Function at 0x140022770
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
lea r15, [rbp + 0x5f]
xor r14d, r14d
add r15, 0xfffffffffffffff8
lea r8, [0x140025c10]
mov rcx, r15
lea rdx, [rbp + 0x6f]
call fcn.140028f10
mov qword [rbp + 0x6f], rax
call fcn.14002f890
xor ecx, ecx
call fcn.140030d70
xor r8d, r8d
lea rcx, [0x140025100]
xor edx, edx
call fcn.14002ecf0
call fcn.14019aa40
lea rdx, str.main_init
lea ecx, [r14 + 5]
call fcn.14002d250
lea rdx, [rbp + 0x77]
lea rcx, [rbp + 0x67]
call fcn.1400219f0
lea r8, [0x140025c10]
mov rcx, r15
lea rdx, [rbp + 0x67]
call fcn.140028f10
mov rcx, rax
mov qword [rbp + 0x67], rax
call fcn.14003d380
mov rcx, qword [rbp + 0x67]
call fcn.14002cc10
mov rdx, qword [rbp + 0x67]
lea rcx, [0x140278eb8]
mov rdx, qword [rdx]
call fcn.14002a080
lea rcx, [0x140278eb8]
call fcn.14002c1b0
mov rdx, qword [rbp + 0x67]
lea rcx, [0x140278eb0]
mov rdx, qword [rdx]
call fcn.14002a080
mov r8, qword [0x140278eb8]
lea rdx, str.main_app_name__s
lea ecx, [r14 + 5]
call fcn.14002d250
lea rcx, [0x1401a6694]
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov ecx, 0x8001
call qword [sym.imp.KERNEL32.dll_SetSearchPathMode]
call fcn.140026ed0
lea rdx, str.main_local_conf
lea ecx, [r14 + 5]
call fcn.14002d250
mov rax, qword [0x14027de10]
lea rdx, str.main_log_preinit
mov qword [0x14027de90], rax
lea ecx, [r14 + 5]
mov eax, dword [0x14027ddf0]
mov dword [0x14027de88], eax
mov rax, qword [0x14027de28]
mov qword [0x14027de80], rax
mov eax, dword [0x14027ddfc]
mov dword [0x14027de78], eax
mov rax, qword [0x14027de18]
mov qword [0x14027de70], rax
mov eax, dword [0x14027ddf4]
mov dword [0x14027de68], eax
mov rax, qword [0x14027de20]
mov qword [0x14027de60], rax
mov eax, dword [0x14027ddf8]
mov dword [0x14027de58], eax
call fcn.14002d250
call fcn.140021980
mov rcx, qword [rbp + 0x6f]
mov rdx, rax
call fcn.14002a080
mov rcx, qword [rbp + 0x6f]
call fcn.14002a8a0
mov r13, qword [rbp + 0x77]
lea rbx, [r13 + 8]
mov rdi, rbx
mov rcx, qword [rbx]
or r12, 0xffffffffffffffff
test rcx, rcx
je 0x14002319c
lea rdx, str.__uuid
lea r8, str.__beta
cmp byte [rcx], 0x2d
jne 0x1400231e1
movzx eax, byte [rcx]
cmp al, byte [0x1401a66bc]
jne 0x140022977
movzx eax, byte [rcx + 1]
cmp al, byte [0x1401a66bd]
jne 0x140022977
movzx eax, byte [rcx + 2]
cmp al, byte [0x1401a66be]
jne 0x140022977
mov ecx, r14d
jmp 0x14002297c
sbb ecx, ecx
or ecx, 1
lea rax, [rdi + 8]
test ecx, ecx
cmovne rax, rdi
mov rdi, rax
mov rsi, rax
je 0x1400231e1
mov rbx, qword [rax]
test rbx, rbx
je 0x140023709
movzx eax, byte [rbx]
cmp al, byte [0x1401a66c0]
jne 0x1400229c5
movzx eax, byte [rbx + 1]
cmp al, byte [0x1401a66c1]
jne 0x1400229c5
movzx eax, byte [rbx + 2]
cmp al, byte [0x1401a66c2]
je 0x140023635
movzx eax, byte [rbx]
cmp al, byte [0x1401a66c4]
jne 0x1400229ec
movzx eax, byte [rbx + 1]
cmp al, byte [0x1401a66c5]
jne 0x1400229ec
movzx eax, byte [rbx + 2]
cmp al, byte [0x1401a66c6]
je 0x14002363b
mov rcx, r14
nop
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x140022a09
cmp rcx, 7
je 0x140023623
jmp 0x1400229f0
mov rcx, r14
nop dword [rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x140022a29
cmp rcx, 7
jne 0x140022a10
jmp 0x140023187
lea rdx, str.__opt_in
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022a63
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x140023641
mov qword [0x14027dea0], rax
mov dword [0x140278de4], 1
jmp 0x140023179
lea rdx, str.__updater
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022a9d
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x140023647
mov qword [0x14027dea0], rax
mov dword [0x140278e00], 1
jmp 0x140023179
lea rdx, str.__install
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022ad7
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x14002364d
mov qword [0x14027dea0], rax
mov dword [0x140278df8], 1
jmp 0x140023179
lea rdx, str.__install_ui
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022b1b
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x140023653
mov qword [0x14027dea0], rax
mov dword [0x140278df8], 1
mov dword [0x140278e0c], 1
jmp 0x140023179
lea rdx, str.__check_peer
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022b55
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x140023659
mov qword [0x14027dea0], rax
mov dword [0x140278e14], 1
jmp 0x140023179
lea rdx, str.__start_service
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022b8f
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x14002365f
mov qword [0x14027dea0], rax
mov dword [0x140278e18], 1
jmp 0x140023179
lea rdx, str.__stop_service
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022bc9
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x140023665
mov qword [0x14027dea0], rax
mov dword [0x140278e1c], 1
jmp 0x140023179
lea rdx, str.__no_cleanup
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022beb
mov dword [0x140278e10], 1
jmp 0x140023179
lea rdx, str.__remote
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022c0d
mov dword [0x140278e04], 1
jmp 0x140023179
lea rdx, str.__uninstall
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022c47
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x14002366b
mov qword [0x14027dea0], rax
mov dword [0x140278dfc], 1
jmp 0x140023179
mov rcx, r14
lea rdx, str.__debug
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x140022c73
cmp rcx, 8
jne 0x140022c51
mov dword [0x140278e08], 1
jmp 0x140023179
lea rdx, str.__dlg_pos
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022d6d
mov rbx, qword [rsi + 8]
lea rdi, [rsi + 8]
test rbx, rbx
je 0x140023677
mov rcx, r14
lea rdx, str.owner
nop word [rax + rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x140022ccf
cmp rcx, 6
jne 0x140022cb0
mov dword [reloc.WS2_32.dll_accept], r14d
jmp 0x140023179
mov rcx, r14
lea rdx, str.screen
nop dword [rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x140022d02
cmp rcx, 7
jne 0x140022ce0
mov dword [reloc.WS2_32.dll_accept], 1
jmp 0x140023179
lea r8, [fcn.14004b690]
mov rcx, r15
lea rdx, [rbp + 0x67]
call fcn.140028f10
mov r9d, 1
mov qword [rbp + 0x67], rax
lea r8, [0x1401a679c]
mov rdx, rbx
mov rcx, rax
call fcn.14004b820
mov rbx, qword [rax]
mov rcx, rbx
call fcn.14004b480
cmp eax, 2
jne 0x140023671
mov rcx, qword [rbx]
mov dword [reloc.WS2_32.dll_accept], eax
call fcn.14016d910
mov rcx, qword [rbx + 8]
mov dword [0x140278e28], eax
call fcn.14016d910
mov dword [0x140278e2c], eax
jmp 0x140023179
lea rdx, str.__dlg_flavour
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022df8
mov rdx, qword [rsi + 8]
lea rdi, [rsi + 8]
test rdx, rdx
je 0x140023683
mov rcx, r14
lea r8, str.default
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x140022dc2
cmp rcx, 8
jne 0x140022da0
mov eax, r14d
mov dword [0x140278de0], eax
jmp 0x140023179
mov rcx, r14
lea r8, [0x1401a67b8]
nop dword [rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x14002367d
cmp rcx, 4
jne 0x140022dd0
mov eax, 1
mov dword [0x140278de0], eax
jmp 0x140023179
lea rdx, str.__dlg_txt_cult
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022e28
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x140023689
mov qword [0x140278e30], rax
jmp 0x140023179
lea rdx, str.__dlg_language
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022e58
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x14002368f
mov qword [0x140278e30], rax
jmp 0x140023179
lea rdx, str.__dlg_bg_color
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022e88
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x140023695
mov qword [0x140278e38], rax
jmp 0x140023179
lea rdx, str.__dlg_btn_color
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022eb8
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x14002369b
mov qword [0x140278e40], rax
jmp 0x140023179
lea rdx, str.__dlg_txt_color
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022ee8
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x1400236a1
mov qword [0x140278e48], rax
jmp 0x140023179
lea rdx, str.__dlg_app_name_color
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022f18
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x1400236a7
mov qword [0x140278e50], rax
jmp 0x140023179
lea rdx, str.__dlg_app_name
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022f48
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x1400236ad
mov qword [0x140278e58], rax
jmp 0x140023179
lea rdx, str.__dlg_tos_link
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022f6e
cmp qword [rsi + 8], r14
lea rdi, [rsi + 8]
je 0x140023629
jmp 0x140023179
lea rdx, str.__dlg_logo_link
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022f9e
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x1400236b3
mov qword [0x140278e60], rax
jmp 0x140023179
lea rdx, str.__dlg_benefit_txt
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022fce
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x1400236b9
mov qword [0x140278e68], rax
jmp 0x140023179
lea rdx, str.__dlg_benefit
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140022ffe
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x1400236bf
mov qword [0x140278e70], rax
jmp 0x140023179
lea rdx, str.__dlg_agree_btn
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x14002302e
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x1400236c5
mov qword [0x140278e88], rax
jmp 0x140023179
lea rdx, str.__dlg_disagree_btn
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x14002305e
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x1400236cb
mov qword [0x140278e90], rax
jmp 0x140023179
lea rdx, str.__dlg_peer_txt
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x14002308e
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x1400236d1
mov qword [0x140278e88], rax
jmp 0x140023179
lea rdx, str.__dlg_not_peer_txt
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x1400230be
mov rax, qword [rsi + 8]
lea rdi, [rsi + 8]
test rax, rax
je 0x1400236d7
mov qword [0x140278e90], rax
jmp 0x140023179
mov rcx, r14
lea rdx, str.__fast
nop dword [rax + rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x1400230f2
cmp rcx, 7
jne 0x1400230d0
mov dword [0x140278e80], 1
jmp 0x140023179
lea rdx, str.__elevate
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140023111
mov dword [0x140278e84], 1
jmp 0x140023179
lea rdx, str.__campaign
mov rcx, rbx
call fcn.14017c3a0
test eax, eax
jne 0x140023709
mov rcx, qword [rsi + 8]
lea rdi, [rsi + 8]
test rcx, rcx
je 0x140023703
mov qword [0x140278e78], rcx
mov rax, r12
inc rax
cmp byte [rcx + rax], r14b
jne 0x140023143
cmp rax, 0x32
ja 0x1400236dd
lea rcx, str._a_z0_9___
call fcn.14002bbc0
mov rcx, qword [0x140278e78]
mov rdx, rax
call fcn.14002b2c0
test eax, eax
jne 0x1400236dd
lea rdx, str.__uuid
lea r8, str.__beta
mov rcx, qword [rdi + 8]
add rdi, 8
test rcx, rcx
jne 0x140022946
lea rbx, [r13 + 8]
cmp dword [0x140278e00], r14d
jne 0x1400231ec
cmp dword [0x140278df8], r14d
jne 0x1400231ec
cmp dword [0x140278dfc], r14d
jne 0x1400231ec
cmp dword [0x140278e14], r14d
jne 0x1400231ec
cmp dword [0x140278de4], r14d
jne 0x1400231ec
cmp dword [0x140278e18], r14d
jne 0x1400231ec
cmp dword [0x140278e1c], r14d
je 0x14002362f
jmp 0x1400231ec
cmp qword [rdi], r14
jne 0x14002370f
jmp 0x140023198
lea rdx, str.main_check_args
mov ecx, 5
call fcn.14002d250
mov rdx, qword [0x14027dea0]
test rdx, rdx
je 0x140023767
cmp byte [rdx], r14b
je 0x140023767
lea rcx, str.win___a_z0_9_.__
call fcn.14002bbc0
mov rcx, qword [0x14027dea0]
mov rdx, rax
call fcn.14002b2c0
test eax, eax
jne 0x140023760
cmp dword [0x140278e84], r14d
je 0x140023325
call fcn.14003d480
test eax, eax
jne 0x140023325
lea rdx, str.spawing_net_updater_in_elevated_mode
lea ecx, [rax + 5]
call fcn.14002d250
xor edx, edx
lea rcx, [rbp - 0x49]
lea r8d, [rdx + 0x70]
call fcn.140174b20
mov rdx, qword [r13]
lea rax, str.runas
mov rcx, r15
mov qword [rbp - 0x39], rax
mov dword [rbp - 0x49], reloc.WS2_32.dll_WSASetLastError
mov dword [rbp - 0x45], 0x40
mov qword [rbp - 0x41], r14
call fcn.1400294d0
mov rcx, rbx
mov rdx, qword [rax]
mov qword [rbp - 0x31], rdx
call fcn.140049890
mov rdx, rax
mov rcx, r15
call fcn.1400294d0
mov rcx, qword [rax]
mov qword [rbp - 0x29], rcx
lea rcx, [rbp - 0x49]
mov qword [rbp - 0x21], r14
mov dword [rbp - 0x19], 5
mov qword [rbp - 0x11], r14
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
movsxd rcx, eax
call fcn.140171070
test rax, rax
jne 0x1400232f2
lea rdx, str.failed_running_elevated_mode__m
lea ecx, [rax + 3]
call fcn.14002d250
jmp 0x140023307
mov ecx, dword [rbp + 0x1f]
call fcn.140032b60
mov rcx, qword [rbp + 0x1f]
mov r12d, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, r12d
mov rbx, qword [rsp + 0x128]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp dword [0x140278e80], r14d
je 0x14002338a
lea rdx, str.running_in_fast_mode
mov ecx, 5
call fcn.14002d250
cmp dword [0x140278df8], r14d
je 0x1400234be
cmp dword [0x140278e04], r14d
je 0x1400234be
lea rdx, str.main_install_rmt
mov ecx, 5
call fcn.14002d250
mov rcx, qword [rbp + 0x6f]
lea rdx, str._temp
mov rcx, qword [rcx]
call fcn.140029f60
test eax, eax
jne 0x140023715
jmp 0x14002345e
cmp dword [0x140278df8], r14d
je 0x1400234be
cmp dword [0x140278e0c], r14d
je 0x14002333f
lea r8, [fcn.14004b690]
mov rcx, r15
lea rdx, [rbp + 0x67]
call fcn.140028f10
mov rcx, qword [rbp + 0x67]
mov rdx, r13
call fcn.14004b4a0
lea rdx, str.spawing_net_updater_in_fast_mode
mov qword [rbp + 0x67], rax
mov ecx, 5
call fcn.14002d250
mov rcx, qword [rbp + 0x67]
lea rdx, str.__fast
xor r8d, r8d
call fcn.14004abd0
mov rcx, qword [rbp + 0x67]
mov rcx, qword [rcx]
call fcn.140049890
mov qword [rsp + 0x30], r14
mov rcx, rax
mov dword [rsp + 0x28], r14d
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], r14d
xor edx, edx
call fcn.140031e50
mov ecx, eax
call fcn.140032b60
mov ebx, eax
cmp eax, 2
jbe 0x140023736
mov r8d, eax
lea rdx, [0x1401a6978]
mov rcx, r15
call fcn.1400292a0
xor r9d, r9d
mov dword [rsp + 0x28], 1
lea rcx, str.install_fast_failed
mov dword [rsp + 0x20], r14d
mov rdx, qword [rax]
lea r8d, [r9 + 1]
call fcn.14001fb10
jmp 0x14002333f
mov rdx, qword [rbp + 0x6f]
lea rcx, [0x140278ea8]
mov rdx, qword [rdx]
call fcn.14002a080
mov rcx, qword [rbp + 0x6f]
lea rdx, str.luminati_temp
mov rcx, qword [rcx]
call fcn.140029f60
lea rcx, [0x140278eb0]
test eax, eax
jne 0x140023583
lea r8, [0x1401a4de0]
lea rdx, str.luminati_temp_
call fcn.14002a600
mov rcx, qword [0x140278ec0]
test rcx, rcx
je 0x1400234be
call fcn.14017610c
mov qword [0x140278ec0], r14
cmp dword [0x140278e00], r14d
je 0x14002359c
mov rdx, qword [0x140278f00]
test rdx, rdx
jne 0x14002351b
mov rdx, qword [0x14027dea0]
mov rcx, r15
call fcn.140029310
mov r8b, 0x5f
mov dl, 0x2e
mov rcx, qword [rax]
call fcn.14002a970
mov rcx, rax
call fcn.14002aae0
mov r9, rax
lea r8, str.luminati_net_updater
lea rdx, [0x1401a5248]
lea rcx, [0x140278f00]
call fcn.14002a130
mov rdx, qword [rax]
mov rcx, r15
call fcn.1400294d0
mov rcx, qword [rax]
lea rax, [0x140025cd0]
mov qword [rbp - 0x69], rcx
lea rcx, [rbp - 0x69]
mov qword [rbp - 0x61], rax
mov qword [rbp - 0x59], r14
mov qword [rbp - 0x51], r14
call qword [sym.imp.ADVAPI32.dll_StartServiceCtrlDispatcherW]
test eax, eax
jne 0x14002356a
mov dword [rsp + 0x28], r14d
lea r8d, [rax + 1]
xor r9d, r9d
mov dword [rsp + 0x20], r14d
xor edx, edx
lea rcx, str.start_invalid
call fcn.14001fb10
lea rdx, str.main_service
mov ecx, 5
call fcn.14002d250
mov eax, r14d
jmp 0x14002330a
mov rdx, qword [rbp + 0x6f]
mov rdx, qword [rdx]
call fcn.140021e40
test eax, eax
jne 0x140023755
jmp 0x1400234a6
mov edx, 1
lea ecx, [rdx + 3]
call fcn.140176104
lea rdx, str.main_install
mov ecx, 5
mov rbx, rax
call fcn.14002d250
lea rax, str.net_install
mov rdx, rbx
lea r8, [0x1400204d0]
mov qword [0x14027de98], rax
lea rcx, [0x140020510]
call fcn.140023790
call fcn.140035790
cmp dword [0x14027e320], 6
jl 0x140023600
lea rdx, str.main_uninit
mov ecx, 6
call fcn.14002d250
call fcn.14003b670
call fcn.140035ee0
call fcn.1401982c0
call fcn.14019c220
mov r14d, dword [0x140278e20]
mov eax, r14d
jmp 0x14002330a
call fcn.140024fa0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.140026d20
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
mov ecx, 2
call fcn.140176908
mov r8, qword [0x140278e78]
lea rdx, str.invalid_campaign__s
mov rcx, rax
call fcn.140021930
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
call fcn.1400266b0
int3
mov rdx, qword [0x140278eb0]
lea rcx, str.rmt_install_wrong_path
xor r8d, r8d
call fcn.140023f60
mov ecx, 2
call fcn.1401763c4
int3
mov r9d, 1
lea rcx, str.install_fast_ok
xor r8d, r8d
xor edx, edx
call fcn.14001ffb0
mov ecx, ebx
call fcn.1401763c4
int3
mov ecx, 2
call fcn.1401763c4
int3
mov rdx, qword [0x14027dea0]
mov r8d, 1
lea rcx, str.invalid_appid
call fcn.140023f60
mov ecx, 3
call fcn.1401763c4
int3