Function at 0x1400dac34
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x348]
sub rsp, 0x408
vmovaps xmmword [rax - 0x58], xmm6
vmovaps xmmword [rax - 0x68], xmm7
vmovaps xmmword [rax - 0x78], xmm8
vmovaps xmmword [rax - 0x88], xmm9
vmovaps xmmword [rax - 0x98], xmm10
vmovaps xmmword [rax - 0xa8], xmm11
vmovaps xmmword [rax - 0xb8], xmm12
vmovaps xmmword [rax - 0xc8], xmm13
vmovaps xmmword [rax - 0xd8], xmm14
vmovaps xmmword [rax - 0xe8], xmm15
vmovsd xmm0, qword [str.adRV__I_]
vmovsd qword [rbp - 0x80], xmm0
mov al, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rbp - 0x78], al
xor edi, edi
mov r8d, edi
lea r9, [rbp - 0x80]
lea esi, [rdi + 1]
mov eax, 0x29e4129f
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
add r8d, esi
add r9, rsi
cmp r8d, 9
jl 0x1400dacba
lea rcx, [rbp - 0x80]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectBeginUltra]
mov cl, sil
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsDebuggerPresent]
mov cl, sil
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsDebuggerPresent]
mov cl, sil
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsDebuggerPresent]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsProtected]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsVirtualMachinePresent]
lea rcx, [rsp + 0x60]
call fcn.1400e174c
mov ebx, 0x1000
mov rdx, qword [rsp + 0x78]
mov r15d, reloc.WS2_32.dll_ntohs
cmp rdx, r15
jbe 0x1400dad6b
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, rbx
jb 0x1400dad66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400dad66
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401df894
lea rcx, [rsp + 0x60]
call fcn.1400e187c
mov rdx, qword [rsp + 0x78]
cmp rdx, r15
jbe 0x1400dadb0
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, rbx
jb 0x1400dadab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400dadab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401df894
lea rcx, [rsp + 0x60]
call fcn.1400dd39c
mov rdx, qword [rsp + 0x78]
cmp rdx, r15
jbe 0x1400dadf5
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, rbx
jb 0x1400dadf0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400dadf0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401df894
lea rcx, [rsp + 0x60]
call fcn.1400dd4cc
mov rdx, qword [rsp + 0x78]
cmp rdx, r15
jbe 0x1400dae3a
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, rbx
jb 0x1400dae35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400dae35
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401df894
lea rcx, [rsp + 0x60]
call fcn.1400e19ac
mov rdx, qword [rsp + 0x78]
cmp rdx, r15
jbe 0x1400dae7f
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, rbx
jb 0x1400dae7a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400dae7a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401df894
lea r13, str.username
or r12, 0xffffffffffffffff
lea r14d, [r12 + 3]
vmovss xmm10, dword [0x1401ea528]
vxorps xmm9, xmm9, xmm9
vmovss xmm7, dword [0x1401ea4f4]
vmovss xmm11, dword [0x1401ea4f8]
vmovss xmm12, dword [0x1401ea670]
vmovss xmm13, dword [0x1401f278c]
vmovss xmm8, dword [0x1401ea4ec]
vmovss xmm14, dword [0x1401ea500]
vmovss xmm15, dword [0x1401f2790]
mov bl, dil
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x228]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1400daf40
lea rcx, [rbp + 0x228]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x228]
call qword [sym.imp.USER32.dll_DispatchMessageA]
movzx ebx, bl
cmp dword [rbp + 0x230], 0x12
cmove ebx, esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x228]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x1400daef4
test bl, bl
jne 0x1400dc417
call fcn.1400b5f8c
call fcn.1400b7338
call fcn.14009e56c
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, esi
jne 0x1400db704
vmovss xmm6, dword [0x1401f27ac]
vmovss dword [rbp + 0x358], xmm6
vmovss xmm0, dword [0x1401ea514]
vmovss dword [rbp + 0x35c], xmm0
lea rdx, [rbp + 0x358]
mov ecx, 4
call fcn.14009f788
xor edx, edx
lea r8d, [rdx + 3]
lea rcx, [0x1401f1428]
call fcn.14008c08c
vmovss dword [rbp + 0x360], xmm6
vmovss xmm0, dword [0x1401f2784]
vmovss dword [rbp + 0x364], xmm0
xor r9d, r9d
mov r8b, sil
lea rdx, [rbp + 0x360]
lea rcx, str.TopLine
call fcn.14008e830
lea rcx, [rbp + 0x1a8]
call fcn.140098f60
mov rbx, rax
vmovss dword [rsp + 0x20], xmm10
xor r9d, r9d
xor r8d, r8d
lea rdx, str.NEMESIS.CC
lea rcx, [rbp + 0x1b8]
call fcn.14008fed0
vmovss xmm0, dword [rbx]
vsubss xmm1, xmm0, dword [rax]
vmulss xmm6, xmm1, dword [0x1401ea480]
call fcn.140098ffc
vaddss xmm7, xmm0, xmm6
lea rcx, [rbp + 0x1c0]
call fcn.140098f60
mov rbx, rax
call fcn.14009972c
vmovss xmm1, dword [rbx + 4]
vsubss xmm0, xmm1, xmm0
vmulss xmm6, xmm0, dword [0x1401ea480]
call fcn.140099020
vaddss xmm6, xmm0, xmm6
vmovss dword [rbp + 0x368], xmm7
vmovss dword [rbp + 0x36c], xmm6
lea rcx, [rbp + 0x368]
call fcn.1400a25e0
lea rcx, str.NEMESIS.
call fcn.1400c193c
vmovups xmm0, xmmword [0x1401ee1b0]
vmovups xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.14009f6ac
vmovaps xmm1, xmm10
vmovaps xmm0, xmm9
call fcn.1400a1d1c
lea rcx, [0x1401f1744]
call fcn.1400c193c
vmovss xmm0, dword [0x1401f27a8]
vmovss dword [rbp + 0x110], xmm0
vmovss dword [rbp + 0x114], xmm6
lea rcx, [rbp + 0x110]
call fcn.1400a25e0
lea rcx, [0x1401ea438]
call fcn.1400c193c
xor ecx, ecx
call fcn.14009a72c
test al, al
jne 0x1400dc4ef
mov ecx, esi
call fcn.14009f398
call fcn.1400970b4
call fcn.140099020
vmovss xmm7, dword [0x1401ea4f4]
vaddss xmm6, xmm0, xmm7
call fcn.140098ffc
vaddss xmm1, xmm0, xmm7
vmovss dword [rbp + 0x118], xmm1
vmovss dword [rbp + 0x11c], xmm6
lea rcx, [rbp + 0x118]
call fcn.1400a25e0
lea rcx, [rbp + 0x218]
call fcn.140098f60
vmovss xmm0, dword [rax + 4]
vsubss xmm6, xmm0, xmm11
lea rcx, [rbp + 0x220]
call fcn.140098f60
vmovss xmm0, dword [rax]
vsubss xmm1, xmm0, xmm11
vmovss dword [rbp + 0x120], xmm1
vmovss dword [rbp + 0x124], xmm6
xor r9d, r9d
mov r8b, sil
lea rdx, [rbp + 0x120]
lea rcx, str.centerlogin
call fcn.14008e830
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, esi
jne 0x1400db40c
vmovaps xmm0, xmm12
call fcn.1400a29d0
vmovss dword [rbp + 0x128], xmm13
vmovss xmm0, dword [0x1401ea66c]
vmovss dword [rbp + 0x12c], xmm0
lea rcx, [rbp + 0x128]
call fcn.1400a25e0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov ebx, 0xff
mov r8d, ebx
mov rdx, r13
lea rcx, str.Username
call fcn.1400bb708
vmovaps xmm0, xmm12
call fcn.1400a29d0
call fcn.140099020
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x130], xmm13
vmovss dword [rbp + 0x134], xmm1
lea rcx, [rbp + 0x130]
call fcn.1400a25e0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8d, ebx
lea rbx, str.password
mov rdx, rbx
lea rcx, str.Password
call fcn.1400bb708
call fcn.140099020
vaddss xmm0, xmm0, xmm8
call fcn.1400a26a4
vmovaps xmm0, xmm13
call fcn.1400a2658
vmovss dword [rbp - 0x48], xmm12
vmovss dword [rbp - 0x44], xmm14
lea rdx, [rbp - 0x48]
lea rcx, str.LOGIN
call fcn.1400ba33c
test al, al
je 0x1400db387
mov cl, sil
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsDebuggerPresent]
mov eax, dword [str.xzqv9]
mov dword [rbp + 0x350], eax
movzx eax, word [0x1401f16f0]
mov word [rbp + 0x354], ax
mov r8d, edi
lea r9, [rbp + 0x350]
mov eax, 0x29e4129f
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
add r8d, esi
add r9, rsi
cmp r8d, 6
jl 0x1400db296
lea rcx, [rbp + 0x350]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectBeginUltra]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsProtected]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsVirtualMachinePresent]
call fcn.140063940
lea rax, [rbp - 0x68]
mov qword [rbp + 0x138], rax
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], rdi
mov r8, r12
inc r8
cmp byte [rbx + r8], dil
jne 0x1400db303
mov rdx, rbx
lea rcx, [rbp - 0x68]
call fcn.140083fc0
nop
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov r8, r12
inc r8
cmp byte [r8 + r13], dil
jne 0x1400db330
mov rdx, r13
lea rcx, [rsp + 0x40]
call fcn.140083fc0
nop
lea r8, [rbp - 0x68]
lea rdx, [rsp + 0x40]
lea rcx, [0x1403472f0]
call fcn.1400ffa60
call fcn.140063940
cmp byte [0x140347500], dil
je 0x1400dc476
lea rcx, [0x1403472f0]
call fcn.1400fada0
call qword [sym.imp.VMProtectSDK64.dll_VMProtectEnd]
mov dword [reloc.WS2_32.dll_accept], r14d
vmovss xmm0, dword [0x1401f27a4]
vmovss dword [rbp - 0x40], xmm0
vmovss xmm0, dword [0x1401f2798]
vmovss dword [rbp - 0x3c], xmm0
lea rcx, [rbp - 0x40]
call fcn.1400a25e0
lea rcx, str.Register
call fcn.1400c193c
vmovups xmm0, xmmword [0x1401ee1b0]
vmovups xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.14009f6ac
vmovaps xmm1, xmm10
vmovaps xmm0, xmm9
call fcn.1400a1d1c
lea rcx, str.Here
call fcn.1400c193c
xor ecx, ecx
call fcn.14009a72c
test al, al
je 0x1400db3fd
mov dword [reloc.WS2_32.dll_accept], r14d
mov ecx, esi
call fcn.14009f398
mov eax, dword [reloc.WS2_32.dll_accept]
jmp 0x1400db413
lea rbx, str.password
cmp eax, r14d
jne 0x1400db6ed
vmovaps xmm0, xmm12
call fcn.1400a29d0
vmovss dword [rbp - 0x38], xmm13
vmovss xmm0, dword [0x1401f2788]
vmovss dword [rbp - 0x34], xmm0
lea rcx, [rbp - 0x38]
call fcn.1400a25e0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8d, 0xff
mov rdx, r13
lea rcx, str.Username
call fcn.1400bb708
vmovaps xmm0, xmm12
call fcn.1400a29d0
call fcn.140099020
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp - 0x30], xmm13
vmovss dword [rbp - 0x2c], xmm1
lea rcx, [rbp - 0x30]
call fcn.1400a25e0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8d, 0xff
mov rdx, rbx
lea rcx, str.Password
call fcn.1400bb708
vmovaps xmm0, xmm12
call fcn.1400a29d0
call fcn.140099020
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp - 0x28], xmm13
vmovss dword [rbp - 0x24], xmm1
lea rcx, [rbp - 0x28]
call fcn.1400a25e0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8d, 0xff
lea rdx, [0x140237da0]
lea rcx, str.Key
call fcn.1400bb708
call fcn.140099020
vaddss xmm0, xmm0, xmm8
call fcn.1400a26a4
vmovaps xmm0, xmm13
call fcn.1400a2658
vmovss dword [rbp - 0x20], xmm12
vmovss dword [rbp - 0x1c], xmm14
lea rdx, [rbp - 0x20]
lea rcx, str.REGISTER
call fcn.1400ba33c
test al, al
je 0x1400db6ed
mov cl, sil
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsDebuggerPresent]
vmovsd xmm0, qword [str.fpqkm]
vmovsd qword [rbp - 0x74], xmm0
mov al, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rbp - 0x6c], al
mov r8d, edi
lea r9, [rbp - 0x74]
mov eax, 0x29e4129f
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
add r8d, esi
add r9, rsi
cmp r8d, 9
jl 0x1400db55a
lea rcx, [rbp - 0x74]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectBeginUltra]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsProtected]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsVirtualMachinePresent]
call fcn.140063940
call fcn.140063940
lea rax, [rbp - 0x68]
mov qword [rbp + 0x140], rax
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], r15
xor r8d, r8d
lea rdx, [0x1401e989a]
lea rcx, [rbp - 0x68]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp - 0x68], dil
lea rax, [rbp + 0x148]
mov qword [rbp + 0x138], rax
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rdi
mov qword [rbp + 0x160], rdi
mov r8, r12
lea rax, [0x140237da0]
inc r8
cmp byte [rax + r8], dil
jne 0x1400db60f
mov rdx, rax
lea rcx, [rbp + 0x148]
call fcn.140083fc0
nop
lea rax, [rbp + 0x168]
mov qword [rbp + 0x1a0], rax
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x168], xmm0
mov qword [rbp + 0x178], rdi
mov qword [rbp + 0x180], rdi
mov r8, r12
inc r8
cmp byte [rbx + r8], dil
jne 0x1400db653
mov rdx, rbx
lea rcx, [rbp + 0x168]
call fcn.140083fc0
nop
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
mov r8, r12
inc r8
cmp byte [r8 + r13], dil
jne 0x1400db683
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.140083fc0
nop
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x148]
lea r8, [rbp + 0x168]
lea rdx, [rsp + 0x60]
lea rcx, [0x1403472f0]
call fcn.140101b80
call fcn.140063940
cmp byte [0x140347500], dil
je 0x1400dc4e6
lea rcx, [0x1403472f0]
call fcn.1400fada0
mov dword [reloc.WS2_32.dll_accept], r14d
call qword [sym.imp.VMProtectSDK64.dll_VMProtectEnd]
call fcn.1400970b4
call fcn.140096fa0
mov ecx, esi
call fcn.14009f3e0
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, r14d
jne 0x1400dc300
vmovss xmm6, dword [0x1401f27b0]
vmovss dword [rbp - 0x18], xmm6
vmovss xmm0, dword [0x1401ea674]
vmovss dword [rbp - 0x14], xmm0
lea rdx, [rbp - 0x18]
mov ecx, 4
call fcn.14009f788
xor edx, edx
lea r8d, [rdx + 3]
lea rcx, str.Nemesis_Menu
call fcn.14008c08c
mov rcx, qword [0x14034b6b0]
call fcn.14009f524
vmovss dword [rbp - 0x10], xmm9
vmovss dword [rbp - 0xc], xmm9
lea rcx, [rbp - 0x10]
call fcn.1400a25e0
vmovss dword [rbp - 8], xmm6
vmovss xmm0, dword [0x1401ea668]
vmovss dword [rbp - 4], xmm0
xor r9d, r9d
mov r8b, sil
lea rdx, [rbp - 8]
lea rcx, str.NavBar
call fcn.14008e830
call fcn.140099020
vaddss xmm6, xmm0, xmm7
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp], xmm1
vmovss dword [rbp + 4], xmm6
lea rcx, [rbp]
call fcn.1400a25e0
lea rcx, str.Nemesis.
call fcn.1400c193c
vmovups xmm0, xmmword [0x1401ee1b0]
vmovups xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.14009f6ac
vmovaps xmm1, xmm10
vmovaps xmm0, xmm9
call fcn.1400a1d1c
lea rcx, [0x1401f17dc]
call fcn.1400c193c
mov ecx, esi
call fcn.14009f398
vmovaps xmm1, xmm10
vmovaps xmm0, xmm9
call fcn.1400a1d1c
cmp dword [reloc.WS2_32.dll_accept], esi
jne 0x1400db82c
vmovups xmm0, xmmword [0x1401f28e0]
vmovups xmmword [rbp + 0x1c8], xmm0
lea rdx, [rbp + 0x1c8]
jmp 0x1400db843
vmovups xmm0, xmmword [0x1401f28f0]
vmovups xmmword [rbp + 0x1d8], xmm0
lea rdx, [rbp + 0x1d8]
xor ecx, ecx
call fcn.14009f6ac
call fcn.140099020
vmovaps xmm6, xmm0
call fcn.140098ffc
vaddss xmm1, xmm0, dword [0x1401f279c]
vmovss dword [rbp + 8], xmm1
vmovss dword [rbp + 0xc], xmm6
lea rcx, [rbp + 8]
call fcn.1400a25e0
lea rcx, str.Spoofer
call fcn.1400c193c
xor ecx, ecx
call fcn.14009a72c
test al, al
je 0x1400db890
mov dword [reloc.WS2_32.dll_accept], esi
mov ecx, esi
call fcn.14009f398
vmovaps xmm1, xmm10
vmovaps xmm0, xmm9
call fcn.1400a1d1c
cmp dword [reloc.WS2_32.dll_accept], r14d
jne 0x1400db8c8
vmovups xmm0, xmmword [0x1401f28e0]
vmovups xmmword [rbp + 0x1e8], xmm0
lea rdx, [rbp + 0x1e8]
jmp 0x1400db8df
vmovups xmm0, xmmword [0x1401f28f0]
vmovups xmmword [rbp + 0x1f8], xmm0
lea rdx, [rbp + 0x1f8]
xor ecx, ecx
call fcn.14009f6ac
call fcn.140099020
vmovaps xmm6, xmm0
call fcn.140098ffc
vaddss xmm1, xmm0, xmm11
vmovss dword [rbp + 0x10], xmm1
vmovss dword [rbp + 0x14], xmm6
lea rcx, [rbp + 0x10]
call fcn.1400a25e0
lea rcx, str.Extras
call fcn.1400c193c
xor ecx, ecx
call fcn.14009a72c
test al, al
je 0x1400db92a
mov dword [reloc.WS2_32.dll_accept], r14d
mov ecx, esi
call fcn.14009f398
vmovaps xmm1, xmm10
vmovaps xmm0, xmm9
call fcn.1400a1d1c
cmp dword [reloc.WS2_32.dll_accept], 3
jne 0x1400db962
vmovups xmm0, xmmword [0x1401f28e0]
vmovups xmmword [rbp + 0x208], xmm0
lea rdx, [rbp + 0x208]
jmp 0x1400db979
vmovups xmm0, xmmword [0x1401f28f0]
vmovups xmmword [rbp + 0x188], xmm0
lea rdx, [rbp + 0x188]
xor ecx, ecx
call fcn.14009f6ac
call fcn.140099020
vmovaps xmm6, xmm0
call fcn.140098ffc
vaddss xmm1, xmm0, xmm11
vmovss dword [rbp + 0x18], xmm1
vmovss dword [rbp + 0x1c], xmm6
lea rcx, [rbp + 0x18]
call fcn.1400a25e0
lea rcx, str.Exit
call fcn.1400c193c
xor ecx, ecx
call fcn.14009a72c
test al, al
jne 0x1400dc4ef
mov ecx, esi
call fcn.14009f398
call fcn.1400970b4
call fcn.140099020
vaddss xmm0, xmm0, xmm8
call fcn.1400a26a4
call fcn.140098ffc
vaddss xmm0, xmm0, xmm8
call fcn.1400a2658
lea rcx, [rbp + 0x1b0]
call fcn.140098f60
vmovss xmm0, dword [rax + 4]
vsubss xmm1, xmm0, dword [0x1401ea660]
vmovss xmm2, dword [0x1401f2794]
vmovss dword [rbp + 0x20], xmm2
vmovss dword [rbp + 0x24], xmm1
xor r9d, r9d
mov r8b, sil
lea rdx, [rbp + 0x20]
lea rcx, str.left
call fcn.14008e830
cmp dword [reloc.WS2_32.dll_accept], esi
jne 0x1400dbad4
call fcn.140099020
vaddss xmm6, xmm0, xmm8
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x28], xmm1
vmovss dword [rbp + 0x2c], xmm6
lea rcx, [rbp + 0x28]
call fcn.1400a25e0
lea rdx, [0x1403460fd]
lea rcx, str.Permanent_Spoof
call fcn.1400bab74
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401f27a0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm11
vmovss dword [rbp + 0x30], xmm1
vmovss dword [rbp + 0x34], xmm6
lea rcx, [rbp + 0x30]
call fcn.1400a25e0
vmovss dword [rbp + 0x38], xmm15
vmovss dword [rbp + 0x3c], xmm14
lea rdx, [rbp + 0x38]
lea rcx, str.SPOOF
call fcn.1400ba33c
test al, al
je 0x1400dbad4
mov edx, 0x3e8
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.1400d293c
call fcn.1400ed638
cmp dword [reloc.WS2_32.dll_accept], r14d
jne 0x1400dbb2c
call fcn.140099020
vaddss xmm6, xmm0, xmm8
call fcn.140098ffc
vaddss xmm1, xmm0, xmm11
vmovss dword [rbp + 0x40], xmm1
vmovss dword [rbp + 0x44], xmm6
lea rcx, [rbp + 0x40]
call fcn.1400a25e0
vmovss dword [rbp + 0x48], xmm15
vmovss dword [rbp + 0x4c], xmm14
lea rdx, [rbp + 0x48]
lea rcx, str.Cleaner
call fcn.1400ba33c
test al, al
je 0x1400dbb2c
call fcn.1400cc8f8
call fcn.1400e0304
call fcn.1400970b4
vmovaps xmm1, xmm10
vmovaps xmm0, xmm9
call fcn.1400a1d1c
call fcn.140098ffc
vaddss xmm0, xmm0, xmm8
call fcn.1400a2658
lea rcx, [rbp - 0x80]
call fcn.140098f60
vmovss xmm0, dword [rax + 4]
vsubss xmm1, xmm0, dword [0x1401ea660]
vmovss xmm0, dword [0x1401f2794]
vmovss dword [rbp + 0x50], xmm0
vmovss dword [rbp + 0x54], xmm1
xor r9d, r9d
mov r8b, sil
lea rdx, [rbp + 0x50]
lea rcx, str.right
call fcn.14008e830
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, esi
jne 0x1400dbed7
call fcn.140099020
vaddss xmm6, xmm0, xmm8
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x58], xmm1
vmovss dword [rbp + 0x5c], xmm6
lea rcx, [rbp + 0x58]
call fcn.1400a25e0
vmovups xmm0, xmmword [0x1401ee1b0]
vmovups xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.14009f6ac
lea rcx, str.Disk_Serials:
call fcn.1400c193c
mov ecx, esi
call fcn.14009f398
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4d0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x60], xmm1
vmovss dword [rbp + 0x64], xmm6
lea rcx, [rbp + 0x60]
call fcn.1400a25e0
lea rcx, [0x1402deec8]
cmp qword [reloc.WS2_32.dll_ntohs], r15
cmova rcx, qword [0x1402deec8]
call fcn.1400c1e30
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4d0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x68], xmm1
vmovss dword [rbp + 0x6c], xmm6
lea rcx, [rbp + 0x68]
call fcn.1400a25e0
vmovups xmm0, xmmword [0x1401ee1b0]
vmovups xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.14009f6ac
lea rcx, str.BIOS_Serials:
call fcn.1400c193c
mov ecx, esi
call fcn.14009f398
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4d0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x70], xmm1
vmovss dword [rbp + 0x74], xmm6
lea rcx, [rbp + 0x70]
call fcn.1400a25e0
lea rcx, [0x1402deee8]
cmp qword [reloc.WS2_32.dll_ntohs], r15
cmova rcx, qword [0x1402deee8]
call fcn.1400c1e30
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4d0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x78], xmm1
vmovss dword [rbp + 0x7c], xmm6
lea rcx, [rbp + 0x78]
call fcn.1400a25e0
vmovups xmm0, xmmword [0x1401ee1b0]
vmovups xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.14009f6ac
lea rcx, str.MotherBoard:
call fcn.1400c193c
mov ecx, esi
call fcn.14009f398
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4d0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x80], xmm1
vmovss dword [rbp + 0x84], xmm6
lea rcx, [rbp + 0x80]
call fcn.1400a25e0
lea rcx, [0x1402def28]
cmp qword [reloc.WS2_32.dll_ntohs], r15
cmova rcx, qword [0x1402def28]
call fcn.1400c1e30
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4d0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x88], xmm1
vmovss dword [rbp + 0x8c], xmm6
lea rcx, [rbp + 0x88]
call fcn.1400a25e0
vmovups xmm0, xmmword [0x1401ee1b0]
vmovups xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.14009f6ac
lea rcx, str.Windows_UUID:
call fcn.1400c193c
mov ecx, esi
call fcn.14009f398
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4d0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x90], xmm1
vmovss dword [rbp + 0x94], xmm6
lea rcx, [rbp + 0x90]
call fcn.1400a25e0
lea rcx, [0x1402def08]
cmp qword [reloc.WS2_32.dll_ntohs], r15
cmova rcx, qword [0x1402def08]
call fcn.1400c1e30
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4e0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x98], xmm1
vmovss dword [rbp + 0x9c], xmm6
lea rcx, [rbp + 0x98]
call fcn.1400a25e0
vmovups xmm0, xmmword [0x1401ee1b0]
vmovups xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.14009f6ac
lea rcx, str.Windows_Identifier:
call fcn.1400c193c
mov ecx, esi
call fcn.14009f398
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4e0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xa0], xmm1
vmovss dword [rbp + 0xa4], xmm6
lea rcx, [rbp + 0xa0]
call fcn.1400a25e0
lea rcx, [0x1402def48]
cmp qword [reloc.WS2_32.dll_ntohs], r15
cmova rcx, qword [0x1402def48]
call fcn.1400c1e30
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, r14d
jne 0x1400dc2ea
call fcn.140099020
vaddss xmm6, xmm0, xmm8
call fcn.140098ffc
vaddss xmm1, xmm0, xmm11
vmovss dword [rbp + 0xa8], xmm1
vmovss dword [rbp + 0xac], xmm6
lea rcx, [rbp + 0xa8]
call fcn.1400a25e0
vmovss dword [rbp + 0xb0], xmm15
vmovss dword [rbp + 0xb4], xmm14
lea rdx, [rbp + 0xb0]
lea rcx, str.SERIAL_CHECKER
call fcn.1400ba33c
test al, al
je 0x1400dbf49
cmp byte [0x14034b6b8], dil
sete al
mov byte [0x14034b6b8], al
jmp 0x1400dbf4f
mov al, byte [0x14034b6b8]
test al, al
je 0x1400dc2ea
call fcn.140099020
vaddss xmm6, xmm0, xmm8
call fcn.140098ffc
vaddss xmm1, xmm0, xmm11
vmovss dword [rbp + 0xb8], xmm1
vmovss dword [rbp + 0xbc], xmm6
lea rcx, [rbp + 0xb8]
call fcn.1400a25e0
call fcn.140099020
vaddss xmm6, xmm0, xmm8
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xc0], xmm1
vmovss dword [rbp + 0xc4], xmm6
lea rcx, [rbp + 0xc0]
call fcn.1400a25e0
vmovups xmm0, xmmword [0x1401ee1b0]
vmovups xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.14009f6ac
lea rcx, str.Disk_Serials:
call fcn.1400c193c
mov ecx, esi
call fcn.14009f398
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4d0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xc8], xmm1
vmovss dword [rbp + 0xcc], xmm6
lea rcx, [rbp + 0xc8]
call fcn.1400a25e0
lea rcx, [0x1402deec8]
cmp qword [reloc.WS2_32.dll_ntohs], r15
cmova rcx, qword [0x1402deec8]
call fcn.1400c1e30
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4d0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xd0], xmm1
vmovss dword [rbp + 0xd4], xmm6
lea rcx, [rbp + 0xd0]
call fcn.1400a25e0
vmovups xmm0, xmmword [0x1401ee1b0]
vmovups xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.14009f6ac
lea rcx, str.BIOS_Serials:
call fcn.1400c193c
mov ecx, esi
call fcn.14009f398
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4d0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xd8], xmm1
vmovss dword [rbp + 0xdc], xmm6
lea rcx, [rbp + 0xd8]
call fcn.1400a25e0
lea rcx, [0x1402deee8]
cmp qword [reloc.WS2_32.dll_ntohs], r15
cmova rcx, qword [0x1402deee8]
call fcn.1400c1e30
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4d0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xe0], xmm1
vmovss dword [rbp + 0xe4], xmm6
lea rcx, [rbp + 0xe0]
call fcn.1400a25e0
vmovups xmm0, xmmword [0x1401ee1b0]
vmovups xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.14009f6ac
lea rcx, str.MotherBoard:
call fcn.1400c193c
mov ecx, esi
call fcn.14009f398
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4d0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xe8], xmm1
vmovss dword [rbp + 0xec], xmm6
lea rcx, [rbp + 0xe8]
call fcn.1400a25e0
lea rcx, [0x1402def28]
cmp qword [reloc.WS2_32.dll_ntohs], r15
cmova rcx, qword [0x1402def28]
call fcn.1400c1e30
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4d0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xf0], xmm1
vmovss dword [rbp + 0xf4], xmm6
lea rcx, [rbp + 0xf0]
call fcn.1400a25e0
vmovups xmm0, xmmword [0x1401ee1b0]
vmovups xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.14009f6ac
lea rcx, str.Windows_UUID:
call fcn.1400c193c
mov ecx, esi
call fcn.14009f398
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4d0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xf8], xmm1
vmovss dword [rbp + 0xfc], xmm6
lea rcx, [rbp + 0xf8]
call fcn.1400a25e0
lea rcx, [0x1402def08]
cmp qword [reloc.WS2_32.dll_ntohs], r15
cmova rcx, qword [0x1402def08]
call fcn.1400c1e30
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4e0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x100], xmm1
vmovss dword [rbp + 0x104], xmm6
lea rcx, [rbp + 0x100]
call fcn.1400a25e0
vmovups xmm0, xmmword [0x1401ee1b0]
vmovups xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.14009f6ac
lea rcx, str.Windows_Identifier:
call fcn.1400c193c
mov ecx, esi
call fcn.14009f398
call fcn.140099020
vaddss xmm6, xmm0, dword [0x1401ea4e0]
call fcn.140098ffc
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x108], xmm1
vmovss dword [rbp + 0x10c], xmm6
lea rcx, [rbp + 0x108]
call fcn.1400a25e0
lea rcx, [0x1402def48]
cmp qword [reloc.WS2_32.dll_ntohs], r15
cmova rcx, qword [0x1402def48]
call fcn.1400c1e30
call fcn.1400970b4
call fcn.14009f2a4
call fcn.140096fa0
mov ecx, esi
call fcn.14009f3e0
call fcn.1400972c8
mov rcx, qword [0x1403479e0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x1403479e0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x1403479e0]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [0x1403479e0]
mov rax, qword [rcx]
mov dword [rsp + 0x30], edi
vmovss xmm0, dword [0x1401ea4b0]
vmovss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], edi
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1403479e0]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x1400dc3b2
call fcn.14009f8e0
call fcn.140099044
mov rcx, rax
call fcn.1400b5fa4
mov rcx, qword [0x1403479e0]
mov rax, qword [rcx]
call qword [rax + 0x150]
call fcn.140099208
test dword [rax], 0x400
je 0x1400dc3cd
call fcn.1400a48fc
xor edx, edx
xor ecx, ecx
call fcn.1400a033c
mov rcx, qword [0x1403479e0]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x1400daed4
mov rcx, qword [0x1403479e0]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x1400daed4
call fcn.1400d88a8
jmp 0x1400daed4
xor al, al
lea r11, [rsp + 0x408]
vmovaps xmm6, xmmword [r11 - 0x18]
vmovaps xmm7, xmmword [r11 - 0x28]
vmovaps xmm8, xmmword [r11 - 0x38]
vmovaps xmm9, xmmword [r11 - 0x48]
vmovaps xmm10, xmmword [r11 - 0x58]
vmovaps xmm11, xmmword [r11 - 0x68]
vmovaps xmm12, xmmword [r11 - 0x78]
vmovaps xmm13, xmmword [r11 - 0x88]
vmovaps xmm14, xmmword [r11 - 0x98]
vmovaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x350]
call fcn.1400ca258
mov r9, rax
cmp byte [rax + 0x16], dil
je 0x1400dc4c1
mov r8, rax
mov eax, 0x29e4129f
mul edi
mov ecx, edi
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 5
movsx eax, cl
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, 0x34
xor byte [r8], al
add edi, esi
add r8, rsi
cmp edi, 0x17
jl 0x1400dc495
mov rdx, r9
lea rcx, [rsp + 0x60]
call fcn.140080970
mov rdx, rax
lea rcx, [0x1403472f0]
call fcn.1400ff390
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3