Function at 0x140008fd5
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x5e8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x550], xmm8
movaps xmmword [rbp + 0x540], xmm7
movaps xmmword [rbp + 0x530], xmm6
mov qword [rbp + 0x528], 0xfffffffffffffffe
lea rcx, [rbp + 0x4d0]
call fcn.14000aa3e
mov eax, dword [0x140016468]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
setne al
sete cl
cmp dword [0x14001646c], 0xa
setge dl
setl r8b
xor r8b, cl
or dl, al
xor dl, 1
or dl, r8b
mov esi, 0xaefe9f5c
mov eax, 0x9356eb7b
cmove esi, eax
mov edi, 0xf29f6fcf
cmove edi, eax
mov ecx, 0x9c64ea0d
lea rbx, str.IzJzKMyDwV_3W5rhZOQbdiv8Oyh1tckVHjCFI3qvlXRD48oHgW3kdhaoMjgw4sfWc54UCkDoscwkIcBSN0X7lrPScKcqSLrYnbHBvttYe5SjcKxv12R6og_VGZEsWIm7_j6BVCdjgrFaqxiH4Z4spM8BwDiIiYJXaHY8BxyaUxx8Qxj8bs63iAdOFl8P4StNrN3VUt0DrRI3l4d54gDambMDn4wr7fNtEgmx71n_jxSbrPB25mLcp8gPtrlvA_GlBwRYNZhtZl1VJLDPbNsFm6tH3A9hlMuanN2WwGsrlfJRYBuaHpuQbEr0NTUHACvBfvIiTUZx4JBXYA9PUpFOLVv3LLWFYdryxWJR13VXlnXDwqeptJt506iUaAUJAZoOUc1w8owg7XcRqvh4dLUaj3KKD59PlRBnZkpZhvnQoC388Kqa4N_ke6hOvIlYCY2E4rKSZ2Otj4P2gQuLPAnDT9vMRfihyQPUKgq0vrzyO7rNvdHyyjyuMeWOFSvGAqJ6DSiSrdjrmYYQmZhpoOO9DLifZw9jfzSXglhSY0Gcbeg5PB3gPbi0q253_9SxgtIo1b1OWX0r08ScSRn5e8qZiAArZBaZSEhCbtOzufxatCq2hXq0p4rJkknnWdQJtr5cnxcrtpy_ZWoIMnccScAzHb2cdV6xuvCGney8qP20q9GhdDSAJh2jx8Ogk8S7ru2DUxhjAQZCMyPPLghTiNvp2FBhEFTnornWs8P7mEuC7f7ZlqivjDfxTSavfSswNsW5JPOd6D2eG54iKNdZQ_A8AtgCu_QQKNtEuVchd2XploEdF5lOVqNsKKxEcdorIIteIUG7UUXEnecGn10o9X5OWRs590wxPsnyhA0HlHdts2bWUwar9ypxe574Gl6KnFWTKFmVlwCNFy2N7RmX85U0g_t0PzGIelLXSjutCD4xKN5CXvaXhS6uUVG3UlkBHrw9Se4_OZzD8X3P1cth8aphZ9FMJXaAtbUa445A2pGvOoq8_bWAd3G5GYo89U2tbefpYKvVkABRLzBh9FT5u4NPQVzmswqQXCExHab6ZEAKiMVa4KWNRi_G0FtzemXUmkDRtZ_YXEvGuyIRJthH2oDdkXZAJCOMYreFWXvWmQ3CwV9boJEcuTeLSZ0yYBAR0KzXeeSMTDYkFsaR6DTe3wuhds90F0bcjbdLOsJ0RxJmleF_y1s6t5MHAGJMXvZuYsEhZH_3YA
cmp ecx, 0xaefe9f5b
jle 0x140009094
cmp ecx, 0xaefe9f5c
je 0x1400090d0
cmp ecx, 0xf29f6fcf
je 0x1400090b2
cmp ecx, 0x6dddcc49
jne 0x140009070
mov ecx, edi
jmp 0x140009070
cmp ecx, 0x9356eb7b
je 0x1400090c2
cmp ecx, 0x9c64ea0d
jne 0x140009070
mov qword [rbp + 0x3b0], rbx
mov ecx, 0x6dddcc49
jmp 0x140009070
mov rcx, qword [rbp + 0x3b0]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov ecx, esi
jmp 0x140009070
mov rcx, qword [rbp + 0x3b0]
mov ecx, 0xf29f6fcf
jmp 0x140009070
mov qword [rbp - 0x50], rax
mov rcx, qword [rbp - 0x50]
call fcn.14000bcb7
lea rdx, str.IzJzKMyDwV_3W5rhZOQbdiv8Oyh1tckVHjCFI3qvlXRD48oHgW3kdhaoMjgw4sfWc54UCkDoscwkIcBSN0X7lrPScKcqSLrYnbHBvttYe5SjcKxv12R6og_VGZEsWIm7_j6BVCdjgrFaqxiH4Z4spM8BwDiIiYJXaHY8BxyaUxx8Qxj8bs63iAdOFl8P4StNrN3VUt0DrRI3l4d54gDambMDn4wr7fNtEgmx71n_jxSbrPB25mLcp8gPtrlvA_GlBwRYNZhtZl1VJLDPbNsFm6tH3A9hlMuanN2WwGsrlfJRYBuaHpuQbEr0NTUHACvBfvIiTUZx4JBXYA9PUpFOLVv3LLWFYdryxWJR13VXlnXDwqeptJt506iUaAUJAZoOUc1w8owg7XcRqvh4dLUaj3KKD59PlRBnZkpZhvnQoC388Kqa4N_ke6hOvIlYCY2E4rKSZ2Otj4P2gQuLPAnDT9vMRfihyQPUKgq0vrzyO7rNvdHyyjyuMeWOFSvGAqJ6DSiSrdjrmYYQmZhpoOO9DLifZw9jfzSXglhSY0Gcbeg5PB3gPbi0q253_9SxgtIo1b1OWX0r08ScSRn5e8qZiAArZBaZSEhCbtOzufxatCq2hXq0p4rJkknnWdQJtr5cnxcrtpy_ZWoIMnccScAzHb2cdV6xuvCGney8qP20q9GhdDSAJh2jx8Ogk8S7ru2DUxhjAQZCMyPPLghTiNvp2FBhEFTnornWs8P7mEuC7f7ZlqivjDfxTSavfSswNsW5JPOd6D2eG54iKNdZQ_A8AtgCu_QQKNtEuVchd2XploEdF5lOVqNsKKxEcdorIIteIUG7UUXEnecGn10o9X5OWRs590wxPsnyhA0HlHdts2bWUwar9ypxe574Gl6KnFWTKFmVlwCNFy2N7RmX85U0g_t0PzGIelLXSjutCD4xKN5CXvaXhS6uUVG3UlkBHrw9Se4_OZzD8X3P1cth8aphZ9FMJXaAtbUa445A2pGvOoq8_bWAd3G5GYo89U2tbefpYKvVkABRLzBh9FT5u4NPQVzmswqQXCExHab6ZEAKiMVa4KWNRi_G0FtzemXUmkDRtZ_YXEvGuyIRJthH2oDdkXZAJCOMYreFWXvWmQ3CwV9boJEcuTeLSZ0yYBAR0KzXeeSMTDYkFsaR6DTe3wuhds90F0bcjbdLOsJ0RxJmleF_y1s6t5MHAGJMXvZuYsEhZH_3YA
lea rcx, [rbp + 0x4d0]
mov r8, rax
call fcn.14000abec
lea rsi, [rbp + 0x4b0]
lea rdx, [rbp + 0x4d0]
mov rcx, rsi
call fcn.140007df5
mov eax, dword [0x1400161a8]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
cmp dword [0x1400161ac], 0xa
setl cl
test cl, al
jne 0x140009137
xor cl, al
je 0x1400092c7
jmp 0x140009137
mov eax, dword [0x1400161d0]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
cmp dword [0x1400161d4], 0xa
setl cl
or cl, al
mov eax, 0x55951c1f
mov edx, 0x2aa0279e
cmove eax, edx
mov ecx, 0xc3c7a35d
cmove ecx, edx
mov edx, 0x342e8b5a
cmp edx, 0x2aa0279d
jle 0x14000919a
cmp edx, 0x2aa0279e
je 0x1400091ac
cmp edx, 0x342e8b5a
je 0x1400091b3
cmp edx, 0x55951c1f
jne 0x140009173
mov edx, 0xf765c44
jmp 0x140009173
cmp edx, 0xc3c7a35d
je 0x1400091b7
cmp edx, 0xf765c44
jne 0x140009173
jmp 0x1400091bb
mov edx, 0xc3c7a35d
jmp 0x140009173
mov edx, ecx
jmp 0x140009173
mov edx, eax
jmp 0x140009173
mov qword [rbp + 0x3b0], rsi
mov rcx, qword [rbp + 0x3b0]
call fcn.140010724
mov qword [rbp + 0x4f0], rsi
mov ecx, dword [0x140016188]
lea edx, [rcx - 1]
imul edx, ecx
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
setne cl
cmp dword [0x14001618c], 0xa
setge dl
mov r8d, edx
xor r8b, cl
or dl, cl
xor dl, 1
or dl, r8b
mov ecx, 0x2a8d80c0
mov r8d, 0x2025f092
cmove ecx, r8d
mov edx, 0x1c1e982e
cmove edx, r8d
mov r9d, 0x63b3a9fa
cmp r9d, 0x2a8d80bf
jle 0x140009259
cmp r9d, 0x2a8d80c0
je 0x14000927d
cmp r9d, 0x77256989
je 0x140009273
cmp r9d, 0x63b3a9fa
jne 0x140009222
mov r8, qword [rbp + 0x4f0]
mov r8, qword [r8 + 0x10]
mov r9d, 0x77256989
jmp 0x140009222
cmp r9d, 0x1c1e982e
je 0x140009278
cmp r9d, 0x2025f092
jne 0x140009222
mov r9d, 0x1c1e982e
jmp 0x140009222
mov r9d, edx
jmp 0x140009222
mov r9d, ecx
jmp 0x140009222
mov qword [rbp + 0x3b0], r8
mov r8, qword [rbp + 0x3b0]
lea rcx, [rbp - 0x50]
mov rdx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [0x1400161a8]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
cmp dword [0x1400161ac], 0xa
setl cl
test cl, al
jne 0x140009436
xor cl, al
jne 0x140009436
mov eax, dword [0x1400161d0]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
setne al
cmp dword [0x1400161d4], 0xa
setge cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, 1
or cl, dl
mov eax, 0x55951c1f
mov edx, 0x2aa0279e
cmove eax, edx
mov ecx, 0xc3c7a35d
cmove ecx, edx
mov edx, 0x342e8b5a
jmp 0x14000931c
mov edx, 0xc3c7a35d
jmp 0x14000931c
mov edx, ecx
jmp 0x14000931c
mov edx, eax
cmp edx, 0x2aa0279d
jle 0x140009343
cmp edx, 0x2aa0279e
je 0x14000930f
cmp edx, 0x342e8b5a
je 0x140009316
cmp edx, 0x55951c1f
jne 0x14000931c
mov edx, 0xf765c44
jmp 0x14000931c
cmp edx, 0xc3c7a35d
je 0x14000931a
cmp edx, 0xf765c44
jne 0x14000931c
mov qword [rbp + 0x3b0], rsi
mov rcx, qword [rbp + 0x3b0]
call fcn.140010724
mov ecx, dword [0x140016188]
lea edx, [rcx + 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x14001618c], 0xa
mov qword [rbp + 0x4f0], rsi
setge r8b
setl r9b
xor r9b, cl
or r8b, dl
not r8b
or r8b, r9b
test r8b, 1
mov ecx, 0x2a8d80c0
mov r8d, 0x2025f092
cmove ecx, r8d
mov edx, 0x1c1e982e
cmove edx, r8d
mov r9d, 0x63b3a9fa
cmp r9d, 0x2a8d80bf
jle 0x1400093f3
cmp r9d, 0x2a8d80c0
je 0x140009417
cmp r9d, 0x77256989
je 0x14000940d
cmp r9d, 0x63b3a9fa
jne 0x1400093bc
mov r8, qword [rbp + 0x4f0]
mov r8, qword [r8 + 0x10]
mov r9d, 0x77256989
jmp 0x1400093bc
cmp r9d, 0x1c1e982e
je 0x140009412
cmp r9d, 0x2025f092
jne 0x1400093bc
mov r9d, 0x1c1e982e
jmp 0x1400093bc
mov r9d, edx
jmp 0x1400093bc
mov r9d, ecx
jmp 0x1400093bc
mov qword [rbp + 0x3b0], r8
mov r8, qword [rbp + 0x3b0]
lea rcx, [rbp - 0x50]
mov rdx, rax
call sub.VCRUNTIME140.dll_memcpy
jmp 0x140009137
lea rdi, str.eur1ka
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rsi, rax
lea rcx, [0x1400161e0]
mov rdx, rdi
mov r8d, esi
call fcn.140005b4b
mov eax, dword [0x1400161a8]
lea ecx, [rax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp dword [0x1400161ac], 0xa
setl cl
test cl, al
jne 0x1400094dd
xor cl, al
jne 0x1400094dd
lea rdi, [0x1400161e0]
lea rbx, str.eur1ka
mov rcx, rdi
mov rdx, rbx
mov r8d, esi
call fcn.140005b4b
mov rcx, rdi
mov rdx, rbx
mov r8d, esi
call fcn.140005b4b
mov eax, dword [0x1400161a8]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete dl
setne al
cmp dword [0x1400161ac], 0xa
setl r8b
setge cl
cmp r8b, dl
jne 0x1400094dd
or cl, al
jne 0x140009491
xor edi, edi
lea rsi, [0x1400161e0]
lea rdx, [rdi + rbp]
add rdx, 0xffffffffffffffb0
mov rcx, rsi
mov r8d, 1
call fcn.140006c64
inc rdi
cmp rdi, 0x400
jne 0x1400094e6
xor eax, eax
movaps xmm0, xmmword [str.llllllllllllllll]
movaps xmm1, xmmword [0x140014260]
movaps xmm2, xmmword [str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n]
movaps xmm3, xmmword [rbp + rax - 0x50]
movaps xmm4, xmm3
andnps xmm4, xmm0
andps xmm3, xmm1
orps xmm3, xmm4
xorps xmm3, xmm2
movaps xmmword [rbp + rax - 0x50], xmm3
add rax, 0x10
cmp rax, 0x400
jne 0x14000951f
movaps xmm6, xmmword [0x140014220]
movaps xmm7, xmmword [0x140014210]
movaps xmm8, xmmword [0x140014230]
lea r13, [rbp + 0x3b0]
lea rdx, [rbp + 0x4f0]
lea r8, [rbp + 0x510]
lea rdi, [rbp - 0x50]
lea rbx, section..data
lea rsi, [0x14001600d]
lea r15, [0x14001601b]
lea r14, [0x140016030]
mov r12, qword [sym.imp.KERNEL32.dll_GetProcAddress]
movaps xmmword [rbp + 0x500], xmm6
movaps xmmword [rbp + 0x4f0], xmm7
movaps xmmword [rbp + 0x510], xmm8
mov byte [rbp + 0x520], 0
mov rcx, r13
call fcn.140001dc1
mov r8d, 0x400
mov rcx, r13
mov rdx, rdi
call fcn.140003387
mov rcx, rbx
call fcn.14000728a
mov rcx, rsi
call fcn.14000728a
mov rcx, r15
call fcn.14000728a
mov rcx, r14
call fcn.14000728a
call fcn.140008ede
mov rdi, rax
mov rcx, rax
mov rdx, rbx
call r12
mov r15, rax
mov rcx, rdi
mov r14, rsi
mov rdx, rsi
call r12
mov edx, dword [0x1400161a8]
lea ecx, [rdx + 1]
imul ecx, edx
test cl, 1
sete dl
cmp dword [0x1400161ac], 0xa
mov r12, rax
setl r8b
setge al
cmp r8b, dl
jne 0x1400096fe
or al, cl
test al, 1
je 0x1400096fe
movaps xmmword [rbp + 0x500], xmm6
movaps xmmword [rbp + 0x4f0], xmm7
movaps xmmword [rbp + 0x510], xmm8
mov byte [rbp + 0x520], 0
lea r13, [rbp + 0x3b0]
mov rcx, r13
lea rdx, [rbp + 0x4f0]
lea r8, [rbp + 0x510]
call fcn.140001dc1
mov r8d, 0x400
mov rcx, r13
lea rdx, [rbp - 0x50]
call fcn.140003387
lea rbx, section..data
mov rcx, rbx
call fcn.14000728a
mov rsi, r14
mov rcx, r14
call fcn.14000728a
lea r15, [0x14001601b]
mov rcx, r15
call fcn.14000728a
lea r14, [0x140016030]
mov rcx, r14
call fcn.14000728a
call fcn.140008ede
mov rdi, rax
mov rcx, rax
mov rdx, rbx
mov r12, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call r12
mov rcx, rdi
lea rdi, [rbp - 0x50]
mov rdx, rsi
call r12
lea r8, [rbp + 0x510]
lea rdx, [rbp + 0x4f0]
jmp 0x140009596
lea rdx, [0x14001601b]
mov rcx, rdi
mov rbx, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rbx
mov r13, rax
lea rdx, [0x140016030]
mov rcx, rdi
call rbx
mov rsi, rax
mov edx, 0x400
xor ecx, ecx
mov r8d, 0x1000
mov r9d, 0x40
call r15
lea rdi, [rbp + 0x4b0]
mov rbx, rax
lea rdx, [rbp - 0x50]
mov r8d, 0x400
mov rcx, rax
call r12
mov eax, dword [0x1400161a8]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
cmp dword [0x1400161ac], 0xa
setl cl
test cl, al
jne 0x14000977d
xor cl, al
jne 0x14000977d
jmp 0x14000977b
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
mov r8, rbx
xor r9d, r9d
call r13
mov ecx, dword [0x1400161a8]
lea edx, [rcx - 1]
imul edx, ecx
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete cl
cmp dword [0x1400161ac], 0xa
setl dl
test dl, cl
jne 0x1400097c6
xor dl, cl
jne 0x1400097c6
jmp 0x1400097c4
mov rcx, rax
mov edx, 0xffffffff
call rsi
mov eax, dword [0x1400161b8]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
cmp dword [0x1400161bc], 0xa
setl cl
or cl, al
mov eax, 0x4d38406a
mov edx, 0x2cb72f34
cmove eax, edx
mov ecx, 0x894b96cf
cmove ecx, edx
mov edx, 0x1ba751b6
cmp edx, 0x1ba751b5
jle 0x140009833
cmp edx, 0x1ba751b6
je 0x140009845
cmp edx, 0x2cb72f34
je 0x140009849
cmp edx, 0x4d38406a
jne 0x14000980c
mov edx, 0xce16e2ea
jmp 0x14000980c
cmp edx, 0x894b96cf
je 0x140009850
cmp edx, 0xce16e2ea
jne 0x14000980c
jmp 0x140009854
mov edx, ecx
jmp 0x14000980c
mov edx, 0x894b96cf
jmp 0x14000980c
mov edx, eax
jmp 0x14000980c
mov rcx, rdi
call fcn.140009b30
mov qword [rbp + 0x510], rdi
mov eax, 0xe55e9f8b
cmp eax, 0x6d8162fb
je 0x140009884
cmp eax, 0xe55e9f8b
jne 0x140009868
mov eax, 0x6d8162fb
mov rcx, qword [rbp + 0x510]
jmp 0x140009868
mov qword [rbp + 0x4f0], rcx
mov rax, qword [rbp + 0x4f0]
mov qword [rbp + 0x3b0], rax
mov eax, 0xf76d4691
cmp eax, 0x819688ef
je 0x1400098ba
cmp eax, 0xf76d4691
jne 0x14000989e
mov eax, 0x819688ef
mov rcx, qword [rbp + 0x3b0]
jmp 0x14000989e
mov qword [rbp - 0x50], rcx
mov rcx, qword [rbp - 0x50]
call fcn.14000a804
mov eax, dword [0x1400161b8]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
setne al
cmp dword [0x1400161bc], 0xa
setge cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, 1
or cl, dl
mov eax, 0x4d38406a
mov edx, 0x2cb72f34
cmove eax, edx
mov ecx, 0x894b96cf
cmove ecx, edx
mov edx, 0x1ba751b6
cmp edx, 0x1ba751b5
jle 0x140009933
cmp edx, 0x1ba751b6
je 0x140009945
cmp edx, 0x2cb72f34
je 0x140009949
cmp edx, 0x4d38406a
jne 0x14000990c
mov edx, 0xce16e2ea
jmp 0x14000990c
cmp edx, 0x894b96cf
je 0x140009950
cmp edx, 0xce16e2ea
jne 0x14000990c
jmp 0x140009954
mov edx, ecx
jmp 0x14000990c
mov edx, 0x894b96cf
jmp 0x14000990c
mov edx, eax
jmp 0x14000990c
lea rsi, [rbp + 0x4d0]
mov rcx, rsi
call fcn.140009b30
mov qword [rbp + 0x4f0], rsi
mov eax, 0xe55e9f8b
cmp eax, 0x6d8162fb
je 0x14000998b
cmp eax, 0xe55e9f8b
jne 0x14000996f
mov eax, 0x6d8162fb
mov rcx, qword [rbp + 0x4f0]
jmp 0x14000996f
mov qword [rbp + 0x4b0], rcx
mov rax, qword [rbp + 0x4b0]
mov qword [rbp + 0x3b0], rax
mov eax, 0xf76d4691
cmp eax, 0x819688ef
je 0x1400099c1
cmp eax, 0xf76d4691
jne 0x1400099a5
mov eax, 0x819688ef
mov rcx, qword [rbp + 0x3b0]
jmp 0x1400099a5
mov qword [rbp - 0x50], rcx
mov rcx, qword [rbp - 0x50]
call fcn.14000a804
xor eax, eax
movaps xmm6, xmmword [rbp + 0x530]
movaps xmm7, xmmword [rbp + 0x540]
movaps xmm8, xmmword [rbp + 0x550]
add rsp, 0x5e8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret