Function at 0x140005a30
Capabilities:
Copy file
Read .ini file

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x128]
sub rsp, 0x228
mov qword [rbp - 0x18], 0xfffffffffffffffe
mov r15, rdx
mov r13, rcx
call fcn.140014264
mov rcx, rax
xor edi, edi
mov r8d, edi
test rax, rax
setne r8b
test r8d, r8d
jne 0x140005a87
mov ecx, 0x80004005
call fcn.140001970
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
lea r12, [0x1401e2848]
mov r14, r12
shr r14, 0x10
mov qword [rbp + 0x188], r14
test r14, r14
jne 0x140005ad2
movzx ebx, r12w
mov ecx, ebx
call fcn.140014074
test rax, rax
je 0x140005ae3
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140001640
jmp 0x140005ae3
xor r8d, r8d
mov rdx, r12
lea rcx, [rsp + 0x40]
call fcn.140001990
nop
call fcn.140014264
mov r11, rax
mov ecx, edi
test rax, rax
setne cl
test ecx, ecx
jne 0x140005b02
mov ecx, 0x80004005
call fcn.140001970
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rdx, str.08_31_2004_5.2.0.0
test rdx, 0xffffffffffff0000
jne 0x140005b45
movzx ebx, dx
mov ecx, ebx
call fcn.140014074
test rax, rax
je 0x140005b56
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140001640
jmp 0x140005b56
mov r8d, 0x12
lea rcx, [rsp + 0x68]
call fcn.140001990
nop
call fcn.140014264
mov r11, rax
mov ecx, edi
test rax, rax
setne cl
test ecx, ecx
jne 0x140005b75
mov ecx, 0x80004005
call fcn.140001970
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, str.02_22_2006_5.2.5326.4762
test rdx, 0xffffffffffff0000
jne 0x140005bb8
movzx ebx, dx
mov ecx, ebx
call fcn.140014074
test rax, rax
je 0x140005bc9
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140001640
jmp 0x140005bc9
mov r8d, 0x18
lea rcx, [rsp + 0x70]
call fcn.140001990
nop
call fcn.140014264
mov r11, rax
mov ecx, edi
test rax, rax
setne cl
test ecx, ecx
jne 0x140005be8
mov ecx, 0x80004005
call fcn.140001970
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, str.06_21_2006_6.1.7600.16385
test rdx, 0xffffffffffff0000
jne 0x140005c29
movzx ebx, dx
mov ecx, ebx
call fcn.140014074
test rax, rax
je 0x140005c39
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.140001640
jmp 0x140005c39
mov r8d, 0x19
lea rcx, [rbp - 0x78]
call fcn.140001990
nop
call fcn.140014264
mov r11, rax
mov ecx, edi
test rax, rax
setne cl
test ecx, ecx
jne 0x140005c58
mov ecx, 0x80004005
call fcn.140001970
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0x18]
lea rsi, [rax + 0x18]
mov qword [rsp + 0x60], rsi
lea rdx, str.EEC5AD98_8080_425F_922A_DABF3DE3F69A
test rdx, 0xffffffffffff0000
jne 0x140005c9b
movzx ebx, dx
mov ecx, ebx
call fcn.140014074
test rax, rax
je 0x140005cb0
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140001640
jmp 0x140005cab
mov r8d, 0x26
lea rcx, [rsp + 0x60]
call fcn.140001990
mov rsi, qword [rsp + 0x60]
mov rcx, qword [r15 + 8]
sub rcx, 0x18
call fcn.1400014e0
lea rdi, [rax + 0x18]
mov qword [rbp - 0x68], rdi
movsxd rbx, dword [rdi - 0x10]
test ebx, ebx
jns 0x140005cd8
mov ecx, 0x80070057
call fcn.140001970
int3
mov ecx, 1
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, ebx
or eax, ecx
jge 0x140005cf8
mov edx, ebx
lea rcx, [rbp - 0x68]
call fcn.140001910
mov rdi, qword [rbp - 0x68]
lea eax, [rbx + 1]
movsxd rdx, eax
mov rcx, rdi
call fcn.140166d74
test eax, eax
je 0x140005d30
cmp eax, 0xc
je 0x140005d2a
cmp eax, 0x16
je 0x140005d24
cmp eax, 0x22
je 0x140005d24
cmp eax, 0x50
je 0x140005d30
call fcn.140013e90
int3
call fcn.140013e90
int3
call fcn.140013e48
int3
cmp ebx, dword [rdi - 0xc]
jg 0x14000730a
mov dword [rdi - 0x10], ebx
mov byte [rbx + rdi], 0
call fcn.140014264
mov r11, rax
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
jne 0x140005d5f
mov ecx, 0x80004005
call fcn.140001970
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x48], rbx
test r14, r14
jne 0x140005d99
movzx r12d, r12w
mov ecx, r12d
call fcn.140014074
test rax, rax
je 0x140005dae
mov r8d, r12d
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001640
jmp 0x140005da9
xor r8d, r8d
mov rdx, r12
lea rcx, [rsp + 0x48]
call fcn.140001990
mov rbx, qword [rsp + 0x48]
xor eax, eax
test rsi, rsi
setne al
test eax, eax
jne 0x140005dc5
mov ecx, 0x80004005
call fcn.140001970
int3
mov rdx, rsi
mov rcx, rdi
call fcn.1401663c0
test eax, eax
sete al
or r12d, 0xffffffff
test al, al
je 0x140006677
lea rcx, [rbp - 0x58]
call fcn.14000bc30
nop
mov r13, qword [rax]
lea rcx, [r13 - 0x18]
lea rdi, [rbx - 0x18]
cmp rcx, rdi
je 0x140005f3c
cmp dword [rdi + 0x10], 0
jl 0x140005e39
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140005e39
call fcn.1400014e0
mov rbx, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x140005e30
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
jmp 0x140005f37
movsxd rsi, dword [r13 - 0x10]
test esi, esi
jne 0x140005ea0
mov rsi, qword [rdi]
cmp dword [rdi + 8], 0
je 0x140005f3c
cmp dword [rdi + 0x10], 0
jge 0x140005e74
cmp dword [rbx - 0xc], 0
jge 0x140005e65
mov ecx, 0x80070057
call fcn.140001970
int3
mov dword [rbx - 0x10], 0
mov byte [rbx], 0
jmp 0x140005f3c
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
dec eax
test eax, eax
jg 0x140005e8e
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x18]
add rax, 0x18
jmp 0x140005f37
test r13, r13
jne 0x140005eb0
mov ecx, 0x80070057
call fcn.140001970
int3
mov r15d, dword [rbx - 0x10]
mov r14, r13
sub r14, rbx
test esi, esi
jns 0x140005ec9
mov ecx, 0x80070057
call fcn.140001970
int3
mov ecx, 1
sub ecx, dword [rdi + 0x10]
mov eax, dword [rdi + 0xc]
sub eax, esi
or eax, ecx
jge 0x140005eeb
mov edx, esi
lea rcx, [rsp + 0x48]
call fcn.140001910
mov rbx, qword [rsp + 0x48]
mov rdi, rsi
movsxd rdx, dword [rbx - 0xc]
mov r9, rsi
mov rcx, rbx
cmp r14, r15
ja 0x140005f08
lea r8, [r14 + rbx]
call fcn.14016609c
jmp 0x140005f10
mov r8, r13
call fcn.140166014
cmp esi, dword [rbx - 0xc]
jg 0x140005f2c
mov dword [rbx - 0x10], esi
mov byte [rdi + rbx], 0
mov r14, qword [rbp + 0x188]
mov r15, qword [rbp + 0x178]
jmp 0x140005f3c
mov ecx, 0x80070057
call fcn.140001970
int3
mov qword [rsp + 0x48], rax
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140005f5b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
mov rdx, qword [rsp + 0x70]
test rdx, rdx
setne al
test eax, eax
jne 0x140005f77
mov ecx, 0x80004005
call fcn.140001970
int3
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.1401663c0
test eax, eax
sete al
test al, al
jne 0x140006670
xor eax, eax
mov rdx, qword [rsp + 0x68]
test rdx, rdx
setne al
test eax, eax
jne 0x140005fad
mov ecx, 0x80004005
call fcn.140001970
int3
mov rcx, rbx
call fcn.1401663c0
test eax, eax
sete al
test al, al
jne 0x1400061e9
lea rdx, [0x1401e2848]
mov rcx, rbx
call fcn.1401663c0
test eax, eax
sete al
test al, al
jne 0x1400061e9
mov rdx, qword [rbp - 0x78]
test rdx, rdx
mov eax, 0
setne al
test eax, eax
jne 0x140005ffc
mov ecx, 0x80004005
call fcn.140001970
int3
mov rcx, rbx
call fcn.1401663c0
test eax, eax
sete al
test al, al
je 0x140006104
lea rdx, [rbx - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14000602d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14000604d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14000606e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14000608e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400060af
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400060d0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r12d
dec r12d
test r12d, r12d
jg 0x1400060f2
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
nop
mov rcx, r15
call fcn.140005410
mov eax, 1
jmp 0x14000731f
lea rdx, [rbx - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140006120
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140006140
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140006161
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140006181
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400061a2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400061c3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r12d
dec r12d
test r12d, r12d
jg 0x1400061e4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140007315
call fcn.140014264
mov r11, rax
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
jne 0x140006208
mov ecx, 0x80004005
call fcn.140001970
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0x18]
lea rsi, [rax + 0x18]
mov qword [rbp - 0x80], rsi
lea rdi, str.Install
test rdi, 0xffffffffffff0000
jne 0x140006249
movzx ebx, di
mov ecx, ebx
call fcn.140014074
test rax, rax
je 0x14000625f
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140001640
jmp 0x14000625b
mov r8d, 7
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.140001990
mov rsi, qword [rbp - 0x80]
mov rbx, qword [0x140231b08]
mov r13d, 1
mov ecx, r13d
sub ecx, dword [rsi - 8]
mov eax, dword [rsi - 0xc]
sub eax, 0x104
or ecx, eax
jge 0x140006290
mov edx, 0x104
lea rcx, [rbp - 0x80]
call fcn.140001910
mov rsi, qword [rbp - 0x80]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x104
mov r9, rsi
mov r8, rdi
mov rdx, rdi
lea rcx, str.string
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
movsxd rdx, dword [rsi - 0xc]
mov rcx, rsi
call fcn.1401663c8
test eax, eax
js 0x140006665
cmp eax, dword [rsi - 0xc]
jg 0x140006665
mov dword [rsi - 0x10], eax
cdqe
mov byte [rax + rsi], 0
call fcn.140014264
mov r11, rax
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
jne 0x1400062f8
mov ecx, 0x80004005
call fcn.140001970
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x78], rdi
lea rax, str.Installfailed
test rax, 0xffffffffffff0000
jne 0x14000633a
movzx ebx, ax
mov ecx, ebx
call fcn.140014074
test rax, rax
je 0x140006352
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140001640
jmp 0x14000634d
mov r8d, SafeArrayGetDim
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140001990
mov rdi, qword [rsp + 0x78]
mov rbx, qword [0x140231b08]
mov ecx, r13d
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, 0x104
or ecx, eax
jge 0x14000637f
mov edx, 0x104
lea rcx, [rsp + 0x78]
call fcn.140001910
mov rdi, qword [rsp + 0x78]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x104
mov r9, rdi
lea r8, str.failed
lea rdx, str.Installfailed
lea rcx, str.string
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
movsxd rdx, dword [rdi - 0xc]
mov rcx, rdi
call fcn.1401663c8
test eax, eax
js 0x14000665a
cmp eax, dword [rdi - 0xc]
jg 0x14000665a
mov dword [rdi - 0x10], eax
cdqe
mov byte [rax + rdi], 0
call fcn.140014264
mov rcx, rax
test rax, rax
mov eax, 0
setne al
test eax, eax
jne 0x1400063f2
mov ecx, 0x80004005
call fcn.140001970
int3
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x70], rbx
test r14, r14
jne 0x14000642e
lea rax, [0x1401e2848]
movzx r13d, ax
mov ecx, r13d
call fcn.140014074
test rax, rax
je 0x140006445
mov r8d, r13d
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140001640
jmp 0x140006441
xor r8d, r8d
lea rdx, [0x1401e2848]
lea rcx, [rbp - 0x70]
call fcn.140001990
mov rbx, qword [rbp - 0x70]
mov r13, qword [0x140231b08]
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x104
or ecx, eax
jge 0x140006472
mov edx, 0x104
lea rcx, [rbp - 0x70]
call fcn.140001910
mov rbx, qword [rbp - 0x70]
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], 0x104
mov r9, rbx
lea r8, str.Please_install_Windows_Media_Player_11_or_later
lea rdx, str.MTPinstallFailed_XPWMP10
lea rcx, str.string
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1401663c8
test eax, eax
js 0x14000664f
cmp eax, dword [rbx - 0xc]
jg 0x14000664f
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, qword [r15 + 0x20]
mov r8, rsi
lea rdx, str._r_n__________________________________________________________________________r_n_r_n___s__s__s__s_r_n_r_n__________________________________________________________________________r_n
lea rcx, [0x140231af0]
call fcn.140003410
mov r9, qword [0x140231af0]
mov r8d, 2
mov edx, dword [0x1402268dc]
mov rcx, qword [0x1402318d8]
call qword [sym.imp.USER32.dll_PostMessageA]
nop
lea rdx, [rbx - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140006524
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140006545
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140006565
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140006586
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400065a6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400065c7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400065e7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140006608
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140006629
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r12d
dec r12d
test r12d, r12d
jg 0x14000664a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140007315
mov ecx, 0x80070057
call fcn.140001970
nop
mov ecx, 0x80070057
call fcn.140001970
nop
mov ecx, 0x80070057
call fcn.140001970
nop
mov r13, qword [rbp + 0x170]
mov r8d, 0xa
lea rdx, str.Installing
lea rcx, [rsp + 0x40]
call fcn.140001990
mov rsi, qword [0x140231b08]
mov rdi, qword [rsp + 0x40]
mov r14d, 1
mov ecx, r14d
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x1400066c6
mov edx, 0x104
lea rcx, [rsp + 0x40]
call fcn.140001910
mov rdi, qword [rsp + 0x40]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x104
mov r9, rdi
lea r8, str.Installing
lea rdx, str.Installing
lea rcx, str.string
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
movsxd rdx, dword [rdi - 0xc]
mov rcx, rdi
call fcn.1401663c8
test eax, eax
js 0x1400072ff
cmp eax, dword [rdi - 0xc]
jg 0x1400072ff
mov dword [rdi - 0x10], eax
cdqe
mov byte [rax + rdi], 0
mov r9, qword [r15 + 0x20]
mov r8, rdi
lea rdx, str._s_________________________________s_______________________________
lea rcx, [0x140231af0]
call fcn.140003410
mov r9, qword [0x140231af0]
xor r8d, r8d
mov edx, dword [0x1402268dc]
mov rcx, qword [0x1402318d8]
call qword [sym.imp.USER32.dll_SendMessageA]
mov dword [rbp + 0x180], 0
lea r9, [rbp + 0x180]
xor r8d, r8d
lea edx, [r8 + 0x10]
mov rcx, qword [r15]
call qword [sym.imp.DIFXAPI.dll_DriverPackageInstallA]
mov edi, eax
lea rsi, [r13 + 0x10]
xor r8d, r8d
mov edx, r14d
mov qword [rbp - 0x60], rsi
test eax, eax
je 0x1400067e4
mov dword [rsp + 0x28], eax
mov rcx, qword [r15 + 0x20]
mov qword [rsp + 0x20], rcx
lea r9, str.InstallDriver__s_FAILED_ret0x_X_r_n
mov rcx, rsi
call fcn.140001060
cmp edi, 0x103
je 0x1400067d5
cmp edi, 0xe000020b
je 0x1400067c6
cmp edi, 0xe0000235
jne 0x1400067fc
lea r9, str.Install__s_return_ERROR_IN_WOW64_r_n
xor r8d, r8d
mov edx, r14d
jmp 0x1400067eb
lea r9, str.Install__s_return_ERROR_NO_SUCH_DEVINST_r_n
xor r8d, r8d
mov edx, r14d
jmp 0x1400067eb
lea r9, str.Install__s_return_ERROR_NO_MORE_ITEMS_r_n
xor r8d, r8d
mov edx, r14d
jmp 0x1400067eb
lea r9, str.Install__s_SUCCESS_r_n
mov rax, qword [r15 + 0x20]
mov qword [rsp + 0x20], rax
mov rcx, rsi
call fcn.140001060
mov rdx, r15
lea rcx, [rbp - 0x10]
call fcn.140007340
mov rdx, rax
mov rcx, r13
call fcn.140008b50
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 4
mov r8d, r14d
xor edx, edx
mov rcx, qword [r15]
call qword [sym.imp.SETUPAPI.dll_SetupCopyOEMInfA]
test eax, eax
jne 0x1400068ae
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov edx, eax
lea rcx, [rbp - 0x20]
call fcn.140001370
mov dword [rsp + 0x30], ebx
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [r15]
mov qword [rsp + 0x20], rax
lea r9, str.ERROR:_SetupCopyOEMInf__s_failed__error__s_code__d__r_n
xor r8d, r8d
mov edx, r14d
mov rcx, rsi
call fcn.140001060
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400068a9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x48]
mov rdx, r15
lea rcx, [rbp + 0x88]
call fcn.140007340
mov rdx, rax
mov rcx, r13
call fcn.140008b50
xor edi, edi
mov qword [rsp + 0x58], rdi
mov rax, qword [r15 + 0x50]
sub rax, qword [r15 + 0x48]
sar rax, 3
test rax, rax
je 0x140006d8d
nop word [rax + rax]
mov rax, qword [r15 + 0x48]
mov rbx, qword [rax + rdi*8]
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
cmp dword [rbx - 8], 0
jl 0x14000691b
cmp rax, qword [rbx - 0x18]
jne 0x14000691b
lea rdi, [rbx - 0x18]
lock inc dword [rbx - 8]
jmp 0x14000694f
mov rax, qword [rax]
mov r8d, r14d
mov edx, dword [rbx - 0x10]
call qword [rax]
mov rdi, rax
test rax, rax
je 0x140006d87
mov ecx, dword [rbx - 0x10]
mov dword [rax + 8], ecx
mov ecx, dword [rbx - 0x10]
inc ecx
movsxd rdx, ecx
mov r8, rbx
lea rcx, [rax + 0x18]
mov r9, rdx
call fcn.140166014
lea rbx, [rdi + 0x18]
mov qword [rbp + 0x188], rbx
mov edx, 0x5c
mov rcx, rbx
call fcn.140166c18
test rax, rax
je 0x140006ae6
sub eax, ebx
cmp eax, 0xffffffff
je 0x140006ae6
lea r8d, [rax + 1]
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x188]
call fcn.14000cb00
nop
mov r14, qword [rax]
lea rcx, [r14 - 0x18]
lea rdi, [rbx - 0x18]
cmp rcx, rdi
je 0x140006ac0
cmp dword [rdi + 0x10], 0
jl 0x1400069e5
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x1400069e5
call fcn.1400014e0
mov rbx, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x1400069d5
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0x188], rax
jmp 0x140006ac0
movsxd rsi, dword [r14 - 0x10]
test esi, esi
jne 0x140006a49
mov rsi, qword [rdi]
cmp dword [rdi + 8], 0
je 0x140006ac0
cmp dword [rdi + 0x10], 0
jge 0x140006a19
cmp dword [rbx - 0xc], 0
jl 0x140006d28
mov dword [rbx - 0x10], 0
mov byte [rbx], 0
jmp 0x140006ac0
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
dec eax
test eax, eax
jg 0x140006a33
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x188], rax
jmp 0x140006ac0
test r14, r14
je 0x140006d49
mov r15d, dword [rbx - 0x10]
mov r13, r14
sub r13, rbx
test esi, esi
js 0x140006d3e
mov ecx, 1
sub ecx, dword [rdi + 0x10]
mov eax, dword [rdi + 0xc]
sub eax, esi
or eax, ecx
jge 0x140006a8a
mov edx, esi
lea rcx, [rbp + 0x188]
call fcn.140001910
mov rbx, qword [rbp + 0x188]
mov rdi, rsi
movsxd rdx, dword [rbx - 0xc]
mov r9, rsi
mov rcx, rbx
cmp r13, r15
ja 0x140006aa8
lea r8, [r13 + rbx]
call fcn.14016609c
jmp 0x140006ab0
mov r8, r14
call fcn.140166014
cmp esi, dword [rbx - 0xc]
jg 0x140006d33
mov dword [rbx - 0x10], esi
mov byte [rdi + rbx], 0
mov rdx, qword [rbp - 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140006adf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp + 0x188]
lea r8, [rbp + 0x188]
lea rdx, str.C:WINDOWS_system32_
lea rcx, [rbp - 0x28]
call fcn.140003570
nop
mov r13, qword [rax]
lea rcx, [r13 - 0x18]
lea rdi, [rbx - 0x18]
cmp rcx, rdi
je 0x140006c2d
cmp dword [rdi + 0x10], 0
jl 0x140006b53
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140006b53
call fcn.1400014e0
mov rbx, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x140006b43
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0x188], rax
jmp 0x140006c2d
movsxd rsi, dword [r13 - 0x10]
test esi, esi
jne 0x140006bb7
mov rsi, qword [rdi]
cmp dword [rdi + 8], 0
je 0x140006c2d
cmp dword [rdi + 0x10], 0
jge 0x140006b87
cmp dword [rbx - 0xc], 0
jl 0x140006d54
mov dword [rbx - 0x10], 0
mov byte [rbx], 0
jmp 0x140006c2d
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
dec eax
test eax, eax
jg 0x140006ba1
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x188], rax
jmp 0x140006c2d
test r13, r13
je 0x140006d75
mov r15d, dword [rbx - 0x10]
mov r14, r13
sub r14, rbx
test esi, esi
js 0x140006d6a
mov ecx, 1
sub ecx, dword [rdi + 0x10]
mov eax, dword [rdi + 0xc]
sub eax, esi
or eax, ecx
jge 0x140006bf8
mov edx, esi
lea rcx, [rbp + 0x188]
call fcn.140001910
mov rbx, qword [rbp + 0x188]
mov rdi, rsi
movsxd rdx, dword [rbx - 0xc]
mov r9, rsi
mov rcx, rbx
cmp r14, r15
ja 0x140006c15
lea r8, [r14 + rbx]
call fcn.14016609c
jmp 0x140006c1d
mov r8, r13
call fcn.140166014
cmp esi, dword [rbx - 0xc]
jg 0x140006d5f
mov dword [rbx - 0x10], esi
mov byte [rdi + rbx], 0
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140006c4c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r15, qword [rbp + 0x178]
mov rax, qword [r15 + 0x48]
xor r8d, r8d
mov rdx, qword [rbp + 0x188]
mov rdi, qword [rsp + 0x58]
mov rcx, qword [rax + rdi*8]
call qword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x140006ce2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, 0x50
je 0x140006ce2
mov edx, eax
lea rcx, [rbp - 0x30]
call fcn.140001370
mov rdx, qword [r15 + 0x48]
mov rcx, qword [rax]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], ebx
mov rax, qword [rdx + rdi*8]
mov qword [rsp + 0x20], rax
lea r9, str.CopyFile__s_failed_error_code__d__s_r_n
xor r8d, r8d
mov r14d, 1
mov edx, r14d
mov rcx, qword [rbp - 0x60]
call fcn.140001060
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140006ce8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140006ce8
mov r14d, 1
mov rdx, qword [rbp + 0x188]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140006d0a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc rdi
mov qword [rsp + 0x58], rdi
mov rax, qword [r15 + 0x50]
sub rax, qword [r15 + 0x48]
sar rax, 3
cmp rdi, rax
jae 0x140006d80
jmp 0x1400068f0
mov ecx, 0x80070057
call fcn.140001970
int3
mov ecx, 0x80070057
call fcn.140001970
int3
mov ecx, 0x80070057
call fcn.140001970
int3
mov ecx, 0x80070057
call fcn.140001970
nop
mov ecx, 0x80070057
call fcn.140001970
int3
mov ecx, 0x80070057
call fcn.140001970
int3
mov ecx, 0x80070057
call fcn.140001970
int3
mov ecx, 0x80070057
call fcn.140001970
nop
mov rbx, qword [rsp + 0x48]
jmp 0x140006d8d
call fcn.1400018b0
int3
xor esi, esi
mov qword [rsp + 0x58], rsi
mov rax, qword [r15 + 0x70]
sub rax, qword [r15 + 0x68]
sar rax, 3
test rax, rax
je 0x140007139
nop dword [rax]
mov rax, qword [r15 + 0x68]
mov rbx, qword [rax + rsi*8]
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
cmp dword [rbx - 8], 0
jl 0x140006ddb
cmp rax, qword [rbx - 0x18]
jne 0x140006ddb
lea rdi, [rbx - 0x18]
lock inc dword [rbx - 8]
jmp 0x140006e0f
mov rax, qword [rax]
mov r8d, r14d
mov edx, dword [rbx - 0x10]
call qword [rax]
mov rdi, rax
test rax, rax
je 0x140007133
mov ecx, dword [rbx - 0x10]
mov dword [rax + 8], ecx
mov ecx, dword [rbx - 0x10]
inc ecx
movsxd rdx, ecx
mov r8, rbx
lea rcx, [rax + 0x18]
mov r9, rdx
call fcn.140166014
lea rbx, [rdi + 0x18]
mov qword [rsp + 0x50], rbx
mov edx, 0x5c
mov rcx, rbx
call fcn.140166c18
test rax, rax
je 0x140006fa4
sub eax, ebx
cmp eax, 0xffffffff
je 0x140006fa4
lea r8d, [rax + 1]
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.14000cb00
nop
mov r14, qword [rax]
lea rcx, [r14 - 0x18]
lea rdi, [rbx - 0x18]
cmp rcx, rdi
je 0x140006f80
cmp dword [rdi + 0x10], 0
jl 0x140006e9f
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140006e9f
call fcn.1400014e0
mov rbx, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x140006e91
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x50], rax
jmp 0x140006f80
movsxd rsi, dword [r14 - 0x10]
test esi, esi
jne 0x140006f01
mov rsi, qword [rdi]
cmp dword [rdi + 8], 0
je 0x140006f7b
cmp dword [rdi + 0x10], 0
jge 0x140006ed3
cmp dword [rbx - 0xc], 0
jl 0x140007100
mov dword [rbx - 0x10], 0
mov byte [rbx], 0
jmp 0x140006f7b
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
dec eax
test eax, eax
jg 0x140006eed
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
jmp 0x140006f7b
test r14, r14
je 0x140007121
mov r15d, dword [rbx - 0x10]
mov r13, r14
sub r13, rbx
test esi, esi
js 0x140007116
mov ecx, 1
sub ecx, dword [rdi + 0x10]
mov eax, dword [rdi + 0xc]
sub eax, esi
or eax, ecx
jge 0x140006f3e
mov edx, esi
lea rcx, [rsp + 0x50]
call fcn.140001910
mov rbx, qword [rsp + 0x50]
mov rdi, rsi
movsxd rdx, dword [rbx - 0xc]
mov r9, rsi
mov rcx, rbx
cmp r13, r15
ja 0x140006f5c
lea r8, [r13 + rbx]
call fcn.14016609c
jmp 0x140006f64
mov r8, r14
call fcn.140166014
cmp esi, dword [rbx - 0xc]
jg 0x14000710b
mov dword [rbx - 0x10], esi
mov byte [rdi + rbx], 0
mov r15, qword [rbp + 0x178]
mov rsi, qword [rsp + 0x58]
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140006f9f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x50]
lea r8, [rsp + 0x50]
lea rdx, str.C:WINDOWS_system32drivers_
lea rcx, [rbp - 0x48]
call fcn.140003570
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140007015
cmp dword [rbx + 0x10], 0
jl 0x140007006
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140007006
call fcn.1400014e0
mov rdi, rax
mov ecx, r12d
lock xadd dword [rbx + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x140006ffb
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x50], rax
jmp 0x140007015
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x50]
call fcn.140001990
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140007034
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [r15 + 0x68]
xor r8d, r8d
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rax + rsi*8]
call qword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x1400070bc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, 0x50
je 0x1400070bc
mov edx, eax
lea rcx, [rbp - 0x38]
call fcn.140001370
mov rdx, qword [r15 + 0x68]
mov rcx, qword [rax]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], ebx
mov rax, qword [rdx + rsi*8]
mov qword [rsp + 0x20], rax
lea r9, str.CopyFile__s_failed_error_code__d__s_r_n
xor r8d, r8d
mov r14d, 1
mov edx, r14d
mov rcx, qword [rbp - 0x60]
call fcn.140001060
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400070c2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400070c2
mov r14d, 1
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400070e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc rsi
mov qword [rsp + 0x58], rsi
mov rax, qword [r15 + 0x70]
sub rax, qword [r15 + 0x68]
sar rax, 3
cmp rsi, rax
jae 0x14000712c
jmp 0x140006db0
mov ecx, 0x80070057
call fcn.140001970
int3
mov ecx, 0x80070057
call fcn.140001970
int3
mov ecx, 0x80070057
call fcn.140001970
int3
mov ecx, 0x80070057
call fcn.140001970
nop
mov rbx, qword [rsp + 0x48]
jmp 0x140007139
call fcn.1400018b0
int3
mov r8d, 9
lea rdx, str.Installed
lea rcx, [rsp + 0x40]
call fcn.140001990
mov rsi, qword [0x140231b08]
mov rdi, qword [rsp + 0x40]
mov ecx, r14d
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x140007182
mov edx, 0x104
lea rcx, [rsp + 0x40]
call fcn.140001910
mov rdi, qword [rsp + 0x40]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x104
mov r9, rdi
mov r8, rdi
lea rdx, str.Installed
lea rcx, str.string
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
movsxd rdx, dword [rdi - 0xc]
mov rcx, rdi
call fcn.1401663c8
test eax, eax
js 0x1400072f4
cmp eax, dword [rdi - 0xc]
jg 0x1400072f4
mov dword [rdi - 0x10], eax
cdqe
mov byte [rax + rdi], 0
mov r9, qword [r15 + 0x20]
mov r8, rdi
lea rdx, str._s_r_n
lea rcx, [0x140231af0]
call fcn.140003410
mov r9, qword [0x140231af0]
xor r8d, r8d
mov edx, dword [0x1402268dc]
mov rcx, qword [0x1402318d8]
call qword [sym.imp.USER32.dll_SendMessageA]
nop
lea rdx, [rbx - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140007223
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140007243
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140007264
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140007284
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400072a5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400072c6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r12d
dec r12d
test r12d, r12d
jg 0x1400072e7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, r15
call fcn.140005410
mov eax, r14d
jmp 0x14000731f
mov ecx, 0x80070057
call fcn.140001970
int3
mov ecx, 0x80070057
call fcn.140001970
nop
mov ecx, 0x80070057
call fcn.140001970
nop
mov rcx, r15
call fcn.140005410
xor eax, eax
add rsp, 0x228
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret