Function at 0x140070220
Capabilities:
Encode data using xor
Enumerate processes
Hash data using fnv

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x498]
sub rsp, 0x560
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
xor r13d, r13d
mov r14d, r13d
mov dword [rbp + 0x4a0], r13d
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x14007127e
mov dword [rbp + 0x2f0], 0x130
lea rdx, [rbp + 0x2f0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x140071275
mov esi, 0x142a
mov r12d, 0x1476
movdqa xmm7, xmmword [0x140105f30]
movdqa xmm8, xmmword [0x140105f20]
movdqa xmm9, xmmword [0x140105f10]
movdqa xmm6, xmmword [0x140105f00]
movabs r8, 0xcbf29ce484222325
movabs rdx, 0x100000001b3
movzx ecx, byte [rbp + 0x2f8]
xor rcx, r8
imul rcx, rdx
movzx eax, byte [rbp + 0x2f9]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [rbp + 0x2fa]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [rbp + 0x2fb]
xor rcx, rax
imul rdx, rcx
and rdx, qword [0x1401b43f0]
add rdx, rdx
mov rax, qword [0x1401b43d8]
mov rcx, qword [rax + rdx*8 + 8]
mov r8, qword [0x1401b43c8]
cmp rcx, r8
je 0x140070355
mov rdx, qword [rax + rdx*8]
mov eax, dword [rbp + 0x2f8]
cmp eax, dword [rcx + 0x10]
je 0x140070358
cmp rcx, rdx
je 0x140070355
mov rcx, qword [rcx + 8]
cmp eax, dword [rcx + 0x10]
jne 0x140070345
jmp 0x140070358
mov rcx, r13
mov rax, r8
test rcx, rcx
cmovne rax, rcx
cmp rax, r8
jne 0x14007125d
lea r8, [rbp + 0x2f8]
lea rdx, [rbp + 0x140]
call fcn.140079650
mov r8d, dword [rbp + 0x2f8]
xor edx, edx
mov ecx, 0x1000
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x14007125d
mov dword [rbp + 0x4a0], r13d
lea rdx, [rbp + 0x4a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov ebx, eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x14007125d
cmp dword [rbp + 0x4a0], 0
jne 0x14007125d
mov edx, dword [rbp + 0x2f8]
lea rcx, [rbp + 0x110]
call fcn.14006ff50
nop
cmp qword [rbp + 0x120], 0
je 0x140071251
mov dword [rsp + 0x38], 0x1413142a
mov dword [rsp + 0x3c], 0x141d144b
mov dword [rsp + 0x40], 0x14141412
mov dword [rsp + 0x44], 0x14161413
mov dword [rsp + 0x48], 0x141b1450
mov dword [rsp + 0x4c], 0x14ed14ec
mov word [rsp + 0x50], r13w
mov byte [rsp + 0x52], 1
movd xmm1, dword [rsp + 0x38]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x38], xmm1
movd xmm1, dword [rsp + 0x3c]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm9
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x3c], xmm1
movd xmm1, dword [rsp + 0x40]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm8
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rsp + 0x44]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm7
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x44], xmm1
mov ecx, 8
nop dword [rax + rax]
lea eax, [r12 + rcx]
xor word [rsp + rcx*2 + 0x38], ax
inc rcx
cmp rcx, 0xc
jb 0x1400704d0
mov byte [rsp + 0x52], 0
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x170]
call fcn.1400794f0
or r14d, 0x300000
mov dword [rbp - 0x54], 0x1413142a
mov dword [rbp - 0x50], 0x141d144b
mov dword [rbp - 0x4c], 0x14141412
mov dword [rbp - 0x48], 0x14161413
mov dword [rbp - 0x44], 0x144b1448
mov dword [rbp - 0x40], 0x14e514ae
mov dword [rbp - 0x3c], 0x14ef14ee
mov word [rbp - 0x38], r13w
mov byte [rbp - 0x36], 1
movd xmm1, dword [rbp - 0x54]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x54], xmm1
movd xmm2, dword [rbp - 0x50]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x50], xmm1
movd xmm2, dword [rbp - 0x4c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x4c], xmm1
movd xmm2, dword [rbp - 0x48]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x48], xmm1
mov ecx, 8
nop dword [rax]
lea eax, [r12 + rcx]
xor word [rbp + rcx*2 - 0x54], ax
inc rcx
cmp rcx, 0xe
jb 0x1400705d0
mov byte [rbp - 0x36], 0
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x54]
lea rcx, [rbp + 0x190]
call fcn.1400794f0
nop
mov dword [rbp - 0x14], 0x1414142a
mov dword [rbp - 0x10], 0x141d141d
mov dword [rbp - 0xc], 0x141f1449
mov dword [rbp - 8], 0x14151445
mov dword [rbp - 4], 0x14101411
mov dword [rbp], 0x14af14eb
mov dword [rbp + 4], 0x14ef14e6
mov dword [rbp + 8], 0x14e8
mov byte [rbp + 0xc], 1
movd xmm1, dword [rbp - 0x14]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x14], xmm1
movd xmm2, dword [rbp - 0x10]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x10], xmm1
movd xmm2, dword [rbp - 0xc]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0xc], xmm1
movd xmm2, dword [rbp - 8]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 8], xmm1
mov ecx, 8
nop word [rax + rax]
lea eax, [r12 + rcx]
xor word [rbp + rcx*2 - 0x14], ax
inc rcx
cmp rcx, 0xf
jb 0x1400706d0
mov byte [rbp + 0xc], 0
lea r8, [rbp + 0xa]
lea rdx, [rbp - 0x14]
lea rcx, [rbp + 0x1b0]
call fcn.1400794f0
nop
mov dword [rbp - 0x34], 0x141b142a
mov dword [rbp - 0x30], 0x141b1411
mov dword [rbp - 0x2c], 0x140b1413
mov dword [rbp - 0x28], 0x14501408
mov dword [rbp - 0x24], 0x144d144d
mov dword [rbp - 0x20], 0x14e514ae
mov dword [rbp - 0x1c], 0x14ef14ee
mov word [rbp - 0x18], r13w
mov byte [rbp - 0x16], 1
movd xmm1, dword [rbp - 0x34]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x34], xmm1
movd xmm2, dword [rbp - 0x30]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x30], xmm1
movd xmm2, dword [rbp - 0x2c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x2c], xmm1
movd xmm2, dword [rbp - 0x28]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x28], xmm1
mov ecx, 8
nop dword [rax]
nop dword [rax + rax]
lea eax, [r12 + rcx]
xor word [rbp + rcx*2 - 0x34], ax
inc rcx
cmp rcx, 0xe
jb 0x1400707d0
mov byte [rbp - 0x16], 0
lea r8, [rbp - 0x18]
lea rdx, [rbp - 0x34]
lea rcx, [rbp + 0x1d0]
call fcn.1400794f0
nop
mov dword [rbp + 0x34], 0x141b142a
mov dword [rbp + 0x38], 0x141b1411
mov dword [rbp + 0x3c], 0x14121417
mov dword [rbp + 0x40], 0x14101417
mov dword [rbp + 0x44], 0x141b1411
mov dword [rbp + 0x48], 0x14b314b3
mov dword [rbp + 0x4c], 0x14e714ac
mov dword [rbp + 0x50], 0x14e914e8
mov word [rbp + 0x54], r13w
mov byte [rbp + 0x56], 1
mov edx, 0x147d
lea r8, [rbp + 0x38]
nop word [rax + rax]
lea rax, [rdx - 0x147d]
movq xmm2, rax
punpcklqdq xmm2, xmm2
paddq xmm2, xmm6
movd xmm1, dword [r8 - 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 - 4], xmm1
lea rax, [rdx - 4]
lea rcx, [rdx - 5]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8], xmm1
lea rax, [rdx - 2]
lea rcx, [rdx - 3]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 4], xmm1
lea rax, [rdx - 1]
movq xmm0, rdx
movq xmm2, rax
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 8], xmm1
add rdx, 8
lea r8, [r8 + 0x10]
lea rax, [rdx - 0x147d]
cmp rax, 0x10
jb 0x140070850
mov byte [rbp + 0x56], 0
lea r8, [rbp + 0x54]
lea rdx, [rbp + 0x34]
lea rcx, [rbp + 0x1f0]
call fcn.1400794f0
nop
mov dword [rbp + 0x8c], 0x61
mov dword [rbp + 0x7c], 0x6d005c
mov dword [rbp + 0x80], 0x690061
mov dword [rbp + 0x84], 0x2e006e
mov dword [rbp + 0x88], 0x75006c
mov byte [rbp + 0x90], 0
lea r8, [rbp + 0x8e]
lea rdx, [rbp + 0x7c]
lea rcx, [rbp + 0x210]
call fcn.1400794f0
nop
mov dword [rsp + 0x20], 0x1414142a
mov dword [rsp + 0x24], 0x14181414
mov dword [rsp + 0x28], 0x14081409
mov dword [rsp + 0x2c], 0x14111452
mov dword [rsp + 0x30], 0x141e140b
mov word [rsp + 0x34], r13w
mov byte [rsp + 0x36], 1
movd xmm1, dword [rsp + 0x20]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x20], xmm1
movd xmm2, dword [rsp + 0x24]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x24], xmm1
movd xmm2, dword [rsp + 0x28]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x28], xmm1
movd xmm2, dword [rsp + 0x2c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x2c], xmm1
mov ecx, 8
nop word [rax + rax]
lea eax, [r12 + rcx]
xor word [rsp + rcx*2 + 0x20], ax
inc rcx
cmp rcx, 0xa
jb 0x140070a80
mov byte [rsp + 0x36], 0
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x230]
call fcn.1400794f0
nop
mov dword [rbp + 0xe], 0x1414142a
mov dword [rbp + 0x12], 0x14181414
mov dword [rbp + 0x16], 0x14081409
mov dword [rbp + 0x1a], 0x140f140b
mov dword [rbp + 0x1e], 0x140f141f
mov dword [rbp + 0x22], 0x14e414f0
mov dword [rbp + 0x26], 0x14ad14f0
mov dword [rbp + 0x2a], 0x14f014e8
mov dword [rbp + 0x2e], 0x14e7
mov byte [rbp + 0x32], 1
mov rdx, r13
mov r8d, 0x147d
nop word [rax + rax]
movq xmm2, rdx
punpcklqdq xmm2, xmm2
paddq xmm2, xmm6
movd xmm1, dword [rbp + rdx*2 + 0xe]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0xe], xmm1
lea rax, [r8 - 4]
lea rcx, [r8 - 5]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [rbp + rdx*2 + 0x12]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0x12], xmm1
lea rax, [r8 - 2]
lea rcx, [r8 - 3]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [rbp + rdx*2 + 0x16]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0x16], xmm1
lea rax, [r8 - 1]
movq xmm0, r8
movq xmm2, rax
punpcklqdq xmm2, xmm0
movd xmm1, dword [rbp + rdx*2 + 0x1a]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp + rdx*2 + 0x1a], xmm1
add rdx, 8
add r8, 8
cmp r8, 0x148d
jb 0x140070b00
cmp rdx, 0x11
jae 0x140070c12
nop word [rax + rax]
lea eax, [r12 + rdx]
xor word [rbp + rdx*2 + 0xe], ax
inc rdx
cmp rdx, 0x11
jb 0x140070c00
mov byte [rbp + 0x32], 0
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0xe]
lea rcx, [rbp + 0x250]
call fcn.1400794f0
nop
mov dword [rsp + 0x54], 0x1413142a
mov dword [rsp + 0x58], 0x141f141d
mov dword [rsp + 0x5c], 0x14151413
mov dword [rsp + 0x60], 0x140e1419
mov dword [rsp + 0x64], 0x14131450
mov dword [rsp + 0x68], 0x14e014f5
mov word [rsp + 0x6c], r13w
mov byte [rsp + 0x6e], 1
movd xmm1, dword [rsp + 0x54]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x54], xmm1
movd xmm2, dword [rsp + 0x58]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x58], xmm1
movd xmm2, dword [rsp + 0x5c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x5c], xmm1
movd xmm2, dword [rsp + 0x60]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x60], xmm1
mov ecx, 8
nop dword [rax]
lea eax, [r12 + rcx]
xor word [rsp + rcx*2 + 0x54], ax
inc rcx
cmp rcx, 0xc
jb 0x140070d00
mov byte [rsp + 0x6e], 0
lea r8, [rsp + 0x6c]
lea rdx, [rsp + 0x54]
lea rcx, [rbp + 0x270]
call fcn.1400794f0
nop
mov dword [rbp + 0x58], 0x1434142a
mov dword [rbp + 0x5c], 0x141c1410
mov dword [rbp + 0x60], 0x140f141b
mov dword [rbp + 0x64], 0x14131439
mov dword [rbp + 0x68], 0x14161419
mov dword [rbp + 0x6c], 0x14e414ee
mov dword [rbp + 0x70], 0x14e014ac
mov dword [rbp + 0x74], 0x14e814ec
mov word [rbp + 0x78], r13w
mov byte [rbp + 0x7a], 1
mov edx, 0x147d
lea r8, [rbp + 0x5c]
nop dword [rax + rax]
lea rax, [rdx - 0x147d]
movq xmm2, rax
punpcklqdq xmm2, xmm2
paddq xmm2, xmm6
movd xmm1, dword [r8 - 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 - 4], xmm1
lea rax, [rdx - 4]
lea rcx, [rdx - 5]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8], xmm1
lea rax, [rdx - 2]
lea rcx, [rdx - 3]
movq xmm0, rax
movq xmm2, rcx
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 4]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 4], xmm1
lea rax, [rdx - 1]
movq xmm0, rdx
movq xmm2, rax
punpcklqdq xmm2, xmm0
movd xmm1, dword [r8 + 8]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [r8 + 8], xmm1
add rdx, 8
lea r8, [r8 + 0x10]
lea rax, [rdx - 0x147d]
cmp rax, 0x10
jb 0x140070d80
mov byte [rbp + 0x7a], 0
lea r8, [rbp + 0x78]
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x290]
call fcn.1400794f0
nop
mov dword [rsp + 0x70], 0x141b142a
mov dword [rsp + 0x74], 0x1418140d
mov dword [rsp + 0x78], 0x1448144f
mov dword [rsp + 0x7c], 0x144b1451
mov dword [rbp - 0x80], 0x1451144a
mov dword [rbp - 0x7c], 0x14ed14e4
mov dword [rbp - 0x78], 0x14ee
mov byte [rbp - 0x74], 1
movd xmm1, dword [rsp + 0x70]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x70], xmm1
movd xmm2, dword [rsp + 0x74]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x74], xmm1
movd xmm2, dword [rsp + 0x78]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x78], xmm1
movd xmm2, dword [rsp + 0x7c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x7c], xmm1
mov ecx, 8
nop dword [rax]
nop word [rax + rax]
lea eax, [r12 + rcx]
xor word [rsp + rcx*2 + 0x70], ax
inc rcx
cmp rcx, 0xd
jb 0x140070f70
mov byte [rbp - 0x74], 0
lea r8, [rbp - 0x76]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x2b0]
call fcn.1400794f0
nop
mov dword [rbp - 0x72], 0x141b142a
mov dword [rbp - 0x6e], 0x1418140d
mov dword [rbp - 0x6a], 0x1448144f
mov dword [rbp - 0x66], 0x144e1451
mov dword [rbp - 0x62], 0x1451144c
mov dword [rbp - 0x5e], 0x14ed14e4
mov dword [rbp - 0x5a], 0x14ee
mov byte [rbp - 0x56], 1
movd xmm1, dword [rbp - 0x72]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmm6
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x72], xmm1
movd xmm2, dword [rbp - 0x6e]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm9
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x6e], xmm1
movd xmm2, dword [rbp - 0x6a]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm8
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x6a], xmm1
movd xmm2, dword [rbp - 0x66]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmm7
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rbp - 0x66], xmm1
mov ecx, 8
lea eax, [r12 + rcx]
xor word [rbp + rcx*2 - 0x72], ax
inc rcx
cmp rcx, 0xd
jb 0x140071060
mov byte [rbp - 0x56], 0
lea r8, [rbp - 0x58]
lea rdx, [rbp - 0x72]
lea rcx, [rbp + 0x2d0]
call fcn.1400794f0
or r14d, 0x3cffffc
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r13
mov ecx, 0x180
call fcn.1400d92fc
mov rbx, rax
mov qword [rbp + 0x98], rax
mov qword [rbp + 0xa0], rax
lea rcx, [rax + 0x180]
mov qword [rbp + 0xa8], rcx
lea rax, [rbp + 0x98]
mov qword [rbp + 0x4a8], rax
lea rdi, [rbp + 0x170]
mov qword [rbp + 0xb0], rbx
mov qword [rbp + 0xb8], rbx
lea rax, [rbp + 0x98]
mov qword [rbp + 0xc0], rax
nop dword [rax]
mov rdx, rdi
mov rcx, rbx
call fcn.140075970
add rbx, 0x20
mov qword [rbp + 0xb8], rbx
add rdi, 0x20
lea rax, [rbp + 0x2f0]
cmp rdi, rax
jne 0x140071100
mov qword [rbp + 0xa0], rbx
lea r9, [fcn.14004a670]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, ntohs
lea rcx, [rbp + 0x170]
call fcn.1400d9338
mov rbx, qword [rbp + 0x98]
mov rsi, qword [rbp + 0xa0]
cmp rbx, rsi
je 0x140071240
mov r8, rbx
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x150]
call fcn.140079380
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x140071187
mov rax, qword [rax]
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xe8], r13
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.140079de0
or r14d, 3
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x130]
call fcn.14004ad50
movsd xmm0, qword [rax]
movsd qword [rbp + 0x100], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0xf0], ecx
lea rax, [0x1401b2b80]
mov qword [rbp + 0xf8], rax
movaps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0xb0], xmm0
mov eax, dword [rbp + 0x100]
test eax, eax
je 0x14007120a
cmp eax, 1
setne dil
jmp 0x140071215
xor dil, dil
test ecx, ecx
jne 0x1400712b3
lea rcx, [rbp + 0xd0]
call fcn.140077610
nop
lea rcx, [rbp + 0x150]
call fcn.140077610
test dil, dil
jne 0x1400712ad
add rbx, 0x20
cmp rbx, rsi
jne 0x140071162
lea rcx, [rbp + 0x98]
call fcn.140076cb0
mov esi, 0x142a
lea rcx, [rbp + 0x110]
call fcn.140077610
lea rdx, [rbp + 0x2f0]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1400702c8
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r11, [rsp + 0x560]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14006fef0
nop
lea r8, [rbp + 0xd0]
lea rdx, [rbp + 0xb0]
call fcn.14004aca0
int3