Function at 0x14001c5e0
Capabilities:
Create directory
Get common file path

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0xad0
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rsp + 0xb10], rbx
mov rax, qword [0x14012ce40]
xor rax, rsp
mov qword [rsp + 0xac8], rax
mov rbx, rdx
mov rdi, rcx
xor r13d, r13d
mov dword [rsp + 0x40], r13d
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001c654
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14001c64a
mov rcx, rax
call fcn.140050830
jmp 0x14001c64d
mov rax, r13
mov qword [0x1401370f0], rax
lea rdx, str.InstallProgramFiles__
mov rcx, rax
call fcn.140050c00
mov edx, 0x465
mov r8d, 0x122
mov rcx, qword [rdi + 8]
call fcn.140072000
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 1
lea r8, [rdi + 0xc24]
lea rdx, [rdi + 0x123c]
lea rcx, str.Uninstall.exe
call fcn.14005f920
lea r11, [rsp + 0x40]
mov qword [rsp + 0x20], r11
mov r9d, 1
lea r8, [rdi + 0xc24]
lea rdx, [rdi + 0x123c]
lea rcx, str.properties.ini
call fcn.14005f920
cmp dword [rdi + 0xc18], 0
je 0x14001c717
lea rax, [rdi + 0x164c]
lea rcx, [rdi + 0x1444]
lea r8, [rdi + 0x1034]
lea rdx, [rdi + 0xe2c]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rdi + 0x123c]
lea rcx, [rdi + 0xc24]
call fcn.14002a4e0
lea r8, [rdi + 0x123c]
lea rdx, [rdi + 0xc24]
mov rcx, rbx
call fcn.140029e20
lea r12, [rdi + 0x164c]
lea r9, [rdi + 0x1444]
mov qword [rsp + 0x20], r12
lea r8, [rdi + 0x123c]
lea rdx, [rdi + 0xc24]
mov rcx, rbx
call fcn.1400290e0
call fcn.1400171a0
mov word [rsp + 0x690], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x692]
call fcn.1400b57e0
mov edx, 0x104
lea rcx, [rsp + 0x690]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov word [rsp + 0x480], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x482]
call fcn.1400b57e0
mov word [rsp + 0x270], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x272]
call fcn.1400b57e0
lea rbx, [rdi + 0x1854]
mov qword [rsp + 0x20], rbx
lea r9, [rdi + 0x123c]
lea r8, str._s_s
mov edx, 0x104
lea rcx, [rsp + 0x480]
call fcn.1400b1010
mov qword [rsp + 0x20], rbx
lea r9, [rdi + 0xc24]
lea r8, [0x1400ecb00]
mov edx, 0x104
lea rcx, [rsp + 0x270]
call fcn.1400b1010
xor edx, edx
lea rcx, [rsp + 0x270]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea r11, [rsp + 0x40]
mov qword [rsp + 0x20], r11
mov r9d, 1
lea r8, [rsp + 0x270]
lea rdx, [rsp + 0x480]
lea rcx, str.Strings.dll
call fcn.14005f920
mov word [rsp + 0x8a0], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x8a2]
call fcn.1400b57e0
mov rbx, qword [0x140136ce8]
test rbx, rbx
jne 0x14001c8d2
lea ecx, [rbx + 0x30]
call fcn.140084d88
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14001c8c8
mov ecx, 0x20
call fcn.140084d88
nop
test rax, rax
je 0x14001c8b6
mov qword [rax + 8], r13
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], r13
jmp 0x14001c8b9
mov rax, r13
mov qword [rbx + 0x28], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x14001c8cb
mov rbx, r13
mov qword [0x140136ce8], rbx
mov r9d, 0x104
lea r8, [rsp + 0x8a0]
lea rdx, str.SERVICE_NAME
mov rcx, rbx
call fcn.14004a950
lea r11, [rsp + 0x40]
mov qword [rsp + 0x20], r11
mov r9d, 1
lea r8, [rsp + 0x690]
mov rdx, r12
lea rcx, [rsp + 0x8a0]
call fcn.14005f920
lea r11, [rsp + 0x40]
mov qword [rsp + 0x20], r11
mov r9d, 1
lea r8, [rdi + 0xc24]
lea rdx, [rdi + 0x123c]
lea rcx, str.EasyInst64.exe
call fcn.14005f920
lea r11, [rsp + 0x40]
mov qword [rsp + 0x20], r11
mov r9d, 1
lea r8, [rdi + 0xc24]
mov rdx, r12
lea rcx, str.Difxapi.dll
call fcn.14005f920
mov word [rsp + 0x60], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x62]
call fcn.1400b57e0
mov rbx, qword [0x140136ce8]
test rbx, rbx
jne 0x14001c9db
lea ecx, [rbx + 0x30]
call fcn.140084d88
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14001c9d1
mov ecx, 0x20
call fcn.140084d88
nop
test rax, rax
je 0x14001c9bf
mov qword [rax + 8], r13
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], r13
jmp 0x14001c9c2
mov rax, r13
mov qword [rbx + 0x28], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x14001c9d4
mov rbx, r13
mov qword [0x140136ce8], rbx
mov r9d, 0x104
lea r8, [rsp + 0x60]
lea rdx, str.PRINT_INFNAME
mov rcx, rbx
call fcn.14004a950
test eax, eax
jne 0x14001ca21
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 1
lea r8, [rdi + 0xc24]
lea rdx, [rdi + 0x123c]
lea rcx, [rsp + 0x60]
call fcn.14005f920
mov rbx, qword [0x140136ce8]
test rbx, rbx
jne 0x14001ca7c
lea ecx, [rbx + 0x30]
call fcn.140084d88
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14001ca72
mov ecx, 0x20
call fcn.140084d88
nop
test rax, rax
je 0x14001ca60
mov qword [rax + 8], r13
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], r13
jmp 0x14001ca63
mov rax, r13
mov qword [rbx + 0x28], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x14001ca75
mov rbx, r13
mov qword [0x140136ce8], rbx
mov r9d, 0x104
lea r8, [rsp + 0x60]
lea rdx, str.FAXPRINTER_INFNAME
mov rcx, rbx
call fcn.14004a950
test eax, eax
jne 0x14001cac0
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
lea r9d, [rax + 1]
lea r8, [rdi + 0xc24]
lea rdx, [rdi + 0x123c]
lea rcx, [rsp + 0x60]
call fcn.14005f920
cmp dword [rdi], 0
jne 0x14001cad2
mov ecx, dword [rsp + 0x40]
mov dword [rdi], ecx
mov eax, 1
jmp 0x14001cad7
mov eax, 1
mov rcx, qword [rsp + 0xac8]
xor rcx, rsp
call fcn.1400b09d0
mov rbx, qword [rsp + 0xb10]
add rsp, 0xad0
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret