Function at 0x140026f70
Capabilities:
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x1d0]
sub rsp, 0x2d0
mov rax, qword [0x14014dcf0]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov rdi, rdx
mov rsi, rcx
lea rdx, [rbp - 0x50]
mov r8d, 0x104
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.SetDllDirectoryW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.kernel32.dll
mov qword [0x140197328], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.SetSearchPathMode
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.kernel32.dll
mov qword [0x140197330], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.SetDefaultDllDirectories
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdx, qword [0x140197328]
mov qword [0x140197338], rax
test rdx, rdx
je 0x140027038
lea rcx, [0x1400ca5e0]
call rdx
mov rax, qword [0x140197338]
mov r8, qword [0x140197330]
test r8, r8
je 0x140027053
mov ecx, 0x8001
call r8
mov rax, qword [0x140197338]
test rax, rax
je 0x14002705f
mov ecx, 0x800
call rax
call fcn.14001c750
lea rcx, [0x140196da0]
mov edx, 0x104
call qword [sym.imp.KERNEL32.dll_VirtualLock]
lea rcx, [0x140150808]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [0x1401507d8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [0x140190c98]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [0x140150c58]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea r9, str.InitApp:3725
lea rdx, [0x140197310]
lea rcx, str.msvcrt.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3726
lea rdx, [0x140197300]
lea rcx, str.ntmarta.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3727
lea rdx, [0x140197288]
lea rcx, str.MPR.DLL
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3736
lea rdx, [0x140197260]
lea rcx, str.psapi.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3737
lea rdx, [0x140197268]
lea rcx, str.secur32.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3738
lea rdx, [0x1401972d8]
lea rcx, str.msasn1.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3739
lea rdx, [0x140197218]
lea rcx, str.Usp10.DLL
mov r8d, 1
call fcn.140026d90
mov r11d, dword [0x140196f30]
test r11d, r11d
jg 0x1400271a5
mov byte [0], 0
mov r11d, dword [0x140196f30]
shl r11d, 8
or r11d, dword [0x140196f34]
shl r11d, 8
or r11d, dword [0x140196f38]
cmp r11d, 0x60100
jl 0x1400271e4
lea r9, str.InitApp:3741
lea rdx, [0x1401972d0]
lea rcx, str.dwmapi.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3742
lea rdx, [0x140197228]
lea rcx, str.UXTheme.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3744
lea rdx, [0x1401972f8]
lea rcx, str.msls31.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3745
lea rdx, [0x140197200]
lea rcx, str.SETUPAPI.DLL
xor r8d, r8d
call fcn.140026d90
lea r9, str.InitApp:3746
lea rdx, [0x140197208]
lea rcx, str.SHLWAPI.DLL
xor r8d, r8d
call fcn.140026d90
lea r9, str.InitApp:3748
lea rdx, [0x140197230]
lea rcx, str.userenv.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3749
lea rdx, [0x140197238]
lea rcx, str.rsaenh.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3779
lea rdx, [0x1401972e0]
lea rcx, str.crypt32.dll
mov r8d, 1
call fcn.140026d90
mov r11d, dword [0x140196f30]
test r11d, r11d
jg 0x1400272d9
mov byte [0], 0
mov r11d, dword [0x140196f30]
shl r11d, 8
or r11d, dword [0x140196f34]
shl r11d, 8
or r11d, dword [0x140196f38]
cmp r11d, 0x60100
jl 0x1400273bc
lea r9, str.InitApp:3783
lea rdx, [0x140197220]
lea rcx, str.CryptSP.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3785
lea rdx, [0x1401972a8]
lea rcx, str.cfgmgr32.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3786
lea rdx, [0x1401972b0]
lea rcx, str.devobj.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3787
lea rdx, [0x1401972b8]
lea rcx, str.powrprof.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3789
lea rdx, [0x1401972e8]
lea rcx, str.bcrypt.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3790
lea rdx, [0x1401972f0]
lea rcx, str.bcryptprimitives.dll
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3794
lea rdx, [0x140197308]
lea rcx, str.WINSCARD.DLL
mov r8d, 1
call fcn.140026d90
lea r9, str.InitApp:3797
lea rdx, [0x1401971f8]
lea rcx, str.COMCTL32.DLL
xor r8d, r8d
call fcn.140026d90
mov rcx, qword [0x1401971f8]
lea rdx, str.InitCommonControls
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x1401971f8]
lea rdx, str.ImageList_Add
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x1401971f8]
lea rdx, str.ImageList_Create
mov qword [0x140197348], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140197340], rax
test rbx, rbx
je 0x140027ffc
cmp qword [0x140197348], 0
je 0x140027ffc
test rax, rax
je 0x140027ffc
call rbx
lea r9, str.InitApp:3811
lea rdx, [0x1401971f0]
lea rcx, str.Riched20.dll
xor r8d, r8d
call fcn.140026d90
lea r9, str.InitApp:3812
lea rdx, [0x140197320]
lea rcx, str.Advapi32.dll
xor r8d, r8d
call fcn.140026d90
lea rcx, [rbp - 0x50]
call fcn.140021550
test eax, eax
jne 0x1400274c4
lea rcx, str.DIST_PACKAGE_CORRUPTED
call fcn.14003a7b0
mov rcx, rax
call fcn.140018310
int3
mov rcx, qword [0x140197200]
lea rdx, str.SetupCloseInfFile
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140197200]
lea rdx, str.SetupDiOpenClassRegKey
mov qword [0x140197350], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140197200]
lea rdx, str.SetupInstallFromInfSectionW
mov qword [0x140197358], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140197200]
lea rdx, str.SetupOpenInfFileW
mov qword [0x140197360], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp qword [0x140197350], 0
mov qword [0x140197368], rax
je 0x140027fe7
cmp qword [0x140197358], 0
je 0x140027fe7
cmp qword [0x140197360], 0
je 0x140027fe7
test rax, rax
je 0x140027fe7
mov rcx, qword [0x140197208]
lea rdx, str.SHDeleteKeyW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140197208]
lea rdx, str.SHStrDupW
mov qword [0x140197370], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140197208]
lea rdx, str.UrlUnescapeW
mov qword [0x140197378], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140197208]
lea rdx, str.IUnknown_QueryService
mov qword [0x140197380], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140197398], rax
test rax, rax
jne 0x1400275ed
mov rcx, qword [0x140197208]
mov edx, 0xb0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140197398], rax
cmp qword [0x140197370], 0
je 0x140027fd2
cmp qword [0x140197378], 0
je 0x140027fd2
cmp qword [0x140197380], 0
je 0x140027fd2
test rax, rax
je 0x140027fd2
mov eax, dword [0x140196f30]
test eax, eax
jg 0x140027638
mov byte [0], 0
mov eax, dword [0x140196f30]
shl eax, 8
or eax, dword [0x140196f34]
shl eax, 8
or eax, dword [0x140196f38]
cmp eax, 0x60000
jl 0x1400276b4
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.ChangeWindowMessageFilter
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140197388], rax
test rax, rax
je 0x1400276b4
mov edx, 1
mov ecx, 0x233
call rax
mov r11, qword [0x140197388]
test r11, r11
je 0x1400276b4
mov edx, 1
lea ecx, [rdx + 0x49]
call r11
mov r11, qword [0x140197388]
test r11, r11
je 0x1400276b4
mov edx, 1
lea ecx, [rdx + 0x48]
call r11
mov rcx, qword [0x140197320]
lea rdx, str.CreateProcessWithTokenW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
xor ecx, ecx
mov qword [0x1401971c0], rsi
mov qword [0x140197390], rax
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
or eax, 0x8001
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
lea rcx, str.shell32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.SetCurrentProcessExplicitAppUserModelID
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14002771e
lea rcx, str.IDRIX.VeraCrypt
call rax
mov rax, qword [0x140190ed8]
mov byte [rbp - 0x70], 0
test rax, rax
jne 0x140027752
lea rcx, str.Configuration.xml
call fcn.140023900
lea rdx, [rbp - 0x68]
mov rcx, rax
call fcn.1400180d0
mov qword [0x140190ed8], rax
test rax, rax
je 0x14002778c
lea r9, str.Language
lea r8, [0x1400ccb60]
lea rdx, [0x1400ccb58]
mov rcx, rax
call fcn.14004b750
test rax, rax
je 0x14002778c
lea rdx, [rbp - 0x70]
mov r8d, 6
mov rcx, rax
call fcn.14004b560
lea r11, [rbp - 0x70]
jmp 0x1400277dc
lea r11, [0x1400cc325]
lea rax, [rbp - 0x70]
mov edx, 6
mov r8, r11
lea rcx, [rbp - 0x70]
sub r8, rax
nop word [rax + rax]
lea rax, [rdx + 0x7ffffff8]
test rax, rax
je 0x1400277d1
movzx eax, byte [rcx + r8]
test al, al
je 0x1400277d1
mov byte [rcx], al
inc rcx
dec rdx
jne 0x1400277b0
jmp 0x1400277d6
test rdx, rdx
jne 0x1400277d9
dec rcx
mov byte [rcx], 0
mov rcx, r11
call fcn.14003a760
xor ebx, ebx
cmp byte [rbp - 0x70], bl
jne 0x14002789a
lea r9, [rbp - 0x68]
lea r8, [0x1400ca5e0]
lea rdx, str.SetupUILanguage
lea rcx, str.SoftwareVeraCrypt
mov dword [rsp + 0x20], 0xc
call fcn.14003fd00
mov qword [rsp + 0x38], rbx
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rbx
lea r8, [rbp - 0x68]
or r9d, 0xffffffff
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], 6
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jle 0x140027859
lea rcx, [rbp - 0x70]
call fcn.14003a760
mov dword [0x140196f24], 1
cmp byte [rbp - 0x70], bl
jne 0x14002789a
call fcn.140023560
test eax, eax
je 0x14002788e
mov rcx, qword [0x1401971c0]
lea r9, [0x14003b1d0]
xor r8d, r8d
mov edx, 0x201
mov qword [rsp + 0x20], 1
call qword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x14002789a
lea rcx, [0x1400cede4]
call fcn.14003a760
call fcn.14003b1c0
call fcn.140023560
test eax, eax
je 0x14002792f
call qword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x14002792f
call fcn.14001ed90
test eax, eax
je 0x14002792f
lea rdx, str._q_UAC
mov rcx, rdi
call fcn.1400a50b4
cmp rax, rdi
jne 0x14002790a
cmp dword [0x140196ef0], ebx
jne 0x1400278ff
lea rcx, str.UAC_INIT_ERROR
call fcn.14003a7b0
mov r8, qword [0x140196ee8]
mov r9d, 0x10
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, 1
call fcn.1400a5c20
int3
lea rdx, [rbp - 0x50]
mov r8, rdi
xor ecx, ecx
call fcn.1400268c0
test eax, eax
je 0x140027924
xor ecx, ecx
call fcn.1400a5c20
int3
mov ecx, 1
call fcn.1400a5c20
int3
lea rcx, [0x140019490]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
lea rcx, [0x140019540]
call fcn.1400a8508
mov ecx, 0x1000
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, ebx
test eax, eax
setne cl
mov dword [0x140196f40], ecx
call fcn.14001fbb0
test eax, eax
jne 0x140027998
lea rcx, str.UNSUPPORTED_OS
call fcn.14003a7b0
mov r8, qword [0x140196ee8]
mov r9d, 0x10
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, 1
call fcn.1400a5c20
int3
cmp dword [0x140196f2c], 8
jne 0x140027a0c
cmp dword [0x140196f38], 1
jge 0x140027a0c
lea rax, [rbp - 0x68]
lea rdx, str.SystemCurrentControlSetControlminint
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x140027a02
cmp dword [0x140196ef0], ebx
jne 0x140027a0c
lea rcx, str.LARGE_IDE_WARNING_XP
call fcn.14003a7b0
mov r8, qword [0x140196ee8]
mov r9d, 0x30
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x140027a0c
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [0x1401971c0]
lea r8, [rsp + 0x40]
lea rdx, str.32770
call qword [sym.imp.USER32.dll_GetClassInfoW]
test eax, eax
jne 0x140027a4c
lea rdx, str.InitApp:3987
xor ecx, ecx
call fcn.140025910
lea rcx, str.INIT_REGISTER
call fcn.14003a7b0
mov rcx, rax
call fcn.140018310
int3
mov edx, 0x1f5
mov rcx, rsi
call qword [sym.imp.USER32.dll_LoadIconW]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rsp + 0x60], rax
lea rax, [0x1400d0650]
mov qword [rbp - 0x80], rax
lea rax, [0x1400193e0]
mov qword [rsp + 0x48], rax
call qword [sym.imp.USER32.dll_LoadCursorW]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x54], 0x1e
call qword [sym.imp.USER32.dll_RegisterClassW]
xor ecx, ecx
mov word [0x140150800], ax
test ax, ax
jne 0x140027aca
lea rdx, str.InitApp:4005
call fcn.140025910
lea rcx, str.INIT_REGISTER
call fcn.14003a7b0
mov rcx, rax
call fcn.140018310
int3
lea rax, [0x1400d0628]
mov edx, 0x7f00
mov qword [rbp - 0x80], rax
lea rax, [0x140019290]
mov qword [rsp + 0x48], rax
call qword [sym.imp.USER32.dll_LoadCursorW]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x54], 0x1e
call qword [sym.imp.USER32.dll_RegisterClassW]
mov word [0x140196b88], ax
test ax, ax
jne 0x140027b33
lea rdx, str.InitApp:4017
xor ecx, ecx
call fcn.140025910
lea rcx, str.INIT_REGISTER
call fcn.14003a7b0
mov rcx, rax
call fcn.140018310
int3
mov rcx, qword [0x1401971c0]
lea r9, [0x140018de0]
xor r8d, r8d
mov edx, 0x204
mov qword [rsp + 0x20], 1
call qword [sym.imp.USER32.dll_DialogBoxParamW]
call fcn.14001d3a0
mov r11d, dword [0x140196f30]
test r11d, r11d
jg 0x140027b77
mov byte [0], bl
mov r11d, dword [0x140196f30]
shl r11d, 8
or r11d, dword [0x140196f34]
shl r11d, 8
or r11d, dword [0x140196f38]
cmp r11d, 0x60100
jl 0x140027bd6
call fcn.140019550
shr eax, 0xc
and eax, 1
mov ecx, eax
call fcn.140014fc0
call fcn.140014fd0
test eax, eax
je 0x140027bd6
lea rcx, [0x14001bf20]
call fcn.140014fe0
test eax, eax
jne 0x140027bd6
lea rcx, str.OUTOFMEMORY
call fcn.14003a7b0
mov rcx, rax
call fcn.140018310
int3
call fcn.140019580
mov ecx, eax
call fcn.140037de0
test eax, eax
jne 0x140028011
lea rdx, str.InitApp:4041
xor ecx, ecx
call fcn.140025910
mov rcx, qword [0x1401971f0]
test rcx, rcx
je 0x140027c11
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401971f0], rbx
mov rcx, qword [0x1401971f8]
test rcx, rcx
je 0x140027c2a
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401971f8], rbx
mov rcx, qword [0x140197200]
test rcx, rcx
je 0x140027c43
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197200], rbx
mov rcx, qword [0x140197208]
test rcx, rcx
je 0x140027c5c
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197208], rbx
mov rcx, qword [0x140197210]
test rcx, rcx
je 0x140027c75
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197210], rbx
mov rcx, qword [0x140197218]
test rcx, rcx
je 0x140027c8e
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197218], rbx
mov rcx, qword [0x140197220]
test rcx, rcx
je 0x140027ca7
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197220], rbx
mov rcx, qword [0x140197228]
test rcx, rcx
je 0x140027cc0
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197228], rbx
mov rcx, qword [0x140197230]
test rcx, rcx
je 0x140027cd9
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197230], rbx
mov rcx, qword [0x140197238]
test rcx, rcx
je 0x140027cf2
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197238], rbx
mov rcx, qword [0x140197240]
test rcx, rcx
je 0x140027d0b
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197240], rbx
mov rcx, qword [0x140197248]
test rcx, rcx
je 0x140027d24
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197248], rbx
mov rcx, qword [0x140197250]
test rcx, rcx
je 0x140027d3d
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197250], rbx
mov rcx, qword [0x140197258]
test rcx, rcx
je 0x140027d56
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197258], rbx
mov rcx, qword [0x140197260]
test rcx, rcx
je 0x140027d6f
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197260], rbx
mov rcx, qword [0x140197268]
test rcx, rcx
je 0x140027d88
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197268], rbx
mov rcx, qword [0x140197270]
test rcx, rcx
je 0x140027da1
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197270], rbx
mov rcx, qword [0x140197278]
test rcx, rcx
je 0x140027dba
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197278], rbx
mov rcx, qword [0x140197280]
test rcx, rcx
je 0x140027dd3
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197280], rbx
mov rcx, qword [0x140197288]
test rcx, rcx
je 0x140027dec
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197288], rbx
mov rcx, qword [0x140197290]
test rcx, rcx
je 0x140027e05
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197290], rbx
mov rcx, qword [0x140197298]
test rcx, rcx
je 0x140027e1e
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197298], rbx
mov rcx, qword [0x1401972a0]
test rcx, rcx
je 0x140027e37
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401972a0], rbx
mov rcx, qword [0x140197220]
test rcx, rcx
je 0x140027e50
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197220], rbx
mov rcx, qword [0x1401972a8]
test rcx, rcx
je 0x140027e69
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401972a8], rbx
mov rcx, qword [0x1401972b0]
test rcx, rcx
je 0x140027e82
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401972b0], rbx
mov rcx, qword [0x1401972b8]
test rcx, rcx
je 0x140027e9b
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401972b8], rbx
mov rcx, qword [0x1401972c0]
test rcx, rcx
je 0x140027eb4
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401972c0], rbx
mov rcx, qword [0x1401972c8]
test rcx, rcx
je 0x140027ecd
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401972c8], rbx
mov rcx, qword [0x1401972d0]
test rcx, rcx
je 0x140027ee6
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401972d0], rbx
mov rcx, qword [0x1401972d8]
test rcx, rcx
je 0x140027eff
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401972d8], rbx
mov rcx, qword [0x1401972e0]
test rcx, rcx
je 0x140027f18
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401972e0], rbx
mov rcx, qword [0x1401972e8]
test rcx, rcx
je 0x140027f31
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401972e8], rbx
mov rcx, qword [0x1401972f0]
test rcx, rcx
je 0x140027f4a
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401972f0], rbx
mov rcx, qword [0x1401972f8]
test rcx, rcx
je 0x140027f63
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401972f8], rbx
mov rcx, qword [0x140197300]
test rcx, rcx
je 0x140027f7c
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197300], rbx
mov rcx, qword [0x140197308]
test rcx, rcx
je 0x140027f95
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197308], rbx
mov rcx, qword [0x140197310]
test rcx, rcx
je 0x140027fae
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197310], rbx
mov rcx, qword [0x140197320]
test rcx, rcx
je 0x140027fc7
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140197320], rbx
mov ecx, 1
call fcn.1400a5c20
int3
lea rcx, str.INIT_DLL
call fcn.14003a7b0
mov rcx, rax
call fcn.140018310
int3
lea rcx, str.INIT_DLL
call fcn.14003a7b0
mov rcx, rax
call fcn.140018310
int3
lea rcx, str.INIT_DLL
call fcn.14003a7b0
mov rcx, rax
call fcn.140018310
int3
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.1400a4e70
mov rbx, qword [rsp + 0x300]
add rsp, 0x2d0
pop rdi
pop rsi
pop rbp
ret