Function at 0x14000fe80
Capabilities:
Create thread
Get common file path
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1260
call fcn.140026f90
sub rsp, rax
movaps xmmword [rsp + 0x1250], xmm6
movaps xmmword [rsp + 0x1240], xmm7
mov rax, qword [0x140032040]
xor rax, rsp
mov qword [rsp + 0x1238], rax
mov r14, rdx
movsxd rbx, ecx
xor r12d, r12d
mov dword [rsp + 0x40], r12d
call fcn.14000f730
test al, al
jne 0x14000ff3f
lea rcx, [rsp + 0x930]
call fcn.14001ddd0
mov rcx, rax
call fcn.14001d1b0
mov rdx, rax
lea rcx, [rsp + 0x638]
call fcn.14000a7a0
mov rcx, rax
call fcn.140025410
xor eax, eax
mov rcx, qword [rsp + 0x1238]
xor rcx, rsp
call fcn.140025fb0
lea r11, [rsp + 0x1260]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rsi, rbx
test ebx, ebx
jle 0x14000ff9d
xor edi, edi
nop dword [rax + rax]
mov rdx, qword [r14 + rdi*8]
lea rcx, [rsp + 0x480]
call fcn.14000a7a0
lea rdx, str.__hide
mov rcx, rax
call fcn.140020ff0
movzx ebx, al
lea rcx, [rsp + 0x480]
call fcn.1400030a0
test bl, bl
je 0x14000ff95
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
inc rdi
cmp rdi, rsi
jl 0x14000ff50
xor r14d, r14d
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x140023b60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.140023cb0
cmp al, 1
jne 0x14000ffcd
mov byte [0x1400332f1], al
lea rdx, [rsp + 0x1010]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea rcx, [rsp + 0x768]
call fcn.14001faa0
nop
lea rcx, [rsp + 0x768]
call fcn.14000a6e0
mov dword [rsp + 0x28], 0x104
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
lea r8, [rsp + 0x1010]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea rdx, str.SOFTWAREitsshuxProcessSpooferPro
lea rcx, [rsp + 0x810]
call fcn.14001fb10
nop
lea rdx, [rsp + 0x768]
lea rcx, [rsp + 0x810]
call fcn.14000f850
nop
lea rcx, [rsp + 0x810]
call fcn.14001fa30
lea rcx, [rsp + 0x620]
call fcn.14000f840
lea rdx, str.beep
lea rcx, [rsp + 0x2e0]
call fcn.14000a7a0
nop
lea rdx, str.hideCLI
lea rcx, [rsp + 0x300]
call fcn.14000a7a0
nop
lea rdx, [0x14002a028]
lea rcx, [rsp + 0x320]
call fcn.14000a7a0
nop
lea rdx, [0x14002a02c]
lea rcx, [rsp + 0x340]
call fcn.14000a7a0
nop
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x590], rax
lea rax, [rsp + 0x360]
mov qword [rsp + 0x598], rax
lea rdx, [rsp + 0x590]
lea rcx, [rsp + 0x620]
call fcn.14001f6a0
nop
lea r9, [fcn.1400030a0]
mov edx, 0x20
lea r8d, [rdx - 0x1c]
lea rcx, [rsp + 0x2e0]
call fcn.14002612c
lea rcx, [rsp + 0x690]
call fcn.14000f840
lea rdx, [0x14002a030]
lea rcx, [rsp + 0x1e0]
call fcn.14001fb10
nop
lea rdx, [0x14002a034]
lea rcx, [rsp + 0x200]
call fcn.14001fb10
nop
lea rdx, [0x14002a030]
lea rcx, [rsp + 0x220]
call fcn.14001fb10
nop
lea rdx, [0x14002a030]
lea rcx, [rsp + 0x240]
call fcn.14001fb10
nop
lea rax, [rsp + 0x1e0]
mov qword [rsp + 0x520], rax
lea rax, [rsp + 0x260]
mov qword [rsp + 0x528], rax
lea rdx, [rsp + 0x520]
lea rcx, [rsp + 0x690]
call fcn.14001d070
nop
lea r9, [fcn.14001fa30]
mov edx, 0x20
lea r8d, [rdx - 0x1c]
lea rcx, [rsp + 0x1e0]
call fcn.14002612c
lea rcx, [rsp + 0x7f0]
call fcn.14001fd90
nop
mov r8d, 0x104
lea rdx, [rsp + 0x1120]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rdx, [rsp + 0x1120]
lea rcx, [rsp + 0x6a8]
call fcn.14000a7a0
nop
lea rcx, [rsp + 0x6a8]
call fcn.14001fe00
lea r8, [rax + 1]
mov r9, 0xffffffffffffffff
lea rdx, [rsp + 0x7d0]
lea rcx, [rsp + 0x6a8]
call fcn.14000a6f0
nop
mov r15d, r14d
mov rax, qword [rsp + 0x628]
mov rcx, qword [rsp + 0x620]
sub rax, rcx
sar rax, 5
test rax, rax
je 0x140010bc1
mov r13, r14
mov rbx, r14
lea rsi, [0x14002a038]
nop dword [rax + rax]
shl rbx, 5
lea rdx, [rcx + rbx]
lea rcx, [rsp + 0x4f8]
call fcn.14000a7e0
nop
lea r8, [rsp + 0x4f8]
cmp qword [rsp + 0x510], 0xf
seta r9b
cmova r8, qword [rsp + 0x4f8]
add r8, qword [rsp + 0x508]
lea rdx, [rsp + 0x4f8]
test r9b, r9b
cmovne rdx, qword [rsp + 0x4f8]
lea rcx, [rsp + 0x908]
call fcn.140020d70
nop
mov rdx, qword [rsp + 0x690]
add rdx, rbx
lea rcx, [rsp + 0x550]
call fcn.14001fc60
nop
lea rdx, [rsp + 0x4f8]
cmp qword [rsp + 0x510], 0xf
seta r9b
cmova rdx, qword [rsp + 0x4f8]
mov r8, qword [rsp + 0x508]
add r8, rdx
lea rdx, [rsp + 0x4f8]
test r9b, r9b
cmovne rdx, qword [rsp + 0x4f8]
lea rcx, [rsp + 0xa8]
call fcn.140020d70
mov rdi, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x11
jb 0x1400103d8
lea rax, [r8 + 0x11]
mov qword [rdi + 0x10], rax
mov r14, rdi
cmp rcx, 7
jbe 0x140010350
mov r14, qword [rdi]
lea rax, [0x14002a05a]
cmp rax, r14
jbe 0x140010380
lea rax, [r14 + r8*2]
cmp rsi, rax
ja 0x140010380
cmp r14, rsi
ja 0x14001036e
xor esi, esi
jmp 0x140010385
mov rsi, r14
lea rax, [0x14002a038]
sub rsi, rax
sar rsi, 1
jmp 0x140010385
mov esi, select
lea rcx, [r14 + 0x22]
lea r8, [r8*2 + 2]
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
lea rbx, [rsi + rsi]
mov r8, rbx
lea rdx, [0x14002a038]
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [0x14002a038]
lea rdx, [rdx + 0x22]
lea rdx, [rdx + rsi*2]
lea rcx, [r14 + rbx]
mov r8d, select
sub r8, rsi
add r8, r8
call sub.VCRUNTIME140.dll_memcpy
xor r14d, r14d
jmp 0x1400103f1
mov qword [rsp + 0x28], select
mov edx, select
mov rcx, rdi
call fcn.140022360
mov rdi, rax
movups xmm7, xmmword [rdi]
movups xmmword [rsp + 0xb70], xmm7
movups xmm6, xmmword [rdi + 0x10]
movups xmmword [rsp + 0xb80], xmm6
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 7
mov word [rdi], r14w
or r12d, 8
mov rdx, qword [rsp + 0xc0]
cmp rdx, 7
jbe 0x140010464
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001045f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c36
call fcn.140026014
mov qword [rsp + 0xb8], r14
mov qword [rsp + 0xc0], 7
mov word [rsp + 0xa8], r14w
xorps xmm0, xmm0
movups xmmword [rsp + 0x658], xmm0
mov qword [rsp + 0x668], r14
mov qword [rsp + 0x670], r14
mov rdi, qword [rsp + 0x508]
lea rsi, [rsp + 0x4f8]
cmp qword [rsp + 0x510], 0xf
cmova rsi, qword [rsp + 0x4f8]
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x140012e91
cmp rdi, 0xf
ja 0x1400104fb
mov qword [rsp + 0x668], rdi
mov qword [rsp + 0x670], 0xf
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x658], xmm0
jmp 0x140010599
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
jbe 0x14001051a
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140010541
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140010563
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140012e8b
mov rcx, rax
call fcn.140025fd0
mov rcx, rax
test rax, rax
je 0x140010c44
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140010572
test rcx, rcx
je 0x14001056f
call fcn.140025fd0
jmp 0x140010572
mov rax, r14
mov qword [rsp + 0x658], rax
mov qword [rsp + 0x668], rdi
mov qword [rsp + 0x670], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0x658]
lea rcx, [rsp + 0x1b8]
call fcn.14000f9b0
nop
or r12d, 1
mov dword [rsp + 0x40], r12d
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x1400105c6
mov rax, qword [rax]
cmp r8, 1
jne 0x1400105df
lea rdx, [0x14002a05c]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140010634
lea rdx, [rsp + 0x4f8]
lea rcx, [rsp + 0x3a0]
call fcn.14000a7e0
mov rdx, rax
lea rcx, [rsp + 0x158]
call fcn.14000f9b0
or r12d, 2
mov dword [rsp + 0x40], r12d
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14001061b
mov rax, qword [rax]
cmp r8, 1
jne 0x140010638
lea rdx, [0x14002a060]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140010638
xor bl, bl
jmp 0x14001063a
mov bl, 1
test r12b, 2
je 0x1400106a8
and r12d, 0xfffffffd
mov dword [rsp + 0x40], r12d
mov rdx, qword [rsp + 0x170]
cmp rdx, 0xf
jbe 0x14001068c
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010687
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c3d
call fcn.140026014
mov qword [rsp + 0x168], r14
mov qword [rsp + 0x170], select
mov byte [rsp + 0x158], 0
test r12b, 1
je 0x1400106fa
and r12d, 0xfffffffe
mov dword [rsp + 0x40], r12d
mov rdx, qword [rsp + 0x1d0]
cmp rdx, 0xf
jbe 0x1400106fa
inc rdx
mov rcx, qword [rsp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400106f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c44
call fcn.140026014
test bl, bl
je 0x1400108bf
lea rdx, str.Fixing_config:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001bd0
lea rdx, [rsp + 0x4f8]
cmp qword [rsp + 0x510], 0xf
cmova rdx, qword [rsp + 0x4f8]
mov r8, qword [rsp + 0x508]
mov rcx, rax
call fcn.140001e70
lea rdx, [0x140001dc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rsp + 0x550]
cmp qword [rsp + 0x568], 7
seta r9b
cmova rdx, qword [rsp + 0x550]
mov rax, qword [rsp + 0x560]
lea r8, [rdx + rax*2]
lea rdx, [rsp + 0x550]
test r9b, r9b
cmovne rdx, qword [rsp + 0x550]
lea rcx, [rsp + 0x198]
call fcn.140021040
mov rbx, rax
cmp qword [rax + 0x18], 7
jbe 0x1400107a7
mov rbx, qword [rax]
lea rdx, [rsp + 0x4f8]
cmp qword [rsp + 0x510], 0xf
seta r9b
cmova rdx, qword [rsp + 0x4f8]
mov r8, qword [rsp + 0x508]
add r8, rdx
lea rdx, [rsp + 0x4f8]
test r9b, r9b
cmovne rdx, qword [rsp + 0x4f8]
lea rcx, [rsp + 0x570]
call fcn.140020d70
cmp qword [rax + 0x18], 7
jbe 0x1400107fb
mov rax, qword [rax]
mov r9, rbx
mov r8, rax
lea rsi, [0x14002a038]
mov rdx, rsi
call fcn.140023800
mov rdx, qword [rsp + 0x588]
cmp rdx, 7
jbe 0x140010858
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x570]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010853
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c4b
call fcn.140026014
mov qword [rsp + 0x580], r14
mov qword [rsp + 0x588], 7
mov word [rsp + 0x570], r14w
mov rdx, qword [rsp + 0x1b0]
cmp rdx, 7
jbe 0x1400108c6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400108b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c52
call fcn.140026014
jmp 0x1400108c6
lea rsi, [0x14002a038]
lea rdx, [rsp + 0x4f8]
lea rcx, [rsp + 0x260]
call fcn.14000a7e0
mov rdx, rax
lea rcx, [rsp + 0x5a0]
call fcn.14000f9b0
nop
lea r8, [rsp + 0x5a0]
cmp qword [rsp + 0x5b8], 0xf
seta r9b
cmova r8, qword [rsp + 0x5a0]
add r8, qword [rsp + 0x5b0]
lea rdx, [rsp + 0x5a0]
test r9b, r9b
cmovne rdx, qword [rsp + 0x5a0]
lea rcx, [rsp + 0x178]
call fcn.140020d70
mov rdi, rax
mov rbx, r13
shl rbx, 5
add rbx, qword [rsp + 0x690]
cmp rbx, rax
je 0x1400109b7
mov rdx, qword [rbx + 0x18]
cmp rdx, 7
jbe 0x140010989
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140010984
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140010c59
mov rcx, r8
call fcn.140026014
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
movups xmm0, xmmword [rdi]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbx + 0x10], xmm1
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 7
mov word [rdi], r14w
mov rdx, qword [rsp + 0x190]
cmp rdx, 7
jbe 0x140010a00
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400109fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c59
call fcn.140026014
nop
mov rdx, qword [rsp + 0x5b8]
cmp rdx, 0xf
jbe 0x140010a43
inc rdx
mov rcx, qword [rsp + 0x5a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010a3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c60
call fcn.140026014
mov qword [rsp + 0x5b0], r14
mov qword [rsp + 0x5b8], 0xf
mov byte [rsp + 0x5a0], 0
psrldq xmm6, 8
movq rdx, xmm6
cmp rdx, 7
jbe 0x140010aa7
lea rdx, [rdx*2 + 2]
movq rcx, xmm7
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010aa1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c67
call fcn.140026014
nop
mov rdx, qword [rsp + 0x568]
cmp rdx, 7
jbe 0x140010aef
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x550]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010aea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c6e
call fcn.140026014
mov qword [rsp + 0x560], r14
mov qword [rsp + 0x568], 7
mov word [rsp + 0x550], r14w
mov rdx, qword [rsp + 0x920]
cmp rdx, 7
jbe 0x140010b55
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x908]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010b4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c75
call fcn.140026014
nop
mov rdx, qword [rsp + 0x510]
cmp rdx, 0xf
jbe 0x140010b98
inc rdx
mov rcx, qword [rsp + 0x4f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010b93
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c7c
call fcn.140026014
inc r15d
inc r13
mov rax, qword [rsp + 0x628]
mov rcx, qword [rsp + 0x620]
sub rax, rcx
sar rax, 5
movsxd rbx, r15d
cmp rbx, rax
jb 0x140010260
xorps xmm0, xmm0
movups xmmword [rsp + 0x138], xmm0
mov qword [rsp + 0x148], r14
mov qword [rsp + 0x150], r14
mov r8d, 4
lea rdx, str.beep
lea rcx, [rsp + 0x138]
call fcn.14000aeb0
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x400]
call fcn.14000f9b0
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x140010c19
mov rax, qword [rax]
cmp r8, 1
jne 0x140010c83
lea rdx, [0x14002a060]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140010c83
mov bl, 1
jmp 0x140010c85
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor bl, bl
mov rdx, qword [rsp + 0x418]
cmp rdx, 0xf
jbe 0x140010ccb
inc rdx
mov rcx, qword [rsp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010cc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010cc6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140026014
test bl, bl
je 0x140010cdf
mov edx, 0x32
mov ecx, 0x2ee
call qword [sym.imp.KERNEL32.dll_Beep]
xorps xmm0, xmm0
movups xmmword [rsp + 0x118], xmm0
mov qword [rsp + 0x128], r14
mov qword [rsp + 0x130], r14
mov r8d, 7
lea rdx, str.hideCLI
lea rcx, [rsp + 0x118]
call fcn.14000aeb0
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x3e0]
call fcn.14000f9b0
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x140010d37
mov rax, qword [rax]
cmp r8, 1
jne 0x140010d54
lea rdx, [0x14002a060]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140010d54
mov bl, 1
jmp 0x140010d56
xor bl, bl
mov rdx, qword [rsp + 0x3f8]
cmp rdx, 0xf
jbe 0x140010d9c
inc rdx
mov rcx, qword [rsp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010d97
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010d97
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140026014
test bl, bl
je 0x140010db1
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rsp + 0xf8], xmm0
mov qword [rsp + 0x108], r14
mov qword [rsp + 0x110], r14
mov r8d, 3
lea rdx, [0x14002a028]
lea rcx, [rsp + 0xf8]
call fcn.14000aeb0
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x3c0]
call fcn.14000f9b0
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x140010e09
mov rax, qword [rax]
cmp r8, 1
jne 0x140010e26
lea rdx, [0x14002a060]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140010e26
mov bl, 1
jmp 0x140010e28
xor bl, bl
mov rdx, qword [rsp + 0x3d8]
cmp rdx, 0xf
jbe 0x140010e6e
inc rdx
mov rcx, qword [rsp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010e69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010e69
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140026014
test bl, bl
je 0x140010e95
lea rdx, str._Info__RCE_is_enabled.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001bd0
lea rdx, [0x140001dc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x5c0], xmm0
mov qword [rsp + 0x5d0], r14
mov qword [rsp + 0x5d8], r14
mov r8d, 3
lea rdx, [0x14002a02c]
lea rcx, [rsp + 0x5c0]
call fcn.14000aeb0
lea rdx, [rsp + 0x5c0]
lea rcx, [rsp + 0x638]
call fcn.14000f9b0
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x140010eed
mov rax, qword [rax]
cmp r8, 1
jne 0x140010f0a
lea rdx, [0x14002a060]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140010f0a
mov bl, 1
jmp 0x140010f0c
xor bl, bl
mov rdx, qword [rsp + 0x650]
cmp rdx, 0xf
jbe 0x140010f52
inc rdx
mov rcx, qword [rsp + 0x638]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010f4d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010f4d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140026014
test bl, bl
je 0x140010f79
lea rdx, str._Info__SAC_is_enabled.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001bd0
lea rdx, [0x140001dc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, str.USERNAME
lea rdx, [rsp + 0x8e0]
lea rcx, [rsp + 0x4e0]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
xorps xmm0, xmm0
test eax, eax
je 0x14001124e
xor eax, eax
movups xmmword [rsp + 0x1e0], xmm0
mov word [rsp + 0x1f0], ax
mov byte [rsp + 0x1f2], al
mov dword [rsp + 0x1f4], 0x60
mov dword [rsp + 0x1f8], 0x47
mov dword [rsp + 0x1fc], 0x3e
movdqa xmm0, xmmword [0x14002af70]
movdqa xmmword [rsp + 0x200], xmm0
movdqa xmm1, xmmword [0x14002ae90]
movdqa xmmword [rsp + 0x210], xmm1
movdqa xmm0, xmmword [0x14002afb0]
movdqa xmmword [rsp + 0x220], xmm0
mov dword [rsp + 0x230], 0x60
mov dword [rsp + 0x234], 0x47
mov dword [rsp + 0x238], 0x3e
lea rcx, [rsp + 0x1e0]
call fcn.14001c600
mov r11, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x2e0], xmm0
mov dword [rsp + 0x2f0], eax
mov word [rsp + 0x2f4], ax
mov byte [rsp + 0x2f6], al
mov dword [rsp + 0x2f8], 2
mov dword [rsp + 0x2fc], reloc.WS2_32.dll_WSACleanup
movdqa xmm0, xmmword [0x14002adb0]
movdqa xmmword [rsp + 0x300], xmm0
movdqa xmm1, xmmword [0x14002ac50]
movdqa xmmword [rsp + 0x310], xmm1
movdqa xmm0, xmmword [0x14002ac60]
movdqa xmmword [rsp + 0x320], xmm0
movdqa xmm1, xmmword [0x14002b070]
movdqa xmmword [rsp + 0x330], xmm1
movdqa xmm0, xmmword [0x14002ac00]
movdqa xmmword [rsp + 0x340], xmm0
lea rcx, [rsp + 0x2e0]
call fcn.14001cab0
xor r9d, r9d
mov r8, r11
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rsp + 0x7e8]
cmp rdx, 0xf
jbe 0x140011133
inc rdx
mov rcx, qword [rsp + 0x7d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001112d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001112d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140026014
nop
mov rdx, qword [rsp + 0x6c0]
cmp rdx, 0xf
jbe 0x140011179
inc rdx
mov rcx, qword [rsp + 0x6a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011174
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011174
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140026014
movdqa xmm0, xmmword [0x14002aac0]
movdqu xmmword [rsp + 0x6b8], xmm0
mov byte [rsp + 0x6a8], 0
mov rdx, qword [rsp + 0x808]
cmp rdx, 7
jbe 0x1400111de
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x7f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400111d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400111d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140026014
nop
lea rcx, [rsp + 0x690]
call fcn.14001ffa0
nop
lea rcx, [rsp + 0x620]
call fcn.14001f630
nop
mov rdx, qword [rsp + 0x780]
cmp rdx, 7
jbe 0x14000ff06
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x768]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011244
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011244
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140026014
jmp 0x14000ff06
xor eax, eax
movups xmmword [rsp + 0x930], xmm0
movups xmmword [rsp + 0x940], xmm0
mov word [rsp + 0x950], ax
mov dword [rsp + 0x954], 0x2b
mov dword [rsp + 0x958], 0x47
mov dword [rsp + 0x95c], 0x4c
movdqa xmm0, xmmword [str.__beeID_e]
movdqa xmmword [rsp + 0x960], xmm0
movdqa xmm1, xmmword [0x14002af90]
movdqa xmmword [rsp + 0x970], xmm1
movdqa xmm0, xmmword [0x14002b220]
movdqa xmmword [rsp + 0x980], xmm0
movdqa xmm1, xmmword [0x14002b230]
movdqa xmmword [rsp + 0x990], xmm1
movdqa xmm0, xmmword [0x14002b020]
movdqa xmmword [rsp + 0x9a0], xmm0
movdqa xmm1, xmmword [0x14002aad0]
movdqa xmmword [rsp + 0x9b0], xmm1
movdqa xmm0, xmmword [0x14002b0d0]
movdqa xmmword [rsp + 0x9c0], xmm0
mov dword [rsp + 0x9d0], 0x4c
mov dword [rsp + 0x9d4], 0x25
lea rcx, [rsp + 0x930]
call fcn.14001bd60
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x678], xmm0
mov qword [rsp + 0x688], rax
lea rcx, [rsp + 0x678]
call fcn.14000d930
nop
xor edx, edx
mov r8d, 0xa0
lea rcx, [rsp + 0x6c8]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x678]
mov rcx, qword [rsp + 0x678]
call fcn.1400227f0
mov rbx, rax
mov qword [rsp + 0x6c8], rax
mov r15d, 2
mov dword [rsp + 0x708], r15d
mov byte [rsp + 0x70c], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x710], xmm0
mov qword [rsp + 0x720], rax
mov dword [rsp + 0x728], eax
mov qword [rsp + 0x710], r15
lea rax, [0x14002a7e0]
mov qword [rsp + 0x758], rax
lea rax, fcn.14000c5d0
mov qword [rsp + 0x748], rax
lea rax, [rsp + 0x678]
mov qword [rsp + 0x738], rax
lea rax, [rsp + 0x730]
mov qword [rsp + 0x750], rax
lea rax, [0x14002a650]
mov qword [rsp + 0x760], rax
mov qword [rsp + 0x6d0], 0xffffffffffffffff
mov byte [rsp + 0x6d8], 0
mov qword [rsp + 0x6e0], r14
mov qword [rsp + 0x6e8], r14
test r14, r14
je 0x14001146a
mov eax, 0xffffffff
lock xadd dword [r14 + 8], eax
cmp eax, 1
jne 0x140011465
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [r14 + 0xc], eax
cmp eax, 1
jne 0x140011465
mov rax, qword [r14]
mov rcx, r14
call qword [rax + reloc.WS2_32.dll_htonl]
mov r12d, dword [rsp + 0x40]
lea rcx, [rbx + 0x50]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rbx + 0x78]
mov qword [rsp + 0x6f8], rax
mov qword [rsp + 0x700], r14
mov rax, qword [rbx + 0x78]
test rax, rax
je 0x14001149d
lea rcx, [rsp + 0x6d0]
mov qword [rax + 0x30], rcx
lea rax, [rsp + 0x6d0]
mov qword [rbx + 0x78], rax
lea rcx, [rbx + 0x50]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rdi, [0x1400332f8]
cmp qword [0x140033310], 0xf
cmova rdi, qword [0x1400332f8]
mov qword [rsp + 0x520], 0
lea rax, [0x1400320d8]
mov qword [rsp + 0x528], rax
mov dword [rsp + 0x40], r14d
lea rax, [rsp + 0x520]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x890]
mov rdx, rdi
mov ebx, 0x17
mov ecx, ebx
call fcn.14000ea70
test eax, eax
jg 0x140011520
xorps xmm6, xmm6
mov esi, r14d
jmp 0x14001152c
mov esi, dword [rsp + 0x40]
movups xmm6, xmmword [rsp + 0x890]
cmp dword [rsp + 0x520], 0
jne 0x140011544
mov r14d, 1
xor r13d, r13d
mov edi, r13d
jmp 0x14001158b
lea rax, [rsp + 0x520]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rsp + 0x518]
mov rdx, rdi
mov ecx, r15d
call fcn.14000ea70
mov edi, dword [rsp + 0x518]
test eax, eax
cmovle edi, r14d
cmp dword [rsp + 0x520], 0
jne 0x140012e7d
xorps xmm6, xmm6
xor r13d, r13d
mov esi, r13d
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x608], xmm0
mov dword [rsp + 0x618], r13d
mov ecx, 0x1a04
test r14d, r14d
jne 0x1400115d9
mov word [rsp + 0x600], r15w
call qword [sym.imp.WS2_32.dll_htons]
mov word [rsp + 0x602], ax
mov ecx, edi
call qword [sym.imp.WS2_32.dll_ntohl]
mov ecx, eax
call qword [sym.imp.WS2_32.dll_htonl]
mov dword [rsp + 0x604], eax
jmp 0x140011610
mov word [rsp + 0x600], bx
call qword [sym.imp.WS2_32.dll_htons]
mov word [rsp + 0x602], ax
mov dword [rsp + 0x604], r13d
cmp r14d, 1
jne 0x140012e97
movups xmmword [rsp + 0x608], xmm6
mov dword [rsp + 0x618], esi
lea rdx, str.Connecting_to_ShuxServices...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001bd0
lea rdx, [0x140001dc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov qword [rsp + 0x4e8], 0
lea r14, [0x1400320d8]
mov qword [rsp + 0x4f0], r14
mov rcx, qword [rsp + 0x6d0]
cmp rcx, 0xffffffffffffffff
jne 0x140011716
cmp word [rsp + 0x600], 2
cmove ebx, r15d
mov rcx, qword [rsp + 0x6c8]
add rcx, 0x28
lea rax, [rsp + 0x4e8]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 6
mov dword [rsp + 0x20], 1
mov r9d, ebx
lea r8, [rsp + 0x6d0]
lea rdx, [rsp + 0x5c0]
call fcn.14000f120
cmp dword [rax], 0
jne 0x140011700
mov dword [rsp + 0x708], ebx
mov byte [rsp + 0x70c], 0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x5c8], xmm1
mov qword [rsp + 0x5c0], 2
movups xmm0, xmmword [rsp + 0x5c0]
movups xmmword [rsp + 0x710], xmm0
unpckhpd xmm1, xmm1
movsd qword [rsp + 0x720], xmm1
mov dword [rsp + 0x728], r13d
cmp dword [rsp + 0x4e8], 0
jne 0x140012eb2
mov rcx, qword [rsp + 0x6d0]
mov eax, select
mov r8d, 0x1c
cmp word [rsp + 0x600], 2
cmove r8d, eax
lea r9, [rsp + 0x4e8]
lea rdx, [rsp + 0x600]
call fcn.14000de00
cmp dword [rsp + 0x4e8], 0
jne 0x140012ec6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x930], xmm0
movups xmmword [rsp + 0x940], xmm0
mov dword [rsp + 0x950], eax
mov dword [rsp + 0x954], 0x6a
mov dword [rsp + 0x958], 0x7e
mov dword [rsp + 0x95c], 0x51
movdqa xmm0, xmmword [0x14002b190]
movdqa xmmword [rsp + 0x960], xmm0
movdqa xmm1, xmmword [0x14002ae30]
movdqa xmmword [rsp + 0x970], xmm1
movdqa xmm0, xmmword [0x14002b010]
movdqa xmmword [rsp + 0x980], xmm0
movdqa xmm1, xmmword [0x14002aeb0]
movdqa xmmword [rsp + 0x990], xmm1
movdqa xmm0, xmmword [0x14002b280]
movdqa xmmword [rsp + 0x9a0], xmm0
movdqa xmm1, xmmword [0x14002b290]
movdqa xmmword [rsp + 0x9b0], xmm1
movdqa xmm0, xmmword [0x14002af50]
movdqa xmmword [rsp + 0x9c0], xmm0
movdqa xmm1, xmmword [0x14002b240]
movdqa xmmword [rsp + 0x9d0], xmm1
lea rcx, [rsp + 0x930]
call fcn.14001b3d0
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
xor r15d, r15d
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0xc0], r15
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r15b
jne 0x140011850
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.14000aeb0
lea rcx, [rsp + 0xa8]
call fcn.14000f670
nop
lea rcx, [rsp + 0x2e0]
call fcn.14001a7f0
mov rcx, rax
call fcn.14001a130
mov rdx, rax
lea rcx, [rsp + 0x260]
call fcn.14000a7a0
mov rcx, rax
call fcn.14000f670
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [rsp + 0x7a8], rax
lea rcx, [rsp + 0x7a8]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov ebx, dword [rax + 4]
mov eax, 0x3b
cmp ebx, eax
cmovg ebx, eax
lea rcx, [rsp + 0xb90]
call qword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileA]
lea rdx, [rsp + 0xb94]
lea rcx, [rsp + 0x260]
call fcn.14000a7a0
mov r11, rax
lea rcx, [rsp + 0x5c0]
call fcn.14001a100
mov rcx, rax
call fcn.140019fe0
mov r8, r11
mov rdx, rax
lea rcx, [rsp + 0x810]
call fcn.1400209f0
nop
lea rcx, [rsp + 0x260]
call fcn.1400030a0
lea rdx, str.SoftwareitsshuxProcessSpooferPro
lea rcx, [rsp + 0x870]
call fcn.14001fb10
nop
lea rcx, [rsp + 0x850]
call fcn.14001fd90
nop
lea rcx, [rsp + 0x870]
call fcn.14000a6e0
mov rdx, rax
lea r9, [rsp + 0x850]
lea r8, str.username
call fcn.1400238d0
lea rcx, [rsp + 0x830]
call fcn.14001fd90
nop
lea rcx, [rsp + 0x870]
call fcn.14000a6e0
mov rdx, rax
lea r9, [rsp + 0x830]
lea r8, [0x14002a170]
call fcn.1400238d0
mov rsi, qword [rsp + 0x4e0]
imul edx, ebx, 0x539
sub edx, 0x7d1
lea rcx, [rsp + 0x788]
call fcn.14000c140
mov rdi, rax
lea rdx, [rsp + 0x380]
lea rcx, [rsp + 0x830]
call fcn.14001f9f0
mov r8, qword [rax]
lea rdx, [rsp + 0x388]
lea rcx, [rsp + 0x830]
call fcn.14001fa10
mov rdx, qword [rax]
lea rcx, [rsp + 0x280]
call fcn.140020ec0
mov rbx, rax
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x850]
call fcn.14001f9f0
mov r8, qword [rax]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x850]
call fcn.14001fa10
mov rdx, qword [rax]
lea rcx, [rsp + 0x2a0]
call fcn.140020ec0
mov r10, rax
lea rcx, [rsp + 0x4c0]
call fcn.140019fb0
mov rcx, rax
call fcn.140019e50
mov r8, r10
mov rdx, rax
lea rcx, [rsp + 0x2c0]
call fcn.1400209f0
nop
lea r8, [0x140029b04]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140020800
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.140020870
nop
lea r8, [0x140029b04]
mov rdx, rax
lea rcx, [rsp + 0x460]
call fcn.140020800
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x440]
call fcn.140020870
nop
mov r8d, 1
lea rdx, [0x140029b04]
mov rcx, rax
call fcn.14000a9a0
xorps xmm0, xmm0
movups xmmword [rsp + 0x88], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x98], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x88], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x98], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], select
mov byte [rax], 0
or r12d, 0x10
mov dword [rsp + 0x40], r12d
lea r8, [rsp + 0xb94]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x420]
call fcn.140020800
nop
lea r8, [0x140029b04]
mov rdx, rax
lea rcx, [rsp + 0x4a0]
call fcn.140020800
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0x7b0]
call fcn.140020800
nop
lea rcx, [rsp + 0x4a0]
call fcn.1400030a0
nop
lea rcx, [rsp + 0x420]
call fcn.1400030a0
nop
lea rcx, [rsp + 0x88]
call fcn.1400030a0
nop
lea rcx, [rsp + 0x440]
call fcn.1400030a0
nop
lea rcx, [rsp + 0x460]
call fcn.1400030a0
nop
lea rcx, [rsp + 0xd0]
call fcn.1400030a0
nop
lea rcx, [rsp + 0x48]
call fcn.1400030a0
nop
mov rdx, qword [rsp + 0x2d8]
cmp rdx, 0xf
jbe 0x140011c0d
inc rdx
mov rcx, qword [rsp + 0x2c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011c08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011c08
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140026014
movdqa xmm0, xmmword [0x14002aac0]
movdqu xmmword [rsp + 0x2d0], xmm0
mov byte [rsp + 0x2c0], 0
mov rdx, qword [rsp + 0x2b8]
cmp rdx, 0xf
jbe 0x140011c6c
inc rdx
mov rcx, qword [rsp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011c67
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011c67
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140026014
movdqa xmm0, xmmword [0x14002aac0]
movdqu xmmword [rsp + 0x2b0], xmm0
mov byte [rsp + 0x2a0], 0
mov rdx, qword [rsp + 0x298]
cmp rdx, 0xf
jbe 0x140011ccb
inc rdx
mov rcx, qword [rsp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011cc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011cc6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140026014
movdqa xmm0, xmmword [0x14002aac0]
movdqu xmmword [rsp + 0x290], xmm0
mov byte [rsp + 0x280], 0
mov rdx, qword [rsp + 0x7a0]
cmp rdx, 0xf
jbe 0x140011d2a
inc rdx
mov rcx, qword [rsp + 0x788]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011d25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011d25
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140026014
movdqa xmm0, xmmword [0x14002aac0]
movdqu xmmword [rsp + 0x798], xmm0
mov byte [rsp + 0x788], 0
mov rcx, qword [rsp + 0x7c0]
test rcx, rcx
je 0x140011d6c
lea rax, [rsp + 0x7b0]
cmp qword [rsp + 0x7c8], 0xf
cmova rax, qword [rsp + 0x7b0]
jmp 0x140011d6f
mov rax, r15
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x180], rcx
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x6c8]
call fcn.1400211e0
lea rax, [rsp + 0xc10]
mov qword [rsp + 0x590], r15
mov qword [rsp + 0x598], r14
mov qword [rsp + 0x5c8], rax
mov dword [rsp + 0x5c0], 0x400
mov qword [rsp + 0x5d0], 0x400
lea rax, [rsp + 0x590]
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], 0
mov r9d, 1
lea r8, [rsp + 0x5c0]
movzx edx, byte [rsp + 0x6d8]
mov rcx, qword [rsp + 0x6d0]
call fcn.14000e1c0
cmp dword [rsp + 0x590], 0
jne 0x140012edb
xorps xmm0, xmm0
movups xmmword [rsp + 0x5e0], xmm0
mov qword [rsp + 0x5f0], r15
mov qword [rsp + 0x5f8], r15
mov r8, rax
lea rdx, [rsp + 0xc10]
lea rcx, [rsp + 0x5e0]
call fcn.14000aeb0
nop
xor r14b, r14b
mov byte [rsp + 0x44], r14b
mov dword [rsp + 0x7c], 0x49
mov dword [rsp + 0x80], 0x4c
mov word [rsp + 0x78], 0x6b6f
mov byte [rsp + 0x7a], r14b
lea rcx, [rsp + 0x78]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r14b
jne 0x140011e75
lea rcx, [rsp + 0x5e0]
mov rdi, qword [rsp + 0x5e0]
mov rsi, qword [rsp + 0x5f8]
cmp rsi, 0xf
cmova rcx, rdi
mov rbx, qword [rsp + 0x5f0]
cmp rbx, rax
jne 0x140011fd1
mov r8, rbx
lea rdx, [rsp + 0x78]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140011fd1
lea rcx, [rsp + 0x1e0]
call fcn.140019db0
mov rcx, rax
call fcn.140019900
mov rdx, rax
lea rcx, [rsp + 0x3a0]
call fcn.14000a7a0
mov rcx, rax
call fcn.14000f670
lea rdx, str.welcomeMsg
lea rcx, [rsp + 0x48]
call fcn.14000a7a0
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.14000f9b0
lea rdx, [0x14002a060]
mov rcx, rax
call fcn.140020ff0
movzx ebx, al
lea rcx, [rsp + 0xd0]
call fcn.1400030a0
test bl, bl
je 0x140011fb1
lea rcx, [rsp + 0x1e0]
call fcn.140018cc0
mov rcx, rax
call fcn.140018810
mov r11, rax
lea rcx, [rsp + 0x930]
call fcn.1400197a0
mov rcx, rax
call fcn.140018d60
xor r9d, r9d
mov r8, r11
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x70], rax
lea rdx, [0x14002a05c]
lea rcx, [rsp + 0x48]
call fcn.14000a7a0
mov rbx, rax
lea rdx, str.welcomeMsg
lea rcx, [rsp + 0xd0]
call fcn.14000a7a0
nop
mov rdx, rbx
mov rcx, rax
call fcn.14000fbe0
mov r14b, 1
mov byte [rsp + 0x44], r14b
mov rsi, qword [rsp + 0x5f8]
mov rbx, qword [rsp + 0x5f0]
mov rdi, qword [rsp + 0x5e0]
lea rax, [rsp + 0x5e0]
cmp rsi, 0xf
cmova rax, rdi
cmp rbx, 3
jb 0x140012172
cmp byte [rax], 0x6d
jne 0x140012001
cmp byte [rax + 1], 0x73
jne 0x140012001
cmp byte [rax + 2], 0x67
jne 0x140012001
mov eax, r15d
jmp 0x140012006
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
je 0x140012172
mov r9, rbx
mov r8d, 4
lea rdx, [rsp + 0x638]
lea rcx, [rsp + 0x5e0]
call fcn.14000a6f0
nop
lea rcx, [rsp + 0x2e0]
call fcn.1400186f0
mov rcx, rax
call fcn.1400180f0
mov rbx, rax
lea rcx, [rsp + 0x68]
call fcn.140018800
mov rcx, rax
call fcn.1400187a0
mov rdx, rax
lea r8, [rsp + 0x638]
lea rcx, [rsp + 0xd0]
call fcn.140020890
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140020800
mov rcx, rax
call fcn.140025410
nop
lea rcx, [rsp + 0xd0]
call fcn.1400030a0
nop
lea rcx, [rsp + 0x638]
call fcn.1400030a0
nop
lea rcx, [rsp + 0x5e0]
call fcn.1400030a0
nop
lea rcx, [rsp + 0x7b0]
call fcn.1400030a0
nop
lea rcx, [rsp + 0x830]
call fcn.14001fa30
nop
lea rcx, [rsp + 0x850]
call fcn.14001fa30
nop
lea rcx, [rsp + 0x870]
call fcn.14001fa30
nop
lea rcx, [rsp + 0x810]
call fcn.1400030a0
nop
lea rcx, [rsp + 0x6c8]
call fcn.140020190
nop
lea rcx, [rsp + 0x678]
call fcn.14000daf0
nop
lea rcx, [rsp + 0x7d0]
call fcn.1400030a0
nop
lea rcx, [rsp + 0x6a8]
call fcn.1400030a0
nop
lea rcx, [rsp + 0x7f0]
call fcn.14001fa30
nop
lea rcx, [rsp + 0x690]
call fcn.14001ffa0
nop
lea rcx, [rsp + 0x620]
call fcn.14001f630
nop
lea rcx, [rsp + 0x768]
call fcn.14001fa30
jmp 0x14000ff06
lea rcx, [rsp + 0x2e0]
call fcn.140017ff0
mov rcx, rax
call fcn.140017860
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14000a7a0
mov rcx, rax
call fcn.14000f670
lea rcx, [rsp + 0xf8]
call fcn.140017840
mov rcx, rax
call fcn.140017750
mov rdx, rax
lea rcx, [rsp + 0x8a0]
call fcn.14000a7a0
nop
mov r8, qword [rsp + 0x8b0]
lea rdx, [rsp + 0x8a0]
lea rcx, [rsp + 0x118]
call fcn.1400211a0
mov rdx, rax
lea rcx, [rsp + 0x6c8]
call fcn.1400211e0
mov r8d, 0x400
lea rdx, [rsp + 0xc10]
lea rcx, [rsp + 0x138]
call fcn.1400212f0
mov rdx, rax
lea rcx, [rsp + 0x6c8]
call fcn.140021310
mov rdi, rax
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov r8, rax
lea rdx, [rsp + 0xc10]
lea rcx, [rsp + 0x48]
call fcn.14001ff70
nop
mov rdx, rax
mov rcx, rbx
call fcn.140001da0
lea rdx, [0x140001dc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rsp + 0x48]
call fcn.1400030a0
mov r8, rdi
lea rdx, [rsp + 0xc10]
lea rcx, [rsp + 0x48]
call fcn.14001ff70
lea rdx, [0x140033318]
mov rcx, rax
call fcn.14000b600
movzx ebx, al
lea rcx, [rsp + 0x48]
call fcn.1400030a0
test bl, bl
jne 0x1400122d4
lea rdx, str._You_are_using_an_outdated_version_Get_the_latest_spoofer_and_try_again.___ProcessSpoofer_Pro_
lea rcx, [rsp + 0x930]
call fcn.140016ed0
mov rcx, rax
call fcn.1400160b0
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14000a7a0
mov rcx, rax
call fcn.140025410
nop
lea rcx, [rsp + 0x8a0]
jmp 0x1400120a4
lea rcx, [rsp + 0x1e0]
call fcn.140016010
mov rcx, rax
call fcn.140015b20
mov rdx, rax
lea r8, [0x140033318]
lea rcx, [rsp + 0x48]
call fcn.140020890
mov rcx, rax
call fcn.140001bc0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [rsp + 0x48]
call fcn.1400030a0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
lea rcx, [rsp + 0x8c0]
call fcn.1400234c0
nop
lea rdx, [rsp + 0x390]
lea rcx, [rsp + 0x8c0]
call fcn.14000a760
mov r8, qword [rax]
lea rdx, [rsp + 0x398]
lea rcx, [rsp + 0x8c0]
call fcn.14000a780
mov rdx, qword [rax]
lea rcx, [rsp + 0x8e8]
call fcn.140020d70
nop
lea rcx, [rsp + 0x8e8]
call fcn.14000a6e0
mov r9, rax
lea r8, str.currentPath
lea rdx, str.SoftwareitsshuxProcessSpooferPro_
call fcn.140023800
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._Info__Everything_is_running_well__spoofing__n_n
lea rcx, [rsp + 0x930]
call fcn.1400155c0
mov rcx, rax
call fcn.140014ca0
mov rdx, rax
mov rcx, rbx
call fcn.140001bd0
lea rdx, str._Info__You_can_aslo_remotely_control_spoofer_by_loggin_in_to_your_dashboard:_https:__itsshux.com_login_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001bd0
lea rdi, [0x14002a328]
mov qword [rsp + 0x198], rdi
mov qword [rsp + 0x1a0], 3
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x6c8]
call fcn.1400213b0
mov r8d, 0x539
lea rdx, [rsp + 0xc10]
lea rcx, [rsp + 0x570]
call fcn.1400212f0
mov rdx, rax
lea rcx, [rsp + 0x6c8]
call fcn.140021310
mov r8, rax
lea rdx, [rsp + 0xc10]
lea rcx, [rsp + 0x48]
call fcn.14001ff70
mov rdx, rax
lea rcx, [0x1400320f8]
call fcn.14001fee0
lea rcx, [rsp + 0x48]
call fcn.1400030a0
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [0x1400043c0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
cmp byte [0x1400332f1], 1
je 0x140012d6c
lea rsi, str.pong
nop dword [rax + rax]
test r14b, r14b
je 0x140012e54
mov r8d, 0x400
lea rdx, [rsp + 0xc10]
lea rcx, [rsp + 0x158]
call fcn.1400212f0
mov rdx, rax
lea rcx, [rsp + 0x6c8]
call fcn.140021310
mov rbx, rax
mov r8, rax
lea rdx, [rsp + 0xc10]
lea rcx, [rsp + 0x4f8]
call fcn.14001ff70
nop
lea rdx, str.ping
lea rcx, [rsp + 0x4f8]
call fcn.14001fdb0
test al, al
je 0x140012521
mov qword [rsp + 0x1b8], rsi
mov qword [rsp + 0x1c0], 4
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x6c8]
call fcn.1400214c0
mov rdx, rdi
lea rcx, [rsp + 0x4f8]
call fcn.14001fdb0
test al, al
je 0x140012bd7
lea rdx, str.Received_pcs:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001bd0
mov rcx, rax
lea rdx, [rsp + 0x4f8]
call fcn.140001da0
lea rdx, [0x140001dc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rsp + 0x4f8]
lea rcx, [0x1400320f8]
call fcn.14000b600
test al, al
jne 0x140012bd7
mov r8, rbx
lea rdx, [rsp + 0xc10]
lea rcx, [rsp + 0x48]
call fcn.14001ff70
mov rdx, rax
lea rcx, [0x1400320f8]
call fcn.14001fee0
lea rcx, [rsp + 0x48]
call fcn.1400030a0
mov dword [rsp + 0x518], r15d
mov rax, qword [0x140033368]
mov rdx, qword [0x140033360]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x140012bd7
mov rcx, r15
nop
shl rcx, 5
add rdx, rcx
lea rcx, [rsp + 0x48]
call fcn.14000a7e0
mov rcx, rax
call fcn.1400235d0
mov edx, eax
lea rcx, [rsp + 0x788]
call fcn.1400234c0
nop
lea rcx, [rsp + 0x930]
call fcn.140002320
lea r8, str.....processWeb.txt
lea rdx, [rsp + 0x788]
lea rcx, [rsp + 0xd0]
call fcn.1400206a0
nop
mov rdx, rax
lea rcx, [rsp + 0x930]
call fcn.1400135d0
nop
lea rcx, [rsp + 0xd0]
call fcn.1400030a0
mov r9, qword [rsp + 0x508]
mov r8d, 4
lea rdx, [rsp + 0x530]
lea rcx, [rsp + 0x4f8]
call fcn.14000a6f0
nop
lea rcx, [rsp + 0x570]
call fcn.14000f840
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x570], xmm1
mov qword [rsp + 0x580], r15
lea rdx, [0x14002a3a0]
lea rcx, [rsp + 0x5a0]
call fcn.14000a7a0
nop
lea rcx, [rsp + 0x550]
call fcn.140003100
nop
mov rax, qword [rsp + 0x5b8]
cmp rax, 0xf
seta byte [rsp + 0x45]
mov rdi, qword [rsp + 0x540]
mov r14, qword [rsp + 0x5b0]
mov r13, qword [rsp + 0x5a0]
mov qword [rsp + 0x4e8], r13
nop word [rax + rax]
lea rsi, [rsp + 0x5a0]
cmp rax, 0xf
cmova rsi, r13
lea r15, [rsp + 0x530]
mov rax, qword [rsp + 0x530]
mov rcx, qword [rsp + 0x548]
cmp rcx, 0xf
cmova r15, rax
cmp r14, rdi
ja 0x1400127c1
mov rax, rdi
sub rax, r14
test r14, r14
jne 0x140012747
xor r15d, r15d
mov ebx, r15d
mov rax, qword [rsp + 0x530]
jmp 0x1400127cb
lea r12, [r15 + rax]
movsx r13d, byte [rsi]
lea r8, [r12 + 1]
sub r8, r15
mov edx, r13d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400127a4
nop word [rax + rax]
mov r8, r14
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400128b0
inc rbx
lea r8, [r12 + 1]
sub r8, rbx
mov edx, r13d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140012770
mov rax, qword [rsp + 0x530]
mov rcx, qword [rsp + 0x548]
mov r12d, dword [rsp + 0x40]
mov r13, qword [rsp + 0x4e8]
mov rbx, 0xffffffffffffffff
xor r15d, r15d
cmp rbx, 0xffffffffffffffff
je 0x14001293f
xorps xmm0, xmm0
movups xmmword [rsp + 0x88], xmm0
mov qword [rsp + 0x98], r15
mov qword [rsp + 0xa0], r15
mov r8, rbx
cmp rdi, rbx
cmovb r8, rdi
lea rdx, [rsp + 0x530]
cmp rcx, 0xf
cmova rdx, rax
lea rcx, [rsp + 0x88]
call fcn.14000aeb0
or r12d, 4
mov dword [rsp + 0x40], r12d
mov rdx, qword [rsp + 0x568]
cmp rdx, 0xf
jbe 0x140012863
inc rdx
mov rcx, qword [rsp + 0x550]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001285e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012dfa
call fcn.140026014
movups xmm0, xmmword [rsp + 0x88]
movups xmmword [rsp + 0x550], xmm0
movups xmm1, xmmword [rsp + 0x98]
movups xmmword [rsp + 0x560], xmm1
mov rax, qword [rsp + 0x578]
cmp rax, qword [rsp + 0x580]
je 0x1400128d5
lea rdx, [rsp + 0x550]
mov rcx, rax
call fcn.14000a7e0
add qword [rsp + 0x578], 0x20
jmp 0x1400128ed
sub rbx, r15
mov rax, qword [rsp + 0x530]
mov rcx, qword [rsp + 0x548]
mov r12d, dword [rsp + 0x40]
mov r13, qword [rsp + 0x4e8]
jmp 0x1400127c8
lea r8, [rsp + 0x550]
mov rdx, rax
lea rcx, [rsp + 0x570]
call fcn.140022060
lea rax, [rbx + r14]
mov rdi, qword [rsp + 0x540]
cmp rdi, rax
cmovb rax, rdi
lea rcx, [rsp + 0x530]
cmp qword [rsp + 0x548], 0xf
cmova rcx, qword [rsp + 0x530]
sub rdi, rax
lea r8, [rdi + 1]
lea rdx, [rcx + rax]
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x540], rdi
mov rax, qword [rsp + 0x5b8]
jmp 0x1400126f0
mov edi, r15d
mov r8, qword [rsp + 0x578]
mov rax, r8
mov rdx, qword [rsp + 0x570]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x1400129c7
mov rcx, r15
mov rbx, r15
nop word [rax + rax]
lea rax, [rdx + rbx]
cmp qword [rax + 0x10], 0
je 0x1400129af
shl rcx, 5
add rdx, rcx
lea rcx, [rsp + 0x930]
call fcn.140001da0
lea rdx, [0x140001dc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, qword [rsp + 0x578]
mov rdx, qword [rsp + 0x570]
inc edi
add rbx, 0x20
mov rax, r8
sub rax, rdx
sar rax, 5
movsxd rcx, edi
cmp rcx, rax
jb 0x140012970
lea rcx, [rsp + 0x938]
call fcn.140003340
test rax, rax
jne 0x140012a00
mov rax, qword [rsp + 0x930]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x930]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
xor r15d, r15d
mov rdx, qword [rsp + 0x568]
cmp rdx, 0xf
jbe 0x140012a44
inc rdx
mov rcx, qword [rsp + 0x550]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012a3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012e01
call fcn.140026014
nop
cmp byte [rsp + 0x45], 0
je 0x140012a84
mov rdx, qword [rsp + 0x5b8]
inc rdx
mov rax, r13
cmp rdx, 0x1000
jb 0x140012a7b
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012e08
mov rcx, r13
call fcn.140026014
nop
lea rcx, [rsp + 0x570]
call fcn.14001f630
nop
mov rdx, qword [rsp + 0x548]
cmp rdx, 0xf
jbe 0x140012ad5
inc rdx
mov rcx, qword [rsp + 0x530]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012ad0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012e0f
call fcn.140026014
mov qword [rsp + 0x540], r15
mov qword [rsp + 0x548], 0xf
mov byte [rsp + 0x530], 0
mov rax, qword [rsp + 0x930]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x930], rax
mov rax, qword [rsp + 0x930]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x92c], edx
lea rcx, [rsp + 0x938]
call fcn.140002f20
lea rcx, [rsp + 0x940]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x9d8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x7a0]
cmp rdx, 0xf
jbe 0x140012b92
inc rdx
mov rcx, qword [rsp + 0x788]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012b8d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012e16
call fcn.140026014
mov ebx, dword [rsp + 0x518]
inc ebx
mov dword [rsp + 0x518], ebx
mov rax, qword [0x140033368]
mov rdx, qword [0x140033360]
sub rax, rdx
sar rax, 5
movsxd rcx, ebx
cmp rcx, rax
jb 0x1400125e0
movzx r14d, byte [rsp + 0x44]
lea rdi, [0x14002a328]
lea rsi, str.pong
lea rdx, str.exec
lea rcx, [rsp + 0x4f8]
call fcn.14001fdb0
test al, al
jne 0x140012d52
lea rdx, [0x14002a184]
lea rcx, [rsp + 0x4f8]
call fcn.14001fdb0
test al, al
je 0x140012ce0
lea rdx, str.Received_message:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001bd0
mov rcx, rax
lea rdx, [rsp + 0x4f8]
call fcn.140001da0
lea rdx, [0x140001dc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r9, qword [rsp + 0x508]
mov r8d, 4
lea rdx, [rsp + 0x638]
lea rcx, [rsp + 0x4f8]
call fcn.14000a6f0
nop
lea rcx, [rsp + 0x2e0]
call fcn.1400134b0
mov rcx, rax
call fcn.140012ef0
mov rbx, rax
lea rcx, [rsp + 0xc8]
call fcn.1400135c0
mov rcx, rax
call fcn.140013560
mov rdx, rax
lea r8, [rsp + 0x638]
lea rcx, [rsp + 0xd0]
call fcn.140020890
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140020800
mov rcx, rax
call fcn.140025410
nop
lea rcx, [rsp + 0xd0]
call fcn.1400030a0
nop
lea rcx, [rsp + 0x638]
call fcn.1400030a0
lea rdx, str.stop
lea rcx, [rsp + 0x4f8]
call fcn.14001fdb0
test al, al
jne 0x140012e1d
lea rdx, str.show
lea rcx, [rsp + 0x4f8]
call fcn.14001fdb0
test al, al
je 0x140012d28
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, str.hide
lea rcx, [rsp + 0x4f8]
call fcn.14001fdb0
test al, al
je 0x140012d52
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
nop
lea rcx, [rsp + 0x4f8]
call fcn.1400030a0
cmp byte [0x1400332f1], 1
jne 0x140012490
lea rcx, [rsp + 0x1e0]
call fcn.140014c00
mov rcx, rax
call fcn.1400146d0
mov rdx, rax
lea rcx, [rsp + 0x638]
call fcn.14000a7a0
nop
lea rcx, [rsp + 0x638]
call fcn.14000a750
mov r8, rax
lea rdx, [rsp + 0x638]
lea rcx, [rsp + 0x658]
call fcn.1400211a0
mov rdx, rax
lea rcx, [rsp + 0x6c8]
call fcn.1400211e0
lea rcx, [rsp + 0x930]
call fcn.1400144a0
mov rcx, rax
call fcn.140013620
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14000a7a0
mov rcx, rax
call fcn.140025410
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [rsp + 0x4f8]
call fcn.1400030a0
nop
lea rcx, [rsp + 0x8e8]
call fcn.14001fa30
nop
lea rcx, [rsp + 0x8c0]
call fcn.1400030a0
nop
lea rcx, [rsp + 0x8a0]
jmp 0x1400120a4
mov ebx, 0x989680
nop dword [rax]
add ebx, ebx
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
movsxd rcx, ebx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
jmp 0x140012e60
lea rcx, [rsp + 0x520]
call fcn.14000c080
nop
call fcn.140002130
int3
call fcn.1400021d0
nop
lea rcx, [rsp + 0x658]
call fcn.14000f5b0
lea rcx, [rsp + 0x658]
call fcn.140020b20
nop
lea rdx, str.connect
lea rcx, [rsp + 0x4e8]
call fcn.14000c0f0
lea rdx, str.connect
lea rcx, [rsp + 0x4e8]
call fcn.14000c0f0
nop
lea rdx, str.read_some
lea rcx, [rsp + 0x590]
call fcn.14000c0f0
int3