Function at 0x1400143c0
Capabilities:
Create thread
Encode data using xor
Execute command
Hide graphical window
Log keystrokes via polling
Schedule task via at
Set console window title

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x478]
sub rsp, 0x540
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
xor r13d, r13d
lea ebx, [r13 + 0x1f]
lea r15d, [r13 + 5]
mov r12d, dword [reloc.WS2_32.dll_accept]
nop dword [rax]
nop dword [rax + rax]
mov edi, r13d
mov dword [rbp + 0x480], r13d
call fcn.140013a50
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, r15d
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [0x14008d3d8]
mov qword [rbp + 0x488], rax
cmp byte [reloc.WLDAP32.dll_Ordinal_60], dil
je 0x1400145a3
cmp r12d, 2
jl 0x140014561
movdqa xmm4, xmmword [0x14008dd60]
movd xmm6, r15d
movd xmm5, ebx
movdqa xmm2, xmmword [0x14008dd00]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14008dd20]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd40]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.5555555555555555_t]
movd xmm0, dword [rbp + 0x488]
xorps xmm2, xmm0
movd dword [rbp + 0x488], xmm2
movdqa xmm3, xmmword [0x14008dd10]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14008dd20]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd40]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.5555555555555555_t]
movd xmm0, dword [rbp + 0x48c]
xorps xmm2, xmm0
movd dword [rbp + 0x48c], xmm2
jmp 0x1400145a3
lea r9, [rbp + 0x488]
mov r8d, r13d
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140014570
lea rcx, [rbp + 0x488]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [str.DRaC_elXLR___0e]
movups xmmword [rbp + 0x370], xmm0
movups xmm1, xmmword [0x14008cb60]
movups xmmword [rbp + 0x380], xmm1
movups xmm0, xmmword [0x14008cb70]
movups xmmword [rbp + 0x390], xmm0
movups xmm1, xmmword [0x14008cb80]
movups xmmword [rbp + 0x3a0], xmm1
movups xmm0, xmmword [0x14008cb90]
movups xmmword [rbp + 0x3b0], xmm0
movzx eax, word [0x14008cba0]
mov word [rbp + 0x3c0], ax
mov r8d, r13d
cmp r12d, 2
jl 0x140014747
movdqa xmm5, xmmword [0x14008dd00]
movdqa xmm4, xmmword [0x14008dd60]
movd xmm6, r15d
movdqa xmm7, xmmword [0x14008dd20]
movd xmm8, ebx
movdqa xmm9, xmmword [0x14008dd30]
lea rcx, [rbp + 0x370]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x28
jl 0x140014650
cmp r8d, 0x29
jge 0x140014797
movsxd rax, r8d
lea r9, [rbp + 0x370]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x35
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x29
jl 0x140014760
lea rcx, [rbp + 0x370]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov eax, dword [str.VZD8RV]
mov dword [rbp + 0x488], eax
cmp byte [0x14008cdaf], dil
je 0x140014893
cmp r12d, 2
jl 0x140014852
movdqa xmm3, xmmword [0x14008dd00]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14008dd60]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14008dd60]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
movd xmm0, r15d
psrad xmm2, xmm0
movd xmm0, ebx
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x14008dd20]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd40]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.5555555555555555_t]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0x488], xmm2
jmp 0x140014893
lea r9, [rbp + 0x488]
mov r8d, r13d
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140014860
lea rcx, [rbp + 0x488]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov ecx, Ordinal_50
call fcn.140079bb0
mov rsi, rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x68], Ordinal_35
mov qword [rsp + 0x70], Ordinal_50
movups xmm0, xmmword [str._n_n_n_Welcome_To_KreYze_Perm_Spoofer]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14008c3b8]
movups xmmword [rax + 0x10], xmm1
movzx ecx, word [0x14008c3c8]
mov word [rax + 0x20], cx
lea r14, [rax + 0x22]
mov byte [r14], dil
mov dword [rsp + 0x78], reloc.WLDAP32.dll_Ordinal_50
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rax
cmp rax, r14
je 0x140014944
mov qword [rbp + 0x488], reloc.WLDAP32.dll_Ordinal_50
movzx edx, byte [rbx]
mov rcx, r15
call fcn.140016c80
mov rcx, rax
lea rdx, [0x140016e50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e70
inc rbx
cmp rbx, r14
jne 0x140014915
mov edx, Ordinal_50
mov rcx, rsi
call fcn.140079f0c
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov ecx, Ordinal_50
call fcn.140079bb0
mov rsi, rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x68], Ordinal_41
mov qword [rsp + 0x70], Ordinal_50
movups xmm0, xmmword [str._n_n_Checking_For_Blacklisted_Programs]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14008c3e0]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x14008c3f0]
mov dword [rax + 0x20], ecx
lea r14, [rax + 0x24]
mov byte [r14], 0
mov dword [rsp + 0x78], reloc.WLDAP32.dll_Ordinal_50
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rax
cmp rax, r14
je 0x1400149f4
mov qword [rbp + 0x488], reloc.WLDAP32.dll_Ordinal_50
movzx edx, byte [rbx]
mov rcx, r15
call fcn.140016c80
mov rcx, rax
lea rdx, [0x140016e50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e70
inc rbx
cmp rbx, r14
jne 0x1400149c5
mov edx, Ordinal_50
mov rcx, rsi
call fcn.140079f0c
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [0x140012d10]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [0x140012d30]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], ntohs
mov qword [rbp + 8], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str....___Done_]
movsd qword [rbp - 0x10], xmm0
movzx eax, word [0x14008c368]
mov word [rbp - 8], ax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_33]
mov byte [rbp - 6], al
mov byte [rbp - 5], 0
mov dword [rbp + 0x10], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp - 0x10]
lea rsi, [rbp - 0x10]
add rsi, 0xb
cmp rbx, rsi
je 0x140014adf
mov qword [rbp + 0x488], Ordinal_46
nop
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016c80
mov rcx, rax
lea rdx, [0x140016e50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e70
inc rbx
cmp rbx, rsi
jne 0x140014ab0
xorps xmm0, xmm0
movups xmmword [rbp + 0x340], xmm0
mov ecx, Ordinal_50
call fcn.140079bb0
mov rsi, rax
mov qword [rbp + 0x340], rax
mov qword [rbp + 0x350], Ordinal_46
mov qword [rbp + 0x358], gethostname
movups xmm0, xmmword [str._n_n_Closing_Epic_Gammes_BattleNet_Steam_Tasks]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14008c408]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x14008c418]
movsd qword [rax + 0x20], xmm0
mov ecx, dword [0x14008c420]
mov dword [rax + 0x28], ecx
lea r14, [rax + 0x2c]
mov byte [r14], 0
mov dword [rbp + 0x360], reloc.WLDAP32.dll_Ordinal_50
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rax
cmp rax, r14
je 0x140014b9f
mov qword [rbp + 0x488], reloc.WLDAP32.dll_Ordinal_50
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, r15
call fcn.140016c80
mov rcx, rax
lea rdx, [0x140016e50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e70
inc rbx
cmp rbx, r14
jne 0x140014b70
mov edx, Ordinal_50
mov rcx, rsi
call fcn.140079f0c
mov qword [rbp + 0x350], r13
mov qword [rbp + 0x358], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x340], 0
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [0x140013920]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r15d, 5
nop dword [rax]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, r15d
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140013940
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c174]
lea rcx, [rsp + 0x58]
call fcn.140016650
mov rbx, rax
lea rdx, str._n__
lea rcx, [rbp - 0x80]
call fcn.140016650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c40
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x250], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x258], rax
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x260]
call fcn.140017a50
or edi, 0x20
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002310]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079bec
lea rdx, [rbp + 0x260]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017430
and edi, 0xffffffdf
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x260]
call fcn.140016440
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c1a4]
lea rcx, [rsp + 0x58]
call fcn.140016650
mov rbx, rax
lea rdx, [0x14008c151]
lea rcx, [rbp - 0x80]
call fcn.140016650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c40
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x270], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x278], rax
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x280]
call fcn.140017a50
or edi, 0x40
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002310]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079bec
lea rdx, [rbp + 0x280]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017430
and edi, 0xffffffbf
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x280]
call fcn.140016440
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], 2
mov qword [rbp + 0x80], reloc.WS2_32.dll_ntohs
mov eax, 0x3146
mov word [rbp + 0x68], ax
mov byte [rbp + 0x6a], 0
mov dword [rbp + 0x88], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0x68]
lea rsi, [rbp + 0x68]
add rsi, 2
cmp rbx, rsi
je 0x140014dff
mov qword [rbp + 0x488], Ordinal_46
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016c80
mov rcx, rax
lea rdx, [0x140016e50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e70
inc rbx
cmp rbx, rsi
jne 0x140014dd0
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c174]
lea rcx, [rsp + 0x58]
call fcn.140016650
mov rbx, rax
lea rdx, [0x14008c430]
lea rcx, [rbp - 0x80]
call fcn.140016650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c40
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1d0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x1d8], rax
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x290]
call fcn.140017a50
bts edi, 7
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002310]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079bec
lea rdx, [rbp + 0x290]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017430
btr edi, 7
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x290]
call fcn.140016440
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], 4
mov qword [rbp + 0xa8], reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x90], 0x203e2d20
mov byte [rbp + 0x94], 0
mov dword [rbp + 0xb0], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0x90]
lea rsi, [rbp + 0x90]
add rsi, 4
cmp rbx, rsi
je 0x140014f4f
mov qword [rbp + 0x488], Ordinal_46
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016c80
mov rcx, rax
lea rdx, [0x140016e50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e70
inc rbx
cmp rbx, rsi
jne 0x140014f20
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c188]
lea rcx, [rsp + 0x58]
call fcn.140016650
mov rbx, rax
lea rdx, [0x14008c43c]
lea rcx, [rbp - 0x80]
call fcn.140016650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c40
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x2a0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x2a8], rax
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x2b0]
call fcn.140017a50
bts edi, 8
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002310]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079bec
lea rdx, [rbp + 0x2b0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017430
btr edi, 8
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x2b0]
call fcn.140016440
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.SPOOF_PERMANENT]
movsd qword [rbp - 0x60], xmm0
mov eax, dword [0x14008c448]
mov dword [rbp - 0x58], eax
movzx eax, word [0x14008c44c]
mov word [rbp - 0x54], ax
movzx eax, byte [0x14008c44e]
mov byte [rbp - 0x52], al
mov byte [rbp - 0x51], 0
mov dword [rbp - 0x40], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp - 0x60]
lea rsi, [rbp - 0x60]
add rsi, 0xf
cmp rbx, rsi
je 0x1400150af
mov qword [rbp + 0x488], Ordinal_46
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016c80
mov rcx, rax
lea rdx, [0x140016e50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e70
inc rbx
cmp rbx, rsi
jne 0x140015080
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c188]
lea rcx, [rsp + 0x58]
call fcn.140016650
mov rbx, rax
lea rdx, [0x14008c430]
lea rcx, [rbp - 0x80]
call fcn.140016650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c40
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x2c0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x2c8], rax
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x2d0]
call fcn.140017a50
bts edi, 9
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002310]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079bec
lea rdx, [rbp + 0x2d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017430
btr edi, 9
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x2d0]
call fcn.140016440
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c174]
lea rcx, [rsp + 0x58]
call fcn.140016650
mov rbx, rax
lea rdx, str._n__
lea rcx, [rbp - 0x80]
call fcn.140016650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c40
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x2f0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x2f8], rax
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x300]
call fcn.140017a50
bts edi, 0xa
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002310]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079bec
lea rdx, [rbp + 0x300]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017430
btr edi, 0xa
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x300]
call fcn.140016440
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c1a4]
lea rcx, [rsp + 0x58]
call fcn.140016650
mov rbx, rax
lea rdx, [0x14008c151]
lea rcx, [rbp - 0x80]
call fcn.140016650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c40
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x130], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x138], rax
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call fcn.140017a50
bts edi, 0xb
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002310]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079bec
lea rdx, [rbp + 0x140]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017430
btr edi, 0xb
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x140]
call fcn.140016440
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], 2
mov qword [rbp + 0xd0], reloc.WS2_32.dll_ntohs
mov eax, 0x3246
mov word [rbp + 0xb8], ax
mov byte [rbp + 0xba], 0
mov dword [rbp + 0xd8], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0xb8]
lea rsi, [rbp + 0xb8]
add rsi, 2
cmp rbx, rsi
je 0x140015374
mov qword [rbp + 0x488], Ordinal_46
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016c80
mov rcx, rax
lea rdx, [0x140016e50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e70
inc rbx
cmp rbx, rsi
jne 0x140015345
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c174]
lea rcx, [rsp + 0x58]
call fcn.140016650
mov rbx, rax
lea rdx, [0x14008c430]
lea rcx, [rbp - 0x80]
call fcn.140016650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c40
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x150], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x158], rax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x160]
call fcn.140017a50
or edi, 0x10
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002310]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079bec
lea rdx, [rbp + 0x160]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017430
and edi, 0xffffffef
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x160]
call fcn.140016440
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], 4
mov qword [rbp + reloc.WS2_32.dll_ntohs8], 0xf
mov dword [rbp + 0xe0], 0x203e2d20
mov byte [rbp + 0xe4], 0
mov dword [rbp + 0x100], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0xe0]
lea rsi, [rbp + 0xe0]
add rsi, 4
cmp rbx, rsi
je 0x1400154bf
mov qword [rbp + 0x488], Ordinal_46
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016c80
mov rcx, rax
lea rdx, [0x140016e50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e70
inc rbx
cmp rbx, rsi
jne 0x140015490
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c188]
lea rcx, [rsp + 0x58]
call fcn.140016650
mov rbx, rax
lea rdx, [0x14008c43c]
lea rcx, [rbp - 0x80]
call fcn.140016650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c40
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x170], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x178], rax
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x180]
call fcn.140017a50
or edi, 8
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002310]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079bec
lea rdx, [rbp + 0x180]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017430
and edi, 0xfffffff7
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x180]
call fcn.140016440
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.SERIALS_CHECKER]
movsd qword [rbp - 0x38], xmm0
mov eax, dword [0x14008c458]
mov dword [rbp - 0x30], eax
movzx eax, word [0x14008c45c]
mov word [rbp - 0x2c], ax
movzx eax, byte [0x14008c45e]
mov byte [rbp - 0x2a], al
mov byte [rbp - 0x29], 0
mov dword [rbp - 0x18], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp - 0x38]
lea rsi, [rbp - 0x38]
add rsi, 0xf
cmp rbx, rsi
je 0x14001561f
mov qword [rbp + 0x488], Ordinal_46
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016c80
mov rcx, rax
lea rdx, [0x140016e50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e70
inc rbx
cmp rbx, rsi
jne 0x1400155f0
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c188]
lea rcx, [rsp + 0x58]
call fcn.140016650
mov rbx, rax
lea rdx, [0x14008c430]
lea rcx, [rbp - 0x80]
call fcn.140016650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c40
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x190], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x198], rax
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x1a0]
call fcn.140017a50
or edi, 4
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002310]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079bec
lea rdx, [rbp + 0x1a0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017430
and edi, 0xfffffffb
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x1a0]
call fcn.140016440
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c174]
lea rcx, [rsp + 0x58]
call fcn.140016650
mov rbx, rax
lea rdx, str._n__
lea rcx, [rbp - 0x80]
call fcn.140016650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c40
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1b0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x1b8], rax
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x1c0]
call fcn.140017a50
or edi, 2
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002310]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079bec
lea rdx, [rbp + 0x1c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017430
and edi, 0xfffffffd
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x1c0]
call fcn.140016440
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c1a4]
lea rcx, [rsp + 0x58]
call fcn.140016650
mov rbx, rax
lea rdx, [0x14008c151]
lea rcx, [rbp - 0x80]
call fcn.140016650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c40
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x2e0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x2e8], rax
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x1e0]
call fcn.140017a50
or edi, 1
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002310]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079bec
lea rdx, [rbp + 0x1e0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017430
and edi, 0xfffffffe
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x1e0]
call fcn.140016440
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], 2
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov eax, 0x3346
mov word [rbp + 0x40], ax
mov byte [rbp + 0x42], 0
mov dword [rbp + 0x60], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0x40]
lea rsi, [rbp + 0x40]
add rsi, 2
cmp rbx, rsi
je 0x1400158cf
mov qword [rbp + 0x488], Ordinal_46
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016c80
mov rcx, rax
lea rdx, [0x140016e50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e70
inc rbx
cmp rbx, rsi
jne 0x1400158a0
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c174]
lea rcx, [rsp + 0x58]
call fcn.140016650
mov rbx, rax
lea rdx, [0x14008c430]
lea rcx, [rbp - 0x80]
call fcn.140016650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c40
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1f0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x1f8], rax
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x200]
call fcn.140017a50
bts edi, 0xe
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002310]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079bec
lea rdx, [rbp + 0x200]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017430
btr edi, 0xe
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x200]
call fcn.140016440
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], 4
mov qword [rbp + 0x120], reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x108], 0x203e2d20
mov byte [rbp + 0x10c], 0
mov dword [rbp + 0x128], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0x108]
lea rsi, [rbp + 0x108]
add rsi, 4
cmp rbx, rsi
je 0x140015a1f
mov qword [rbp + 0x488], Ordinal_46
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016c80
mov rcx, rax
lea rdx, [0x140016e50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e70
inc rbx
cmp rbx, rsi
jne 0x1400159f0
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c188]
lea rcx, [rsp + 0x58]
call fcn.140016650
mov rbx, rax
lea rdx, [0x14008c43c]
lea rcx, [rbp - 0x80]
call fcn.140016650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c40
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x210], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x218], rax
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x220]
call fcn.140017a50
bts edi, 0xc
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002310]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079bec
lea rdx, [rbp + 0x220]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017430
btr edi, 0xc
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x220]
call fcn.140016440
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], 7
mov qword [rbp + 0x30], reloc.WS2_32.dll_ntohs
mov rax, qword [str.CLEANER]
mov dword [rbp + 0x18], eax
movzx eax, word [0x14008c464]
mov word [rbp + 0x1c], ax
movzx eax, byte [0x14008c466]
mov byte [rbp + 0x1e], al
mov byte [rbp + 0x1f], 0
mov dword [rbp + 0x38], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0x18]
lea rsi, [rbp + 0x18]
add rsi, 7
cmp rbx, rsi
je 0x140015b6f
mov qword [rbp + 0x488], Ordinal_46
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016c80
mov rcx, rax
lea rdx, [0x140016e50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e70
inc rbx
cmp rbx, rsi
jne 0x140015b40
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c188]
lea rcx, [rsp + 0x58]
call fcn.140016650
mov rbx, rax
lea rdx, [0x14008c430]
lea rcx, [rbp - 0x80]
call fcn.140016650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c40
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x230], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x238], rax
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x240]
call fcn.140017a50
bts edi, 0xd
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002310]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079bec
lea rdx, [rbp + 0x240]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017430
btr edi, 0xd
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x240]
call fcn.140016440
mov ecx, reloc.WS2_32.dll_WSASetLastError
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x140015c75
nop dword [rax + rax]
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x140015f3a
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x140015f44
mov ecx, reloc.WS2_32.dll_WSASetLastError
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140015c40
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.1400025e0
movups xmm0, xmmword [str.FBVJM]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [0x14008d948]
movups xmmword [rsp + 0x68], xmm1
mov eax, dword [0x14008d958]
mov dword [rsp + 0x78], eax
mov ecx, r13d
cmp r12d, 2
jl 0x140015dfb
movdqa xmm5, xmmword [0x14008dd00]
movdqa xmm4, xmmword [0x14008dd60]
movd xmm6, r15d
movdqa xmm7, xmmword [0x14008dd20]
mov eax, Ordinal_35
movd xmm8, eax
movdqa xmm0, xmmword [str.5555555555555555_t]
movdqa xmmword [rbp - 0x80], xmm0
lea rdx, [rsp + 0x5c]
mov r8d, dword [rbp - 0x80]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd40]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd40]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x20
jl 0x140015cf3
cmp ecx, 0x24
jge 0x140015e3e
movsxd rax, ecx
lea r8, [rsp + 0x58]
add r8, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, cl
sub al, dl
add al, 0x35
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x24
jl 0x140015e10
lea rcx, [rsp + 0x58]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
mov ecx, Ordinal_50
call fcn.140079bb0
mov rsi, rax
mov qword [rbp + 0x310], rax
mov qword [rbp + 0x320], Ordinal_46
mov qword [rbp + 0x328], gethostname
movups xmm0, xmmword [str._n_n_n____________Permanent_Spoofing_Done___n_n_n]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14008c478]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x14008c488]
movsd qword [rax + 0x20], xmm0
movzx ecx, word [0x14008c490]
mov word [rax + 0x28], cx
movzx eax, byte [reloc.WS2_32.dll_ioctlsocket]
mov byte [rsi + 0x2a], al
lea r14, [rsi + 0x2b]
mov byte [r14], 0
mov dword [rbp + 0x330], reloc.WLDAP32.dll_Ordinal_50
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rsi
cmp rsi, r14
je 0x140015f0f
mov qword [rbp + 0x488], reloc.WLDAP32.dll_Ordinal_50
movzx edx, byte [rbx]
mov rcx, r15
call fcn.140016c80
mov rcx, rax
lea rdx, [0x140016e50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e70
inc rbx
cmp rbx, r14
jne 0x140015ee0
mov edx, Ordinal_50
mov rcx, rsi
call fcn.140079f0c
mov qword [rbp + 0x320], r13
mov qword [rbp + 0x328], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x310], 0
jmp 0x140014be3
call fcn.140007a80
jmp 0x140014bf0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140079bb0
mov rdi, rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x68], reloc.WS2_32.dll_setsockopt
mov eax, Ordinal_35
mov qword [rsp + 0x70], rax
movups xmm0, xmmword [str._n_n_n_Cleaner_Openning]
movups xmmword [rdi], xmm0
mov ecx, dword [0x14008c4a8]
mov dword [rdi + 0x10], ecx
movzx ecx, byte [reloc.WLDAP32.dll_Ordinal_32]
mov byte [rdi + 0x14], cl
lea rsi, [rdi + 0x15]
mov byte [rsi], 0
mov dword [rsp + 0x78], reloc.WLDAP32.dll_Ordinal_50
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rdi
cmp rdi, rsi
je 0x140015fef
mov qword [rbp + 0x488], reloc.WLDAP32.dll_Ordinal_50
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016c80
mov rcx, rax
lea rdx, [0x140016e50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e70
inc rbx
cmp rbx, rsi
jne 0x140015fc0
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, rdi
call fcn.140079f0c
movups xmm0, xmmword [0x14008cc10]
movups xmmword [rbp + 0x370], xmm0
movups xmm1, xmmword [0x14008cc20]
movups xmmword [rbp + 0x380], xmm1
movups xmm0, xmmword [0x14008cc30]
movups xmmword [rbp + 0x390], xmm0
movups xmm1, xmmword [0x14008cc40]
movups xmmword [rbp + 0x3a0], xmm1
movups xmm0, xmmword [0x14008cc50]
movups xmmword [rbp + 0x3b0], xmm0
movups xmm1, xmmword [0x14008cc60]
movups xmmword [rbp + 0x3c0], xmm1
movups xmm0, xmmword [0x14008cc70]
movups xmmword [rbp + 0x3d0], xmm0
movups xmm1, xmmword [0x14008cc80]
movups xmmword [rbp + 0x3e0], xmm1
movsd xmm0, qword [0x14008cc90]
movsd qword [rbp + 0x3f0], xmm0
mov eax, dword [0x14008cc98]
mov dword [rbp + 0x3f8], eax
movzx eax, word [0x14008cc9c]
mov word [rbp + 0x3fc], ax
mov r8d, r13d
mov ebx, Ordinal_35
cmp r12d, 2
jl 0x1400161f2
movdqa xmm5, xmmword [0x14008dd00]
movdqa xmm4, xmmword [0x14008dd60]
movd xmm6, r15d
movdqa xmm7, xmmword [0x14008dd20]
movd xmm8, ebx
movdqa xmm0, xmmword [str.5555555555555555_t]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp + 0x374]
mov edx, dword [rbp - 0x80]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x88
jl 0x1400160e1
cmp r8d, 0x8e
jge 0x140016236
movsxd rax, r8d
lea r9, [rbp + 0x370]
add r9, rax
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x8e
jl 0x140016200
lea rcx, [rbp + 0x370]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140013940
movups xmm0, xmmword [str.v_fkoPT_SJMc3:______._c75Q]
movups xmmword [rsp + 0x58], xmm0
movsd xmm0, qword [0x14008cae0]
movsd qword [rsp + 0x68], xmm0
mov eax, dword [0x14008cae8]
mov dword [rsp + 0x70], eax
movzx eax, byte [0x14008caec]
mov byte [rsp + 0x74], al
mov r8d, r13d
cmp r12d, 2
jl 0x1400163cb
movdqa xmm5, xmmword [0x14008dd00]
movdqa xmm4, xmmword [0x14008dd60]
movd xmm6, r15d
movdqa xmm7, xmmword [0x14008dd20]
movd xmm8, ebx
movdqa xmm0, xmmword [str.5555555555555555_t]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rsp + 0x5c]
mov edx, dword [rbp - 0x80]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400162c0
cmp r8d, 0x1d
jge 0x140016413
movsxd rax, r8d
lea r9, [rsp + 0x58]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1d
jl 0x1400163e0
lea rcx, [rsp + 0x58]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140014410