Function at 0x1400d2500
Capabilities:
Enumerate gui resources

Disassembly:
push rbp
lea rbp, [rsp - 0x16a0]
mov eax, 0x17a0
call fcn.140136990
sub rsp, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x30], xmm1
mov r8d, ntohl
lea rdx, str.ollydbg.exe
lea rcx, [rsp + 0x20]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x50], xmm1
mov r8d, 7
lea rdx, str.ida.exe
lea rcx, [rsp + 0x40]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x70], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.CFF_Explorer.exe
lea rcx, [rsp + 0x60]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x70], xmm1
mov r8d, 9
lea rdx, str.ida64.exe
lea rcx, [rbp - 0x80]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x50], xmm1
mov r8d, 8
lea rdx, str.idag.exe
lea rcx, [rbp - 0x60]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x30], xmm1
mov r8d, 0xa
lea rdx, str.idag64.exe
lea rcx, [rbp - 0x40]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.KsDumperClient.exe
lea rcx, [rbp - 0x20]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x10], xmm1
mov r8d, 8
lea rdx, str.idaw.exe
lea rcx, [rbp]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x30], xmm1
mov r8d, 0xa
lea rdx, str.idaw64.exe
lea rcx, [rbp + 0x20]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x50], xmm1
mov r8d, 8
lea rdx, str.idaq.exe
lea rcx, [rbp + 0x40]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x70], xmm1
mov r8d, 0xa
lea rdx, str.idaq64.exe
lea rcx, [rbp + 0x60]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x90], xmm1
mov r8d, 8
lea rdx, str.idau.exe
lea rcx, [rbp + 0x80]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xb0], xmm1
mov r8d, 0xa
lea rdx, str.idau64.exe
lea rcx, [rbp + 0xa0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xd0], xmm1
mov r8d, 0xa
lea rdx, str.scylla.exe
lea rcx, [rbp + 0xc0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xf0], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.scylla_x64.exe
lea rcx, [rbp + 0xe0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x110], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.scylla_x86.exe
lea rcx, [rbp + 0x100]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x130], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.protection_id.exe
lea rcx, [rbp + 0x120]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x150], xmm1
mov r8d, 0xa
lea rdx, str.x64dbg.exe
lea rcx, [rbp + 0x140]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x170], xmm1
mov r8d, 9
lea rdx, str.dnSpy.exe
lea rcx, [rbp + 0x160]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x190], xmm1
mov r8d, 0xa
lea rdx, str.x32dbg.exe
lea rcx, [rbp + 0x180]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1b0], xmm1
mov r8d, 0xa
lea rdx, str.windbg.exe
lea rcx, [rbp + 0x1a0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1d0], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.reshacker.exe
lea rcx, [rbp + 0x1c0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1f0], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.ImportREC.exe
lea rcx, [rbp + 0x1e0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x210], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.IMMUNITYDEBUGGER.exe
lea rcx, [rbp + 0x200]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x230], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.MegaDumper.exe
lea rcx, [rbp + 0x220]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x250], xmm1
mov r8d, ntohl
lea rdx, str.ollydbg.exe
lea rcx, [rbp + 0x240]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x260], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x270], xmm1
mov r8d, 7
lea rdx, str.ida.exe
lea rcx, [rbp + 0x260]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x280], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x290], xmm1
mov r8d, 9
lea rdx, str.ida64.exe
lea rcx, [rbp + 0x280]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2b0], xmm1
mov r8d, 8
lea rdx, str.idag.exe
lea rcx, [rbp + 0x2a0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2d0], xmm1
mov r8d, 0xa
lea rdx, str.idag64.exe
lea rcx, [rbp + 0x2c0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2f0], xmm1
mov r8d, 8
lea rdx, str.idaw.exe
lea rcx, [rbp + 0x2e0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x300], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x310], xmm1
mov r8d, 0xa
lea rdx, str.idaw64.exe
lea rcx, [rbp + 0x300]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x320], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x330], xmm1
mov r8d, 8
lea rdx, str.idaq.exe
lea rcx, [rbp + 0x320]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x340], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x350], xmm1
mov r8d, 0xa
lea rdx, str.idaq64.exe
lea rcx, [rbp + 0x340]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x360], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x370], xmm1
mov r8d, 8
lea rdx, str.idau.exe
lea rcx, [rbp + 0x360]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x380], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x390], xmm1
mov r8d, 0xa
lea rdx, str.idau64.exe
lea rcx, [rbp + 0x380]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x3b0], xmm1
mov r8d, 0xa
lea rdx, str.scylla.exe
lea rcx, [rbp + 0x3a0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x3d0], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.scylla_x64.exe
lea rcx, [rbp + 0x3c0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x3f0], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.scylla_x86.exe
lea rcx, [rbp + 0x3e0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x400], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x410], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.protection_id.exe
lea rcx, [rbp + 0x400]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x420], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x430], xmm1
mov r8d, 0xa
lea rdx, str.x64dbg.exe
lea rcx, [rbp + 0x420]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x440], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x450], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.SimpleAssemblyExplorer.exe
lea rcx, [rbp + 0x440]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x460], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x470], xmm1
mov r8d, 0xa
lea rdx, str.x32dbg.exe
lea rcx, [rbp + 0x460]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x480], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x490], xmm1
mov r8d, 0xa
lea rdx, str.windbg.exe
lea rcx, [rbp + 0x480]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x4b0], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.reshacker.exe
lea rcx, [rbp + 0x4a0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x4d0], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.ImportREC.exe
lea rcx, [rbp + 0x4c0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x4f0], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.IMMUNITYDEBUGGER.exe
lea rcx, [rbp + 0x4e0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x500], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x510], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.MegaDumper.exe
lea rcx, [rbp + 0x500]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x520], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x530], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.HTTPDebuggerUI.exe
lea rcx, [rbp + 0x520]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x540], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x550], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.HTTPDebuggerSvc.exe
lea rcx, [rbp + 0x540]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x560], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x570], xmm1
mov r8d, 0xa
lea rdx, str.Dumper.exe
lea rcx, [rbp + 0x560]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x580], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x590], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Reflector.exe
lea rcx, [rbp + 0x580]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x5a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x5b0], xmm1
mov r8d, 9
lea rdx, str.dnSpy.exe
lea rcx, [rbp + 0x5a0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x5c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x5d0], xmm1
mov r8d, ntohl
lea rdx, str.PETools.exe
lea rcx, [rbp + 0x5c0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x5e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x5f0], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.dnSpy_x86.exe
lea rcx, [rbp + 0x5e0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x600], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x610], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.procexp64.exe
lea rcx, [rbp + 0x600]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x620], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x630], xmm1
mov r8d, 0xa
lea rdx, str.x96dbg.exe
lea rcx, [rbp + 0x620]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x640], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x650], xmm1
mov r8d, 9
lea rdx, str.NLSvc.exe
lea rcx, [rbp + 0x640]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x660], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x670], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.NLClientApp.exe
lea rcx, [rbp + 0x660]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x680], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x690], xmm1
mov r8d, ntohl
lea rdx, str.Fiddler.exe
lea rcx, [rbp + 0x680]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x6a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x6b0], xmm1
mov r8d, 9
lea rdx, str.ILSpy.exe
lea rcx, [rbp + 0x6a0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x6c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x6d0], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.ProcessHacker.exe
lea rcx, [rbp + 0x6c0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x6e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x6f0], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Process_Hacker.exe
lea rcx, [rbp + 0x6e0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x700], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x710], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.HttpAnalyzerStdV7.exe
lea rcx, [rbp + 0x700]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x720], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x730], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.netFilterService.exe
lea rcx, [rbp + 0x720]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x740], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x750], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.cheatengine_x86_64.exe
lea rcx, [rbp + 0x740]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x760], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x770], xmm1
mov r8d, ntohl
lea rdx, str.OLLYDBG.exe
lea rcx, [rbp + 0x760]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x780], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x790], xmm1
mov r8d, 7
lea rdx, str.ida.exe
lea rcx, [rbp + 0x780]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x7a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x7b0], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.disassembly.exe
lea rcx, [rbp + 0x7a0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x7c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x7d0], xmm1
mov r8d, 0xa
lea rdx, str.scylla.exe
lea rcx, [rbp + 0x7c0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x7e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x7f0], xmm1
mov r8d, 9
lea rdx, str.Debug.exe
lea rcx, [rbp + 0x7e0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x800], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x810], xmm1
mov r8d, 0xa
lea rdx, str.memory.exe
lea rcx, [rbp + 0x800]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x820], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x830], xmm1
mov r8d, 8
lea rdx, str._CPU.exe
lea rcx, [rbp + 0x820]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x840], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x850], xmm1
mov r8d, ntohl
lea rdx, str.Immunity.exe
lea rcx, [rbp + 0x840]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x860], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x870], xmm1
mov r8d, 0xa
lea rdx, str.WinDbg.exe
lea rcx, [rbp + 0x860]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x880], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x890], xmm1
mov r8d, Ordinal_26
lea rdx, str.Import_reconstructor.exe
lea rcx, [rbp + 0x880]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x8a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x8b0], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.MegaDumper.exe
lea rcx, [rbp + 0x8a0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x8c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x8d0], xmm1
mov r8d, Ordinal_41
lea rdx, str.MegaDumper_1.0_by_CodeCracker___SnD.exe
lea rcx, [rbp + 0x8c0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x8e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x8f0], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.procmon64.exe
lea rcx, [rbp + 0x8e0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x900], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x910], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Procmon64.exe
lea rcx, [rbp + 0x900]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x920], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x930], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.codecracker.exe
lea rcx, [rbp + 0x920]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x940], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x950], xmm1
mov r8d, 0xa
lea rdx, str.x96dbg.exe
lea rcx, [rbp + 0x940]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x960], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x970], xmm1
mov r8d, 9
lea rdx, str.pizza.exe
lea rcx, [rbp + 0x960]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x980], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x990], xmm1
mov r8d, 9
lea rdx, str.peppe.exe
lea rcx, [rbp + 0x980]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x9a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x9b0], xmm1
mov r8d, ntohl
lea rdx, str.reverse.exe
lea rcx, [rbp + 0x9a0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x9c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x9d0], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.dnSpy_v6.1.2.exe
lea rcx, [rbp + 0x9c0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x9e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x9f0], xmm1
mov r8d, ntohl
lea rdx, str.reversal.exe
lea rcx, [rbp + 0x9e0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa00], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xa10], xmm1
mov r8d, 0xa
lea rdx, str.de4dot.exe
lea rcx, [rbp + 0xa00]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xa30], xmm1
mov r8d, 0xa
lea rdx, str.pc_ret.exe
lea rcx, [rbp + 0xa20]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa40], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xa50], xmm1
mov r8d, 9
lea rdx, str.crack.exe
lea rcx, [rbp + 0xa40]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa60], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xa70], xmm1
mov r8d, 9
lea rdx, str.ILSpy.exe
lea rcx, [rbp + 0xa60]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa80], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xa90], xmm1
mov r8d, 0xa
lea rdx, str.x32dbg.exe
lea rcx, [rbp + 0xa80]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xaa0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xab0], xmm1
mov r8d, ntohl
lea rdx, str.sharpod.exe
lea rcx, [rbp + 0xaa0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xac0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xad0], xmm1
mov r8d, 0xa
lea rdx, str.x64dbg.exe
lea rcx, [rbp + 0xac0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xae0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xaf0], xmm1
mov r8d, ntohl
lea rdx, str.x32_dbg.exe
lea rcx, [rbp + 0xae0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb00], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xb10], xmm1
mov r8d, ntohl
lea rdx, str.x64_dbg.exe
lea rcx, [rbp + 0xb00]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xb30], xmm1
mov r8d, 9
lea rdx, str.debug.exe
lea rcx, [rbp + 0xb20]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb40], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xb50], xmm1
mov r8d, 7
lea rdx, str.dbg.exe
lea rcx, [rbp + 0xb40]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb60], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xb70], xmm1
mov r8d, ntohl
lea rdx, str.strongod.exe
lea rcx, [rbp + 0xb60]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb80], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xb90], xmm1
mov r8d, ntohl
lea rdx, str.PhantOm.exe
lea rcx, [rbp + 0xb80]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xba0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xbb0], xmm1
mov r8d, 8
lea rdx, str.idaw.exe
lea rcx, [rbp + 0xba0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xbc0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xbd0], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.titanHide.exe
lea rcx, [rbp + 0xbc0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xbe0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xbf0], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.scyllaHide.exe
lea rcx, [rbp + 0xbe0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc00], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xc10], xmm1
mov r8d, 9
lea rdx, str.ilspy.exe
lea rcx, [rbp + 0xc00]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xc30], xmm1
mov r8d, ntohl
lea rdx, str.graywolf.exe
lea rcx, [rbp + 0xc20]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc40], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xc50], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.simpleassemblyexplorer.exe
lea rcx, [rbp + 0xc40]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc60], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xc70], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.MegaDumper.exe
lea rcx, [rbp + 0xc60]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc80], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xc90], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.megadumper.exe
lea rcx, [rbp + 0xc80]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xca0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xcb0], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.X64NetDumper.exe
lea rcx, [rbp + 0xca0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xcc0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xcd0], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.x64netdumper.exe
lea rcx, [rbp + 0xcc0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xce0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xcf0], xmm1
mov r8d, 7
lea rdx, str.HxD.exe
lea rcx, [rbp + 0xce0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd00], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xd10], xmm1
mov r8d, 7
lea rdx, str.hxd.exe
lea rcx, [rbp + 0xd00]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xd30], xmm1
mov r8d, ntohl
lea rdx, str.PETools.exe
lea rcx, [rbp + 0xd20]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd40], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xd50], xmm1
mov r8d, ntohl
lea rdx, str.petools.exe
lea rcx, [rbp + 0xd40]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd60], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xd70], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.Protection_ID.exe
lea rcx, [rbp + 0xd60]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd80], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xd90], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.protection_id.exe
lea rcx, [rbp + 0xd80]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xda0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xdb0], xmm1
mov r8d, 7
lea rdx, str.die.exe
lea rcx, [rbp + 0xda0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xdc0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xdd0], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.process_hacker_2.exe
lea rcx, [rbp + 0xdc0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xde0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xdf0], xmm1
mov r8d, ntohl
lea rdx, str.process.exe
lea rcx, [rbp + 0xde0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe00], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xe10], xmm1
mov r8d, 0xa
lea rdx, str.hacker.exe
lea rcx, [rbp + 0xe00]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xe30], xmm1
mov r8d, ntohl
lea rdx, str.ollydbg.exe
lea rcx, [rbp + 0xe20]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe40], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xe50], xmm1
mov r8d, 0xa
lea rdx, str.x32dbg.exe
lea rcx, [rbp + 0xe40]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe60], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xe70], xmm1
mov r8d, 0xa
lea rdx, str.x64dbg.exe
lea rcx, [rbp + 0xe60]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe80], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xe90], xmm1
mov r8d, 9
lea rdx, str.ida__.exe
lea rcx, [rbp + 0xe80]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xea0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xeb0], xmm1
mov r8d, ntohl
lea rdx, str.charles.exe
lea rcx, [rbp + 0xea0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xec0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xed0], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.MSIAfterburner.exe
lea rcx, [rbp + 0xec0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xee0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xef0], xmm1
mov r8d, 8
lea rdx, str.RTSS.exe
lea rcx, [rbp + 0xee0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf00], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xf10], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.RTSSHooksLoader64.exe
lea rcx, [rbp + 0xf00]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xf30], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.RTSSHooksLoader.exe
lea rcx, [rbp + 0xf20]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf40], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xf50], xmm1
mov r8d, 9
lea rdx, str.dnspy.exe
lea rcx, [rbp + 0xf40]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf60], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xf70], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.simpleassembly.exe
lea rcx, [rbp + 0xf60]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf80], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xf90], xmm1
mov r8d, 8
lea rdx, str.peek.exe
lea rcx, [rbp + 0xf80]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xfa0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xfb0], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.httpanalyzer.exe
lea rcx, [rbp + 0xfa0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xfc0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xfd0], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.httpdebug.exe
lea rcx, [rbp + 0xfc0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xfe0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xff0], xmm1
mov r8d, ntohl
lea rdx, str.fiddler.exe
lea rcx, [rbp + 0xfe0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1000], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1010], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.wireshark.exe
lea rcx, [rbp + 0x1000]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1020], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1030], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.proxifier.exe
lea rcx, [rbp + 0x1020]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1040], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1050], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.mitmproxy.exe
lea rcx, [rbp + 0x1040]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1060], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1070], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.process_hacker.exe
lea rcx, [rbp + 0x1060]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1080], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1090], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.process_monitor.exe
lea rcx, [rbp + 0x1080]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x10a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x10b0], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.process_hacker_2.exe
lea rcx, [rbp + 0x10a0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x10c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x10d0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.system_explorer.exe
lea rcx, [rbp + 0x10c0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x10e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x10f0], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.systemexplorer.exe
lea rcx, [rbp + 0x10e0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1100], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1110], xmm1
mov r8d, Ordinal_26
lea rdx, str.systemexplorerservice.exe
lea rcx, [rbp + 0x1100]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1120], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1130], xmm1
mov r8d, ntohl
lea rdx, str.WPE_PRO.exe
lea rcx, [rbp + 0x1120]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1140], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1150], xmm1
mov r8d, 0xa
lea rdx, str.ghidra.exe
lea rcx, [rbp + 0x1140]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1160], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1170], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.folderchangesview.exe
lea rcx, [rbp + 0x1160]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1180], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1190], xmm1
mov r8d, 0xa
lea rdx, str.pc_ret.exe
lea rcx, [rbp + 0x1180]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x11a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x11b0], xmm1
mov r8d, 0xa
lea rdx, str.folder.exe
lea rcx, [rbp + 0x11a0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x11c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x11d0], xmm1
mov r8d, 8
lea rdx, str.dump.exe
lea rcx, [rbp + 0x11c0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x11e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x11f0], xmm1
mov r8d, 9
lea rdx, str.proxy.exe
lea rcx, [rbp + 0x11e0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1200], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1210], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.de4dotmodded.exe
lea rcx, [rbp + 0x1200]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1220], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1230], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.StringDecryptor.exe
lea rcx, [rbp + 0x1220]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1240], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1250], xmm1
mov r8d, 0xa
lea rdx, str.Centos.exe
lea rcx, [rbp + 0x1240]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1260], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1270], xmm1
mov r8d, 7
lea rdx, str.SAE.exe
lea rcx, [rbp + 0x1260]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1280], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1290], xmm1
mov r8d, ntohl
lea rdx, str.monitor.exe
lea rcx, [rbp + 0x1280]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x12a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x12b0], xmm1
mov r8d, 9
lea rdx, str.brute.exe
lea rcx, [rbp + 0x12a0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x12c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x12d0], xmm1
mov r8d, ntohl
lea rdx, str.checker.exe
lea rcx, [rbp + 0x12c0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x12e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x12f0], xmm1
mov r8d, 7
lea rdx, str.zed.exe
lea rcx, [rbp + 0x12e0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1300], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1310], xmm1
mov r8d, ntohl
lea rdx, str.sniffer.exe
lea rcx, [rbp + 0x1300]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1320], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1330], xmm1
mov r8d, 8
lea rdx, str.http.exe
lea rcx, [rbp + 0x1320]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1340], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1350], xmm1
mov r8d, ntohl
lea rdx, str.debugger.exe
lea rcx, [rbp + 0x1340]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1360], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1370], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.SimpleAssemblyExplorer.exe
lea rcx, [rbp + 0x1360]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1380], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1390], xmm1
mov r8d, 9
lea rdx, str.james.exe
lea rcx, [rbp + 0x1380]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x13a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x13b0], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.exeinfope.exe
lea rcx, [rbp + 0x13a0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x13c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x13d0], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.codecracker.exe
lea rcx, [rbp + 0x13c0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x13e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x13f0], xmm1
mov r8d, 0xa
lea rdx, str.x32dbg.exe
lea rcx, [rbp + 0x13e0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1400], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1410], xmm1
mov r8d, 0xa
lea rdx, str.x64dbg.exe
lea rcx, [rbp + 0x1400]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1420], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1430], xmm1
mov r8d, ntohl
lea rdx, str.ollydbg.exe
lea rcx, [rbp + 0x1420]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1440], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1450], xmm1
mov r8d, 9
lea rdx, str.ida__.exe
lea rcx, [rbp + 0x1440]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1460], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1470], xmm1
mov r8d, ntohl
lea rdx, str.charles.exe
lea rcx, [rbp + 0x1460]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1480], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1490], xmm1
mov r8d, 9
lea rdx, str.dnspy.exe
lea rcx, [rbp + 0x1480]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x14a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x14b0], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.simpleassembly.exe
lea rcx, [rbp + 0x14a0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x14c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x14d0], xmm1
mov r8d, 8
lea rdx, str.peek.exe
lea rcx, [rbp + 0x14c0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x14e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x14f0], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.SpyShelter.exe
lea rcx, [rbp + 0x14e0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1500], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1510], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.httpanalyzer.exe
lea rcx, [rbp + 0x1500]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1520], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1530], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.httpdebug.exe
lea rcx, [rbp + 0x1520]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1540], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1550], xmm1
mov r8d, ntohl
lea rdx, str.fiddler.exe
lea rcx, [rbp + 0x1540]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1560], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1570], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.wireshark.exe
lea rcx, [rbp + 0x1560]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1580], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1590], xmm1
mov r8d, 7
lea rdx, str.dbx.exe
lea rcx, [rbp + 0x1580]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x15a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x15b0], xmm1
mov r8d, 8
lea rdx, str.mdbg.exe
lea rcx, [rbp + 0x15a0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x15c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x15d0], xmm1
mov r8d, 7
lea rdx, str.gdb.exe
lea rcx, [rbp + 0x15c0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x15e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x15f0], xmm1
mov r8d, 0xa
lea rdx, str.windbg.exe
lea rcx, [rbp + 0x15e0]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1600], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1610], xmm1
mov r8d, 0xa
lea rdx, str.dbgclr.exe
lea rcx, [rbp + 0x1600]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1620], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1630], xmm1
mov r8d, 7
lea rdx, str.kdb.exe
lea rcx, [rbp + 0x1620]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1640], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1650], xmm1
mov r8d, 8
lea rdx, str.kgdb.exe
lea rcx, [rbp + 0x1640]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1660], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1670], xmm1
mov r8d, 7
lea rdx, str.mdb.exe
lea rcx, [rbp + 0x1660]
call fcn.1400413c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1680], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1690], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.SpyTheSpy.exe
lea rcx, [rbp + 0x1680]
call fcn.1400413c0
nop
lea rcx, [0x1401e6920]
call fcn.1400d8de0
lea r8, [rbp + 0x16a0]
lea rdx, [rsp + 0x20]
lea rcx, [0x1401e6920]
call fcn.1400c7660
nop
lea r9, [fcn.140048680]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 0xbc
lea rcx, [rsp + 0x20]
call fcn.140135ff8
lea rcx, [0x1401e6960]
call fcn.1400d8de0
xor r8d, r8d
xor edx, edx
lea rcx, [0x1401e6960]
call fcn.1400c7660
lea rdx, [0x1401e6960]
lea rcx, [0x1400c5160]
add rsp, 0x17a0
pop rbp
jmp qword [sym.imp.USER32.dll_EnumWindows]