Function at 0x140002f50
Capabilities:
Create thread
Delete file
Encode data using xor
Execute command
Log keystrokes via polling
Set console window title

Disassembly:
mov rax, rsp
push rbp
push rbx
push rdi
lea rbp, [rax - 0x58]
sub rsp, 0x140
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
xor ebx, ebx
mov dword [rbp + 0x68], ebx
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov word [rbp + 0x60], bx
lea rcx, [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x140002c80]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [str.WYE7]
mov dword [rbp + 0x60], eax
movdqa xmm9, xmmword [0x140063f60]
movdqa xmm8, xmmword [0x140063f70]
movdqa xmm10, xmmword [str.3333]
movdqa xmm7, xmmword [0x140063f80]
movdqa xmm6, xmmword [0x140063f40]
mov edi, dword [0x1400771d8]
cmp byte [0x140063cab], bl
je 0x1400030c3
cmp edi, 2
jl 0x14000307c
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm8
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x60], xmm1
jmp 0x1400030c3
lea r9, [rbp + 0x60]
mov r8d, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140003090
lea rcx, [rbp + 0x60]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rax, [rsp + 0x40]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 1
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov word [rsp + 0x40], 0x67
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], 0xa
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.Undetected]
movsd qword [rbp - 0x70], xmm0
movzx eax, word [0x140063790]
mov word [rbp - 0x68], ax
mov byte [rbp - 0x66], 0
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.140006720
nop
lea rax, [rbp - 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.1400065a0
mov dword [rbp + 0x68], 1
lea r9, [fcn.1400021b0]
mov edx, 0x28
mov r8d, 1
lea rcx, [rbp - 0x50]
call fcn.1400557fc
nop
lea rax, [rsp + 0x40]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 1
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov word [rsp + 0x40], 0x77
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rbx
mov ecx, 0x40
call fcn.1400557c0
mov rcx, rax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x60], 0x3e
mov qword [rbp - 0x58], 0x3f
movups xmm0, xmmword [str._____________________________________________________Status_:]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400637a8]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1400637b8]
movups xmmword [rax + 0x20], xmm0
movsd xmm0, qword [0x1400637c8]
movsd qword [rax + 0x30], xmm0
mov eax, dword [0x1400637d0]
mov dword [rcx + 0x38], eax
movzx eax, word [0x1400637d4]
mov word [rcx + 0x3c], ax
mov byte [rcx + 0x3e], 0
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.140006720
nop
lea rax, [rbp - 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x20]
call fcn.1400065a0
mov dword [rbp + 0x68], 3
lea r9, [fcn.1400021b0]
mov edx, 0x28
mov r8d, 1
lea rcx, [rbp - 0x50]
call fcn.1400557fc
lea rdx, [rbp - 0x20]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005e80
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.140005e80
mov rcx, rax
lea rdx, [0x140005f30]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp - 0x20]
call fcn.140003ec0
mov dword [rbp + 0x68], ebx
lea rcx, [rsp + 0x70]
call fcn.140003ec0
lea rdx, str._n__.__..__..__..__..__..__.______________________________________________________n____._____.________________________________________________________________n__.______.__________________________________________________________________n____._______.____..___._______________________Press_F1_To___Temp_Serials___n____.___________.__._______________________Press_F2_To___FN_Public______n_______0_________O_O___o___________________Press_F3_To_Clean____________n__________.__.____.._._._____________________Press_F4_To_Check_Serials____n_________o____________.____________________________________________________n_____________.____________________________o_______________________________n______________._____________________o___________________________________n_____o________________________.___._.o_n____._.__________..____O_______.___._n___.__.________._________.______.__n.___.__.....______._n__.____.______________________._n___.____.______n____._.___________________n_________________________n_____________________n______________._.____._._n______________.________.______n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005ab0
mov rcx, rax
mov dl, 0xa
call fcn.1400058e0
nop
lea rax, [rsp + 0x40]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 1
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov word [rsp + 0x40], 0x77
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], 2
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov eax, 0xa0a
mov word [rbp - 0x70], ax
mov byte [rbp - 0x6e], 0
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.140006720
nop
lea rax, [rbp - 0x50]
mov qword [rsp + 0x70], rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x78], rax
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x20]
call fcn.1400065a0
mov dword [rbp + 0x68], 4
lea r9, [fcn.1400021b0]
mov edx, 0x28
mov r8d, 1
lea rcx, [rbp - 0x50]
call fcn.1400557fc
lea rdx, [rbp - 0x20]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005e80
nop
lea rcx, [rbp - 0x20]
call fcn.140003ec0
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x1400034e7
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400033dc
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400034c5
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rbx
mov ecx, 0x20
call fcn.1400557c0
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], 0x1b
mov qword [rbp - 0x78], 0x1f
movups xmm0, xmmword [str.C:Users_applecleaner_2.exe]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400632b8]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x1400632c0]
mov word [rax + 0x18], cx
movzx ecx, byte [0x1400632c2]
mov byte [rax + 0x1a], cl
mov byte [rax + 0x1b], 0
mov r8d, 0x39fa10
lea rdx, [0x140079f10]
lea rcx, [rsp + 0x70]
call fcn.1400028b0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x1400034ab
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400034a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003523
call fcn.140055b0c
lea rcx, str.C:Users_applecleaner_2.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Users_applecleaner_2.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov ecx, reloc.WS2_32.dll_WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x14000352a
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400033c0
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
call int.140002b00
xor eax, eax
lea r11, [rsp + 0x140]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop rdi
pop rbx
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [str.WYE7]
mov dword [rbp + 0x60], eax
cmp byte [0x140063cab], 0
je 0x140003603
cmp edi, 2
jl 0x1400035be
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm8
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x60], xmm1
jmp 0x140003603
lea r9, [rbp + 0x60]
mov r8d, ebx
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x1400035d0
lea rcx, [rbp + 0x60]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140063df0]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140063e00]
movups xmmword [rsp + 0x50], xmm1
psrldq xmm1, 0xf
movd eax, xmm1
test al, al
je 0x140003783
cmp edi, 2
jl 0x14000373f
mov edx, ebx
movdqa xmmword [rsp + 0x30], xmm8
lea rcx, [rsp + 0x44]
mov r8d, dword [rsp + 0x30]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x20
jl 0x140003652
jmp 0x140003783
lea r9, [rsp + 0x40]
mov r8d, ebx
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x20
jl 0x140003750
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
movups xmm0, xmmword [0x140063d88]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140063d98]
movups xmmword [rsp + 0x50], xmm1
psrldq xmm1, 0xf
movd eax, xmm1
test al, al
je 0x140003913
cmp edi, 2
jl 0x1400038cd
mov edx, ebx
movdqa xmmword [rsp + 0x30], xmm8
lea rcx, [rsp + 0x44]
mov r8d, dword [rsp + 0x30]
nop
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x20
jl 0x1400037e0
jmp 0x140003913
lea r9, [rsp + 0x40]
mov r8d, ebx
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x20
jl 0x1400038e0
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
movups xmm0, xmmword [str.CX_T]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [str.7_9_4_5____14_y___t]
movups xmmword [rbp - 0x40], xmm1
movsd xmm0, qword [0x140063e70]
movsd qword [rbp - 0x30], xmm0
mov eax, dword [0x140063e78]
mov dword [rbp - 0x28], eax
movzx eax, word [0x140063e7c]
mov word [rbp - 0x24], ax
movzx eax, byte [0x140063e7e]
mov byte [rbp - 0x22], al
mov r8d, ebx
cmp edi, 2
jl 0x140003a83
movdqa xmmword [rsp + 0x30], xmm8
lea rcx, [rbp - 0x4c]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x140003990
cmp r8d, 0x2f
jge 0x140003ac3
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop dword [rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x2f
jl 0x140003a90
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
movups xmm0, xmmword [0x140063cb0]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140063cc0]
movups xmmword [rsp + 0x50], xmm1
movzx eax, byte [0x140063cd0]
mov byte [rsp + 0x60], al
mov r8d, ebx
cmp edi, 2
jl 0x140003c13
movdqa xmmword [rsp + 0x30], xmm8
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140003b20
cmp r8d, 0x21
jge 0x140003c53
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x21
jl 0x140003c20
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
movups xmm0, xmmword [0x140063cd8]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x140063ce8]
movsd qword [rbp - 0x80], xmm0
movzx eax, byte [0x140063cf0]
mov byte [rbp - 0x78], al
cmp edi, 2
jl 0x140003da0
movdqa xmmword [rsp + 0x30], xmm8
lea rcx, [rsp + 0x74]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rbx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 8]
cmp ebx, 0x18
jl 0x140003cb0
cmp eax, 0x19
jge 0x140003dde
movsxd rax, ebx
lea r8, [rsp + 0x70]
add r8, rax
nop dword [rax + rax]
mov eax, 0xa0a0a0a1
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, bl
sub al, cl
add al, 0x34
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x19
jl 0x140003db0
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
movzx eax, word [0x140063e4c]
mov word [rbp + 0x60], ax
movzx eax, byte [0x140063e4e]
mov byte [rbp + 0x60], 0x20
xor byte [rbp + 0x61], 0x35
xor al, 0x36
mov byte [rbp + 0x62], al
lea rdx, [rbp + 0x60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005ab0
mov rcx, rax
mov dl, 0xa
call fcn.1400058e0
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
movsd xmm0, qword [0x140063da8]
movsd qword [rsp + 0x30], xmm0
movzx edx, word [0x140063db0]
mov word [rsp + 0x38], dx
movzx eax, byte [0x140063db2]
mov byte [rsp + 0x30], WSAStartup
xor byte [rsp + 0x31], 0x35
xor byte [rsp + 0x32], 0x36
xor byte [rsp + 0x33], 0x37
xor byte [rsp + 0x34], 0x38
xor byte [rsp + 0x35], 0x39
xor byte [rsp + 0x36], 0x3a
xor byte [rsp + 0x37], 0x3b
xor dl, 0x3c
mov byte [rsp + 0x38], dl
xor byte [rsp + 0x39], 0x3d
xor al, 0x3e
mov byte [rsp + 0x3a], al
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400034f9