Function at 0x14000783c
Capabilities:
Accept command line arguments
Check if file exists
Check os version
Get file attributes
Log keystrokes via polling
Set current directory

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x340
lea rcx, [0x140005c3c]
call qword [sym.imp.msvcrt.dll_int____cdecl___unsigned_long_long_unsigned___int64_____cdecl__set_new_handler_int____cdecl___unsigned_long_long_unsigned___int64___]
call fcn.140002118
lea rcx, [rsp + 0x220]
mov dword [rsp + 0x220], 0x114
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
xor edi, edi
cmp eax, edi
je 0x1400099cf
cmp dword [rsp + 0x230], 2
jne 0x1400099cf
cmp dword [rsp + 0x224], 5
jb 0x1400099cf
or dword [rsp + 0x128], 0xffffffff
or dword [rsp + 0x110], 0xffffffff
lea rax, [0x14001dcc4]
lea ebx, [rdi + 3]
lea rcx, [rsp + 0x118]
mov r13b, dil
mov edx, ebx
mov byte [str.___InstallEnd__], 0x3b
mov byte [str.___Install__UTF_8_], 0x3b
mov qword [rsp + 0x130], rax
mov byte [rsp + 0x30], dil
mov dword [rsp + 0x38], r13d
mov byte [rsp + 0x32], dil
mov r15b, dil
mov qword [rsp + 0x118], rdi
mov dword [rsp + 0x120], edi
mov dword [rsp + 0x124], edi
call fcn.140001190
lea rcx, [rsp + 0x140]
mov edx, ebx
mov qword [rsp + 0x140], rdi
mov dword [rsp + 0x148], edi
mov dword [rsp + 0x14c], edi
call fcn.140001190
lea rax, [0x14001d990]
lea ebx, [rdi + 1]
lea rcx, [rsp + 0x100]
mov edx, ebx
mov dword [rsp + 0xb0], edi
mov dword [rsp + 0xb4], edi
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], 8
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x100], rdi
mov dword [rsp + 0x108], edi
mov dword [rsp + 0x10c], edi
call fcn.140001190
mov rax, qword [rsp + 0x100]
lea ebp, [rdi + 0x20]
mov word [rax], bp
mov rax, qword [rsp + 0x100]
mov word [rax + 2], di
mov dword [rsp + 0x108], ebx
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x118]
mov rcx, rax
call fcn.140006620
lea rcx, [rsp + 0x100]
mov rdx, rax
call fcn.140002d94
lea rcx, [rsp + 0x100]
call fcn.1400037a4
mov r14, qword [rsp + 0x100]
lea rdx, str.sfxlang
add r14, 2
mov rcx, r14
call fcn.140005bb0
cmp rax, rdi
je 0x140007a53
cmp word [rax], 0x3a
jne 0x140007a53
lea rcx, [rax + 2]
call qword [sym.imp.msvcrt.dll__wtol]
movzx edx, word [0x140022b44]
lea ecx, [rax - 1]
cmp ecx, 0xfffe
cmovbe dx, ax
mov word [0x140022b44], dx
jmp 0x140007a39
add r14, 2
cmp word [r14], bp
ja 0x140007a35
jmp 0x140007a4a
cmp ax, bp
ja 0x140007a53
add r14, 2
movzx eax, word [r14]
cmp ax, di
jne 0x140007a41
call fcn.140006370
lea rdx, str.sfxversion
mov rcx, r14
call fcn.140005bb0
cmp rax, rdi
je 0x140007a76
call fcn.140006b68
jmp 0x1400096e9
lea rdx, str.sfxwaitall
mov rcx, r14
call fcn.140005bb0
cmp rax, rdi
je 0x140007a99
mov rcx, rax
call fcn.1400071d0
mov edi, eax
jmp 0x1400096e9
lea rdx, str.sfxelevation
mov rcx, r14
mov r12b, dil
call fcn.140005bb0
cmp rax, rdi
je 0x140007ac9
mov r12b, bl
jmp 0x140007abe
cmp cx, bp
ja 0x140007ac6
add rax, 2
movzx ecx, word [rax]
cmp cx, di
jne 0x140007ab5
mov r14, rax
mov ebx, 0x208
lea rsi, [0x140022c28]
cmp dword [0x140022c34], ebx
jg 0x140007ae7
mov edx, ebx
mov rcx, rsi
call fcn.140001190
mov rdx, qword [0x140022c28]
mov r8d, ebx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp eax, edi
jne 0x140007b13
mov edx, 6
lea ebx, [rdx - 5]
mov ecx, ebx
call fcn.14000c80c
mov edi, ebx
jmp 0x1400096e9
mov rdx, qword [0x140022c28]
mov ecx, edi
cmp word [rdx], di
je 0x140007b30
mov rax, rdx
add rax, 2
add ecx, 1
cmp word [rax], di
jne 0x140007b24
movsxd rax, ecx
mov word [rdx + rax*2], di
mov dword [0x140022c30], ecx
lea rdx, str.sfxtest
mov rcx, r14
call fcn.140005bb0
cmp rax, rdi
mov rbx, rax
je 0x140007d6b
cmp word [rax], 0x3a
je 0x140007b68
mov edi, 0x64
jmp 0x1400096e9
movzx edx, word [rax + 2]
mov ecx, edx
or ecx, ebp
sub ecx, 0x61
je 0x140007c97
sub ecx, 2
je 0x140007c7f
mov r14d, 1
sub ecx, r14d
je 0x140007bfd
sub ecx, 0xb
je 0x140007ba1
cmp ecx, 7
jne 0x140007b5e
mov edi, 0x49ae
jmp 0x1400096e9
cmp word [rax + 4], 0x3a
jne 0x1400096e9
movzx ecx, word [rax + 6]
sub ecx, 0x31
je 0x140007bf5
sub ecx, r14d
je 0x140007beb
sub ecx, r14d
je 0x140007be1
sub ecx, r14d
je 0x140007bd7
cmp ecx, r14d
jne 0x1400096e9
mov edi, 7
jmp 0x1400096e9
mov edi, 0x7f
jmp 0x1400096e9
mov edi, 0x1f
jmp 0x1400096e9
mov edi, 0x17
jmp 0x1400096e9
mov edi, r14d
jmp 0x1400096e9
cmp edx, 0x44
jne 0x140007c41
cmp word [rax + 4], 0x3a
jne 0x140007b5e
add rbx, 6
jmp 0x140007c2c
cmp ax, 0x3a
je 0x140007c34
lea rcx, [0x140022c88]
movzx edx, ax
call fcn.140001548
add rbx, 2
movzx eax, word [rbx]
cmp ax, bp
ja 0x140007c13
cmp dword [0x140022c90], edi
jne 0x140007c45
jmp 0x140007b5e
add rbx, 4
mov dword [0x140022c80], edi
cmp word [rbx], 0x3a
jne 0x140007c6c
lea rcx, [rbx + 2]
call qword [sym.imp.msvcrt.dll__wtol]
cmp eax, 0xe10
mov dword [0x140022c80], eax
ja 0x140007c6c
cmp eax, edi
jne 0x140007c76
mov dword [0x140022c80], 0xa
mov dword [0x140022c84], r14d
jmp 0x140007ca7
movzx eax, word [rax + 4]
sub ax, 0x63
neg ax
sbb eax, eax
add eax, 4
mov dword [0x140022c84], eax
jmp 0x140007ca7
mov dword [0x140022c84], 2
jmp 0x140007ca7
add rbx, 2
cmp word [rbx], bp
ja 0x140007ca3
jmp 0x140007cb7
cmp ax, bp
ja 0x140007cbf
add rbx, 2
movzx eax, word [rbx]
cmp ax, di
jne 0x140007cae
lea rdx, str.sfxconfig
mov rcx, rbx
mov r14, rbx
call fcn.140005bb0
cmp rax, rdi
mov rcx, rax
je 0x140007d6b
cmp word [rax], 0x3a
jne 0x140007cee
jmp 0x140007cea
cmp ax, bp
ja 0x140007cf6
add rcx, 2
movzx eax, word [rcx]
cmp ax, di
jne 0x140007ce5
mov rax, qword [rsp + 0x118]
lea rdx, [rsp + 0x118]
mov dword [rsp + 0x120], edi
mov word [rax], di
call fcn.140006620
cmp dword [0x140022c84], 2
mov r14, rax
je 0x140007d6b
mov rcx, qword [0x140022c28]
mov ebx, dword [rsp + 0x120]
mov dword [0x140022c30], edi
mov word [rcx], di
mov rcx, rsi
mov edx, ebx
call fcn.140001190
mov r11, qword [rsp + 0x118]
mov rcx, qword [0x140022c28]
movzx eax, word [r11]
add r11, 2
mov word [rcx], ax
add rcx, 2
cmp ax, di
jne 0x140007d51
mov dword [0x140022c30], ebx
lea rcx, [0x140022bd8]
cmp rsi, rcx
je 0x140007dc0
mov rax, qword [0x140022bd8]
mov dword [0x140022be0], edi
mov word [rax], di
mov edx, dword [0x140022c30]
call fcn.140001190
mov r11, qword [0x140022c28]
mov rcx, qword [0x140022bd8]
movzx eax, word [r11]
add r11, 2
mov word [rcx], ax
add rcx, 2
cmp ax, di
jne 0x140007da0
mov eax, dword [0x140022c30]
mov dword [0x140022be0], eax
lea rsi, [0x140022be8]
lea rbx, [0x140022c28]
cmp rbx, rsi
je 0x140007e1f
mov rax, qword [0x140022be8]
mov dword [0x140022bf0], edi
mov rcx, rsi
mov word [rax], di
mov edx, dword [0x140022c30]
call fcn.140001190
mov r11, qword [0x140022c28]
mov rcx, qword [0x140022be8]
movzx eax, word [r11]
add r11, 2
mov word [rcx], ax
add rcx, 2
cmp ax, di
jne 0x140007dff
mov eax, dword [0x140022c30]
mov dword [0x140022bf0], eax
mov rcx, rbx
call fcn.140003cb4
cmp eax, edi
jl 0x140007f3f
mov rcx, qword [0x140022bd8]
movsxd rbx, eax
mov word [rcx + rbx*2], di
mov dword [0x140022be0], eax
mov rax, qword [0x140022c28]
lea rdx, [rax + rbx*2 + 2]
mov rcx, rsi
call fcn.1400013d4
mov r11, qword [0x140022c28]
lea rsi, [0x140022c08]
lea rdx, [r11 + rbx*2 + 2]
mov rcx, rsi
call fcn.1400013d4
movsxd r11, dword [0x140022c10]
cmp r11d, edi
je 0x140007eb6
mov rdx, qword [0x140022c08]
lea rcx, [rdx + r11*2 - 2]
jmp 0x140007e99
cmp rcx, rdx
je 0x140007f82
sub rcx, 2
cmp word [rcx], 0x2e
jne 0x140007e8c
sub rcx, rdx
sar rcx, 1
cmp ecx, edi
jle 0x140007eb6
movsxd rax, ecx
mov word [rdx + rax*2], di
mov dword [0x140022c10], ecx
lea rbx, [0x140022bf8]
cmp rsi, rbx
je 0x140007f0e
mov rax, qword [0x140022bf8]
mov dword [0x140022c00], edi
mov rcx, rbx
mov word [rax], di
mov edx, dword [0x140022c10]
call fcn.140001190
mov r11, qword [0x140022c08]
mov rcx, qword [0x140022bf8]
movzx eax, word [r11]
add r11, 2
mov word [rcx], ax
add rcx, 2
cmp ax, di
jne 0x140007eee
mov eax, dword [0x140022c10]
mov dword [0x140022c00], eax
mov ecx, 4
call fcn.1400027a0
mov rcx, rbx
mov rdx, rax
call fcn.140002d94
mov r11, qword [0x140022c08]
mov rax, qword [0x140022bf8]
mov qword [0x140022b88], r11
mov qword [0x140022b98], rax
call fcn.140002a18
lea rcx, [0x140022c18]
mov rdx, rax
call fcn.1400013d4
mov rcx, rbp
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
cmp rax, rdi
mov rbx, rax
je 0x140007f8a
mov dword [rax + 0x10], edi
lea rax, [0x14001dc60]
mov qword [rbx], rax
lea rax, [0x14001dc40]
mov qword [rbx + 8], rax
or qword [rbx + 0x18], 0xffffffffffffffff
jmp 0x140007f8d
or ecx, 0xffffffff
jmp 0x140007ea5
mov rbx, rdi
cmp rbx, rdi
je 0x140007f9b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + VariantCopy]
mov rdx, qword [0x140022c28]
lea rcx, [rbx + 0x18]
call fcn.1400101dc
cmp al, dil
jne 0x140007fdc
mov r8, qword [0x140022c28]
mov edx, 7
lea ecx, [rdx - 6]
call fcn.14000c80c
cmp rbx, rdi
je 0x140007fd2
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + InitCommonControls]
mov edi, 2
jmp 0x1400096e9
mov esi, 3
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x60], rdi
mov edx, esi
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x6c], edi
call fcn.140002b70
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.140005074
cmp al, dil
jne 0x140008035
lea edx, [rsi + 6]
xor ecx, ecx
call fcn.14000c80c
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp rbx, rdi
je 0x14000802e
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + InitCommonControls]
mov edi, esi
jmp 0x1400096e9
cmp dword [0x140022c84], edi
jne 0x1400080e2
lea rdx, str.sfxconfig
mov rcx, r14
call fcn.140005bb0
cmp rax, rdi
je 0x1400080e2
cmp word [rax], 0x3a
jne 0x140008063
add rax, 2
movzx ecx, word [rax]
cmp cx, di
je 0x1400080c1
cmp cx, bp
ja 0x14000807c
add rax, 2
mov cx, word [rax]
cmp cx, di
jne 0x14000806b
cmp word [rax], di
je 0x1400080c1
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.140007478
cmp al, dil
jne 0x1400080c1
mov edx, 0xa
xor ecx, ecx
call fcn.14000c80c
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp rbx, rdi
je 0x1400080b7
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + InitCommonControls]
mov edi, 4
jmp 0x1400096e9
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp rbx, rdi
je 0x1400096e9
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + InitCommonControls]
jmp 0x1400096e9
lea rcx, [rsp + 0xa8]
call fcn.1400106d4
cmp dword [rsp + 0x68], edi
je 0x14000810f
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x60]
xor r8d, r8d
call fcn.140004188
cmp al, dil
je 0x14000809f
cmp dword [0x140022c84], 4
je 0x1400080c1
cmp dword [0x140022060], edi
lea rsi, [0x140022060]
je 0x140008233
mov r8d, dword [rsi]
lea rdx, str.7zSfxString_d
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsp + 0xe0]
mov edx, 3
mov qword [rsp + 0xe0], rdi
mov dword [rsp + 0xe8], edi
mov dword [rsp + 0xec], edi
call fcn.140001190
lea rcx, [rsp + 0xf0]
mov edx, 3
mov qword [rsp + 0xf0], rdi
mov dword [rsp + 0xf8], edi
mov dword [rsp + 0xfc], edi
call fcn.140001190
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0xe0]
call fcn.1400013d4
mov ecx, dword [rsi]
call fcn.1400027a0
lea rcx, [rsp + 0xf0]
mov rdx, rax
call fcn.1400013d4
mov rcx, rbp
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
cmp rax, rdi
je 0x1400081e1
lea rdx, [rsp + 0xe0]
mov rcx, rax
call fcn.140003008
mov rbp, rax
jmp 0x1400081e4
mov rbp, rdi
lea rcx, [0x140022670]
call fcn.1400106e4
movsxd r11, dword [0x14002267c]
mov rax, qword [0x140022680]
mov rcx, qword [rsp + 0xf0]
mov qword [rax + r11*8], rbp
add dword [0x14002267c], 1
mov ebp, 0x20
add rsi, rbp
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0xe0]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp dword [rsi], edi
jne 0x14000812b
lea rcx, [rsp + 0xa8]
call fcn.1400066b0
sub r14, 2
jmp 0x14000824a
add r14, 2
cmp word [r14], bp
ja 0x140008246
jmp 0x14000825b
cmp ax, bp
ja 0x140008264
add r14, 2
movzx eax, word [r14]
cmp ax, di
jne 0x140008252
cmp word [r14], 0x2f
je 0x140008276
cmp word [r14], 0x2d
jne 0x14000850e
cmp word [r14 + 2], 0x21
je 0x14000850a
lea rdx, [0x14001df28]
lea rcx, [r14 + 2]
call fcn.140005978
cmp rax, rdi
je 0x1400082f1
lea rax, [r14 + 6]
cmp word [rax], 0x30
jb 0x1400082a7
cmp word [rax], 0x39
jbe 0x1400082bf
cmp word [rax], 0x61
jb 0x1400082b3
cmp word [rax], 0x7a
jbe 0x1400082bf
cmp word [rax], 0x41
jb 0x1400082df
cmp word [rax], 0x5a
ja 0x1400082df
mov ecx, 1
mov qword [rsp + 0x130], rax
mov r13b, cl
mov al, cl
mov byte [rsp + 0x30], cl
mov dword [rsp + 0x38], r13d
jmp 0x14000824a
cmp word [rax], bp
ja 0x14000850e
lea rax, [0x14001dcc4]
jmp 0x1400082bf
lea rdx, [0x14001df20]
lea rcx, [r14 + 2]
call fcn.140005978
cmp rax, rdi
je 0x140008316
lea rdx, [r14 + 6]
lea rcx, str.OverwriteMode
jmp 0x14000846c
lea rdx, [0x14001df18]
lea rcx, [r14 + 2]
call fcn.140005978
cmp rax, rdi
je 0x14000835a
lea rdx, [r14 + 6]
cmp word [rdx], 0x30
jb 0x14000850e
cmp word [rdx], 0x32
ja 0x14000850e
cmp word [r14 + 8], bp
ja 0x14000850e
lea rcx, str.GUIMode
jmp 0x14000846c
lea rdx, [0x14001df10]
lea rcx, [r14 + 2]
call fcn.140005978
cmp rax, rdi
je 0x14000837f
lea rdx, [r14 + 6]
lea rcx, str.GUIFlags
jmp 0x14000846c
lea rdx, [0x14001df08]
lea rcx, [r14 + 2]
call fcn.140005978
cmp rax, rdi
je 0x1400083a4
lea rdx, [r14 + 6]
lea rcx, str.MiscFlags
jmp 0x14000846c
lea rdx, [0x14001df00]
lea rcx, [r14 + 2]
call fcn.140005978
cmp rax, rdi
je 0x1400083e4
lea rdx, [r14 + 6]
cmp word [rdx], 0x30
je 0x1400083cd
cmp word [rdx], 0x31
jne 0x14000850e
cmp word [r14 + 8], bp
ja 0x14000850e
lea rcx, str.SelfDelete
jmp 0x14000846c
lea rdx, [0x14001def8]
lea rcx, [r14 + 2]
call fcn.140005978
cmp rax, rdi
je 0x14000840e
cmp word [r14 + 6], bp
ja 0x14000850e
mov byte [rsp + 0x32], 1
jmp 0x14000824a
lea rdx, [0x14001def0]
lea rcx, [r14 + 2]
call fcn.140005978
cmp rax, rdi
je 0x14000844c
lea rcx, [r14 + 6]
cmp word [rcx], 0x30
jb 0x14000850e
cmp word [rcx], 0x39
ja 0x14000850e
call qword [sym.imp.msvcrt.dll__wtol]
mov dword [0x140022614], eax
jmp 0x14000824a
lea rdx, [0x14001dee8]
lea rcx, [r14 + 2]
call fcn.140005978
cmp rax, rdi
je 0x14000847e
lea rdx, [r14 + 8]
lea rcx, str.BeginPromptTimeout
lea r8, [rsp + 0xa8]
call fcn.1400069a0
jmp 0x14000824a
cmp word [r14 + 2], 0x79
je 0x14000848e
cmp word [r14 + 2], 0x59
jne 0x1400084a0
cmp word [r14 + 4], bp
ja 0x1400084a0
mov al, 1
mov byte [rsp + 0x30], al
jmp 0x14000824a
cmp word [r14 + 2], 0x3f
je 0x1400084b8
cmp word [r14 + 2], 0x68
je 0x1400084b8
cmp word [r14 + 2], 0x48
jne 0x1400084c7
cmp word [r14 + 4], bp
ja 0x1400084c7
mov r15b, 1
jmp 0x14000824a
lea rdx, [rsp + 0xa8]
lea rcx, [r14 + 2]
call fcn.140005f20
cmp rax, rdi
je 0x14000850e
cmp rax, 1
je 0x1400084eb
mov r14, rax
jmp 0x14000824a
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp rbx, rdi
je 0x140008503
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + InitCommonControls]
mov edi, ebp
jmp 0x1400096e9
add r14, 4
lea rcx, [rsp + 0xa8]
call fcn.1400066b0
cmp r12b, dil
jne 0x140008730
test byte [0x140022ba4], 4
je 0x140008730
call fcn.140002a50
cmp eax, edi
jne 0x140008730
mov esi, 3
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov edx, esi
mov dword [rsp + 0x48], edi
mov dword [rsp + 0x4c], edi
call fcn.140001190
lea rcx, [rsp + 0x90]
mov edx, esi
mov qword [rsp + 0x90], rdi
mov dword [rsp + 0x98], edi
mov dword [rsp + 0x9c], edi
call fcn.140001190
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.140006620
lea rcx, [rsp + 0x80]
mov rdx, rax
call fcn.140002d28
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x130]
mov dx, 0x22
call fcn.140006234
lea r8, [0x14001dd50]
lea rcx, [rsp + 0x150]
mov rdx, rax
call fcn.140006298
lea r8, str.sfxelevation
lea rcx, [rsp + 0x50]
mov rdx, rax
call fcn.140006298
lea rcx, [rsp + 0x70]
movzx r8d, bp
mov rdx, rax
call fcn.140006304
lea r8, [rsp + 0x80]
lea rcx, [rsp + 0xc8]
mov rdx, rax
call fcn.1400015d4
mov rsi, rax
lea rax, [rsp + 0x90]
cmp rsi, rax
je 0x140008664
mov rcx, qword [rsp + 0x90]
mov dword [rsp + 0x98], edi
mov word [rcx], di
mov edx, dword [rsi + 8]
lea rcx, [rsp + 0x90]
call fcn.140001190
mov r11, qword [rsi]
mov rsi, qword [rsp + 0x90]
mov rcx, rsi
movzx eax, word [r11]
add r11, 2
mov word [rcx], ax
add rcx, 2
cmp ax, di
jne 0x14000864e
jmp 0x14000866c
mov rsi, qword [rsp + 0x90]
mov rcx, qword [rsp + 0xc8]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x70]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x50]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x150]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x130]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
or rax, 0xffffffffffffffff
mov r8, rax
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
xor r8d, r8d
mov rcx, rsi
lea edx, [r8 + 2]
call fcn.140006c94
mov rcx, qword [rsp + 0x80]
cmp eax, edi
jne 0x140008714
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, rsi
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x40]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp rbx, rdi
je 0x14000870a
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + InitCommonControls]
mov edi, 0xb
jmp 0x1400096e9
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, rsi
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x40]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
jmp 0x1400080c1
lea r8, [rsp + 0xa0]
lea rdx, str.SetEnvironment
lea rcx, [rsp + 0xa8]
mov dword [rsp + 0xa0], edi
call fcn.140003a58
cmp rax, rdi
mov rsi, rax
je 0x140008901
lea rcx, [rsp + 0x80]
mov rdx, rsi
call fcn.140002d28
mov rbp, qword [rsp + 0x80]
mov dx, 0x3d
mov rcx, rbp
call fcn.140010540
movsxd r12, eax
cmp r12d, edi
jle 0x1400088f4
lea rcx, [rsp + 0xe0]
mov edx, 3
mov word [rbp + r12*2], di
mov dword [rsp + 0x88], r12d
mov qword [rsp + 0xe0], rdi
mov dword [rsp + 0xe8], edi
mov dword [rsp + 0xec], edi
call fcn.140001190
lea rcx, [rsp + 0xf0]
mov edx, 3
mov qword [rsp + 0xf0], rdi
mov dword [rsp + 0xf8], edi
mov dword [rsp + 0xfc], edi
call fcn.140001190
mov rax, qword [rsp + 0xe0]
lea rcx, [rsp + 0xe0]
mov edx, r12d
mov dword [rsp + 0xe8], edi
mov word [rax], di
call fcn.140001190
mov rcx, qword [rsp + 0xe0]
sub rcx, rbp
mov r11, rbp
movzx eax, word [r11]
mov word [r11 + rcx], ax
add r11, 2
cmp ax, di
jne 0x14000881d
lea rdx, [rsi + r12*2 + 2]
lea rcx, [rsp + 0xf0]
mov dword [rsp + 0xe8], r12d
call fcn.1400013d4
mov ecx, 0x20
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
cmp rax, rdi
je 0x14000886d
lea rdx, [rsp + 0xe0]
mov rcx, rax
call fcn.140003008
mov rsi, rax
jmp 0x140008870
mov rsi, rdi
lea rcx, [0x140022670]
call fcn.1400106e4
movsxd r11, dword [0x14002267c]
mov rax, qword [0x140022680]
mov rcx, qword [rsp + 0xf0]
mov qword [rax + r11*8], rsi
mov r12d, 1
add dword [0x14002267c], r12d
add dword [rsp + 0xa0], r12d
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0xe0]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, rbp
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
lea r8, [rsp + 0xa0]
lea rdx, str.SetEnvironment
lea rcx, [rsp + 0xa8]
call fcn.140003a58
cmp rax, rdi
mov rsi, rax
jne 0x14000875f
mov r13d, dword [rsp + 0x38]
jmp 0x140008907
mov rcx, rbp
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov r13d, dword [rsp + 0x38]
mov r12d, 1
call fcn.140005e64
mov r11d, dword [0x140022608]
cmp r11d, 0xffffffff
cmove r11d, edi
cmp r15b, dil
mov dword [0x140022608], r11d
je 0x1400089b1
lea rdx, str.HelpText
lea rcx, [rsp + 0xa8]
xor r8d, r8d
call fcn.140003a58
cmp rax, rdi
mov rsi, rax
jne 0x140008957
mov ecx, 0x18
call fcn.1400027a0
mov rsi, rax
lea rcx, [rsp + 0x1a0]
call fcn.14000aed8
mov r8, qword [0x140022b88]
lea r11, [0x14001d8a0]
lea rcx, [rsp + 0x1a0]
mov r9, rsi
mov edx, reloc.COMCTL32.dll_InitCommonControls
mov qword [rsp + 0x1a0], r11
mov dword [rsp + 0x1f0], 0x7d6
mov qword [rsp + 0x20], rdi
call fcn.14000af6c
lea rcx, [rsp + 0x1a0]
call fcn.14000ab68
jmp 0x1400080c1
mov bpl, byte [rsp + 0x30]
cmp bpl, dil
je 0x1400089c7
btr r11d, 8
mov dword [0x140022608], r11d
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
lea rdx, str.InstallPath
lea rcx, [rsp + 0xa8]
xor r8d, r8d
call fcn.140003a58
lea r15, [0x140022bc8]
cmp rax, rdi
je 0x1400089fd
mov rdx, rax
mov rcx, r15
call fcn.1400013d4
mov rcx, r15
call fcn.140005908
lea rdx, str.BeginPromptTimeout
lea rcx, [rsp + 0xa8]
xor r8d, r8d
call fcn.140003a58
cmp rax, rdi
je 0x140008a30
mov rcx, rax
call qword [sym.imp.msvcrt.dll__wtol]
mov dword [0x140022bb0], eax
cmp dword [0x140022c90], edi
je 0x140008a68
lea rcx, [rsp + 0xa8]
call fcn.14000ca3c
mov rcx, qword [rsp + 0x60]
mov esi, eax
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp rbx, rdi
je 0x14000802e
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + InitCommonControls]
jmp 0x14000802e
cmp dword [0x140022c84], 3
jne 0x140008a80
lea rcx, [rsp + 0xa8]
call fcn.14000c950
jmp 0x140008a45
lea rdx, str.BeginPrompt
lea rcx, [rsp + 0xa8]
xor r8d, r8d
call fcn.140003a58
cmp rax, rdi
je 0x140008ae0
cmp bpl, dil
jne 0x140008ae0
mov rcx, qword [0x140022b88]
mov rdx, rax
call fcn.14000b9ec
cmp eax, edi
je 0x140008c70
mov ecx, InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
movzx r13d, r13b
bt ax, 0xf
cmovb r13d, r12d
cmp dword [0x140022c60], edi
je 0x140008ae0
btr dword [0x140022608], 7
lea rcx, [rsp + 0x70]
mov edx, 3
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x78], edi
mov dword [rsp + 0x7c], edi
call fcn.140001190
cmp r13b, dil
mov r12, qword [rsp + 0x130]
je 0x140008ba3
mov rbp, r12
lea rdx, str.AutoInstall
lea rcx, [rsp + 0x70]
call fcn.1400013d4
movzx edx, word [rbp]
lea rcx, [rsp + 0x70]
call fcn.140001548
mov rsi, qword [rsp + 0x70]
lea rcx, [rsp + 0xa8]
mov rdx, rsi
xor r8d, r8d
call fcn.140003a58
cmp rax, rdi
je 0x140008c92
add rbp, 2
cmp word [rbp], 0x30
jb 0x140008b62
cmp word [rbp], 0x39
jbe 0x140008b10
cmp word [rbp], 0x61
jb 0x140008b70
cmp word [rbp], 0x7a
jbe 0x140008b10
cmp word [rbp], 0x41
jb 0x140008b7e
cmp word [rbp], 0x5a
jbe 0x140008b10
lea rdx, str.AutoInstall
lea rcx, [rsp + 0x70]
call fcn.1400013d4
movzx edx, word [r12]
lea rcx, [rsp + 0x70]
call fcn.140001548
mov bpl, byte [rsp + 0x30]
cmp dword [rsp + 0x78], edi
mov byte [rsp + 0x31], dil
jne 0x140008c13
lea rdx, str.ExecuteFile
lea rcx, [rsp + 0xa8]
xor r8d, r8d
call fcn.140003a58
cmp rax, rdi
je 0x140008be6
lea rdx, str.ExecuteFile
lea rcx, [rsp + 0x70]
call fcn.1400013d4
cmp dword [rsp + 0x78], edi
mov byte [rsp + 0x31], 1
jne 0x140008c13
lea rdx, str.RunProgram
lea rcx, [rsp + 0xa8]
xor r8d, r8d
call fcn.140003a58
cmp rax, rdi
je 0x140008c13
lea rdx, str.RunProgram
lea rcx, [rsp + 0x70]
call fcn.1400013d4
cmp r13b, dil
jne 0x140008cd2
cmp bpl, dil
jne 0x140008cd2
mov eax, dword [0x140022608]
and ax, 0xc0
cmp al, 0x80
jne 0x140008cd2
mov rdx, qword [0x140022b70]
mov rcx, qword [0x140022b78]
call fcn.14000bad0
cmp eax, edi
jne 0x140008cd2
cmp byte [0x140022bb4], dil
mov rcx, qword [rsp + 0x70]
je 0x140008ccb
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov r12d, 1
jmp 0x140008a80
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp rbx, rdi
je 0x140008c88
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + InitCommonControls]
mov edi, 5
jmp 0x1400096e9
mov r8, rsi
mov edx, InitCommonControls
xor ecx, ecx
call fcn.14000c80c
mov rcx, rsi
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp rbx, rdi
je 0x140008cc1
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + InitCommonControls]
mov edi, 6
jmp 0x1400096e9
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
jmp 0x140008c70
mov edx, dword [0x140022bd0]
cmp edx, edi
jne 0x140008d53
lea rdx, str.7ZipSfx._03x
lea rcx, [rsp + 0x80]
call fcn.140005d28
cmp rax, r15
mov rsi, rax
je 0x140008d3a
mov rcx, qword [0x140022bc8]
mov dword [0x140022bd0], edi
mov word [rcx], di
mov edx, dword [rax + 8]
mov rcx, r15
call fcn.140001190
mov r11, qword [rsi]
mov rcx, qword [0x140022bc8]
movzx eax, word [r11]
add r11, 2
mov word [rcx], ax
add rcx, 2
cmp ax, di
jne 0x140008d1d
mov eax, dword [rsi + 8]
mov dword [0x140022bd0], eax
mov rcx, qword [rsp + 0x80]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov byte [0x140022b50], dil
jmp 0x140008dff
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x48], edi
mov dword [rsp + 0x4c], edi
call fcn.140001190
mov r11, qword [0x140022bc8]
mov rcx, qword [rsp + 0x40]
movzx eax, word [r11]
add r11, 2
mov word [rcx], ax
add rcx, 2
cmp ax, di
jne 0x140008d76
mov eax, dword [0x140022bd0]
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x48], eax
call fcn.140005908
cmp dword [rsp + 0x48], edi
jne 0x140008dea
mov rax, qword [0x140022bc8]
mov dword [0x140022bd0], edi
mov rcx, r15
mov word [rax], di
mov edx, dword [rsp + 0x48]
call fcn.140001190
mov r11, qword [rsp + 0x40]
mov rcx, qword [0x140022bc8]
movzx eax, word [r11]
add r11, 2
mov word [rcx], ax
add rcx, 2
cmp ax, di
jne 0x140008dcc
mov eax, dword [rsp + 0x48]
mov dword [0x140022bd0], eax
mov rcx, qword [rsp + 0x40]
mov eax, 1
mov byte [0x140022b50], al
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
movsxd rcx, dword [0x140022bd0]
mov rdx, qword [0x140022bc8]
cmp word [rdx + rcx*2 - 2], 0x5c
je 0x140008e1d
cmp word [rdx + rcx*2 - 2], 0x2f
jne 0x140008e2d
add ecx, 0xffffffff
movsxd rax, ecx
mov word [rdx + rax*2], di
mov dword [0x140022bd0], ecx
cmp bpl, dil
je 0x140008e39
or dword [0x140022ba4], 3
cmp dword [0x140022c80], edi
jne 0x140008e4e
mov rdx, r15
mov rcx, rbx
call fcn.1400018f4
jmp 0x140008e5c
call fcn.14000bb68
cmp eax, edi
jne 0x140008ea1
mov eax, 0x80004005
cmp eax, edi
je 0x140008ea1
cmp byte [0x140022b50], dil
jne 0x140008e75
mov rcx, qword [0x140022bc8]
call fcn.140003bb8
mov rcx, qword [rsp + 0x70]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp rbx, rdi
je 0x140008e97
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + InitCommonControls]
mov edi, 8
jmp 0x1400096e9
call fcn.140005e64
cmp byte [rsp + 0x32], dil
je 0x140008ec0
cmp byte [0x140022b50], dil
je 0x140008ec0
mov r15, qword [rsp + 0x70]
jmp 0x14000980b
lea rcx, [rsp + 0x40]
mov edx, 3
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x48], edi
mov dword [rsp + 0x4c], edi
call fcn.140001190
cmp r13b, dil
jne 0x140008ef7
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xa8]
call fcn.1400065b8
mov byte [rsp + 0x33], dil
mov rsi, r12
mov qword [rsp + 0x150], r12
mov r15, qword [rsp + 0x70]
lea rcx, [rsp + 0x50]
mov edx, 3
mov dword [rsp + 0xd8], edi
mov byte [rsp + 0x34], dil
mov qword [rsp + 0x50], rdi
mov dword [rsp + 0x58], edi
mov dword [rsp + 0x5c], edi
call fcn.140001190
lea rcx, [rsp + 0xc8]
mov edx, 3
mov qword [rsp + 0xc8], rdi
mov dword [rsp + 0xd0], edi
mov dword [rsp + 0xd4], edi
call fcn.140001190
cmp dword [rsp + 0x78], edi
mov r13d, edi
jne 0x14000908e
cmp byte [0x140022b50], dil
jne 0x140009640
lea r8, [0x14001cbb4]
lea rdx, [0x140022bc8]
lea rcx, [rsp + 0x170]
lea rbp, str.setup.exe
call fcn.140006298
lea r8, str.setup.exe
lea rcx, [rsp + 0x160]
mov rdx, rax
call fcn.140006298
mov rsi, rax
lea rax, [rsp + 0x50]
cmp rsi, rax
je 0x140008ffd
mov rcx, qword [rsp + 0x50]
mov dword [rsp + 0x58], edi
mov word [rcx], di
mov edx, dword [rsi + 8]
lea rcx, [rsp + 0x50]
call fcn.140001190
mov r12, qword [rsp + 0x50]
mov r11, qword [rsi]
mov rcx, r12
movzx eax, word [r11]
add r11, 2
mov word [rcx], ax
add rcx, 2
cmp ax, di
jne 0x140008fe0
mov eax, dword [rsi + 8]
mov dword [rsp + 0x58], eax
jmp 0x140009002
mov r12, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x160]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x170]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400095d7
mov byte [rsp + 0x33], 1
lea rcx, [rsp + 0xc8]
mov rdx, rbp
call fcn.1400013d4
lea rcx, [rsp + 0xc8]
call fcn.14000594c
mov rsi, qword [rsp + 0xc8]
mov r12d, 1
mov r15w, 0x3a
lea rdx, str.waitall
mov rcx, rsi
call fcn.140005978
cmp rax, rdi
je 0x140009136
cmp word [rax], r15w
jne 0x140009121
add rax, 2
jmp 0x140009124
lea r8, [rsp + 0x38]
lea rcx, [rsp + 0xa8]
mov rdx, r15
call fcn.140003a58
cmp rax, rdi
mov rbp, rax
jne 0x140009033
add rsi, 2
mov qword [rsp + 0x150], rsi
cmp word [rsi], 0x30
jb 0x1400090c3
cmp word [rsi], 0x39
jbe 0x1400090e3
cmp word [rsi], 0x61
jb 0x1400090cf
cmp word [rsi], 0x7a
jbe 0x1400090e3
cmp word [rsi], 0x41
jb 0x140009640
cmp word [rsi], 0x5a
ja 0x140009640
lea rdx, str.AutoInstall
lea rcx, [rsp + 0x70]
call fcn.1400013d4
movzx edx, word [rsi]
lea rcx, [rsp + 0x70]
call fcn.140001548
mov rcx, qword [rsp + 0xc8]
mov dword [rsp + 0x38], edi
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x50]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
jmp 0x140008f07
mov rax, rdi
cmp rax, rdi
je 0x140009136
mov rsi, rax
mov byte [rsp + 0x34], r12b
jmp 0x140009063
lea rdx, str.hidcon
mov rcx, rsi
call fcn.140005978
cmp rax, rdi
je 0x140009169
cmp word [rax], r15w
jne 0x140009156
add rax, 2
jmp 0x140009159
mov rax, rdi
cmp rax, rdi
je 0x140009169
mov rsi, rax
or r13d, r12d
jmp 0x140009063
lea rdx, str.nowait
mov rcx, rsi
call fcn.140005978
cmp rax, rdi
je 0x1400091a3
cmp word [rax], r15w
jne 0x140009189
add rax, 2
jmp 0x14000918c
mov rax, rdi
cmp rax, rdi
je 0x1400091a3
cmp byte [0x140022b50], dil
mov rsi, rax
je 0x140009063
jmp 0x1400091ce
lea rdx, str.forcenowait
mov rcx, rsi
call fcn.140005978
cmp rax, rdi
je 0x1400091d8
cmp word [rax], r15w
jne 0x1400091c3
add rax, 2
jmp 0x1400091c6
mov rax, rdi
cmp rax, rdi
je 0x1400091d8
mov rsi, rax
bts r13d, 0x10
jmp 0x140009063
lea rdx, [0x14001def0]
mov r8d, 2
mov rcx, rsi
call fcn.1400059d4
cmp rax, rdi
mov rbp, rax
je 0x140009216
cmp dword [0x140022614], 0xffffffff
jne 0x14000920e
lea rcx, [rsi + 4]
call qword [sym.imp.msvcrt.dll__wtol]
mov dword [0x140022614], eax
mov rsi, rbp
jmp 0x140009063
lea rdx, [0x14001de60]
mov r8d, 3
mov rcx, rsi
call fcn.1400059d4
cmp rax, rdi
je 0x140009249
movzx r15d, word [rsi + 6]
mov rsi, rax
sub r15d, 0x30
mov dword [rsp + 0x128], r15d
jmp 0x14000905e
lea rdx, [0x14001de58]
mov r8d, 3
mov rcx, rsi
call fcn.1400059d4
cmp rax, rdi
je 0x140009282
movzx r12d, word [rsi + 6]
mov rsi, rax
sub r12d, 0x30
mov dword [rsp + 0x110], r12d
mov r12d, 1
jmp 0x140009063
lea rdx, [0x14001ca38]
mov rcx, rsi
call fcn.140005978
cmp rax, rdi
je 0x1400092aa
cmp word [rax], r15w
jne 0x1400092a2
add rax, 2
jmp 0x1400092a5
mov rax, rdi
cmp rax, rdi
jne 0x1400092d2
lea rdx, str.i386
mov rcx, rsi
call fcn.140005978
cmp rax, rdi
je 0x1400092e2
cmp word [rax], r15w
jne 0x1400092ca
add rax, 2
jmp 0x1400092cd
mov rax, rdi
cmp rax, rdi
je 0x1400092e2
mov rsi, rax
mov dword [rsp + 0xd8], r12d
jmp 0x140009063
lea rdx, str.amd64
mov rcx, rsi
call fcn.140005978
cmp rax, rdi
je 0x14000930a
cmp word [rax], r15w
jne 0x140009302
add rax, 2
jmp 0x140009305
mov rax, rdi
cmp rax, rdi
jne 0x140009332
lea rdx, [0x14001ca30]
mov rcx, rsi
call fcn.140005978
cmp rax, rdi
je 0x140009345
cmp word [rax], r15w
jne 0x14000932a
add rax, 2
jmp 0x14000932d
mov rax, rdi
cmp rax, rdi
je 0x140009345
mov rsi, rax
mov dword [rsp + 0xd8], 2
jmp 0x140009063
cmp byte [rsp + 0x31], dil
mov r12, qword [rsp + 0x50]
mov r15, qword [rsp + 0x70]
lea rcx, [rsp + 0x50]
je 0x1400093c7
cmp word [rsi], 0x22
je 0x14000938d
lea rdx, [0x14001dcb8]
call fcn.1400013d4
lea rcx, [rsp + 0x50]
mov rdx, rsi
call fcn.140002d94
lea rdx, [0x14001dcb8]
lea rcx, [rsp + 0x50]
call fcn.140002d94
jmp 0x140009395
mov rdx, rsi
call fcn.1400013d4
lea rdx, str.ExecuteParameters
lea rcx, [rsp + 0xa8]
xor r8d, r8d
call fcn.140003a58
cmp rax, rdi
mov rsi, rax
je 0x14000940c
lea rdx, [0x14001de30]
lea rcx, [rsp + 0x50]
call fcn.140002d94
jmp 0x1400093ff
mov word [r12], di
mov edx, dword [rsp + 0x48]
mov dword [rsp + 0x58], edi
call fcn.140001190
mov r11, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x50]
movzx eax, word [r11]
add r11, 2
mov word [rcx], ax
add rcx, 2
cmp ax, di
jne 0x1400093e3
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x58], eax
lea rcx, [rsp + 0x50]
mov rdx, rsi
call fcn.140002d94
lea rcx, [rsp + 0x90]
mov edx, 3
mov qword [rsp + 0x90], rdi
mov dword [rsp + 0x98], edi
mov dword [rsp + 0x9c], edi
call fcn.140001190
mov rsi, qword [rsp + 0x50]
lea rdx, [rsp + 0x90]
mov rcx, rsi
call fcn.140006620
lea rcx, [rsp + 0x80]
mov rdx, rax
call fcn.140002d28
lea rcx, [rsp + 0x90]
call fcn.14000594c
cmp dword [0x140022c84], edi
jne 0x140009570
mov ecx, dword [rsp + 0xd8]
call fcn.140002a3c
cmp eax, edi
je 0x140009570
cmp word [r14], di
je 0x1400094a8
lea rcx, [rsp + 0x80]
mov rdx, r14
call fcn.140002d94
jmp 0x1400094a2
add r14, 2
cmp word [r14], di
jne 0x14000949e
lea rcx, [rsp + 0x80]
call fcn.14000594c
mov al, byte [rsp + 0x34]
cmp al, dil
jne 0x140009550
lea r8, [rsp + 0x90]
lea rcx, [rsp + 0x180]
mov dx, 0x22
call fcn.140006234
lea r8, [0x14001dd2c]
lea rcx, [rsp + 0x190]
mov rdx, rax
call fcn.140006298
lea r8, [rsp + 0x80]
lea rcx, [rsp + 0xe0]
mov rdx, rax
call fcn.1400015d4
mov rcx, qword [rsp + 0x190]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rbp, qword [rsp + 0xe0]
mov r8, qword [0x140022bc8]
mov rcx, rbp
mov edx, r13d
call fcn.140006c94
mov rcx, rbp
cmp eax, edi
je 0x140009657
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
jmp 0x140009570
mov rdx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x90]
mov r8d, r13d
call fcn.140006df0
cmp eax, edi
jne 0x14000965e
cmp byte [rsp + 0x31], dil
jne 0x140009740
cmp byte [rsp + 0x33], dil
jne 0x140009740
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x48], edi
mov word [rax], di
mov rcx, qword [rsp + 0x80]
mov eax, 1
add dword [rsp + 0x38], eax
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x90]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0xc8]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, rsi
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rsi, qword [rsp + 0x150]
jmp 0x140008f0c
cmp byte [0x140022b50], dil
jne 0x1400095ec
mov rcx, qword [0x140022bc8]
call fcn.140003bb8
mov edx, InitCommonControls
xor ecx, ecx
call fcn.14000c80c
mov rcx, qword [rsp + 0xc8]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, r12
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x40]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, r15
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp rbx, rdi
je 0x140007bcd
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + InitCommonControls]
jmp 0x140007bcd
mov rcx, qword [rsp + 0xc8]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x50]
jmp 0x14000976a
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
jmp 0x140009666
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov edx, InitCommonControls
mov r8, rsi
lea ecx, [rdx - 0xf]
call fcn.14000c80c
cmp byte [0x140022b50], dil
jne 0x14000968b
mov rcx, qword [0x140022bc8]
call fcn.140003bb8
mov rcx, qword [rsp + 0x80]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x90]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0xc8]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, rsi
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x40]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, r15
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp rbx, rdi
je 0x1400096e4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + InitCommonControls]
mov edi, 9
mov rcx, qword [rsp + 0x100]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
lea r11, [0x14001d990]
lea rcx, [rsp + 0xa8]
mov qword [rsp + 0xa8], r11
call fcn.1400106d4
lea rcx, [rsp + 0xa8]
call fcn.14001078c
mov rcx, qword [rsp + 0x140]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x118]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov eax, edi
jmp 0x1400099f0
mov rcx, qword [rsp + 0x80]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x90]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0xc8]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, rsi
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp dword [0x140022c84], edi
jne 0x1400097fc
call fcn.140005e64
mov eax, dword [rsp + 0x128]
mov r12, qword [rsp + 0x130]
lea r8, str.Shortcut
lea rdx, [rsp + 0xa8]
lea rcx, [0x140007720]
mov r9, r12
mov dword [rsp + 0x20], eax
call fcn.140006a1c
mov rcx, qword [0x140022bd8]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov ecx, dword [rsp + 0x110]
lea r8, str.Delete
mov dword [rsp + 0x20], ecx
lea rdx, [rsp + 0xa8]
lea rcx, [0x140006058]
mov r9, r12
call fcn.140006a1c
cmp byte [0x140022b50], dil
jne 0x1400097fc
mov rcx, qword [0x140022bc8]
call fcn.140003bb8
mov rcx, qword [rsp + 0x40]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov bpl, byte [rsp + 0x30]
mov eax, dword [0x140022614]
cmp eax, 0xffffffff
jne 0x14000982a
cmp bpl, dil
jne 0x1400098bc
mov eax, 1
mov dword [0x140022614], eax
cmp eax, edi
jle 0x1400098bc
lea rdx, str.FinishMessage
lea rcx, [rsp + 0xa8]
xor r8d, r8d
call fcn.140003a58
cmp rax, rdi
mov rsi, rax
je 0x1400098bc
mov ecx, dword [0x140022614]
mov eax, 0x3e7
cmp ecx, eax
cmovg ecx, eax
mov dword [0x140022614], ecx
lea rcx, [rsp + 0x1a0]
call fcn.14000aed8
mov r8, qword [0x140022b88]
lea r11, [0x14001d930]
lea rcx, [rsp + 0x1a0]
mov r9, rsi
mov edx, reloc.COMCTL32.dll_InitCommonControls
mov qword [rsp + 0x1a0], r11
mov dword [rsp + 0x1f0], 0x7d5
mov qword [rsp + 0x20], rdi
call fcn.14000af6c
lea rcx, [rsp + 0x1a0]
call fcn.14000ab68
cmp byte [rsp + 0x32], dil
jne 0x14000995b
cmp dword [0x140022c84], edi
jne 0x14000995b
lea rdx, str.SelfDelete
lea rcx, [rsp + 0xa8]
xor r8d, r8d
call fcn.140003a58
cmp rax, rdi
je 0x14000995b
cmp word [rax], 0x31
jne 0x14000995b
mov edx, dword [0x140022c30]
lea rcx, [rsp + 0x80]
mov qword [rsp + 0x80], rdi
mov dword [rsp + 0x88], edi
mov dword [rsp + 0x8c], edi
call fcn.140001190
mov r11, qword [0x140022c28]
mov rcx, qword [rsp + 0x80]
movzx eax, word [r11]
add r11, 2
mov word [rcx], ax
add rcx, 2
cmp ax, di
jne 0x14000992d
mov eax, dword [0x140022c30]
lea rcx, [rsp + 0x80]
mov dword [rsp + 0x88], eax
call fcn.140007238
mov rcx, r15
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
cmp rbx, rdi
je 0x14000997b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + InitCommonControls]
mov rcx, qword [rsp + 0x100]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
lea r11, [0x14001d990]
lea rcx, [rsp + 0xa8]
mov qword [rsp + 0xa8], r11
call fcn.1400106d4
lea rcx, [rsp + 0xa8]
call fcn.14001078c
mov rcx, qword [rsp + 0x140]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x118]
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
xor eax, eax
jmp 0x1400099f0
lea r8, str.7_Zip_SFX
lea rdx, str.Sorry__this_program_requires_Microsoft_Windows_2000_or_later.
mov r9d, InitCommonControls
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 0x14
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret