Function at 0x140006c40
Capabilities:
Check if file exists
Create directory
Encode data using xor
Get file attributes
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xd0
movaps xmmword [rsp + 0xc0], xmm6
mov rax, qword [0x140018040]
xor rax, rsp
mov qword [rbp + 0x3f], rax
lea rax, str.C:LegitVNSrcColorChangerPro.apk
mov qword [rbp - 9], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov r8d, 0xe
lea rdx, str.C:LegitVNSrc
lea rcx, [rbp - 0x59]
call fcn.14000dbf0
nop
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0xf
cmova rcx, qword [rbp - 0x59]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140006cb2
test al, 0x10
jne 0x140006d07
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0xf
cmova rcx, qword [rbp - 0x59]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
jne 0x140006d07
lea rdx, str.Failed_to_create_directory:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000cee0
mov rcx, rax
lea rdx, [rbp - 0x59]
call fcn.14000d270
lea rdx, [0x14000d2b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 0xf
jbe 0x140006d45
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006d40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f4cc
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2f], xmm1
mov r8d, 0x28
lea rdx, str._C:Program_FilesBlueStacksHD_Adb.exe_
lea rcx, [rbp + 0x1f]
call fcn.14000dbf0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 1], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf], xmm1
mov r8d, 0x2d
lea rdx, str._C:Program_FilesBlueStacks_msi2HD_Adb.exe_
lea rcx, [rbp - 1]
call fcn.14000dbf0
nop
mov rcx, qword [rbp - 9]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp eax, 1
jne 0x140006dae
call fcn.140004830
lea rdx, str.File_already_exists.
jmp 0x140006dd2
mov rdx, qword [rbp - 9]
lea rcx, str.https:__r2.e_z.host_2825fb47_f8a4_472c_9624_df2489f897c0_zviaf378.apk
call fcn.1400037a0
test al, al
je 0x140007456
call fcn.140004830
lea rdx, str.APK_downloaded_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cee0
lea rdx, [0x14000d2b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp - 9]
call fcn.140003900
lea rax, [rbp - 9]
mov qword [rbp - 0x29], rax
lea rcx, str.C:Program_FilesBlueStacksHD_Player.exe
call fcn.140004470
test al, al
je 0x140007028
lea rdx, [0x140011b64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cee0
call fcn.140004830
movups xmm0, xmmword [str.r_GVGAWTSJ]
movups xmmword [rbp - 0x59], xmm0
movups xmm1, xmmword [0x140012a30]
movups xmmword [rbp - 0x49], xmm1
mov eax, dword [0x140012a40]
mov dword [rbp - 0x39], eax
movzx eax, byte [0x140012a44]
mov byte [rbp - 0x35], al
xor r8d, r8d
cmp dword [0x140018090], 2
jl 0x140006f87
movdqa xmm4, xmmword [0x140012e60]
movdqa xmm3, xmmword [0x140012ef0]
movdqa xmm5, xmmword [str.1111]
movdqa xmm0, xmmword [0x140012ee0]
movdqa xmmword [rbp - 0x19], xmm0
lea rcx, [rbp - 0x55]
movdqa xmm6, xmmword [0x140012ed0]
mov edx, dword [rbp - 0x19]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140006ea0
cmp r8d, 0x25
jge 0x140006fd0
movsxd rax, r8d
lea r9, [rbp - 0x59]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x31
movzx eax, r8b
sub al, dl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x25
jl 0x140006fa0
lea rdx, [rbp - 0x59]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cee0
lea rdx, [0x140018c70]
cmp qword [0x140018c88], 0xf
cmova rdx, qword [0x140018c70]
mov r8, qword [0x140018c80]
mov rcx, rax
call fcn.14000e670
lea rdx, [0x14000d2b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp - 0x29]
call fcn.140006710
jmp 0x14000747a
lea rcx, str.C:Program_FilesBlueStacks_msi2HD_Player.exe
call fcn.140004470
test al, al
je 0x140007248
call fcn.140004830
movups xmm0, xmmword [0x140012d78]
movups xmmword [rbp - 0x59], xmm0
movsd xmm0, qword [0x140012d88]
movsd qword [rbp - 0x49], xmm0
mov eax, dword [0x140012d90]
mov dword [rbp - 0x41], eax
movzx eax, word [0x140012d94]
mov word [rbp - 0x3d], ax
cmp byte [0x140012d95], 0
je 0x1400071f0
xor r8d, r8d
cmp dword [0x140018090], 2
jl 0x1400071a7
movdqa xmm4, xmmword [0x140012e60]
movdqa xmm3, xmmword [0x140012ef0]
movdqa xmm5, xmmword [str.1111]
movdqa xmm0, xmmword [0x140012ee0]
movdqa xmmword [rbp - 0x19], xmm0
lea rcx, [rbp - 0x55]
movdqa xmm6, xmmword [0x140012ed0]
mov edx, dword [rbp - 0x19]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400070c0
cmp r8d, 0x1e
jge 0x1400071f0
movsxd rax, r8d
lea r9, [rbp - 0x59]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x31
movzx eax, r8b
sub al, dl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1e
jl 0x1400071c0
lea rdx, [rbp - 0x59]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cee0
lea rdx, [0x140018c70]
cmp qword [0x140018c88], 0xf
cmova rdx, qword [0x140018c70]
mov r8, qword [0x140018c80]
mov rcx, rax
call fcn.14000e670
lea rdx, [0x14000d2b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp - 1]
lea rcx, [rbp - 0x29]
call fcn.140006710
jmp 0x14000747a
mov edx, 7
mov rcx, qword [0x140018c90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x140012210]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cee0
mov edx, 4
mov rcx, qword [0x140018c90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x140012214]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cee0
mov edx, 7
mov rcx, qword [0x140018c90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x140011938]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cee0
movups xmm0, xmmword [0x1400129c8]
movups xmmword [rbp - 0x59], xmm0
movups xmm1, xmmword [0x1400129d8]
movups xmmword [rbp - 0x49], xmm1
movups xmm0, xmmword [0x1400129e8]
movups xmmword [rbp - 0x39], xmm0
xor r8d, r8d
cmp dword [0x140018090], 2
jl 0x140007403
movdqa xmm4, xmmword [0x140012e60]
movdqa xmm3, xmmword [0x140012ef0]
movdqa xmm5, xmmword [str.1111]
movdqa xmm0, xmmword [0x140012ee0]
movdqa xmmword [rbp - 0x19], xmm0
lea rcx, [rbp - 0x55]
movdqa xmm6, xmmword [0x140012ed0]
mov edx, dword [rbp - 0x19]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x140007320
jmp 0x140007439
lea r9, [rbp - 0x59]
nop word [rax + rax]
mov eax, 0x5397829d
mul r8d
shr edx, 4
movsx eax, dl
imul edx, eax, 0x31
movzx eax, r8b
sub al, dl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x30
jl 0x140007410
lea rdx, [rbp - 0x59]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cee0
mov ecx, 0xd05
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000747a
lea rdx, str.Failed_to_download_APK_file.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000cee0
lea rdx, [0x14000d2b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x17]
cmp rdx, 0xf
jbe 0x1400074b9
inc rdx
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400074b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400074b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f4cc
nop
mov rdx, qword [rbp + 0x37]
cmp rdx, 0xf
jbe 0x1400074f7
inc rdx
mov rcx, qword [rbp + 0x1f]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400074f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400074f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f4cc
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.14000f230
movaps xmm6, xmmword [rsp + 0xc0]
add rsp, 0xd0
pop rbp
ret