Function at 0x1400021f0
Capabilities:
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x3a8]
sub rsp, 0x490
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x380], rax
lea rcx, str.KERNEL32.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x14001ed40], rax
test rax, rax
je 0x140002299
lea rdx, [0x14001a0d8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14001ed40]
lea rdx, [0x14001a0e8]
mov qword [0x14001ecb8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14001ed40]
lea rdx, [0x14001a0f8]
mov qword [0x14001ed38], rax
call rax
mov rcx, qword [0x14001ed40]
lea rdx, [0x14001a108]
mov qword [0x14001ecd8], rax
call qword [0x14001ed38]
call qword [0x14001ecd8]
mov rcx, rax
mov r15, rax
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [rax + 2]
mov eax, ecx
mov edx, ecx
shr eax, 1
xor ecx, ecx
lea ebx, [rax*8 + 8]
add rdx, rbx
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
xor r8d, r8d
xor sil, sil
xor r14d, r14d
mov rdi, rax
mov r11b, 1
lea r10, [rbx + rax]
xor bl, bl
mov qword [rax], r10
xor edx, edx
mov r9b, byte [r15]
jmp 0x14000236b
test sil, sil
je 0x140002300
cmp r9b, 0x22
jne 0x1400022f8
xor sil, sil
jmp 0x140002364
mov byte [rdx + r10], r9b
inc edx
jmp 0x140002364
movsx ecx, r9b
sub ecx, 9
je 0x140002354
sub ecx, 1
je 0x140002354
sub ecx, 3
je 0x140002354
sub ecx, 0x13
je 0x140002354
cmp ecx, 2
je 0x140002338
mov bl, 1
test r11b, r11b
je 0x140002330
mov ecx, edx
add rcx, r10
mov qword [rax + r8*8], rcx
inc r8d
mov byte [rdx + r10], r9b
inc edx
jmp 0x14000234f
mov sil, 1
mov bl, sil
test r11b, r11b
je 0x14000234f
mov ecx, edx
add rcx, r10
mov qword [rax + r8*8], rcx
inc r8d
xor r11b, r11b
jmp 0x140002364
test bl, bl
je 0x14000235f
mov byte [rdx + r10], 0
inc edx
xor bl, bl
mov r11b, 1
inc r14d
mov r9b, byte [r14 + r15]
test r9b, r9b
jne 0x1400022e8
mov byte [rdx + r10], r9b
and qword [rax + r8*8], 0
test rdi, rdi
jne 0x14000238b
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
cmp r8d, 2
jne 0x14000246d
call fcn.140002d84
xor edx, edx
lea rcx, [rbp - 0x70]
mov r8d, 0x3e8
call fcn.140010190
mov rcx, qword [rdi + 8]
lea r8, [rbp - 0x74]
lea rdx, [rbp - 0x80]
call fcn.140002ce0
test eax, eax
je 0x14000246d
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, 0x7c
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x78]
mov word [rbp - 0x78], ax
lea rcx, [rbp - 0x70]
lea ebx, [rax - 0x7b]
call fcn.1400069d8
jmp 0x14000243e
mov edx, ebx
sub edx, 1
je 0x140002428
sub edx, 1
je 0x140002421
sub edx, 1
je 0x14000241a
sub edx, 1
je 0x140002413
cmp edx, 1
jne 0x14000242d
mov qword [rsp + 0x40], rax
jmp 0x14000242d
mov qword [rsp + 0x38], rax
jmp 0x14000242d
mov qword [rsp + 0x30], rax
jmp 0x14000242d
mov qword [rsp + 0x28], rax
jmp 0x14000242d
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x80]
xor ecx, ecx
lea rdx, [rbp - 0x78]
call fcn.1400069d8
inc ebx
test rax, rax
jne 0x1400023f1
movups xmm0, xmmword [rsp + 0x20]
lea rcx, [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm1
call fcn.140001f10
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]