Function at 0x140067810
Capabilities:
Encode data using xor
Enumerate processes
Hash data using fnv

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x448]
sub rsp, 0x510
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
xor r13d, r13d
mov r14d, r13d
mov dword [rbp + 0x450], r13d
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x1400688e6
mov dword [rbp + 0x2a0], 0x130
lea rdx, [rbp + 0x2a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x1400688dd
mov esi, 0xd38d
mov r12d, 0x2c2f
movdqa xmm7, xmmword [0x1401115d0]
movdqa xmm8, xmmword [0x1401115c0]
movdqa xmm9, xmmword [0x1401115b0]
movdqa xmm6, xmmword [0x1401115a0]
movabs r8, 0xcbf29ce484222325
movabs rdx, 0x100000001b3
movzx ecx, byte [rbp + 0x2a8]
xor rcx, r8
imul rcx, rdx
movzx eax, byte [rbp + 0x2a9]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [rbp + 0x2aa]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [rbp + 0x2ab]
xor rcx, rax
imul rdx, rcx
and rdx, qword [0x1401b5cf0]
add rdx, rdx
mov rax, qword [0x1401b5cd8]
mov rcx, qword [rax + rdx*8 + 8]
mov r8, qword [0x1401b5cc8]
cmp rcx, r8
je 0x140067945
mov rdx, qword [rax + rdx*8]
mov eax, dword [rbp + 0x2a8]
cmp eax, dword [rcx + 0x10]
je 0x140067948
cmp rcx, rdx
je 0x140067945
mov rcx, qword [rcx + 8]
cmp eax, dword [rcx + 0x10]
jne 0x140067935
jmp 0x140067948
mov rcx, r13
mov rax, r8
test rcx, rcx
cmovne rax, rcx
cmp rax, r8
jne 0x1400688c5
lea r8, [rbp + 0x2a8]
lea rdx, [rbp + 0x110]
call fcn.1400742e0
mov r8d, dword [rbp + 0x2a8]
xor edx, edx
mov ecx, 0x1000
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x1400688c5
mov dword [rbp + 0x450], r13d
lea rdx, [rbp + 0x450]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov ebx, eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x1400688c5
cmp dword [rbp + 0x450], 0
jne 0x1400688c5
mov edx, dword [rbp + 0x2a8]
lea rcx, [rbp + 0xd0]
call fcn.140067480
nop
cmp qword [rbp + 0xe0], 0
je 0x140068883
mov dword [rsp + 0x38], 0xd3b6d38d
mov dword [rsp + 0x3c], 0xd3b0d3e0
mov dword [rsp + 0x40], 0xd3b9d3bd
mov dword [rsp + 0x44], 0xd3b3d3b8
mov dword [rsp + 0x48], 0xd3bed3f7
mov dword [rsp + 0x4c], 0xd3b0d3b7
mov word [rsp + 0x50], r13w
mov byte [rsp + 0x52], 1
movd xmm1, dword [rsp + 0x38]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x38], xmm1
movd xmm1, dword [rsp + 0x3c]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm9
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x3c], xmm1
movd xmm1, dword [rsp + 0x40]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm8
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rsp + 0x44]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm7
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x44], xmm1
mov ecx, 8
nop dword [rax + rax]
movzx eax, cx
sub ax, r12w
xor word [rsp + rcx*2 + 0x38], ax
inc rcx
cmp rcx, 0xc
jb 0x140067ac0
mov byte [rsp + 0x52], 0
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x120]
call fcn.140074180
or r14d, 0x300000
mov dword [rbp - 0x54], 0xd3b6d38d
mov dword [rbp - 0x50], 0xd3b0d3e0
mov dword [rbp - 0x4c], 0xd3b9d3bd
mov dword [rbp - 0x48], 0xd3b3d3b8
mov dword [rbp - 0x44], 0xd3eed3ef
mov dword [rbp - 0x40], 0xd3b8d3f5
mov dword [rbp - 0x3c], 0xd3b2d3b1
mov word [rbp - 0x38], r13w
mov byte [rbp - 0x36], 1
movd xmm1, dword [rbp - 0x54]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x54], xmm1
movd xmm2, dword [rbp - 0x50]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x50], xmm1
movd xmm2, dword [rbp - 0x4c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x4c], xmm1
movd xmm2, dword [rbp - 0x48]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x48], xmm1
mov ecx, 8
movzx eax, cx
sub ax, r12w
xor word [rbp + rcx*2 - 0x54], ax
inc rcx
cmp rcx, 0xe
jb 0x140067bc0
mov byte [rbp - 0x36], 0
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x54]
lea rcx, [rbp + 0x140]
call fcn.140074180
nop
mov dword [rbp - 0x14], 0xd3b1d38d
mov dword [rbp - 0x10], 0xd3b0d3b6
mov dword [rbp - 0xc], 0xd3b2d3e6
mov dword [rbp - 8], 0xd3b0d3ee
mov dword [rbp - 4], 0xd3b5d3b6
mov dword [rbp], 0xd3f2d3b0
mov dword [rbp + 4], 0xd3b2d3b9
mov dword [rbp + 8], 0xd3b3
mov byte [rbp + 0xc], 1
movd xmm1, dword [rbp - 0x14]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x14], xmm1
movd xmm2, dword [rbp - 0x10]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x10], xmm1
movd xmm2, dword [rbp - 0xc]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0xc], xmm1
movd xmm2, dword [rbp - 8]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 8], xmm1
mov ecx, 8
nop dword [rax]
movzx eax, cx
sub ax, r12w
xor word [rbp + rcx*2 - 0x14], ax
inc rcx
cmp rcx, 0xf
jb 0x140067cc0
mov byte [rbp + 0xc], 0
lea r8, [rbp + 0xa]
lea rdx, [rbp - 0x14]
lea rcx, [rbp + 0x160]
call fcn.140074180
nop
mov dword [rbp - 0x34], 0xd3bed38d
mov dword [rbp - 0x30], 0xd3b6d3ba
mov dword [rbp - 0x2c], 0xd3a6d3bc
mov dword [rbp - 0x28], 0xd3f5d3a3
mov dword [rbp - 0x24], 0xd3e8d3ea
mov dword [rbp - 0x20], 0xd3b8d3f5
mov dword [rbp - 0x1c], 0xd3b2d3b1
mov word [rbp - 0x18], r13w
mov byte [rbp - 0x16], 1
movd xmm1, dword [rbp - 0x34]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x34], xmm1
movd xmm2, dword [rbp - 0x30]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x30], xmm1
movd xmm2, dword [rbp - 0x2c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x2c], xmm1
movd xmm2, dword [rbp - 0x28]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x28], xmm1
mov ecx, 8
nop word [rax + rax]
movzx eax, cx
sub ax, r12w
xor word [rbp + rcx*2 - 0x34], ax
inc rcx
cmp rcx, 0xe
jb 0x140067dc0
mov byte [rbp - 0x16], 0
lea r8, [rbp - 0x18]
lea rdx, [rbp - 0x34]
lea rcx, [rbp + 0x180]
call fcn.140074180
nop
mov dword [rbp + 0x34], 0xd3bed38d
mov dword [rbp + 0x38], 0xd3b6d3ba
mov dword [rbp + 0x3c], 0xd3bfd3b8
mov dword [rbp + 0x40], 0xd3b5d3bc
mov dword [rbp + 0x44], 0xd3bed3b6
mov dword [rbp + 0x48], 0xd3eed3e8
mov dword [rbp + 0x4c], 0xd3bad3f3
mov dword [rbp + 0x50], 0xd38cd3b3
mov word [rbp + 0x54], r13w
mov byte [rbp + 0x56], 1
mov edx, 0xd3d8
lea r8, [rbp + 0x38]
nop dword [rax + rax]
lea rax, [rdx - 0xd3d8]
movq xmm2, rax
punpcklqdq xmm2, xmm2
paddq xmm2, xmm6
movd xmm1, dword [r8 - 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 - 4], xmm1
lea rax, [rdx - 4]
lea rcx, [rdx - 5]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8], xmm1
lea rax, [rdx - 2]
lea rcx, [rdx - 3]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 4], xmm1
lea rax, [rdx - 1]
movq xmm0, rdx
movq xmm2, rax
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 8], xmm1
add rdx, 8
lea r8, [r8 + 0x10]
lea rax, [rdx - 0xd3d8]
cmp rax, 0x10
jb 0x140067e40
mov byte [rbp + 0x56], 0
lea r8, [rbp + 0x54]
lea rdx, [rbp + 0x34]
lea rcx, [rbp + 0x1a0]
call fcn.140074180
nop
mov dword [rbp + 0x8c], 0x61
mov dword [rbp + 0x7c], 0x6d005c
mov dword [rbp + 0x80], 0x690061
mov dword [rbp + 0x84], 0x2e006e
mov dword [rbp + 0x88], 0x75006c
mov byte [rbp + 0x90], 0
lea r8, [rbp + 0x8e]
lea rdx, [rbp + 0x7c]
lea rcx, [rbp + 0x1c0]
call fcn.140074180
nop
mov dword [rsp + 0x20], 0xd3b1d38d
mov dword [rsp + 0x24], 0xd3b5d3bf
mov dword [rsp + 0x28], 0xd3a5d3a6
mov dword [rsp + 0x2c], 0xd3b4d3f9
mov dword [rsp + 0x30], 0xd3bbd3ac
mov word [rsp + 0x34], r13w
mov byte [rsp + 0x36], 1
movd xmm1, dword [rsp + 0x20]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x20], xmm1
movd xmm2, dword [rsp + 0x24]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x24], xmm1
movd xmm2, dword [rsp + 0x28]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x28], xmm1
movd xmm2, dword [rsp + 0x2c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x2c], xmm1
mov ecx, 8
nop word [rax + rax]
movzx eax, cx
sub ax, r12w
xor word [rsp + rcx*2 + 0x20], ax
inc rcx
cmp rcx, 0xa
jb 0x140068070
mov byte [rsp + 0x36], 0
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x1e0]
call fcn.140074180
nop
mov dword [rbp + 0xe], 0xd3b1d38d
mov dword [rbp + 0x12], 0xd3b5d3bf
mov dword [rbp + 0x16], 0xd3a5d3a6
mov dword [rbp + 0x1a], 0xd3aad3a0
mov dword [rbp + 0x1e], 0xd3aad3b8
mov dword [rbp + 0x22], 0xd3b9d3ab
mov dword [rbp + 0x26], 0xd3f0d3af
mov dword [rbp + 0x2a], 0xd395d3b3
mov dword [rbp + 0x2e], 0xd380
mov byte [rbp + 0x32], 1
mov rdx, r13
mov ebx, 0xd3e8
mov r8d, 0xd3d8
movq xmm2, rdx
punpcklqdq xmm2, xmm2
paddq xmm2, xmm6
movd xmm1, dword [rbp + rdx*2 + 0xe]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0xe], xmm1
lea rax, [r8 - 4]
lea rcx, [r8 - 5]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [rbp + rdx*2 + 0x12]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0x12], xmm1
lea rax, [r8 - 2]
lea rcx, [r8 - 3]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [rbp + rdx*2 + 0x16]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0x16], xmm1
lea rax, [r8 - 1]
movq xmm0, r8
movq xmm2, rax
punpcklqdq xmm2, xmm0
movd xmm1, dword [rbp + rdx*2 + 0x1a]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0x1a], xmm1
add rdx, 8
add r8, 8
cmp r8, rbx
jb 0x1400680f2
cmp rdx, 0x11
jae 0x140068205
nop dword [rax]
nop dword [rax + rax]
movzx eax, dx
sub ax, r12w
xor word [rbp + rdx*2 + 0xe], ax
inc rdx
cmp rdx, 0x11
jb 0x1400681f0
mov byte [rbp + 0x32], 0
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0xe]
lea rcx, [rbp + 0x200]
call fcn.140074180
nop
mov dword [rsp + 0x54], 0xd3b6d38d
mov dword [rsp + 0x58], 0xd3b2d3b6
mov dword [rsp + 0x5c], 0xd3b8d3bc
mov dword [rsp + 0x60], 0xd3abd3b2
mov dword [rsp + 0x64], 0xd3b6d3f7
mov dword [rsp + 0x68], 0xd3bdd3ae
mov word [rsp + 0x6c], r13w
mov byte [rsp + 0x6e], 1
movd xmm1, dword [rsp + 0x54]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x54], xmm1
movd xmm2, dword [rsp + 0x58]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x58], xmm1
movd xmm2, dword [rsp + 0x5c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x5c], xmm1
movd xmm2, dword [rsp + 0x60]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x60], xmm1
mov ecx, 8
movzx eax, cx
sub ax, r12w
xor word [rsp + rcx*2 + 0x54], ax
inc rcx
cmp rcx, 0xc
jb 0x1400682f0
mov byte [rsp + 0x6e], 0
lea r8, [rsp + 0x6c]
lea rdx, [rsp + 0x54]
lea rcx, [rbp + 0x220]
call fcn.140074180
nop
mov dword [rbp + 0x58], 0xd391d38d
mov dword [rbp + 0x5c], 0xd3b1d3bb
mov dword [rbp + 0x60], 0xd3a2d3b4
mov dword [rbp + 0x64], 0xd3b6d392
mov dword [rbp + 0x68], 0xd3b3d3be
mov dword [rbp + 0x6c], 0xd3b9d3b5
mov dword [rbp + 0x70], 0xd3bdd3f3
mov dword [rbp + 0x74], 0xd38dd3b7
mov word [rbp + 0x78], r13w
mov byte [rbp + 0x7a], 1
mov edx, 0xd3d8
lea r8, [rbp + 0x5c]
nop dword [rax + rax]
lea rax, [rdx - 0xd3d8]
movq xmm2, rax
punpcklqdq xmm2, xmm2
paddq xmm2, xmm6
movd xmm1, dword [r8 - 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 - 4], xmm1
lea rax, [rdx - 4]
lea rcx, [rdx - 5]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8], xmm1
lea rax, [rdx - 2]
lea rcx, [rdx - 3]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 4], xmm1
lea rax, [rdx - 1]
movq xmm0, rdx
movq xmm2, rax
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 8], xmm1
add rdx, 8
lea r8, [r8 + 0x10]
lea rax, [rdx - 0xd3d8]
cmp rax, 0x10
jb 0x140068370
mov byte [rbp + 0x7a], 0
lea r8, [rbp + 0x78]
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x240]
call fcn.140074180
nop
mov dword [rsp + 0x70], 0xd3bed38d
mov dword [rsp + 0x74], 0xd3b5d3a6
mov dword [rsp + 0x78], 0xd3e5d3e0
mov dword [rsp + 0x7c], 0xd3eed3fa
mov dword [rbp - 0x80], 0xd3f4d3ed
mov dword [rbp - 0x7c], 0xd3b0d3bf
mov dword [rbp - 0x78], 0xd3b1
mov byte [rbp - 0x74], 1
movd xmm1, dword [rsp + 0x70]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x70], xmm1
movd xmm2, dword [rsp + 0x74]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x74], xmm1
movd xmm2, dword [rsp + 0x78]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x78], xmm1
movd xmm2, dword [rsp + 0x7c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x7c], xmm1
mov ecx, 8
nop dword [rax]
nop word [rax + rax]
movzx eax, cx
sub ax, r12w
xor word [rsp + rcx*2 + 0x70], ax
inc rcx
cmp rcx, 0xd
jb 0x140068560
mov byte [rbp - 0x74], 0
lea r8, [rbp - 0x76]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x260]
call fcn.140074180
nop
mov dword [rbp - 0x72], 0xd3bed38d
mov dword [rbp - 0x6e], 0xd3b5d3a6
mov dword [rbp - 0x6a], 0xd3e5d3e0
mov dword [rbp - 0x66], 0xd3ebd3fa
mov dword [rbp - 0x62], 0xd3f4d3eb
mov dword [rbp - 0x5e], 0xd3b0d3bf
mov dword [rbp - 0x5a], 0xd3b1
mov byte [rbp - 0x56], 1
movd xmm1, dword [rbp - 0x72]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x72], xmm1
movd xmm2, dword [rbp - 0x6e]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x6e], xmm1
movd xmm2, dword [rbp - 0x6a]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x6a], xmm1
movd xmm2, dword [rbp - 0x66]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x66], xmm1
mov ecx, 8
nop dword [rax]
nop word [rax + rax]
movzx eax, cx
sub ax, r12w
xor word [rbp + rcx*2 - 0x72], ax
inc rcx
cmp rcx, 0xd
jb 0x140068660
mov byte [rbp - 0x56], 0
lea r8, [rbp - 0x58]
lea rdx, [rbp - 0x72]
lea rcx, [rbp + 0x280]
call fcn.140074180
or r14d, 0x3cffffc
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r13
mov ecx, 0x180
call fcn.1400e70bc
mov rbx, rax
mov qword [rbp + 0x98], rax
mov qword [rbp + 0xa0], rax
lea rcx, [rax + 0x180]
mov qword [rbp + 0xa8], rcx
lea rax, [rbp + 0x98]
mov qword [rbp + 0x458], rax
lea rdi, [rbp + 0x120]
mov qword [rbp + 0xb0], rbx
mov qword [rbp + 0xb8], rbx
lea rax, [rbp + 0x98]
mov qword [rbp + 0xc0], rax
mov rdx, rdi
mov rcx, rbx
call fcn.14006c420
add rbx, 0x20
mov qword [rbp + 0xb8], rbx
add rdi, 0x20
lea rax, [rbp + 0x2a0]
cmp rdi, rax
jne 0x140068700
mov rdx, rbx
mov rcx, rbx
call fcn.140075350
mov qword [rbp + 0xa0], rbx
lea r9, [fcn.1400487d0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, ntohl
lea rcx, [rbp + 0x120]
call fcn.1400e70f8
mov rbx, qword [rbp + 0x98]
mov rsi, qword [rbp + 0xa0]
cmp rbx, rsi
je 0x140068872
nop dword [rax]
mov r8, rbx
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0xf0]
call fcn.140074010
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x140068795
mov rax, qword [rax]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xc8], r13
mov rdx, rax
lea rcx, [rbp + 0xb0]
call fcn.140074c30
or r14d, 3
lea rcx, [rbp + 0xb0]
call fcn.140048fb0
movzx edi, al
mov rdx, qword [rbp + 0xc8]
cmp rdx, 7
jbe 0x140068816
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068810
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068915
call fcn.1400e7410
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 7
jbe 0x14006885c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068857
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006891c
call fcn.1400e7410
test dil, dil
jne 0x14006892a
add rbx, 0x20
cmp rbx, rsi
jne 0x140068770
lea rcx, [rbp + 0x98]
call fcn.14006dae0
mov esi, 0xd38d
mov rdx, qword [rbp + 0xe8]
cmp rdx, 7
jbe 0x1400688c5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400688c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068923
call fcn.1400e7410
lea rdx, [rbp + 0x2a0]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1400678b8
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r11, [rsp + 0x510]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140067450
int3