Function at 0x14000e090
Capabilities:
Copy file
Create directory
Link many functions at runtime

Disassembly:
push rbx
sub rsp, 0x280
mov rax, qword [0x140056010]
xor rax, rsp
mov qword [rsp + 0x270], rax
movups xmm0, xmmword [str.C:JYJYToolTest.dll]
movzx eax, word [0x140050288]
xor edx, edx
movups xmm1, xmmword [0x140050270]
mov r8d, 0x1e6
lea rcx, [rsp + 0x88]
movups xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x68], ax
movsd xmm0, qword [0x140050280]
movsd qword [rsp + 0x60], xmm0
movups xmm0, xmmword [str.HKCRCLSID_]
movups xmmword [rsp + 0x50], xmm1
movsd xmm1, qword [0x1400501e8]
movaps xmmword [rsp + 0x70], xmm0
movsd qword [rsp + 0x80], xmm1
call fcn.140013860
lea rdx, str.Korean
xor ecx, ecx
call fcn.14001a7e4
lea rcx, str.ntdll.dll
mov dword [0x140056a60], 0
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rbx, rax
test rax, rax
jne 0x14000e148
lea rcx, str.Init___:_LoadLibrary_failed._Some_functions_will_not_be_operated_correctly._n
call fcn.140001030
lea rdx, [0x1400503e0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [0x1400503f8]
mov rcx, rbx
mov qword [0x140091488], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.ZwUnloadDriver
mov rcx, rbx
mov qword [0x1400916a8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.NtSetSystemInformation
mov rcx, rbx
mov qword [0x1400916b8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.NtQueryInformationProcess
mov rcx, rbx
mov qword [0x140091498], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.NtSetInformationThread
mov rcx, rbx
mov qword [0x1400916b0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.ZwOpenSection
mov rcx, rbx
mov qword [0x140091480], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.NtOpenProcess
mov rcx, rbx
mov qword [0x140091cc8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp qword [0x140091488], 0
mov qword [0x140091490], rax
je 0x14000e24b
cmp qword [0x1400916a8], 0
je 0x14000e24b
cmp qword [0x1400916b8], 0
je 0x14000e24b
cmp qword [0x140091498], 0
je 0x14000e24b
cmp qword [0x1400916b0], 0
je 0x14000e24b
cmp qword [0x140091480], 0
je 0x14000e24b
cmp qword [0x140091cc8], 0
je 0x14000e24b
test rax, rax
jne 0x14000e257
lea rcx, str.Init___:_GetProcAddress_failed._Some_functions_will_not_be_operated_correctly._n
call fcn.140001030
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov r8d, 0x104
lea rdx, [0x140091ac0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
lea rcx, [0x140050488]
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x14000e30d
xor edx, edx
lea rcx, str.C:JY
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
xor edx, edx
lea rcx, str.C:JYunexpected
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov edx, WSAStartup
lea rcx, str.C:JYdummy.exe
call fcn.1400014f0
mov eax, dword [0x140056a60]
lea rcx, str.C:JYjy.dll
neg eax
sbb edx, edx
add edx, 0x6e
call fcn.1400014f0
mov r8d, 1
lea rdx, [rsp + 0x40]
lea rcx, [0x140091ac0]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea r8, str.0000000F_0000_0000_0000_000000000000
mov edx, 0xff
lea rcx, [rsp + 0x70]
call fcn.14001b5e4
lea r8, [0x14003a314]
mov edx, 0xff
lea rcx, [rsp + 0x70]
call fcn.14001b5e4
mov r8d, 1
lea rdx, [0x140091ac0]
lea rcx, [rsp + 0x70]
call fcn.140011160
test eax, eax
je 0x14000e360
lea rcx, str.erorroror1or_m____n
call fcn.140001030
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.140011970
add rsp, 0x280
pop rbx
ret