Function at 0x140025570
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2d0]
sub rsp, 0x3d0
movaps xmmword [rsp + 0x3c0], xmm6
mov rax, qword [0x14006e100]
xor rax, rsp
mov qword [rbp + 0x2b0], rax
mov r13, r8
mov r14, rdx
mov r12, rcx
mov qword [rbp - 0x68], rcx
mov qword [rbp - 0x60], r8
xor edi, edi
mov dword [rbp - 0x58], edi
lea rsi, [0x140070fa0]
cmp rsi, rcx
je 0x14002561e
mov rdi, qword [rcx + 0x10]
mov r9, rcx
cmp qword [rcx + 0x18], 0xf
jbe 0x1400255db
mov r9, qword [rcx]
mov rax, qword [0x140070fb8]
cmp rdi, rax
ja 0x140025611
mov rbx, rsi
cmp rax, 0xf
cmova rbx, qword [0x140070fa0]
mov qword [0x140070fb0], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call fcn.140050900
mov byte [rdi + rbx], 0
jmp 0x14002561c
mov rdx, rdi
mov rcx, rsi
call fcn.140026ce0
xor edi, edi
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
movdqa xmm6, xmmword [0x140067280]
movdqu xmmword [rbp - 0x10], xmm6
mov byte [rbp - 0x20], 0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x80]
call fcn.140050fa0
lea rcx, [0x140000000]
lea rax, [rcx + 0x5e760]
mov qword [rbp + 0x80], rax
lea rax, [rcx + 0x5e6b0]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x120], rdi
mov qword [rbp + 0x128], 0
mov dword [rbp + 0x130], edi
mov qword [rbp + 0x138], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x140], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x150], xmm1
movdqu xmmword [rbp + 0x160], xmm0
mov byte [rbp + 0x170], 0
mov r15d, 1
mov dword [rbp - 0x58], r15d
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x118], rax
mov dword [rbp + 0x114], 0x80
mov qword [rbp + 0x88], rdi
xor r8d, r8d
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x118]
call fcn.1400227a0
nop
mov rax, qword [rbp + 0x90]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x90], rax
mov rax, qword [rbp + 0x90]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x8c], edx
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_iostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x80], rax
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x20]
mov dword [rbp + rcx + 0x7c], edx
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x80], rax
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x7c], edx
lea rcx, [rbp + 0x98]
call fcn.1400226c0
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x98], rax
mov qword [rbp + 0x100], rdi
mov dword [rbp + 0x108], edi
lea rcx, [rbp - 0x28]
call fcn.140039b1c
mov ecx, dword [rbp - 0x28]
call fcn.140037900
call fcn.1400378d4
mov ebx, eax
mov eax, 0x78787879
imul ebx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x11
sub ebx, ecx
lea edx, [rbx + 0xf]
lea rcx, [rsp + 0x50]
call fcn.140024260
lea rcx, [rbp - 0x20]
cmp rcx, rax
je 0x140025819
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm6, xmmword [rax + 0x10]
movdqu xmmword [rbp - 0x10], xmm6
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140025856
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025851
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400260b6
call fcn.14002eb90
lea edx, [rbx + 0x19]
lea rcx, [rsp + 0x50]
call fcn.140024260
mov rbx, rax
lea rax, [rbp - 0x50]
cmp rax, rbx
je 0x1400258d8
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x1400258aa
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400258a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400260bc
call fcn.14002eb90
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140025915
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025910
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400260bc
call fcn.14002eb90
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova rdx, qword [rbp - 0x50]
mov r8, qword [rbp - 0x40]
lea rcx, [rbp + 0x90]
call fcn.140023bb0
lea rdx, str..exe
lea rcx, [rbp + 0x90]
call fcn.140022bb0
mov ebx, edi
mov qword [rbp - 0x70], rdi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp - 0x70]
mov edx, 8
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140025996
mov dword [rbp - 0x58], 4
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp - 0x30]
lea edx, [r9 + 0x10]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
cmovne ebx, dword [rbp - 0x30]
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x1400259a5
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
jne 0x140025be0
lea rcx, [rsp + 0x70]
call fcn.140026ad0
nop
lea r8d, [rbx + 0x16]
lea rdx, str.__Please_run_as_admin_
mov rcx, rax
call fcn.140022080
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x60]
lea rcx, [0x14006f5e0]
call fcn.140023bb0
mov rcx, rax
call fcn.140022e60
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140025a63
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025a5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400260c2
call fcn.14002eb90
movdqa xmm0, xmmword [0x140067280]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140025ab3
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025aad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400260c8
call fcn.14002eb90
nop
lea rcx, [rbp + 0x80]
call fcn.1400260f0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140025afb
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025af6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400260ce
call fcn.14002eb90
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
psrldq xmm6, 8
movq rdx, xmm6
cmp rdx, 0xf
jbe 0x140025b4d
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025b47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400260d4
call fcn.14002eb90
nop
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x140025b89
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x140025b84
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400260da
mov rcx, r8
call fcn.14002eb90
mov qword [r12 + 0x10], rdi
mov qword [r12 + 0x18], 0xf
mov byte [r12], 0
mov rcx, qword [r13]
test rcx, rcx
je 0x140026070
mov rdx, qword [r13 + 0x10]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14002605f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400260aa
jmp 0x14002605c
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x140025be0
lea rdx, str.NtDCompositionSetChildRootVisual
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r8, rax
test rax, rax
je 0x140025be0
mov qword [0x140070f10], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rax
mov rax, qword [0x140070fd8]
mov qword [rbp + 0x10], rax
mov dword [rbp], 0xdeadbeef
xor edx, edx
lea rcx, [rbp]
call r8
cmp byte [rbp + 0x39], 0
jne 0x140025dc0
nop dword [rax + rax]
cmp r15d, 0xa
jg 0x140025e2a
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [r14 + rdi], 0
jne 0x140025c81
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x140025ca7
mov rcx, rax
jmp 0x140025d2e
mov dword [rbp + 0x180], 0x238
lea rdx, [rbp + 0x180]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
cmp eax, 1
jne 0x140025d26
nop word [rax + rax]
lea rax, [rbp + 0x1ac]
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x140025ce0
mov r8, rdi
cmp rbx, rdi
cmovb r8, rbx
lea rdx, [rbp + 0x1ac]
mov rcx, r14
call fcn.140051350
test eax, eax
jne 0x140025d11
cmp rdi, rbx
jb 0x140025d11
jbe 0x140025de0
lea rdx, [rbp + 0x180]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
cmp eax, 1
je 0x140025cd0
test rsi, rsi
je 0x140025d34
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x140026e50]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
call fcn.1400273a0
mov qword [0x140070f18], rax
cmp rax, 0xffffffffffffffff
je 0x140025d6e
mov rdx, qword [0x140070fc0]
mov rcx, rax
call fcn.14002b780
mov rcx, qword [0x140070f18]
call fcn.1400276b0
inc r15d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rax
mov rax, qword [0x140070fd8]
mov qword [rbp + 0x10], rax
mov dword [rbp], 0xdeadbeef
xor edx, edx
lea rcx, [rbp]
call qword [0x140070f10]
cmp byte [rbp + 0x39], 0
je 0x140025c70
xor edi, edi
mov ebx, 0xd
mov ecx, ebx
call fcn.140039b90
mov r15, rax
test rax, rax
jne 0x140025e58
mov r15, rdi
jmp 0x140025e8d
mov ebx, dword [rbp + 0x188]
test rsi, rsi
je 0x140025df4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x140025d34
cmp qword [0x140070fb8], 0xf
lea r8, [0x140070fa0]
cmova r8, qword [0x140070fa0]
xor r9d, r9d
lea rdx, str.Game_already_running__nPlease_close_Rainbow___n
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x140025f43
cmp qword [0x140070fb8], 0xf
lea r8, [0x140070fa0]
cmova r8, qword [0x140070fa0]
xor r9d, r9d
lea rdx, str.Failed_to_load__nPlease_turn_off_your_Anti_Virus_or_uninstall_FaceIt_Valorant_Vanguard_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x140025f43
movsd xmm0, qword [str.IGPLGN]
movsd qword [rax], xmm0
mov eax, dword [str._fFNN_]
mov dword [r15 + 8], eax
movzx eax, byte [0x14005e6a4]
mov byte [r15 + 0xc], al
mov rax, r15
nop dword [rax]
xor byte [rax], 0x22
lea rax, [rax + 1]
sub rbx, 1
jne 0x140025e80
mov ecx, 6
call fcn.140039b90
mov rsi, rax
test rax, rax
jne 0x140025ea4
mov rsi, rdi
jmp 0x140025ece
mov eax, dword [str.qNGGR_]
mov dword [rsi], eax
movzx eax, word [0x14005e6ac]
mov word [rsi + 4], ax
xor byte [rsi], 0x22
xor byte [rsi + 1], 0x22
xor byte [rsi + 2], 0x22
xor byte [rsi + 3], 0x22
xor byte [rsi + 4], 0x22
xor byte [rsi + 5], 0x22
mov rdx, qword [r13 + 8]
sub rdx, qword [r13]
je 0x140025f37
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
lea rcx, [rsp + 0x50]
call fcn.140023970
mov rdi, qword [rsp + 0x50]
mov rbx, qword [r13 + 8]
mov rdx, qword [r13]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call fcn.140050900
lea rax, [rbx + rdi]
mov qword [rsp + 0x58], rax
lea r9, [rsp + 0x50]
mov r8, r14
mov rdx, rsi
mov rcx, r15
call fcn.1400250f0
mov rcx, r15
call fcn.140036914
mov rcx, rsi
call fcn.140036914
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rbp + 0x80]
call fcn.1400260f0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140025f8b
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025f86
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400260e0
call fcn.14002eb90
xor edi, edi
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], dil
psrldq xmm6, 8
movq rdx, xmm6
cmp rdx, 0xf
jbe 0x140025fdf
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025fd9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400260e6
call fcn.14002eb90
nop
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x14002601b
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x140026016
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400260a4
mov rcx, r8
call fcn.14002eb90
mov qword [r12 + 0x10], rdi
mov qword [r12 + 0x18], 0xf
mov byte [r12], 0
mov rcx, qword [r13]
test rcx, rcx
je 0x140026070
mov rdx, qword [r13 + 0x10]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14002605f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400260b0
mov rcx, r8
call fcn.14002eb90
mov qword [r13], rdi
mov qword [r13 + 8], rdi
mov qword [r13 + 0x10], rdi
mov al, 1
mov rcx, qword [rbp + 0x2b0]
xor rcx, rsp
call fcn.14002eb70
mov rbx, qword [rsp + 0x428]
movaps xmm6, xmmword [rsp + 0x3c0]
add rsp, 0x3d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140037548
nop
call fcn.140037548
int3
call fcn.140037548
nop
call fcn.140037548
int3
call fcn.140037548
nop
call fcn.140037548
nop
call fcn.140037548
nop
call fcn.140037548
nop
call fcn.140037548
nop
call fcn.140037548
nop
call fcn.140037548
nop
call fcn.140037548
int3