Function at 0x140028324
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f50]
mov eax, 0x2050
call fcn.14003cf80
sub rsp, rax
mov rax, qword [0x1400502a8]
xor rax, rsp
mov qword [rbp + 0x1f40], rax
xor edi, edi
mov qword [rsp + 0x38], r8
mov r14, r9
mov rsi, r8
mov r12, rdx
lea r13d, [rdi + 1]
test r9, r9
je 0x14002989c
cmp qword [rdx], rdi
je 0x1400298b2
mov rcx, qword [r8]
test rcx, rcx
je 0x14002989c
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14002989c
mov rcx, qword [rsi]
lea rdx, str.ServiceInfo
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140028527
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400283cd
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, [0x1400467e8]
lea rcx, [rsp + 0x30]
call fcn.14001bed0
or rsi, 0xffffffffffffffff
lea r15d, [rsi + 3]
test eax, eax
jne 0x140028467
mov rcx, qword [r14]
test rcx, rcx
je 0x1400283ff
call fcn.14003c2b8
mov qword [r14], rdi
lea rax, [rsp + 0x40]
mov rbx, rsi
inc rbx
cmp word [rax + rbx*2], di
jne 0x140028407
add rbx, r13
mov rax, r15
mul rbx
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [r14], rax
test rax, rax
je 0x140028451
lea r8, [rsp + 0x40]
mov rdx, rbx
mov rcx, rax
call fcn.140001470
test eax, eax
jns 0x140028451
mov rcx, qword [r14]
test rcx, rcx
je 0x140028451
call fcn.14003c2b8
mov qword [r14], rdi
lea r8, [rsp + 0x40]
mov ecx, 3
lea rdx, str.The_XML_default_service_is:__S._r_n
call fcn.140016868
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028482
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.ContentPartner
lea rcx, [rsp + 0x30]
call fcn.14001bed0
test eax, eax
jne 0x140029873
lea rbx, [r14 + 0xa0]
test rbx, rbx
je 0x140029873
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400284c0
call fcn.14003c2b8
mov qword [rbx], rdi
lea rax, [rsp + 0x40]
mov rdi, rsi
xor ecx, ecx
inc rdi
cmp word [rax + rdi*2], cx
jne 0x1400284ca
add rdi, r13
mov rax, r15
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
xor esi, esi
mov qword [rbx], rax
test rax, rax
je 0x140029873
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
test eax, eax
jns 0x140029873
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029873
call fcn.14003c2b8
mov qword [rbx], rsi
jmp 0x140029873
mov rcx, qword [rsi]
lea rdx, str.FriendlyName
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140028582
mov rcx, qword [r12]
lea rdx, [rsp + 0x38]
mov qword [rsp + 0x38], rdi
mov rax, qword [rcx]
mov rax, qword [rax + 0xd0]
call qword [0x14003f118]
mov r13d, eax
test eax, eax
js 0x1400285e6
mov rdx, qword [rsp + 0x38]
lea rcx, [r14 + 0x18]
call fcn.140016cd8
lea r8, str.FriendlyName
lea rdx, [0x140045e30]
jmp 0x1400285d7
mov rcx, qword [rsi]
lea rdx, str.DESCRIPTION
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x1400285f6
mov rcx, qword [r12]
lea rdx, [rsp + 0x38]
mov qword [rsp + 0x38], rdi
mov rax, qword [rcx]
mov rax, qword [rax + 0xd0]
call qword [0x14003f118]
mov r13d, eax
test eax, eax
js 0x1400285e6
mov rdx, qword [rsp + 0x38]
lea rcx, [r14 + 0x20]
call fcn.140016cd8
lea r8, str.DESCRIPTION
lea rdx, str.XML_Parser:_Parsing_element__S:__S._r_n
mov r9, qword [rsp + 0x38]
mov ecx, 6
call fcn.140016868
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x140029878
mov rcx, qword [rsi]
lea rdx, str.Color
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x1400287ac
mov rcx, qword [r12]
mov word [rsp + 0x40], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x14002862e
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.MediaPlayer
lea rcx, [rsp + 0x30]
call fcn.14001bed0
or rsi, 0xffffffffffffffff
lea r15d, [rsi + 7]
test eax, eax
jne 0x1400286e7
lea rbx, [r14 + 0xc8]
test rbx, rbx
je 0x1400286cc
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028670
call fcn.14003c2b8
mov qword [rbx], rdi
lea rcx, [rsp + 0x40]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x14002867a
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x1400286ca
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x1400286cc
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400286cc
call fcn.14003c2b8
mov qword [rbx], rdi
jmp 0x1400286cc
xor edi, edi
lea r9, [rsp + 0x40]
mov ecx, r15d
lea r8, str.MediaPlayer
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.140016868
mov rcx, qword [r12]
mov word [rsp + 0x40], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028707
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.MediaPlayerText
lea rcx, [rsp + 0x30]
call fcn.14001bed0
test eax, eax
jne 0x140029873
lea rbx, [r14 + 0xd0]
test rbx, rbx
je 0x14002879b
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028741
call fcn.14003c2b8
mov qword [rbx], rdi
lea rax, [rsp + 0x40]
mov rdi, rsi
xor r14d, r14d
inc rdi
cmp word [rax + rdi*2], r14w
jne 0x14002874c
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x14002879b
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x14002879b
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002879b
call fcn.14003c2b8
mov qword [rbx], rdi
lea r9, [rsp + 0x40]
lea r8, str.MediaPlayerText
jmp 0x140029864
mov rcx, qword [rsi]
lea rdx, str.ServiceTask1
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140028a21
mov rcx, qword [r12]
mov word [rsp + 0x40], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400287e4
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.ButtonText
lea rcx, [rsp + 0x30]
call fcn.14001bcb4
or rsi, 0xffffffffffffffff
lea r15d, [rsi + 7]
test eax, eax
jne 0x14002895c
lea rax, [rsp + 0x40]
mov rdx, rsi
inc rdx
cmp word [rax + rdx*2], di
jne 0x140028812
cmp rdx, 0x104
jae 0x1400288c9
mov r8d, r13d
mov rcx, rdi
movzx eax, word [rsp + rcx*2 + 0x40]
cmp ax, 0x5c
je 0x14002885b
cmp word [rsp + rcx*2 + 0x42], 0x6e
je 0x14002885b
cmp rcx, rdx
jae 0x140028858
mov word [rbp + rcx*2 + 0xf40], ax
add rcx, r13
cmp rcx, rdx
jbe 0x14002882e
jmp 0x14002885b
mov r8d, edi
cmp rcx, rdx
sbb eax, eax
test r8d, eax
je 0x14002889d
mov r8d, 0xa
lea rax, [rcx + 2]
mov word [rbp + rcx*2 + 0xf40], r8w
add rcx, r13
jmp 0x140028898
movzx r8d, word [rsp + rax*2 + 0x40]
test r8w, r8w
je 0x14002889d
mov word [rbp + rcx*2 + 0xf40], r8w
add rcx, r13
add rax, r13
cmp rax, rdx
jbe 0x14002887d
add rcx, rcx
cmp rcx, 0x20a
jae 0x1400298ea
mov word [rbp + rcx + 0xf40], di
lea r8, [rbp + 0xf40]
lea rcx, [rsp + 0x40]
inc rdx
call fcn.140001470
lea rbx, [r14 + 0xd8]
test rbx, rbx
je 0x140028941
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400288e5
call fcn.14003c2b8
mov qword [rbx], rdi
lea rcx, [rsp + 0x40]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x1400288ef
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x14002893f
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140028941
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028941
call fcn.14003c2b8
mov qword [rbx], rdi
jmp 0x140028941
xor edi, edi
lea r9, [rsp + 0x40]
mov ecx, r15d
lea r8, str.ButtonText
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.140016868
mov rcx, qword [r12]
mov word [rsp + 0x40], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x14002897c
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.ButtonTip
lea rcx, [rsp + 0x30]
call fcn.14001bcb4
test eax, eax
jne 0x140029873
lea rbx, [r14 + 0xf0]
test rbx, rbx
je 0x140028a10
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400289b6
call fcn.14003c2b8
mov qword [rbx], rdi
lea rax, [rsp + 0x40]
mov rdi, rsi
xor r14d, r14d
inc rdi
cmp word [rax + rdi*2], r14w
jne 0x1400289c1
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x140028a10
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140028a10
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028a10
call fcn.14003c2b8
mov qword [rbx], rdi
lea r9, [rsp + 0x40]
lea r8, str.ButtonTip
jmp 0x140029864
mov rcx, qword [rsi]
lea rdx, str.ServiceTask2
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140028c49
mov rcx, qword [r12]
mov word [rsp + 0x40], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028a59
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.ButtonText
lea rcx, [rsp + 0x30]
call fcn.14001bcb4
or rsi, 0xffffffffffffffff
lea r15d, [rsi + 7]
test eax, eax
jne 0x140028bd1
lea rax, [rsp + 0x40]
mov rdx, rsi
inc rdx
cmp word [rax + rdx*2], di
jne 0x140028a87
cmp rdx, 0x104
jae 0x140028b3e
mov r8d, r13d
mov rcx, rdi
movzx eax, word [rsp + rcx*2 + 0x40]
cmp ax, 0x5c
je 0x140028ad0
cmp word [rsp + rcx*2 + 0x42], 0x6e
je 0x140028ad0
cmp rcx, rdx
jae 0x140028acd
mov word [rbp + rcx*2 + 0xf40], ax
add rcx, r13
cmp rcx, rdx
jbe 0x140028aa3
jmp 0x140028ad0
mov r8d, edi
cmp rcx, rdx
sbb eax, eax
test r8d, eax
je 0x140028b12
mov r8d, 0xa
lea rax, [rcx + 2]
mov word [rbp + rcx*2 + 0xf40], r8w
add rcx, r13
jmp 0x140028b0d
movzx r8d, word [rsp + rax*2 + 0x40]
test r8w, r8w
je 0x140028b12
mov word [rbp + rcx*2 + 0xf40], r8w
add rcx, r13
add rax, r13
cmp rax, rdx
jbe 0x140028af2
add rcx, rcx
cmp rcx, 0x20a
jae 0x1400298ea
mov word [rbp + rcx + 0xf40], di
lea r8, [rbp + 0xf40]
lea rcx, [rsp + 0x40]
inc rdx
call fcn.140001470
lea rbx, [r14 + 0xe0]
test rbx, rbx
je 0x140028bb6
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028b5a
call fcn.14003c2b8
mov qword [rbx], rdi
lea rcx, [rsp + 0x40]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140028b64
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x140028bb4
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140028bb6
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028bb6
call fcn.14003c2b8
mov qword [rbx], rdi
jmp 0x140028bb6
xor edi, edi
lea r9, [rsp + 0x40]
mov ecx, r15d
lea r8, str.ButtonText
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.140016868
mov rcx, qword [r12]
mov word [rsp + 0x40], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028bf1
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.ButtonTip
lea rcx, [rsp + 0x30]
call fcn.14001bcb4
test eax, eax
jne 0x140029873
lea rbx, [r14 + 0xf8]
test rbx, rbx
je 0x140028a10
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028c2f
call fcn.14003c2b8
mov qword [rbx], rdi
lea rax, [rsp + 0x40]
mov rdi, rsi
xor r14d, r14d
inc rdi
cmp word [rax + rdi*2], r14w
jne 0x140028c3a
jmp 0x1400289cb
mov rcx, qword [rsi]
lea rdx, str.ServiceTask3
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140028e71
mov rcx, qword [r12]
mov word [rsp + 0x40], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028c81
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.ButtonText
lea rcx, [rsp + 0x30]
call fcn.14001bcb4
or rsi, 0xffffffffffffffff
lea r15d, [rsi + 7]
test eax, eax
jne 0x140028df9
lea rax, [rsp + 0x40]
mov rdx, rsi
inc rdx
cmp word [rax + rdx*2], di
jne 0x140028caf
cmp rdx, 0x104
jae 0x140028d66
mov r8d, r13d
mov rcx, rdi
movzx eax, word [rsp + rcx*2 + 0x40]
cmp ax, 0x5c
je 0x140028cf8
cmp word [rsp + rcx*2 + 0x42], 0x6e
je 0x140028cf8
cmp rcx, rdx
jae 0x140028cf5
mov word [rbp + rcx*2 + 0xf40], ax
add rcx, r13
cmp rcx, rdx
jbe 0x140028ccb
jmp 0x140028cf8
mov r8d, edi
cmp rcx, rdx
sbb eax, eax
test r8d, eax
je 0x140028d3a
mov r8d, 0xa
lea rax, [rcx + 2]
mov word [rbp + rcx*2 + 0xf40], r8w
add rcx, r13
jmp 0x140028d35
movzx r8d, word [rsp + rax*2 + 0x40]
test r8w, r8w
je 0x140028d3a
mov word [rbp + rcx*2 + 0xf40], r8w
add rcx, r13
add rax, r13
cmp rax, rdx
jbe 0x140028d1a
add rcx, rcx
cmp rcx, 0x20a
jae 0x1400298ea
mov word [rbp + rcx + 0xf40], di
lea r8, [rbp + 0xf40]
lea rcx, [rsp + 0x40]
inc rdx
call fcn.140001470
lea rbx, [r14 + 0xe8]
test rbx, rbx
je 0x140028dde
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028d82
call fcn.14003c2b8
mov qword [rbx], rdi
lea rcx, [rsp + 0x40]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140028d8c
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x140028ddc
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140028dde
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028dde
call fcn.14003c2b8
mov qword [rbx], rdi
jmp 0x140028dde
xor edi, edi
lea r9, [rsp + 0x40]
mov ecx, r15d
lea r8, str.ButtonText
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.140016868
mov rcx, qword [r12]
mov word [rsp + 0x40], di
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028e19
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.ButtonTip
lea rcx, [rsp + 0x30]
call fcn.14001bcb4
test eax, eax
jne 0x140029873
lea rbx, [r14 + 0x100]
test rbx, rbx
je 0x140028a10
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028e57
call fcn.14003c2b8
mov qword [rbx], rdi
lea rax, [rsp + 0x40]
mov rdi, rsi
xor r14d, r14d
inc rdi
cmp word [rax + rdi*2], r14w
jne 0x140028e62
jmp 0x1400289cb
mov rcx, qword [rsi]
lea rdx, str.Install
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140029437
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028ea4
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.CodeURL
lea rcx, [rsp + 0x30]
call fcn.14001bed0
or rsi, 0xffffffffffffffff
lea r15d, [rsi + 7]
test eax, eax
jne 0x140028f5a
lea rbx, [r14 + 0x48]
test rbx, rbx
je 0x140028f3f
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028ee3
call fcn.14003c2b8
mov qword [rbx], rdi
lea rcx, [rsp + 0x40]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140028eed
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x140028f3d
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140028f3f
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028f3f
call fcn.14003c2b8
mov qword [rbx], rdi
jmp 0x140028f3f
xor edi, edi
lea r9, [rsp + 0x40]
mov ecx, r15d
lea r8, str.CodeURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.140016868
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140028f75
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.CatalogURL
lea rcx, [rsp + 0x30]
call fcn.14001bed0
test eax, eax
jne 0x140029023
lea rbx, [r14 + 0x50]
test rbx, rbx
je 0x140029008
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028fac
call fcn.14003c2b8
mov qword [rbx], rdi
lea rcx, [rsp + 0x40]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140028fb6
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x140029006
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140029008
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029008
call fcn.14003c2b8
mov qword [rbx], rdi
jmp 0x140029008
xor edi, edi
lea r9, [rsp + 0x40]
mov ecx, r15d
lea r8, str.CatalogURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.140016868
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x14002903e
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.EULAURL
lea rcx, [rsp + 0x30]
call fcn.14001bed0
test eax, eax
jne 0x1400290ec
lea rbx, [r14 + 0x28]
test rbx, rbx
je 0x1400290d1
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029075
call fcn.14003c2b8
mov qword [rbx], rdi
lea rcx, [rsp + 0x40]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x14002907f
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x1400290cf
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x1400290d1
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400290d1
call fcn.14003c2b8
mov qword [rbx], rdi
jmp 0x1400290d1
xor edi, edi
lea r9, [rsp + 0x40]
mov ecx, r15d
lea r8, str.EULAURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.140016868
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140029107
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.PrivacyInfoURL
lea rcx, [rsp + 0x30]
call fcn.14001bed0
test eax, eax
jne 0x1400291b5
lea rbx, [r14 + 0x40]
test rbx, rbx
je 0x14002919a
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002913e
call fcn.14003c2b8
mov qword [rbx], rdi
lea rcx, [rsp + 0x40]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140029148
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x140029198
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x14002919a
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002919a
call fcn.14003c2b8
mov qword [rbx], rdi
jmp 0x14002919a
xor edi, edi
lea r9, [rsp + 0x40]
mov ecx, r15d
lea r8, str.PrivacyInfoURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.140016868
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400291d0
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.InstallApp
lea rcx, [rsp + 0x30]
call fcn.14001bed0
test eax, eax
jne 0x140029283
lea rbx, [r14 + 0x88]
test rbx, rbx
je 0x140029266
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002920a
call fcn.14003c2b8
mov qword [rbx], rdi
lea rcx, [rsp + 0x40]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140029214
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x140029264
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140029266
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029266
call fcn.14003c2b8
mov qword [rbx], rdi
jmp 0x140029266
xor edi, edi
lea r9, [rsp + 0x40]
mov ecx, r15d
lea r8, str.InstallApp
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.140016868
jmp 0x1400292e4
mov rax, qword [r14 + 0x48]
test rax, rax
je 0x140029298
movzx eax, word [rax]
cmp ax, word [0x14003f4a0]
jne 0x1400292e4
mov rcx, qword [0x140050310]
cmp rcx, rsi
jne 0x1400292ba
mov edx, 2
call fcn.140016148
mov rcx, qword [0x140050310]
cmp rcx, rsi
je 0x1400292e4
cmp dword [0x1400516e0], 2
jl 0x1400292e4
lea r9, [rsp + 0x30]
mov dword [rsp + 0x30], edi
mov r8d, 0x52
mov qword [rsp + 0x20], rdi
lea rdx, str.ERROR:_Code_URL_specified_but_no_InstallApp_indicated.__Install_is_not_possible._r_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400292ff
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.InstallData
lea rcx, [rsp + 0x30]
call fcn.14001bed0
test eax, eax
jne 0x1400293ac
lea rbx, [r14 + 0x90]
test rbx, rbx
je 0x140029391
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029339
call fcn.14003c2b8
mov qword [rbx], rdi
lea rcx, [rsp + 0x40]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140029343
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x140029391
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140029391
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029391
call fcn.14003c2b8
mov qword [rbx], rdi
lea r9, [rsp + 0x40]
mov ecx, r15d
lea r8, str.InstallData
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.140016868
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400293c7
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rsp + 0x40]
lea rdx, str.NonAdmin
lea rcx, [rsp + 0x30]
call fcn.14001bed0
test eax, eax
jne 0x140029873
lea rdx, [rsp + 0x40]
lea rcx, [0x140040b28]
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
je 0x14002942b
lea rdx, [rsp + 0x40]
lea rcx, [0x14004012c]
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
je 0x14002942b
lea rdx, [rsp + 0x40]
lea rcx, str.true
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140029873
mov dword [r14 + 0x11c], r13d
jmp 0x140029873
mov rcx, qword [rsi]
lea rdx, str.Image
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x140029878
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x14002946a
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0xf40]
lea rdx, str.MenuURL
lea rcx, [rsp + 0x30]
call fcn.14001bed0
or rsi, 0xffffffffffffffff
lea r15d, [rsi + 7]
test eax, eax
jne 0x14002952b
lea rbx, [r14 + 0xa8]
test rbx, rbx
je 0x14002950e
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400294ae
call fcn.14003c2b8
mov qword [rbx], rdi
lea rcx, [rbp + 0xf40]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x1400294ba
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x14002950c
lea r8, [rbp + 0xf40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x14002950e
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002950e
call fcn.14003c2b8
mov qword [rbx], rdi
jmp 0x14002950e
xor edi, edi
lea r9, [rbp + 0xf40]
mov ecx, r15d
lea r8, str.MenuURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.140016868
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x140029546
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0xf40]
lea rdx, str.ServiceSmallURL
lea rcx, [rsp + 0x30]
call fcn.14001bed0
test eax, eax
jne 0x1400295ff
lea rbx, [r14 + 0xb0]
test rbx, rbx
je 0x1400295e2
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029582
call fcn.14003c2b8
mov qword [rbx], rdi
lea rcx, [rbp + 0xf40]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x14002958e
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x1400295e0
lea r8, [rbp + 0xf40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x1400295e2
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400295e2
call fcn.14003c2b8
mov qword [rbx], rdi
jmp 0x1400295e2
xor edi, edi
lea r9, [rbp + 0xf40]
mov ecx, r15d
lea r8, str.ServiceSmallURL
lea rdx, str.XML_Parser:_Parsing_Element__S:__S._r_n
call fcn.140016868
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x14002961a
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0xf40]
lea rdx, str.ServiceLargeURL
lea rcx, [rsp + 0x30]
call fcn.14001bed0
test eax, eax
jne 0x1400296d3
lea rbx, [r14 + 0xb8]
test rbx, rbx
je 0x1400296b6
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029656
call fcn.14003c2b8
mov qword [rbx], rdi
lea rcx, [rbp + 0xf40]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140029662
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x1400296b4
lea r8, [rbp + 0xf40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x1400296b6
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400296b6
call fcn.14003c2b8
mov qword [rbx], rdi
jmp 0x1400296b6
xor edi, edi
lea r9, [rbp + 0xf40]
mov ecx, r15d
lea r8, str.ServiceLargeURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.140016868
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400296ee
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0xf40]
lea rdx, str.SetupURL
lea rcx, [rsp + 0x30]
call fcn.14001bed0
test eax, eax
jne 0x1400297a4
lea rbx, [r14 + 0x30]
test rbx, rbx
je 0x140029787
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029727
call fcn.14003c2b8
mov qword [rbx], rdi
lea rcx, [rbp + 0xf40]
mov rdi, rsi
xor eax, eax
inc rdi
cmp word [rcx + rdi*2], ax
jne 0x140029733
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x140029785
lea r8, [rbp + 0xf40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140029787
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029787
call fcn.14003c2b8
mov qword [rbx], rdi
jmp 0x140029787
xor edi, edi
lea r9, [rbp + 0xf40]
mov ecx, r15d
lea r8, str.SetupURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
call fcn.140016868
mov rcx, qword [r12]
mov qword [rsp + 0x30], rcx
test rcx, rcx
je 0x1400297bf
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x14003f118]
lea r8, [rbp + 0xf40]
lea rdx, str.EulaURL
lea rcx, [rsp + 0x30]
call fcn.14001bed0
test eax, eax
jne 0x140029873
lea rbx, [r14 + 0x38]
test rbx, rbx
je 0x140029856
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400297f8
call fcn.14003c2b8
mov qword [rbx], rdi
lea rax, [rbp + 0xf40]
mov rdi, rsi
xor r14d, r14d
inc rdi
cmp word [rax + rdi*2], r14w
jne 0x140029805
add rdi, r13
mov eax, 2
mul rdi
cmovo rax, rsi
mov rcx, rax
call fcn.14003c310
mov qword [rbx], rax
test rax, rax
je 0x140029856
lea r8, [rbp + 0xf40]
mov rdx, rdi
mov rcx, rax
call fcn.140001470
xor edi, edi
test eax, eax
jns 0x140029856
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029856
call fcn.14003c2b8
mov qword [rbx], rdi
lea r9, [rbp + 0xf40]
lea r8, str.EULAURL
lea rdx, str.XML_Parser:_Parsing_child_element__S:__S._r_n
mov ecx, r15d
call fcn.140016868
mov rsi, qword [rsp + 0x38]
mov rcx, qword [r12]
test rcx, rcx
je 0x14002988e
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [0x14003f118]
mov rcx, qword [rsi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, r13d
jmp 0x1400298c0
mov rcx, qword [r12]
test rcx, rcx
je 0x1400298b2
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [0x14003f118]
mov rcx, qword [rsi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, 0x80004003
mov rcx, qword [rbp + 0x1f40]
xor rcx, rsp
call fcn.14003c6c0
mov rbx, qword [rsp + 0x2090]
add rsp, 0x2050
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14003c898
int3