Function at 0x140007230
Capabilities:
Encode data using xor
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2c0]
sub rsp, 0x3c0
mov rax, qword [0x140047020]
xor rax, rsp
mov qword [rbp + 0x2b0], rax
call fcn.140006570
lea rcx, [0x14008bae0]
call fcn.14000b900
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x140040860]
movdqa xmmword [rbp - 0x10], xmm1
mov byte [rbp - 0x20], 0
movups xmmword [rbp], xmm0
movdqa xmmword [rbp + 0x10], xmm1
mov byte [rbp], 0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], 8
mov qword [rbp + 0x38], 0xf
movabs rax, 0x6c6c642e74736574
mov qword [rbp + 0x20], rax
mov byte [rbp + 0x28], 0
mov qword [rsp + 0x40], 8
mov qword [rsp + 0x48], 0xf
movaps xmm0, xmmword [rbp + 0x20]
movups xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x48]
call fcn.140006bf0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xor r13d, r13d
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], r13
lea r8d, [r13 + 0x21]
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [rbp + 0x50]
call fcn.14000bf50
mov dword [rbp + 0x70], 0x238
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov rsi, qword [rbp + 0x68]
mov rdi, qword [rbp + 0x50]
cmp rax, 0xffffffffffffffff
je 0x1400073f2
lea rdx, [rbp + 0x70]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
lea rax, [rbp + 0x50]
cmp rsi, 8
cmovae rax, rdi
lea r8, [rbp + 0x9c]
sub r8, rax
nop
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x140007374
add rax, 2
test ecx, ecx
jne 0x140007360
mov rcx, rbx
test edx, edx
jne 0x140007387
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r14d, dword [rbp + 0x78]
jmp 0x1400073f5
lea rdx, [rbp + 0x70]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x1400073e9
nop word [rax + rax]
lea rax, [rbp + 0x50]
cmp rsi, 8
cmovae rax, rdi
lea r8, [rbp + 0x9c]
sub r8, rax
nop word [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x1400073d4
add rax, 2
test ecx, ecx
jne 0x1400073c0
mov rcx, rbx
test edx, edx
je 0x14000737b
lea rdx, [rbp + 0x70]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1400073a0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r14d, r13d
cmp rsi, 8
jb 0x140007430
lea rdx, [rsi*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140007428
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400087cb
mov rcx, rdi
call fcn.140010944
xor edx, edx
mov cl, 0x5b
call fcn.140002320
movzx edi, al
mov byte [rsp + 0x78], al
mov edx, 1
mov cl, 0x3e
call fcn.140002320
mov byte [rsp + 0x79], al
mov edx, 2
mov cl, 0x5d
call fcn.140002320
movzx esi, al
mov byte [rsp + 0x7a], al
mov edx, 3
mov cl, 0x20
call fcn.140002320
movzx r15d, al
mov byte [rsp + 0x7b], al
mov edx, 4
mov cl, 0x43
call fcn.140002320
mov byte [rsp + 0x20], al
mov byte [rsp + 0x7c], al
mov edx, 5
mov cl, 0x6c
call fcn.140002320
mov byte [rsp + 0x7d], al
mov edx, 6
mov cl, 0x61
call fcn.140002320
mov byte [rsp + 0x7e], al
mov edx, 7
mov cl, 0x73
call fcn.140002320
mov byte [rsp + 0x7f], al
mov edx, 8
call fcn.140002320
mov byte [rbp - 0x80], al
mov edx, 9
mov cl, 0x3a
call fcn.140002320
mov byte [rbp - 0x7f], al
mov edx, 0xa
mov cl, 0x20
call fcn.140002320
mov byte [rbp - 0x7e], al
xor eax, eax
mov byte [rbp - 0x7d], al
mov edx, r13d
nop
movsxd rax, edx
lea rcx, [rsp + 0x78]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0xb
jb 0x1400074f0
mov byte [rbp - 0x7d], r13b
lea rdx, [rsp + 0x78]
lea rcx, [0x14008bae0]
call fcn.14000b650
mov rcx, rax
call fcn.14000b900
lea rdx, [0x14008b310]
call fcn.14000b9a0
xor edx, edx
mov cl, 0x43
call fcn.140002320
mov byte [rsp + 0x78], al
mov edx, 1
mov cl, 0x4c
call fcn.140002320
mov byte [rsp + 0x79], al
mov edx, 2
mov cl, 0x53
call fcn.140002320
mov byte [rsp + 0x7a], al
xor eax, eax
mov byte [rsp + 0x7b], al
mov edx, r13d
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x78]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 3
jb 0x140007570
mov byte [rsp + 0x7b], r13b
lea rcx, [rsp + 0x78]
call fcn.14001a04c
mov byte [rsp + 0x50], dil
mov edx, 1
mov cl, 0x31
call fcn.140002320
mov byte [rsp + 0x51], al
mov byte [rsp + 0x52], sil
mov byte [rsp + 0x53], r15b
mov edx, 4
mov cl, 0x4d
call fcn.140002320
mov byte [rsp + 0x54], al
mov edx, 5
mov cl, 0x61
call fcn.140002320
mov byte [rsp + 0x22], al
mov byte [rsp + 0x55], al
mov edx, 6
mov cl, 0x6e
call fcn.140002320
mov byte [rsp + 0x56], al
mov edx, 7
mov cl, 0x75
call fcn.140002320
mov byte [rsp + 0x57], al
mov edx, 8
mov cl, 0x61
call fcn.140002320
mov byte [rsp + 0x58], al
mov edx, 9
mov cl, 0x6c
call fcn.140002320
movzx ebx, al
mov byte [rsp + 0x59], al
mov edx, 0xa
mov cl, 0x4d
call fcn.140002320
mov byte [rsp + 0x5a], al
mov edx, 0xb
mov cl, 0x61
call fcn.140002320
mov byte [rsp + 0x5b], al
mov edx, 0xc
mov cl, 0x70
call fcn.140002320
mov byte [rsp + 0x5c], al
xor eax, eax
mov byte [rsp + 0x5d], al
mov edx, r13d
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x50]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0xd
jb 0x140007660
mov byte [rsp + 0x5d], r13b
lea rdx, [rsp + 0x50]
lea rcx, [0x14008bae0]
call fcn.14000b650
mov r9, rax
xor edx, edx
mov cl, 0xa
call fcn.140002320
mov byte [rsp + 0x78], al
xor eax, eax
mov byte [rsp + 0x79], al
mov r8d, r13d
nop word [rax + rax]
movsxd rcx, r8d
lea rdx, [rsp + 0x78]
add rdx, rcx
lea ecx, [r8 + 0x13]
xor byte [rdx], cl
inc r8d
cmp r8d, 1
jb 0x1400076b0
mov byte [rsp + 0x79], al
lea rdx, [rsp + 0x78]
mov rcx, r9
call fcn.14000b650
mov r8, rax
mov byte [rbp - 0x78], dil
mov edx, 1
mov cl, 0x32
call fcn.140002320
mov byte [rbp - 0x77], al
mov byte [rbp - 0x76], sil
mov byte [rbp - 0x75], r15b
mov edx, 4
mov cl, 0x44
call fcn.140002320
mov byte [rsp + 0x27], al
mov byte [rbp - 0x74], al
mov edx, 5
mov cl, 0x65
call fcn.140002320
mov byte [rbp - 0x73], al
mov edx, 6
mov cl, 0x66
call fcn.140002320
mov byte [rbp - 0x72], al
mov edx, 7
mov cl, 0x61
call fcn.140002320
mov byte [rsp + 0x24], al
mov byte [rbp - 0x71], al
mov edx, 8
mov cl, 0x75
call fcn.140002320
mov byte [rbp - 0x70], al
mov byte [rbp - 0x6f], bl
mov edx, 0xa
mov cl, 0x74
call fcn.140002320
mov byte [rsp + 0x29], al
mov byte [rbp - 0x6e], al
mov edx, 0xb
mov cl, 0x20
call fcn.140002320
mov byte [rsp + 0x21], al
mov byte [rbp - 0x6d], al
mov edx, 0xc
mov cl, 0x49
call fcn.140002320
mov byte [rsp + 0x28], al
mov byte [rbp - 0x6c], al
mov edx, 0xd
mov cl, 0x6e
call fcn.140002320
mov byte [rbp - 0x6b], al
mov edx, 0xe
mov cl, 0x6a
call fcn.140002320
mov byte [rbp - 0x6a], al
mov edx, 0xf
mov cl, 0x65
call fcn.140002320
mov byte [rsp + 0x23], al
mov byte [rbp - 0x69], al
mov edx, 0x10
mov cl, 0x63
call fcn.140002320
mov byte [rsp + 0x2a], al
mov byte [rbp - 0x68], al
mov edx, 0x11
mov cl, 0x74
call fcn.140002320
mov byte [rsp + 0x2b], al
mov byte [rbp - 0x67], al
mov edx, 0x12
mov cl, 0x69
call fcn.140002320
mov byte [rsp + 0x2c], al
mov byte [rbp - 0x66], al
mov edx, 0x13
mov cl, 0x6f
call fcn.140002320
mov byte [rsp + 0x2d], al
mov byte [rbp - 0x65], al
mov edx, 0x14
mov cl, 0x6e
call fcn.140002320
mov byte [rsp + 0x2e], al
mov byte [rbp - 0x64], al
mov edx, 0x15
mov cl, 0x20
call fcn.140002320
mov byte [rsp + 0x26], al
mov byte [rbp - 0x63], al
mov edx, 0x16
mov cl, 0x28
call fcn.140002320
mov byte [rbp - 0x62], al
mov edx, 0x17
mov cl, 0x46
call fcn.140002320
mov byte [rbp - 0x61], al
mov edx, 0x18
mov cl, 0x41
call fcn.140002320
mov byte [rbp - 0x60], al
mov edx, 0x19
mov cl, 0x43
call fcn.140002320
mov byte [rbp - 0x5f], al
mov edx, 0x1a
mov cl, 0x45
call fcn.140002320
mov byte [rbp - 0x5e], al
mov edx, 0x1b
mov cl, 0x20
call fcn.140002320
mov byte [rsp + 0x25], al
mov byte [rbp - 0x5d], al
mov edx, 0x1c
mov cl, 0x49
call fcn.140002320
mov byte [rbp - 0x5c], al
mov edx, 0x1d
mov cl, 0x4e
call fcn.140002320
mov byte [rbp - 0x5b], al
mov edx, 0x1e
mov cl, 0x4a
call fcn.140002320
mov byte [rbp - 0x5a], al
mov edx, 0x1f
mov cl, 0x45
call fcn.140002320
mov byte [rbp - 0x59], al
mov edx, 0x20
mov cl, 0x43
call fcn.140002320
mov byte [rbp - 0x58], al
mov edx, 0x21
mov cl, 0x54
call fcn.140002320
mov byte [rbp - 0x57], al
mov edx, 0x22
mov cl, 0x49
call fcn.140002320
mov byte [rbp - 0x56], al
mov edx, 0x23
mov cl, 0x4f
call fcn.140002320
mov byte [rbp - 0x55], al
mov edx, 0x24
mov cl, 0x4e
call fcn.140002320
mov byte [rbp - 0x54], al
mov edx, 0x25
mov cl, 0x29
call fcn.140002320
mov byte [rbp - 0x53], al
xor eax, eax
mov byte [rbp - 0x52], al
mov edx, r13d
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x78]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0x26
jb 0x140007930
mov byte [rbp - 0x52], r13b
lea rdx, [rbp - 0x78]
mov rcx, r8
call fcn.14000b650
mov rcx, rax
call fcn.14000b900
lea r12, [0x14008b2f0]
mov rdx, r12
call fcn.14000b9a0
xor edx, edx
mov cl, 0x31
call fcn.140002320
mov byte [rsp + 0x78], al
xor eax, eax
mov byte [rsp + 0x79], al
movsxd rax, edx
lea rcx, [rsp + 0x78]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 1
jb 0x140007980
mov byte [rsp + 0x79], r13b
lea rcx, [rsp + 0x78]
mov rbx, 0xffffffffffffffff
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r13b
jne 0x1400079b0
mov r8, qword [0x14008b308]
mov rcx, r12
mov r9, qword [0x14008b2f0]
cmp r8, 0x10
cmovae rcx, r9
mov r13, qword [0x14008b300]
cmp r13, rax
jne 0x14000830d
mov r8, r13
lea rdx, [rsp + 0x78]
call fcn.140013140
test eax, eax
jne 0x1400082ff
lea edx, [rax + 1]
mov cl, 0x2b
cmp r14d, ebx
je 0x140008068
lea r8, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae r8, qword [rbp - 0x20]
mov byte [rsp + 0x50], dil
call fcn.140002320
movzx ebx, al
mov byte [rsp + 0x51], al
mov byte [rsp + 0x52], sil
mov byte [rsp + 0x53], r15b
mov edx, 4
mov cl, 0x54
call fcn.140002320
mov byte [rsp + 0x54], al
movzx eax, byte [rsp + 0x22]
mov byte [rsp + 0x55], al
mov edx, 6
mov cl, 0x72
call fcn.140002320
mov byte [rsp + 0x56], al
mov edx, 7
mov cl, 0x67
call fcn.140002320
mov byte [rsp + 0x57], al
mov edx, 8
mov cl, 0x65
call fcn.140002320
movzx r13d, al
mov byte [rsp + 0x58], al
mov edx, 9
mov cl, 0x74
call fcn.140002320
mov byte [rsp + 0x59], al
mov edx, 0xa
mov cl, 0x3a
call fcn.140002320
mov byte [rsp + 0x5a], al
movzx eax, byte [rsp + 0x21]
mov byte [rsp + 0x5b], al
mov edx, 0xc
mov cl, 0x25
call fcn.140002320
mov byte [rsp + 0x5c], al
mov edx, 0xd
mov cl, 0x73
call fcn.140002320
mov byte [rsp + 0x5d], al
mov edx, 0xe
mov cl, 0x20
call fcn.140002320
mov byte [rsp + 0x5e], al
mov edx, 0xf
mov cl, 0xa
call fcn.140002320
mov byte [rsp + 0x5f], al
xor eax, eax
mov byte [rsp + 0x60], al
xor edx, edx
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x50]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0x10
jb 0x140007af0
mov byte [rsp + 0x60], 0
mov rdx, r8
lea rcx, [rsp + 0x50]
call fcn.140001570
lea r9, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae r9, qword [rbp]
mov byte [rsp + 0x50], dil
mov byte [rsp + 0x51], bl
mov byte [rsp + 0x52], sil
mov byte [rsp + 0x53], r15b
mov edx, 4
mov cl, 0x50
call fcn.140002320
mov byte [rsp + 0x22], al
mov byte [rsp + 0x54], al
mov edx, 5
mov cl, 0x72
call fcn.140002320
mov byte [rsp + 0x23], al
mov byte [rsp + 0x55], al
mov edx, 6
mov cl, 0x6f
call fcn.140002320
mov byte [rsp + 0x24], al
mov byte [rsp + 0x56], al
mov edx, 7
mov cl, 0x63
call fcn.140002320
mov byte [rsp + 0x25], al
mov byte [rsp + 0x57], al
mov byte [rsp + 0x58], r13b
mov edx, 9
mov cl, 0x73
call fcn.140002320
mov byte [rsp + 0x26], al
mov byte [rsp + 0x59], al
mov edx, 0xa
call fcn.140002320
movzx r12d, al
mov byte [rsp + 0x5a], al
mov edx, 0xb
mov cl, 0x3a
call fcn.140002320
mov byte [rsp + 0x5b], al
mov edx, 0xc
mov cl, 0x20
call fcn.140002320
mov byte [rsp + 0x5c], al
mov edx, 0xd
mov cl, 0x25
call fcn.140002320
mov byte [rsp + 0x5d], al
mov edx, 0xe
mov cl, 0x73
call fcn.140002320
mov byte [rsp + 0x5e], al
mov edx, 0xf
mov cl, 0x20
call fcn.140002320
mov byte [rsp + 0x20], al
mov byte [rsp + 0x5f], al
mov edx, 0x10
mov cl, 0xa
call fcn.140002320
mov byte [rsp + 0x60], al
xor eax, eax
mov byte [rsp + 0x61], al
xor r8d, r8d
nop dword [rax]
nop word [rax + rax]
movsxd rcx, r8d
lea rdx, [rsp + 0x50]
add rdx, rcx
lea ecx, [r8 + 0x13]
xor byte [rdx], cl
inc r8d
cmp r8d, 0x11
jb 0x140007c30
mov byte [rsp + 0x61], al
mov rdx, r9
lea rcx, [rsp + 0x50]
call fcn.140001570
mov byte [rsp + 0x50], dil
mov byte [rsp + 0x51], bl
mov byte [rsp + 0x52], sil
mov byte [rsp + 0x53], r15b
movzx eax, byte [rsp + 0x22]
mov byte [rsp + 0x54], al
movzx eax, byte [rsp + 0x23]
mov byte [rsp + 0x55], al
movzx eax, byte [rsp + 0x24]
mov byte [rsp + 0x56], al
movzx eax, byte [rsp + 0x25]
mov byte [rsp + 0x57], al
mov byte [rsp + 0x58], r13b
movzx eax, byte [rsp + 0x26]
mov byte [rsp + 0x59], al
mov byte [rsp + 0x5a], r12b
movzx eax, byte [rsp + 0x21]
mov byte [rsp + 0x5b], al
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x5c], al
mov edx, 0xd
mov cl, 0x44
call fcn.140002320
mov byte [rsp + 0x5d], al
mov edx, 0xe
mov cl, 0x3a
call fcn.140002320
mov byte [rsp + 0x5e], al
movzx eax, byte [rsp + 0x20]
mov byte [rsp + 0x5f], al
mov edx, 0x10
mov cl, 0x25
call fcn.140002320
mov byte [rsp + 0x60], al
mov edx, 0x11
mov cl, 0x69
call fcn.140002320
mov byte [rsp + 0x61], al
mov edx, 0x12
mov cl, 0x20
call fcn.140002320
mov byte [rsp + 0x62], al
mov edx, 0x13
mov cl, 0xa
call fcn.140002320
mov byte [rsp + 0x63], al
xor eax, eax
mov byte [rsp + 0x64], al
xor edx, edx
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x50]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0x14
jb 0x140007d30
mov byte [rsp + 0x64], 0
mov edx, r14d
lea rcx, [rsp + 0x50]
call fcn.140001570
lea r8, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae r8, qword [rbp + 0x20]
mov byte [rsp + 0x50], dil
mov byte [rsp + 0x51], bl
mov byte [rsp + 0x52], sil
mov byte [rsp + 0x53], r15b
movzx eax, byte [rsp + 0x27]
mov byte [rsp + 0x54], al
mov edx, 5
mov cl, 0x4c
call fcn.140002320
movzx r13d, al
mov byte [rsp + 0x55], al
mov edx, 6
call fcn.140002320
mov byte [rsp + 0x20], al
mov byte [rsp + 0x56], al
mov edx, 7
mov cl, 0x3a
call fcn.140002320
mov byte [rsp + 0x57], al
mov edx, 8
mov cl, 0x20
call fcn.140002320
mov byte [rsp + 0x58], al
mov edx, 9
mov cl, 0x25
call fcn.140002320
mov byte [rsp + 0x59], al
mov byte [rsp + 0x5a], r12b
movzx eax, byte [rsp + 0x21]
mov byte [rsp + 0x5b], al
mov edx, 0xc
mov cl, 0xa
call fcn.140002320
mov byte [rsp + 0x5c], al
xor eax, eax
mov byte [rsp + 0x5d], al
xor r12d, r12d
mov edx, r12d
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x50]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0xd
jb 0x140007e10
mov byte [rsp + 0x5d], r12b
mov rdx, r8
lea rcx, [rsp + 0x50]
call fcn.140001570
lea r9, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae r9, qword [rbp - 0x48]
mov byte [rsp + 0x50], dil
mov byte [rsp + 0x51], bl
mov byte [rsp + 0x52], sil
mov byte [rsp + 0x53], r15b
movzx eax, byte [rsp + 0x27]
mov byte [rsp + 0x54], al
mov byte [rsp + 0x55], r13b
movzx eax, byte [rsp + 0x20]
mov byte [rsp + 0x56], al
mov edx, 7
mov cl, 0x20
call fcn.140002320
mov byte [rsp + 0x57], al
mov edx, 8
mov cl, 0x50
call fcn.140002320
mov byte [rsp + 0x58], al
mov edx, 9
mov cl, 0x61
call fcn.140002320
mov byte [rsp + 0x59], al
movzx eax, byte [rsp + 0x29]
mov byte [rsp + 0x5a], al
mov edx, 0xb
mov cl, 0x68
call fcn.140002320
mov byte [rsp + 0x5b], al
mov edx, 0xc
mov cl, 0x3a
call fcn.140002320
mov byte [rsp + 0x5c], al
mov edx, 0xd
mov cl, 0x20
call fcn.140002320
mov byte [rsp + 0x5d], al
mov edx, 0xe
mov cl, 0x25
call fcn.140002320
mov byte [rsp + 0x5e], al
mov edx, 0xf
mov cl, 0x73
call fcn.140002320
mov byte [rsp + 0x5f], al
mov edx, 0x10
mov cl, 0x20
call fcn.140002320
mov byte [rsp + 0x60], al
mov edx, 0x11
mov cl, 0xa
call fcn.140002320
mov byte [rsp + 0x61], al
xor eax, eax
mov byte [rsp + 0x62], al
mov r8d, r12d
nop dword [rax]
nop word [rax + rax]
movsxd rax, r8d
lea rcx, [rsp + 0x50]
add rcx, rax
lea eax, [r8 + 0x13]
xor byte [rcx], al
inc r8d
cmp r8d, 0x12
jb 0x140007f30
mov byte [rsp + 0x62], r12b
mov rdx, r9
lea rcx, [rsp + 0x50]
call fcn.140001570
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov rdi, qword [rbp - 0x38]
lea rsi, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae rsi, qword [rbp - 0x48]
movabs rbx, 0x7fffffffffffffff
cmp rdi, rbx
ja 0x1400087d1
mov qword [rsp + 0x68], 0xf
cmp rdi, 0x10
jae 0x140007fc1
mov qword [rsp + 0x60], rdi
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x50]
mov ecx, r14d
call fcn.140006e90
jmp 0x140008655
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x140007ffd
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14001094c
mov rcx, rax
test rax, rax
je 0x1400087d7
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140008038
mov rbx, rax
cmp rax, 0x16
mov edx, 0x16
cmovb rbx, rdx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140008029
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400087c5
jmp 0x140007fdb
test rcx, rcx
je 0x140008035
call fcn.14001094c
jmp 0x140008038
mov rax, r12
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.140012660
lea rdx, [rsp + 0x50]
mov ecx, r14d
call fcn.140006e90
jmp 0x140008655
mov byte [rbp - 0x78], dil
call fcn.140002320
mov byte [rbp - 0x77], al
mov byte [rbp - 0x76], sil
mov byte [rbp - 0x75], r15b
movzx eax, byte [rsp + 0x20]
mov byte [rbp - 0x74], al
mov edx, 5
mov cl, 0x6f
call fcn.140002320
mov byte [rbp - 0x73], al
mov edx, 6
mov cl, 0x75
call fcn.140002320
mov byte [rbp - 0x72], al
mov edx, 7
mov cl, 0x6c
call fcn.140002320
mov byte [rbp - 0x71], al
mov edx, 8
mov cl, 0x64
call fcn.140002320
mov byte [rbp - 0x70], al
mov edx, 9
mov cl, 0x6e
call fcn.140002320
mov byte [rbp - 0x6f], al
mov edx, 0xa
mov cl, 0x27
call fcn.140002320
mov byte [rbp - 0x6e], al
mov edx, 0xb
mov cl, 0x74
call fcn.140002320
mov byte [rbp - 0x6d], al
mov edx, 0xc
mov cl, 0x20
call fcn.140002320
mov byte [rbp - 0x6c], al
mov edx, 0xd
mov cl, 0x66
call fcn.140002320
mov byte [rbp - 0x6b], al
mov edx, 0xe
mov cl, 0x69
call fcn.140002320
mov byte [rbp - 0x6a], al
mov edx, 0xf
mov cl, 0x6e
call fcn.140002320
mov byte [rbp - 0x69], al
mov edx, 0x10
mov cl, 0x64
call fcn.140002320
mov byte [rbp - 0x68], al
mov edx, 0x11
mov cl, 0x20
call fcn.140002320
mov byte [rbp - 0x67], al
mov edx, 0x12
mov cl, 0x61
call fcn.140002320
mov byte [rbp - 0x66], al
mov edx, 0x13
mov cl, 0x6e
call fcn.140002320
mov byte [rbp - 0x65], al
mov edx, 0x14
mov cl, 0x79
call fcn.140002320
mov byte [rbp - 0x64], al
movzx eax, byte [rsp + 0x26]
mov byte [rbp - 0x63], al
mov edx, 0x16
mov cl, 0x76
call fcn.140002320
mov byte [rbp - 0x62], al
mov edx, 0x17
mov cl, 0x61
call fcn.140002320
mov byte [rbp - 0x61], al
mov edx, 0x18
mov cl, 0x6c
call fcn.140002320
mov byte [rbp - 0x60], al
mov edx, 0x19
mov cl, 0x69
call fcn.140002320
mov byte [rbp - 0x5f], al
mov edx, 0x1a
mov cl, 0x64
call fcn.140002320
mov byte [rbp - 0x5e], al
movzx eax, byte [rsp + 0x25]
mov byte [rbp - 0x5d], al
mov edx, 0x1c
mov cl, 0x74
call fcn.140002320
mov byte [rbp - 0x5c], al
mov edx, 0x1d
mov cl, 0x61
call fcn.140002320
mov byte [rbp - 0x5b], al
mov edx, 0x1e
mov cl, 0x72
call fcn.140002320
mov byte [rbp - 0x5a], al
mov edx, 0x1f
mov cl, 0x67
call fcn.140002320
mov byte [rbp - 0x59], al
mov edx, 0x20
mov cl, 0x65
call fcn.140002320
mov byte [rbp - 0x58], al
mov edx, 0x21
mov cl, 0x74
call fcn.140002320
mov byte [rbp - 0x57], al
mov edx, 0x22
mov cl, 0x20
call fcn.140002320
mov byte [rbp - 0x56], al
mov edx, 0x23
mov cl, 0x70
call fcn.140002320
mov byte [rbp - 0x55], al
mov edx, 0x24
mov cl, 0x72
call fcn.140002320
mov byte [rbp - 0x54], al
mov edx, 0x25
mov cl, 0x6f
call fcn.140002320
mov byte [rbp - 0x53], al
mov edx, 0x26
mov cl, 0x63
call fcn.140002320
mov byte [rbp - 0x52], al
mov edx, 0x27
mov cl, 0x65
call fcn.140002320
mov byte [rbp - 0x51], al
mov edx, 0x28
mov cl, 0x73
call fcn.140002320
mov byte [rbp - 0x50], al
mov edx, 0x29
call fcn.140002320
mov byte [rbp - 0x4f], al
mov edx, 0x2a
mov cl, 0x2e
call fcn.140002320
mov byte [rbp - 0x4e], al
mov edx, 0x2b
mov cl, 0xa
call fcn.140002320
mov byte [rbp - 0x4d], al
xor eax, eax
mov byte [rbp - 0x4c], al
xor r12d, r12d
mov edx, r12d
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x78]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0x2c
jb 0x1400082d0
mov byte [rbp - 0x4c], r12b
lea rdx, [rbp - 0x78]
lea rcx, [0x14008bae0]
call fcn.14000b650
jmp 0x140008660
mov r8, qword [0x14008b308]
mov r9, qword [0x14008b2f0]
xor edx, edx
mov cl, 0x32
call fcn.140002320
mov byte [rsp + 0x78], al
xor eax, eax
mov byte [rsp + 0x79], al
movsxd rax, edx
lea rcx, [rsp + 0x78]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 1
jb 0x140008320
mov byte [rsp + 0x79], 0
lea rax, [rsp + 0x78]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140008341
cmp r8, 0x10
cmovae r12, r9
cmp r13, rbx
jne 0x140008506
mov r8, r13
lea rdx, [rsp + 0x78]
mov rcx, r12
call fcn.140013140
test eax, eax
jne 0x140008506
lea ecx, [rax + 0x74]
xor edx, edx
call fcn.140001360
mov word [rsp + 0x50], ax
lea ecx, [rdx + 0x65]
lea edx, [rcx - 0x64]
call fcn.140001360
mov word [rsp + 0x52], ax
lea ecx, [rdx + 0x72]
lea edx, [rcx - 0x71]
call fcn.140001360
mov word [rsp + 0x54], ax
lea ecx, [rdx + 0x72]
lea edx, [rcx - 0x71]
call fcn.140001360
mov word [rsp + 0x56], ax
lea ecx, [rdx + 0x2b]
lea edx, [rcx - 0x2a]
call fcn.140001360
mov word [rsp + 0x58], ax
lea ecx, [rdx + 0x60]
lea edx, [rcx - 0x5f]
call fcn.140001360
mov word [rsp + 0x5a], ax
lea ecx, [rdx + 0x67]
lea edx, [rcx - 0x66]
call fcn.140001360
mov word [rsp + 0x5c], ax
lea edx, [rcx - 0x65]
call fcn.140001360
mov word [rsp + 0x5e], ax
xor ecx, ecx
lea edx, [rcx + 8]
call fcn.140001360
mov word [rsp + 0x60], ax
lea edx, [rcx + 9]
movzx ecx, word [0x14004068a]
call fcn.140001360
mov word [rsp + 0x62], ax
mov edx, 0xa
movzx ecx, word [0x14004068c]
call fcn.140001360
mov word [rsp + 0x64], ax
mov edx, 0xb
movzx ecx, word [0x14004068e]
call fcn.140001360
mov word [rsp + 0x66], ax
mov edx, 0xc
movzx ecx, word [0x140040690]
call fcn.140001360
mov word [rsp + 0x68], ax
mov edx, 0xd
movzx ecx, word [0x140040692]
call fcn.140001360
mov word [rsp + 0x6a], ax
mov edx, 0xe
movzx ecx, word [0x140040694]
call fcn.140001360
mov word [rsp + 0x6c], ax
mov edx, 0xf
movzx ecx, word [0x140040696]
call fcn.140001360
mov word [rsp + 0x6e], ax
mov edx, 0x10
movzx ecx, word [str.invalid_string_position]
call fcn.140001360
mov word [rsp + 0x70], ax
xor eax, eax
mov word [rsp + 0x72], ax
xor r12d, r12d
mov edx, r12d
mov r8d, 0x133
nop
movsxd rax, edx
lea rcx, [rsp + 0x50]
lea rcx, [rcx + rax*2]
lea eax, [r8 + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x11
jb 0x1400084c0
mov word [rsp + 0x72], r12w
cmp qword [0x14008b328], 0x10
lea rcx, [0x14008b310]
cmovae rcx, qword [0x14008b310]
lea rdx, [rsp + 0x50]
call fcn.140004e50
jmp 0x140008655
mov byte [rsp + 0x50], dil
mov edx, 1
mov cl, 0x2d
call fcn.140002320
mov byte [rsp + 0x51], al
mov byte [rsp + 0x52], sil
mov byte [rsp + 0x53], r15b
mov edx, 4
mov cl, 0x49
call fcn.140002320
mov byte [rsp + 0x54], al
mov edx, 5
mov cl, 0x6e
call fcn.140002320
mov byte [rsp + 0x55], al
mov edx, 6
mov cl, 0x76
call fcn.140002320
mov byte [rsp + 0x56], al
movzx eax, byte [rsp + 0x24]
mov byte [rsp + 0x57], al
mov edx, 8
mov cl, 0x6c
call fcn.140002320
mov byte [rsp + 0x58], al
mov edx, 9
mov cl, 0x69
call fcn.140002320
mov byte [rsp + 0x59], al
mov edx, 0xa
mov cl, 0x64
call fcn.140002320
mov byte [rsp + 0x5a], al
movzx eax, byte [rsp + 0x21]
mov byte [rsp + 0x5b], al
mov edx, 0xc
mov cl, 0x53
call fcn.140002320
mov byte [rsp + 0x5c], al
mov edx, 0xd
mov cl, 0x65
call fcn.140002320
mov byte [rsp + 0x5d], al
mov edx, 0xe
mov cl, 0x6c
call fcn.140002320
mov byte [rsp + 0x5e], al
movzx eax, byte [rsp + 0x23]
mov byte [rsp + 0x5f], al
movzx eax, byte [rsp + 0x2a]
mov byte [rsp + 0x60], al
movzx eax, byte [rsp + 0x2b]
mov byte [rsp + 0x61], al
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x62], al
movzx eax, byte [rsp + 0x2d]
mov byte [rsp + 0x63], al
movzx eax, byte [rsp + 0x2e]
mov byte [rsp + 0x64], al
mov edx, 0x15
mov cl, 0x2e
call fcn.140002320
mov byte [rsp + 0x65], al
xor eax, eax
mov byte [rsp + 0x66], al
xor r12d, r12d
mov edx, r12d
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x50]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0x16
jb 0x140008620
mov byte [rsp + 0x66], r12b
lea rdx, [rsp + 0x50]
lea rcx, [0x14008bae0]
call fcn.14000b650
mov rcx, rax
call fcn.14000b900
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14008bae0]
call fcn.14000b900
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x1400086b3
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400086ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400087dd
call fcn.140010944
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x1400086fe
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400086f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400087bf
call fcn.140010944
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140008745
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008740
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400087bf
call fcn.140010944
movdqa xmm0, xmmword [0x140040860]
movdqa xmmword [rbp + 0x10], xmm0
mov byte [rbp], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000878d
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008788
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400087bf
call fcn.140010944
xor eax, eax
mov rcx, qword [rbp + 0x2b0]
xor rcx, rsp
call fcn.1400105f0
lea r11, [rsp + 0x3c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14001a74c
nop
call fcn.140001720
nop
call fcn.14001a74c
int3
call fcn.1400017c0
int3
call fcn.14001a74c
nop
call fcn.14001a74c
int3