Function at 0x14000c8f0
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x340
mov rax, qword [0x140082038]
xor rax, rsp
mov qword [rsp + 0x330], rax
mov r15, rcx
xor ebx, ebx
mov dword [rsp + 0x258], 0xbca3b584
mov dword [rsp + 0x25c], 0xe4e6b8b6
mov dword [rsp + 0x260], 0xb6b5bcf9
xor eax, eax
mov byte [rsp + 0x264], al
mov edx, ebx
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x258]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xc
jb 0x14000c950
mov byte [rsp + 0x264], 0
lea rcx, [rsp + 0x258]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
test rax, rax
jne 0x14000c9a2
lea rcx, [rsp + 0x258]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
je 0x14000ddab
mov dword [rsp + 0x228], 0xbcb4a080
mov dword [rsp + 0x22c], 0xb5baa683
mov dword [rsp + 0x230], 0xaaabb2
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xb
jb 0x14000c9d0
mov byte [rsp + 0x233], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r14, 0xffffffffffffffff
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000ca20
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000caab
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000caa6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ddd3
call fcn.140034d74
test rdi, rdi
je 0x14000ddd9
movdqa xmm0, xmmword [0x140064f70]
movdqu xmmword [rsp + 0x278], xmm0
mov dword [rsp + 0x288], 0x92808e8c
mov dword [rsp + 0x28c], 0x928a8c90
xor eax, eax
mov byte [rsp + 0x290], al
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x278]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0x18
jb 0x14000caf0
mov byte [rsp + 0x290], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x278]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000cb34
lea rdx, [rsp + 0x278]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x38], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000cbc0
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cbbb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de01
call fcn.140034d74
test rdi, rdi
je 0x14000de07
movdqa xmm0, xmmword [0x140064ec0]
movdqu xmmword [rsp + 0x228], xmm0
mov edx, ebx
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xf
jb 0x14000cbe0
mov byte [rsp + 0x237], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000cc24
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x40], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000ccb0
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ccab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de2f
call fcn.140034d74
test rdi, rdi
je 0x14000de35
mov dword [rsp + 0x228], 0xb1bea29f
mov dword [rsp + 0x22c], 0xe5a6a7b6
mov dword [rsp + 0x230], 0xa2bc96e5
mov word [rsp + 0x234], 0x8baf
xor eax, eax
mov byte [rsp + 0x236], al
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x14000ccf0
mov byte [rsp + 0x236], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000cd34
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x48], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000cdc0
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cdbb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de5d
call fcn.140034d74
test rdi, rdi
je 0x14000de63
mov dword [rsp + 0x228], 0xa7b5bf82
mov dword [rsp + 0x22c], 0xe4e6b1bf
mov dword [rsp + 0x230], 0xa9abb191
mov word [rsp + 0x234], 0x8baf
xor eax, eax
mov byte [rsp + 0x236], al
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x14000ce00
mov byte [rsp + 0x236], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000ce44
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x50], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000ced0
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cecb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de8b
call fcn.140034d74
test rdi, rdi
je 0x14000de91
mov dword [rsp + 0x228], 0xa7b5bf82
mov dword [rsp + 0x22c], 0xe4e6b1bf
mov dword [rsp + 0x230], 0xaea1bd99
mov word [rsp + 0x234], 0x8c
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xd
jb 0x14000cf10
mov byte [rsp + 0x235], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000cf54
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x58], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000cfe0
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cfdb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000deb9
call fcn.140034d74
test rdi, rdi
je 0x14000debf
movdqa xmm0, xmmword [0x140064f30]
movdqu xmmword [rsp + 0x298], xmm0
mov dword [rsp + 0x2a8], 0xab9892b0
mov dword [rsp + 0x2ac], 0x8a828d
mov edx, ebx
movsxd rax, edx
lea rcx, [rsp + 0x298]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0x17
jb 0x14000d012
mov byte [rsp + 0x2af], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x298]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000d056
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x60], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000d0e2
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d0dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dee7
call fcn.140034d74
test rdi, rdi
je 0x14000deed
movdqa xmm0, xmmword [0x140064ed0]
movdqu xmmword [rsp + 0x228], xmm0
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xf
jb 0x14000d100
mov byte [rsp + 0x237], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000d144
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x70], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000d1d0
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d1cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000df15
call fcn.140034d74
test rdi, rdi
je 0x14000df1b
mov dword [rsp + 0x268], 0xb3a7b48e
mov dword [rsp + 0x26c], 0xe4e6bda3
mov dword [rsp + 0x270], 0xb6b5bcf9
xor eax, eax
mov byte [rsp + 0x274], al
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x268]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xc
jb 0x14000d210
mov byte [rsp + 0x274], 0
lea rcx, [rsp + 0x268]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
test rax, rax
jne 0x14000d262
lea rcx, [rsp + 0x268]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
je 0x14000df43
movdqa xmm0, xmmword [0x140064f10]
movdqu xmmword [rsp + 0x2e8], xmm0
xor eax, eax
mov byte [rsp + 0x2f8], al
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x2e8]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0x10
jb 0x14000d280
mov byte [rsp + 0x2f8], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x2e8]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000d2c4
lea rdx, [rsp + 0x2e8]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x78], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000d350
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d34b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000df6b
call fcn.140034d74
test rdi, rdi
je 0x14000df71
movdqa xmm0, xmmword [0x140064f40]
movdqu xmmword [rsp + 0x2b8], xmm0
mov dword [rsp + 0x2c8], 0x878685b3
mov word [rsp + 0x2cc], 0x90
mov edx, ebx
movsxd rax, edx
lea rcx, [rsp + 0x2b8]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0x15
jb 0x14000d381
mov byte [rsp + 0x2cd], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x2b8]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000d3c5
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x88], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000d454
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d44f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000df99
call fcn.140034d74
test rdi, rdi
je 0x14000df9f
movdqa xmm0, xmmword [0x140064ef0]
movdqu xmmword [rsp + 0x2d0], xmm0
mov word [rsp + 0x2e0], 0x93aa
xor eax, eax
mov byte [rsp + 0x2e2], al
mov edx, ebx
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x2d0]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0x12
jb 0x14000d490
mov byte [rsp + 0x2e2], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x2d0]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000d4d4
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0xa0], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000d563
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d55e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dfc7
call fcn.140034d74
test rdi, rdi
je 0x14000dfcd
mov dword [rsp + 0x228], 0xa6bfbf8c
mov dword [rsp + 0x22c], 0x85b9bba1
mov dword [rsp + 0x230], 0xb3afaab2
mov word [rsp + 0x234], 0xb9b8
xor eax, eax
mov byte [rsp + 0x236], al
mov edx, ebx
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x14000d5a2
mov byte [rsp + 0x236], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000d5e6
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0xa8], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000d675
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d670
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dfef
call fcn.140034d74
test rdi, rdi
je 0x14000dff5
mov dword [rsp + 0x228], 0xb7bdb58b
mov dword [rsp + 0x22c], 0xb386b1a7
mov dword [rsp + 0x230], 0xb9b0aea5
mov word [rsp + 0x234], 0xbe
mov edx, ebx
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xd
jb 0x14000d6b0
mov byte [rsp + 0x235], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000d6f4
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0xb8], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000d783
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d77e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e017
call fcn.140034d74
test rdi, rdi
je 0x14000e01d
lea rdx, str.CloseServiceHandle
lea rcx, [rsp + 0x300]
call fcn.1400089d0
mov edx, ebx
movsxd rax, edx
lea rcx, [rsp + 0x300]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0x12
jb 0x14000d7a2
mov byte [rsp + 0x312], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x300]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000d7e6
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0xc0], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000d875
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d870
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e03f
call fcn.140034d74
test rdi, rdi
je 0x14000e045
lea rdx, str.LookupPrivilegeValueW
lea rcx, [rsp + 0x318]
call fcn.140008900
mov edx, ebx
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x318]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0x15
jb 0x14000d8a0
mov byte [rsp + 0x32d], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x318]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000d8e4
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x80], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000d973
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d96e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e067
call fcn.140034d74
test rdi, rdi
je 0x14000e06d
lea rdx, str.OpenSCManagerW
lea rcx, [rsp + 0x228]
call fcn.140008a80
mov edx, ebx
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x14000d992
mov byte [rsp + 0x236], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000d9d6
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x90], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000da65
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000da60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e095
call fcn.140034d74
test rdi, rdi
je 0x14000e09b
mov dword [rsp + 0x228], 0xbcb4a080
mov dword [rsp + 0x22c], 0xa0a7b180
mov dword [rsp + 0x230], 0x8dbcbbbe
xor eax, eax
mov byte [rsp + 0x234], al
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xc
jb 0x14000daa0
mov byte [rsp + 0x234], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000dae4
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0x98], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000db73
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000db6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e0c3
call fcn.140034d74
test rdi, rdi
je 0x14000e0c9
mov dword [rsp + 0x228], 0xa0b0a49c
mov dword [rsp + 0x22c], 0xa4b087a7
mov dword [rsp + 0x230], 0xbfbab1a1
mov word [rsp + 0x234], 0x8c
mov edx, ebx
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xd
jb 0x14000dbb0
mov byte [rsp + 0x235], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000dbf4
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [r15 + 0xb0], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000dc83
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dc7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e0f1
call fcn.140034d74
test rdi, rdi
je 0x14000e0f7
lea rdx, str.CreateServiceW
lea rcx, [rsp + 0x228]
call fcn.140008a80
movsxd rax, ebx
lea rcx, [rsp + 0x228]
add rcx, rax
lea eax, [rbx - 0x31]
xor byte [rcx], al
inc ebx
cmp ebx, 0xe
jb 0x14000dca0
mov byte [rsp + 0x236], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x238], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x248], xmm1
lea rax, [rsp + 0x228]
inc r14
cmp byte [rax + r14], 0
jne 0x14000dce1
mov r8, r14
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x238]
call fcn.140001240
lea rdx, [rsp + 0x238]
cmp qword [rsp + 0x250], 0x10
cmovae rdx, qword [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [r15 + 0xc8], rax
mov rdx, qword [rsp + 0x250]
cmp rdx, 0x10
jb 0x14000dd73
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dd6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e11f
call fcn.140034d74
test rbx, rbx
je 0x14000e125
mov al, 1
jmp 0x14000dd82
mov rcx, qword [rsp + 0x330]
xor rcx, rsp
call fcn.140034e90
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
lea rdx, str.dll_1__not_found.
lea rcx, [rsp + 0x108]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x108]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_1.
lea rcx, [rsp + 0x120]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x120]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_8.
lea rcx, [rsp + 0x138]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x138]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_9.
lea rcx, [rsp + 0x150]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x150]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_10.
lea rcx, [rsp + 0x168]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x168]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_11.
lea rcx, [rsp + 0x180]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x180]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_12.
lea rcx, [rsp + 0x198]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x198]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_13.
lea rcx, [rsp + 0x1b0]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x1b0]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_15.
lea rcx, [rsp + 0x1c8]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x1c8]
call fcn.140037d10
lea rdx, str.dll_2__not_found.
lea rcx, [rsp + 0x1e0]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x1e0]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_a1.
lea rcx, [rsp + 0x1f8]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x1f8]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_a3.
lea rcx, [rsp + 0x210]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x210]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_a6.
lea rcx, [rsp + 0x30]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x30]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_a7.
lea rcx, [rsp + 0x48]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x48]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_a9.
lea rcx, [rsp + 0x60]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x60]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_a10.
lea rcx, [rsp + 0x78]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x78]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_a2.
lea rcx, [rsp + 0x90]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0x90]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_a4.
lea rcx, [rsp + 0xa8]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0xa8]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_a5.
lea rcx, [rsp + 0xc0]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0xc0]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_a8.
lea rcx, [rsp + 0xd8]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0xd8]
call fcn.140037d10
call fcn.14003d4e8
int3
lea rdx, str.Cannot_find_function_a11.
lea rcx, [rsp + 0xf0]
call fcn.140008ef0
lea rdx, [0x14007fff0]
lea rcx, [rsp + 0xf0]
call fcn.140037d10
int3