Function at 0x14008e470
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov qword [rbp - 0x48], 0xfffffffffffffffe
mov qword [rsp + 0x1e0], rbx
mov rax, qword [0x14011f010]
xor rax, rsp
mov qword [rbp + 0x90], rax
mov rax, r8
mov rdi, qword [rbp + 0x100]
mov qword [rbp - 0x68], rdi
mov r14, qword [rbp + 0x110]
mov qword [rsp + 0x58], r14
xor r12d, r12d
mov dword [rsp + 0x40], r12d
mov dword [r14], r12d
sub edx, 0x20000001
je 0x14008f1e8
sub edx, 6
je 0x14008e5bf
cmp edx, 5
jne 0x14008e58a
mov r8d, 0x93
lea rdx, str.ServiceCommandForDriver
lea rcx, str._s__d_SRV_CMD_GetApoPolicy
call fcn.14004c3d0
call fcn.14001d860
mov rbx, rax
test rax, rax
je 0x14008e58a
mov r9d, dword [rax + 4]
mov ecx, r9d
shr ecx, 3
and ecx, 1
and r9d, 1
mov dword [rsp + 0x20], ecx
mov r8d, 0x97
lea rdx, str.ServiceCommandForDriver
lea rcx, str._s__d_BG_pRtkApoPolicy__IsRtkGen4CaptureSupport_d_pRtkApoPolicy__ApplyRtkEffectInBtUsbAudio_d
call fcn.14004c3d0
mov r9d, dword [rbx + 4]
shr r9d, 5
and r9d, 1
mov r8d, 0x98
lea rdx, str.ServiceCommandForDriver
lea rcx, str._s__d_BG_pRtkApoPolicy__PlaybackDeviceSharedNN_d
call fcn.14004c3d0
mov r8d, 0x80
mov dword [r14], r8d
mov eax, dword [rbp + 0x108]
cmp eax, r8d
jae 0x14008e57f
mov r8d, eax
mov rdx, rbx
mov rcx, rdi
call fcn.1400aaba0
cmp dword [r14], 0
seta r12b
mov rax, r12
mov rcx, qword [rbp + 0x90]
xor rcx, rsp
call fcn.1400a4020
mov rbx, qword [rsp + 0x1e0]
add rsp, 0x1a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor edx, edx
lea r8d, [rdx + 0x50]
lea rcx, [rbp + 0x40]
call fcn.1400aa8f0
mov qword [rbp + 0x40], r12
xor eax, eax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x50], rax
mov dword [rbp + 0x58], r12d
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], r12
mov qword [rbp + 0x80], r12
mov dword [rbp + 0x88], 0xa
call fcn.140005f30
mov rbx, rax
call fcn.140004540
mov rcx, rax
test rax, rax
je 0x14008f27f
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp - 0x28], rax
mov rdx, rbx
lea rcx, [rbp - 0x28]
call fcn.140003d00
mov r13, 0xffffffffffffffff
test al, al
jne 0x14008e66a
test rbx, rbx
jne 0x14008e649
mov eax, r12d
jmp 0x14008e65a
mov rax, r13
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x14008e650
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x28]
call fcn.140003f80
nop
lea r8, str.RtkAudUServiceConf64.dll
lea rdx, str.RtkAudUService64.exe
lea rcx, [rbp - 0x28]
call fcn.14000b200
lea r8, [0x1400c4360]
lea rdx, [0x1400d81d0]
lea rcx, [rbp - 0x28]
call fcn.14000b200
mov dword [r14], r12d
mov rbx, qword [rbp - 0x28]
cmp dword [rbx - 8], 1
jle 0x14008e6b5
mov edx, dword [rbx - 0x10]
lea rcx, [rbp - 0x28]
call fcn.140003e20
mov rbx, qword [rbp - 0x28]
mov rcx, rbx
call fcn.1400a23c0
test eax, eax
je 0x14008f17f
xor edx, edx
lea r8d, [rdx + 0x22]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_LoadLibraryExW]
mov rdi, rax
test rax, rax
je 0x14008f17f
lea r8, [0x1400e1210]
mov edx, 0x66
mov rcx, rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_1.dll_FindResourceW]
mov rsi, rax
test rax, rax
je 0x14008f17f
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_SizeofResource]
test eax, eax
je 0x14008f17f
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_LockResource]
test rax, rax
je 0x14008f17f
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.14005e4c0
xor eax, eax
mov qword [rbp + 0x30], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], r12
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
mov dword [rbp + 0x30], 0xa
lea rcx, [rbp + 8]
call fcn.140076cc0
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x14008f174
nop word [rax + rax]
lea rax, [rcx]
mov rcx, qword [rcx]
mov qword [rbp - 0x70], rcx
mov rcx, qword [rax + 0x10]
sub rcx, 0x18
call fcn.140006110
lea rbx, [rax + 0x18]
mov qword [rbp - 0x38], rbx
movzx r15d, r12w
call fcn.140004540
mov rcx, rax
test rax, rax
je 0x14008f31a
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
lea rdi, [rax + 0x18]
mov qword [rbp - 0x30], rdi
call fcn.140004540
mov rcx, rax
test rax, rax
je 0x14008f30f
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp - 0x20], rax
lea rdx, [rdi - 0x18]
mov rsi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x14008e833
cmp dword [rdx + 0x10], 0
jge 0x14008e808
cmp dword [rdi - 0xc], 0
jl 0x14008f28a
mov dword [rdi - 0x10], r12d
mov word [rdi], r12w
jmp 0x14008e833
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008e81e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp - 0x30], rax
mov rbx, qword [rbp - 0x38]
mov rax, qword [rbp - 0x20]
lea rdx, [rax - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x14008e889
cmp dword [rdx + 0x10], 0
jge 0x14008e85e
cmp dword [rax - 0xc], 0
jl 0x14008f295
mov dword [rax - 0x10], r12d
mov word [rax], r12w
jmp 0x14008e889
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008e874
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp - 0x20], rax
mov rbx, qword [rbp - 0x38]
lea r14, [rbx - 0x10]
cmp dword [r14], 0
jl 0x14008eda6
lea rdx, str.HDAUDIO
mov rcx, rbx
call fcn.1400aa2c0
test rax, rax
je 0x14008e8b5
sub rax, rbx
sar rax, 1
test eax, eax
jns 0x14008e8e5
cmp dword [r14], 0
jl 0x14008eda6
lea rdx, str.INTELAUDIO
mov rcx, rbx
call fcn.1400aa2c0
test rax, rax
je 0x14008ec3b
sub rax, rbx
sar rax, 1
test eax, eax
js 0x14008ec3b
cmp dword [r14], 0
jl 0x14008ea8d
lea rdx, str.SUBSYS_
mov rcx, rbx
call fcn.1400aa2c0
test rax, rax
je 0x14008ea8d
sub rax, rbx
sar rax, 1
test eax, eax
js 0x14008ea8d
add eax, 7
mov esi, r12d
cmovns esi, eax
mov eax, 0x7fffffff
sub eax, esi
cmp eax, 8
jl 0x14008f2c7
lea eax, [rsi + 8]
mov edx, dword [r14]
mov ecx, 8
cmp eax, edx
jle 0x14008e941
mov ecx, edx
sub ecx, esi
mov edi, r12d
cmp esi, edx
cmovle edi, ecx
test esi, esi
jne 0x14008e96b
lea eax, [rdi + rsi]
cmp eax, edx
jne 0x14008e96b
lea rcx, [rbx - 0x18]
call fcn.140006110
lea rbx, [rax + 0x18]
mov qword [rsp + 0x70], rbx
jmp 0x14008e9fc
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x14008e982
mov rax, qword [rcx]
call qword [rax + 0x20]
mov r9, rax
test rax, rax
jne 0x14008e993
call fcn.140004540
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov r9, rax
movsxd rcx, esi
lea rsi, [rbx + rcx*2]
test r9, r9
je 0x14008f2bc
test rsi, rsi
jne 0x14008e9b0
test edi, edi
jne 0x14008f2a0
mov rax, qword [r9]
mov r8d, 2
mov edx, edi
mov rcx, r9
call qword [rax]
test rax, rax
je 0x14008f2b6
lea rbx, [rax + 0x18]
mov qword [rsp + 0x70], rbx
test edi, edi
js 0x14008f2ab
cmp edi, dword [rbx - 0xc]
jg 0x14008f2ab
mov dword [rbx - 0x10], edi
movsxd rdx, edi
mov word [rbx + rdx*2], r12w
mov r9d, edi
mov r8, rsi
mov rcx, rbx
call fcn.140003ef0
mov r15d, dword [rsp + 0x40]
or r15d, 1
mov dword [rsp + 0x40], r15d
lea rsi, [rbx - 0x18]
mov rdi, qword [rbp - 0x30]
add rdi, 0xffffffffffffffe8
cmp rsi, rdi
je 0x14008ea69
cmp dword [rdi + 0x10], 0
jl 0x14008ea58
mov rax, qword [rdi]
cmp qword [rsi], rax
jne 0x14008ea58
mov rcx, rsi
call fcn.140006110
mov rbx, rax
mov ecx, r13d
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x14008ea4e
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov qword [rbp - 0x30], rax
jmp 0x14008ea69
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.140003f80
nop
mov eax, r13d
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x14008ea87
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov dword [rsp + 0x40], r15d
mov rbx, qword [rbp - 0x38]
jmp 0x14008ea92
mov r15d, dword [rsp + 0x40]
cmp dword [r14], 0
jl 0x14008ec33
lea rdx, str.VEN_
mov rcx, rbx
call fcn.1400aa2c0
test rax, rax
je 0x14008ec33
sub rax, rbx
sar rax, 1
test eax, eax
js 0x14008ec33
add eax, 4
mov esi, r12d
cmovns esi, eax
mov eax, 0x7fffffff
sub eax, esi
cmp eax, 4
jl 0x14008f2f9
lea eax, [rsi + 4]
mov edx, dword [r14]
mov ecx, 4
cmp eax, edx
jle 0x14008eaee
mov ecx, edx
sub ecx, esi
mov edi, r12d
cmp esi, edx
cmovle edi, ecx
test esi, esi
jne 0x14008eb18
lea eax, [rdi + rsi]
cmp eax, edx
jne 0x14008eb18
lea rcx, [rbx - 0x18]
call fcn.140006110
lea rbx, [rax + 0x18]
mov qword [rsp + 0x78], rbx
jmp 0x14008eba9
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x14008eb2f
mov rax, qword [rcx]
call qword [rax + 0x20]
mov r9, rax
test rax, rax
jne 0x14008eb40
call fcn.140004540
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov r9, rax
movsxd rcx, esi
lea rsi, [rbx + rcx*2]
test r9, r9
je 0x14008f2ee
test rsi, rsi
jne 0x14008eb5d
test edi, edi
jne 0x14008f2d2
mov rax, qword [r9]
mov r8d, 2
mov edx, edi
mov rcx, r9
call qword [rax]
test rax, rax
je 0x14008f2e8
lea rbx, [rax + 0x18]
mov qword [rsp + 0x78], rbx
test edi, edi
js 0x14008f2dd
cmp edi, dword [rbx - 0xc]
jg 0x14008f2dd
mov dword [rbx - 0x10], edi
movsxd rdx, edi
mov word [rbx + rdx*2], r12w
mov r9d, edi
mov r8, rsi
mov rcx, rbx
call fcn.140003ef0
or r15d, 2
mov dword [rsp + 0x40], r15d
lea rsi, [rbx - 0x18]
mov rdi, qword [rbp - 0x20]
add rdi, 0xffffffffffffffe8
cmp rsi, rdi
je 0x14008ec11
cmp dword [rdi + 0x10], 0
jl 0x14008ec00
mov rax, qword [rdi]
cmp qword [rsi], rax
jne 0x14008ec00
mov rcx, rsi
call fcn.140006110
mov rbx, rax
mov ecx, r13d
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x14008ebf6
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov qword [rbp - 0x20], rax
jmp 0x14008ec11
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.140003f80
nop
mov eax, r13d
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x14008ec2f
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov dword [rsp + 0x40], r15d
mov rbx, qword [rbp - 0x38]
mov r15d, r12d
jmp 0x14008eda6
cmp dword [r14], 0
jl 0x14008eda6
lea rdx, [0x1400c6200]
mov rcx, rbx
call fcn.1400aa2c0
test rax, rax
je 0x14008eda6
sub rax, rbx
sar rax, 1
test eax, eax
js 0x14008eda6
cmp dword [r14], 0
jl 0x14008eda0
lea rdx, str.VID_
mov rcx, rbx
call fcn.1400aa2c0
test rax, rax
je 0x14008ed31
sub rax, rbx
sar rax, 1
test eax, eax
js 0x14008ed31
lea r8d, [rax + 4]
mov r9d, 4
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x38]
call fcn.14000f210
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x30]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14008ed0f
cmp dword [rbx + 0x10], 0
jl 0x14008ed01
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14008ed01
call fcn.140006110
mov rdi, rax
mov ecx, r13d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14008ecf7
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp - 0x30], rax
jmp 0x14008ed0f
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x30]
call fcn.140003f80
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008ed2d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp - 0x38]
cmp dword [r14], 0
jl 0x14008eda0
lea rdx, str.PID_
mov rcx, rbx
call fcn.1400aa2c0
test rax, rax
je 0x14008eda0
sub rax, rbx
sar rax, 1
test eax, eax
js 0x14008eda0
lea r8d, [rax + 4]
mov r9d, 4
lea rdx, [rbp - 0x78]
lea rcx, [rbp - 0x38]
call fcn.14000f210
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x30]
call fcn.14000f360
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008ed9c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp - 0x38]
mov r15d, 1
xor edx, edx
lea r8d, [rdx + 0x10]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
mov r14d, eax
xor edx, edx
lea r8d, [rdx + 0x10]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
mov ecx, eax
mov dword [rsp + 0x48], eax
mov word [rbp - 8], cx
shr eax, 0x10
mov dword [rsp + 0x44], eax
mov word [rbp - 6], ax
mov word [rbp - 4], cx
mov word [rbp - 2], ax
mov qword [rbp - 0x10], r12
lea rdi, [rbx - 0x18]
mov rcx, rdi
call fcn.140006110
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x10]
call fcn.140075f90
nop
mov r8d, 9
lea rdx, str.Settings
lea rcx, [rbp - 0x10]
call fcn.14000f360
mov qword [rbp], r12
lea rax, [rsp + 0x50]
mov qword [rbp - 0x60], rax
call fcn.140004540
mov rcx, rax
test rax, rax
je 0x14008f304
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rdx, str.SSIDEx
lea rcx, [rsp + 0x50]
call fcn.140003d00
test al, al
jne 0x14008ee7e
mov r8d, 6
lea rdx, str.SSIDEx
lea rcx, [rsp + 0x50]
call fcn.140003f80
nop
mov rcx, qword [rbp - 0x10]
add rcx, 0xffffffffffffffe8
call fcn.140006110
add rax, 0x18
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x68]
mov rdx, 0xffffffff80000002
lea rcx, [rbp]
call fcn.14006b340
nop
xor edx, edx
lea r8d, [rdx + 0x10]
mov rcx, qword [rbp]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstol]
mov esi, eax
cmp qword [rbp + 0x70], 0
jbe 0x14008ef74
mov rdx, qword [rbp + 0x60]
test rdx, rdx
je 0x14008ef74
mov rax, qword [rdx + 0x10]
mov rdx, qword [rdx]
test rax, rax
je 0x14008eed0
cmp word [rax], r15w
jne 0x14008eed0
cmp word [rax + 2], r14w
jne 0x14008eed0
cmp qword [rax + 0x20], 0
jbe 0x14008ef21
mov rdx, qword [rax + 0x10]
test rdx, rdx
je 0x14008ef21
mov rax, qword [rbp - 8]
mov rdi, qword [rdx + 0x10]
mov rdx, qword [rdx]
test rdi, rdi
je 0x14008ef1c
cmp qword [rdi], rax
jne 0x14008ef1c
cmp esi, dword [rdi + 8]
je 0x14008ef24
test rdx, rdx
jne 0x14008ef06
mov rdi, r12
mov edx, dword [rsp + 0x48]
movzx eax, dx
mov r15d, dword [rsp + 0x44]
movzx ecx, r15w
movzx edx, dx
movzx r9d, r15w
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], edx
mov r8d, 0x171
lea rdx, str.ClassFullPolicy::GetPolicy
lea rcx, str._s__d__04x_04x__04x_04x_pModelPolicy_x
call fcn.14004c3d0
test rdi, rdi
jne 0x14008f05a
lea rdi, [rbx - 0x18]
jmp 0x14008ef79
mov r15d, dword [rsp + 0x44]
movzx eax, word [rsp + 0x48]
movzx ecx, r15w
movzx edx, r14w
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], edx
mov r9, rbx
mov r8d, 0x84
lea rdx, str.ServiceCommandForDriver
lea rcx, str._s__d_SRV_CMD_GetAppPolicy_HardwardId_s_VEN_04X_SSID_04X_04X_SSIDEx_04X
call fcn.14004c3d0
nop
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008efd2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008eff1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008f010
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008f02f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov eax, r13d
lock xadd dword [rdi + 0x10], eax
sub eax, 1
jg 0x14008f048
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x14008f16b
jmp 0x14008e780
movsd xmm0, qword [rdi + 0xc]
movsd qword [rbp - 0x58], xmm0
mov eax, dword [rdi + 0x14]
mov dword [rbp - 0x50], eax
mov r8d, SafeArrayDestroy
cmp dword [rbp + 0x108], r8d
cmovb r8d, dword [rbp + 0x108]
lea rdx, [rbp - 0x58]
mov rcx, qword [rbp - 0x68]
call fcn.1400aaba0
mov rax, qword [rsp + 0x58]
mov dword [rax], SafeArrayDestroy
movzx eax, word [rsp + 0x48]
movzx ecx, r15w
movzx edx, r14w
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], edx
mov r9, rbx
mov r8d, 0x7e
lea rdx, str.ServiceCommandForDriver
lea rcx, str._s__d_SRV_CMD_GetAppPolicy_Found_HardwardId_s_VEN_04X_SSID_04X_04X_SSIDEx_04X
call fcn.14004c3d0
nop
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008f0f0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008f10f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008f12e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008f14d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008f16b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp - 0x28]
mov r14, qword [rsp + 0x58]
lea rcx, [rbp + 8]
call fcn.140015380
jmp 0x14008f198
mov r8d, 0x8a
lea rdx, str.ServiceCommandForDriver
lea rcx, str._s__d_SRV_CMD_GetAppPolicy_LoadPolicyDataFromConfFile_failed._Please_Check_Company_Sign
call fcn.14004c3d0
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
test eax, eax
js 0x14008f274
cmp eax, dword [rbx - 0xc]
jg 0x14008f274
mov dword [rbx - 0x10], eax
cdqe
mov word [rbx + rax*2], r12w
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], r13d
sub r13d, 1
jg 0x14008f1da
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x60]
call fcn.14000b9a0
jmp 0x14008e58a
mov dword [rbp - 0x18], r12d
mov r8d, r9d
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.1400aaba0
mov esi, 1
movsxd rdi, dword [rbp - 0x18]
cmp edi, 0x17
jne 0x14008f211
call fcn.14000ac00
mov dword [rax + 0xc], esi
cmp dword [0x1401271c8], r12d
jg 0x14008f238
mov r8d, 0x2c7
lea rdx, str.CDriverPropertyClient::GetPropDevicePath
lea rcx, str._s__d_RETURN_FALSE_ON_FALSE
call fcn.14004c3d0
mov rbx, r12
jmp 0x14008f242
mov rax, qword [0x1401271c0]
mov rbx, qword [rax]
call fcn.140012d30
mov rcx, rax
mov rdx, rbx
call fcn.140082ea0
test rax, rax
je 0x14008e58a
mov rcx, rdi
shl rcx, 5
mov rcx, qword [rcx + rax]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_SetEvent]
mov rax, rsi
jmp 0x14008e595
mov ecx, 0x80070057
call fcn.140004670
nop
mov ecx, 0x80004005
call fcn.140004670
nop
mov ecx, 0x80070057
call fcn.140004670
int3
mov ecx, 0x80070057
call fcn.140004670
int3
mov ecx, 0x80070057
call fcn.140004670
int3
mov ecx, 0x80070057
call fcn.140004670
int3
call fcn.140003ee0
int3
mov ecx, 0x80004005
call fcn.140004670
int3
mov ecx, 0x80070216
call fcn.140004670
int3
mov ecx, 0x80070057
call fcn.140004670
int3
mov ecx, 0x80070057
call fcn.140004670
int3
call fcn.140003ee0
int3
mov ecx, 0x80004005
call fcn.140004670
int3
mov ecx, 0x80070216
call fcn.140004670
nop
mov ecx, 0x80004005
call fcn.140004670
nop
mov ecx, 0x80004005
call fcn.140004670
nop
mov ecx, 0x80004005
call fcn.140004670
int3