Function at 0x140027820
Capabilities:
Enumerate gui resources
Query environment variable

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x11c0]
mov eax, 0x12c0
call fcn.140039550
sub rsp, rax
mov rdi, rcx
xor esi, esi
lea rcx, [0x1400b8188]
mov dword [rsp + 0x44], esi
mov r14d, esi
mov r15d, r8d
mov rbx, rdx
call fcn.1400359c0
test eax, eax
jne 0x140027887
mov rcx, qword [0x1400b80b8]
test rcx, rcx
je 0x140027880
lea r8, str._InstallFilterDriver_AcquireTheMutex_failed.
mov edx, 0x100
call fcn.140032570
xor eax, eax
jmp 0x14002820b
xor edx, edx
mov qword [rsp + 0x12f0], r12
mov r8d, 0x200
mov dword [rsp + 0x58], esi
lea rcx, [rbp + 0x1a0]
call fcn.14003aa80
xor edx, edx
mov dword [rsp + 0x54], esi
mov r8d, 0x200
lea rcx, [rbp - 0x60]
call fcn.14003aa80
movsd xmm0, qword [str.amdkmpfd]
lea rcx, str.dpinst.exe
movzx eax, byte [0x1400954a8]
movsd qword [rbp - 0x60], xmm0
mov byte [rbp - 0x58], al
call fcn.140027080
mov r12d, 1
test eax, eax
je 0x1400278fc
mov edx, eax
lea rcx, [0x14002b1a0]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
jne 0x14002797a
lea rcx, str.ATISetup.exe
call fcn.140027080
test eax, eax
je 0x140027921
mov rcx, qword [0x1400b80b8]
test rcx, rcx
je 0x14002797a
lea r9, str.ATISetup.exe
jmp 0x140027969
lea rcx, str.InstallManagerApp.exe
call fcn.140027080
test eax, eax
je 0x140027946
mov rcx, qword [0x1400b80b8]
test rcx, rcx
je 0x14002797a
lea r9, str.InstallManagerApp.exe
jmp 0x140027969
lea rcx, str.RadeonInstaller.exe
call fcn.140027080
test eax, eax
je 0x14002797f
mov rcx, qword [0x1400b80b8]
test rcx, rcx
je 0x14002797a
lea r9, str.RadeonInstaller.exe
lea r8, str.IsProcessFound:__s_is_running.
mov edx, 2
call fcn.140032710
mov dword [rsp + 0x58], r12d
lea rax, [rsp + 0x54]
mov r9, rbx
mov r8, rdi
mov qword [rsp + 0x20], rax
mov edx, 0x200
lea rcx, [rbp + 0x1a0]
call fcn.140026ab0
test eax, eax
jne 0x1400279d4
mov rcx, qword [0x1400b80b8]
test rcx, rcx
je 0x1400279c1
lea r8, str._InstallFilterDriver_GetFilterInstallPath_failed.
mov edx, 0x100
call fcn.140032570
lea rcx, [0x1400b8188]
call fcn.140035a80
xor eax, eax
jmp 0x140028203
mov rdi, 0xffffffffffffffff
lea rax, [rbp + 0x1a0]
mov rbx, rdi
inc rbx
cmp byte [rax + rbx], sil
jne 0x1400279e5
lea rax, [rbp - 0x78]
mov dword [rsp + 0x68], esi
mov qword [rsp + 0x28], rax
lea r8, str.RebootIsPending
lea rax, [rsp + 0x68]
mov dword [rbp - 0x78], 4
xor r9d, r9d
mov qword [rsp + 0x20], rax
lea rdx, [0x14008d018]
mov rcx, 0xffffffff80000002
call fcn.140035380
test eax, eax
mov eax, dword [0x1400b821c]
je 0x140027a42
cmp dword [rsp + 0x68], r12d
cmove eax, r12d
mov dword [0x1400b821c], eax
cmp rbx, 0x1f3
jae 0x1400281f4
test eax, eax
jne 0x1400281f4
cmp dword [0x1400b8164], esi
jne 0x1400281f4
lea rcx, [rbp + 0x1a0]
dec rcx
cmp dword [rsp + 0x54], esi
je 0x140027aa0
cmp byte [rcx + 1], sil
lea rcx, [rcx + 1]
jne 0x140027a73
mov eax, dword [0x140095b88]
movsd xmm0, qword [str._amdpfdun.inf]
movsd qword [rcx], xmm0
mov dword [rcx + 8], eax
movzx eax, word [reloc.dwmapi.dll_Ordinal_102]
jmp 0x140027ac6
cmp byte [rcx + 1], sil
lea rcx, [rcx + 1]
jne 0x140027aa0
mov eax, dword [0x140095808]
movsd xmm0, qword [str._amdkmpfd.inf]
movsd qword [rcx], xmm0
mov dword [rcx + 8], eax
movzx eax, word [reloc.dwmapi.dll_Ordinal_102]
mov word [rcx + 0xc], ax
xor edx, edx
lea rcx, [rbp + 0x5a0]
mov r8d, 0x200
call fcn.14003aa80
xor edx, edx
lea rcx, [rbp + 0x7a0]
mov r8d, 0x200
call fcn.14003aa80
lea r9, [rbp - 0x60]
lea r8, [rbp + 0x7a0]
lea rdx, [rbp + 0x5a0]
lea rcx, [rbp + 0x1a0]
call fcn.140025f00
test eax, eax
je 0x1400281d7
mov ecx, 0x4100
call fcn.1400394b4
mov ecx, 0x4100
mov qword [rsp + 0x48], rax
call fcn.1400394b4
mov rcx, qword [rsp + 0x48]
mov r12, rax
mov qword [rsp + 0x60], rax
test rcx, rcx
je 0x1400281c8
test rax, rax
je 0x1400281c3
xor edx, edx
mov qword [rsp + 0x12f8], r13
mov r8d, 0x4100
call fcn.14003aa80
xor edx, edx
mov r8d, 0x4100
mov rcx, r12
call fcn.14003aa80
mov ebx, esi
mov dword [rsp + 0x6c], 8
xor edx, edx
mov dword [rsp + 0x40], ebx
mov r8d, 0x200
mov dword [rsp + 0x70], 8
lea rcx, [rbp - 0x60]
call fcn.14003aa80
mov rcx, rsi
nop
movzx eax, byte [rbp + rcx + 0x5a0]
mov byte [rbp + rcx - 0x60], al
lea rcx, [rcx + 1]
test al, al
jne 0x140027ba0
lea rdx, str..inf
lea rcx, [rbp - 0x60]
call qword [sym.imp.SHLWAPI.dll_StrStrIA]
test rax, rax
je 0x140027bd4
mov word [rax + 1], 0x7973
mov byte [rax + 3], 0x73
xor edx, edx
lea rcx, [rbp + 0x3a0]
mov r8d, 0x200
call fcn.14003aa80
mov r8d, 0x104
lea rdx, [rbp + 0x3a0]
lea rcx, str._SYSTEMROOT_
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
lea rcx, [rbp + 0x3a0]
dec rcx
nop dword [rax]
cmp byte [rcx + 1], bl
lea rcx, [rcx + 1]
jne 0x140027c10
movzx eax, word [0x140095490]
movups xmm0, xmmword [str.System32drivers_]
movups xmmword [rcx], xmm0
mov word [rcx + 0x10], ax
movzx eax, byte [0x140095492]
mov byte [rcx + 0x12], al
lea rcx, [rbp + 0x3a0]
dec rcx
cmp byte [rcx + 1], bl
lea rcx, [rcx + 1]
jne 0x140027c42
movsd xmm0, qword [str.amdkmpfd]
movzx eax, byte [0x1400954a8]
movsd qword [rcx], xmm0
mov byte [rcx + 8], al
lea rcx, [rbp + 0x3a0]
dec rcx
nop dword [rax + rax]
cmp byte [rcx + 1], bl
lea rcx, [rcx + 1]
jne 0x140027c70
mov eax, dword [str..sys]
mov rdx, rdi
mov dword [rcx], eax
movzx eax, byte [0x140095498]
mov byte [rcx + 4], al
xor eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], rax
lea rax, [rbp - 0x60]
inc rdx
cmp byte [rax + rdx], bl
jne 0x140027ca5
lea r8, [rbp - 0x70]
lea rcx, [rbp - 0x60]
call fcn.14002e3e0
test eax, eax
je 0x140027d13
lea rax, [rbp + 0x3a0]
inc rdi
cmp byte [rax + rdi], bl
jne 0x140027cc5
mov rdx, rdi
lea r8, [rsp + 0x78]
lea rcx, [rbp + 0x3a0]
call fcn.14002e3e0
test eax, eax
je 0x140027d13
mov r14, qword [rsp + 0x78]
mov edi, 1
cmp r14w, word [rbp - 0x70]
jne 0x140027d1d
movzx eax, word [rbp - 0x6e]
cmp word [rsp + 0x7a], ax
jne 0x140027d1d
movzx eax, word [rbp - 0x6a]
cmp word [rsp + 0x7e], ax
cmove ebx, edi
mov dword [rsp + 0x40], ebx
jmp 0x140027d1d
mov r14, qword [rsp + 0x78]
mov edi, 1
xor edx, edx
mov dword [rsp + 0x50], esi
mov r8d, 0x820
lea rcx, [rbp + 0x9a0]
call fcn.14003aa80
mov rdx, qword [rsp + 0x48]
lea rax, [rbp + 0x9a0]
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x6c]
lea rax, [rsp + 0x50]
mov r9, r12
mov qword [rsp + 0x28], rax
mov ecx, r15d
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.1400291b0
mov r13d, eax
test eax, eax
je 0x140027d78
mov r15d, edi
test ebx, ebx
jne 0x140027d7b
mov r15d, esi
test r13d, r13d
je 0x140027d89
test r15d, r15d
jne 0x1400281b3
mov dword [rbp + 0x1208], esi
mov edx, esi
mov esi, dword [rsp + 0x6c]
mov r12d, edi
test esi, esi
je 0x140027de9
xor ebx, ebx
test esi, esi
je 0x140027de9
mov r14, qword [rsp + 0x48]
test edx, edx
jne 0x140027de4
mov eax, ebx
imul rcx, rax, 0x820
cmp dword [rcx + r14 + 0x614], edx
je 0x140027dde
xor r8d, r8d
lea r9, [rbp + 0x1208]
add rcx, 0x214
add rcx, r14
lea edx, [r8 + 4]
call qword [sym.imp.DIFXAPI.dll_DriverPackageUninstallA]
mov edx, edi
inc ebx
cmp ebx, esi
jb 0x140027da7
mov r14, qword [rsp + 0x78]
mov edi, dword [rsp + 0x70]
test edi, edi
je 0x140027e43
test edx, edx
jne 0x140027e6f
xor ebx, ebx
test edi, edi
je 0x140027e47
nop dword [rax + rax]
test edx, edx
jne 0x140027e6f
mov eax, ebx
imul rcx, rax, 0x820
mov rax, qword [rsp + 0x60]
cmp dword [rcx + rax + 0x614], edx
je 0x140027e3d
xor r8d, r8d
lea r9, [rbp + 0x1208]
add rax, 0x214
add rcx, rax
lea edx, [r8 + 4]
call qword [sym.imp.DIFXAPI.dll_DriverPackageUninstallA]
mov edx, 1
inc ebx
cmp ebx, edi
jb 0x140027e00
test edx, edx
jne 0x140027e6f
cmp dword [rbp + 0xfb4], 0
je 0x140027f81
xor r8d, r8d
lea r9, [rbp + 0x1208]
lea rcx, [rbp + 0xbb4]
lea edx, [r8 + 4]
call qword [sym.imp.DIFXAPI.dll_DriverPackageUninstallA]
cmp dword [rsp + 0x50], 1
jbe 0x140027f76
cmp dword [rsp + 0x40], 0
jne 0x140027f76
mov eax, 0x7e2
cmp r14w, ax
ja 0x140027f76
cmp word [rsp + 0x7a], 8
jae 0x140027f76
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov r14d, 1
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov dword [rsp + 0x40], r14d
lea r8, [0x140095b90]
mov rcx, 0xffffffff80000002
lea rdx, [0x14008d018]
call fcn.1400357b0
test eax, eax
jne 0x140027efe
mov rcx, qword [0x1400b80b8]
test rcx, rcx
je 0x140027efe
lea r9, str.Write_RegValue_EEU_REBOOT_POP_UP_REQUIRED_failed.
mov r8d, r14d
mov edx, 0x60004005
call fcn.1400324f0
lea rax, [rsp + 0x50]
mov dword [rsp + 0x28], 4
xor ebx, ebx
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov dword [0x1400b821c], r14d
lea r8, str.RebootIsPending
mov dword [0x1400b8164], r14d
lea rdx, [0x14008d018]
mov dword [rsp + 0x50], r14d
mov rcx, 0xffffffff80000002
mov r12d, ebx
call fcn.1400357b0
test eax, eax
jne 0x140027f69
mov rcx, qword [0x1400b80b8]
test rcx, rcx
je 0x140027f69
lea r9, str.Write_RegValue_EEU_REBOOT_PENDING_failed.
mov r8d, r14d
mov edx, 0x60004005
call fcn.1400324f0
cmp dword [rsp + 0x58], ebx
jne 0x140027f89
call fcn.14001e330
jmp 0x140027f89
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r14d, 1
xor ebx, ebx
mov edx, 0xc
lea rcx, [rbp + 0x5a0]
call qword [sym.imp.DIFXAPI.dll_DriverPackagePreinstallA]
cmp eax, 0xb7
jne 0x140027fb4
mov edx, 0xd
lea rcx, [rbp + 0x5a0]
call qword [sym.imp.DIFXAPI.dll_DriverPackagePreinstallA]
test eax, eax
je 0x140027feb
cmp eax, 0xb7
je 0x140027feb
mov rcx, qword [0x1400b80b8]
test rcx, rcx
je 0x140027fdc
lea r8, str.InstallFilterDriver:_The_install_using_DriverPackagePreinstall_failed.
mov edx, 2
call fcn.140032710
mov r12, qword [rsp + 0x60]
mov r14d, dword [rsp + 0x44]
jmp 0x1400281b6
test r12d, r12d
je 0x140027fdc
test esi, esi
je 0x14002801d
test r13d, r13d
je 0x140028001
mov r9d, r14d
test r15d, r15d
je 0x140028004
mov r9d, ebx
mov rdx, qword [rsp + 0x48]
lea rcx, [rbp + 0x1208]
mov r8d, esi
call fcn.140028230
mov r14d, eax
jmp 0x140028022
mov r14d, dword [rsp + 0x44]
test edi, edi
je 0x140028054
test r13d, r13d
je 0x140028035
test r15d, r15d
jne 0x140028035
mov ebx, 1
mov r12, qword [rsp + 0x60]
lea rcx, [rbp + 0x1208]
mov rdx, r12
mov r9d, ebx
mov r8d, edi
call fcn.140028230
mov r14d, eax
jmp 0x140028059
mov r12, qword [rsp + 0x60]
test r14d, r14d
je 0x1400281b6
lea rax, [rbp + 0x5a0]
mov dword [rsp + 0x28], 0x200
mov r9d, 2
mov qword [rsp + 0x20], rax
lea r8, str.EeuPciFilterUnInstallPath
mov rcx, 0xffffffff80000002
lea rdx, [0x14008d018]
call fcn.1400357b0
lea rax, [rbp + 0x7a0]
mov dword [rsp + 0x28], 0x200
mov r9d, 2
mov qword [rsp + 0x20], rax
lea r8, str.EeuClientPathForPciFilterUnInstall
mov rcx, 0xffffffff80000002
lea rdx, [0x14008d018]
call fcn.1400357b0
cmp dword [rsp + 0x54], 0
lea rax, str._amdpfdun.inf
lea rdx, str._amdkmpfd.inf
cmovne rdx, rax
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.SHLWAPI.dll_StrStrIA]
test rax, rax
je 0x14002812a
mov byte [rax], 0
lea r8, str.EeuPciFilterPackageInstallFolder
lea rax, [rbp + 0x1a0]
mov dword [rsp + 0x28], 0x200
mov r9d, 2
mov qword [rsp + 0x20], rax
lea rdx, [0x14008d018]
mov rcx, 0xffffffff80000002
call fcn.1400357b0
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov ebx, 1
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov dword [rsp + 0x40], ebx
lea r8, [0x140095b90]
mov rcx, 0xffffffff80000002
lea rdx, [0x14008d018]
call fcn.1400357b0
test eax, eax
jne 0x140028186
mov rcx, qword [0x1400b80b8]
test rcx, rcx
je 0x140028186
lea r9, str.Write_RegValue_EEU_REBOOT_POP_UP_REQUIRED_failed.
mov r8d, ebx
mov edx, 0x60004005
call fcn.1400324f0
cmp dword [0x1400b8134], 5
mov dword [0x1400b8164], ebx
mov dword [0x1400b821c], ebx
jge 0x1400281a5
mov ecx, 0x8086
call fcn.14001ebc0
cmp dword [rsp + 0x58], 0
jne 0x1400281b6
call fcn.14001e330
jmp 0x1400281b6
mov r14d, esi
mov rcx, qword [rsp + 0x48]
mov r13, qword [rsp + 0x12f8]
call fcn.1400394bc
test r12, r12
je 0x1400281f4
mov rcx, r12
call fcn.1400394bc
jmp 0x1400281f4
mov rcx, qword [0x1400b80b8]
test rcx, rcx
je 0x1400281f4
lea r8, str.InstallFilterDriver:_CreateInstallPackage_fails.
mov edx, 2
call fcn.140032710
lea rcx, [0x1400b8188]
call fcn.140035a80
mov eax, r14d
mov r12, qword [rsp + 0x12f0]
mov rbx, qword [rsp + 0x1300]
add rsp, 0x12c0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret