rcx, [rbp + 0x180]
call fcn.140005bd0
cmp eax, 1
je 0x14000cb2f
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.Rescan_failed__d
lea rcx, [rbp + 0x110]
mov r9d, eax
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x118]
call fcn.140007db0
test al, al
jne 0x14000cb52
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x180]
call fcn.140005d00
lea rcx, [rbp + 0x180]
call fcn.140004a20
lea rcx, [rbp + 0x118]
jmp 0x14000c95e
lea rcx, [rbp + 0x140]
call fcn.140007ce0
lea rcx, [rbp + 0x118]
call fcn.140007ce0
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
jne 0x14000cbd5
lea r8, str.missing_id
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x118]
call fcn.140001bc0
lea rcx, [rbp + 0x140]
call fcn.140001bc0
jmp 0x14000c979
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
lea rcx, [rbp + 0x180]
call fcn.14000d8b0
lea rcx, [rbp + 0x1f8]
call fcn.140001e50
lea rcx, [rsp + 0x38]
mov rdx, rax
call fcn.140001cd0
lea rax, [rbp + 0x430]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x180]
movzx r9d, r14b
mov qword [rsp + 0x20], rax
call fcn.140004700
lea rcx, [rsp + 0x38]
call fcn.140001bc0
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x180]
call fcn.140005fd0
cmp eax, 1
je 0x14000cc78
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.RemoveRescan_failed__d
lea rcx, [rbp + 0x110]
mov r9d, eax
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x118]
call fcn.140007db0
test al, al
jne 0x14000cc9b
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x180]
call fcn.140005d00
lea rcx, [rbp + 0x180]
call fcn.140004a20
lea rcx, [rbp + 0x118]
jmp 0x14000c952
lea rcx, [rbp + 0x118]
call fcn.140007ce0
lea rcx, [rbp + 0x1d0]
call fcn.140007ce0
lea rcx, [rbp + 0x140]
call fcn.140007ce0
lea r8, [rbp + 0x1d0]
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x160]
mov word [rbp + 0x138], di
call fcn.14000bab0
test al, al
jne 0x14000cd05
lea r8, str.missing_id
jmp 0x14000cd2a
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
jne 0x14000cd64
lea r8, str.missing_port_on_AddPortMonitor
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x140]
call fcn.140001bc0
lea rcx, [rbp + 0x1d0]
call fcn.140001bc0
lea rcx, [rbp + 0x118]
call fcn.140001bc0
jmp 0x14000c979
lea rcx, [rbp + 0x4f0]
call fcn.14000d930
lea rcx, [rbp + 0x4f0]
call fcn.14000df10
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x500]
call fcn.1400124f0
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0x4f0]
call fcn.14000d9c0
lea rcx, [rbp + 0x4f0]
call fcn.14000d900
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
lea rcx, [rbp + 0x180]
call fcn.14000d8b0
lea rcx, [rbp + 0x1f8]
call fcn.140001e50
lea rcx, [rsp + 0x58]
mov rdx, rax
call fcn.140001cd0
lea rax, [rbp + 0x430]
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x180]
movzx r9d, r14b
mov qword [rsp + 0x20], rax
call fcn.140004700
lea rcx, [rsp + 0x58]
call fcn.140001bc0
movzx r8d, word [rbp + 0x138]
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x180]
call fcn.1400061c0
cmp eax, 1
je 0x14000ce5b
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.AddPortMonitor_failed__d
lea rcx, [rbp + 0x110]
mov r9d, eax
mov edx, 0xc8
call fcn.14000a820
jmp 0x14000ce73
lea r8, str.AddPortMonitor_success
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x118]
call fcn.140007db0
test al, al
jne 0x14000ce96
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x180]
call fcn.140005d00
lea rcx, [rbp + 0x180]
call fcn.140004a20
lea rcx, [rbp + 0x140]
call fcn.140001bc0
lea rcx, [rbp + 0x1d0]
call fcn.140001bc0
lea rcx, [rbp + 0x118]
jmp 0x14000c95e
lea rcx, [rbp + 0x118]
call fcn.140007ce0
lea rcx, [rbp + 0x140]
call fcn.140007ce0
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
jne 0x14000cf31
lea r8, str.missing_id
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x140]
call fcn.140001bc0
lea rcx, [rbp + 0x118]
call fcn.140001bc0
jmp 0x14000c979
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
lea rcx, [rbp + 0x180]
call fcn.14000d8b0
lea rcx, [rbp + 0x1f8]
call fcn.140001e50
lea rcx, [rbp - 0x48]
mov rdx, rax
call fcn.140001cd0
lea rax, [rbp + 0x430]
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x180]
movzx r9d, r14b
mov qword [rsp + 0x20], rax
call fcn.140004700
lea rcx, [rbp - 0x48]
call fcn.140001bc0
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x180]
call fcn.1400063e0
cmp eax, 1
je 0x14000cfd3
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.DeletePortMonitor_failed__d
lea rcx, [rbp + 0x110]
mov r9d, eax
mov edx, 0xc8
call fcn.14000a820
jmp 0x14000cfeb
lea r8, str.DeletePortMonitor_success
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x118]
call fcn.140007db0
test al, al
jne 0x14000d00e
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x180]
call fcn.140005d00
lea rcx, [rbp + 0x180]
call fcn.140004a20
lea rcx, [rbp + 0x140]
call fcn.140001bc0
lea rcx, [rbp + 0x118]
jmp 0x14000c95e
lea rcx, [rbp + 0x118]
call fcn.140007ce0
lea rcx, [rbp + 0x180]
call fcn.140007ce0
lea rcx, [rbp + 0x1d0]
call fcn.140007ce0
lea rcx, [rbp + 0x140]
call fcn.140007ce0
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
jne 0x14000d089
lea r8, str.missing_id
jmp 0x14000d0d5
lea r8, [rbp + 0x1d0]
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
jne 0x14000d0b0
lea r8, str.missing_dll_name
jmp 0x14000d0d5
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
jne 0x14000d103
lea r8, str.missing_source
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x140]
call fcn.140001bc0
lea rcx, [rbp + 0x1d0]
call fcn.140001bc0
jmp 0x14000d576
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
lea rcx, [rbp + 0x260]
call fcn.14000d8b0
lea rcx, [rbp + 0x1f8]
call fcn.140001e50
lea rcx, [rbp - 8]
mov rdx, rax
call fcn.140001cd0
lea rax, [rbp + 0x430]
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x260]
movzx r9d, r14b
mov qword [rsp + 0x20], rax
call fcn.140004700
lea rcx, [rbp - 8]
call fcn.140001bc0
lea r9, [rbp + 0x140]
lea r8, [rbp + 0x1d0]
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x260]
call fcn.140006560
cmp eax, 1
je 0x14000d1b3
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.InstallPrintProcessor_failed__d
lea rcx, [rbp + 0x110]
mov r9d, eax
mov edx, 0xc8
call fcn.14000a820
jmp 0x14000d1cb
lea r8, str.InstallPrintProcessor_success
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x118]
call fcn.140007db0
test al, al
jne 0x14000d1ee
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x260]
call fcn.140005d00
lea rcx, [rbp + 0x260]
call fcn.140004a20
lea rcx, [rbp + 0x140]
call fcn.140001bc0
lea rcx, [rbp + 0x1d0]
call fcn.140001bc0
lea rcx, [rbp + 0x180]
call fcn.140001bc0
lea rcx, [rbp + 0x118]
jmp 0x14000c95e
lea r8, str.RemovePrintProcessor
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x118]
call fcn.140007ce0
lea rcx, [rbp + 0x140]
call fcn.140007ce0
lea rcx, [rbp + 0x180]
call fcn.140007ce0
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
je 0x14000d408
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
jne 0x14000d2b2
lea r8, str.missing_dll_name
jmp 0x14000d436
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
lea rcx, [rbp + 0x260]
call fcn.14000d8b0
lea rcx, [rbp + 0x1f8]
call fcn.140001e50
lea rcx, [rbp + 0x38]
mov rdx, rax
call fcn.140001cd0
lea rax, [rbp + 0x430]
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x260]
movzx r9d, r14b
mov qword [rsp + 0x20], rax
call fcn.140004700
lea rcx, [rbp + 0x38]
call fcn.140001bc0
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x260]
call fcn.1400066e0
cmp eax, 1
je 0x14000d35b
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.RemovePrintProcessor_failed__d
lea rcx, [rbp + 0x110]
mov r9d, eax
mov edx, 0xc8
call fcn.14000a820
jmp 0x14000d373
lea r8, str.RemovePrintProcessor_success
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x118]
call fcn.140007db0
test al, al
jne 0x14000d396
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x260]
call fcn.140005d00
lea rcx, [rbp + 0x260]
call fcn.140004a20
lea rcx, [rbp + 0x180]
call fcn.140001bc0
lea rcx, [rbp + 0x140]
call fcn.140001bc0
lea rcx, [rbp + 0x118]
jmp 0x14000c95e
lea rcx, [rbp + 0x118]
call fcn.140007ce0
lea rcx, [rbp + 0x140]
call fcn.140007ce0
lea rcx, [rbp + 0x180]
call fcn.140007ce0
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
jne 0x14000d411
lea r8, str.missing_id
jmp 0x14000d436
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
jne 0x14000d470
lea r8, str.missing_inf_name
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x180]
call fcn.140001bc0
lea rcx, [rbp + 0x140]
call fcn.140001bc0
lea rcx, [rbp + 0x118]
call fcn.140001bc0
jmp 0x14000c979
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
lea rcx, [rbp + 0x260]
call fcn.14000d8b0
lea rcx, [rbp + 0x1f8]
call fcn.140001e50
lea rcx, [rbp + 0x78]
mov rdx, rax
call fcn.140001cd0
lea rax, [rbp + 0x430]
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x260]
movzx r9d, r14b
mov qword [rsp + 0x20], rax
call fcn.140004700
lea rcx, [rbp + 0x78]
call fcn.140001bc0
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x260]
call fcn.1400069c0
cmp eax, 1
je 0x14000d51c
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.InstallPrintDriver_failed__d
lea rcx, [rbp + 0x110]
mov r9d, eax
mov edx, 0xc8
call fcn.14000a820
jmp 0x14000d373
lea r8, str.InstallPrintDriver_success
jmp 0x14000d362
lea rcx, [rbp + 0x118]
call fcn.140007ce0
lea rcx, [rbp + 0x180]
call fcn.140007ce0
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
jne 0x14000d593
lea r8, str.missing_id
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x180]
call fcn.140001bc0
lea rcx, [rbp + 0x118]
call fcn.140001bc0
jmp 0x14000c979
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
lea rcx, [rbp + 0x260]
call fcn.14000d8b0
lea rcx, [rbp + 0x1f8]
call fcn.140001e50
lea rcx, [rbp - 0x68]
mov rdx, rax
call fcn.140001cd0
lea rax, [rbp + 0x430]
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x260]
movzx r9d, r14b
mov qword [rsp + 0x20], rax
call fcn.140004700
lea rcx, [rbp - 0x68]
call fcn.140001bc0
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x260]
call fcn.140006c60
cmp eax, 1
je 0x14000d635
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.RemovePrintDriver_failed__d
lea rcx, [rbp + 0x110]
mov r9d, eax
mov edx, 0xc8
call fcn.14000a820
jmp 0x14000d64d
lea r8, str.RemovePrintDriver_success
lea rcx, [rbp + 0x110]
mov edx, 0xc8
call fcn.14000a820
lea rcx, [rbp + 0x118]
call fcn.140007db0
test al, al
jne 0x14000d670
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x260]
call fcn.140005d00
lea rcx, [rbp + 0x260]
call fcn.140004a20
lea rcx, [rbp + 0x180]
call fcn.140001bc0
lea rcx, [rbp + 0x118]
jmp 0x14000c95e
lea rcx, [rbp + 0x118]
call fcn.140007ce0
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
je 0x14000d582
lea rcx, [rbp + 0x140]
call fcn.140007ce0
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
jne 0x14000d700
lea rcx, [rbp + 0x140]
call fcn.140007db0
test al, al
je 0x14000cf14
lea rcx, [rbp + 0x180]
call fcn.140007ce0
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x160]
call fcn.14000bab0
test al, al
jne 0x14000d74d
lea rcx, [rbp + 0x140]
call fcn.140007db0
test al, al
jne 0x14000d74d
lea rdx, [0x140038904]
lea rcx, [rbp + 0x180]
call fcn.14000de80
lea rcx, [rbp + 0x1d0]
call fcn.14000d940
lea rcx, [rbp + 0x1f8]
call fcn.140001e50
lea rcx, [rsp + 0x78]
mov rdx, rax
call fcn.140001cd0
lea rax, [rbp + 0x180]
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x1d0]
movzx r9d, r14b
mov qword [rsp + 0x20], rax
call fcn.140013120
lea rcx, [rsp + 0x78]
call fcn.140001bc0
lea rdx, str.enable
lea rcx, [rbp + 0x140]
call fcn.140012750
test al, al
je 0x14000d7c2
lea rcx, [rbp + 0x1d0]
call fcn.140013200
jmp 0x14000d7e5
lea rdx, str.disable
lea rcx, [rbp + 0x140]
call fcn.140012750
test al, al
je 0x14000d7e5
lea rcx, [rbp + 0x1d0]
call fcn.140013210
lea rcx, [rbp + 0x260]
call fcn.14000d8b0
lea rcx, [rbp + 0x1f8]
call fcn.140001e50
lea rcx, [rbp + 0x58]
mov rdx, rax
call fcn.140001cd0
lea rax, [rbp + 0x430]
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x260]
movzx r9d, r14b
mov qword [rsp + 0x20], rax
call fcn.140004700
lea rcx, [rbp + 0x58]
call fcn.140001bc0
lea rcx, [rbp + 0x118]
call fcn.140007db0
test al, al
jne 0x14000d855
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x260]
call fcn.140005d00
lea rcx, [rbp + 0x260]
call fcn.140004a20
lea rcx, [rbp + 0x1d0]
call fcn.1400131f0
jmp 0x14000d3a2