Function at 0x140070310
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
lea rbp, [rax - 0x138]
sub rsp, 0x230
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
call fcn.14006e810
test al, al
je 0x14007038c
lea rcx, str.FaceItAC.exe
call fcn.14007ed40
test al, al
je 0x1400703b1
mov r9d, gethostname
lea r8, str.AntiCheat_Detected
lea rdx, str.FaceIt_AntiCheat_detected._Do_you_want_to_close_it_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x140070a42
lea rcx, str.FaceItAC.exe
call fcn.140070230
lea rcx, str.FaceItAC_Service.exe
call fcn.140070230
xor al, al
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop rbp
ret
lea rcx, str.VALORANT.exe
call fcn.140070230
lea rcx, str.RiotClientServices.exe
call fcn.140070230
movzx edx, byte [rbp + 0x140]
lea rcx, [rbp - 0x80]
call fcn.1400620d0
movdqa xmm0, xmmword [0x1401ff410]
movdqu xmmword [rbp - 0x70], xmm0
xor ebx, ebx
mov word [rbp + 0x140], bx
lea rdx, [rbp + 0x140]
lea rcx, [rbp - 0x80]
call fcn.140061e80
nop
call fcn.140063080
mov rdi, rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1400708c8
mov dword [rbp + 0x140], ebx
xor edx, edx
mov r8d, 0x11c
lea rcx, [rbp - 0x60]
call fcn.1401a34b0
lea rcx, [0x1401fd568]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x1400708bf
lea rdx, str.RtlGetVersion
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400708bf
mov dword [rbp - 0x60], 0x11c
lea rcx, [rbp - 0x60]
call rax
test eax, eax
jne 0x1400708bf
cmp dword [rbp - 0x5c], 0xa
jne 0x1400708bf
lea rax, [rbp + 0x140]
mov rcx, rdi
mov qword [rsp + 0x48], rax
cmp dword [rbp - 0x54], 0x55f0
jb 0x140070642
lea rdx, [0x1404d8bd0]
call fcn.14006b800
test rax, rax
setne sil
movups xmm0, xmmword [0x1401fe488]
movups xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [0x1401fe498]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x1401fe4a0]
mov dword [rsp + 0x68], eax
cmp byte [0x1401fe4a3], bl
je 0x1400707ec
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140070606
movdqa xmm4, xmmword [0x1401ff610]
movdqa xmm3, xmmword [0x1401ffac0]
movdqa xmm5, xmmword [0x1401ff640]
movdqa xmm0, xmmword [0x1401ff760]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x70]
movdqa xmm6, xmmword [0x1401ff6c0]
nop
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rbx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add ebx, 8
lea rcx, [rcx + 8]
cmp ebx, 0x18
jl 0x140070520
cmp ebx, 0x1c
jge 0x1400707ec
movsxd rax, ebx
lea r8, [rsp + 0x50]
add r8, rax
mov eax, 0x5397829d
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, bl
sub al, cl
add al, 0x38
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x1c
jl 0x140070611
jmp 0x1400707ec
lea rdx, [0x1404dd3d0]
call fcn.14006b800
test rax, rax
setne sil
movups xmm0, xmmword [str.TV__USY]
movups xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [0x1401fe5f0]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x1401fe5f8]
mov dword [rsp + 0x68], eax
cmp byte [0x1401fe5fb], 0
je 0x1400707ec
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1400707b2
movdqa xmm4, xmmword [0x1401ff610]
movdqa xmm3, xmmword [0x1401ffac0]
movdqa xmm5, xmmword [0x1401ff640]
movdqa xmm0, xmmword [0x1401ff760]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x70]
movdqa xmm6, xmmword [0x1401ff6c0]
nop word [rax + rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rbx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add ebx, 8
lea rcx, [rcx + 8]
cmp ebx, 0x18
jl 0x1400706d0
cmp ebx, 0x1c
jge 0x1400707ec
movsxd rax, ebx
lea r8, [rsp + 0x50]
add r8, rax
nop dword [rax]
mov eax, 0x5397829d
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, bl
sub al, cl
add al, 0x38
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x1c
jl 0x1400707c0
lea rdx, [rsp + 0x50]
lea rcx, [0x140662020]
call fcn.14001cf60
mov rcx, rax
call fcn.140034d80
cmp sil, 1
je 0x140070827
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.illusion___Error
lea rdx, str.Failed_to_load_the_driver___0x433
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [rbp + 0x140], 0
je 0x14007084c
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.illusion___Error
lea rdx, str.Failed_to_load_the_driver___0x432
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
call fcn.140063d30
test al, al
jne 0x14007087f
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.illusion___Error
lea rdx, str.Could_not_initialize_illusion___0x11
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
test sil, sil
jne 0x1400708af
lea rdx, str.Could_not_initialize_illusion___0x12
lea r8, str.illusion___Error
mov r9d, reloc.WS2_32.dll_recv
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp - 0x80]
call fcn.140061ca0
jmp 0x14007038c
lea rcx, [rbp - 0x80]
call fcn.140061ca0
mov al, 1
jmp 0x14007038e
lea rdx, str.Unsupported_OS_version
jmp 0x14007088b
lea rdx, [rbp + 0xc0]
call fcn.140070ab0
mov r9, rax
cmp word [rax + 0x42], 0
je 0x140070a4a
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1400709fc
movdqa xmm5, xmmword [0x1401ff610]
movdqa xmm4, xmmword [0x1401ffac0]
movdqa xmm6, xmmword [0x1401ff640]
movdqa xmm7, xmmword [0x1401ff710]
mov rcx, rax
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [rbx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add ebx, 8
lea rcx, [rcx + 0x10]
cmp ebx, 0x20
jl 0x140070912
cmp ebx, 0x22
jge 0x140070a4a
movsxd rax, ebx
lea r8, [r9 + rax*2]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, bx
sub ax, cx
add ax, 0x38
xor word [r8], ax
inc ebx
lea r8, [r8 + 2]
cmp ebx, 0x22
jge 0x140070a4a
jmp 0x140070a10
xor ecx, ecx
call fcn.14017ff54
nop
mov rdx, r9
lea rcx, [rsp + 0x50]
call fcn.140061cc0
nop
lea rdx, [rsp + 0x50]
mov ecx, 3
call fcn.140022230
nop
lea rcx, [rsp + 0x50]
call fcn.140061ca0
call fcn.14007c930
call fcn.14007ce70
call fcn.14007d130
call fcn.14007d480
call fcn.14007d280
mov r9d, 0x40
lea r8, str.Restart_Required
lea rdx, str.Could_not_initialize_illusion_0x5___Please_restart_your_computer_and_try_again.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call fcn.14017ff54
int3