Function at 0x14000b5d0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x5a0]
sub rsp, 0x6a0
lea rcx, [rbp + 0x480]
call fcn.14000df30
mov rcx, rax
lea rdx, [rbp]
mov eax, 2
nop
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rax, 1
jne 0x14000b600
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
mov rax, qword [rcx + 0x10]
mov qword [rdx + 0x10], rax
mov eax, dword [rcx + 0x18]
mov dword [rdx + 0x18], eax
mov rax, qword [rbp]
shr rax, 0x20
mov esi, 1
cmp eax, 6
jne 0x14000b686
cmp dword [rbp + 8], esi
jne 0x14000b686
mov byte [0x14001fae2], sil
jmp 0x14000b6c3
call fcn.14000b280
add dword [0x14001f090], eax
mov dword [rbp + 0x5d0], esi
mov r8d, 4
lea rdx, [rbp + 0x5d0]
lea ecx, [r8 + 4]
call qword [0x14001ff38]
mov byte [0x14001fae2], 0
call fcn.14000b070
movzx eax, al
add dword [0x14001f090], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xor r14d, r14d
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
lea rdx, str.C:Program_Files__x86_WegameUpdate.exe
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], r14w
jne 0x14000b6e6
lea rcx, [rsp + 0x38]
call fcn.140006880
lea rcx, [rsp + 0x38]
call fcn.14000afb0
test al, al
jne 0x14000b79e
mov ebx, r14d
call qword [0x14001fea0]
mov rdi, rax
nop dword [rax + rax]
mov qword [rbp + 0x5d8], 8
lea rcx, [rbp + 0x5d8]
call qword [0x14001fe10]
mov ecx, 0x140
call qword [0x14001ff68]
call qword [0x14001fea0]
sub eax, dword [rbp + 0x5dc]
cmp eax, 0x1f4
setb cl
mov r8d, r14d
movzx edx, cl
cmp eax, 0x13e
cmovae r8d, edx
test r8b, r8b
je 0x14000b824
lea rcx, [0x140018d04]
call fcn.140005620
inc ebx
cmp ebx, 0xc
jl 0x14000b83d
lea rdx, str._n__
lea rcx, [rbp - 0x68]
call fcn.140003760
mov rcx, rax
call fcn.14000d750
mov edx, esi
lea rcx, [0x14000b520]
call qword [0x14001fd90]
call qword [0x14001fea0]
mov rbx, rax
mov ecx, 0x12c
call qword [0x14001ff68]
call qword [0x14001fea0]
mov edx, 0xfffffed4
sub edx, ebx
add edx, eax
movsxd rax, edx
shr rax, 0x20
sub edx, eax
xor edx, eax
mov eax, r14d
cmp edx, 0x64
setg al
add dword [0x14001f090], eax
call fcn.14000a610
movzx eax, al
add dword [0x14001f090], eax
mov dword [rbp - 0x40], 0x40
lea rcx, [rbp - 0x40]
call qword [0x14001fe48]
test eax, eax
je 0x14000b89f
mov rcx, qword [rbp - 0x38]
xorps xmm1, xmm1
test rcx, rcx
js 0x14000b873
cvtsi2sd xmm1, rcx
jmp 0x14000b887
lea rdx, [0x140018d20]
lea rcx, [rsp + 0x58]
call fcn.140003760
mov rcx, rax
call fcn.14000d750
call qword [0x14001fea0]
sub eax, edi
cmp eax, 0x927c0
jbe 0x14000b720
lea rdx, [0x140018d30]
lea rcx, [rsp + 0x78]
call fcn.140003760
mov rcx, rax
call fcn.14000d750
call fcn.14000d7f0
jmp 0x14000b720
mov rax, rcx
shr rax, 1
and ecx, esi
or rax, rcx
cvtsi2sd xmm1, rax
addsd xmm1, xmm1
mulsd xmm1, qword [0x140019ec8]
movsd xmm0, qword [0x140019f00]
comisd xmm0, xmm1
mov eax, esi
ja 0x14000b8a2
mov eax, r14d
add dword [0x14001f090], eax
call qword [0x14001ff28]
mov ecx, 0x3ff
and ax, cx
cmp ax, 4
je 0x14000b8c6
call qword [0x14001ff28]
mov eax, esi
jmp 0x14000b8c9
mov eax, r14d
add dword [0x14001f090], eax
xor edx, edx
lea ecx, [rdx + 2]
call qword [0x14001fde8]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x14000b8e8
mov ebx, r14d
jmp 0x14000b933
mov dword [rbp], 0x238
xor edx, edx
mov r8d, 0x234
lea rcx, [rbp + 4]
call sub.VCRUNTIME140.dll_memset
mov ebx, r14d
lea rdx, [rbp]
mov rcx, rdi
call qword [0x14001fe78]
test eax, eax
je 0x14000b933
nop dword [rax]
nop dword [rax + rax]
inc ebx
lea rdx, [rbp]
mov rcx, rdi
call qword [0x14001fe00]
test eax, eax
jne 0x14000b920
cmp ebx, 0x28
adc dword [0x14001f090], r14d
xor edx, edx
lea ecx, [rdx + 2]
call qword [0x14001fde8]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14000b9e1
xor edx, edx
mov r8d, 0x234
lea rcx, [rbp + 0x244]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x240], 0x238
lea rdx, [rbp + 0x240]
mov rcx, rbx
call qword [0x14001fe78]
test eax, eax
je 0x14000b9d8
lea rdi, str.AcrylicService.exe
nop
lea rdx, [rbp + 0x26c]
mov rcx, 0xffffffffffffffff
nop
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [rdi + rcx*2 + 2]
jne 0x14000b9c4
add rcx, 2
cmp rcx, 0x13
je 0x14000bad5
movzx eax, word [rdx + rcx*2]
cmp ax, word [rdi + rcx*2]
je 0x14000b9a0
lea rdx, [rbp + 0x240]
mov rcx, rbx
call qword [0x14001fe00]
test eax, eax
jne 0x14000b990
mov rcx, rbx
call qword [0x14001ff30]
mov esi, r14d
add dword [0x14001f090], esi
mov dword [rsp + 0x20], 0x3e
mov byte [rsp + 0x24], 0x76
mov byte [rsp + 0x25], 0x57
mov byte [rsp + 0x26], 0x4e
mov byte [rsp + 0x27], 0x4d
mov byte [rsp + 0x28], 0x6a
mov byte [rsp + 0x29], 0x4c
mov byte [rsp + 0x2a], 0x5f
mov byte [rsp + 0x2b], 0x47
mov byte [rsp + 0x2c], 0x10
mov byte [rsp + 0x2d], 0x5b
mov byte [rsp + 0x2e], 0x46
mov byte [rsp + 0x2f], 0x5b
xor eax, eax
mov byte [rsp + 0x30], al
movzx eax, byte [rsp + 0x24]
mov rdx, r14
nop dword [rax]
movzx eax, byte [rsp + rdx + 0x24]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + rdx + 0x24], cl
inc rdx
cmp rdx, 0xc
jb 0x14000ba40
mov byte [rsp + 0x30], r14b
lea rdx, [rsp + 0x24]
lea rcx, [rsp + 0x38]
call fcn.140003760
nop
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x58]
call fcn.14000dc60
nop
cmp qword [rax + 0x18], 7
jbe 0x14000ba87
mov rax, qword [rax]
mov rcx, rax
call fcn.14000da90
add dword [0x14001f090], eax
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x14000bae8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bae3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bae3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rbx
call qword [0x14001ff30]
jmp 0x14000b9e4
call fcn.140013248
movdqa xmm0, xmmword [0x140019f10]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r14w
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x14000bb3c
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bb37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bb37
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013248
movdqa xmm0, xmmword [0x140019f20]
movdqu xmmword [rsp + 0x48], xmm0
mov byte [rsp + 0x38], 0
call qword [0x14001ff08]
mov ecx, dword [0x14001f090]
add ecx, eax
mov dword [0x14001f090], ecx
cmp ecx, 0x319
je 0x14000bb95
xor r9d, r9d
lea r8, str.Contact_deveploper_for_support
lea rdx, str.Error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call qword [0x14001fe20]
mov rcx, rax
xor edx, edx
call qword [0x14001fee0]
add rsp, 0x6a0
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret