Function at 0x140001620
Capabilities:
Create process on windows
Set current directory

Disassembly:
push rbx
push rsi
mov eax, 0x1328
call fcn.14000d290
sub rsp, rax
mov dword [0x140023ae0], 0
mov dword [0x140023bc0], 0
xor ecx, ecx
lea rdx, str.This_package_was_built_with_the_Trial__evaluation__edition_of_Paquet_Builder_n._Distribution_of_this_file_is_prohibited._Please_upgrade_to_a_Registered_edition_of_Paquet_Builder_at:_nhttp:__www.gdgsoft.com
lea r8, [0x1400238c0]
mov r9d, 0x30
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, [0x14001b5a8]
lea rdx, [0x14001b5a4]
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.TOTALEXTFILE
lea rdx, [0x14001b5a4]
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.NEEDREBOOT
lea rdx, [0x14001b5a4]
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.SILENT
lea rdx, [0x14001b5a4]
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.ARCFILEVER
lea rdx, [0x14001b540]
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.ARCPRODVER
lea rdx, [0x14001b540]
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.USERPROFILE
lea rdx, str.USERPROFILE
call fcn.140015e50
lea rcx, str.SELLANG
mov rdx, qword [str.English]
call qword [sym.imp.pbcore64.dll_SetVar]
movzx ecx, word [0x14001e010]
lea rdx, [rsp + 0x12de]
mov r8d, 0xa
call fcn.14000d330
lea rcx, str.PBLANGID
lea rdx, [rsp + 0x12de]
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.DESTPATH
lea rdx, [0x14001b4dc]
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, [0x14001b4c8]
lea rdx, [0x14001b4c4]
call qword [sym.imp.pbcore64.dll_SetVar]
mov rax, qword [0x140023b00]
cmp qword [0x140023b20], rax
jne 0x1400017c8
lea rcx, str.PBDLGWIZLOOK
lea rdx, [0x14001b4c4]
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.PBWIZLABEL
lea rdx, str.nebil_samsung_tool_installer
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.PBDLGNEXTC
lea rdx, str.Next
call qword [sym.imp.pbcore64.dll_SetVar]
mov dword [0x1400238a0], 0
mov byte [0x140023ba0], 0
lea rcx, str.DESTPATH
lea rdx, str._SYSROOT_
call qword [sym.imp.pbcore64.dll_SetVar]
jmp 0x1400017f2
lea rcx, str.CorruptedPack
call qword [sym.imp.pbcore64.dll_EvalVar]
mov rdx, rax
xor ecx, ecx
lea r8, [0x1400238c0]
mov r9d, InitCommonControls
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x140001cf4
lea rcx, str.PBWELCRTF
lea rdx, str._PBSFXPATH_pbwelc_SELLANG_.md
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str._SILENT_
call qword [sym.imp.pbcore64.dll_EvalVar]
mov rdx, rax
lea r8, [0x14001b39c]
xor ecx, ecx
mov ax, word [rdx + rcx]
cmp ax, word [r8 + rcx]
jne 0x140001837
add rcx, 2
test ax, ax
jne 0x14000181f
xor eax, eax
jmp 0x14000183c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x140001858
lea rcx, str.dlgmodwelc
lea rdx, [0x1400010c0]
call qword [sym.imp.pbcore64.dll_ShowDialogBox]
mov ebx, eax
jmp 0x14000185a
xor ebx, ebx
cmp ebx, 2
je 0x140001ced
cmp ebx, 4
je 0x140001cf4
add dword [0x1400238a0], 1
lea rcx, str.PBDLGLICTXT
lea rdx, str._PBSFXPATH_pblic_SELLANG_.md
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.PBWIZTEXT
lea rdx, str._WizLicAgTitle__n_n_LicIntro
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.PBDLGLICEND
lea rdx, str.LicEnd
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str._SILENT_
call qword [sym.imp.pbcore64.dll_EvalVar]
mov rdx, rax
lea r8, [0x14001b39c]
xor ecx, ecx
mov ax, word [rdx + rcx]
cmp ax, word [r8 + rcx]
jne 0x1400018e0
add rcx, 2
test ax, ax
jne 0x1400018c8
xor eax, eax
jmp 0x1400018e5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x140001901
lea rcx, str.dlgmodlicag
lea rdx, [0x140001130]
call qword [sym.imp.pbcore64.dll_ShowDialogBox]
mov ebx, eax
jmp 0x140001903
xor ebx, ebx
mov eax, ebx
cmp eax, 2
je 0x140001ced
cmp eax, 3
je 0x140001925
cmp eax, 4
je 0x140001cf4
add dword [0x1400238a0], 1
jmp 0x140001931
sub dword [0x1400238a0], 1
jmp 0x1400017f2
lea rcx, str.DLGSELPATH
lea rdx, str._DESTPATH_
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.PBWIZTEXT
lea rdx, str._WizDirTitle__n_n_BrowseFolders
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.DLGSELPROMPT2
lea rdx, str.AskBrowseFolders
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.PBDISABDIR
lea rdx, [0x14001b4c4]
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str._SILENT_
call qword [sym.imp.pbcore64.dll_EvalVar]
mov rdx, rax
lea r8, [0x14001b39c]
xor ecx, ecx
mov ax, word [rdx + rcx]
cmp ax, word [r8 + rcx]
jne 0x1400019b2
add rcx, 2
test ax, ax
jne 0x14000199a
xor eax, eax
jmp 0x1400019b7
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x140001a4b
lea rcx, str._SILENT_
call qword [sym.imp.pbcore64.dll_EvalVar]
mov rdx, rax
lea r8, [0x14001b39c]
xor ecx, ecx
mov ax, word [rdx + rcx]
cmp ax, word [r8 + rcx]
jne 0x1400019f0
add rcx, 2
test ax, ax
jne 0x1400019d8
xor eax, eax
jmp 0x1400019f5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x140001a11
lea rcx, str.dlgmodseldir
lea rdx, [0x1400011b0]
call qword [sym.imp.pbcore64.dll_ShowDialogBox]
mov ebx, eax
jmp 0x140001a13
xor ebx, ebx
mov eax, ebx
cmp eax, 2
je 0x140001ced
cmp eax, 3
je 0x140001b72
cmp eax, 4
je 0x140001cf4
lea rcx, str.DESTPATH
lea rdx, str._DLGSELPATH_
call qword [sym.imp.pbcore64.dll_SetVar]
add dword [0x1400238a0], 1
lea rcx, str._SILENT_
call qword [sym.imp.pbcore64.dll_EvalVar]
mov rdx, rax
lea r8, [0x14001b39c]
xor ecx, ecx
mov ax, word [rdx + rcx]
cmp ax, word [r8 + rcx]
jne 0x140001a7c
add rcx, 2
test ax, ax
jne 0x140001a64
xor eax, eax
jmp 0x140001a81
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete sil
lea rcx, str.PBEXTTEXT
lea rdx, str.Extracting
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.PBEXTHC
lea rdx, [0x14001b5a4]
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.PBWIZTEXT
lea rdx, str._WizProgressTitle__n_n_WizProgressDesc
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str._DESTPATH_
lea rdx, [rsp + 0xc80]
mov r8d, 0x61c
call qword [sym.imp.pbcore64.dll_EvalVarBuf]
mov eax, dword [0x140023b40]
add eax, 0x12
mov dword [rsp + 0x44], eax
lea rax, [0x1400014d0]
mov qword [rsp + 0x28], rax
lea rax, [0x1400013f0]
mov qword [rsp + 0x20], rax
lea rcx, [0x140024240]
lea rdx, [rsp + 0xc80]
lea r8, [rsp + 0x44]
mov r9b, sil
call fcn.1400027e0
mov esi, eax
mov ecx, dword [0x140023ae0]
lea rdx, [rsp + 0x129c]
mov r8d, 0xa
call fcn.14000d330
lea rcx, str.TOTALEXTFILE
lea rdx, [rsp + 0x129c]
call qword [sym.imp.pbcore64.dll_SetVar]
cmp byte [0x140024ee0], 0
jne 0x140001ced
test esi, esi
jne 0x140001b7e
cmp dword [0x1400238a0], 0xffffec78
je 0x140001931
jmp 0x140001bd7
sub dword [0x1400238a0], 1
jmp 0x140001887
mov ecx, esi
lea rdx, [rsp + 0x622]
mov r8d, 0xa
call fcn.14000d330
lea rcx, str.PBEXTERR
lea rdx, [rsp + 0x622]
call qword [sym.imp.pbcore64.dll_SetVar]
lea rcx, str.ErrorUnpacking__PBEXTERR_
call qword [sym.imp.pbcore64.dll_EvalVar]
mov rdx, rax
xor ecx, ecx
lea r8, [0x1400238c0]
mov r9d, InitCommonControls
call qword [sym.imp.USER32.dll_MessageBoxW]
mov eax, 1
jmp 0x140001cf9
mov dword [0x1400238a0], 0
mov dword [rsp + 0x38], 0
lea rax, str._DESTPATH__samsung_tool_by_nebaunlocker_protected___Shortcut.lnk
mov qword [rsp + 0x30], rax
lea rax, [0x14001b4dc]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
lea rcx, str._DESTPATH__samsung_tool_by_nebaunlocker_protected___Shortcut.lnk
lea rdx, [0x14001b4dc]
lea r8, str._SHORTCUTPATH_Open_samsung_tool_by_nebaunlocker_protected___Shortcut.lnk
lea r9, str.samsung_tool_by_nebaunlocker__Shortcut.lnk
call fcn.140002880
lea rcx, str._DESTPATH__
lea rdx, [rsp + 0x48]
mov r8d, 0x61c
call qword [sym.imp.pbcore64.dll_EvalVarBuf]
lea rcx, [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rcx, str.t.me_nebaunlocker
lea rdx, [rsp + 0x664]
mov r8d, 0x61c
call qword [sym.imp.pbcore64.dll_EvalVarBuf]
lea rcx, [0x14001b4dc]
lea rdx, [rsp + 0xc80]
mov r8d, 0x61c
call qword [sym.imp.pbcore64.dll_EvalVarBuf]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
lea r8, [rsp + 0x664]
lea r9, [rsp + 0xc80]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [0x1400238a0], 0xffffec78
je 0x140001bd7
cmp ebx, 0xffffec78
je 0x140001cce
cmp ebx, 0xffffec77
je 0x140001cf4
lea rcx, str._EXITCODE_
call qword [sym.imp.pbcore64.dll_EvalVar]
mov rcx, rax
xor edx, edx
mov r8d, 0xa
call fcn.14000d420
jmp 0x140001cf9
mov eax, 2
jmp 0x140001cf9
mov eax, 3
add rsp, 0x1328
pop rsi
pop rbx
ret