Function at 0x1400335f8
Capabilities:
Write file on windows

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
mov qword [r11 + 0x10], rdx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
xor ebp, ebp
mov r15d, r9d
mov r13, rcx
mov ebx, 1
mov esi, ebp
cmp rdx, 0xffffffffffffffff
je 0x140033868
test r9d, r9d
mov dword [rsp + 0x28], ebx
lea rcx, str.REGISTEROCXS
lea rax, str.UNREGISTEROCXS
cmovne rax, rcx
lea r9, str.DEFAULTINSTALL
test r8, r8
mov qword [r11 - 0x68], rax
lea rdx, [r11 + 0x10]
cmovne r9, r8
lea r8, [r11 - 0x48]
xor ecx, ecx
call fcn.140030764
test eax, eax
je 0x140033868
mov eax, r15d
neg eax
sbb ecx, ecx
add ecx, 0x26db
call fcn.140015b74
lea rcx, [rsp + 0x40]
call fcn.140030614
mov qword [rsp + 0x38], rax
mov r14, rax
test rax, rax
je 0x140033868
lea rdx, [0x140043808]
mov rcx, rax
call qword [sym.imp.msvcrt.dll_wcstok]
mov rdi, rax
test rax, rax
je 0x140033858
mov r8, rdi
lea rdx, str._Parsing_RegisterOCX_INFSection:_S._r_n
mov ecx, 4
call fcn.140016868
lea rcx, str.setupapi.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140033701
mov rcx, qword [rsp + 0x98]
lea r9, [rsp + 0x40]
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, rdi
call fcn.14001b05c
jmp 0x140033703
mov eax, ebp
test eax, eax
je 0x140033838
mov rcx, qword [rsp + 0x98]
mov rdx, rdi
mov ebp, 1
call fcn.14001aed0
mov ecx, eax
mov r12d, eax
call fcn.1400159e8
cmp r12d, ebp
jb 0x140033836
xor r14d, r14d
mov ecx, ebp
call fcn.140015aec
lea rcx, [rsp + 0x40]
inc ebp
call fcn.140030614
mov rdi, rax
test rax, rax
je 0x140033819
mov edx, 0x2c
mov rcx, rax
call qword [sym.imp.msvcrt.dll_wcschr]
test rax, rax
je 0x14003376c
mov word [rax], r14w
mov r8d, dword [rsp + 0xb0]
mov edx, r15d
mov rcx, rdi
call fcn.140019b90
mov ebx, eax
test r15d, r15d
je 0x14003379d
mov rcx, qword [r13 + 0x10]
test rcx, rcx
je 0x14003379d
mov r8d, 1
mov rdx, rdi
call fcn.140024798
test ebx, ebx
jns 0x140033811
test r15d, r15d
jne 0x14003380f
cmp ebx, 2
je 0x1400337bb
cmp ebx, 0x80070002
je 0x1400337bb
cmp ebx, 0x80004005
jne 0x14003380f
mov rcx, qword [0x140050310]
mov ebx, 1
cmp rcx, 0xffffffffffffffff
jne 0x1400337e2
lea edx, [rbx + 3]
call fcn.140016148
mov rcx, qword [0x140050310]
cmp rcx, 0xffffffffffffffff
je 0x140033811
cmp dword [0x1400516e0], 4
jl 0x140033811
lea r9, [rsp + 0x30]
mov dword [rsp + 0x30], r14d
mov r8d, 0x60
mov qword [rsp + 0x20], r14
lea rdx, str.__Unregistration_failure_ignored:_file_is_either_not_present_or_has_already_been_unregistered._r_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x140033811
mov esi, ebx
mov rcx, rdi
call fcn.14003c2b8
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x40]
call qword [sym.imp.SETUPAPI.dll_SetupFindNextLine]
test eax, eax
je 0x140033836
cmp ebp, r12d
jbe 0x140033736
xor ebp, ebp
lea rdx, [0x140043808]
xor ecx, ecx
call qword [sym.imp.msvcrt.dll_wcstok]
mov rdi, rax
test rax, rax
jne 0x1400336bc
mov r14, qword [rsp + 0x38]
mov rcx, r14
call fcn.14003c2b8
test ebx, ebx
js 0x140033868
test esi, esi
jne 0x14003386a
mov esi, ebx
lea r11, [rsp + 0x60]
mov eax, esi
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret