Function at 0x14000dd10
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1010
call fcn.14006b8d0
sub rsp, rax
mov qword [rsp + 0xf8], 0xfffffffffffffffe
mov qword [rsp + 0x1060], rbx
mov rax, qword [0x140090f00]
xor rax, rsp
mov qword [rsp + 0x1000], rax
mov rdi, rdx
mov r15, rcx
mov qword [rsp + 0xa0], rcx
lea rcx, [rsp + 0x100]
call fcn.140068c30
nop
lea r8, [0x140079928]
lea rdx, str.SKINDATA
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rsi, rax
test rax, rax
jne 0x14000ddc6
lea rax, [0x140078a28]
mov qword [rsp + 0x100], rax
lea rax, [0x140098088]
mov rcx, qword [rsp + 0x158]
cmp rcx, rax
je 0x14000ddb2
call fcn.140015198
lea rcx, [rsp + 0x100]
call fcn.140068860
xor eax, eax
jmp 0x14000f047
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rbx, rax
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
lea ecx, [rsi + 1]
mov edi, ecx
call fcn.1400151a0
mov rbp, rax
mov qword [rsp + 0xf0], rax
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.14004a690
mov r8, rsi
mov rdx, rbx
mov rcx, rbp
call fcn.140047160
xor r9d, r9d
xor r8d, r8d
mov rdx, rbp
lea rcx, [rsp + 0x100]
call fcn.1400667d0
lea rdx, str.TheSkin
lea rcx, [rsp + 0x100]
call fcn.140067ff0
test rax, rax
jne 0x14000de90
mov rcx, rbp
call fcn.140015198
nop
lea rax, [0x140078a28]
mov qword [rsp + 0x100], rax
lea rax, [0x140098088]
mov rcx, qword [rsp + 0x158]
cmp rcx, rax
je 0x14000de7c
call fcn.140015198
lea rcx, [rsp + 0x100]
call fcn.140068860
xor eax, eax
jmp 0x14000f047
mov rcx, rax
call fcn.140068040
mov r14, rax
mov qword [rsp + 0x98], rax
mov r13d, 1
test rax, rax
je 0x14000f006
lea rdi, [0x14007a3d8]
xor r12d, r12d
lea rbx, [0x14007a6c8]
mov ecx, 0x28
call fcn.140015154
nop
test rax, rax
je 0x14000dee4
mov qword [rax], rdi
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], r12
jmp 0x14000dee7
mov rax, r12
mov qword [rsp + 0x80], rax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140015154
mov rsi, rax
mov qword [rsp + 0x90], rax
test rax, rax
je 0x14000df5c
mov qword [rax], rbx
mov ecx, 0x18
call fcn.140015154
mov rdi, rax
mov qword [rsp + 0x88], rax
test rax, rax
je 0x14000df53
mov rcx, rax
call fcn.140014bc0
mov qword [rdi + 8], rax
mov byte [rax + 0x49], 1
mov rcx, qword [rdi + 8]
mov qword [rcx + 8], rcx
mov rax, qword [rdi + 8]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 0x10], rax
mov qword [rdi + 0x10], r12
jmp 0x14000df56
mov rdi, r12
mov qword [rsi + 8], rdi
jmp 0x14000df5f
mov rsi, r12
mov qword [rsp + 0xb0], rsi
mov rbx, qword [r14 + 0x38]
add rbx, 0x10
lea rdi, str.Communal
mov rsi, rbx
mov ecx, 9
repe cmpsb byte [rsi], byte [rdi]
mov ebp, r12d
cmove ebp, r13d
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
or r9d, 0xffffffff
mov r8, rbx
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x7a0]
mov qword [rsp + 0x20], rax
or r9d, 0xffffffff
mov r8, rbx
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ecx, 0x28
call fcn.140015154
nop
test rax, rax
je 0x14000dff2
lea rcx, [0x14007a328]
mov qword [rax], rcx
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], r12
jmp 0x14000dff5
mov rax, r12
mov qword [rsp + 0xb8], rax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140015154
mov rsi, rax
mov qword [rsp + 0x88], rax
test rax, rax
je 0x14000e071
lea rax, [0x140079978]
mov qword [rsi], rax
mov ecx, 0x18
call fcn.140015154
mov rdi, rax
mov qword [rsp + 0x90], rax
test rax, rax
je 0x14000e068
mov rcx, rax
call fcn.140005800
mov qword [rdi + 8], rax
mov byte [rax + 0x69], 1
mov rcx, qword [rdi + 8]
mov qword [rcx + 8], rcx
mov rax, qword [rdi + 8]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 0x10], rax
mov qword [rdi + 0x10], r12
jmp 0x14000e06b
mov rdi, r12
mov qword [rsi + 8], rdi
jmp 0x14000e074
mov rsi, r12
mov qword [rsp + 0xe8], rsi
lea rax, [r14 + 0x50]
mov rbx, qword [rax + 0x38]
cmp rbx, rax
je 0x14000e33e
test rbx, rbx
je 0x14000e33e
movabs r15, 0x7ffffffffffffffe
mov rsi, qword [rbx + 0x20]
mov rdi, qword [rbx + 0x28]
add rdi, 0x10
add rsi, 0x10
je 0x14000e322
test rdi, rdi
je 0x14000e322
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
or r9d, 0xffffffff
mov r8, rsi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x20], rax
or r9d, 0xffffffff
mov r8, rsi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
or r9d, 0xffffffff
mov r8, rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x590]
mov qword [rsp + 0x20], rax
or r9d, 0xffffffff
mov r8, rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov edx, 7
mov qword [rsp + 0x50], rdx
mov r8, r12
mov qword [rsp + 0x48], r12
mov word [rsp + 0x38], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x590]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rsi, rcx
cmp rcx, r15
jbe 0x14000e18d
call fcn.140064b10
mov rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x48]
cmp rdx, rsi
jae 0x14000e1a6
mov rdx, rsi
lea rcx, [rsp + 0x30]
call fcn.140002af0
mov rdx, qword [rsp + 0x50]
jmp 0x14000e1c4
test rsi, rsi
jne 0x14000e1c4
mov qword [rsp + 0x48], r12
lea rax, [rsp + 0x38]
cmp rdx, 8
cmovae rax, qword [rsp + 0x38]
mov word [rax], si
jmp 0x14000e20b
test rsi, rsi
je 0x14000e20b
lea rcx, [rsp + 0x38]
cmp rdx, 8
cmovae rcx, qword [rsp + 0x38]
lea rdi, [rsi + rsi]
add rdx, rdx
mov r9, rdi
lea r8, [rsp + 0x590]
call fcn.140046d10
mov qword [rsp + 0x48], rsi
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rax, qword [rsp + 0x38]
mov word [rdi + rax], 0
mov edx, 7
mov qword [rsp + 0x78], rdx
mov r8, r12
mov qword [rsp + 0x70], r12
mov word [rsp + 0x60], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x170]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rsi, rcx
cmp rcx, r15
jbe 0x14000e253
call fcn.140064b10
mov rdx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x70]
cmp rdx, rsi
jae 0x14000e26c
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.140002af0
mov rdx, qword [rsp + 0x78]
jmp 0x14000e28a
test rsi, rsi
jne 0x14000e28a
mov qword [rsp + 0x70], r12
lea rax, [rsp + 0x60]
cmp rdx, 8
cmovae rax, qword [rsp + 0x60]
mov word [rax], si
jmp 0x14000e2d1
test rsi, rsi
je 0x14000e2d1
lea rcx, [rsp + 0x60]
cmp rdx, 8
cmovae rcx, qword [rsp + 0x60]
lea rdi, [rsi + rsi]
add rdx, rdx
mov r9, rdi
lea r8, [rsp + 0x170]
call fcn.140046d10
mov qword [rsp + 0x70], rsi
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rax, qword [rsp + 0x60]
mov word [rdi + rax], 0
mov rcx, qword [rsp + 0xe8]
mov rax, qword [rcx]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x58]
call qword [rax]
nop
cmp qword [rsp + 0x78], 8
jb 0x14000e2fb
mov rcx, qword [rsp + 0x60]
call fcn.140015198
mov qword [rsp + 0x78], 7
mov qword [rsp + 0x70], r12
mov word [rsp + 0x60], 0
cmp qword [rsp + 0x50], 8
jb 0x14000e322
mov rcx, qword [rsp + 0x38]
call fcn.140015198
mov rcx, rbx
call fcn.1400682b0
mov rbx, rax
test rax, rax
jne 0x14000e0a0
mov r15, qword [rsp + 0xa0]
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], r12
mov word [rsp + 0x38], 0
mov r9d, SafeArrayGetDim
lea r8, str.OurSelf
mov rdx, r9
lea rcx, [rsp + 0x38]
call fcn.140046d10
mov qword [rsp + 0x48], 7
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rax, qword [rsp + 0x38]
mov word [rax + 0xe], 0
mov rcx, qword [rsp + 0xb8]
mov rax, qword [rcx]
lea r8, [rsp + 0xe8]
lea rdx, [rsp + 0x30]
call qword [rax]
nop
cmp qword [rsp + 0x50], 8
jb 0x14000e3ba
mov rcx, qword [rsp + 0x38]
call fcn.140015198
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], r12
mov word [rsp + 0x38], 0
mov r9d, SafeArrayGetDim
lea r8, str.OurSelf
mov rdx, r9
lea rcx, [rsp + 0x38]
call fcn.140046d10
mov qword [rsp + 0x48], 7
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rax, qword [rsp + 0x38]
mov word [rax + 0xe], 0
mov rcx, qword [rsp + 0x80]
mov rax, qword [rcx]
lea r8, [rsp + 0xb8]
lea rdx, [rsp + 0x30]
call qword [rax]
nop
cmp qword [rsp + 0x50], 8
jb 0x14000e436
mov rcx, qword [rsp + 0x38]
call fcn.140015198
lea rsi, [rsp + 0x7a0]
lea rdi, str.SkinConfigure
mov ecx, SafeArrayGetDim
repe cmpsw word [rsi], word [rdi]
jne 0x14000e91f
mov rcx, r14
call fcn.140068040
mov rbp, rax
test rax, rax
je 0x14000ef02
movabs r15, 0x7ffffffffffffffe
lea r14, [0x140079978]
nop
nop
mov rdi, qword [rbp + 0x38]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
or r9d, 0xffffffff
lea r8, [rdi + 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x380]
mov qword [rsp + 0x20], rax
or r9d, 0xffffffff
lea r8, [rdi + 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ecx, 0x28
call fcn.140015154
nop
test rax, rax
je 0x14000e4f1
lea rcx, [0x14007a328]
mov qword [rax], rcx
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], r12
jmp 0x14000e4f4
mov rax, r12
mov qword [rsp + 0xd8], rax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140015154
mov rsi, rax
mov qword [rsp + 0x88], rax
test rax, rax
je 0x14000e569
mov qword [rax], r14
mov ecx, 0x18
call fcn.140015154
mov rdi, rax
mov qword [rsp + 0x90], rax
test rax, rax
je 0x14000e560
mov rcx, rax
call fcn.140005800
mov qword [rdi + 8], rax
mov byte [rax + 0x69], 1
mov rcx, qword [rdi + 8]
mov qword [rcx + 8], rcx
mov rax, qword [rdi + 8]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 0x10], rax
mov qword [rdi + 0x10], r12
jmp 0x14000e563
mov rdi, r12
mov qword [rsi + 8], rdi
jmp 0x14000e56c
mov rsi, r12
mov qword [rsp + 0xc8], rsi
mov rcx, rbp
call fcn.140068040
mov rbx, rax
test rax, rax
je 0x14000e82f
nop
nop
mov rdi, qword [rbx + 0x38]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
or r9d, 0xffffffff
lea r8, [rdi + 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0xdd0]
mov qword [rsp + 0x20], rax
or r9d, 0xffffffff
lea r8, [rdi + 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rcx, qword [rbx + 0x28]
test rcx, rcx
je 0x14000e81b
mov rax, qword [rcx]
call qword [rax + 0x60]
test rax, rax
je 0x14000e81b
mov rdi, qword [rax + 0x38]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
or r9d, 0xffffffff
lea r8, [rdi + 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0xbc0]
mov qword [rsp + 0x20], rax
or r9d, 0xffffffff
lea r8, [rdi + 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov edx, 7
mov qword [rsp + 0x50], rdx
mov r8, r12
mov qword [rsp + 0x48], r12
mov word [rsp + 0x38], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0xbc0]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rsi, rcx
cmp rcx, r15
jbe 0x14000e686
call fcn.140064b10
mov rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x48]
cmp rdx, rsi
jae 0x14000e69f
mov rdx, rsi
lea rcx, [rsp + 0x30]
call fcn.140002af0
mov rdx, qword [rsp + 0x50]
jmp 0x14000e6bd
test rsi, rsi
jne 0x14000e6bd
mov qword [rsp + 0x48], r12
lea rax, [rsp + 0x38]
cmp rdx, 8
cmovae rax, qword [rsp + 0x38]
mov word [rax], si
jmp 0x14000e704
test rsi, rsi
je 0x14000e704
lea rcx, [rsp + 0x38]
cmp rdx, 8
cmovae rcx, qword [rsp + 0x38]
lea rdi, [rsi + rsi]
add rdx, rdx
mov r9, rdi
lea r8, [rsp + 0xbc0]
call fcn.140046d10
mov qword [rsp + 0x48], rsi
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rax, qword [rsp + 0x38]
mov word [rdi + rax], 0
mov edx, 7
mov qword [rsp + 0x78], rdx
mov r8, r12
mov qword [rsp + 0x70], r12
mov word [rsp + 0x60], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0xdd0]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rsi, rcx
cmp rcx, r15
jbe 0x14000e74c
call fcn.140064b10
mov rdx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x70]
cmp rdx, rsi
jae 0x14000e765
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.140002af0
mov rdx, qword [rsp + 0x78]
jmp 0x14000e783
test rsi, rsi
jne 0x14000e783
mov qword [rsp + 0x70], r12
lea rax, [rsp + 0x60]
cmp rdx, 8
cmovae rax, qword [rsp + 0x60]
mov word [rax], si
jmp 0x14000e7ca
test rsi, rsi
je 0x14000e7ca
lea rcx, [rsp + 0x60]
cmp rdx, 8
cmovae rcx, qword [rsp + 0x60]
lea rdi, [rsi + rsi]
add rdx, rdx
mov r9, rdi
lea r8, [rsp + 0xdd0]
call fcn.140046d10
mov qword [rsp + 0x70], rsi
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rax, qword [rsp + 0x60]
mov word [rdi + rax], 0
mov rcx, qword [rsp + 0xc8]
mov rax, qword [rcx]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x58]
call qword [rax]
nop
cmp qword [rsp + 0x78], 8
jb 0x14000e7f4
mov rcx, qword [rsp + 0x60]
call fcn.140015198
mov qword [rsp + 0x78], 7
mov qword [rsp + 0x70], r12
mov word [rsp + 0x60], 0
cmp qword [rsp + 0x50], 8
jb 0x14000e81b
mov rcx, qword [rsp + 0x38]
call fcn.140015198
mov rcx, rbx
call fcn.140068160
mov rbx, rax
test rax, rax
jne 0x14000e590
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], r12
mov word [rsp + 0x38], 0
mov r8d, 7
lea rdx, str.OurSelf
lea rcx, [rsp + 0x30]
call fcn.1400029c0
nop
mov rcx, qword [rsp + 0xd8]
mov rax, qword [rcx]
lea r8, [rsp + 0xc8]
lea rdx, [rsp + 0x30]
call qword [rax]
nop
cmp qword [rsp + 0x50], 8
jb 0x14000e889
mov rcx, qword [rsp + 0x38]
call fcn.140015198
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], r12
mov word [rsp + 0x38], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x380]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x380]
lea rcx, [rsp + 0x30]
call fcn.1400029c0
nop
mov rcx, qword [rsp + 0x80]
mov rax, qword [rcx]
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0x30]
call qword [rax]
nop
cmp qword [rsp + 0x50], 8
jb 0x14000e8f6
mov rcx, qword [rsp + 0x38]
call fcn.140015198
mov rcx, rbp
call fcn.140068160
mov rbp, rax
test rax, rax
jne 0x14000e480
mov r14, qword [rsp + 0x98]
mov r15, qword [rsp + 0xa0]
jmp 0x14000ef02
mov rcx, r14
call fcn.140068040
mov r13, rax
test rax, rax
je 0x14000eefc
movsxd r12, ebp
xor r15d, r15d
lea r14, [0x140079978]
mov ecx, 0x28
call fcn.140015154
nop
test rax, rax
je 0x14000e968
lea rcx, [0x14007a328]
mov qword [rax], rcx
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r15
mov qword [rax + 0x20], r15
jmp 0x14000e96b
mov rax, r15
mov qword [rsp + 0xc0], rax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140015154
mov rsi, rax
mov qword [rsp + 0x88], rax
test rax, rax
je 0x14000e9e7
lea rax, [0x14007a668]
mov qword [rsi], rax
mov ecx, 0x18
call fcn.140015154
mov rdi, rax
mov qword [rsp + 0x90], rax
test rax, rax
je 0x14000e9de
mov rcx, rax
call fcn.140014bc0
mov qword [rdi + 8], rax
mov byte [rax + 0x49], 1
mov rcx, qword [rdi + 8]
mov qword [rcx + 8], rcx
mov rax, qword [rdi + 8]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 0x10], rax
mov qword [rdi + 0x10], r15
jmp 0x14000e9e1
mov rdi, r15
mov qword [rsi + 8], rdi
jmp 0x14000e9ea
mov rsi, r15
mov qword [rsp + 0xe0], rsi
mov rdi, qword [r13 + 0x38]
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
or r9d, 0xffffffff
lea r8, [rdi + 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x380]
mov qword [rsp + 0x20], rax
or r9d, 0xffffffff
lea r8, [rdi + 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rcx, r13
call fcn.140068040
mov rbp, rax
test rax, rax
je 0x14000edf5
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140015154
mov rsi, rax
mov qword [rsp + 0x88], rax
test rax, rax
je 0x14000eabd
mov qword [rax], r14
mov ecx, 0x18
call fcn.140015154
mov rdi, rax
mov qword [rsp + 0x90], rax
test rax, rax
je 0x14000eab4
mov rcx, rax
call fcn.140005800
mov qword [rdi + 8], rax
mov byte [rax + 0x69], 1
mov rcx, qword [rdi + 8]
mov qword [rcx + 8], rcx
mov rax, qword [rdi + 8]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 0x10], rax
mov qword [rdi + 0x10], r15
jmp 0x14000eab7
mov rdi, r15
mov qword [rsi + 8], rdi
jmp 0x14000eac0
mov rsi, r15
mov qword [rsp + 0xa8], rsi
mov ecx, pe_nt_image_headers64
call fcn.140015154
test rax, rax
je 0x14000eae1
mov rcx, rax
call fcn.140008340
jmp 0x14000eae4
mov rax, r15
mov qword [rsp + 0xd0], rax
lea rax, [rbp + 0x50]
mov rbx, qword [rax + 0x38]
cmp rbx, rax
je 0x14000ed07
test rbx, rbx
je 0x14000ed07
nop
nop
nop
mov rdi, qword [rbx + 0x20]
mov rsi, qword [rbx + 0x28]
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
or r9d, 0xffffffff
lea r8, [rdi + 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x20], rax
or r9d, 0xffffffff
lea r8, [rdi + 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
or r9d, 0xffffffff
lea r8, [rsi + 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x590]
mov qword [rsp + 0x20], rax
or r9d, 0xffffffff
lea r8, [rsi + 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea rsi, [rsp + 0x170]
lea rdi, [0x14007a2dc]
mov ecx, 3
repe cmpsw word [rsi], word [rdi]
jne 0x14000ebdc
mov edi, r15d
lea r8, [rsp + 0x590]
lea rdx, [0x1400795e0]
lea rcx, [rsp + 0x9b0]
call fcn.140046bd0
jmp 0x14000ebfc
lea rsi, [rsp + 0x170]
lea rdi, str.image
mov ecx, 6
repe cmpsw word [rsi], word [rdi]
mov edi, 1
cmove edi, r15d
test r12, r12
jne 0x14000ec22
test edi, edi
je 0x14000ec22
mov rcx, qword [rsp + 0xd0]
mov rax, qword [rcx]
lea r8, [rsp + 0x590]
lea rdx, [rsp + 0x170]
call qword [rax]
mov qword [rsp + 0x78], 7
mov qword [rsp + 0x70], r15
mov word [rsp + 0x60], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x590]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x590]
lea rcx, [rsp + 0x58]
call fcn.1400029c0
nop
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], r15
mov word [rsp + 0x38], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x170]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x30]
call fcn.1400029c0
nop
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rcx]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x30]
call qword [rax]
nop
cmp qword [rsp + 0x50], 8
jb 0x14000eccc
mov rcx, qword [rsp + 0x38]
call fcn.140015198
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], r15
mov word [rsp + 0x38], 0
cmp qword [rsp + 0x78], 8
jb 0x14000ecf3
mov rcx, qword [rsp + 0x60]
call fcn.140015198
mov rcx, rbx
call fcn.1400682b0
mov rbx, rax
test rax, rax
jne 0x14000eb10
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], r15
mov word [rsp + 0x38], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x9b0]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x9b0]
lea rcx, [rsp + 0x30]
call fcn.1400029c0
nop
mov rcx, qword [rsp + 0xc0]
mov rax, qword [rcx]
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0x30]
call qword [rax]
nop
cmp qword [rsp + 0x50], 8
jb 0x14000ed74
mov rcx, qword [rsp + 0x38]
call fcn.140015198
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], r15
mov word [rsp + 0x38], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x9b0]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x9b0]
lea rcx, [rsp + 0x30]
call fcn.1400029c0
nop
mov rcx, qword [rsp + 0xe0]
mov rax, qword [rcx]
lea r8, [rsp + 0xd0]
lea rdx, [rsp + 0x30]
call qword [rax]
nop
cmp qword [rsp + 0x50], 8
jb 0x14000ede1
mov rcx, qword [rsp + 0x38]
call fcn.140015198
mov rcx, rbp
call fcn.140068160
mov rbp, rax
test rax, rax
jne 0x14000ea50
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], r15
mov word [rsp + 0x38], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x380]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x380]
lea rcx, [rsp + 0x30]
call fcn.1400029c0
nop
mov rcx, qword [rsp + 0x80]
mov rax, qword [rcx]
lea r8, [rsp + 0xc0]
lea rdx, [rsp + 0x30]
call qword [rax]
nop
cmp qword [rsp + 0x50], 8
jb 0x14000ee62
mov rcx, qword [rsp + 0x38]
call fcn.140015198
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], r15
mov word [rsp + 0x38], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x380]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x380]
lea rcx, [rsp + 0x30]
call fcn.1400029c0
nop
mov rcx, qword [rsp + 0xb0]
mov rax, qword [rcx]
lea r8, [rsp + 0xe0]
lea rdx, [rsp + 0x30]
call qword [rax]
nop
cmp qword [rsp + 0x50], 8
jb 0x14000eecf
mov rcx, qword [rsp + 0x38]
call fcn.140015198
mov rcx, r13
call fcn.140068160
mov r13, rax
test rax, rax
jne 0x14000e940
mov r14, qword [rsp + 0x98]
mov r15, qword [rsp + 0xa0]
xor r12d, r12d
lea r13d, [rax + 1]
jmp 0x14000ef02
mov r13d, 1
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], r12
mov word [rsp + 0x38], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x7a0]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x7a0]
lea rcx, [rsp + 0x30]
call fcn.1400029c0
nop
mov rcx, qword [r15 + 8]
mov rax, qword [rcx]
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x30]
call qword [rax]
nop
cmp qword [rsp + 0x50], 8
jb 0x14000ef6b
mov rcx, qword [rsp + 0x38]
call fcn.140015198
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], r12
mov word [rsp + 0x38], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x7a0]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x7a0]
lea rcx, [rsp + 0x30]
call fcn.1400029c0
nop
mov rcx, qword [r15 + 0x18]
mov rax, qword [rcx]
lea r8, [rsp + 0xb0]
lea rdx, [rsp + 0x30]
call qword [rax]
nop
cmp qword [rsp + 0x50], 8
jb 0x14000efd4
mov rcx, qword [rsp + 0x38]
call fcn.140015198
mov rcx, r14
call fcn.140068160
mov r14, rax
mov qword [rsp + 0x98], rax
test rax, rax
lea rdi, [0x14007a3d8]
lea rbx, [0x14007a6c8]
jne 0x14000dec3
mov rbp, qword [rsp + 0xf0]
mov rcx, rbp
call fcn.140015198
nop
lea rax, [0x140078a28]
mov qword [rsp + 0x100], rax
lea rax, [0x140098088]
mov rcx, qword [rsp + 0x158]
cmp rcx, rax
je 0x14000f037
call fcn.140015198
lea rcx, [rsp + 0x100]
call fcn.140068860
mov eax, r13d
mov rcx, qword [rsp + 0x1000]
xor rcx, rsp
call fcn.1400469b0
mov rbx, qword [rsp + 0x1060]
add rsp, 0x1010
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret