Function at 0x1400417b0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2e0
movaps xmmword [rsp + 0x2d0], xmm6
mov rax, qword [0x1401c73e8]
xor rax, rsp
mov qword [rsp + 0x2c8], rax
mov r14, r8
mov esi, edx
xor r13d, r13d
mov dword [rsp + 0x30], r13d
mov byte [rsp + 0x34], 1
call fcn.140041640
nop
mov qword [rsp + 0x228], r13
lea rcx, [rsp + 0x228]
call fcn.140044270
test al, al
jne 0x1400418ce
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_AcquireSRWLockShared
mov rax, qword [0x1401dd1a8]
test rax, rax
je 0x140041835
lock inc dword [rax + 8]
movups xmm6, xmmword [0x1401dd1a0]
movups xmmword [rsp + 0xa0], xmm6
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_ReleaseSRWLockShared
nop
movq rcx, xmm6
mov rax, qword [rcx]
lea rdx, str.Failed_to_initialize_the_script_host
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xa8]
mov rdi, 0xffffffffffffffff
test rcx, rcx
je 0x1400418af
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400418af
mov rbx, qword [rsp + 0xa8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400418af
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x228]
test rcx, rcx
je 0x1400418c2
call fcn.14009e7a0
nop
call fcn.140041670
mov eax, edi
jmp 0x1400428b5
lea r15, str.Main_script
mov qword [rsp + 0x190], r15
lea r12, str.Initialization
mov qword [rsp + 0x198], r12
mov byte [rsp + 0x1a0], 1
test byte [0x1401dc780], 1
je 0x140041910
mov r9, r15
mov r8, r12
lea rdx, [0x140198608]
call fcn.1400416a0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x248], xmm0
movups xmmword [rsp + 0x258], xmm0
lea rax, vtable.NInstaller::CScriptResLoader.0
mov qword [rsp + 0x248], rax
movdqu xmmword [rsp + 0x250], xmm0
mov qword [rsp + 0x260], r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
movzx r9d, r13w
lea r8, str.root
lea rdx, str.ASSETS
call qword [sym.imp.KERNEL32.dll_FindResourceExW]
mov rbx, rax
test rax, rax
je 0x1400427d1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x1400427d1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
test rax, rax
je 0x1400427d1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
test eax, eax
je 0x1400427d1
mov qword [rsp + 0x250], rdi
mov qword [rsp + 0x260], r13
mov eax, eax
mov qword [rsp + 0x258], rax
lea rax, vtable.NInstaller::CException.0
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x270], r13
movdqa xmm0, xmmword [0x1401a4090]
movdqu xmmword [rsp + 0x280], xmm0
mov byte [rsp + 0x270], 0
mov dword [rsp + 0x290], r13d
mov rcx, qword [rsp + 0x228]
test rcx, rcx
je 0x140042627
xorps xmm0, xmm0
movups xmmword [rsp + 0x298], xmm0
mov qword [rsp + 0x98], rcx
lea rcx, [rsp + 0x248]
mov rax, qword [rsp + 0x248]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r9, rax
lea r8, [rsp + 0x248]
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x98]
call fcn.140042ef0
nop
mov r8d, dword [rsp + 0x298]
test r8d, r8d
jne 0x1400425fa
mov rcx, qword [rsp + 0x2a0]
test rcx, rcx
je 0x140041a8d
call fcn.140129840
xorps xmm0, xmm0
movups xmmword [rsp + 0x2a8], xmm0
movups xmmword [rsp + 0x2b8], xmm0
mov r8, r14
mov edx, esi
lea rcx, [rsp + 0x2a8]
call fcn.140041300
nop
mov eax, dword [0x1401dc780]
test al, 1
je 0x140041ad5
mov r9, r15
mov r8, r12
lea rdx, [0x1401985f8]
call fcn.1400416a0
mov eax, dword [0x1401dc780]
mov byte [rsp + 0x1a0], 0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x230], xmm1
mov qword [rsp + 0x240], r13
lea r14, str.Entry_point
mov qword [rsp + 0x1b0], r14
lea r15, str.Execution
mov qword [rsp + 0x1b8], r15
mov byte [rsp + 0x1c0], 1
test al, 1
je 0x140041b2e
mov r9, r14
mov r8, r15
lea rdx, [0x140198608]
call fcn.1400416a0
nop
lea rax, [rsp + 0x230]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x268]
lea r8, [rsp + 0x2a8]
lea rdx, [0x140198470]
lea rcx, [rsp + 0x228]
call fcn.1400430b0
test al, al
jne 0x140041d9c
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_AcquireSRWLockShared
mov rax, qword [0x1401dd1a8]
test rax, rax
je 0x140041b83
lock inc dword [rax + 8]
movups xmm6, xmmword [0x1401dd1a0]
movups xmmword [rsp + 0xb0], xmm6
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_ReleaseSRWLockShared
nop
movq rcx, xmm6
mov rax, qword [rcx]
lea rdx, str.Failed_to_Execute_entrypoint:_n___
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xb8]
mov rdi, 0xffffffffffffffff
test rcx, rcx
je 0x140041bfc
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140041bfc
mov rbx, qword [rsp + 0xb8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140041bfc
mov rcx, qword [rsp + 0xb8]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_AcquireSRWLockShared
mov rax, qword [0x1401dd1a8]
test rax, rax
je 0x140041c18
lock inc dword [rax + 8]
movups xmm6, xmmword [0x1401dd1a0]
movups xmmword [rsp + 0xc0], xmm6
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_ReleaseSRWLockShared
nop
lea rdx, [rsp + 0x270]
cmp qword [rsp + 0x288], 0x10
cmovae rdx, qword [rsp + 0x270]
movq rcx, xmm6
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xc8]
test rcx, rcx
je 0x140041c9e
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140041c9e
mov rbx, qword [rsp + 0xc8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140041c9e
mov rcx, qword [rsp + 0xc8]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
test byte [0x1401dc780], 1
je 0x140041cba
mov r9, r14
mov r8, r15
lea rdx, [0x1401985f8]
call fcn.1400416a0
nop
mov rcx, qword [rsp + 0x230]
test rcx, rcx
je 0x140041d14
mov rdx, qword [rsp + 0x240]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041cfb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400428e7
call fcn.140122560
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x230], xmm0
mov qword [rsp + 0x240], r13
mov rcx, qword [rsp + 0x2c0]
test rcx, rcx
je 0x140041d4d
lea rbx, [rcx - 8]
lea r9, [0x140029570]
mov r8, qword [rbx]
mov edx, 8
call fcn.140122ab8
mov rdx, qword [rbx]
lea rdx, [rdx*8 + 8]
mov rcx, rbx
call fcn.140122b98
nop
mov rcx, qword [rsp + 0x2b8]
test rcx, rcx
je 0x140041d60
call fcn.140122560
nop
lea rcx, [rsp + 0x270]
call fcn.140028ff0
nop
lea rax, vtable.NInstaller::CScriptResLoader.0
mov qword [rsp + 0x248], rax
mov rcx, qword [rsp + 0x228]
test rcx, rcx
je 0x140041d90
call fcn.14009e7a0
nop
call fcn.140041670
mov eax, edi
jmp 0x1400428b5
mov rcx, qword [rsp + 0x230]
cmp dword [rcx], 3
je 0x140042085
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_AcquireSRWLockShared
mov rax, qword [0x1401dd1a8]
test rax, rax
je 0x140041dc9
lock inc dword [rax + 8]
movups xmm0, xmmword [0x1401dd1a0]
movups xmmword [rsp + 0x58], xmm0
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_ReleaseSRWLockShared
nop
mov rax, qword [rsp + 0x230]
mov edx, dword [rax]
lea rcx, [rsp + 0x1c8]
call fcn.140041020
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x1c
jb 0x140041ea6
lea rax, [r8 + 0x1c]
mov qword [rbx + 0x10], rax
mov r14, rbx
cmp rcx, 0x10
jb 0x140041e28
mov r14, qword [rbx]
lea rax, [0x1401984c4]
lea rsi, str.Return_code_isnt_a_double:
cmp rax, r14
jbe 0x140041e5b
lea rax, [r14 + r8]
cmp rsi, rax
ja 0x140041e5b
mov edi, 0x1c
cmp r14, rsi
ja 0x140041e53
mov r15, r13
jmp 0x140041e63
mov r15, r14
sub r15, rsi
jmp 0x140041e63
mov edi, 0x1c
mov r15d, edi
lea rcx, [r14 + 0x1c]
inc r8
mov rdx, r14
call fcn.140125070
mov r8, r15
mov rdx, rsi
mov rcx, r14
call fcn.140125070
lea rcx, [r14 + r15]
sub rdi, r15
lea rdx, [r15 + 0x1c]
add rdx, rsi
mov r8, rdi
call fcn.140125070
lea r14, str.Entry_point
lea r15, str.Execution
jmp 0x140041ec9
mov edi, 0x1c
mov qword [rsp + 0x28], rdi
lea rsi, str.Return_code_isnt_a_double:
mov qword [rsp + 0x20], rsi
mov edx, edi
mov rcx, rbx
call fcn.1400436e0
mov rbx, rax
mov qword [rsp + 0x100], r13
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x100], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0x110], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], reloc.OLEAUT32.dll_SafeArrayDestroy
mov byte [rbx], 0
lea rdx, [rsp + 0x100]
cmp qword [rsp + 0x118], 0x10
cmovae rdx, qword [rsp + 0x100]
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x100]
call fcn.140028ff0
nop
lea rcx, [rsp + 0x1c8]
call fcn.140028ff0
nop
mov rcx, qword [rsp + 0x60]
mov rdi, 0xffffffffffffffff
test rcx, rcx
je 0x140041f87
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140041f87
mov rbx, qword [rsp + 0x60]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140041f87
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
test byte [0x1401dc780], 1
je 0x140041fa3
mov r9, r14
mov r8, r15
lea rdx, [0x1401985f8]
call fcn.1400416a0
nop
mov rcx, qword [rsp + 0x230]
test rcx, rcx
je 0x140041ffd
mov rdx, qword [rsp + 0x240]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041fe4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400428e7
call fcn.140122560
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x230], xmm0
mov qword [rsp + 0x240], r13
mov rcx, qword [rsp + 0x2c0]
test rcx, rcx
je 0x140042036
lea rbx, [rcx - 8]
lea r9, [0x140029570]
mov r8, qword [rbx]
mov edx, 8
call fcn.140122ab8
mov rdx, qword [rbx]
lea rdx, [rdx*8 + 8]
mov rcx, rbx
call fcn.140122b98
nop
mov rcx, qword [rsp + 0x2b8]
test rcx, rcx
je 0x140042049
call fcn.140122560
nop
lea rcx, [rsp + 0x270]
call fcn.140028ff0
nop
lea rax, vtable.NInstaller::CScriptResLoader.0
mov qword [rsp + 0x248], rax
mov rcx, qword [rsp + 0x228]
test rcx, rcx
je 0x140042079
call fcn.14009e7a0
nop
call fcn.140041670
mov eax, edi
jmp 0x1400428b5
cvttsd2si r12d, qword [rcx + 8]
cmp r12d, 0xffffffff
jne 0x1400424fc
cmp dword [rcx + 0x10], 4
lea rcx, [0x1401dd1c0]
jne 0x14004226a
call sub.KERNEL32.dll_AcquireSRWLockShared
mov rax, qword [0x1401dd1a8]
test rax, rax
je 0x1400420bb
lock inc dword [rax + 8]
movups xmm0, xmmword [0x1401dd1a0]
movups xmmword [rsp + 0x78], xmm0
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_ReleaseSRWLockShared
nop
mov dword [rsp + 0x30], 1
mov rax, qword [rsp + 0x230]
mov rdx, qword [rax + 0x18]
mov qword [rsp + 0x38], r13
movdqa xmm0, xmmword [0x1401a4090]
movdqu xmmword [rsp + 0x48], xmm0
mov byte [rsp + 0x38], 0
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140042110
lea rcx, [rsp + 0x38]
call fcn.140028df0
nop
mov dword [rsp + 0x30], 3
mov r8, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
sub rax, r8
lea rsi, str.Entrypoint_failed:
cmp rax, 0x13
jb 0x1400421e2
lea rax, [r8 + 0x13]
mov qword [rsp + 0x48], rax
lea r14, [rsp + 0x38]
cmp rcx, 0x10
cmovae r14, qword [rsp + 0x38]
lea rax, [0x1401984db]
cmp rax, r14
jbe 0x140042192
lea rax, [r14 + r8]
cmp rsi, rax
ja 0x140042192
mov ebx, reloc.OLEAUT32.dll_SafeArrayGetLBound
cmp r14, rsi
ja 0x14004218a
mov r15, r13
jmp 0x14004219a
mov r15, r14
sub r15, rsi
jmp 0x14004219a
mov ebx, reloc.OLEAUT32.dll_SafeArrayGetLBound
mov r15d, ebx
lea rcx, [r14 + 0x13]
inc r8
mov rdx, r14
call fcn.140125070
mov r8, r15
mov rdx, rsi
mov rcx, r14
call fcn.140125070
lea rcx, [r14 + r15]
sub rbx, r15
lea rdx, [r15 + 0x13]
add rdx, rsi
mov r8, rbx
call fcn.140125070
lea rax, [rsp + 0x38]
lea r14, str.Entry_point
lea r15, str.Execution
jmp 0x1400421fd
mov ebx, reloc.OLEAUT32.dll_SafeArrayGetLBound
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rsi
mov edx, ebx
lea rcx, [rsp + 0x38]
call fcn.1400436e0
mov qword [rsp + 0x140], r13
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x150], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x140], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x150], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.OLEAUT32.dll_SafeArrayDestroy
mov byte [rax], 0
mov ebx, 0x87
mov dword [rsp + 0x30], ebx
lea rdx, [rsp + 0x140]
cmp qword [rsp + 0x158], 0x10
cmovae rdx, qword [rsp + 0x140]
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400423ff
call sub.KERNEL32.dll_AcquireSRWLockShared
mov rax, qword [0x1401dd1a8]
test rax, rax
je 0x14004227f
lock inc dword [rax + 8]
movups xmm0, xmmword [0x1401dd1a0]
movups xmmword [rsp + 0x68], xmm0
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_ReleaseSRWLockShared
nop
mov dword [rsp + 0x30], 8
mov rax, qword [rsp + 0x230]
mov edx, dword [rax + 0x10]
lea rcx, [rsp + 0x1e8]
call fcn.140041020
mov rbx, rax
mov dword [rsp + 0x30], 0x18
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x35
jb 0x14004236d
lea rax, [r8 + 0x35]
mov qword [rbx + 0x10], rax
mov r14, rbx
cmp rcx, 0x10
jb 0x1400422ef
mov r14, qword [rbx]
lea rax, [0x140198515]
lea rsi, str.Entrypoint_failed__but_error_message_isnt_a_string:
cmp rax, r14
jbe 0x140042322
lea rax, [r14 + r8]
cmp rsi, rax
ja 0x140042322
mov edi, 0x35
cmp r14, rsi
ja 0x14004231a
mov r15, r13
jmp 0x14004232a
mov r15, r14
sub r15, rsi
jmp 0x14004232a
mov edi, 0x35
mov r15d, edi
lea rcx, [r14 + 0x35]
inc r8
mov rdx, r14
call fcn.140125070
mov r8, r15
mov rdx, rsi
mov rcx, r14
call fcn.140125070
lea rcx, [r14 + r15]
sub rdi, r15
lea rdx, [r15 + 0x35]
add rdx, rsi
mov r8, rdi
call fcn.140125070
lea r14, str.Entry_point
lea r15, str.Execution
jmp 0x140042390
mov edi, 0x35
mov qword [rsp + 0x28], rdi
lea rsi, str.Entrypoint_failed__but_error_message_isnt_a_string:
mov qword [rsp + 0x20], rsi
mov edx, edi
mov rcx, rbx
call fcn.1400436e0
mov rbx, rax
mov qword [rsp + 0x120], r13
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x130], xmm0
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x120], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0x130], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], reloc.OLEAUT32.dll_SafeArrayDestroy
mov byte [rbx], 0
mov ebx, 0x138
mov dword [rsp + 0x30], ebx
lea rdx, [rsp + 0x120]
cmp qword [rsp + 0x138], 0x10
cmovae rdx, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdi, 0xffffffffffffffff
test bl, 0x20
je 0x140042419
and ebx, 0xffffffdf
mov dword [rsp + 0x30], ebx
lea rcx, [rsp + 0x120]
call fcn.140028ff0
nop
test bl, 0x10
je 0x140042433
and ebx, 0xffffffef
mov dword [rsp + 0x30], ebx
lea rcx, [rsp + 0x1e8]
call fcn.140028ff0
nop
test bl, 8
je 0x14004247d
and ebx, 0xfffffff7
mov dword [rsp + 0x30], ebx
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14004247d
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140042479
mov rbx, qword [rsp + 0x70]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140042479
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ebx, dword [rsp + 0x30]
test bl, 4
je 0x140042497
and ebx, 0xfffffffb
mov dword [rsp + 0x30], ebx
lea rcx, [rsp + 0x140]
call fcn.140028ff0
nop
test bl, 2
je 0x1400424ae
and ebx, 0xfffffffd
mov dword [rsp + 0x30], ebx
lea rcx, [rsp + 0x38]
call fcn.140028ff0
nop
test bl, 1
je 0x1400424f4
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x1400424f4
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400424f4
mov rbx, qword [rsp + 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x1400424f4
mov rcx, qword [rsp + 0x80]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x230]
test byte [0x1401dc780], 1
je 0x14004251f
mov r9, r14
mov r8, r15
lea rdx, [0x1401985f8]
call fcn.1400416a0
mov rcx, qword [rsp + 0x230]
test rcx, rcx
je 0x140042571
mov rdx, qword [rsp + 0x240]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042558
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400428e7
call fcn.140122560
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x230], xmm0
mov qword [rsp + 0x240], r13
mov rcx, qword [rsp + 0x2c0]
test rcx, rcx
je 0x1400425aa
lea rbx, [rcx - 8]
lea r9, [0x140029570]
mov r8, qword [rbx]
mov edx, 8
call fcn.140122ab8
mov rdx, qword [rbx]
lea rdx, [rdx*8 + 8]
mov rcx, rbx
call fcn.140122b98
nop
mov rcx, qword [rsp + 0x2b8]
test rcx, rcx
je 0x1400425bd
call fcn.140122560
nop
lea rcx, [rsp + 0x270]
call fcn.140028ff0
nop
lea rax, vtable.NInstaller::CScriptResLoader.0
mov qword [rsp + 0x248], rax
mov rcx, qword [rsp + 0x228]
test rcx, rcx
je 0x1400425ed
call fcn.14009e7a0
nop
call fcn.140041670
mov eax, r12d
jmp 0x1400428b5
mov rbx, qword [rsp + 0x2a0]
mov rdx, rbx
lea rcx, [rsp + 0x268]
mov rax, qword [rsp + 0x268]
call qword [rax]
nop
test rbx, rbx
je 0x140042642
mov rcx, rbx
call fcn.140129840
jmp 0x140042642
mov r8d, 1
lea rdx, str.Object_is_not_initialized_or_loader_is_null
lea rcx, [rsp + 0x268]
call qword [vtable.NInstaller::CException.0]
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_AcquireSRWLockShared
mov rax, qword [0x1401dd1a8]
test rax, rax
je 0x14004265e
lock inc dword [rax + 8]
movups xmm6, xmmword [0x1401dd1a0]
movups xmmword [rsp + 0xd0], xmm6
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_ReleaseSRWLockShared
nop
movq rcx, xmm6
mov rax, qword [rcx]
lea rdx, str.Failed_to_load_root_script:_n___
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xd8]
mov rdi, 0xffffffffffffffff
test rcx, rcx
je 0x1400426d7
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400426d7
mov rbx, qword [rsp + 0xd8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400426d7
mov rcx, qword [rsp + 0xd8]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_AcquireSRWLockShared
mov rax, qword [0x1401dd1a8]
test rax, rax
je 0x1400426f3
lock inc dword [rax + 8]
movups xmm6, xmmword [0x1401dd1a0]
movups xmmword [rsp + 0xe0], xmm6
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_ReleaseSRWLockShared
nop
lea rdx, [rsp + 0x270]
cmp qword [rsp + 0x288], 0x10
cmovae rdx, qword [rsp + 0x270]
movq rcx, xmm6
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x140042779
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140042779
mov rbx, qword [rsp + 0xe8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140042779
mov rcx, qword [rsp + 0xe8]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x270]
call fcn.140028ff0
nop
lea rax, vtable.NInstaller::CScriptResLoader.0
mov qword [rsp + 0x248], rax
test byte [0x1401dc780], 1
je 0x1400427b2
mov r9, r15
mov r8, r12
lea rdx, [0x1401985f8]
call fcn.1400416a0
nop
mov rcx, qword [rsp + 0x228]
test rcx, rcx
je 0x1400427c5
call fcn.14009e7a0
nop
call fcn.140041670
mov eax, edi
jmp 0x1400428b5
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_AcquireSRWLockShared
mov rax, qword [0x1401dd1a8]
test rax, rax
je 0x1400427ed
lock inc dword [rax + 8]
movups xmm6, xmmword [0x1401dd1a0]
movups xmmword [rsp + 0xf0], xmm6
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_ReleaseSRWLockShared
nop
movq rcx, xmm6
mov rax, qword [rcx]
lea rdx, str.Failed_to_init_root_loader
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xf8]
mov rdi, 0xffffffffffffffff
test rcx, rcx
je 0x140042867
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140042867
mov rbx, qword [rsp + 0xf8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140042867
mov rcx, qword [rsp + 0xf8]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rax, vtable.NInstaller::CScriptResLoader.0
mov qword [rsp + 0x248], rax
test byte [0x1401dc780], 1
je 0x140042892
mov r9, r15
mov r8, r12
lea rdx, [0x1401985f8]
call fcn.1400416a0
nop
mov rcx, qword [rsp + 0x228]
test rcx, rcx
je 0x1400428a5
call fcn.14009e7a0
nop
call fcn.140041670
mov eax, edi
jmp 0x1400428b5
mov rcx, qword [rsp + 0x2c8]
xor rcx, rsp
call fcn.140122510
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.1401297c0
int3