Function at 0x140067900
Capabilities:
Encode data using xor
Enumerate processes
Hash data using fnv

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x498]
sub rsp, 0x560
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
xor r13d, r13d
mov r14d, r13d
mov dword [rbp + 0x4a0], r13d
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x14006896e
mov dword [rbp + 0x2f0], 0x130
lea rdx, [rbp + 0x2f0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x140068965
mov esi, 0xd747
mov r12d, 0x28e5
movdqa xmm7, xmmword [0x140111580]
movdqa xmm8, xmmword [0x140111570]
movdqa xmm9, xmmword [0x140111560]
movdqa xmm6, xmmword [0x140111550]
movabs r8, 0xcbf29ce484222325
movabs rdx, 0x100000001b3
movzx ecx, byte [rbp + 0x2f8]
xor rcx, r8
imul rcx, rdx
movzx eax, byte [rbp + 0x2f9]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [rbp + 0x2fa]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [rbp + 0x2fb]
xor rcx, rax
imul rdx, rcx
and rdx, qword [0x1401b5d00]
add rdx, rdx
mov rax, qword [0x1401b5ce8]
mov rcx, qword [rax + rdx*8 + 8]
mov r8, qword [0x1401b5cd8]
cmp rcx, r8
je 0x140067a35
mov rdx, qword [rax + rdx*8]
mov eax, dword [rbp + 0x2f8]
cmp eax, dword [rcx + 0x10]
je 0x140067a38
cmp rcx, rdx
je 0x140067a35
mov rcx, qword [rcx + 8]
cmp eax, dword [rcx + 0x10]
jne 0x140067a25
jmp 0x140067a38
mov rcx, r13
mov rax, r8
test rcx, rcx
cmovne rax, rcx
cmp rax, r8
jne 0x14006894d
lea r8, [rbp + 0x2f8]
lea rdx, [rbp + 0x140]
call fcn.140075460
mov r8d, dword [rbp + 0x2f8]
xor edx, edx
mov ecx, 0x1000
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x14006894d
mov dword [rbp + 0x4a0], r13d
lea rdx, [rbp + 0x4a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov ebx, eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x14006894d
cmp dword [rbp + 0x4a0], 0
jne 0x14006894d
mov edx, dword [rbp + 0x2f8]
lea rcx, [rbp + 0x110]
call fcn.140067630
nop
cmp qword [rbp + 0x120], 0
je 0x140068941
mov dword [rsp + 0x38], 0xd778d747
mov dword [rsp + 0x3c], 0xd77ad72e
mov dword [rsp + 0x40], 0xd74fd777
mov dword [rsp + 0x44], 0xd749d74e
mov dword [rsp + 0x48], 0xd740d70d
mov dword [rsp + 0x4c], 0xd74ad749
mov word [rsp + 0x50], r13w
mov byte [rsp + 0x52], 1
movd xmm1, dword [rsp + 0x38]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x38], xmm1
movd xmm1, dword [rsp + 0x3c]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm9
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x3c], xmm1
movd xmm1, dword [rsp + 0x40]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm8
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rsp + 0x44]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm7
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x44], xmm1
mov ecx, 8
nop dword [rax + rax]
movzx eax, cx
sub ax, r12w
xor word [rsp + rcx*2 + 0x38], ax
inc rcx
cmp rcx, 0xc
jb 0x140067bb0
mov byte [rsp + 0x52], 0
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x170]
call fcn.140075300
or r14d, 0x300000
mov dword [rbp - 0x54], 0xd778d747
mov dword [rbp - 0x50], 0xd77ad72e
mov dword [rbp - 0x4c], 0xd74fd777
mov dword [rbp - 0x48], 0xd749d74e
mov dword [rbp - 0x44], 0xd710d715
mov dword [rbp - 0x40], 0xd742d70b
mov dword [rbp - 0x3c], 0xd744d74b
mov word [rbp - 0x38], r13w
mov byte [rbp - 0x36], 1
movd xmm1, dword [rbp - 0x54]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x54], xmm1
movd xmm2, dword [rbp - 0x50]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x50], xmm1
movd xmm2, dword [rbp - 0x4c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x4c], xmm1
movd xmm2, dword [rbp - 0x48]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x48], xmm1
mov ecx, 8
movzx eax, cx
sub ax, r12w
xor word [rbp + rcx*2 - 0x54], ax
inc rcx
cmp rcx, 0xe
jb 0x140067cb0
mov byte [rbp - 0x36], 0
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x54]
lea rcx, [rbp + 0x190]
call fcn.140075300
nop
mov dword [rbp - 0x14], 0xd77fd747
mov dword [rbp - 0x10], 0xd77ad778
mov dword [rbp - 0xc], 0xd744d72c
mov dword [rbp - 8], 0xd74ad718
mov dword [rbp - 4], 0xd74bd74c
mov dword [rbp], 0xd708d74e
mov dword [rbp + 4], 0xd744d743
mov dword [rbp + 8], 0xd745
mov byte [rbp + 0xc], 1
movd xmm1, dword [rbp - 0x14]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x14], xmm1
movd xmm2, dword [rbp - 0x10]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x10], xmm1
movd xmm2, dword [rbp - 0xc]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0xc], xmm1
movd xmm2, dword [rbp - 8]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 8], xmm1
mov ecx, 8
nop dword [rax]
movzx eax, cx
sub ax, r12w
xor word [rbp + rcx*2 - 0x14], ax
inc rcx
cmp rcx, 0xf
jb 0x140067db0
mov byte [rbp + 0xc], 0
lea r8, [rbp + 0xa]
lea rdx, [rbp - 0x14]
lea rcx, [rbp + 0x1b0]
call fcn.140075300
nop
mov dword [rbp - 0x34], 0xd770d747
mov dword [rbp - 0x30], 0xd77cd774
mov dword [rbp - 0x2c], 0xd750d776
mov dword [rbp - 0x28], 0xd70fd755
mov dword [rbp - 0x24], 0xd716d710
mov dword [rbp - 0x20], 0xd742d70b
mov dword [rbp - 0x1c], 0xd744d74b
mov word [rbp - 0x18], r13w
mov byte [rbp - 0x16], 1
movd xmm1, dword [rbp - 0x34]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x34], xmm1
movd xmm2, dword [rbp - 0x30]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x30], xmm1
movd xmm2, dword [rbp - 0x2c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x2c], xmm1
movd xmm2, dword [rbp - 0x28]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x28], xmm1
mov ecx, 8
nop word [rax + rax]
movzx eax, cx
sub ax, r12w
xor word [rbp + rcx*2 - 0x34], ax
inc rcx
cmp rcx, 0xe
jb 0x140067eb0
mov byte [rbp - 0x16], 0
lea r8, [rbp - 0x18]
lea rdx, [rbp - 0x34]
lea rcx, [rbp + 0x1d0]
call fcn.140075300
nop
mov dword [rbp + 0x34], 0xd770d747
mov dword [rbp + 0x38], 0xd77cd774
mov dword [rbp + 0x3c], 0xd749d772
mov dword [rbp + 0x40], 0xd74fd74a
mov dword [rbp + 0x44], 0xd740d74c
mov dword [rbp + 0x48], 0xd714d716
mov dword [rbp + 0x4c], 0xd74cd709
mov dword [rbp + 0x50], 0xd746d745
mov word [rbp + 0x54], r13w
mov byte [rbp + 0x56], 1
mov edx, 0xd722
lea r8, [rbp + 0x38]
nop dword [rax + rax]
lea rax, [rdx - 0xd722]
movq xmm2, rax
punpcklqdq xmm2, xmm2
paddq xmm2, xmm6
movd xmm1, dword [r8 - 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 - 4], xmm1
lea rax, [rdx - 4]
lea rcx, [rdx - 5]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8], xmm1
lea rax, [rdx - 2]
lea rcx, [rdx - 3]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 4], xmm1
lea rax, [rdx - 1]
movq xmm0, rdx
movq xmm2, rax
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 8], xmm1
add rdx, 8
lea r8, [r8 + 0x10]
lea rax, [rdx - 0xd722]
cmp rax, 0x10
jb 0x140067f30
mov byte [rbp + 0x56], 0
lea r8, [rbp + 0x54]
lea rdx, [rbp + 0x34]
lea rcx, [rbp + 0x1f0]
call fcn.140075300
nop
mov dword [rbp + 0x8c], 0x61
mov dword [rbp + 0x7c], 0x6d005c
mov dword [rbp + 0x80], 0x690061
mov dword [rbp + 0x84], 0x2e006e
mov dword [rbp + 0x88], 0x75006c
mov byte [rbp + 0x90], 0
lea r8, [rbp + 0x8e]
lea rdx, [rbp + 0x7c]
lea rcx, [rbp + 0x210]
call fcn.140075300
nop
mov dword [rsp + 0x20], 0xd77fd747
mov dword [rsp + 0x24], 0xd77fd771
mov dword [rsp + 0x28], 0xd753d76c
mov dword [rsp + 0x2c], 0xd74ed70f
mov dword [rsp + 0x30], 0xd745d756
mov word [rsp + 0x34], r13w
mov byte [rsp + 0x36], 1
movd xmm1, dword [rsp + 0x20]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x20], xmm1
movd xmm2, dword [rsp + 0x24]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x24], xmm1
movd xmm2, dword [rsp + 0x28]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x28], xmm1
movd xmm2, dword [rsp + 0x2c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x2c], xmm1
mov ecx, 8
nop word [rax + rax]
movzx eax, cx
sub ax, r12w
xor word [rsp + rcx*2 + 0x20], ax
inc rcx
cmp rcx, 0xa
jb 0x140068160
mov byte [rsp + 0x36], 0
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x230]
call fcn.140075300
nop
mov dword [rbp + 0xe], 0xd77fd747
mov dword [rbp + 0x12], 0xd77fd771
mov dword [rbp + 0x16], 0xd753d76c
mov dword [rbp + 0x1a], 0xd750d756
mov dword [rbp + 0x1e], 0xd754d742
mov dword [rbp + 0x22], 0xd743d755
mov dword [rbp + 0x26], 0xd706d755
mov dword [rbp + 0x2a], 0xd75fd745
mov dword [rbp + 0x2e], 0xd74a
mov byte [rbp + 0x32], 1
mov rdx, r13
mov r8d, 0xd722
nop dword [rax]
movq xmm2, rdx
punpcklqdq xmm2, xmm2
paddq xmm2, xmm6
movd xmm1, dword [rbp + rdx*2 + 0xe]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0xe], xmm1
lea rax, [r8 - 4]
lea rcx, [r8 - 5]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [rbp + rdx*2 + 0x12]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0x12], xmm1
lea rax, [r8 - 2]
lea rcx, [r8 - 3]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [rbp + rdx*2 + 0x16]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0x16], xmm1
lea rax, [r8 - 1]
movq xmm0, r8
movq xmm2, rax
punpcklqdq xmm2, xmm0
movd xmm1, dword [rbp + rdx*2 + 0x1a]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0x1a], xmm1
add rdx, 8
add r8, 8
cmp r8, 0xd732
jb 0x1400681e0
cmp rdx, 0x11
jae 0x1400682f5
nop word [rax + rax]
movzx eax, dx
sub ax, r12w
xor word [rbp + rdx*2 + 0xe], ax
inc rdx
cmp rdx, 0x11
jb 0x1400682e0
mov byte [rbp + 0x32], 0
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0xe]
lea rcx, [rbp + 0x250]
call fcn.140075300
nop
mov dword [rsp + 0x54], 0xd778d747
mov dword [rsp + 0x58], 0xd778d778
mov dword [rsp + 0x5c], 0xd74ed776
mov dword [rsp + 0x60], 0xd751d744
mov dword [rsp + 0x64], 0xd748d70d
mov dword [rsp + 0x68], 0xd747d750
mov word [rsp + 0x6c], r13w
mov byte [rsp + 0x6e], 1
movd xmm1, dword [rsp + 0x54]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x54], xmm1
movd xmm2, dword [rsp + 0x58]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x58], xmm1
movd xmm2, dword [rsp + 0x5c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x5c], xmm1
movd xmm2, dword [rsp + 0x60]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x60], xmm1
mov ecx, 8
movzx eax, cx
sub ax, r12w
xor word [rsp + rcx*2 + 0x54], ax
inc rcx
cmp rcx, 0xc
jb 0x1400683e0
mov byte [rsp + 0x6e], 0
lea r8, [rsp + 0x6c]
lea rdx, [rsp + 0x54]
lea rcx, [rbp + 0x270]
call fcn.140075300
nop
mov dword [rbp + 0x58], 0xd75fd747
mov dword [rbp + 0x5c], 0xd77bd775
mov dword [rbp + 0x60], 0xd754d77e
mov dword [rbp + 0x64], 0xd74cd764
mov dword [rbp + 0x68], 0xd74dd744
mov dword [rbp + 0x6c], 0xd743d74b
mov dword [rbp + 0x70], 0xd74bd709
mov dword [rbp + 0x74], 0xd747d741
mov word [rbp + 0x78], r13w
mov byte [rbp + 0x7a], 1
mov edx, 0xd722
lea r8, [rbp + 0x5c]
nop dword [rax + rax]
lea rax, [rdx - 0xd722]
movq xmm2, rax
punpcklqdq xmm2, xmm2
paddq xmm2, xmm6
movd xmm1, dword [r8 - 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 - 4], xmm1
lea rax, [rdx - 4]
lea rcx, [rdx - 5]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8], xmm1
lea rax, [rdx - 2]
lea rcx, [rdx - 3]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 4], xmm1
lea rax, [rdx - 1]
movq xmm0, rdx
movq xmm2, rax
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 8], xmm1
add rdx, 8
lea r8, [r8 + 0x10]
lea rax, [rdx - 0xd722]
cmp rax, 0x10
jb 0x140068460
mov byte [rbp + 0x7a], 0
lea r8, [rbp + 0x78]
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x290]
call fcn.140075300
nop
mov dword [rsp + 0x70], 0xd770d747
mov dword [rsp + 0x74], 0xd77fd768
mov dword [rsp + 0x78], 0xd713d72a
mov dword [rsp + 0x7c], 0xd714d70c
mov dword [rbp - 0x80], 0xd70ad717
mov dword [rbp - 0x7c], 0xd74ad741
mov dword [rbp - 0x78], 0xd74b
mov byte [rbp - 0x74], 1
movd xmm1, dword [rsp + 0x70]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x70], xmm1
movd xmm2, dword [rsp + 0x74]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x74], xmm1
movd xmm2, dword [rsp + 0x78]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x78], xmm1
movd xmm2, dword [rsp + 0x7c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x7c], xmm1
mov ecx, 8
nop dword [rax]
nop word [rax + rax]
movzx eax, cx
sub ax, r12w
xor word [rsp + rcx*2 + 0x70], ax
inc rcx
cmp rcx, 0xd
jb 0x140068650
mov byte [rbp - 0x74], 0
lea r8, [rbp - 0x76]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x2b0]
call fcn.140075300
nop
mov dword [rbp - 0x72], 0xd770d747
mov dword [rbp - 0x6e], 0xd77fd768
mov dword [rbp - 0x6a], 0xd713d72a
mov dword [rbp - 0x66], 0xd711d70c
mov dword [rbp - 0x62], 0xd70ad711
mov dword [rbp - 0x5e], 0xd74ad741
mov dword [rbp - 0x5a], 0xd74b
mov byte [rbp - 0x56], 1
movd xmm1, dword [rbp - 0x72]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x72], xmm1
movd xmm2, dword [rbp - 0x6e]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x6e], xmm1
movd xmm2, dword [rbp - 0x6a]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x6a], xmm1
movd xmm2, dword [rbp - 0x66]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x66], xmm1
mov ecx, 8
nop dword [rax]
nop word [rax + rax]
movzx eax, cx
sub ax, r12w
xor word [rbp + rcx*2 - 0x72], ax
inc rcx
cmp rcx, 0xd
jb 0x140068750
mov byte [rbp - 0x56], 0
lea r8, [rbp - 0x58]
lea rdx, [rbp - 0x72]
lea rcx, [rbp + 0x2d0]
call fcn.140075300
or r14d, 0x3cffffc
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r13
mov ecx, 0x180
call fcn.1400e803c
mov rbx, rax
mov qword [rbp + 0x98], rax
mov qword [rbp + 0xa0], rax
lea rcx, [rax + 0x180]
mov qword [rbp + 0xa8], rcx
lea rax, [rbp + 0x98]
mov qword [rbp + 0x4a8], rax
lea rdi, [rbp + 0x170]
mov qword [rbp + 0xb0], rbx
mov qword [rbp + 0xb8], rbx
lea rax, [rbp + 0x98]
mov qword [rbp + 0xc0], rax
mov rdx, rdi
mov rcx, rbx
call fcn.14006c580
add rbx, 0x20
mov qword [rbp + 0xb8], rbx
add rdi, 0x20
lea rax, [rbp + 0x2f0]
cmp rdi, rax
jne 0x1400687f0
mov qword [rbp + 0xa0], rbx
lea r9, [fcn.140047a70]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, ntohl
lea rcx, [rbp + 0x170]
call fcn.1400e8078
mov rbx, qword [rbp + 0x98]
mov rsi, qword [rbp + 0xa0]
cmp rbx, rsi
je 0x140068930
mov r8, rbx
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x150]
call fcn.140075190
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x140068877
mov rax, qword [rax]
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xe8], r13
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.140075d30
or r14d, 3
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x130]
call fcn.140048090
movsd xmm0, qword [rax]
movsd qword [rbp + 0x100], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0xf0], ecx
lea rax, [0x1401b3c10]
mov qword [rbp + 0xf8], rax
movaps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0xb0], xmm0
mov eax, dword [rbp + 0x100]
test eax, eax
je 0x1400688fa
cmp eax, 1
setne dil
jmp 0x140068905
xor dil, dil
test ecx, ecx
jne 0x1400689a3
lea rcx, [rbp + 0xd0]
call fcn.140073050
nop
lea rcx, [rbp + 0x150]
call fcn.140073050
test dil, dil
jne 0x14006899d
add rbx, 0x20
cmp rbx, rsi
jne 0x140068852
lea rcx, [rbp + 0x98]
call fcn.14006dbd0
mov esi, 0xd747
lea rcx, [rbp + 0x110]
call fcn.140073050
lea rdx, [rbp + 0x2f0]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1400679a8
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r11, [rsp + 0x560]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140067600
nop
lea r8, [rbp + 0xd0]
lea rdx, [rbp + 0xb0]
call fcn.140047f70
int3