Function at 0x14001a1e0
Capabilities:
Delete file
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x250
mov rax, qword [0x1401f0010]
xor rax, rsp
mov qword [rsp + 0x240], rax
mov rsi, rdx
mov rbx, rcx
xor edx, edx
add rcx, 0x1a8
mov r8d, 0x104
call fcn.1401348e0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbx + 0x1a0], rax
test rax, rax
jne 0x14001a2de
xor edx, edx
lea rcx, [rsp + 0x130]
mov r8d, 0x104
call fcn.1401348e0
xor edx, edx
lea rcx, [rsp + 0x20]
mov r8d, 0x104
call fcn.1401348e0
mov r8d, 0x104
lea rdx, [rsp + 0x130]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x14001a28d
mov edx, 0x5c
lea rcx, [rsp + 0x130]
call fcn.140133e58
mov byte [rax], 0
lea r8, [rsp + 0x130]
mov edx, 0x104
lea rcx, [rsp + 0x20]
call fcn.14013ac00
lea r8, [0x1401c3a08]
mov edx, 0x104
lea rcx, [rsp + 0x20]
call fcn.14013ac60
mov r8, rsi
lea rcx, [rsp + 0x20]
mov edx, 0x104
call fcn.14013ac60
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbx + 0x1a0], rax
mov rcx, qword [rbx + 0x1a0]
test rcx, rcx
je 0x14001a4bf
lea rdx, str.Description
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 0x1a0]
lea rdx, str.Startup
mov qword [rbx + 0x2b0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 0x1a0]
lea rdx, str.Shutdown
mov qword [rbx + 0x2c0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 0x1a0]
lea rdx, str.SetParams
mov qword [rbx + 0x2b8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 0x1a0]
lea rdx, str.GetParams
mov qword [rbx + 0x2c8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 0x1a0]
lea rdx, str.TransformBuffer
mov qword [rbx + 0x2d0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 0x1a0]
lea rdx, str.RestoreBuffer
mov qword [rbx + 0x2d8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 0x1a0]
lea rdx, str.FreeBuffer
mov qword [rbx + 0x2e0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 0x1a0]
lea rdx, str.Reset
mov qword [rbx + 0x2e8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 0x1a0]
lea rdx, str.CreatePluginInterface
mov qword [rbx + 0x2f0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 0x1a0]
lea rdx, str.CreateIntegratedPluginInterface
mov qword [rbx + 0x2f8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 0x1a0]
lea rdx, [0x1401c3bb0]
mov qword [rbx + 0x300], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp qword [rbx + 0x2c0], 0
mov qword [rbx + 0x308], rax
je 0x14001a49c
cmp qword [rbx + 0x2b8], 0
je 0x14001a49c
cmp qword [rbx + 0x2c8], 0
je 0x14001a49c
cmp qword [rbx + 0x2d0], 0
je 0x14001a49c
cmp qword [rbx + 0x2d8], 0
je 0x14001a49c
cmp qword [rbx + 0x2e0], 0
je 0x14001a49c
cmp qword [rbx + 0x2e8], 0
je 0x14001a49c
cmp qword [rbx + 0x2f0], 0
je 0x14001a49c
cmp qword [rbx + 0x2f8], 0
je 0x14001a49c
cmp qword [rbx + 0x300], 0
je 0x14001a49c
test rax, rax
je 0x14001a49c
mov byte [rbx + 0x38], 1
mov al, 1
jmp 0x14001a4c1
mov rcx, qword [rbx + 0x1a0]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp byte [rbx + 0x1a8], 0
je 0x14001a4bf
lea rcx, [rbx + 0x1a8]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
xor al, al
mov rcx, qword [rsp + 0x240]
xor rcx, rsp
call fcn.140131ef0
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret