Function at 0x140002df0
Capabilities:
Load windows common language runtime

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xf0
mov r12, r9
mov r13, r8
mov r15, rdx
mov rbx, rcx
xor r14d, r14d
mov eax, 0x16
mov word [rbp - 0x39], ax
mov dword [rbp - 0x31], r14d
lea rdx, [rbp - 0x59]
call fcn.140003b60
nop
lea rdx, [rbp - 0x59]
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140.dll_Ordinal_300]
mov rdx, rax
mov rcx, rbx
call fcn.140005770
mov qword [rbp - 0x71], r14
lea r8, [rbp - 0x71]
lea rdx, [0x1400a2a30]
lea rcx, [0x1400a2a40]
call sub.mscoree.dll_CLRCreateInstance
test eax, eax
js 0x1400031f8
mov qword [rbp - 0x69], r14
mov rcx, qword [rbp - 0x71]
mov rax, qword [rcx]
lea r9, [rbp - 0x69]
lea r8, [0x1400a2a90]
lea rdx, str.v4.0.30319
call qword [rax + 0x18]
test eax, eax
js 0x1400031f8
mov qword [rsp + 0x38], r14
mov rcx, qword [rbp - 0x69]
mov rax, qword [rcx]
lea r9, [rsp + 0x38]
lea r8, [0x1400a2700]
lea rdx, [0x1400a2670]
call qword [rax + 0x48]
test eax, eax
js 0x1400031f8
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
call qword [rax + 0x50]
test eax, eax
js 0x1400031f8
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x20], r14
mov edi, r14d
mov qword [rbp - 0x61], r14
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea rdx, [rsp + 0x48]
call qword [rax + 0x68]
mov rsi, qword [rsp + 0x48]
test rsi, rsi
je 0x1400031cc
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x140002f27
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rsi, qword [rsp + 0x48]
mov qword [rsp + 0x20], r14
mov rbx, qword [rsi]
lea rcx, [rsp + 0x20]
call fcn.140001710
mov r8, rax
lea rdx, [0x1400a2ba0]
mov rcx, rsi
call qword [rbx]
cmp qword [rsp + 0x20], 0
je 0x1400031c8
lea rax, [rsp + 0x30]
mov qword [rbp - 0x79], rax
lea rax, [rsp + 0x40]
mov qword [rbp - 0x51], rax
mov rdx, qword [r12]
lea rcx, [rsp + 0x30]
call fcn.140001ae0
mov rsi, rax
mov qword [rbp - 0x49], rax
mov rdx, qword [r13]
lea rcx, [rsp + 0x40]
call fcn.140001ae0
mov r14, rax
mov qword [rbp - 0x41], rax
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140003265
xor ecx, ecx
mov qword [rsp + 0x28], rcx
mov rax, qword [rsi]
test rax, rax
je 0x140002fb2
mov r8, qword [rax]
jmp 0x140002fb5
mov r8, rcx
mov rax, qword [r14]
test rax, rax
je 0x140002fc2
mov rdx, qword [rax]
jmp 0x140002fc5
mov rdx, rcx
mov rax, qword [rbx]
lea r9, [rsp + 0x28]
mov rcx, rbx
call qword [rax + Ordinal_300]
test eax, eax
jns 0x140002feb
lea r8, [0x1400a2ba0]
mov rdx, rbx
mov ecx, eax
call fcn.140093da0
mov rbx, qword [rsp + 0x28]
mov rcx, r14
call fcn.140007630
nop
mov rcx, rsi
call fcn.140007630
nop
test rbx, rbx
cmovne rdi, rbx
mov qword [rbp - 0x61], rdi
xor esi, esi
mov ecx, esi
test rbx, rbx
cmove rcx, rbx
test rcx, rcx
je 0x140003024
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
test rdi, rdi
jne 0x140003166
lea rdx, [rsp + 0x28]
mov rcx, qword [rbp + 0x67]
call fcn.140003b60
nop
lea r8, str..dll
mov rdx, r13
lea rcx, [rsp + 0x30]
call fcn.140001f30
nop
mov rbx, qword [rsp + 0x30]
mov edx, 0x104
lea rcx, [rsp + 0x28]
call qword [sym.imp.mfc140.dll_Ordinal_4937]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
lea edx, [rdi - 1]
lea rcx, [rsp + 0x28]
call qword [sym.imp.mfc140.dll_Ordinal_12189]
lea rax, [rbp - 0x51]
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x79]
mov qword [rbp - 0x49], rax
mov rdx, qword [r12]
lea rcx, [rbp - 0x51]
call fcn.140001ae0
mov rsi, rax
mov qword [rbp + 0xf], rax
mov rdx, qword [rsp + 0x28]
lea rcx, [rbp - 0x79]
call fcn.140001ae0
mov r14, rax
mov qword [rbp + 0x17], rax
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x14000325a
xor ecx, ecx
mov qword [rsp + 0x40], rcx
mov rax, qword [rsi]
test rax, rax
je 0x1400030db
mov r8, qword [rax]
jmp 0x1400030de
mov r8, rcx
mov rax, qword [r14]
test rax, rax
je 0x1400030eb
mov rdx, qword [rax]
jmp 0x1400030ee
mov rdx, rcx
mov rax, qword [rbx]
lea r9, [rsp + 0x40]
mov rcx, rbx
call qword [rax + pe_nt_image_headers64]
test eax, eax
jns 0x140003114
lea r8, [0x1400a2ba0]
mov rdx, rbx
mov ecx, eax
call fcn.140093da0
mov rbx, qword [rsp + 0x40]
mov rcx, r14
call fcn.140007630
nop
mov rcx, rsi
call fcn.140007630
nop
xor esi, esi
cmp rdi, rbx
je 0x14000313b
mov rdi, rbx
mov qword [rbp - 0x61], rbx
mov ebx, esi
test rbx, rbx
je 0x14000314a
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
lea rcx, [rsp + 0x28]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
test rdi, rdi
je 0x1400031c8
lea rcx, [rbp - 0x21]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
lea rdx, [rbp - 0x21]
mov rcx, rdi
call qword [rax + 0x70]
test eax, eax
jns 0x140003192
lea r8, [0x1400a2bb0]
mov rdx, rdi
mov ecx, eax
call fcn.140093da0
movups xmm0, xmmword [rbp - 0x21]
movups xmmword [rbp - 9], xmm0
movsd xmm1, qword [rbp - 0x11]
movsd qword [rbp + 7], xmm1
mov word [rbp - 0x21], si
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x39]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x140003270
lea rcx, [rbp - 9]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rbx, qword [rbp + 0x67]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
call qword [rax + 0x58]
nop
test rdi, rdi
je 0x1400031e7
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x1400031f8
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, rbx
call fcn.1400056d0
movups xmm0, xmmword [rbp - 0x39]
movups xmmword [r15], xmm0
movsd xmm1, qword [rbp - 0x29]
movsd qword [r15 + 0x10], xmm1
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
lea rcx, [rbp - 0x39]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, r13
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
mov rcx, r12
call qword [sym.imp.mfc140.dll_Ordinal_1032]
mov rax, r15
mov rbx, qword [rsp + 0x138]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004003
call fcn.140093d90
nop
mov ecx, 0x80004003
call fcn.140093d90
nop
mov ecx, eax
call fcn.140093d90
int3