Function at 0x14001eea8
Capabilities:
Link many functions at runtime

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x310
mov r9, qword [0x140133d78]
mov r12, rdx
mov rsi, rcx
cmp r9, 0xffffffffffffffff
jne 0x14001eed9
xor eax, eax
jmp 0x14001f826
xor ebx, ebx
mov ebp, 1
cmp rdx, rbx
je 0x14001ef08
test byte [rdx], 0x10
je 0x14001ef08
mov rax, qword [rdx + 8]
mov dword [rsp + 0x368], ebp
mov qword [rsp + 0x78], rax
mov rax, qword [rdx + 0x10]
mov qword [rsp + 0x80], rax
jmp 0x14001ef1c
mov dword [rsp + 0x368], ebx
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x80], rbx
mov r13d, 0x2e
cmp r9, rbx
jne 0x14001f446
lea rcx, [0x140117fc0]
call qword [sym.imp.KERNEL32.DLL_LoadLibraryW]
xor edi, edi
mov rbx, rax
cmp rax, rdi
jne 0x14001f092
lea rcx, [rsp + 0x90]
lea rdx, [0x140117f90]
lea r8d, [r13 - 2]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
call fcn.1400fafa0
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x90]
lea rcx, [0x1401340d0]
xor r9d, r9d
mov byte [rsp + 0x20], bpl
call fcn.140078dc8
mov rdx, qword [rsp + 0x38]
lea r8, [rsp + 0xc0]
lea rcx, [rsp + 0x40]
call fcn.1400f96dc
cmp rax, rdi
je 0x14001f05b
mov rcx, qword [rsp + 0x38]
lea r8d, [r13 + 0x2e]
xor edx, edx
call qword [sym.imp.SHLWAPI.DLL_StrRChrW]
cmp rax, rdi
je 0x14001efc2
mov word [rax], di
cmp word [rsp + 0xec], r13w
je 0x14001f040
test byte [rsp + 0xc0], 0x10
je 0x14001f040
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
lea rcx, [rsp + 0xec]
movsxd rbx, eax
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
movsxd rcx, eax
lea rdx, [rcx + rbx + 0x1e]
lea rcx, [rsp + 0x58]
call fcn.1400619b4
mov r8, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x58]
lea r9, [rsp + 0xec]
lea rdx, [0x140117f68]
call fcn.140016e04
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.DLL_LoadLibraryW]
lea rcx, [rsp + 0x58]
mov rbx, rax
call fcn.140059370
cmp rbx, rdi
jne 0x14001f05b
mov rcx, qword [rsp + 0x40]
lea rdx, [rsp + 0xc0]
call qword [sym.imp.KERNEL32.DLL_FindNextFileW]
cmp eax, edi
jne 0x14001efc2
lea rcx, [rsp + 0x38]
call fcn.140059370
mov rcx, qword [rsp + 0x40]
cmp rcx, rdi
je 0x14001f07b
cmp rcx, 0xffffffffffffffff
je 0x14001f07b
call qword [sym.imp.KERNEL32.DLL_FindClose]
mov qword [rsp + 0x40], rdi
cmp rbx, rdi
jne 0x14001f092
or qword [0x140133d78], 0xffffffffffffffff
jmp 0x14001eed2
lea rdx, [0x140117f58]
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117f40]
mov rcx, rbx
mov qword [0x140133d80], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117f28]
mov rcx, rbx
mov qword [0x140133d98], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117f10]
mov rcx, rbx
mov qword [fcn.140133d88], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117ef8]
mov rcx, rbx
mov qword [0x140133e18], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117ed8]
mov rcx, rbx
mov qword [0x140133d90], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117eb8]
mov rcx, rbx
mov qword [0x140133de0], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117ea0]
mov rcx, rbx
mov qword [0x140133de8], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117e80]
mov rcx, rbx
mov qword [0x140133df0], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117e68]
mov rcx, rbx
mov qword [0x140133db0], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117e58]
mov rcx, rbx
mov qword [0x140133db8], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117e40]
mov rcx, rbx
mov qword [0x140133df8], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117e28]
mov rcx, rbx
mov qword [0x140133e00], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117e10]
mov rcx, rbx
mov qword [0x140133e08], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117df8]
mov rcx, rbx
mov qword [0x140133e10], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117dd8]
mov rcx, rbx
mov qword [0x140133e20], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117dc0]
mov rcx, rbx
mov qword [0x140133e28], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117da8]
mov rcx, rbx
mov qword [0x140133e30], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117d90]
mov rcx, rbx
mov qword [0x140133e38], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117d78]
mov rcx, rbx
mov qword [0x140133e40], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117d58]
mov qword [0x140133e48], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117d40]
mov rcx, rbx
mov qword [0x140133e60], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117d20]
mov rcx, rbx
mov qword [0x140133e68], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117d00]
mov rcx, rbx
mov qword [0x140133e50], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117ce0]
mov rcx, rbx
mov qword [0x140133e58], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117cc0]
mov rcx, rbx
mov qword [0x140133da0], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117c98]
mov rcx, rbx
mov qword [0x140133da8], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117c80]
mov rcx, rbx
mov qword [0x140133dc0], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117c68]
mov rcx, rbx
mov qword [0x140133dc8], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117c50]
mov rcx, rbx
mov qword [0x140133dd0], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117c38]
mov rcx, rbx
mov qword [0x140133dd8], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117c20]
mov rcx, rbx
mov qword [0x140133e70], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117c00]
mov rcx, rbx
mov qword [0x140133e78], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117be0]
mov rcx, rbx
mov qword [0x140133e80], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117bc8]
mov rcx, rbx
mov qword [0x140133e88], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117ba8]
mov rcx, rbx
mov qword [0x140133e90], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117b90]
mov rcx, rbx
mov qword [0x140133e98], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117b78]
mov rcx, rbx
mov qword [0x140133ea0], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117b68]
mov rcx, rbx
mov qword [0x140133ea8], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117b50]
mov rcx, rbx
mov qword [0x140133eb0], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, [0x140117b40]
mov qword [0x140133eb8], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
xor ebx, ebx
mov r9, rax
mov qword [0x140133d78], rax
mov rax, qword [0x140133f88]
cmp rax, rbx
jne 0x14001f490
cmp qword [0x140133d98], rbx
je 0x14001f490
xor eax, eax
lea rdx, [rsp + 0x90]
lea rcx, [0x140133f88]
xor r8d, r8d
mov dword [rsp + 0x90], ebp
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], rax
call r9
mov rax, qword [0x140133f88]
lea rcx, [rsi - 1]
cmp rcx, 0xfffffffffffffffe
jae 0x14001f826
lea rax, [rsi + 2]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x30], rbx
mov r13, rbx
mov r14, rbx
mov qword [rsp + 0x88], rax
mov dword [rsp + 0x50], ebp
mov qword [rsp + 0x48], rbx
mov dword [rsp + 0x360], ebx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rbx
call fcn.14006608c
mov edx, 0x7c
mov rcx, rsi
call qword [sym.imp.SHLWAPI.DLL_StrChrW]
mov rdi, rax
cmp rax, rbx
je 0x14001f4ff
mov word [rax], bx
xor edx, edx
mov rcx, rsi
mov r15, rax
lea r8d, [rdx + 0x23]
call qword [sym.imp.SHLWAPI.DLL_StrRChrW]
mov ecx, 0x23
mov rbp, rax
mov rax, qword [0x140133d98]
cmp cx, word [rsi]
je 0x14001f538
cmp rdi, rbx
jne 0x14001f533
cmp rax, rbx
jne 0x14001f6b6
cmp cx, word [rsi]
jne 0x14001f549
mov r13, qword [0x140133f38]
mov rbp, rsi
mov esi, 2
jmp 0x14001f5b1
cmp rbp, rbx
je 0x14001f6ad
movzx ebx, word [rbp]
xor eax, eax
mov rcx, rsi
mov word [rbp], ax
call fcn.14001b86c
mov esi, 2
mov r8d, esi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_LoadLibraryExW]
mov word [rbp], bx
xor ebx, ebx
mov r14, rax
mov r13, rax
cmp rdi, rbx
je 0x14001f593
mov r8, rdi
sub r8, rbp
sar r8, 1
jmp 0x14001f59f
mov rcx, rbp
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
movsxd r8, eax
lea rcx, [rsp + 0x48]
mov rdx, rbp
call fcn.140061ba8
mov rbp, qword [rsp + 0x48]
cmp rdi, rbx
je 0x14001f75b
add rdi, rsi
je 0x14001f75b
movzx eax, word [rdi]
neg ax
sbb rcx, rcx
and rcx, rdi
mov rdi, rcx
cmp rcx, rbx
je 0x14001f75b
call fcn.14005b9f4
cmp al, bl
je 0x14001f61d
mov rdx, rbp
mov rcx, r13
mov rdi, rsi
call qword [sym.imp.USER32.DLL_LoadBitmapW]
mov rbx, rax
xor eax, eax
cmp rbx, rax
je 0x14001f616
lea r8, [rsp + 0x30]
xor edx, edx
mov rcx, rbx
call qword [0x140133de0]
mov rcx, rbx
call qword [sym.imp.GDI32.DLL_DeleteObject]
xor ebx, ebx
jmp 0x14001f75b
mov rcx, rdi
call fcn.14005b9b4
cmp al, bl
je 0x14001f63b
mov edi, 3
mov dword [rsp + 0x360], 0x14
jmp 0x14001f657
mov rcx, rdi
call fcn.14005b960
cmp al, bl
je 0x14001f75b
mov edi, 0xe
mov dword [rsp + 0x360], esi
mov r9d, dword [rsp + 0x80]
mov r8d, dword [rsp + 0x78]
lea rax, [rsp + 0x360]
mov qword [rsp + 0x28], rax
mov rdx, rbp
mov rcx, r13
mov qword [rsp + 0x20], rbx
call fcn.140070b08
bt dword [rsp + 0x360], 8
mov rbx, rax
jae 0x14001f72e
mov qword [rsp + 0x30], rax
xor eax, eax
cmp rbx, rax
je 0x14001f754
or qword [r12], 4
jmp 0x14001f749
cmp rax, rbx
je 0x14001f7fc
mov rcx, rsi
call fcn.140066a10
cmp al, bl
je 0x14001f6eb
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.14001df18
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
xor r8d, r8d
call fcn.14005fd50
mov qword [rsp + 0x30], rax
jmp 0x14001f7fc
xor r9d, r9d
mov rdx, rsi
xor ecx, ecx
lea r8d, [r9 + 1]
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.DLL_LoadImageW]
mov rbx, rax
xor eax, eax
cmp rbx, rax
je 0x14001f7b2
lea esi, [rax + 2]
cmp dword [rsp + 0x368], eax
je 0x14001f732
or qword [r12], rsi
mov qword [rsp + 0x30], rbx
jmp 0x14001f749
xor eax, eax
jmp 0x14001f71a
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [0x140133e60]
mov rcx, rbx
call qword [sym.imp.USER32.DLL_DestroyIcon]
xor ebx, ebx
cmp qword [rsp + 0x30], rbx
jne 0x14001f75b
jmp 0x14001f756
xor ebx, ebx
mov qword [rsp + 0x30], rbx
cmp r13, rbx
je 0x14001f7a2
cmp qword [rsp + 0x30], rbx
jne 0x14001f7a2
cmp rdi, rbx
lea r9, [rsp + 0x60]
mov rdx, rbp
cmove rdi, rsi
mov rcx, r13
mov qword [rsp + 0x20], rbx
mov r8, rdi
call fcn.14001e6ec
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
xor r8d, r8d
call fcn.14005fd50
mov qword [rsp + 0x30], rax
cmp rax, rbx
jne 0x14001f7fc
cmp r14, rbx
je 0x14001f7fc
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_FreeLibrary]
jmp 0x14001f7fc
lea rdx, [rsp + 0x30]
mov rcx, rsi
call qword [0x140133d98]
xor ebx, ebx
cmp qword [rsp + 0x30], rbx
je 0x14001f7fc
cmp r12, rbx
je 0x14001f7fc
lea r8d, [rbx + 0x2e]
xor edx, edx
mov rcx, rsi
call qword [sym.imp.SHLWAPI.DLL_StrRChrW]
cmp rax, rbx
je 0x14001f7fc
lea rcx, [rax + 2]
lea rdx, [0x140117b38]
call qword [sym.imp.KERNEL32.DLL_lstrcmpiW]
cmp eax, ebx
jne 0x14001f7fc
or qword [r12], 4
cmp r15, rbx
je 0x14001f80a
mov eax, 0x7c
mov word [r15], ax
mov rbx, qword [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.140059370
lea rcx, [rsp + 0x48]
call fcn.140059370
mov rax, rbx
mov rbx, qword [rsp + 0x350]
add rsp, 0x310
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret