Function at 0x14000d310
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x340
mov rax, qword [0x14006f058]
xor rax, rsp
mov qword [rsp + 0x330], rax
mov r15, rcx
xor ebx, ebx
mov dword [rsp + 0x258], 0xe7fae2cd
mov dword [rsp + 0x25c], 0xbfbfe7ef
mov dword [rsp + 0x260], 0xfdfceba0
xor eax, eax
mov byte [rsp + 0x264], al
mov edx, ebx
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x258]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0xc
jb 0x14000d370
mov byte [rsp + 0x264], 0
lea rcx, [rsp + 0x258]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
test rax, rax
jne 0x14000d3c2
lea rcx, [rsp + 0x258]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
je 0x14000e7fb
mov dword [rsp + 0x228], 0xe7edf7c9
mov dword [rsp + 0x22c], 0xeee3f9da
mov dword [rsp + 0x230], 0xe3fceb
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0xb
jb 0x14000d3f0
mov byte [rsp + 0x233], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r14, 0xffffffffffffffff
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000d440
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000d4cb
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d4c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e823
call fcn.14002e3f8
test rdi, rdi
je 0x14000e829
movdqa xmm0, xmmword [0x140057080]
movdqu xmmword [rsp + 0x278], xmm0
mov dword [rsp + 0x288], 0xe9f9f9c5
mov dword [rsp + 0x28c], 0xe9f3f3e9
xor eax, eax
mov byte [rsp + 0x290], al
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x278]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0x18
jb 0x14000d510
mov byte [rsp + 0x290], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x278]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000d554
lea rdx, [rsp + 0x278]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x38], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000d5e0
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d5db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e851
call fcn.14002e3f8
test rdi, rdi
je 0x14000e857
movdqa xmm0, xmmword [0x140057060]
movdqu xmmword [rsp + 0x228], xmm0
mov edx, ebx
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0xf
jb 0x14000d600
mov byte [rsp + 0x237], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000d644
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x40], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000d6d0
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d6cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e87f
call fcn.14002e3f8
test rdi, rdi
je 0x14000e885
mov dword [rsp + 0x228], 0xeae7f5d6
mov dword [rsp + 0x22c], 0xbefff8ef
mov dword [rsp + 0x230], 0xe9f5c1bc
mov word [rsp + 0x234], 0xc4e6
xor eax, eax
mov byte [rsp + 0x236], al
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x14000d710
mov byte [rsp + 0x236], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000d754
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x48], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000d7e0
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d7db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e8ad
call fcn.14002e3f8
test rdi, rdi
je 0x14000e8b3
mov dword [rsp + 0x228], 0xfcece8cb
mov dword [rsp + 0x22c], 0xbfbfeee6
mov dword [rsp + 0x230], 0xe2e2e6c8
mov word [rsp + 0x234], 0xc4e6
xor eax, eax
mov byte [rsp + 0x236], al
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x14000d820
mov byte [rsp + 0x236], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000d864
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x50], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000d8f0
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d8eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e8db
call fcn.14002e3f8
test rdi, rdi
je 0x14000e8e1
mov dword [rsp + 0x228], 0xfcece8cb
mov dword [rsp + 0x22c], 0xbfbfeee6
mov dword [rsp + 0x230], 0xe5e8eac0
mov word [rsp + 0x234], 0xc5
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0xd
jb 0x14000d930
mov byte [rsp + 0x235], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000d974
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x58], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000da00
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d9fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e909
call fcn.14002e3f8
test rdi, rdi
je 0x14000e90f
movdqa xmm0, xmmword [0x1400570f0]
movdqu xmmword [rsp + 0x298], xmm0
mov dword [rsp + 0x2a8], 0xd0e1e5f9
mov dword [rsp + 0x2ac], 0xf3fdf4
mov edx, ebx
movsxd rax, edx
lea rcx, [rsp + 0x298]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0x17
jb 0x14000da32
mov byte [rsp + 0x2af], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x298]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000da76
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x60], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000db02
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dafd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e937
call fcn.14002e3f8
test rdi, rdi
je 0x14000e93d
movdqa xmm0, xmmword [0x140057070]
movdqu xmmword [rsp + 0x228], xmm0
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0xf
jb 0x14000db20
mov byte [rsp + 0x237], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000db64
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x70], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000dbf0
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dbeb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e965
call fcn.14002e3f8
test rdi, rdi
je 0x14000e96b
mov dword [rsp + 0x268], 0xe8fee3c7
mov dword [rsp + 0x26c], 0xbfbfe2fa
mov dword [rsp + 0x270], 0xfdfceba0
xor eax, eax
mov byte [rsp + 0x274], al
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x268]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0xc
jb 0x14000dc30
mov byte [rsp + 0x274], 0
lea rcx, [rsp + 0x268]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
test rax, rax
jne 0x14000dc82
lea rcx, [rsp + 0x268]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
je 0x14000e993
movdqa xmm0, xmmword [0x140057110]
movdqu xmmword [rsp + 0x300], xmm0
xor eax, eax
mov byte [rsp + 0x310], al
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x300]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0x10
jb 0x14000dca0
mov byte [rsp + 0x310], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x300]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000dce4
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x78], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000dd70
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dd6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e9bb
call fcn.14002e3f8
test rdi, rdi
je 0x14000e9c1
movdqa xmm0, xmmword [0x140057120]
movdqu xmmword [rsp + 0x2b8], xmm0
mov dword [rsp + 0x2c8], 0xfcfff2fa
mov word [rsp + 0x2cc], 0xe9
mov edx, ebx
movsxd rax, edx
lea rcx, [rsp + 0x2b8]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0x15
jb 0x14000dda1
mov byte [rsp + 0x2cd], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x2b8]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000dde5
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x88], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000de74
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000de6f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e9e9
call fcn.14002e3f8
test rdi, rdi
je 0x14000e9ef
movdqa xmm0, xmmword [0x140057090]
movdqu xmmword [rsp + 0x2d0], xmm0
mov word [rsp + 0x2e0], 0xe4e3
xor eax, eax
mov byte [rsp + 0x2e2], al
mov edx, ebx
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x2d0]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0x12
jb 0x14000deb0
mov byte [rsp + 0x2e2], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x2d0]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000def4
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0xa0], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000df83
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000df7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ea17
call fcn.14002e3f8
test rdi, rdi
je 0x14000ea1d
mov dword [rsp + 0x228], 0xfde6e8c5
mov dword [rsp + 0x22c], 0xdee0e4f8
mov dword [rsp + 0x230], 0xf8e6fdeb
mov word [rsp + 0x234], 0xf6f1
xor eax, eax
mov byte [rsp + 0x236], al
mov edx, ebx
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x14000dfc2
mov byte [rsp + 0x236], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000e006
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0xa8], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000e095
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e090
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ea3f
call fcn.14002e3f8
test rdi, rdi
je 0x14000ea45
mov dword [rsp + 0x228], 0xece4e2c2
mov dword [rsp + 0x22c], 0xe8dfeefe
mov dword [rsp + 0x230], 0xf2f9f9fc
mov word [rsp + 0x234], 0xf7
mov edx, ebx
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0xd
jb 0x14000e0d0
mov byte [rsp + 0x235], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000e114
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0xb8], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000e1a3
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e19e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ea67
call fcn.14002e3f8
test rdi, rdi
je 0x14000ea6d
movdqa xmm0, xmmword [0x1400570e0]
movdqu xmmword [rsp + 0x2e8], xmm0
mov word [rsp + 0x2f8], 0xf2fa
xor eax, eax
mov byte [rsp + 0x2fa], al
mov edx, ebx
movsxd rax, edx
lea rcx, [rsp + 0x2e8]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0x12
jb 0x14000e1d2
mov byte [rsp + 0x2fa], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x2e8]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000e216
lea rdx, [rsp + 0x2e8]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0xc0], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000e2a5
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e2a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ea8f
call fcn.14002e3f8
test rdi, rdi
je 0x14000ea95
lea rdx, str.LookupPrivilegeValueW
lea rcx, [rsp + 0x318]
call fcn.1400094b0
mov edx, ebx
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x318]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0x15
jb 0x14000e2d0
mov byte [rsp + 0x32d], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x318]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000e314
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x80], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000e3a3
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e39e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000eab7
call fcn.14002e3f8
test rdi, rdi
je 0x14000eabd
mov dword [rsp + 0x228], 0xe7edf7c9
mov dword [rsp + 0x22c], 0xecc1c8d9
mov dword [rsp + 0x230], 0xf4f7eee0
mov word [rsp + 0x234], 0xc4e0
xor eax, eax
mov byte [rsp + 0x236], al
mov edx, ebx
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x14000e3e2
mov byte [rsp + 0x236], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000e426
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x90], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000e4b5
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e4b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000eae5
call fcn.14002e3f8
test rdi, rdi
je 0x14000eaeb
mov dword [rsp + 0x228], 0xe7edf7c9
mov dword [rsp + 0x22c], 0xfbfeeed9
mov dword [rsp + 0x230], 0xc6f5ece7
xor eax, eax
mov byte [rsp + 0x234], al
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0xc
jb 0x14000e4f0
mov byte [rsp + 0x234], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000e534
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x98], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000e5c3
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e5be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000eb13
call fcn.14002e3f8
test rdi, rdi
je 0x14000eb19
mov dword [rsp + 0x228], 0xfbe9f3d5
mov dword [rsp + 0x22c], 0xffe9d8fe
mov dword [rsp + 0x230], 0xf4f3e6f8
mov word [rsp + 0x234], 0xc5
mov edx, ebx
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x7a]
xor byte [rcx], al
inc edx
cmp edx, 0xd
jb 0x14000e600
mov byte [rsp + 0x235], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000e644
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0xb0], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000e6d3
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e6ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000eb41
call fcn.14002e3f8
test rdi, rdi
je 0x14000eb47
lea rdx, str.CreateServiceW
lea rcx, [rsp + 0x228]
call fcn.140009580
movsxd rax, ebx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rbx - 0x7a]
xor byte [rcx], al
inc ebx
cmp ebx, 0xe
jb 0x14000e6f0
mov byte [rsp + 0x236], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
inc r14
cmp byte [rax + r14], 0
jne 0x14000e731
mov r8, r14
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.1400010f0
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [r15 + 0xc8], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000e7c3
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e7be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000eb6f
call fcn.14002e3f8
test rbx, rbx
je 0x14000eb75
mov al, 1
jmp 0x14000e7d2
mov rcx, qword [rsp + 0x330]
xor rcx, rsp
call fcn.14002e510
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
lea rdx, str.dll_1__not_found.
lea rcx, [rsp + 0x108]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x108]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_1.
lea rcx, [rsp + 0x120]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x120]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_8.
lea rcx, [rsp + 0x138]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x138]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_9.
lea rcx, [rsp + 0x150]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x150]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_10.
lea rcx, [rsp + 0x168]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x168]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_11.
lea rcx, [rsp + 0x180]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x180]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_12.
lea rcx, [rsp + 0x198]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x198]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_13.
lea rcx, [rsp + 0x1b0]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x1b0]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_15.
lea rcx, [rsp + 0x1c8]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x1c8]
call fcn.14002f754
lea rdx, str.dll_2__not_found.
lea rcx, [rsp + 0x1e0]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x1e0]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_a1.
lea rcx, [rsp + 0x1f8]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x1f8]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_a3.
lea rcx, [rsp + 0x210]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x210]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_a6.
lea rcx, [rsp + 0x30]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x30]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_a7.
lea rcx, [rsp + 0x48]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x48]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_a9.
lea rcx, [rsp + 0x60]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x60]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_a10.
lea rcx, [rsp + 0x78]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x78]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_a2.
lea rcx, [rsp + 0x90]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0x90]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_a4.
lea rcx, [rsp + 0xa8]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0xa8]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_a5.
lea rcx, [rsp + 0xc0]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0xc0]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_a8.
lea rcx, [rsp + 0xd8]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0xd8]
call fcn.14002f754
call fcn.140034d4c
int3
lea rdx, str.Cannot_find_function_a11.
lea rcx, [rsp + 0xf0]
call fcn.1400099f0
lea rdx, [0x14006d778]
lea rcx, [rsp + 0xf0]
call fcn.14002f754
int3