Function at 0x140027780
Capabilities:
Enumerate gui resources
Query environment variable

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x11c0]
mov eax, 0x12c0
call fcn.140036de0
sub rsp, rax
mov rdi, rcx
xor esi, esi
lea rcx, [0x1400b5158]
mov dword [rsp + 0x44], esi
mov r14d, esi
mov r15d, r8d
mov rbx, rdx
call fcn.140033280
test eax, eax
jne 0x1400277e7
mov rcx, qword [0x1400b5090]
test rcx, rcx
je 0x1400277e0
lea r8, str._InstallFilterDriver_AcquireTheMutex_failed.
mov edx, 0x100
call fcn.14002fe30
xor eax, eax
jmp 0x14002816b
xor edx, edx
mov qword [rsp + 0x12f0], r12
mov r8d, 0x200
mov dword [rsp + 0x58], esi
lea rcx, [rbp + 0x1a0]
call fcn.140038310
xor edx, edx
mov dword [rsp + 0x54], esi
mov r8d, 0x200
lea rcx, [rbp - 0x60]
call fcn.140038310
movsd xmm0, qword [str.amdkmpfd]
lea rcx, str.dpinst.exe
movzx eax, byte [0x140092418]
movsd qword [rbp - 0x60], xmm0
mov byte [rbp - 0x58], al
call fcn.140026fe0
mov r12d, 1
test eax, eax
je 0x14002785c
mov edx, eax
lea rcx, [0x14002b110]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
jne 0x1400278da
lea rcx, str.ATISetup.exe
call fcn.140026fe0
test eax, eax
je 0x140027881
mov rcx, qword [0x1400b5090]
test rcx, rcx
je 0x1400278da
lea r9, str.ATISetup.exe
jmp 0x1400278c9
lea rcx, str.InstallManagerApp.exe
call fcn.140026fe0
test eax, eax
je 0x1400278a6
mov rcx, qword [0x1400b5090]
test rcx, rcx
je 0x1400278da
lea r9, str.InstallManagerApp.exe
jmp 0x1400278c9
lea rcx, str.RadeonInstaller.exe
call fcn.140026fe0
test eax, eax
je 0x1400278df
mov rcx, qword [0x1400b5090]
test rcx, rcx
je 0x1400278da
lea r9, str.RadeonInstaller.exe
lea r8, str.IsProcessFound:__s_is_running.
mov edx, 2
call fcn.14002ffd0
mov dword [rsp + 0x58], r12d
lea rax, [rsp + 0x54]
mov r9, rbx
mov r8, rdi
mov qword [rsp + 0x20], rax
mov edx, 0x200
lea rcx, [rbp + 0x1a0]
call fcn.140026a10
test eax, eax
jne 0x140027934
mov rcx, qword [0x1400b5090]
test rcx, rcx
je 0x140027921
lea r8, str._InstallFilterDriver_GetFilterInstallPath_failed.
mov edx, 0x100
call fcn.14002fe30
lea rcx, [0x1400b5158]
call fcn.140033340
xor eax, eax
jmp 0x140028163
mov rdi, 0xffffffffffffffff
lea rax, [rbp + 0x1a0]
mov rbx, rdi
inc rbx
cmp byte [rax + rbx], sil
jne 0x140027945
lea rax, [rbp - 0x78]
mov dword [rsp + 0x68], esi
mov qword [rsp + 0x28], rax
lea r8, str.RebootIsPending
lea rax, [rsp + 0x68]
mov dword [rbp - 0x78], 4
xor r9d, r9d
mov qword [rsp + 0x20], rax
lea rdx, [0x140089fd8]
mov rcx, 0xffffffff80000002
call fcn.140032c40
test eax, eax
mov eax, dword [0x1400b51f4]
je 0x1400279a2
cmp dword [rsp + 0x68], r12d
cmove eax, r12d
mov dword [0x1400b51f4], eax
cmp rbx, 0x1f3
jae 0x140028154
test eax, eax
jne 0x140028154
cmp dword [0x1400b5134], esi
jne 0x140028154
lea rcx, [rbp + 0x1a0]
dec rcx
cmp dword [rsp + 0x54], esi
je 0x140027a00
cmp byte [rcx + 1], sil
lea rcx, [rcx + 1]
jne 0x1400279d3
mov eax, dword [0x140092af8]
movsd xmm0, qword [str._amdpfdun.inf]
movsd qword [rcx], xmm0
mov dword [rcx + 8], eax
movzx eax, word [reloc.dwmapi.dll_Ordinal_102]
jmp 0x140027a26
cmp byte [rcx + 1], sil
lea rcx, [rcx + 1]
jne 0x140027a00
mov eax, dword [0x140092778]
movsd xmm0, qword [str._amdkmpfd.inf]
movsd qword [rcx], xmm0
mov dword [rcx + 8], eax
movzx eax, word [reloc.dwmapi.dll_Ordinal_102]
mov word [rcx + 0xc], ax
xor edx, edx
lea rcx, [rbp + 0x5a0]
mov r8d, 0x200
call fcn.140038310
xor edx, edx
lea rcx, [rbp + 0x7a0]
mov r8d, 0x200
call fcn.140038310
lea r9, [rbp - 0x60]
lea r8, [rbp + 0x7a0]
lea rdx, [rbp + 0x5a0]
lea rcx, [rbp + 0x1a0]
call fcn.140025e60
test eax, eax
je 0x140028137
mov ecx, 0x4100
call fcn.140036d44
mov ecx, 0x4100
mov qword [rsp + 0x48], rax
call fcn.140036d44
mov rcx, qword [rsp + 0x48]
mov r12, rax
mov qword [rsp + 0x60], rax
test rcx, rcx
je 0x140028128
test rax, rax
je 0x140028123
xor edx, edx
mov qword [rsp + 0x12f8], r13
mov r8d, 0x4100
call fcn.140038310
xor edx, edx
mov r8d, 0x4100
mov rcx, r12
call fcn.140038310
mov ebx, esi
mov dword [rsp + 0x6c], 8
xor edx, edx
mov dword [rsp + 0x40], ebx
mov r8d, 0x200
mov dword [rsp + 0x70], 8
lea rcx, [rbp - 0x60]
call fcn.140038310
mov rcx, rsi
nop
movzx eax, byte [rbp + rcx + 0x5a0]
mov byte [rbp + rcx - 0x60], al
lea rcx, [rcx + 1]
test al, al
jne 0x140027b00
lea rdx, str..inf
lea rcx, [rbp - 0x60]
call qword [sym.imp.SHLWAPI.dll_StrStrIA]
test rax, rax
je 0x140027b34
mov word [rax + 1], 0x7973
mov byte [rax + 3], 0x73
xor edx, edx
lea rcx, [rbp + 0x3a0]
mov r8d, 0x200
call fcn.140038310
mov r8d, 0x104
lea rdx, [rbp + 0x3a0]
lea rcx, str._SYSTEMROOT_
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
lea rcx, [rbp + 0x3a0]
dec rcx
nop dword [rax]
cmp byte [rcx + 1], bl
lea rcx, [rcx + 1]
jne 0x140027b70
movzx eax, word [0x140092400]
movups xmm0, xmmword [str.System32drivers_]
movups xmmword [rcx], xmm0
mov word [rcx + 0x10], ax
movzx eax, byte [0x140092402]
mov byte [rcx + 0x12], al
lea rcx, [rbp + 0x3a0]
dec rcx
cmp byte [rcx + 1], bl
lea rcx, [rcx + 1]
jne 0x140027ba2
movsd xmm0, qword [str.amdkmpfd]
movzx eax, byte [0x140092418]
movsd qword [rcx], xmm0
mov byte [rcx + 8], al
lea rcx, [rbp + 0x3a0]
dec rcx
nop dword [rax + rax]
cmp byte [rcx + 1], bl
lea rcx, [rcx + 1]
jne 0x140027bd0
mov eax, dword [str..sys]
mov rdx, rdi
mov dword [rcx], eax
movzx eax, byte [0x140092408]
mov byte [rcx + 4], al
xor eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], rax
lea rax, [rbp - 0x60]
inc rdx
cmp byte [rax + rdx], bl
jne 0x140027c05
lea r8, [rbp - 0x70]
lea rcx, [rbp - 0x60]
call fcn.14002df80
test eax, eax
je 0x140027c73
lea rax, [rbp + 0x3a0]
inc rdi
cmp byte [rax + rdi], bl
jne 0x140027c25
mov rdx, rdi
lea r8, [rsp + 0x78]
lea rcx, [rbp + 0x3a0]
call fcn.14002df80
test eax, eax
je 0x140027c73
mov r14, qword [rsp + 0x78]
mov edi, 1
cmp r14w, word [rbp - 0x70]
jne 0x140027c7d
movzx eax, word [rbp - 0x6e]
cmp word [rsp + 0x7a], ax
jne 0x140027c7d
movzx eax, word [rbp - 0x6a]
cmp word [rsp + 0x7e], ax
cmove ebx, edi
mov dword [rsp + 0x40], ebx
jmp 0x140027c7d
mov r14, qword [rsp + 0x78]
mov edi, 1
xor edx, edx
mov dword [rsp + 0x50], esi
mov r8d, 0x820
lea rcx, [rbp + 0x9a0]
call fcn.140038310
mov rdx, qword [rsp + 0x48]
lea rax, [rbp + 0x9a0]
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x6c]
lea rax, [rsp + 0x50]
mov r9, r12
mov qword [rsp + 0x28], rax
mov ecx, r15d
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.140029110
mov r13d, eax
test eax, eax
je 0x140027cd8
mov r15d, edi
test ebx, ebx
jne 0x140027cdb
mov r15d, esi
test r13d, r13d
je 0x140027ce9
test r15d, r15d
jne 0x140028113
mov dword [rbp + 0x1208], esi
mov edx, esi
mov esi, dword [rsp + 0x6c]
mov r12d, edi
test esi, esi
je 0x140027d49
xor ebx, ebx
test esi, esi
je 0x140027d49
mov r14, qword [rsp + 0x48]
test edx, edx
jne 0x140027d44
mov eax, ebx
imul rcx, rax, 0x820
cmp dword [rcx + r14 + 0x614], edx
je 0x140027d3e
xor r8d, r8d
lea r9, [rbp + 0x1208]
add rcx, 0x214
add rcx, r14
lea edx, [r8 + 4]
call qword [sym.imp.DIFXAPI.dll_DriverPackageUninstallA]
mov edx, edi
inc ebx
cmp ebx, esi
jb 0x140027d07
mov r14, qword [rsp + 0x78]
mov edi, dword [rsp + 0x70]
test edi, edi
je 0x140027da3
test edx, edx
jne 0x140027dcf
xor ebx, ebx
test edi, edi
je 0x140027da7
nop dword [rax + rax]
test edx, edx
jne 0x140027dcf
mov eax, ebx
imul rcx, rax, 0x820
mov rax, qword [rsp + 0x60]
cmp dword [rcx + rax + 0x614], edx
je 0x140027d9d
xor r8d, r8d
lea r9, [rbp + 0x1208]
add rax, 0x214
add rcx, rax
lea edx, [r8 + 4]
call qword [sym.imp.DIFXAPI.dll_DriverPackageUninstallA]
mov edx, 1
inc ebx
cmp ebx, edi
jb 0x140027d60
test edx, edx
jne 0x140027dcf
cmp dword [rbp + 0xfb4], 0
je 0x140027ee1
xor r8d, r8d
lea r9, [rbp + 0x1208]
lea rcx, [rbp + 0xbb4]
lea edx, [r8 + 4]
call qword [sym.imp.DIFXAPI.dll_DriverPackageUninstallA]
cmp dword [rsp + 0x50], 1
jbe 0x140027ed6
cmp dword [rsp + 0x40], 0
jne 0x140027ed6
mov eax, 0x7e2
cmp r14w, ax
ja 0x140027ed6
cmp word [rsp + 0x7a], 8
jae 0x140027ed6
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov r14d, 1
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov dword [rsp + 0x40], r14d
lea r8, [0x140092b00]
mov rcx, 0xffffffff80000002
lea rdx, [0x140089fd8]
call fcn.140033070
test eax, eax
jne 0x140027e5e
mov rcx, qword [0x1400b5090]
test rcx, rcx
je 0x140027e5e
lea r9, str.Write_RegValue_EEU_REBOOT_POP_UP_REQUIRED_failed.
mov r8d, r14d
mov edx, 0x60004005
call fcn.14002fdb0
lea rax, [rsp + 0x50]
mov dword [rsp + 0x28], 4
xor ebx, ebx
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov dword [0x1400b51f4], r14d
lea r8, str.RebootIsPending
mov dword [0x1400b5134], r14d
lea rdx, [0x140089fd8]
mov dword [rsp + 0x50], r14d
mov rcx, 0xffffffff80000002
mov r12d, ebx
call fcn.140033070
test eax, eax
jne 0x140027ec9
mov rcx, qword [0x1400b5090]
test rcx, rcx
je 0x140027ec9
lea r9, str.Write_RegValue_EEU_REBOOT_PENDING_failed.
mov r8d, r14d
mov edx, 0x60004005
call fcn.14002fdb0
cmp dword [rsp + 0x58], ebx
jne 0x140027ee9
call fcn.14001dfd0
jmp 0x140027ee9
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r14d, 1
xor ebx, ebx
mov edx, 0xc
lea rcx, [rbp + 0x5a0]
call qword [sym.imp.DIFXAPI.dll_DriverPackagePreinstallA]
cmp eax, 0xb7
jne 0x140027f14
mov edx, 0xd
lea rcx, [rbp + 0x5a0]
call qword [sym.imp.DIFXAPI.dll_DriverPackagePreinstallA]
test eax, eax
je 0x140027f4b
cmp eax, 0xb7
je 0x140027f4b
mov rcx, qword [0x1400b5090]
test rcx, rcx
je 0x140027f3c
lea r8, str.InstallFilterDriver:_The_install_using_DriverPackagePreinstall_failed.
mov edx, 2
call fcn.14002ffd0
mov r12, qword [rsp + 0x60]
mov r14d, dword [rsp + 0x44]
jmp 0x140028116
test r12d, r12d
je 0x140027f3c
test esi, esi
je 0x140027f7d
test r13d, r13d
je 0x140027f61
mov r9d, r14d
test r15d, r15d
je 0x140027f64
mov r9d, ebx
mov rdx, qword [rsp + 0x48]
lea rcx, [rbp + 0x1208]
mov r8d, esi
call fcn.140028190
mov r14d, eax
jmp 0x140027f82
mov r14d, dword [rsp + 0x44]
test edi, edi
je 0x140027fb4
test r13d, r13d
je 0x140027f95
test r15d, r15d
jne 0x140027f95
mov ebx, 1
mov r12, qword [rsp + 0x60]
lea rcx, [rbp + 0x1208]
mov rdx, r12
mov r9d, ebx
mov r8d, edi
call fcn.140028190
mov r14d, eax
jmp 0x140027fb9
mov r12, qword [rsp + 0x60]
test r14d, r14d
je 0x140028116
lea rax, [rbp + 0x5a0]
mov dword [rsp + 0x28], 0x200
mov r9d, 2
mov qword [rsp + 0x20], rax
lea r8, str.EeuPciFilterUnInstallPath
mov rcx, 0xffffffff80000002
lea rdx, [0x140089fd8]
call fcn.140033070
lea rax, [rbp + 0x7a0]
mov dword [rsp + 0x28], 0x200
mov r9d, 2
mov qword [rsp + 0x20], rax
lea r8, str.EeuClientPathForPciFilterUnInstall
mov rcx, 0xffffffff80000002
lea rdx, [0x140089fd8]
call fcn.140033070
cmp dword [rsp + 0x54], 0
lea rax, str._amdpfdun.inf
lea rdx, str._amdkmpfd.inf
cmovne rdx, rax
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.SHLWAPI.dll_StrStrIA]
test rax, rax
je 0x14002808a
mov byte [rax], 0
lea r8, str.EeuPciFilterPackageInstallFolder
lea rax, [rbp + 0x1a0]
mov dword [rsp + 0x28], 0x200
mov r9d, 2
mov qword [rsp + 0x20], rax
lea rdx, [0x140089fd8]
mov rcx, 0xffffffff80000002
call fcn.140033070
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov ebx, 1
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov dword [rsp + 0x40], ebx
lea r8, [0x140092b00]
mov rcx, 0xffffffff80000002
lea rdx, [0x140089fd8]
call fcn.140033070
test eax, eax
jne 0x1400280e6
mov rcx, qword [0x1400b5090]
test rcx, rcx
je 0x1400280e6
lea r9, str.Write_RegValue_EEU_REBOOT_POP_UP_REQUIRED_failed.
mov r8d, ebx
mov edx, 0x60004005
call fcn.14002fdb0
cmp dword [0x1400b5104], 5
mov dword [0x1400b5134], ebx
mov dword [0x1400b51f4], ebx
jge 0x140028105
mov ecx, 0x8086
call fcn.14001e860
cmp dword [rsp + 0x58], 0
jne 0x140028116
call fcn.14001dfd0
jmp 0x140028116
mov r14d, esi
mov rcx, qword [rsp + 0x48]
mov r13, qword [rsp + 0x12f8]
call fcn.140036d4c
test r12, r12
je 0x140028154
mov rcx, r12
call fcn.140036d4c
jmp 0x140028154
mov rcx, qword [0x1400b5090]
test rcx, rcx
je 0x140028154
lea r8, str.InstallFilterDriver:_CreateInstallPackage_fails.
mov edx, 2
call fcn.14002ffd0
lea rcx, [0x1400b5158]
call fcn.140033340
mov eax, r14d
mov r12, qword [rsp + 0x12f0]
mov rbx, qword [rsp + 0x1300]
add rsp, 0x12c0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret