Function at 0x1400865c0
Capabilities:
Read .ini file
Set file attributes

Disassembly:
push rbp
push r13
push r14
lea rbp, [rsp - 0x10b90]
mov eax, 0x10c90
call fcn.14024c240
sub rsp, rax
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rsp + 0x10cb0], rbx
mov qword [rsp + 0x10cb8], rsi
mov qword [rsp + 0x10cc0], rdi
mov qword [rsp + 0x10cc8], r12
mov rax, qword [0x140398250]
xor rax, rsp
mov qword [rbp + 0x10b80], rax
xor r8d, r8d
lea rdx, str.CBaseFuncSub::FS_CheckInstalledDriverForGetDevInfo
lea rcx, [rsp + 0x40]
call fcn.1400075a0
nop
lea r14, [fcn.14001fec0]
mov qword [rsp + 0x20], r14
lea r9, [0x1400058c0]
mov edx, 8
lea r8d, [rdx + 0x38]
lea rcx, [rbp - 0x80]
call fcn.1402472e0
nop
xor r13d, r13d
lea rcx, [rsp + 0x50]
call fcn.140105848
nop
xor edx, edx
mov r8d, 0xfffe
lea rcx, [rbp + 0xb80]
call fcn.14024b970
mov rcx, qword [0x1403b9750]
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rdi, qword [rax]
lea r8, [rbp + 0x380]
lea rdx, str.TEMPPATH
mov rcx, rax
call qword [rdi + 0x18]
lea r8, str.INSDRV.INI
mov edx, 0x400
lea rcx, [rbp + 0x380]
call fcn.140246470
lea edx, [r13 + 0x20]
lea rcx, [rbp + 0x380]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea r9, [rbp + 0x380]
mov r8d, 0x7fff
lea rdx, [rbp + 0xb80]
lea rcx, str.GetDevInfoPrinters
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionW]
lea rdx, [rbp + 0xb80]
lea eax, [r13 + 9]
nop dword [rax + rax]
cmp word [rdx], 0
jne 0x140086700
cmp word [rdx + 2], 0
je 0x140086706
mov word [rdx], ax
add rdx, 2
jmp 0x1400866f0
mov qword [rsp + 0x38], 0
lea r8, [rsp + 0x38]
lea rdx, [0x1402e61bc]
lea rcx, [rbp + 0xb80]
call fcn.140247bf4
mov rbx, rax
test rax, rax
je 0x140086814
call fcn.140102a14
mov rdx, rax
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
je 0x140086809
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
test rbx, rbx
je 0x1400867a0
test rbx, 0xffffffffffff0000
jne 0x14008678c
movzx edi, bx
mov ecx, edi
call fcn.1401027e8
test rax, rax
je 0x1400867b3
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140005b00
jmp 0x1400867b3
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
jmp 0x1400867a2
xor ecx, ecx
mov r8d, ecx
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140005d50
nop
lea r8, [rsp + 0x30]
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.140105e58
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400867e8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r8, [rsp + 0x38]
lea rdx, [0x1402e61bc]
xor ecx, ecx
call fcn.140247bf4
mov rbx, rax
test rax, rax
jne 0x140086733
jmp 0x140086814
mov ecx, 0x80004005
call fcn.140005210
int3
mov rcx, qword [0x1403b9750]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x28]
mov r12d, eax
xor esi, esi
test eax, eax
jle 0x1400868e0
nop word [rax + rax]
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x180]
call fcn.14024b970
mov rcx, qword [0x1403b9750]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rdi, qword [rax]
mov edx, esi
mov rcx, rax
call qword [rdi + 0x68]
lea r8, [rax + 8]
mov edx, pe_nt_image_headers64
lea rcx, [rbp + 0x180]
call fcn.140246628
xor ebx, ebx
xor edi, edi
mov rcx, qword [rsp + 0x60]
test rcx, rcx
jle 0x1400868ce
nop
test rdi, rdi
js 0x1400868da
cmp rdi, rcx
jge 0x1400868da
mov rdx, qword [rsp + 0x58]
mov rdx, qword [rdx + rdi*8]
lea rcx, [rbp + 0x180]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x1400868c8
inc ebx
inc rdi
movsxd rax, ebx
mov rcx, qword [rsp + 0x60]
cmp rax, rcx
jl 0x140086890
jmp 0x1400868ce
mov r13d, 1
inc esi
cmp esi, r12d
jge 0x1400868e0
jmp 0x140086840
call fcn.140102ffc
int3
mov r9d, r13d
lea r8, str.return___08x
mov edx, 2
lea rcx, [rsp + 0x40]
call fcn.140007780
nop
lea rcx, [rsp + 0x50]
call fcn.140105ce4
nop
mov r9, r14
mov edx, 8
lea r8d, [rdx + 0x38]
lea rcx, [rbp - 0x80]
call fcn.140247280
nop
lea rcx, [rsp + 0x40]
call fcn.140007730
mov eax, r13d
mov rcx, qword [rbp + 0x10b80]
xor rcx, rsp
call fcn.140245660
lea r11, [rsp + 0x10c90]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop r13
pop rbp
ret