Function at 0x14011d5d0
Capabilities:
Copy file
Create directory
Get common file path
Read .ini file

Disassembly:
mov word [rsp + 0x10], dx
mov qword [rsp + 8], rcx
push rbx
push rdi
mov eax, 0x39a8
call fcn.1401da720
sub rsp, rax
mov qword [rsp + 0x3410], 0xfffffffffffffffe
mov rax, qword [0x1402aa5c0]
xor rax, rsp
mov qword [rsp + 0x3998], rax
xor eax, eax
mov word [rsp + 0x30], ax
lea rdi, [rsp + 0x32]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
mov edx, 0x400
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
movzx eax, word [rsp + 0x39c8]
cmp eax, 0x43
je 0x14011d653
movzx r8d, word [rsp + 0x39c8]
lea rdx, [0x140229800]
lea rcx, [rsp + 0x30]
call fcn.14001f9a0
lea r8, str.Drivers_Converted
mov rdx, qword [rsp + 0x39c0]
lea rcx, [rsp + 0x3110]
call fcn.1400010b0
mov qword [rsp + 0x3418], rax
mov rcx, qword [rsp + 0x3418]
call fcn.14000f8f0
mov rcx, rax
call fcn.14011bd70
lea rcx, [rsp + 0x3110]
call fcn.140001490
lea rcx, [rsp + 0x830]
call fcn.1400767b0
nop
lea r8, [0x140229840]
mov rdx, qword [rsp + 0x39c0]
lea rcx, [rsp + 0x3118]
call fcn.1400010b0
mov qword [rsp + 0x3420], rax
mov rax, qword [rsp + 0x3420]
mov qword [rsp + 0x3428], rax
mov rcx, qword [rsp + 0x3428]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x830]
call fcn.1400768b4
mov dword [rsp + 0x20], eax
lea rcx, [rsp + 0x3118]
call fcn.140001490
cmp dword [rsp + 0x20], 0
je 0x14011f461
lea rcx, [rsp + 0x830]
call fcn.1400764bc
mov dword [rsp + 0x20], eax
lea rcx, [rsp + 0x830]
call fcn.14007675c
test eax, eax
je 0x14011d73b
jmp 0x14011d70c
lea rcx, [rsp + 0x830]
call fcn.14000c4e0
test eax, eax
jne 0x14011d74e
jmp 0x14011d70c
lea rdx, [rsp + 0x3128]
lea rcx, [rsp + 0x830]
call fcn.140076dd4
mov qword [rsp + 0x3430], rax
mov rax, qword [rsp + 0x3430]
mov qword [rsp + 0x3438], rax
lea rdx, [0x140229858]
mov rcx, qword [rsp + 0x3438]
call fcn.140006180
mov dword [rsp + 0x3120], eax
lea rcx, [rsp + 0x3128]
call fcn.140001490
cmp dword [rsp + 0x3120], 0
je 0x14011d7b2
jmp 0x14011d70c
lea rcx, [rsp + 0x1068]
call fcn.1400767b0
nop
xor eax, eax
mov word [rsp + 0x860], ax
lea rdi, [rsp + 0x862]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
lea rdx, [rsp + 0x3130]
lea rcx, [rsp + 0x830]
call fcn.140076d08
mov qword [rsp + 0x3440], rax
mov rax, qword [rsp + 0x3440]
mov qword [rsp + 0x3448], rax
lea r8, [0x140229860]
mov rdx, qword [rsp + 0x3448]
lea rcx, [rsp + 0x3138]
call fcn.1400010b0
mov qword [rsp + 0x3450], rax
mov rax, qword [rsp + 0x3450]
mov qword [rsp + 0x3458], rax
mov rcx, qword [rsp + 0x3458]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1068]
call fcn.1400768b4
mov dword [rsp + 0x1060], eax
lea rcx, [rsp + 0x3138]
call fcn.140001490
nop
lea rcx, [rsp + 0x3130]
call fcn.140001490
cmp dword [rsp + 0x1060], 0
je 0x14011f441
lea rcx, [rsp + 0x1068]
call fcn.1400764bc
mov dword [rsp + 0x1060], eax
lea rcx, [rsp + 0x1068]
call fcn.14007675c
test eax, eax
je 0x14011d8b3
jmp 0x14011d87e
lea rcx, [rsp + 0x1068]
call fcn.14000c4e0
test eax, eax
jne 0x14011d8c6
jmp 0x14011d87e
xor eax, eax
mov word [rsp + 0x1100], ax
lea rdi, [rsp + 0x1102]
xor eax, eax
mov ecx, 0x1ffe
rep stosb byte [rdi], al
lea rdx, [rsp + 0x3140]
lea rcx, [rsp + 0x1068]
call fcn.140076d08
mov qword [rsp + 0x3460], rax
mov rax, qword [rsp + 0x3460]
mov qword [rsp + 0x3468], rax
lea r8, [0x140229868]
mov rdx, qword [rsp + 0x3468]
lea rcx, [rsp + 0x3148]
call fcn.1400010b0
mov qword [rsp + 0x3470], rax
mov rcx, qword [rsp + 0x3470]
call fcn.14000f8f0
mov r8, rax
mov edx, 0x1000
lea rcx, [rsp + 0x1100]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionNamesW]
lea rcx, [rsp + 0x3148]
call fcn.140001490
nop
lea rcx, [rsp + 0x3140]
call fcn.140001490
movzx eax, word [rsp + 0x1100]
test eax, eax
jne 0x14011d981
jmp 0x14011d87e
lea rdx, [rsp + 0x1100]
lea rcx, [rsp + 0x3150]
call fcn.140002100
mov qword [rsp + 0x3478], rax
mov rax, qword [rsp + 0x3478]
mov qword [rsp + 0x3480], rax
lea rcx, str.VEN_10ECDEV_8168
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
lea rcx, str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnumPCI_
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r9d, edi
mov r8d, eax
lea rdx, [rsp + 0x1098]
mov rcx, qword [rsp + 0x3480]
call fcn.1400022a0
nop
lea rcx, [rsp + 0x3150]
call fcn.140001490
lea rdx, [rsp + 0x1100]
lea rcx, [rsp + 0x3158]
call fcn.140002100
mov qword [rsp + 0x3488], rax
mov rax, qword [rsp + 0x3488]
mov qword [rsp + 0x3490], rax
lea rcx, [0x140229940]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
lea rcx, str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnumPCIVEN_10ECDEV_8168SUBSYS_E0001458
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r9d, edi
mov r8d, eax
lea rdx, [rsp + 0x3100]
mov rcx, qword [rsp + 0x3490]
call fcn.1400022a0
nop
lea rcx, [rsp + 0x3158]
call fcn.140001490
lea rdx, [0x140229304]
lea rcx, [rsp + 0x1098]
call fcn.1400060d0
lea rdx, [rsp + 0x3100]
lea rcx, [rsp + 0x1098]
call fcn.1400060a0
lea rcx, [rsp + 0x10f8]
call fcn.140002de0
nop
lea r8, [0x1402298a8]
mov rdx, qword [rsp + 0x39c0]
lea rcx, [rsp + 0x3160]
call fcn.1400010b0
mov qword [rsp + 0x3498], rax
mov rax, qword [rsp + 0x3498]
mov qword [rsp + 0x34a0], rax
mov rdx, qword [rsp + 0x34a0]
lea rcx, [rsp + 0x10f8]
call fcn.140002db0
nop
lea rcx, [rsp + 0x3160]
call fcn.140001490
lea rcx, [rsp + 0x10f8]
call fcn.14000f8f0
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rcx, [rsp + 0x10c8]
call fcn.1400767b0
nop
lea rcx, [rsp + 0x10b8]
call fcn.140002de0
nop
lea rdx, [rsp + 0x3168]
lea rcx, [rsp + 0x1068]
call fcn.140076d08
mov qword [rsp + 0x34a8], rax
mov rax, qword [rsp + 0x34a8]
mov qword [rsp + 0x34b0], rax
lea r8, [0x140229a00]
mov rdx, qword [rsp + 0x34b0]
lea rcx, [rsp + 0x3170]
call fcn.1400010b0
mov qword [rsp + 0x34b8], rax
mov rax, qword [rsp + 0x34b8]
mov qword [rsp + 0x34c0], rax
mov rcx, qword [rsp + 0x34c0]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x10c8]
call fcn.1400768b4
mov dword [rsp + 0x10c0], eax
lea rcx, [rsp + 0x3170]
call fcn.140001490
nop
lea rcx, [rsp + 0x3168]
call fcn.140001490
cmp dword [rsp + 0x10c0], 0
je 0x14011dd31
lea rcx, [rsp + 0x10c8]
call fcn.1400764bc
mov dword [rsp + 0x10c0], eax
lea rcx, [rsp + 0x10c8]
call fcn.14000c4e0
test eax, eax
je 0x14011dbff
jmp 0x14011dbca
lea rdx, [rsp + 0x3178]
lea rcx, [rsp + 0x10c8]
call fcn.140076dd4
mov qword [rsp + 0x34c8], rax
mov rax, qword [rsp + 0x34c8]
mov qword [rsp + 0x34d0], rax
mov rdx, qword [rsp + 0x34d0]
lea rcx, [rsp + 0x10b8]
call fcn.140002db0
nop
lea rcx, [rsp + 0x3178]
call fcn.140001490
lea r8, [0x140229314]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x3180]
call fcn.1400010b0
mov qword [rsp + 0x34d8], rax
mov rax, qword [rsp + 0x34d8]
mov qword [rsp + 0x34e0], rax
lea r8, [rsp + 0x10b8]
mov rdx, qword [rsp + 0x34e0]
lea rcx, [rsp + 0x3188]
call fcn.140006bd0
mov qword [rsp + 0x34e8], rax
mov rax, qword [rsp + 0x34e8]
mov qword [rsp + 0x34f0], rax
lea rdx, [rsp + 0x3190]
lea rcx, [rsp + 0x10c8]
call fcn.140076d08
mov qword [rsp + 0x34f8], rax
mov rcx, qword [rsp + 0x34f0]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x34f8]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rsp + 0x3190]
call fcn.140001490
nop
lea rcx, [rsp + 0x3188]
call fcn.140001490
nop
lea rcx, [rsp + 0x3180]
call fcn.140001490
jmp 0x14011dd31
lea rcx, [rsp + 0x10c8]
call fcn.1400763e8
lea rcx, [rsp + 0x10b8]
call fcn.140006eb0
movzx eax, al
test eax, eax
je 0x14011dd9c
lea rcx, [rsp + 0x10b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x10c8]
call fcn.14007680c
nop
lea rcx, [rsp + 0x10f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x3100]
call fcn.140001490
nop
lea rcx, [rsp + 0x1098]
call fcn.140001490
jmp 0x14011d87e
lea r8, [0x14022934c]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x3198]
call fcn.1400010b0
mov qword [rsp + 0x3500], rax
mov rax, qword [rsp + 0x3500]
mov qword [rsp + 0x3508], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3508]
lea rcx, [rsp + 0x31a0]
call fcn.140006bd0
mov qword [rsp + 0x3510], rax
mov rax, qword [rsp + 0x3510]
mov qword [rsp + 0x3518], rax
lea r8, [0x140229a28]
mov rdx, qword [rsp + 0x3518]
lea rcx, [rsp + 0x31a8]
call fcn.1400010b0
mov qword [rsp + 0x3520], rax
mov rax, qword [rsp + 0x3520]
mov qword [rsp + 0x3528], rax
lea rdx, [rsp + 0x31b0]
lea rcx, [rsp + 0x1068]
call fcn.140076d08
mov qword [rsp + 0x3530], rax
mov rax, qword [rsp + 0x3530]
mov qword [rsp + 0x3538], rax
lea r8, str.pci.reg
mov rdx, qword [rsp + 0x3538]
lea rcx, [rsp + 0x31b8]
call fcn.1400010b0
mov qword [rsp + 0x3540], rax
mov rcx, qword [rsp + 0x3528]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x3540]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rsp + 0x31b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x31b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x31a8]
call fcn.140001490
nop
lea rcx, [rsp + 0x31a0]
call fcn.140001490
nop
lea rcx, [rsp + 0x3198]
call fcn.140001490
lea r8, [0x1402293dc]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x31c0]
call fcn.1400010b0
mov qword [rsp + 0x3548], rax
mov rax, qword [rsp + 0x3548]
mov qword [rsp + 0x3550], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3550]
lea rcx, [rsp + 0x31c8]
call fcn.140006bd0
mov qword [rsp + 0x3558], rax
mov rax, qword [rsp + 0x3558]
mov qword [rsp + 0x3560], rax
lea r8, [0x140229a58]
mov rdx, qword [rsp + 0x3560]
lea rcx, [rsp + 0x31d0]
call fcn.1400010b0
mov qword [rsp + 0x3568], rax
mov rax, qword [rsp + 0x3568]
mov qword [rsp + 0x3570], rax
lea rdx, [rsp + 0x31d8]
lea rcx, [rsp + 0x1068]
call fcn.140076d08
mov qword [rsp + 0x3578], rax
mov rax, qword [rsp + 0x3578]
mov qword [rsp + 0x3580], rax
lea r8, [0x140229a70]
mov rdx, qword [rsp + 0x3580]
lea rcx, [rsp + 0x31e0]
call fcn.1400010b0
mov qword [rsp + 0x3588], rax
mov rcx, qword [rsp + 0x3570]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x3588]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rsp + 0x31e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x31d8]
call fcn.140001490
nop
lea rcx, [rsp + 0x31d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x31c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x31c0]
call fcn.140001490
lea r8, [0x1402294ac]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x31e8]
call fcn.1400010b0
mov qword [rsp + 0x3590], rax
mov rax, qword [rsp + 0x3590]
mov qword [rsp + 0x3598], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3598]
lea rcx, [rsp + 0x31f0]
call fcn.140006bd0
mov qword [rsp + 0x35a0], rax
mov rax, qword [rsp + 0x35a0]
mov qword [rsp + 0x35a8], rax
lea r8, [0x140229a88]
mov rdx, qword [rsp + 0x35a8]
lea rcx, [rsp + 0x31f8]
call fcn.1400010b0
mov qword [rsp + 0x35b0], rax
mov rax, qword [rsp + 0x35b0]
mov qword [rsp + 0x35b8], rax
lea rdx, [rsp + 0x3200]
lea rcx, [rsp + 0x1068]
call fcn.140076d08
mov qword [rsp + 0x35c0], rax
mov rax, qword [rsp + 0x35c0]
mov qword [rsp + 0x35c8], rax
lea r8, [0x140229aa8]
mov rdx, qword [rsp + 0x35c8]
lea rcx, [rsp + 0x3208]
call fcn.1400010b0
mov qword [rsp + 0x35d0], rax
mov rcx, qword [rsp + 0x35b8]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x35d0]
call fcn.14000f8f0
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rsp + 0x3208]
call fcn.140001490
nop
lea rcx, [rsp + 0x3200]
call fcn.140001490
nop
lea rcx, [rsp + 0x31f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x31f0]
call fcn.140001490
nop
lea rcx, [rsp + 0x31e8]
call fcn.140001490
lea r8, [0x1402294bc]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x3210]
call fcn.1400010b0
mov qword [rsp + 0x35d8], rax
mov rax, qword [rsp + 0x35d8]
mov qword [rsp + 0x35e0], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x35e0]
lea rcx, [rsp + 0x3218]
call fcn.140006bd0
mov qword [rsp + 0x35e8], rax
mov rax, qword [rsp + 0x35e8]
mov qword [rsp + 0x35f0], rax
lea r8, [0x140229ac8]
mov rdx, qword [rsp + 0x35f0]
lea rcx, [rsp + 0x3220]
call fcn.1400010b0
mov qword [rsp + 0x35f8], rax
mov rax, qword [rsp + 0x35f8]
mov qword [rsp + 0x3600], rax
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x3228]
call fcn.14011d190
mov qword [rsp + 0x3608], rax
mov rax, qword [rsp + 0x3608]
mov qword [rsp + 0x3610], rax
mov r8, qword [rsp + 0x3610]
lea rdx, [0x140229b20]
lea rcx, [rsp + 0x3230]
call fcn.140006c90
mov qword [rsp + 0x3618], rax
mov rax, qword [rsp + 0x3618]
mov qword [rsp + 0x3620], rax
lea r8, [0x140229af8]
mov rdx, qword [rsp + 0x3620]
lea rcx, [rsp + 0x3238]
call fcn.1400010b0
mov qword [rsp + 0x3628], rax
mov rax, qword [rsp + 0x3628]
mov qword [rsp + 0x3630], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3630]
lea rcx, [rsp + 0x3240]
call fcn.140006bd0
mov qword [rsp + 0x3638], rax
mov rax, qword [rsp + 0x3638]
mov qword [rsp + 0x3640], rax
lea r8, [0x140229ae0]
mov rdx, qword [rsp + 0x3640]
lea rcx, [rsp + 0x3248]
call fcn.1400010b0
mov qword [rsp + 0x3648], rax
mov rax, qword [rsp + 0x3648]
mov qword [rsp + 0x3650], rax
mov rcx, qword [rsp + 0x3600]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x3650]
call fcn.14000f8f0
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x1100]
call fcn.14011d240
nop
lea rcx, [rsp + 0x3248]
call fcn.140001490
nop
lea rcx, [rsp + 0x3240]
call fcn.140001490
nop
lea rcx, [rsp + 0x3238]
call fcn.140001490
nop
lea rcx, [rsp + 0x3230]
call fcn.140001490
nop
lea rcx, [rsp + 0x3228]
call fcn.140001490
nop
lea rcx, [rsp + 0x3220]
call fcn.140001490
nop
lea rcx, [rsp + 0x3218]
call fcn.140001490
nop
lea rcx, [rsp + 0x3210]
call fcn.140001490
lea r8, [0x1402294ec]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x3250]
call fcn.1400010b0
mov qword [rsp + 0x3658], rax
mov rax, qword [rsp + 0x3658]
mov qword [rsp + 0x3660], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3660]
lea rcx, [rsp + 0x3258]
call fcn.140006bd0
mov qword [rsp + 0x3668], rax
mov rax, qword [rsp + 0x3668]
mov qword [rsp + 0x3670], rax
lea r8, [0x140229b48]
mov rdx, qword [rsp + 0x3670]
lea rcx, [rsp + 0x3260]
call fcn.1400010b0
mov qword [rsp + 0x3678], rax
mov rax, qword [rsp + 0x3678]
mov qword [rsp + 0x3680], rax
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x3268]
call fcn.14011d190
mov qword [rsp + 0x3688], rax
mov rax, qword [rsp + 0x3688]
mov qword [rsp + 0x3690], rax
mov r8, qword [rsp + 0x3690]
lea rdx, [0x140229c18]
lea rcx, [rsp + 0x3270]
call fcn.140006c90
mov qword [rsp + 0x3698], rax
mov rax, qword [rsp + 0x3698]
mov qword [rsp + 0x36a0], rax
lea r8, [0x140229bf0]
mov rdx, qword [rsp + 0x36a0]
lea rcx, [rsp + 0x3278]
call fcn.1400010b0
mov qword [rsp + 0x36a8], rax
mov rax, qword [rsp + 0x36a8]
mov qword [rsp + 0x36b0], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x36b0]
lea rcx, [rsp + 0x3280]
call fcn.140006bd0
mov qword [rsp + 0x36b8], rax
mov rax, qword [rsp + 0x36b8]
mov qword [rsp + 0x36c0], rax
lea r8, [0x140229bd8]
mov rdx, qword [rsp + 0x36c0]
lea rcx, [rsp + 0x3288]
call fcn.1400010b0
mov qword [rsp + 0x36c8], rax
mov rcx, qword [rsp + 0x3680]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x36c8]
call fcn.14000f8f0
mov r9, rdi
lea r8, str._4D36E972_E325_11CE_BFC1_08002BE103182000_
lea rdx, str._Driver_
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x3288]
call fcn.140001490
nop
lea rcx, [rsp + 0x3280]
call fcn.140001490
nop
lea rcx, [rsp + 0x3278]
call fcn.140001490
nop
lea rcx, [rsp + 0x3270]
call fcn.140001490
nop
lea rcx, [rsp + 0x3268]
call fcn.140001490
nop
lea rcx, [rsp + 0x3260]
call fcn.140001490
nop
lea rcx, [rsp + 0x3258]
call fcn.140001490
nop
lea rcx, [rsp + 0x3250]
call fcn.140001490
lea r8, [0x140229504]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x3290]
call fcn.1400010b0
mov qword [rsp + 0x36d0], rax
mov rax, qword [rsp + 0x36d0]
mov qword [rsp + 0x36d8], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x36d8]
lea rcx, [rsp + 0x3298]
call fcn.140006bd0
mov qword [rsp + 0x36e0], rax
mov rax, qword [rsp + 0x36e0]
mov qword [rsp + 0x36e8], rax
lea r8, str._pci.reg
mov rdx, qword [rsp + 0x36e8]
lea rcx, [rsp + 0x32a0]
call fcn.1400010b0
mov qword [rsp + 0x36f0], rax
mov rax, qword [rsp + 0x36f0]
mov qword [rsp + 0x36f8], rax
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x32a8]
call fcn.14011d190
mov qword [rsp + 0x3700], rax
mov rax, qword [rsp + 0x3700]
mov qword [rsp + 0x3708], rax
mov r8, qword [rsp + 0x3708]
lea rdx, [0x140229cb8]
lea rcx, [rsp + 0x32b0]
call fcn.140006c90
mov qword [rsp + 0x3710], rax
mov rax, qword [rsp + 0x3710]
mov qword [rsp + 0x3718], rax
lea r8, [0x140229c90]
mov rdx, qword [rsp + 0x3718]
lea rcx, [rsp + 0x32b8]
call fcn.1400010b0
mov qword [rsp + 0x3720], rax
mov rax, qword [rsp + 0x3720]
mov qword [rsp + 0x3728], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3728]
lea rcx, [rsp + 0x32c0]
call fcn.140006bd0
mov qword [rsp + 0x3730], rax
mov rcx, qword [rsp + 0x36f8]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x3730]
call fcn.14000f8f0
mov r9, rdi
lea r8, str.dword:00000001
lea rdx, str._ForcePnP_
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x32c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x32b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x32b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x32a8]
call fcn.140001490
nop
lea rcx, [rsp + 0x32a0]
call fcn.140001490
nop
lea rcx, [rsp + 0x3298]
call fcn.140001490
nop
lea rcx, [rsp + 0x3290]
call fcn.140001490
lea rdx, [rsp + 0x32c8]
lea rcx, [rsp + 0x1068]
call fcn.140076d08
mov qword [rsp + 0x3738], rax
mov rax, qword [rsp + 0x3738]
mov qword [rsp + 0x3740], rax
lea r8, str.class.reg
mov rdx, qword [rsp + 0x3740]
lea rcx, [rsp + 0x32d0]
call fcn.1400010b0
mov qword [rsp + 0x3748], rax
mov rcx, qword [rsp + 0x3748]
call fcn.14000f8f0
mov r8, rax
mov edx, 0x1000
lea rcx, [rsp + 0x1100]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionNamesW]
lea rcx, [rsp + 0x32d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x32c8]
call fcn.140001490
lea r8, [0x14022951c]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x32d8]
call fcn.1400010b0
mov qword [rsp + 0x3750], rax
mov rax, qword [rsp + 0x3750]
mov qword [rsp + 0x3758], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3758]
lea rcx, [rsp + 0x32e0]
call fcn.140006bd0
mov qword [rsp + 0x3760], rax
mov rax, qword [rsp + 0x3760]
mov qword [rsp + 0x3768], rax
lea r8, str._class.reg
mov rdx, qword [rsp + 0x3768]
lea rcx, [rsp + 0x32e8]
call fcn.1400010b0
mov qword [rsp + 0x3770], rax
mov rax, qword [rsp + 0x3770]
mov qword [rsp + 0x3778], rax
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x32f0]
call fcn.14011d190
mov qword [rsp + 0x3780], rax
mov rax, qword [rsp + 0x3780]
mov qword [rsp + 0x3788], rax
mov r8, qword [rsp + 0x3788]
lea rdx, [0x140229d48]
lea rcx, [rsp + 0x32f8]
call fcn.140006c90
mov qword [rsp + 0x3790], rax
mov rax, qword [rsp + 0x3790]
mov qword [rsp + 0x3798], rax
lea r8, [0x140229d20]
mov rdx, qword [rsp + 0x3798]
lea rcx, [rsp + 0x3300]
call fcn.1400010b0
mov qword [rsp + 0x37a0], rax
mov rax, qword [rsp + 0x37a0]
mov qword [rsp + 0x37a8], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x37a8]
lea rcx, [rsp + 0x3308]
call fcn.140006bd0
mov qword [rsp + 0x37b0], rax
mov rax, qword [rsp + 0x37b0]
mov qword [rsp + 0x37b8], rax
lea r8, [0x140229d10]
mov rdx, qword [rsp + 0x37b8]
lea rcx, [rsp + 0x3310]
call fcn.1400010b0
mov qword [rsp + 0x37c0], rax
mov rax, qword [rsp + 0x37c0]
mov qword [rsp + 0x37c8], rax
mov rcx, qword [rsp + 0x3778]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x37c8]
call fcn.14000f8f0
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x1100]
call fcn.14011d240
nop
lea rcx, [rsp + 0x3310]
call fcn.140001490
nop
lea rcx, [rsp + 0x3308]
call fcn.140001490
nop
lea rcx, [rsp + 0x3300]
call fcn.140001490
nop
lea rcx, [rsp + 0x32f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x32f0]
call fcn.140001490
nop
lea rcx, [rsp + 0x32e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x32e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x32d8]
call fcn.140001490
lea rdx, [rsp + 0x3318]
lea rcx, [rsp + 0x1068]
call fcn.140076d08
mov qword [rsp + 0x37d0], rax
mov rax, qword [rsp + 0x37d0]
mov qword [rsp + 0x37d8], rax
lea r8, [0x140229d70]
mov rdx, qword [rsp + 0x37d8]
lea rcx, [rsp + 0x3320]
call fcn.1400010b0
mov qword [rsp + 0x37e0], rax
mov rcx, qword [rsp + 0x37e0]
call fcn.14000f8f0
mov r8, rax
mov edx, 0x1000
lea rcx, [rsp + 0x1100]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionNamesW]
lea rcx, [rsp + 0x3320]
call fcn.140001490
nop
lea rcx, [rsp + 0x3318]
call fcn.140001490
lea r8, [0x140229544]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x3328]
call fcn.1400010b0
mov qword [rsp + 0x37e8], rax
mov rax, qword [rsp + 0x37e8]
mov qword [rsp + 0x37f0], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x37f0]
lea rcx, [rsp + 0x3330]
call fcn.140006bd0
mov qword [rsp + 0x37f8], rax
mov rax, qword [rsp + 0x37f8]
mov qword [rsp + 0x3800], rax
lea r8, [0x140229d90]
mov rdx, qword [rsp + 0x3800]
lea rcx, [rsp + 0x3338]
call fcn.1400010b0
mov qword [rsp + 0x3808], rax
mov rax, qword [rsp + 0x3808]
mov qword [rsp + 0x3810], rax
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x3340]
call fcn.14011d190
mov qword [rsp + 0x3818], rax
mov rax, qword [rsp + 0x3818]
mov qword [rsp + 0x3820], rax
mov r8, qword [rsp + 0x3820]
lea rdx, [0x140229df0]
lea rcx, [rsp + 0x3348]
call fcn.140006c90
mov qword [rsp + 0x3828], rax
mov rax, qword [rsp + 0x3828]
mov qword [rsp + 0x3830], rax
lea r8, [0x140229dc8]
mov rdx, qword [rsp + 0x3830]
lea rcx, [rsp + 0x3350]
call fcn.1400010b0
mov qword [rsp + 0x3838], rax
mov rax, qword [rsp + 0x3838]
mov qword [rsp + 0x3840], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3840]
lea rcx, [rsp + 0x3358]
call fcn.140006bd0
mov qword [rsp + 0x3848], rax
mov rax, qword [rsp + 0x3848]
mov qword [rsp + 0x3850], rax
lea r8, [0x140229db0]
mov rdx, qword [rsp + 0x3850]
lea rcx, [rsp + 0x3360]
call fcn.1400010b0
mov qword [rsp + 0x3858], rax
mov rax, qword [rsp + 0x3858]
mov qword [rsp + 0x3860], rax
mov rcx, qword [rsp + 0x3810]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x3860]
call fcn.14000f8f0
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x1100]
call fcn.14011d240
nop
lea rcx, [rsp + 0x3360]
call fcn.140001490
nop
lea rcx, [rsp + 0x3358]
call fcn.140001490
nop
lea rcx, [rsp + 0x3350]
call fcn.140001490
nop
lea rcx, [rsp + 0x3348]
call fcn.140001490
nop
lea rcx, [rsp + 0x3340]
call fcn.140001490
nop
lea rcx, [rsp + 0x3338]
call fcn.140001490
nop
lea rcx, [rsp + 0x3330]
call fcn.140001490
nop
lea rcx, [rsp + 0x3328]
call fcn.140001490
lea r8, [0x14022956c]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x3368]
call fcn.1400010b0
mov qword [rsp + 0x3868], rax
mov rax, qword [rsp + 0x3868]
mov qword [rsp + 0x3870], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3870]
lea rcx, [rsp + 0x3370]
call fcn.140006bd0
mov qword [rsp + 0x3878], rax
mov rax, qword [rsp + 0x3878]
mov qword [rsp + 0x3880], rax
lea r8, [0x140229e18]
mov rdx, qword [rsp + 0x3880]
lea rcx, [rsp + 0x3378]
call fcn.1400010b0
mov qword [rsp + 0x3888], rax
mov rax, qword [rsp + 0x3888]
mov qword [rsp + 0x3890], rax
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x3380]
call fcn.14011d190
mov qword [rsp + 0x3898], rax
mov rax, qword [rsp + 0x3898]
mov qword [rsp + 0x38a0], rax
mov r8, qword [rsp + 0x38a0]
lea rdx, str.HKEY_LOCAL_MACHINE_
lea rcx, [rsp + 0x3388]
call fcn.140006c90
mov qword [rsp + 0x38a8], rax
mov rax, qword [rsp + 0x38a8]
mov qword [rsp + 0x38b0], rax
lea r8, [0x140229e80]
mov rdx, qword [rsp + 0x38b0]
lea rcx, [rsp + 0x3390]
call fcn.1400010b0
mov qword [rsp + 0x38b8], rax
mov rax, qword [rsp + 0x38b8]
mov qword [rsp + 0x38c0], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x38c0]
lea rcx, [rsp + 0x3398]
call fcn.140006bd0
mov qword [rsp + 0x38c8], rax
mov rax, qword [rsp + 0x38c8]
mov qword [rsp + 0x38d0], rax
lea r8, [0x140229e68]
mov rdx, qword [rsp + 0x38d0]
lea rcx, [rsp + 0x33a0]
call fcn.1400010b0
mov qword [rsp + 0x38d8], rax
mov rcx, qword [rsp + 0x3890]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x38d8]
call fcn.14000f8f0
mov r9, rdi
lea r8, str.dword:00000000
lea rdx, str._Start_
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x33a0]
call fcn.140001490
nop
lea rcx, [rsp + 0x3398]
call fcn.140001490
nop
lea rcx, [rsp + 0x3390]
call fcn.140001490
nop
lea rcx, [rsp + 0x3388]
call fcn.140001490
nop
lea rcx, [rsp + 0x3380]
call fcn.140001490
nop
lea rcx, [rsp + 0x3378]
call fcn.140001490
nop
lea rcx, [rsp + 0x3370]
call fcn.140001490
nop
lea rcx, [rsp + 0x3368]
call fcn.140001490
lea r8, [0x14022972c]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x33a8]
call fcn.1400010b0
mov qword [rsp + 0x38e0], rax
mov rax, qword [rsp + 0x38e0]
mov qword [rsp + 0x38e8], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x38e8]
lea rcx, [rsp + 0x33b0]
call fcn.140006bd0
mov qword [rsp + 0x38f0], rax
mov rax, qword [rsp + 0x38f0]
mov qword [rsp + 0x38f8], rax
lea r8, [0x140229ed0]
mov rdx, qword [rsp + 0x38f8]
lea rcx, [rsp + 0x33b8]
call fcn.1400010b0
mov qword [rsp + 0x3900], rax
mov rax, qword [rsp + 0x3900]
mov qword [rsp + 0x3908], rax
lea r8, [rsp + 0x10b8]
lea rdx, [0x140229ef0]
lea rcx, [rsp + 0x33c0]
call fcn.140006c90
mov qword [rsp + 0x3910], rax
mov rax, qword [rsp + 0x3910]
mov qword [rsp + 0x3918], rax
lea r8, [0x1402298a4]
mov rdx, qword [rsp + 0x3918]
lea rcx, [rsp + 0x33c8]
call fcn.1400010b0
mov qword [rsp + 0x3920], rax
mov rax, qword [rsp + 0x3920]
mov qword [rsp + 0x3928], rax
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x33d0]
call fcn.14011d190
mov qword [rsp + 0x3930], rax
mov rax, qword [rsp + 0x3930]
mov qword [rsp + 0x3938], rax
mov r8, qword [rsp + 0x3938]
lea rdx, [0x140229f78]
lea rcx, [rsp + 0x33d8]
call fcn.140006c90
mov qword [rsp + 0x3940], rax
mov rax, qword [rsp + 0x3940]
mov qword [rsp + 0x3948], rax
lea r8, [0x140229f50]
mov rdx, qword [rsp + 0x3948]
lea rcx, [rsp + 0x33e0]
call fcn.1400010b0
mov qword [rsp + 0x3950], rax
mov rax, qword [rsp + 0x3950]
mov qword [rsp + 0x3958], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3958]
lea rcx, [rsp + 0x33e8]
call fcn.140006bd0
mov qword [rsp + 0x3960], rax
mov rax, qword [rsp + 0x3960]
mov qword [rsp + 0x3968], rax
lea r8, [0x140229f38]
mov rdx, qword [rsp + 0x3968]
lea rcx, [rsp + 0x33f0]
call fcn.1400010b0
mov qword [rsp + 0x3970], rax
mov rcx, qword [rsp + 0x3908]
call fcn.14000f8f0
mov rbx, rax
mov rcx, qword [rsp + 0x3928]
call fcn.14000f8f0
mov rdi, rax
mov rcx, qword [rsp + 0x3970]
call fcn.14000f8f0
mov r9, rbx
mov r8, rdi
lea rdx, str._ImagePath_
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x33f0]
call fcn.140001490
nop
lea rcx, [rsp + 0x33e8]
call fcn.140001490
nop
lea rcx, [rsp + 0x33e0]
call fcn.140001490
nop
lea rcx, [rsp + 0x33d8]
call fcn.140001490
nop
lea rcx, [rsp + 0x33d0]
call fcn.140001490
nop
lea rcx, [rsp + 0x33c8]
call fcn.140001490
nop
lea rcx, [rsp + 0x33c0]
call fcn.140001490
nop
lea rcx, [rsp + 0x33b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x33b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x33a8]
call fcn.140001490
lea rdx, [0x140229fa0]
lea rcx, [rsp + 0x10b0]
call fcn.140002100
nop
lea rcx, [rsp + 0x10a0]
call fcn.140005560
nop
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x3400]
call fcn.14011d190
mov qword [rsp + 0x3978], rax
mov rax, qword [rsp + 0x3978]
mov qword [rsp + 0x3980], rax
lea r8, [0x140229fc0]
mov rdx, qword [rsp + 0x3980]
lea rcx, [rsp + 0x3408]
call fcn.1400010b0
mov qword [rsp + 0x3988], rax
mov rcx, qword [rsp + 0x3988]
call fcn.14000f8f0
mov r9d, 0x20019
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x10a0]
call fcn.140005720
test eax, eax
jne 0x14011f349
mov dword [rsp + 0x3990], 1
jmp 0x14011f354
mov dword [rsp + 0x3990], 0
movzx eax, byte [rsp + 0x3990]
mov byte [rsp + 0x33f8], al
lea rcx, [rsp + 0x3408]
call fcn.140001490
nop
lea rcx, [rsp + 0x3400]
call fcn.140001490
movzx edx, byte [rsp + 0x33f8]
test edx, edx
je 0x14011f3db
mov dword [rsp + 0x3108], 1
lea r8, [rsp + 0x3108]
lea rdx, [0x140229fe0]
lea rcx, [rsp + 0x10a0]
call fcn.1400057b0
mov r8d, dword [rsp + 0x3108]
lea rdx, [0x140229ff0]
lea rcx, [rsp + 0x10b0]
call fcn.140002c70
lea rcx, [rsp + 0x10a0]
call fcn.1400055f0
nop
lea rcx, [rsp + 0x10a0]
call fcn.140005590
nop
lea rcx, [rsp + 0x10b0]
call fcn.140001490
nop
lea rcx, [rsp + 0x10b8]
call fcn.140001490
nop
lea rcx, [rsp + 0x10c8]
call fcn.14007680c
nop
lea rcx, [rsp + 0x10f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x3100]
call fcn.140001490
nop
lea rcx, [rsp + 0x1098]
call fcn.140001490
jmp 0x14011d87e
lea rcx, [rsp + 0x1068]
call fcn.1400763e8
nop
lea rcx, [rsp + 0x1068]
call fcn.14007680c
jmp 0x14011d70c
lea rcx, [rsp + 0x830]
call fcn.1400763e8
nop
lea rcx, [rsp + 0x830]
call fcn.14007680c
nop
mov rcx, qword [rsp + 0x39c0]
call fcn.140001490
mov rcx, qword [rsp + 0x3998]
xor rcx, rsp
call fcn.1400a8790
add rsp, 0x39a8
pop rdi
pop rbx
ret