Function at 0x14011f230
Capabilities:
Copy file
Create directory
Get common file path
Read .ini file

Disassembly:
mov word [rsp + 0x10], dx
mov qword [rsp + 8], rcx
push rbx
push rdi
mov eax, 0x39a8
call fcn.1401e9500
sub rsp, rax
mov qword [rsp + 0x3410], 0xfffffffffffffffe
mov rax, qword [0x1402bd5c0]
xor rax, rsp
mov qword [rsp + 0x3990], rax
xor eax, eax
mov word [rsp + 0x30], ax
lea rdi, [rsp + 0x32]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
mov edx, 0x400
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
movzx eax, word [rsp + 0x39c8]
cmp eax, 0x43
je 0x14011f2b3
movzx r8d, word [rsp + 0x39c8]
lea rdx, [0x14023a2b0]
lea rcx, [rsp + 0x30]
call fcn.140020af0
lea r8, str.Drivers_Converted
mov rdx, qword [rsp + 0x39c0]
lea rcx, [rsp + 0x3110]
call fcn.1400010b0
mov qword [rsp + 0x3418], rax
mov rcx, qword [rsp + 0x3418]
call fcn.140050200
mov rcx, rax
call fcn.14011d660
lea rcx, [rsp + 0x3110]
call fcn.140007060
lea rcx, [rsp + 0x830]
call fcn.1400777f0
nop
lea r8, [0x14023a2f0]
mov rdx, qword [rsp + 0x39c0]
lea rcx, [rsp + 0x3118]
call fcn.1400010b0
mov qword [rsp + 0x3420], rax
mov rax, qword [rsp + 0x3420]
mov qword [rsp + 0x3428], rax
mov rcx, qword [rsp + 0x3428]
call fcn.140050200
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x830]
call fcn.1400778f4
mov dword [rsp + 0x20], eax
lea rcx, [rsp + 0x3118]
call fcn.140007060
cmp dword [rsp + 0x20], 0
je 0x1401210b1
lea rcx, [rsp + 0x830]
call fcn.1400774fc
mov dword [rsp + 0x20], eax
lea rcx, [rsp + 0x830]
call fcn.14007779c
test eax, eax
je 0x14011f39b
jmp 0x14011f36c
lea rcx, [rsp + 0x830]
call fcn.14000d2b0
test eax, eax
jne 0x14011f3ae
jmp 0x14011f36c
lea rdx, [rsp + 0x3128]
lea rcx, [rsp + 0x830]
call fcn.140077e14
mov qword [rsp + 0x3430], rax
lea rdx, [0x14023a308]
mov rcx, qword [rsp + 0x3430]
call fcn.140006130
mov dword [rsp + 0x3120], eax
lea rcx, [rsp + 0x3128]
call fcn.140007060
cmp dword [rsp + 0x3120], 0
je 0x14011f402
jmp 0x14011f36c
lea rcx, [rsp + 0x1068]
call fcn.1400777f0
nop
xor eax, eax
mov word [rsp + 0x860], ax
lea rdi, [rsp + 0x862]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
lea rdx, [rsp + 0x3130]
lea rcx, [rsp + 0x830]
call fcn.140077d48
mov qword [rsp + 0x3438], rax
mov rax, qword [rsp + 0x3438]
mov qword [rsp + 0x3440], rax
lea r8, [0x14023a310]
mov rdx, qword [rsp + 0x3440]
lea rcx, [rsp + 0x3138]
call fcn.1400010b0
mov qword [rsp + 0x3448], rax
mov rax, qword [rsp + 0x3448]
mov qword [rsp + 0x3450], rax
mov rcx, qword [rsp + 0x3450]
call fcn.140050200
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1068]
call fcn.1400778f4
mov dword [rsp + 0x1060], eax
lea rcx, [rsp + 0x3138]
call fcn.140007060
nop
lea rcx, [rsp + 0x3130]
call fcn.140007060
cmp dword [rsp + 0x1060], 0
je 0x140121091
lea rcx, [rsp + 0x1068]
call fcn.1400774fc
mov dword [rsp + 0x1060], eax
lea rcx, [rsp + 0x1068]
call fcn.14007779c
test eax, eax
je 0x14011f503
jmp 0x14011f4ce
lea rcx, [rsp + 0x1068]
call fcn.14000d2b0
test eax, eax
jne 0x14011f516
jmp 0x14011f4ce
xor eax, eax
mov word [rsp + 0x1100], ax
lea rdi, [rsp + 0x1102]
xor eax, eax
mov ecx, 0x1ffe
rep stosb byte [rdi], al
lea rdx, [rsp + 0x3140]
lea rcx, [rsp + 0x1068]
call fcn.140077d48
mov qword [rsp + 0x3458], rax
mov rax, qword [rsp + 0x3458]
mov qword [rsp + 0x3460], rax
lea r8, [0x14023a318]
mov rdx, qword [rsp + 0x3460]
lea rcx, [rsp + 0x3148]
call fcn.1400010b0
mov qword [rsp + 0x3468], rax
mov rcx, qword [rsp + 0x3468]
call fcn.140050200
mov r8, rax
mov edx, 0x1000
lea rcx, [rsp + 0x1100]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionNamesW]
lea rcx, [rsp + 0x3148]
call fcn.140007060
nop
lea rcx, [rsp + 0x3140]
call fcn.140007060
movzx eax, word [rsp + 0x1100]
test eax, eax
jne 0x14011f5d1
jmp 0x14011f4ce
lea rdx, [rsp + 0x1100]
lea rcx, [rsp + 0x3150]
call fcn.140002050
mov qword [rsp + 0x3470], rax
mov rax, qword [rsp + 0x3470]
mov qword [rsp + 0x3478], rax
lea rcx, str.VEN_10ECDEV_8168
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
lea rcx, str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnumPCI_
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r9d, edi
mov r8d, eax
lea rdx, [rsp + 0x1098]
mov rcx, qword [rsp + 0x3478]
call fcn.1400021f0
nop
lea rcx, [rsp + 0x3150]
call fcn.140007060
lea rdx, [rsp + 0x1100]
lea rcx, [rsp + 0x3158]
call fcn.140002050
mov qword [rsp + 0x3480], rax
mov rax, qword [rsp + 0x3480]
mov qword [rsp + 0x3488], rax
lea rcx, [0x14023a3f0]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
lea rcx, str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnumPCIVEN_10ECDEV_8168SUBSYS_E0001458
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r9d, edi
mov r8d, eax
lea rdx, [rsp + 0x3100]
mov rcx, qword [rsp + 0x3488]
call fcn.1400021f0
nop
lea rcx, [rsp + 0x3158]
call fcn.140007060
lea rdx, [0x140239db4]
lea rcx, [rsp + 0x1098]
call fcn.140006080
lea rdx, [rsp + 0x3100]
lea rcx, [rsp + 0x1098]
call fcn.140006050
lea rcx, [rsp + 0x10f8]
call fcn.140002d10
nop
lea r8, [0x14023a358]
mov rdx, qword [rsp + 0x39c0]
lea rcx, [rsp + 0x3160]
call fcn.1400010b0
mov qword [rsp + 0x3490], rax
mov rax, qword [rsp + 0x3490]
mov qword [rsp + 0x3498], rax
mov rdx, qword [rsp + 0x3498]
lea rcx, [rsp + 0x10f8]
call fcn.140002ce0
nop
lea rcx, [rsp + 0x3160]
call fcn.140007060
lea rcx, [rsp + 0x10f8]
call fcn.140050200
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rcx, [rsp + 0x10c8]
call fcn.1400777f0
nop
lea rcx, [rsp + 0x10b8]
call fcn.140002d10
nop
lea rdx, [rsp + 0x3168]
lea rcx, [rsp + 0x1068]
call fcn.140077d48
mov qword [rsp + 0x34a0], rax
mov rax, qword [rsp + 0x34a0]
mov qword [rsp + 0x34a8], rax
lea r8, [0x14023a4b0]
mov rdx, qword [rsp + 0x34a8]
lea rcx, [rsp + 0x3170]
call fcn.1400010b0
mov qword [rsp + 0x34b0], rax
mov rax, qword [rsp + 0x34b0]
mov qword [rsp + 0x34b8], rax
mov rcx, qword [rsp + 0x34b8]
call fcn.140050200
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x10c8]
call fcn.1400778f4
mov dword [rsp + 0x10c0], eax
lea rcx, [rsp + 0x3170]
call fcn.140007060
nop
lea rcx, [rsp + 0x3168]
call fcn.140007060
cmp dword [rsp + 0x10c0], 0
je 0x14011f981
lea rcx, [rsp + 0x10c8]
call fcn.1400774fc
mov dword [rsp + 0x10c0], eax
lea rcx, [rsp + 0x10c8]
call fcn.14000d2b0
test eax, eax
je 0x14011f84f
jmp 0x14011f81a
lea rdx, [rsp + 0x3178]
lea rcx, [rsp + 0x10c8]
call fcn.140077e14
mov qword [rsp + 0x34c0], rax
mov rax, qword [rsp + 0x34c0]
mov qword [rsp + 0x34c8], rax
mov rdx, qword [rsp + 0x34c8]
lea rcx, [rsp + 0x10b8]
call fcn.140002ce0
nop
lea rcx, [rsp + 0x3178]
call fcn.140007060
lea r8, [0x140239dc4]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x3180]
call fcn.1400010b0
mov qword [rsp + 0x34d0], rax
mov rax, qword [rsp + 0x34d0]
mov qword [rsp + 0x34d8], rax
lea r8, [rsp + 0x10b8]
mov rdx, qword [rsp + 0x34d8]
lea rcx, [rsp + 0x3188]
call fcn.140006c50
mov qword [rsp + 0x34e0], rax
mov rax, qword [rsp + 0x34e0]
mov qword [rsp + 0x34e8], rax
lea rdx, [rsp + 0x3190]
lea rcx, [rsp + 0x10c8]
call fcn.140077d48
mov qword [rsp + 0x34f0], rax
mov rcx, qword [rsp + 0x34e8]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x34f0]
call fcn.140050200
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rsp + 0x3190]
call fcn.140007060
nop
lea rcx, [rsp + 0x3188]
call fcn.140007060
nop
lea rcx, [rsp + 0x3180]
call fcn.140007060
jmp 0x14011f981
lea rcx, [rsp + 0x10c8]
call fcn.140077428
lea rcx, [rsp + 0x10b8]
call fcn.140006ea0
movzx eax, al
test eax, eax
je 0x14011f9ec
lea rcx, [rsp + 0x10b8]
call fcn.140007060
nop
lea rcx, [rsp + 0x10c8]
call fcn.14007784c
nop
lea rcx, [rsp + 0x10f8]
call fcn.140007060
nop
lea rcx, [rsp + 0x3100]
call fcn.140007060
nop
lea rcx, [rsp + 0x1098]
call fcn.140007060
jmp 0x14011f4ce
lea r8, [0x140239dfc]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x3198]
call fcn.1400010b0
mov qword [rsp + 0x34f8], rax
mov rax, qword [rsp + 0x34f8]
mov qword [rsp + 0x3500], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3500]
lea rcx, [rsp + 0x31a0]
call fcn.140006c50
mov qword [rsp + 0x3508], rax
mov rax, qword [rsp + 0x3508]
mov qword [rsp + 0x3510], rax
lea r8, [0x14023a4d8]
mov rdx, qword [rsp + 0x3510]
lea rcx, [rsp + 0x31a8]
call fcn.1400010b0
mov qword [rsp + 0x3518], rax
mov rax, qword [rsp + 0x3518]
mov qword [rsp + 0x3520], rax
lea rdx, [rsp + 0x31b0]
lea rcx, [rsp + 0x1068]
call fcn.140077d48
mov qword [rsp + 0x3528], rax
mov rax, qword [rsp + 0x3528]
mov qword [rsp + 0x3530], rax
lea r8, str.pci.reg
mov rdx, qword [rsp + 0x3530]
lea rcx, [rsp + 0x31b8]
call fcn.1400010b0
mov qword [rsp + 0x3538], rax
mov rcx, qword [rsp + 0x3520]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x3538]
call fcn.140050200
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rsp + 0x31b8]
call fcn.140007060
nop
lea rcx, [rsp + 0x31b0]
call fcn.140007060
nop
lea rcx, [rsp + 0x31a8]
call fcn.140007060
nop
lea rcx, [rsp + 0x31a0]
call fcn.140007060
nop
lea rcx, [rsp + 0x3198]
call fcn.140007060
lea r8, [0x140239e8c]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x31c0]
call fcn.1400010b0
mov qword [rsp + 0x3540], rax
mov rax, qword [rsp + 0x3540]
mov qword [rsp + 0x3548], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3548]
lea rcx, [rsp + 0x31c8]
call fcn.140006c50
mov qword [rsp + 0x3550], rax
mov rax, qword [rsp + 0x3550]
mov qword [rsp + 0x3558], rax
lea r8, [0x14023a508]
mov rdx, qword [rsp + 0x3558]
lea rcx, [rsp + 0x31d0]
call fcn.1400010b0
mov qword [rsp + 0x3560], rax
mov rax, qword [rsp + 0x3560]
mov qword [rsp + 0x3568], rax
lea rdx, [rsp + 0x31d8]
lea rcx, [rsp + 0x1068]
call fcn.140077d48
mov qword [rsp + 0x3570], rax
mov rax, qword [rsp + 0x3570]
mov qword [rsp + 0x3578], rax
lea r8, [0x14023a520]
mov rdx, qword [rsp + 0x3578]
lea rcx, [rsp + 0x31e0]
call fcn.1400010b0
mov qword [rsp + 0x3580], rax
mov rcx, qword [rsp + 0x3568]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x3580]
call fcn.140050200
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rsp + 0x31e0]
call fcn.140007060
nop
lea rcx, [rsp + 0x31d8]
call fcn.140007060
nop
lea rcx, [rsp + 0x31d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x31c8]
call fcn.140007060
nop
lea rcx, [rsp + 0x31c0]
call fcn.140007060
lea r8, [0x140239f5c]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x31e8]
call fcn.1400010b0
mov qword [rsp + 0x3588], rax
mov rax, qword [rsp + 0x3588]
mov qword [rsp + 0x3590], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3590]
lea rcx, [rsp + 0x31f0]
call fcn.140006c50
mov qword [rsp + 0x3598], rax
mov rax, qword [rsp + 0x3598]
mov qword [rsp + 0x35a0], rax
lea r8, [0x14023a538]
mov rdx, qword [rsp + 0x35a0]
lea rcx, [rsp + 0x31f8]
call fcn.1400010b0
mov qword [rsp + 0x35a8], rax
mov rax, qword [rsp + 0x35a8]
mov qword [rsp + 0x35b0], rax
lea rdx, [rsp + 0x3200]
lea rcx, [rsp + 0x1068]
call fcn.140077d48
mov qword [rsp + 0x35b8], rax
mov rax, qword [rsp + 0x35b8]
mov qword [rsp + 0x35c0], rax
lea r8, [0x14023a558]
mov rdx, qword [rsp + 0x35c0]
lea rcx, [rsp + 0x3208]
call fcn.1400010b0
mov qword [rsp + 0x35c8], rax
mov rcx, qword [rsp + 0x35b0]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x35c8]
call fcn.140050200
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rsp + 0x3208]
call fcn.140007060
nop
lea rcx, [rsp + 0x3200]
call fcn.140007060
nop
lea rcx, [rsp + 0x31f8]
call fcn.140007060
nop
lea rcx, [rsp + 0x31f0]
call fcn.140007060
nop
lea rcx, [rsp + 0x31e8]
call fcn.140007060
lea r8, [0x140239f6c]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x3210]
call fcn.1400010b0
mov qword [rsp + 0x35d0], rax
mov rax, qword [rsp + 0x35d0]
mov qword [rsp + 0x35d8], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x35d8]
lea rcx, [rsp + 0x3218]
call fcn.140006c50
mov qword [rsp + 0x35e0], rax
mov rax, qword [rsp + 0x35e0]
mov qword [rsp + 0x35e8], rax
lea r8, [0x14023a578]
mov rdx, qword [rsp + 0x35e8]
lea rcx, [rsp + 0x3220]
call fcn.1400010b0
mov qword [rsp + 0x35f0], rax
mov rax, qword [rsp + 0x35f0]
mov qword [rsp + 0x35f8], rax
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x3228]
call fcn.14011ea80
mov qword [rsp + 0x3600], rax
mov rax, qword [rsp + 0x3600]
mov qword [rsp + 0x3608], rax
mov r8, qword [rsp + 0x3608]
lea rdx, [0x14023a5d0]
lea rcx, [rsp + 0x3230]
call fcn.140006d10
mov qword [rsp + 0x3610], rax
mov rax, qword [rsp + 0x3610]
mov qword [rsp + 0x3618], rax
lea r8, [0x14023a5a8]
mov rdx, qword [rsp + 0x3618]
lea rcx, [rsp + 0x3238]
call fcn.1400010b0
mov qword [rsp + 0x3620], rax
mov rax, qword [rsp + 0x3620]
mov qword [rsp + 0x3628], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3628]
lea rcx, [rsp + 0x3240]
call fcn.140006c50
mov qword [rsp + 0x3630], rax
mov rax, qword [rsp + 0x3630]
mov qword [rsp + 0x3638], rax
lea r8, [0x14023a590]
mov rdx, qword [rsp + 0x3638]
lea rcx, [rsp + 0x3248]
call fcn.1400010b0
mov qword [rsp + 0x3640], rax
mov rax, qword [rsp + 0x3640]
mov qword [rsp + 0x3648], rax
mov rcx, qword [rsp + 0x35f8]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x3648]
call fcn.140050200
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x1100]
call fcn.14011eea0
nop
lea rcx, [rsp + 0x3248]
call fcn.140007060
nop
lea rcx, [rsp + 0x3240]
call fcn.140007060
nop
lea rcx, [rsp + 0x3238]
call fcn.140007060
nop
lea rcx, [rsp + 0x3230]
call fcn.140007060
nop
lea rcx, [rsp + 0x3228]
call fcn.140007060
nop
lea rcx, [rsp + 0x3220]
call fcn.140007060
nop
lea rcx, [rsp + 0x3218]
call fcn.140007060
nop
lea rcx, [rsp + 0x3210]
call fcn.140007060
lea r8, [0x140239f9c]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x3250]
call fcn.1400010b0
mov qword [rsp + 0x3650], rax
mov rax, qword [rsp + 0x3650]
mov qword [rsp + 0x3658], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3658]
lea rcx, [rsp + 0x3258]
call fcn.140006c50
mov qword [rsp + 0x3660], rax
mov rax, qword [rsp + 0x3660]
mov qword [rsp + 0x3668], rax
lea r8, [0x14023a5f8]
mov rdx, qword [rsp + 0x3668]
lea rcx, [rsp + 0x3260]
call fcn.1400010b0
mov qword [rsp + 0x3670], rax
mov rax, qword [rsp + 0x3670]
mov qword [rsp + 0x3678], rax
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x3268]
call fcn.14011ea80
mov qword [rsp + 0x3680], rax
mov rax, qword [rsp + 0x3680]
mov qword [rsp + 0x3688], rax
mov r8, qword [rsp + 0x3688]
lea rdx, [0x14023a6c8]
lea rcx, [rsp + 0x3270]
call fcn.140006d10
mov qword [rsp + 0x3690], rax
mov rax, qword [rsp + 0x3690]
mov qword [rsp + 0x3698], rax
lea r8, [0x14023a6a0]
mov rdx, qword [rsp + 0x3698]
lea rcx, [rsp + 0x3278]
call fcn.1400010b0
mov qword [rsp + 0x36a0], rax
mov rax, qword [rsp + 0x36a0]
mov qword [rsp + 0x36a8], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x36a8]
lea rcx, [rsp + 0x3280]
call fcn.140006c50
mov qword [rsp + 0x36b0], rax
mov rax, qword [rsp + 0x36b0]
mov qword [rsp + 0x36b8], rax
lea r8, [0x14023a688]
mov rdx, qword [rsp + 0x36b8]
lea rcx, [rsp + 0x3288]
call fcn.1400010b0
mov qword [rsp + 0x36c0], rax
mov rcx, qword [rsp + 0x3678]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x36c0]
call fcn.140050200
mov r9, rdi
lea r8, str._4D36E972_E325_11CE_BFC1_08002BE103182000_
lea rdx, str._Driver_
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x3288]
call fcn.140007060
nop
lea rcx, [rsp + 0x3280]
call fcn.140007060
nop
lea rcx, [rsp + 0x3278]
call fcn.140007060
nop
lea rcx, [rsp + 0x3270]
call fcn.140007060
nop
lea rcx, [rsp + 0x3268]
call fcn.140007060
nop
lea rcx, [rsp + 0x3260]
call fcn.140007060
nop
lea rcx, [rsp + 0x3258]
call fcn.140007060
nop
lea rcx, [rsp + 0x3250]
call fcn.140007060
lea r8, [0x140239fb4]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x3290]
call fcn.1400010b0
mov qword [rsp + 0x36c8], rax
mov rax, qword [rsp + 0x36c8]
mov qword [rsp + 0x36d0], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x36d0]
lea rcx, [rsp + 0x3298]
call fcn.140006c50
mov qword [rsp + 0x36d8], rax
mov rax, qword [rsp + 0x36d8]
mov qword [rsp + 0x36e0], rax
lea r8, str._pci.reg
mov rdx, qword [rsp + 0x36e0]
lea rcx, [rsp + 0x32a0]
call fcn.1400010b0
mov qword [rsp + 0x36e8], rax
mov rax, qword [rsp + 0x36e8]
mov qword [rsp + 0x36f0], rax
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x32a8]
call fcn.14011ea80
mov qword [rsp + 0x36f8], rax
mov rax, qword [rsp + 0x36f8]
mov qword [rsp + 0x3700], rax
mov r8, qword [rsp + 0x3700]
lea rdx, [0x14023a768]
lea rcx, [rsp + 0x32b0]
call fcn.140006d10
mov qword [rsp + 0x3708], rax
mov rax, qword [rsp + 0x3708]
mov qword [rsp + 0x3710], rax
lea r8, [0x14023a740]
mov rdx, qword [rsp + 0x3710]
lea rcx, [rsp + 0x32b8]
call fcn.1400010b0
mov qword [rsp + 0x3718], rax
mov rax, qword [rsp + 0x3718]
mov qword [rsp + 0x3720], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3720]
lea rcx, [rsp + 0x32c0]
call fcn.140006c50
mov qword [rsp + 0x3728], rax
mov rcx, qword [rsp + 0x36f0]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x3728]
call fcn.140050200
mov r9, rdi
lea r8, str.dword:00000001
lea rdx, str._ForcePnP_
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x32c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x32b8]
call fcn.140007060
nop
lea rcx, [rsp + 0x32b0]
call fcn.140007060
nop
lea rcx, [rsp + 0x32a8]
call fcn.140007060
nop
lea rcx, [rsp + 0x32a0]
call fcn.140007060
nop
lea rcx, [rsp + 0x3298]
call fcn.140007060
nop
lea rcx, [rsp + 0x3290]
call fcn.140007060
lea rdx, [rsp + 0x32c8]
lea rcx, [rsp + 0x1068]
call fcn.140077d48
mov qword [rsp + 0x3730], rax
mov rax, qword [rsp + 0x3730]
mov qword [rsp + 0x3738], rax
lea r8, str.class.reg
mov rdx, qword [rsp + 0x3738]
lea rcx, [rsp + 0x32d0]
call fcn.1400010b0
mov qword [rsp + 0x3740], rax
mov rcx, qword [rsp + 0x3740]
call fcn.140050200
mov r8, rax
mov edx, 0x1000
lea rcx, [rsp + 0x1100]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionNamesW]
lea rcx, [rsp + 0x32d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x32c8]
call fcn.140007060
lea r8, [0x140239fcc]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x32d8]
call fcn.1400010b0
mov qword [rsp + 0x3748], rax
mov rax, qword [rsp + 0x3748]
mov qword [rsp + 0x3750], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3750]
lea rcx, [rsp + 0x32e0]
call fcn.140006c50
mov qword [rsp + 0x3758], rax
mov rax, qword [rsp + 0x3758]
mov qword [rsp + 0x3760], rax
lea r8, str._class.reg
mov rdx, qword [rsp + 0x3760]
lea rcx, [rsp + 0x32e8]
call fcn.1400010b0
mov qword [rsp + 0x3768], rax
mov rax, qword [rsp + 0x3768]
mov qword [rsp + 0x3770], rax
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x32f0]
call fcn.14011ea80
mov qword [rsp + 0x3778], rax
mov rax, qword [rsp + 0x3778]
mov qword [rsp + 0x3780], rax
mov r8, qword [rsp + 0x3780]
lea rdx, [0x14023a7f8]
lea rcx, [rsp + 0x32f8]
call fcn.140006d10
mov qword [rsp + 0x3788], rax
mov rax, qword [rsp + 0x3788]
mov qword [rsp + 0x3790], rax
lea r8, [0x14023a7d0]
mov rdx, qword [rsp + 0x3790]
lea rcx, [rsp + 0x3300]
call fcn.1400010b0
mov qword [rsp + 0x3798], rax
mov rax, qword [rsp + 0x3798]
mov qword [rsp + 0x37a0], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x37a0]
lea rcx, [rsp + 0x3308]
call fcn.140006c50
mov qword [rsp + 0x37a8], rax
mov rax, qword [rsp + 0x37a8]
mov qword [rsp + 0x37b0], rax
lea r8, [0x14023a7c0]
mov rdx, qword [rsp + 0x37b0]
lea rcx, [rsp + 0x3310]
call fcn.1400010b0
mov qword [rsp + 0x37b8], rax
mov rax, qword [rsp + 0x37b8]
mov qword [rsp + 0x37c0], rax
mov rcx, qword [rsp + 0x3770]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x37c0]
call fcn.140050200
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x1100]
call fcn.14011eea0
nop
lea rcx, [rsp + 0x3310]
call fcn.140007060
nop
lea rcx, [rsp + 0x3308]
call fcn.140007060
nop
lea rcx, [rsp + 0x3300]
call fcn.140007060
nop
lea rcx, [rsp + 0x32f8]
call fcn.140007060
nop
lea rcx, [rsp + 0x32f0]
call fcn.140007060
nop
lea rcx, [rsp + 0x32e8]
call fcn.140007060
nop
lea rcx, [rsp + 0x32e0]
call fcn.140007060
nop
lea rcx, [rsp + 0x32d8]
call fcn.140007060
lea rdx, [rsp + 0x3318]
lea rcx, [rsp + 0x1068]
call fcn.140077d48
mov qword [rsp + 0x37c8], rax
mov rax, qword [rsp + 0x37c8]
mov qword [rsp + 0x37d0], rax
lea r8, [0x14023a820]
mov rdx, qword [rsp + 0x37d0]
lea rcx, [rsp + 0x3320]
call fcn.1400010b0
mov qword [rsp + 0x37d8], rax
mov rcx, qword [rsp + 0x37d8]
call fcn.140050200
mov r8, rax
mov edx, 0x1000
lea rcx, [rsp + 0x1100]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionNamesW]
lea rcx, [rsp + 0x3320]
call fcn.140007060
nop
lea rcx, [rsp + 0x3318]
call fcn.140007060
lea r8, [0x140239ff4]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x3328]
call fcn.1400010b0
mov qword [rsp + 0x37e0], rax
mov rax, qword [rsp + 0x37e0]
mov qword [rsp + 0x37e8], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x37e8]
lea rcx, [rsp + 0x3330]
call fcn.140006c50
mov qword [rsp + 0x37f0], rax
mov rax, qword [rsp + 0x37f0]
mov qword [rsp + 0x37f8], rax
lea r8, [0x14023a840]
mov rdx, qword [rsp + 0x37f8]
lea rcx, [rsp + 0x3338]
call fcn.1400010b0
mov qword [rsp + 0x3800], rax
mov rax, qword [rsp + 0x3800]
mov qword [rsp + 0x3808], rax
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x3340]
call fcn.14011ea80
mov qword [rsp + 0x3810], rax
mov rax, qword [rsp + 0x3810]
mov qword [rsp + 0x3818], rax
mov r8, qword [rsp + 0x3818]
lea rdx, [0x14023a8a0]
lea rcx, [rsp + 0x3348]
call fcn.140006d10
mov qword [rsp + 0x3820], rax
mov rax, qword [rsp + 0x3820]
mov qword [rsp + 0x3828], rax
lea r8, [0x14023a878]
mov rdx, qword [rsp + 0x3828]
lea rcx, [rsp + 0x3350]
call fcn.1400010b0
mov qword [rsp + 0x3830], rax
mov rax, qword [rsp + 0x3830]
mov qword [rsp + 0x3838], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3838]
lea rcx, [rsp + 0x3358]
call fcn.140006c50
mov qword [rsp + 0x3840], rax
mov rax, qword [rsp + 0x3840]
mov qword [rsp + 0x3848], rax
lea r8, [0x14023a860]
mov rdx, qword [rsp + 0x3848]
lea rcx, [rsp + 0x3360]
call fcn.1400010b0
mov qword [rsp + 0x3850], rax
mov rax, qword [rsp + 0x3850]
mov qword [rsp + 0x3858], rax
mov rcx, qword [rsp + 0x3808]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x3858]
call fcn.140050200
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x1100]
call fcn.14011eea0
nop
lea rcx, [rsp + 0x3360]
call fcn.140007060
nop
lea rcx, [rsp + 0x3358]
call fcn.140007060
nop
lea rcx, [rsp + 0x3350]
call fcn.140007060
nop
lea rcx, [rsp + 0x3348]
call fcn.140007060
nop
lea rcx, [rsp + 0x3340]
call fcn.140007060
nop
lea rcx, [rsp + 0x3338]
call fcn.140007060
nop
lea rcx, [rsp + 0x3330]
call fcn.140007060
nop
lea rcx, [rsp + 0x3328]
call fcn.140007060
lea r8, [0x14023a01c]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x3368]
call fcn.1400010b0
mov qword [rsp + 0x3860], rax
mov rax, qword [rsp + 0x3860]
mov qword [rsp + 0x3868], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3868]
lea rcx, [rsp + 0x3370]
call fcn.140006c50
mov qword [rsp + 0x3870], rax
mov rax, qword [rsp + 0x3870]
mov qword [rsp + 0x3878], rax
lea r8, [0x14023a8c8]
mov rdx, qword [rsp + 0x3878]
lea rcx, [rsp + 0x3378]
call fcn.1400010b0
mov qword [rsp + 0x3880], rax
mov rax, qword [rsp + 0x3880]
mov qword [rsp + 0x3888], rax
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x3380]
call fcn.14011ea80
mov qword [rsp + 0x3890], rax
mov rax, qword [rsp + 0x3890]
mov qword [rsp + 0x3898], rax
mov r8, qword [rsp + 0x3898]
lea rdx, [0x14023a958]
lea rcx, [rsp + 0x3388]
call fcn.140006d10
mov qword [rsp + 0x38a0], rax
mov rax, qword [rsp + 0x38a0]
mov qword [rsp + 0x38a8], rax
lea r8, [0x14023a930]
mov rdx, qword [rsp + 0x38a8]
lea rcx, [rsp + 0x3390]
call fcn.1400010b0
mov qword [rsp + 0x38b0], rax
mov rax, qword [rsp + 0x38b0]
mov qword [rsp + 0x38b8], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x38b8]
lea rcx, [rsp + 0x3398]
call fcn.140006c50
mov qword [rsp + 0x38c0], rax
mov rax, qword [rsp + 0x38c0]
mov qword [rsp + 0x38c8], rax
lea r8, [0x14023a918]
mov rdx, qword [rsp + 0x38c8]
lea rcx, [rsp + 0x33a0]
call fcn.1400010b0
mov qword [rsp + 0x38d0], rax
mov rcx, qword [rsp + 0x3888]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x38d0]
call fcn.140050200
mov r9, rdi
lea r8, str.dword:00000000
lea rdx, str._Start_
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x33a0]
call fcn.140007060
nop
lea rcx, [rsp + 0x3398]
call fcn.140007060
nop
lea rcx, [rsp + 0x3390]
call fcn.140007060
nop
lea rcx, [rsp + 0x3388]
call fcn.140007060
nop
lea rcx, [rsp + 0x3380]
call fcn.140007060
nop
lea rcx, [rsp + 0x3378]
call fcn.140007060
nop
lea rcx, [rsp + 0x3370]
call fcn.140007060
nop
lea rcx, [rsp + 0x3368]
call fcn.140007060
lea r8, [0x14023a1dc]
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x33a8]
call fcn.1400010b0
mov qword [rsp + 0x38d8], rax
mov rax, qword [rsp + 0x38d8]
mov qword [rsp + 0x38e0], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x38e0]
lea rcx, [rsp + 0x33b0]
call fcn.140006c50
mov qword [rsp + 0x38e8], rax
mov rax, qword [rsp + 0x38e8]
mov qword [rsp + 0x38f0], rax
lea r8, [0x14023a980]
mov rdx, qword [rsp + 0x38f0]
lea rcx, [rsp + 0x33b8]
call fcn.1400010b0
mov qword [rsp + 0x38f8], rax
mov rax, qword [rsp + 0x38f8]
mov qword [rsp + 0x3900], rax
lea r8, [rsp + 0x10b8]
lea rdx, [0x14023a9a0]
lea rcx, [rsp + 0x33c0]
call fcn.140006d10
mov qword [rsp + 0x3908], rax
mov rax, qword [rsp + 0x3908]
mov qword [rsp + 0x3910], rax
lea r8, [0x14023a354]
mov rdx, qword [rsp + 0x3910]
lea rcx, [rsp + 0x33c8]
call fcn.1400010b0
mov qword [rsp + 0x3918], rax
mov rax, qword [rsp + 0x3918]
mov qword [rsp + 0x3920], rax
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x33d0]
call fcn.14011ea80
mov qword [rsp + 0x3928], rax
mov rax, qword [rsp + 0x3928]
mov qword [rsp + 0x3930], rax
mov r8, qword [rsp + 0x3930]
lea rdx, [0x14023aa28]
lea rcx, [rsp + 0x33d8]
call fcn.140006d10
mov qword [rsp + 0x3938], rax
mov rax, qword [rsp + 0x3938]
mov qword [rsp + 0x3940], rax
lea r8, [0x14023aa00]
mov rdx, qword [rsp + 0x3940]
lea rcx, [rsp + 0x33e0]
call fcn.1400010b0
mov qword [rsp + 0x3948], rax
mov rax, qword [rsp + 0x3948]
mov qword [rsp + 0x3950], rax
lea r8, [rsp + 0x1098]
mov rdx, qword [rsp + 0x3950]
lea rcx, [rsp + 0x33e8]
call fcn.140006c50
mov qword [rsp + 0x3958], rax
mov rax, qword [rsp + 0x3958]
mov qword [rsp + 0x3960], rax
lea r8, [0x14023a9e8]
mov rdx, qword [rsp + 0x3960]
lea rcx, [rsp + 0x33f0]
call fcn.1400010b0
mov qword [rsp + 0x3968], rax
mov rcx, qword [rsp + 0x3900]
call fcn.140050200
mov rbx, rax
mov rcx, qword [rsp + 0x3920]
call fcn.140050200
mov rdi, rax
mov rcx, qword [rsp + 0x3968]
call fcn.140050200
mov r9, rbx
mov r8, rdi
lea rdx, str._ImagePath_
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x33f0]
call fcn.140007060
nop
lea rcx, [rsp + 0x33e8]
call fcn.140007060
nop
lea rcx, [rsp + 0x33e0]
call fcn.140007060
nop
lea rcx, [rsp + 0x33d8]
call fcn.140007060
nop
lea rcx, [rsp + 0x33d0]
call fcn.140007060
nop
lea rcx, [rsp + 0x33c8]
call fcn.140007060
nop
lea rcx, [rsp + 0x33c0]
call fcn.140007060
nop
lea rcx, [rsp + 0x33b8]
call fcn.140007060
nop
lea rcx, [rsp + 0x33b0]
call fcn.140007060
nop
lea rcx, [rsp + 0x33a8]
call fcn.140007060
lea rdx, [0x14023aa50]
lea rcx, [rsp + 0x10b0]
call fcn.140002050
nop
lea rcx, [rsp + 0x10a0]
call fcn.1400054b0
nop
movzx edx, word [rsp + 0x39c8]
lea rcx, [rsp + 0x3400]
call fcn.14011ea80
mov qword [rsp + 0x3970], rax
mov rax, qword [rsp + 0x3970]
mov qword [rsp + 0x3978], rax
lea r8, [0x14023aa70]
mov rdx, qword [rsp + 0x3978]
lea rcx, [rsp + 0x3408]
call fcn.1400010b0
mov qword [rsp + 0x3980], rax
mov rcx, qword [rsp + 0x3980]
call fcn.140050200
mov r9d, 0x20019
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x10a0]
call fcn.140005670
test eax, eax
jne 0x140120f99
mov dword [rsp + 0x3988], 1
jmp 0x140120fa4
mov dword [rsp + 0x3988], 0
movzx eax, byte [rsp + 0x3988]
mov byte [rsp + 0x33f8], al
lea rcx, [rsp + 0x3408]
call fcn.140007060
nop
lea rcx, [rsp + 0x3400]
call fcn.140007060
movzx edx, byte [rsp + 0x33f8]
test edx, edx
je 0x14012102b
mov dword [rsp + 0x3108], 1
lea r8, [rsp + 0x3108]
lea rdx, [0x14023aa90]
lea rcx, [rsp + 0x10a0]
call fcn.140005700
mov r8d, dword [rsp + 0x3108]
lea rdx, [0x14023aaa0]
lea rcx, [rsp + 0x10b0]
call fcn.140002ba0
lea rcx, [rsp + 0x10a0]
call fcn.140005540
nop
lea rcx, [rsp + 0x10a0]
call fcn.1400054e0
nop
lea rcx, [rsp + 0x10b0]
call fcn.140007060
nop
lea rcx, [rsp + 0x10b8]
call fcn.140007060
nop
lea rcx, [rsp + 0x10c8]
call fcn.14007784c
nop
lea rcx, [rsp + 0x10f8]
call fcn.140007060
nop
lea rcx, [rsp + 0x3100]
call fcn.140007060
nop
lea rcx, [rsp + 0x1098]
call fcn.140007060
jmp 0x14011f4ce
lea rcx, [rsp + 0x1068]
call fcn.140077428
nop
lea rcx, [rsp + 0x1068]
call fcn.14007784c
jmp 0x14011f36c
lea rcx, [rsp + 0x830]
call fcn.140077428
nop
lea rcx, [rsp + 0x830]
call fcn.14007784c
nop
mov rcx, qword [rsp + 0x39c0]
call fcn.140007060
mov rcx, qword [rsp + 0x3990]
xor rcx, rsp
call fcn.1400a9820
add rsp, 0x39a8
pop rdi
pop rbx
ret