Function at 0x1400143e0
Capabilities:
Create thread
Encode data using xor
Execute command
Hide graphical window
Log keystrokes via polling
Set console window title

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x478]
sub rsp, 0x540
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
xor r13d, r13d
lea ebx, [r13 + 0x1f]
lea r15d, [r13 + 5]
mov r12d, dword [reloc.WS2_32.dll_accept]
nop dword [rax]
nop dword [rax + rax]
mov edi, r13d
mov dword [rbp + 0x480], r13d
call fcn.140013a70
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, r15d
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [str.QXZD]
mov qword [rbp + 0x488], rax
cmp byte [reloc.WS2_32.dll_gethostname], dil
je 0x1400145c3
cmp r12d, 2
jl 0x140014581
movdqa xmm4, xmmword [0x14008dd50]
movd xmm6, r15d
movd xmm5, ebx
movdqa xmm2, xmmword [0x14008dcf0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14008dd10]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd30]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.2222222222222222]
movd xmm0, dword [rbp + 0x488]
xorps xmm2, xmm0
movd dword [rbp + 0x488], xmm2
movdqa xmm3, xmmword [0x14008dd00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14008dd10]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd30]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.2222222222222222]
movd xmm0, dword [rbp + 0x48c]
xorps xmm2, xmm0
movd dword [rbp + 0x48c], xmm2
jmp 0x1400145c3
lea r9, [rbp + 0x488]
mov r8d, r13d
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140014590
lea rcx, [rbp + 0x488]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x14008c6d0]
movups xmmword [rbp + 0x370], xmm0
movups xmm1, xmmword [0x14008c6e0]
movups xmmword [rbp + 0x380], xmm1
movups xmm0, xmmword [0x14008c6f0]
movups xmmword [rbp + 0x390], xmm0
movups xmm1, xmmword [0x14008c700]
movups xmmword [rbp + 0x3a0], xmm1
movups xmm0, xmmword [0x14008c710]
movups xmmword [rbp + 0x3b0], xmm0
movzx eax, word [0x14008c720]
mov word [rbp + 0x3c0], ax
mov r8d, r13d
cmp r12d, 2
jl 0x140014767
movdqa xmm5, xmmword [0x14008dcf0]
movdqa xmm4, xmmword [0x14008dd50]
movd xmm6, r15d
movdqa xmm7, xmmword [0x14008dd10]
movd xmm8, ebx
movdqa xmm9, xmmword [0x14008dd20]
lea rcx, [rbp + 0x370]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x28
jl 0x140014670
cmp r8d, 0x29
jge 0x1400147b7
movsxd rax, r8d
lea r9, [rbp + 0x370]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x38
movzx eax, r8w
sub ax, cx
add ax, 0x32
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x29
jl 0x140014780
lea rcx, [rbp + 0x370]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov eax, dword [0x14008c7e8]
mov dword [rbp + 0x488], eax
cmp byte [0x14008c7eb], dil
je 0x1400148b3
cmp r12d, 2
jl 0x140014872
movdqa xmm3, xmmword [0x14008dcf0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14008dd50]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14008dd50]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
movd xmm0, r15d
psrad xmm2, xmm0
movd xmm0, ebx
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x14008dd10]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd30]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.2222222222222222]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0x488], xmm2
jmp 0x1400148b3
lea r9, [rbp + 0x488]
mov r8d, r13d
nop dword [rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140014880
lea rcx, [rbp + 0x488]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov ecx, Ordinal_50
call fcn.140079bd0
mov rsi, rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x68], Ordinal_35
mov qword [rsp + 0x70], Ordinal_50
movups xmm0, xmmword [str._n_n_n_Welcome_To_KreYze_Perm_Spoofer]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14008c3b8]
movups xmmword [rax + 0x10], xmm1
movzx ecx, word [0x14008c3c8]
mov word [rax + 0x20], cx
lea r14, [rax + 0x22]
mov byte [r14], dil
mov dword [rsp + 0x78], reloc.WLDAP32.dll_Ordinal_50
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rax
cmp rax, r14
je 0x140014964
mov qword [rbp + 0x488], reloc.WLDAP32.dll_Ordinal_50
movzx edx, byte [rbx]
mov rcx, r15
call fcn.140016ca0
mov rcx, rax
lea rdx, [0x140016e70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e90
inc rbx
cmp rbx, r14
jne 0x140014935
mov edx, Ordinal_50
mov rcx, rsi
call fcn.140079f2c
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov ecx, Ordinal_50
call fcn.140079bd0
mov rsi, rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x68], Ordinal_41
mov qword [rsp + 0x70], Ordinal_50
movups xmm0, xmmword [str._n_n_Checking_For_Blacklisted_Programs]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14008c3e0]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x14008c3f0]
mov dword [rax + 0x20], ecx
lea r14, [rax + 0x24]
mov byte [r14], 0
mov dword [rsp + 0x78], reloc.WLDAP32.dll_Ordinal_50
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rax
cmp rax, r14
je 0x140014a14
mov qword [rbp + 0x488], reloc.WLDAP32.dll_Ordinal_50
movzx edx, byte [rbx]
mov rcx, r15
call fcn.140016ca0
mov rcx, rax
lea rdx, [0x140016e70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e90
inc rbx
cmp rbx, r14
jne 0x1400149e5
mov edx, Ordinal_50
mov rcx, rsi
call fcn.140079f2c
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [0x140012d30]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [0x140012d50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], ntohs
mov qword [rbp + 8], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str....___Done_]
movsd qword [rbp - 0x10], xmm0
movzx eax, word [0x14008c368]
mov word [rbp - 8], ax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_33]
mov byte [rbp - 6], al
mov byte [rbp - 5], 0
mov dword [rbp + 0x10], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp - 0x10]
lea rsi, [rbp - 0x10]
add rsi, 0xb
cmp rbx, rsi
je 0x140014aff
mov qword [rbp + 0x488], Ordinal_46
nop
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016ca0
mov rcx, rax
lea rdx, [0x140016e70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e90
inc rbx
cmp rbx, rsi
jne 0x140014ad0
xorps xmm0, xmm0
movups xmmword [rbp + 0x340], xmm0
mov ecx, Ordinal_50
call fcn.140079bd0
mov rsi, rax
mov qword [rbp + 0x340], rax
mov qword [rbp + 0x350], Ordinal_46
mov qword [rbp + 0x358], gethostname
movups xmm0, xmmword [str._n_n_Closing_Epic_Gammes_BattleNet_Steam_Tasks]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14008c408]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x14008c418]
movsd qword [rax + 0x20], xmm0
mov ecx, dword [0x14008c420]
mov dword [rax + 0x28], ecx
lea r14, [rax + 0x2c]
mov byte [r14], 0
mov dword [rbp + 0x360], reloc.WLDAP32.dll_Ordinal_50
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rax
cmp rax, r14
je 0x140014bbf
mov qword [rbp + 0x488], reloc.WLDAP32.dll_Ordinal_50
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, r15
call fcn.140016ca0
mov rcx, rax
lea rdx, [0x140016e70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e90
inc rbx
cmp rbx, r14
jne 0x140014b90
mov edx, Ordinal_50
mov rcx, rsi
call fcn.140079f2c
mov qword [rbp + 0x350], r13
mov qword [rbp + 0x358], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x340], 0
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [0x140013940]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r15d, 5
nop dword [rax]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, r15d
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140013960
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c174]
lea rcx, [rsp + 0x58]
call fcn.140016670
mov rbx, rax
lea rdx, str._n__
lea rcx, [rbp - 0x80]
call fcn.140016670
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c60
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x250], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x258], rax
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x260]
call fcn.140017a70
or edi, 0x20
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002330]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079c0c
lea rdx, [rbp + 0x260]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017450
and edi, 0xffffffdf
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x260]
call fcn.140016460
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c1a4]
lea rcx, [rsp + 0x58]
call fcn.140016670
mov rbx, rax
lea rdx, [0x14008c151]
lea rcx, [rbp - 0x80]
call fcn.140016670
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c60
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x270], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x278], rax
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x280]
call fcn.140017a70
or edi, 0x40
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002330]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079c0c
lea rdx, [rbp + 0x280]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017450
and edi, 0xffffffbf
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x280]
call fcn.140016460
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], 2
mov qword [rbp + 0x80], reloc.WS2_32.dll_ntohs
mov eax, 0x3146
mov word [rbp + 0x68], ax
mov byte [rbp + 0x6a], 0
mov dword [rbp + 0x88], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0x68]
lea rsi, [rbp + 0x68]
add rsi, 2
cmp rbx, rsi
je 0x140014e1f
mov qword [rbp + 0x488], Ordinal_46
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016ca0
mov rcx, rax
lea rdx, [0x140016e70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e90
inc rbx
cmp rbx, rsi
jne 0x140014df0
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c174]
lea rcx, [rsp + 0x58]
call fcn.140016670
mov rbx, rax
lea rdx, [0x14008c430]
lea rcx, [rbp - 0x80]
call fcn.140016670
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c60
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1d0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x1d8], rax
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x290]
call fcn.140017a70
bts edi, 7
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002330]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079c0c
lea rdx, [rbp + 0x290]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017450
btr edi, 7
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x290]
call fcn.140016460
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], 4
mov qword [rbp + 0xa8], reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x90], 0x203e2d20
mov byte [rbp + 0x94], 0
mov dword [rbp + 0xb0], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0x90]
lea rsi, [rbp + 0x90]
add rsi, 4
cmp rbx, rsi
je 0x140014f6f
mov qword [rbp + 0x488], Ordinal_46
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016ca0
mov rcx, rax
lea rdx, [0x140016e70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e90
inc rbx
cmp rbx, rsi
jne 0x140014f40
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c188]
lea rcx, [rsp + 0x58]
call fcn.140016670
mov rbx, rax
lea rdx, [0x14008c43c]
lea rcx, [rbp - 0x80]
call fcn.140016670
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c60
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x2a0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x2a8], rax
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x2b0]
call fcn.140017a70
bts edi, 8
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002330]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079c0c
lea rdx, [rbp + 0x2b0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017450
btr edi, 8
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x2b0]
call fcn.140016460
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.SPOOF_PERMANENT]
movsd qword [rbp - 0x60], xmm0
mov eax, dword [0x14008c448]
mov dword [rbp - 0x58], eax
movzx eax, word [0x14008c44c]
mov word [rbp - 0x54], ax
movzx eax, byte [0x14008c44e]
mov byte [rbp - 0x52], al
mov byte [rbp - 0x51], 0
mov dword [rbp - 0x40], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp - 0x60]
lea rsi, [rbp - 0x60]
add rsi, 0xf
cmp rbx, rsi
je 0x1400150cf
mov qword [rbp + 0x488], Ordinal_46
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016ca0
mov rcx, rax
lea rdx, [0x140016e70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e90
inc rbx
cmp rbx, rsi
jne 0x1400150a0
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c188]
lea rcx, [rsp + 0x58]
call fcn.140016670
mov rbx, rax
lea rdx, [0x14008c430]
lea rcx, [rbp - 0x80]
call fcn.140016670
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c60
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x2c0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x2c8], rax
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x2d0]
call fcn.140017a70
bts edi, 9
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002330]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079c0c
lea rdx, [rbp + 0x2d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017450
btr edi, 9
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x2d0]
call fcn.140016460
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c174]
lea rcx, [rsp + 0x58]
call fcn.140016670
mov rbx, rax
lea rdx, str._n__
lea rcx, [rbp - 0x80]
call fcn.140016670
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c60
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x2f0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x2f8], rax
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x300]
call fcn.140017a70
bts edi, 0xa
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002330]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079c0c
lea rdx, [rbp + 0x300]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017450
btr edi, 0xa
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x300]
call fcn.140016460
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c1a4]
lea rcx, [rsp + 0x58]
call fcn.140016670
mov rbx, rax
lea rdx, [0x14008c151]
lea rcx, [rbp - 0x80]
call fcn.140016670
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c60
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x130], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x138], rax
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call fcn.140017a70
bts edi, 0xb
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002330]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079c0c
lea rdx, [rbp + 0x140]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017450
btr edi, 0xb
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x140]
call fcn.140016460
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], 2
mov qword [rbp + 0xd0], reloc.WS2_32.dll_ntohs
mov eax, 0x3246
mov word [rbp + 0xb8], ax
mov byte [rbp + 0xba], 0
mov dword [rbp + 0xd8], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0xb8]
lea rsi, [rbp + 0xb8]
add rsi, 2
cmp rbx, rsi
je 0x140015394
mov qword [rbp + 0x488], Ordinal_46
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016ca0
mov rcx, rax
lea rdx, [0x140016e70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e90
inc rbx
cmp rbx, rsi
jne 0x140015365
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c174]
lea rcx, [rsp + 0x58]
call fcn.140016670
mov rbx, rax
lea rdx, [0x14008c430]
lea rcx, [rbp - 0x80]
call fcn.140016670
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c60
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x150], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x158], rax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x160]
call fcn.140017a70
or edi, 0x10
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002330]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079c0c
lea rdx, [rbp + 0x160]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017450
and edi, 0xffffffef
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x160]
call fcn.140016460
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], 4
mov qword [rbp + reloc.WS2_32.dll_ntohs8], 0xf
mov dword [rbp + 0xe0], 0x203e2d20
mov byte [rbp + 0xe4], 0
mov dword [rbp + 0x100], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0xe0]
lea rsi, [rbp + 0xe0]
add rsi, 4
cmp rbx, rsi
je 0x1400154df
mov qword [rbp + 0x488], Ordinal_46
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016ca0
mov rcx, rax
lea rdx, [0x140016e70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e90
inc rbx
cmp rbx, rsi
jne 0x1400154b0
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c188]
lea rcx, [rsp + 0x58]
call fcn.140016670
mov rbx, rax
lea rdx, [0x14008c43c]
lea rcx, [rbp - 0x80]
call fcn.140016670
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c60
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x170], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x178], rax
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x180]
call fcn.140017a70
or edi, 8
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002330]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079c0c
lea rdx, [rbp + 0x180]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017450
and edi, 0xfffffff7
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x180]
call fcn.140016460
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.SERIALS_CHECKER]
movsd qword [rbp - 0x38], xmm0
mov eax, dword [0x14008c458]
mov dword [rbp - 0x30], eax
movzx eax, word [0x14008c45c]
mov word [rbp - 0x2c], ax
movzx eax, byte [0x14008c45e]
mov byte [rbp - 0x2a], al
mov byte [rbp - 0x29], 0
mov dword [rbp - 0x18], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp - 0x38]
lea rsi, [rbp - 0x38]
add rsi, 0xf
cmp rbx, rsi
je 0x14001563f
mov qword [rbp + 0x488], Ordinal_46
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016ca0
mov rcx, rax
lea rdx, [0x140016e70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e90
inc rbx
cmp rbx, rsi
jne 0x140015610
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c188]
lea rcx, [rsp + 0x58]
call fcn.140016670
mov rbx, rax
lea rdx, [0x14008c430]
lea rcx, [rbp - 0x80]
call fcn.140016670
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c60
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x190], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x198], rax
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x1a0]
call fcn.140017a70
or edi, 4
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002330]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079c0c
lea rdx, [rbp + 0x1a0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017450
and edi, 0xfffffffb
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x1a0]
call fcn.140016460
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c174]
lea rcx, [rsp + 0x58]
call fcn.140016670
mov rbx, rax
lea rdx, str._n__
lea rcx, [rbp - 0x80]
call fcn.140016670
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c60
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1b0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x1b8], rax
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x1c0]
call fcn.140017a70
or edi, 2
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002330]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079c0c
lea rdx, [rbp + 0x1c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017450
and edi, 0xfffffffd
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x1c0]
call fcn.140016460
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c1a4]
lea rcx, [rsp + 0x58]
call fcn.140016670
mov rbx, rax
lea rdx, [0x14008c151]
lea rcx, [rbp - 0x80]
call fcn.140016670
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c60
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x2e0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x2e8], rax
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x1e0]
call fcn.140017a70
or edi, 1
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002330]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079c0c
lea rdx, [rbp + 0x1e0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017450
and edi, 0xfffffffe
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x1e0]
call fcn.140016460
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], 2
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov eax, 0x3346
mov word [rbp + 0x40], ax
mov byte [rbp + 0x42], 0
mov dword [rbp + 0x60], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0x40]
lea rsi, [rbp + 0x40]
add rsi, 2
cmp rbx, rsi
je 0x1400158ef
mov qword [rbp + 0x488], Ordinal_46
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016ca0
mov rcx, rax
lea rdx, [0x140016e70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e90
inc rbx
cmp rbx, rsi
jne 0x1400158c0
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c174]
lea rcx, [rsp + 0x58]
call fcn.140016670
mov rbx, rax
lea rdx, [0x14008c430]
lea rcx, [rbp - 0x80]
call fcn.140016670
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c60
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1f0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x1f8], rax
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x200]
call fcn.140017a70
bts edi, 0xe
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002330]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079c0c
lea rdx, [rbp + 0x200]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017450
btr edi, 0xe
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x200]
call fcn.140016460
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], 4
mov qword [rbp + 0x120], reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x108], 0x203e2d20
mov byte [rbp + 0x10c], 0
mov dword [rbp + 0x128], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0x108]
lea rsi, [rbp + 0x108]
add rsi, 4
cmp rbx, rsi
je 0x140015a3f
mov qword [rbp + 0x488], Ordinal_46
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016ca0
mov rcx, rax
lea rdx, [0x140016e70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e90
inc rbx
cmp rbx, rsi
jne 0x140015a10
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c188]
lea rcx, [rsp + 0x58]
call fcn.140016670
mov rbx, rax
lea rdx, [0x14008c43c]
lea rcx, [rbp - 0x80]
call fcn.140016670
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c60
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x210], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x218], rax
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x220]
call fcn.140017a70
bts edi, 0xc
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002330]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079c0c
lea rdx, [rbp + 0x220]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017450
btr edi, 0xc
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x220]
call fcn.140016460
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], 7
mov qword [rbp + 0x30], reloc.WS2_32.dll_ntohs
mov rax, qword [str.CLEANER]
mov dword [rbp + 0x18], eax
movzx eax, word [0x14008c464]
mov word [rbp + 0x1c], ax
movzx eax, byte [0x14008c466]
mov byte [rbp + 0x1e], al
mov byte [rbp + 0x1f], 0
mov dword [rbp + 0x38], Ordinal_46
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0x18]
lea rsi, [rbp + 0x18]
add rsi, 7
cmp rbx, rsi
je 0x140015b8f
mov qword [rbp + 0x488], Ordinal_46
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016ca0
mov rcx, rax
lea rdx, [0x140016e70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e90
inc rbx
cmp rbx, rsi
jne 0x140015b60
lea rax, [rsp + 0x58]
mov qword [rbp + 0x488], rax
lea rdx, [0x14008c188]
lea rcx, [rsp + 0x58]
call fcn.140016670
mov rbx, rax
lea rdx, [0x14008c430]
lea rcx, [rbp - 0x80]
call fcn.140016670
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140017c60
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x230], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x238], rax
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x240]
call fcn.140017a70
bts edi, 0xd
mov dword [rbp + 0x480], edi
lea r9, [fcn.140002330]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x30]
call fcn.140079c0c
lea rdx, [rbp + 0x240]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017450
btr edi, 0xd
mov dword [rbp + 0x480], edi
lea rcx, [rbp + 0x240]
call fcn.140016460
mov ecx, reloc.WS2_32.dll_WSASetLastError
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x140015c95
nop dword [rax + rax]
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x140015f5a
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x140015f64
mov ecx, reloc.WS2_32.dll_WSASetLastError
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140015c60
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.140002600
movups xmm0, xmmword [str.AGUGB]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [0x14008d118]
movups xmmword [rsp + 0x68], xmm1
mov eax, dword [0x14008d128]
mov dword [rsp + 0x78], eax
mov ecx, r13d
cmp r12d, 2
jl 0x140015e1b
movdqa xmm5, xmmword [0x14008dcf0]
movdqa xmm4, xmmword [0x14008dd50]
movd xmm6, r15d
movdqa xmm7, xmmword [0x14008dd10]
mov eax, Ordinal_35
movd xmm8, eax
movdqa xmm0, xmmword [str.2222222222222222]
movdqa xmmword [rbp - 0x80], xmm0
lea rdx, [rsp + 0x5c]
mov r8d, dword [rbp - 0x80]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd30]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd30]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x20
jl 0x140015d13
cmp ecx, 0x24
jge 0x140015e5e
movsxd rax, ecx
lea r8, [rsp + 0x58]
add r8, rax
nop word [rax + rax]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x38
movzx eax, cl
sub al, dl
add al, 0x32
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x24
jl 0x140015e30
lea rcx, [rsp + 0x58]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
mov ecx, Ordinal_50
call fcn.140079bd0
mov rsi, rax
mov qword [rbp + 0x310], rax
mov qword [rbp + 0x320], Ordinal_46
mov qword [rbp + 0x328], gethostname
movups xmm0, xmmword [str._n_n_n____________Permanent_Spoofing_Done___n_n_n]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14008c478]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x14008c488]
movsd qword [rax + 0x20], xmm0
movzx ecx, word [0x14008c490]
mov word [rax + 0x28], cx
movzx eax, byte [reloc.WS2_32.dll_ioctlsocket]
mov byte [rsi + 0x2a], al
lea r14, [rsi + 0x2b]
mov byte [r14], 0
mov dword [rbp + 0x330], reloc.WLDAP32.dll_Ordinal_50
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rsi
cmp rsi, r14
je 0x140015f2f
mov qword [rbp + 0x488], reloc.WLDAP32.dll_Ordinal_50
movzx edx, byte [rbx]
mov rcx, r15
call fcn.140016ca0
mov rcx, rax
lea rdx, [0x140016e70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e90
inc rbx
cmp rbx, r14
jne 0x140015f00
mov edx, Ordinal_50
mov rcx, rsi
call fcn.140079f2c
mov qword [rbp + 0x320], r13
mov qword [rbp + 0x328], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x310], 0
jmp 0x140014c03
call fcn.140007aa0
jmp 0x140014c10
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140079bd0
mov rdi, rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x68], reloc.WS2_32.dll_setsockopt
mov eax, Ordinal_35
mov qword [rsp + 0x70], rax
movups xmm0, xmmword [str._n_n_n_Cleaner_Openning]
movups xmmword [rdi], xmm0
mov ecx, dword [0x14008c4a8]
mov dword [rdi + 0x10], ecx
movzx ecx, byte [reloc.WLDAP32.dll_Ordinal_32]
mov byte [rdi + 0x14], cl
lea rsi, [rdi + 0x15]
mov byte [rsi], 0
mov dword [rsp + 0x78], reloc.WLDAP32.dll_Ordinal_50
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rdi
cmp rdi, rsi
je 0x14001600f
mov qword [rbp + 0x488], reloc.WLDAP32.dll_Ordinal_50
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.140016ca0
mov rcx, rax
lea rdx, [0x140016e70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x488]
call fcn.140016e90
inc rbx
cmp rbx, rsi
jne 0x140015fe0
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, rdi
call fcn.140079f2c
movups xmm0, xmmword [0x14008c8a0]
movups xmmword [rbp + 0x370], xmm0
movups xmm1, xmmword [0x14008c8b0]
movups xmmword [rbp + 0x380], xmm1
movups xmm0, xmmword [0x14008c8c0]
movups xmmword [rbp + 0x390], xmm0
movups xmm1, xmmword [0x14008c8d0]
movups xmmword [rbp + 0x3a0], xmm1
movups xmm0, xmmword [0x14008c8e0]
movups xmmword [rbp + 0x3b0], xmm0
movups xmm1, xmmword [0x14008c8f0]
movups xmmword [rbp + 0x3c0], xmm1
movups xmm0, xmmword [0x14008c900]
movups xmmword [rbp + 0x3d0], xmm0
movups xmm1, xmmword [str.E_hDRAC_XPX_Q_3l__fje:_:O]
movups xmmword [rbp + 0x3e0], xmm1
movsd xmm0, qword [0x14008c920]
movsd qword [rbp + 0x3f0], xmm0
mov eax, dword [0x14008c928]
mov dword [rbp + 0x3f8], eax
movzx eax, word [0x14008c92c]
mov word [rbp + 0x3fc], ax
mov r8d, r13d
mov ebx, Ordinal_35
cmp r12d, 2
jl 0x140016212
movdqa xmm5, xmmword [0x14008dcf0]
movdqa xmm4, xmmword [0x14008dd50]
movd xmm6, r15d
movdqa xmm7, xmmword [0x14008dd10]
movd xmm8, ebx
movdqa xmm0, xmmword [str.2222222222222222]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp + 0x374]
mov edx, dword [rbp - 0x80]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x88
jl 0x140016101
cmp r8d, 0x8e
jge 0x140016256
movsxd rax, r8d
lea r9, [rbp + 0x370]
add r9, rax
nop
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x8e
jl 0x140016220
lea rcx, [rbp + 0x370]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140013960
movups xmm0, xmmword [str.q_thb_YVMH_VLZ9_______d.4_N]
movups xmmword [rsp + 0x58], xmm0
movsd xmm0, qword [0x14008dc40]
movsd qword [rsp + 0x68], xmm0
mov eax, dword [0x14008dc48]
mov dword [rsp + 0x70], eax
movzx eax, byte [0x14008dc4c]
mov byte [rsp + 0x74], al
mov r8d, r13d
cmp r12d, 2
jl 0x1400163eb
movdqa xmm5, xmmword [0x14008dcf0]
movdqa xmm4, xmmword [0x14008dd50]
movd xmm6, r15d
movdqa xmm7, xmmword [0x14008dd10]
movd xmm8, ebx
movdqa xmm0, xmmword [str.2222222222222222]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rsp + 0x5c]
mov edx, dword [rbp - 0x80]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008dd30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400162e0
cmp r8d, 0x1d
jge 0x140016433
movsxd rax, r8d
lea r9, [rsp + 0x58]
add r9, rax
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1d
jl 0x140016400
lea rcx, [rsp + 0x58]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140014430