Function at 0x14000a570
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xd8
movaps xmmword [rsp + 0x40], xmm6
movaps xmmword [rsp + 0x50], xmm7
movaps xmmword [rsp + 0x60], xmm8
movaps xmmword [rsp + 0x70], xmm9
movaps xmmword [rsp + 0x80], xmm10
movaps xmmword [rsp + 0x90], xmm11
movaps xmmword [rsp + 0xa0], xmm12
movaps xmmword [rsp + 0xb0], xmm13
movaps xmmword [rsp + 0xc0], xmm14
lea rsi, [0x14003af80]
movzx edx, word [0x14001a6a0]
lea rax, [0x14003c080]
movq xmm2, rsi
lea rsi, [0x14003b060]
movq xmm7, rax
movdqa xmm6, xmmword [0x14001a6b0]
movq xmm3, rsi
lea rsi, [0x14003b020]
mov word [0x14003ae10], dx
lea rdx, str.parent
movq xmm1, rsi
movq xmm14, rdx
lea rsi, [0x140002d90]
movdqa xmm0, xmmword [0x14001a6d0]
movdqa xmm5, xmm3
lea rax, str.name
movdqa xmm4, xmmword [0x14001a680]
movzx edx, word [0x14001a6e0]
punpcklqdq xmm5, xmm14
movq xmm9, rax
lea rbx, [0x14003b120]
movaps xmmword [0x14003b0e0], xmm0
mov qword [rsp + 0x30], rsi
lea rsi, [0x14003ae80]
lea r15, [0x14003b900]
mov qword [0x14003ae18], rsi
lea rsi, [0x14003ae00]
lea rax, [0x14003b480]
mov qword [0x14004a338], rsi
lea rsi, [0x1400017d0]
movq xmm8, rax
lea rcx, str.line
mov qword [0x14004a350], rsi
movzx esi, word [0x14001a6c0]
lea rax, [0x14003b0e0]
lea r13, [0x14003bc80]
movaps xmmword [0x14003b190], xmm5
movdqa xmm5, xmm1
lea r12, [0x14003c0c0]
punpcklqdq xmm5, xmm9
mov qword [0x14003c0a0], rbx
mov word [0x14003b030], dx
movaps xmmword [0x14003ae00], xmm4
movaps xmmword [0x14003b1c0], xmm5
movq xmm5, r15
mov byte [0x14004a330], 0x16
mov qword [0x14003c098], 0
mov word [0x14003c090], si
mov qword [0x14003b140], 0
mov byte [0x14003b120], 2
mov byte [0x14003b0f0], 0x11
mov byte [0x14003b180], 1
mov qword [0x14003b188], 8
mov qword [0x14003b038], 0
mov byte [0x14003b1b0], 1
mov qword [0x14003b1b8], 0x10
movaps xmmword [0x14004a320], xmm6
movaps xmmword [0x14003c080], xmm6
movaps xmmword [0x14003b020], xmm6
movaps xmmword [0x14003b900], xmm6
mov qword [0x14003b918], 0
movzx edx, word [0x14001a6e2]
movzx ebp, word [0x14001a700]
mov byte [0x14003b1e0], 1
mov word [0x14003b910], dx
lea rdx, [0x140019273]
movq xmm10, rdx
lea rdx, [rbx + 0x90]
add rbx, 0x60
mov qword [0x14003b1e8], 0x18
punpcklqdq xmm5, xmm10
movq xmm11, rdx
add rdx, 0x60
movdqa xmm10, xmmword [0x14001a6f0]
movaps xmmword [0x14003b1f0], xmm5
movq xmm5, rbx
add rbx, 0x60
movq xmm14, rdx
punpcklqdq xmm5, xmm11
lea rdx, str.procname
mov qword [0x14003aff8], 0
movaps xmmword [0x14003b0a0], xmm5
movq xmm5, rbx
movq xmm13, rdx
lea rdx, [rbx + 0xc0]
punpcklqdq xmm5, xmm14
add rbx, 0x90
movq xmm11, rdx
movzx edx, word [0x14001a702]
movaps xmmword [0x14003b0b0], xmm5
movdqa xmm5, xmm1
movq xmm14, rcx
lea rcx, str.filename
punpcklqdq xmm5, xmm13
lea rdi, [rbx + 0x60]
mov word [0x14003b490], dx
movaps xmmword [0x14003b280], xmm5
movq xmm5, rbx
lea rbx, [0x14003afc0]
punpcklqdq xmm5, xmm11
mov qword [0x14003afd0], rdi
sub rdi, 0x90
movaps xmmword [0x14003afc0], xmm5
movdqa xmm5, xmm8
punpcklqdq xmm5, xmm14
mov qword [0x14003b268], rbx
lea rbx, [0x14003afe0]
movaps xmmword [0x14003b2b0], xmm5
movq xmm5, rcx
lea rcx, str.trace
punpcklqdq xmm1, xmm5
mov qword [0x14003b000], rdi
movq xmm5, rcx
lea rdi, [0x1400018e0]
movaps xmmword [0x14003b2e0], xmm1
lea rcx, [0x140019294]
mov word [0x14003aff0], bp
mov byte [0x14003b270], 1
mov qword [0x14003b278], 0
mov qword [0x14003b498], 0
mov byte [0x14003b2a0], 1
mov qword [0x14003b2a8], 8
mov byte [0x14003b2d0], 1
mov qword [0x14003b2d8], 0x10
mov qword [0x14003b260], 3
mov byte [0x14003b240], 2
movaps xmmword [0x14003afe0], xmm10
movaps xmmword [0x14003b480], xmm6
movaps xmmword [0x14004a220], xmm6
mov byte [0x14004a230], 0x18
mov qword [0x14004a238], rbx
lea rbx, [0x14004a220]
movq xmm1, rbx
mov qword [0x14004a250], rdi
lea rdi, [0x14003b300]
lea rbx, [0x14003b0a0]
punpcklqdq xmm1, xmm5
mov qword [0x14003b0c0], rdi
movaps xmmword [0x14003b220], xmm1
movq xmm1, rcx
lea rcx, [rdi - 0x1b0]
lea rdi, [0x140003a40]
punpcklqdq xmm3, xmm1
movdqa xmm1, xmm7
mov qword [0x14003b178], rbx
lea rbx, [0x14003af40]
movaps xmmword [0x14003b310], xmm3
movq xmm3, rcx
add rcx, 0x1e0
punpcklqdq xmm1, xmm3
movq xmm3, rcx
add rcx, 0x30
mov qword [0x14003b090], rdi
movups xmmword [0x14003b0f8], xmm1
movq xmm1, rax
lea rdi, [0x140003bc0]
punpcklqdq xmm1, xmm3
movq xmm3, rcx
add rcx, 0x30
mov qword [0x14003af18], rbx
movups xmmword [0x14003af98], xmm1
movdqa xmm1, xmm2
lea rbx, [0x14003aec0]
punpcklqdq xmm1, xmm3
movq xmm3, rcx
add rcx, 0x30
mov qword [0x14003b078], rax
punpcklqdq xmm2, xmm3
mov qword [0x14003af30], rdi
lea rdi, [0x14004a280]
movaps xmmword [0x14003af80], xmm0
movaps xmmword [0x14003af40], xmm0
movups xmmword [0x14003af58], xmm1
movq xmm1, rbx
lea rbx, [0x140003d20]
movaps xmmword [0x14003aec0], xmm0
mov byte [0x14003b210], 1
mov qword [0x14003b218], 0x20
mov byte [0x14003b300], 1
mov qword [0x14003b308], 0x28
mov qword [0x14003b170], 5
mov byte [0x14003b150], 2
mov byte [0x14003b070], 0x16
mov byte [0x14003af90], 0x11
mov qword [0x14003b350], 0
mov byte [0x14003b330], 2
mov byte [0x14003af50], 0x11
mov qword [0x14003b380], 0
mov byte [0x14003b360], 2
mov byte [0x14003af10], 0x16
movaps xmmword [0x14003b060], xmm6
movaps xmmword [0x14003af00], xmm6
mov byte [0x14003aed0], 0x11
movups xmmword [0x14003aed8], xmm2
movq xmm2, rcx
movzx ecx, word [0x14001a720]
punpcklqdq xmm1, xmm2
mov word [0x14003bfd0], dx
movzx edx, word [0x14001a740]
movups xmmword [0x14004a298], xmm1
movdqa xmm1, xmmword [0x14001a710]
mov word [0x14003b950], cx
movzx ecx, word [0x14001a722]
mov word [0x14003bc90], dx
movzx edx, word [0x14001a742]
movaps xmmword [0x14003b940], xmm1
movaps xmmword [0x14003c0c0], xmm1
movdqa xmm1, xmmword [0x14001a730]
mov qword [0x14004a2d8], rdi
lea rdi, [0x14003bd80]
mov word [0x14003c0d0], cx
lea rcx, [rsp + 0x30]
movq xmm11, rdi
movaps xmmword [0x14004a280], xmm0
movaps xmmword [0x14003bc80], xmm1
movq xmm1, rax
lea rax, [0x14003ae40]
mov qword [0x14003b3b0], 0
mov byte [0x14003b390], 2
mov byte [0x14004a290], 0x11
mov qword [0x14003b3e0], 0
mov byte [0x14003b3c0], 2
mov byte [0x14004a2d0], 0x16
mov qword [0x14004a2f0], rbx
mov qword [0x14003b958], 0
mov qword [0x14003c0d8], 0
mov qword [0x14003bfd8], 0
mov qword [0x14003bc98], 0
mov qword [0x14003bd98], r13
movaps xmmword [0x14004a2c0], xmm6
movaps xmmword [0x14003bfc0], xmm6
movaps xmmword [0x14003bd80], xmm6
mov word [0x14003bd90], dx
movzx edx, word [0x14001a744]
movaps xmmword [0x14003ae80], xmm4
mov word [0x14003b4d0], dx
movzx edx, word [0x14001a746]
movaps xmmword [0x14003ae40], xmm0
mov word [0x14003ae90], dx
lea rdx, [0x14003b3f0]
movq xmm4, rdx
movaps xmmword [0x14004a0c0], xmm0
movq xmm0, rax
lea rax, [rdx + 0x30]
punpcklqdq xmm1, xmm4
movq xmm4, rax
lea rax, [0x14004a0c0]
mov qword [0x14003b4d8], 0
mov qword [0x14004a118], rax
punpcklqdq xmm0, xmm4
lea rax, [0x140003e80]
mov qword [0x14004a130], rax
mov qword [0x14003ae98], 0
mov byte [0x14003ae50], 0x11
mov qword [0x14003b410], 0
mov byte [0x14003b3f0], 2
mov byte [0x14004a0d0], 0x11
mov qword [0x14003b440], 0
mov byte [0x14003b420], 2
mov byte [0x14004a110], 0x16
movaps xmmword [0x14003b4c0], xmm6
movups xmmword [0x14003ae58], xmm1
movups xmmword [0x14004a0d8], xmm0
movaps xmmword [0x14004a100], xmm6
call fcn.1400017e0
mov rax, qword [0x14004a0a0]
cmp rax, 0xdab
jg 0x14000bebc
lea rdx, [0x140043340]
lea rbx, [0x140003ba0]
pxor xmm0, xmm0
mov qword [rdx + rax*8], rbx
add rax, 1
mov edx, 0x2010
xor ebx, ebx
mov qword [0x14004a0a0], rax
lea rax, [rsp + 0x38]
lea r14, [0x140038288]
mov qword [rsp + 0x38], rax
mov rcx, qword [rsp + 0x38]
call fcn.1400017e0
movups xmmword [0x14003ad78], xmm0
mov rcx, r14
movdqa xmm12, xmmword [0x14001a760]
movups xmmword [0x14003ad88], xmm0
movups xmmword [0x14003ad98], xmm0
movdqa xmm0, xmmword [0x14001a750]
movups xmmword [0x140038238], xmm12
movups xmmword [0x140038228], xmm0
call fcn.140002ec0
lea rdx, [rax + 0x10]
lea rdi, [rax + 0x18]
mov qword [rax + 8], 1
and rdi, 0xfffffffffffffff8
mov rcx, rdx
mov qword [rax + 0x10], 0
mov qword [rax + 0x2008], 0
sub rcx, rdi
mov rax, rbx
add ecx, 0x2000
shr ecx, 3
rep stosq qword [rdi], rax
mov qword [0x140038248], rdx
mov rcx, r14
mov edx, 0x2010
movups xmmword [0x140038268], xmm12
call fcn.140002ec0
lea rdx, [rax + 0x10]
lea rdi, [rax + 0x18]
mov qword [rax + 8], 1
and rdi, 0xfffffffffffffff8
mov rcx, rdx
mov qword [rax + 0x10], 0
mov qword [rax + 0x2008], 0
sub rcx, rdi
mov rax, rbx
add ecx, 0x2000
shr ecx, 3
rep stosq qword [rdi], rax
mov qword [0x140038278], rdx
mov rcx, r14
mov edx, 0x2010
movaps xmmword [0x140038250], xmm12
call fcn.140002ec0
lea rdx, [rax + 0x10]
lea rdi, [rax + 0x18]
mov qword [rax + 8], 1
and rdi, 0xfffffffffffffff8
mov rcx, rdx
mov qword [rax + 0x10], 0
mov qword [rax + 0x2008], 0
sub rcx, rdi
mov rax, rbx
add ecx, 0x2000
shr ecx, 3
rep stosq qword [rdi], rax
mov qword [0x140038260], rdx
mov rcx, r14
mov edx, 0x2010
call fcn.140002ec0
movdqa xmm0, xmmword [0x14001a630]
lea rdx, [rax + 0x10]
lea rdi, [rax + 0x18]
mov qword [rax + 8], 1
and rdi, 0xfffffffffffffff8
mov rcx, rdx
mov qword [rax + 0x10], 0
mov qword [rax + 0x2008], 0
sub rcx, rdi
mov rax, rbx
add ecx, 0x2000
shr ecx, 3
rep stosq qword [rdi], rax
mov qword [0x14003adc8], rdx
mov rcx, r14
mov edx, 0x2010
movaps xmmword [0x14003adb0], xmm0
mov qword [0x14003adc0], 0
movaps xmmword [0x14003add0], xmm12
call fcn.140002ec0
lea rdx, [rax + 0x10]
lea rdi, [rax + 0x18]
mov qword [rax + 0x10], 0
and rdi, 0xfffffffffffffff8
mov rcx, rdx
mov qword [rax + 0x2008], 0
sub rcx, rdi
mov qword [rax + 8], 1
mov rax, rbx
lea rbx, [0x140009910]
add ecx, 0x2000
shr ecx, 3
rep stosq qword [rdi], rax
mov qword [0x14003ade0], rdx
mov ecx, 2
mov rax, qword [0x14003b450]
lea rdx, [rax + 1]
mov qword [0x14003ade8], rax
mov qword [0x14003b450], rdx
mov rdx, rbx
call sub.ucrtbase.dll_signal
mov rdx, rbx
mov ecx, 0xb
call sub.ucrtbase.dll_signal
mov rdx, rbx
mov ecx, 0x16
call sub.ucrtbase.dll_signal
mov rdx, rbx
mov ecx, 8
call sub.ucrtbase.dll_signal
mov rdx, rbx
mov ecx, 4
call sub.ucrtbase.dll_signal
lea rcx, [0x1400198b0]
mov rdi, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
call rdi
mov qword [0x14003b458], rax
mov rcx, rax
test rax, rax
je 0x14000be80
lea rdx, str.MultiByteToWideChar
call fcn.140002c20
lea rcx, [0x1400198f0]
mov qword [0x14004a208], rax
call rdi
mov qword [0x14003b460], rax
mov rcx, rax
test rax, rax
je 0x14000be90
lea rdx, str.lstrcmpiW
call fcn.140002c20
mov rcx, qword [0x14003b460]
lea rdx, str.VirtualAllocEx
mov qword [0x14004a1d0], rax
call fcn.140002c20
mov rcx, qword [0x14003b460]
lea rdx, str.WaitForSingleObject
mov qword [0x1400380a8], rax
call fcn.140002c20
movdqa xmm0, xmmword [0x14001a780]
movdqa xmm12, xmmword [0x14001a770]
lea rcx, [0x140019930]
mov qword [0x1400380a0], rax
lea rax, [0x14003b4c0]
mov qword [0x14003b518], rax
movzx eax, word [0x14001a790]
movaps xmmword [0x14003b500], xmm0
mov word [0x14003b510], ax
lea rax, [0x14003b500]
movq xmm0, rax
lea rax, str.skey
mov qword [0x14003bd18], 0
movq xmm2, rax
lea rax, [0x14003b5a0]
mov word [0x14003bd10], bp
punpcklqdq xmm0, xmm2
lea rbx, [rax - 0x30]
movq xmm4, rax
mov byte [0x14003b570], 1
lea rax, [0x1400192dd]
movaps xmmword [0x14003b580], xmm0
movq xmm0, rbx
movq xmm2, rax
lea rax, [0x14003b5d0]
punpcklqdq xmm0, xmm4
mov qword [0x14003b578], 0
mov qword [0x14003b568], rax
punpcklqdq xmm8, xmm2
lea rax, [rbx - 0x30]
mov byte [0x14003b5a0], 1
mov qword [0x14003b5a8], 0x3c0
mov qword [0x14003b560], 2
mov byte [0x14003b540], 2
mov qword [0x14003bd20], rax
movaps xmmword [0x14003bd00], xmm12
movaps xmmword [0x14003b5d0], xmm0
movaps xmmword [0x14003b5b0], xmm8
call rdi
mov qword [0x14003b5e0], rax
mov rcx, rax
test rax, rax
je 0x14000bea0
lea rax, [0x14003bcc0]
lea rdx, str.GetSystemTimeAsFileTime
movq xmm8, rax
lea rax, [0x14003b6e0]
movq xmm13, rax
call fcn.140002c20
movdqa xmm0, xmmword [0x14001a7a0]
mov byte [0x14003b8d0], 0x12
lea rcx, [0x140019970]
mov qword [0x14004a200], rax
movzx eax, word [0x14001a7c0]
movaps xmmword [0x14003b8c0], xmm0
movdqa xmm0, xmmword [0x14001a7b0]
mov word [0x14003b690], ax
lea rax, [0x14003b680]
movaps xmmword [0x14003b6e0], xmm0
movq xmm0, rax
lea rax, str.Field0
movq xmm4, rax
lea rax, [0x14003b7e0]
mov qword [0x14003b8d8], 0
lea rbx, [rax - 0x30]
punpcklqdq xmm0, xmm4
movq xmm4, rax
add rax, 0x30
movaps xmmword [0x14003b7c0], xmm0
movq xmm0, rbx
movq xmm2, rax
lea rax, [0x14003b640]
punpcklqdq xmm0, xmm4
mov qword [0x14003b618], rax
lea rax, [0x140001c80]
movaps xmmword [0x14003b6c0], xmm0
movdqa xmm0, xmm7
punpcklqdq xmm0, xmm2
mov qword [0x14003b630], rax
lea rax, [0x14003b600]
movups xmmword [0x14003b658], xmm0
movq xmm0, rax
lea rax, str.Field1
movq xmm4, rax
lea rax, [0x14003b6c0]
mov byte [0x14003b6f0], 0x12
punpcklqdq xmm0, xmm4
mov qword [0x14003b7a8], rax
lea rax, [rbx - 0x30]
movaps xmmword [0x14003b7f0], xmm0
movdqa xmm0, xmm13
mov qword [0x14003b6f8], 0
mov qword [0x14003b698], 0
mov byte [0x14003b7b0], 1
mov qword [0x14003b7b8], 0
mov word [0x14003b650], si
mov qword [0x14003b830], 0
mov byte [0x14003b810], 2
mov byte [0x14003b610], 0x16
mov byte [0x14003b7e0], 1
mov qword [0x14003b7e8], 8
mov qword [0x14003b7a0], 2
mov byte [0x14003b780], 2
movaps xmmword [0x14003b680], xmm6
movaps xmmword [0x14003b640], xmm6
movaps xmmword [0x14003b600], xmm6
mov qword [0x14003b700], rax
lea rax, str.zonedTimeFromTimeImpl
movq xmm2, rax
lea rax, [rbx + 0x90]
sub rbx, 0x60
mov byte [0x14003b750], 1
punpcklqdq xmm0, xmm2
movq xmm4, rax
lea rax, str.zonedTimeFromAdjTimeImpl
mov qword [0x14003b758], 0
movaps xmmword [0x14003b760], xmm0
movq xmm0, rbx
movq xmm2, rax
lea rax, [rbx + 0x120]
punpcklqdq xmm0, xmm4
mov qword [0x14003b8b0], rax
lea rax, [0x14003b8a0]
punpcklqdq xmm13, xmm2
movaps xmmword [0x14003b8a0], xmm0
movq xmm0, r15
mov qword [0x14003b748], rax
punpcklqdq xmm0, xmm9
lea rax, [rbx - 0x30]
movzx ebx, word [0x14001a7e0]
mov qword [0x14003b8e0], rax
lea rax, [0x140004150]
movaps xmmword [0x14003b880], xmm0
movdqa xmm0, xmmword [0x14001a7d0]
mov qword [0x1400380f0], rax
lea rax, [0x14003ba40]
movaps xmmword [0x14003bc20], xmm0
movq xmm0, rax
lea rax, str.bCryptGenRandom
movq xmm4, rax
lea rax, [0x14003ba00]
mov byte [0x14003b840], 1
punpcklqdq xmm0, xmm4
mov qword [0x14003b848], 0x10
movaps xmmword [0x14003bac0], xmm0
movq xmm0, rax
lea rax, str.queryProcessCycleTime
movq xmm3, rax
lea rax, [0x14003b9c0]
mov byte [0x14003b870], 1
punpcklqdq xmm0, xmm3
mov byte [0x14003b720], 2
mov qword [0x14003b878], 0x20
mov qword [0x14003b740], 3
mov byte [0x1400380d0], 0x18
mov qword [0x1400380d8], r15
mov word [0x14003bc30], si
mov qword [0x14003ba58], 0
mov word [0x14003ba50], bx
mov byte [0x14003bab0], 1
mov qword [0x14003bab8], 8
mov qword [0x14003ba18], 0
mov word [0x14003ba10], bx
movaps xmmword [0x14003b850], xmm13
movaps xmmword [0x1400380c0], xmm6
movaps xmmword [0x14003ba40], xmm6
movaps xmmword [0x14003ba00], xmm6
mov byte [0x14003bae0], 1
movaps xmmword [0x14003baf0], xmm0
movq xmm0, rax
lea rax, str.queryUnbiasedInterruptTime
movq xmm2, rax
lea rax, [0x14003b980]
mov qword [0x14003bae8], 0x10
punpcklqdq xmm0, xmm2
mov word [0x14003b9d0], bx
movaps xmmword [0x14003bb20], xmm0
movq xmm0, rax
lea rax, str.queryIdleProcessorCycleTime
movq xmm4, rax
lea rax, [0x14003b940]
mov qword [0x14003b9d8], 0
punpcklqdq xmm0, xmm4
mov byte [0x14003bb10], 1
movaps xmmword [0x14003bb50], xmm0
movq xmm0, rax
lea rax, str.coresCount
movq xmm3, rax
lea rax, [0x14003bae0]
mov qword [0x14003bb18], 0x18
punpcklqdq xmm0, xmm3
lea rdx, [rax - 0x30]
movq xmm2, rax
add rax, 0x60
movaps xmmword [0x14003bb80], xmm0
movq xmm0, rdx
add rdx, 0x60
movq xmm4, rax
punpcklqdq xmm0, xmm2
add rax, 0x60
mov qword [0x14003b998], 0
movaps xmmword [0x14003bbe0], xmm0
movq xmm0, rdx
add rdx, 0x60
movq xmm3, rax
punpcklqdq xmm0, xmm4
movzx eax, word [0x14001a7e2]
mov word [0x14003b990], bx
movaps xmmword [0x14003bbf0], xmm0
movq xmm0, rdx
punpcklqdq xmm0, xmm3
mov word [0x14003bcd0], ax
lea rax, str.hIntel
movq xmm2, rax
movaps xmmword [0x14003bc00], xmm0
movdqa xmm0, xmm8
lea rax, [0x14003bbe0]
punpcklqdq xmm0, xmm2
mov qword [0x14003baa8], rax
lea rax, [rdx - 0xf0]
movaps xmmword [0x14003bbb0], xmm0
movq xmm4, rax
movdqa xmm0, xmm7
punpcklqdq xmm0, xmm4
mov byte [0x14003bb40], 1
mov qword [0x14003bb48], 0x20
mov byte [0x14003bb70], 1
mov qword [0x14003bb78], 0x28
mov qword [0x14003bcd8], 0
mov byte [0x14003bba0], 1
mov qword [0x14003bba8], 0x30
mov qword [0x14003baa0], 6
mov byte [0x14003ba80], 2
movaps xmmword [0x14003b9c0], xmm6
movaps xmmword [0x14003b980], xmm6
movaps xmmword [0x14003bcc0], xmm6
movups xmmword [0x14003bc38], xmm0
call rdi
mov qword [0x14003bc60], rax
mov rcx, rax
test rax, rax
je 0x14000be70
lea rax, [0x14003bec0]
lea rdx, str.BCryptGenRandom
movq xmm9, rax
lea rax, [0x14003bf00]
movq xmm13, rax
lea rax, [0x14004a180]
movq xmm14, rax
call fcn.140002c20
movq xmm0, r12
mov word [0x140038190], si
lea rsi, [0x14003bfc0]
mov qword [0x14004a148], rax
lea rax, [0x1400193b4]
lea rcx, [0x1400199b0]
movq xmm3, rax
lea rax, [0x1400193b6]
mov byte [0x14003c590], 0x12
punpcklqdq xmm0, xmm3
movq xmm2, rax
lea rax, str.left
mov qword [0x14003c598], 0
movaps xmmword [0x14003c140], xmm0
movq xmm0, r12
movq xmm3, rax
lea rax, [0x14003c160]
punpcklqdq xmm0, xmm2
lea rdx, [rax - 0x30]
movq xmm4, rax
add rax, 0x60
movaps xmmword [0x14003c170], xmm0
movdqa xmm0, xmm14
movq xmm2, rax
lea rax, str.right
punpcklqdq xmm0, xmm3
movq xmm3, rax
lea rax, [0x14003c560]
mov byte [0x14003c130], 1
movaps xmmword [0x14003c1a0], xmm0
movq xmm0, rdx
add rdx, 0x60
punpcklqdq xmm14, xmm3
punpcklqdq xmm0, xmm4
mov qword [0x14003c128], rax
lea rax, [rdx - 0x90]
movaps xmmword [0x14003c560], xmm0
movq xmm0, rdx
punpcklqdq xmm0, xmm2
mov qword [0x14003c5a0], rax
lea rax, [0x14003c580]
mov qword [0x14004a198], rax
lea rax, [0x140004380]
movaps xmmword [0x14003c570], xmm0
movdqa xmm0, xmmword [0x14001a7f0]
mov qword [0x14004a1b0], rax
lea rax, str.:state
movq xmm4, rax
movaps xmmword [0x140038180], xmm0
movq xmm0, rsi
lea rax, [0x14003bf80]
punpcklqdq xmm0, xmm4
mov qword [0x14003c138], 0
lea rsi, [0x14003bd00]
movaps xmmword [0x14003c230], xmm0
movq xmm0, rax
lea rax, str.NtProtectVirtualMemory1
movq xmm2, rax
lea rax, [0x14003bf40]
mov byte [0x14003c160], 1
punpcklqdq xmm0, xmm2
mov qword [0x14003c168], 4
mov byte [0x14003c190], 1
mov qword [0x14003c198], 8
mov byte [0x14003c1c0], 1
mov qword [0x14003c1c8], 0x10
mov qword [0x14003c120], 4
mov byte [0x14003c100], 2
mov byte [0x14004a190], 0x16
mov byte [0x14003c220], 1
mov qword [0x14003c228], 8
movaps xmmword [0x14003c580], xmm10
movaps xmmword [0x14003c1d0], xmm14
movaps xmmword [0x14004a180], xmm6
movaps xmmword [0x14003bf80], xmm6
movaps xmmword [0x14003c260], xmm0
movq xmm0, rax
lea rax, str.NtWriteVirtualMemory2
movq xmm3, rax
lea rax, str.NtClose3
mov qword [0x14003bf98], 0
punpcklqdq xmm0, xmm3
movq xmm4, rax
lea rax, str.MyGetModuleHandleA4
mov word [0x14003bf90], bx
movaps xmmword [0x14003c290], xmm0
movdqa xmm0, xmm13
movq xmm2, rax
lea rax, [0x14003be80]
punpcklqdq xmm0, xmm4
mov byte [0x14003c250], 1
movaps xmmword [0x14003c2c0], xmm0
movdqa xmm0, xmm9
punpcklqdq xmm0, xmm2
mov word [0x14003bf50], bx
movaps xmmword [0x14003c2f0], xmm0
movq xmm0, rax
lea rax, str.MyGetModuleInformation5
movq xmm3, rax
lea rax, [0x14003be40]
mov qword [0x14003c258], 0x10
punpcklqdq xmm0, xmm3
mov qword [0x14003bf58], 0
movaps xmmword [0x14003c320], xmm0
movq xmm0, rax
lea rax, str.MyCreateFileMappingA6
movq xmm4, rax
lea rax, [0x14003be00]
mov byte [0x14003c280], 1
punpcklqdq xmm0, xmm4
mov word [0x14003bf10], bx
mov qword [0x14003c288], 0x18
mov qword [0x14003bf18], 0
mov byte [0x14003c2b0], 1
mov qword [0x14003c2b8], 0x20
mov qword [0x14003bed8], 0
mov word [0x14003bed0], bx
mov byte [0x14003c2e0], 1
mov qword [0x14003c2e8], 0x28
mov qword [0x14003be98], 0
mov word [0x14003be90], bx
mov byte [0x14003c310], 1
mov qword [0x14003c318], 0x30
mov qword [0x14003be58], 0
mov word [0x14003be50], bx
movaps xmmword [0x14003bf40], xmm6
movaps xmmword [0x14003bf00], xmm6
movaps xmmword [0x14003bec0], xmm6
movaps xmmword [0x14003be80], xmm6
movaps xmmword [0x14003be40], xmm6
mov byte [0x14003c340], 1
movaps xmmword [0x14003c350], xmm0
movq xmm0, rax
lea rax, str.MyMapViewOfFile7
movq xmm2, rax
lea rax, str.MyFreeLibrary8
mov qword [0x14003c348], 0x38
movq xmm3, rax
lea rax, str.MyLoadLibraryA9
punpcklqdq xmm0, xmm2
mov qword [0x14003be18], 0
movq xmm4, rax
lea rax, [0x14003bdc0]
movaps xmmword [0x14003c380], xmm0
punpcklqdq xmm13, xmm3
movq xmm0, rax
lea rax, str.MyGetProcAddress10
punpcklqdq xmm9, xmm4
mov word [0x14003be10], bx
movq xmm2, rax
lea rax, str.ptrEncText11
mov byte [0x14003c370], 1
punpcklqdq xmm0, xmm2
movq xmm3, rax
lea rax, str.ptrDecText12
mov qword [0x14003c378], 0x40
movaps xmmword [0x14003c410], xmm0
movdqa xmm0, xmm11
movq xmm4, rax
lea rax, str.cipher
punpcklqdq xmm0, xmm3
movq xmm2, rax
lea rax, [rdx + 0x330]
mov byte [0x14003c3a0], 1
movaps xmmword [0x14003c440], xmm0
movdqa xmm0, xmm11
punpcklqdq xmm0, xmm4
mov qword [0x14003c3a8], 0x48
movaps xmmword [0x14003c470], xmm0
movq xmm0, rsi
lea rsi, [rdx + 0x90]
punpcklqdq xmm0, xmm2
mov byte [0x14003c3d0], 1
movaps xmmword [0x14003c4d0], xmm0
mov qword [0x14003c3d8], 0x50
mov qword [0x14003bdd8], 0
mov word [0x14003bdd0], bx
mov byte [0x14003c400], 1
mov qword [0x14003c408], 0x58
mov byte [0x14003c430], 1
mov qword [0x14003c438], 0x60
mov byte [0x14003c460], 1
mov qword [0x14003c468], 0x68
mov qword [0x14003bd58], 0
mov word [0x14003bd50], bp
mov byte [0x14003c4c0], 1
mov qword [0x14003c4c8], 0
movaps xmmword [0x14003be00], xmm6
movaps xmmword [0x14003c3b0], xmm13
movaps xmmword [0x14003c3e0], xmm9
movaps xmmword [0x14003bdc0], xmm6
movaps xmmword [0x14003bd40], xmm12
mov qword [0x14003bd60], rax
lea rax, [0x14003bd40]
movq xmm0, rax
lea rax, str.dctx13
mov byte [0x14003c490], 1
movq xmm3, rax
lea rax, str.ptrKey14
mov qword [0x14003c498], 0x70
punpcklqdq xmm0, xmm3
movq xmm4, rax
lea rax, [rdx + 0xc0]
mov byte [0x14003c4f0], 1
movq xmm2, rax
punpcklqdq xmm11, xmm4
movaps xmmword [0x14003c4a0], xmm0
movq xmm0, rsi
punpcklqdq xmm0, xmm2
add rsi, 0x60
lea rax, [rdx + 0x120]
mov qword [0x14003c4f8], 0x438
movq xmm3, rax
add rax, 0x60
movaps xmmword [0x14003c000], xmm0
movq xmm0, rsi
punpcklqdq xmm0, xmm3
add rsi, 0x60
movq xmm4, rax
add rax, 0x60
movaps xmmword [0x14003c010], xmm0
movq xmm0, rsi
add rsi, 0x60
movq xmm2, rax
punpcklqdq xmm0, xmm4
add rax, 0x60
mov byte [0x14003c520], 1
movaps xmmword [0x14003c020], xmm0
movq xmm0, rsi
movq xmm3, rax
add rsi, 0x60
punpcklqdq xmm0, xmm2
add rax, 0x60
mov qword [0x14003c528], 0x440
movq xmm4, rax
movaps xmmword [0x14003c030], xmm0
add rax, 0x60
movq xmm0, rsi
punpcklqdq xmm0, xmm3
movq xmm2, rax
add rsi, 0x60
add rax, 0x90
movq xmm3, rax
movaps xmmword [0x14003c040], xmm0
lea rax, str.dataLen15
movq xmm0, rsi
punpcklqdq xmm0, xmm4
add rsi, 0x60
movq xmm4, rax
mov qword [0x14003c210], 0x10
lea rax, [0x14003c000]
movaps xmmword [0x14003c050], xmm0
movq xmm0, rsi
add rsi, 0x90
mov qword [0x14003c218], rax
lea rax, [rdx + 0x60]
punpcklqdq xmm0, xmm2
punpcklqdq xmm8, xmm4
movq xmm2, rax
lea rax, [0x140038180]
movaps xmmword [0x14003c060], xmm0
movq xmm0, rsi
mov qword [0x140038158], rax
punpcklqdq xmm0, xmm3
punpcklqdq xmm7, xmm2
lea rax, [0x140001d50]
mov qword [0x140038170], rax
lea rax, [0x140001d60]
mov byte [0x14003c1f0], 2
mov byte [0x140038150], 0x16
mov byte [0x140038110], 0x18
mov qword [0x140038118], r13
mov qword [0x140038130], rax
movaps xmmword [0x14003c500], xmm11
movaps xmmword [0x14003c070], xmm0
movaps xmmword [0x14003c530], xmm8
movups xmmword [0x140038198], xmm7
movaps xmmword [0x140038140], xmm6
movaps xmmword [0x140038100], xmm6
call rdi
mov qword [0x14003bc68], rax
mov rcx, rax
test rax, rax
je 0x14000beb0
lea rdx, str.RtlGetCurrentPeb
call fcn.140002c20
mov qword [0x14004a1c8], rax
mov rax, qword [rsp + 0x30]
call rax
lea rax, [0x14000c4b0]
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x28], rax
call fcn.1400017e0
mov rax, qword [rsp + 0x28]
call rax
nop
movaps xmm6, xmmword [rsp + 0x40]
movaps xmm7, xmmword [rsp + 0x50]
xor eax, eax
movaps xmm8, xmmword [rsp + 0x60]
movaps xmm9, xmmword [rsp + 0x70]
movaps xmm10, xmmword [rsp + 0x80]
movaps xmm11, xmmword [rsp + 0x90]
movaps xmm12, xmmword [rsp + 0xa0]
movaps xmm13, xmmword [rsp + 0xb0]
movaps xmm14, xmmword [rsp + 0xc0]
add rsp, 0xd8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [0x140019940]
call fcn.140002a90
nop dword [rax]
lea rcx, [0x140019880]
call fcn.140002a90
nop dword [rax]
lea rcx, [0x1400198c0]
call fcn.140002a90
nop dword [rax]
lea rcx, [0x140019900]
call fcn.140002a90
nop dword [rax]
lea rcx, [0x140019980]
call fcn.140002a90
call fcn.140001e20
nop
nop word cs:[rax + rax]
nop dword [rax]