Function at 0x1000e700
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x10037a0b
mov eax, dword fs:[0]
push eax
sub esp, 0x94
mov eax, dword [0x10045c94]
xor eax, esp
mov dword [esp + 0x90], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x10045c94]
xor eax, esp
push eax
lea eax, [esp + 0xa8]
mov dword fs:[0], eax
mov ebp, dword [esp + 0xb8]
mov eax, dword [esp + 0xbc]
mov esi, ecx
mov edi, dword [esi + 0x10]
mov dword [esp + 0x44], ebp
mov dword [esp + 0x14], eax
mov dword [esp + 0x30], esi
cmp dword [esi + 0xc], edi
jbe 0x1000e764
call fcn.1001f12d
mov ebx, dword [esi + 0xc]
mov ecx, dword [esi]
mov dword [esp + 0x48], ecx
cmp ebx, dword [esi + 0x10]
jbe 0x1000e777
call fcn.1001f12d
mov edx, dword [esp + 0x48]
mov eax, dword [esi]
push edi
push edx
push ebx
push eax
lea ebx, [esp + 0x58]
call fcn.1000f1e0
cmp dword [ebp + 0x60], 0xffffffff
je 0x1000eb0b
mov ecx, dword [esp + 0x14]
mov edx, 0x1003de4c
lea edi, [esp + 0x88]
call fcn.1000d9b0
mov dword [esp + 0xb0], 0
mov eax, dword [esp + 0x8c]
mov edi, 8
cmp dword [esp + 0xa0], edi
jae 0x1000e7d0
lea eax, [esp + 0x8c]
mov edx, dword [ebp + 0x60]
lea ecx, [esp + 0x34]
push ecx
push 0
push eax
push edx
call dword [sym.imp.SETUPAPI.dll_SetupFindFirstLineW]
test eax, eax
jne 0x1000e7f2
cmp dword [esp + 0xa0], edi
jmp 0x1000eaf9
lea ecx, [esp + 0x18]
push ecx
call fcn.1000edc0
mov bl, 2
mov edi, edi
xor edx, edx
mov dword [esp + 0x84], 7
mov dword [esp + 0x80], 0
mov word [esp + 0x70], dx
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x38]
push ecx
xor ecx, ecx
mov byte [esp + 0xb8], bl
call fcn.1000dd70
add esp, 8
test eax, eax
jne 0x1000e8de
lea edx, [esp + 0x6c]
push edx
lea esi, [esp + 0x54]
call fcn.100126c0
add esp, 4
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0xbc], 3
call fcn.10001450
mov byte [esp + 0xb0], bl
cmp dword [esp + 0x68], edi
jb 0x1000e881
mov eax, dword [esp + 0x54]
push eax
call fcn.100128fb
add esp, 4
mov eax, dword [esp + 0x80]
push str.copyfiles
mov edi, 9
lea ecx, [esp + 0x70]
call fcn.1000c3b0
test eax, eax
je 0x1000e8f1
mov byte [esp + 0xb0], 1
cmp dword [esp + 0x84], 8
jb 0x1000e8be
mov ecx, dword [esp + 0x70]
push ecx
call fcn.100128fb
add esp, 4
lea edx, [esp + 0x34]
push edx
mov eax, edx
push eax
call dword [sym.imp.SETUPAPI.dll_SetupFindNextLine]
test eax, eax
je 0x1000e94d
mov edi, 8
jmp 0x1000e800
lea ecx, [esp + 0x6c]
mov byte [esp + 0xb0], 1
call fcn.10001330
jmp 0x1000e94d
lea ecx, [esp + 0x34]
push ecx
call dword [sym.imp.SETUPAPI.dll_SetupGetFieldCount]
mov edi, eax
mov esi, 1
cmp edi, esi
jl 0x1000e92e
lea edx, [esp + 0x6c]
push edx
lea eax, [esp + 0x38]
push eax
mov ecx, esi
call fcn.1000dd70
add esp, 8
lea ecx, [esp + 0x6c]
push ecx
lea ebx, [esp + 0x1c]
call fcn.1000ee70
inc esi
cmp esi, edi
jle 0x1000e907
mov byte [esp + 0xb0], 1
cmp dword [esp + 0x84], 8
jb 0x1000e94d
mov edx, dword [esp + 0x70]
push edx
call fcn.100128fb
add esp, 4
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x24]
mov ecx, edi
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
xor ebp, ebp
add eax, edx
je 0x1000ea94
xor edi, edi
jmp 0x1000e97c
mov edi, dword [esp + 0x14]
cmp ebp, eax
jb 0x1000e989
call fcn.1001f12d
mov esi, dword [esp + 0x24]
mov ebx, 8
cmp dword [esi + edi + 0x18], ebx
jb 0x1000e99a
mov esi, dword [esi + edi + 4]
jmp 0x1000e99e
lea esi, [esi + edi + 4]
mov ecx, dword [esp + 0x44]
mov edx, dword [ecx + 0x60]
lea eax, [esp + 0x34]
push eax
push 0
push esi
push edx
call dword [sym.imp.SETUPAPI.dll_SetupFindFirstLineW]
test eax, eax
je 0x1000eb35
lea esp, [esp]
xor eax, eax
mov dword [esp + 0x84], 7
mov dword [esp + 0x80], 0
mov word [esp + 0x70], ax
lea ecx, [esp + 0x6c]
push ecx
lea edx, [esp + 0x38]
push edx
xor ecx, ecx
mov byte [esp + 0xb8], 4
call fcn.1000dd70
add esp, 8
test eax, eax
je 0x1000ea14
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x38]
push ecx
mov ecx, 1
call fcn.1000dd70
add esp, 8
cmp dword [esp + 0x80], 0
je 0x1000ea31
mov ebx, dword [esp + 0x30]
lea edx, [esp + 0x6c]
push edx
call fcn.1000ee70
mov ebx, 8
mov byte [esp + 0xb0], 1
cmp dword [esp + 0x84], ebx
jb 0x1000ea4f
mov eax, dword [esp + 0x70]
push eax
call fcn.100128fb
add esp, 4
lea ecx, [esp + 0x34]
push ecx
mov edx, ecx
push edx
call dword [sym.imp.SETUPAPI.dll_SetupFindNextLine]
test eax, eax
jne 0x1000e9c0
mov esi, dword [esp + 0x24]
add edi, 0x1c
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x28]
mov ecx, edi
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
cmp ebp, eax
jb 0x1000e978
xor ebx, ebx
cmp esi, ebx
je 0x1000ead8
cmp esi, edi
je 0x1000eacf
add esi, 0x18
cmp dword [esi], 8
jb 0x1000eab2
mov edx, dword [esi - 0x14]
push edx
call fcn.100128fb
add esp, 4
xor eax, eax
mov dword [esi], 7
mov dword [esi - 4], ebx
mov word [esi - 0x14], ax
add esi, 0x1c
lea ecx, [esi - 0x18]
cmp ecx, edi
jne 0x1000eaa1
mov esi, dword [esp + 0x24]
push esi
call fcn.100128fb
add esp, 4
mov edx, dword [esp + 0x18]
push edx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.100128fb
add esp, 4
cmp dword [esp + 0xa0], 8
jb 0x1000eb0b
mov eax, dword [esp + 0x8c]
push eax
call fcn.100128fb
add esp, 4
mov ecx, dword [esp + 0xa8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x90]
xor ecx, esp
call fcn.1001ec96
add esp, 0xa0
ret 8
mov eax, dword [esp + 0x24]
xor esi, esi
cmp eax, esi
je 0x1000eb5d
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x28]
push ecx
call fcn.100109f0
mov edx, dword [esp + 0x28]
add esp, 4
push edx
call fcn.100128fb
add esp, 4
mov eax, dword [esp + 0x18]
push eax
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], esi
call fcn.100128fb
add esp, 4
cmp dword [esp + 0xa0], ebx
jb 0x1000eb0b
mov ecx, dword [esp + 0x8c]
push ecx
jmp 0x1000eb03