Function at 0x140034530
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x80
movaps xmmword [rsp + 0x70], xmm6
movups xmm0, xmmword [str.pXT__I]
movups xmmword [rbp - 0x50], xmm0
movzx eax, word [0x140132548]
mov word [rbp - 0x40], ax
xor ebx, ebx
mov edi, dword [reloc.WS2_32.dll_accept]
cmp byte [0x140132549], bl
je 0x140034703
mov r8d, ebx
cmp edi, 2
jl 0x1400346bd
movdqa xmm5, xmmword [0x140133480]
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm6, xmmword [0x1401334a0]
movdqa xmm0, xmmword [0x1401337b0]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rbp - 0x60]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400345b0
cmp r8d, 0x12
jge 0x140034703
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x12
jl 0x1400346d0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140034792
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14004d6f4
mov qword [rbp - 0x50], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_recvfrom]
movdqu xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [str.FolderChangesView]
movups xmmword [rax], xmm1
movzx ecx, byte [0x1401316c0]
mov byte [rax + 0x10], cl
mov byte [rax + 0x11], bl
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140034792
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003478d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
movsd xmm0, qword [str.DLWKYO_]
movzx eax, byte [0x140132568]
movsd qword [rbp - 0x60], xmm0
mov byte [rbp - 0x60], 0x4b
xor byte [rbp - 0x5f], 0x37
xor byte [rbp - 0x5e], 0x38
xor byte [rbp - 0x5d], 0x39
xor byte [rbp - 0x5c], 0x3a
xor byte [rbp - 0x5b], 0x3b
xor byte [rbp - 0x5a], 0x3c
xor byte [rbp - 0x59], 0x3d
xor al, 0x3e
mov byte [rbp - 0x58], al
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140034847
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_htonl]
movdqu xmmword [rbp - 0x40], xmm1
movabs rax, 0x7265706d7544734b
mov qword [rbp - 0x50], rax
mov byte [rbp - 0x48], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140034847
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034842
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
movups xmm0, xmmword [0x140132c98]
movups xmmword [rbp - 0x50], xmm0
movsd xmm0, qword [0x140132ca8]
movsd qword [rbp - 0x40], xmm0
mov eax, dword [0x140132cb0]
mov dword [rbp - 0x38], eax
movzx eax, word [0x140132cb4]
mov word [rbp - 0x34], ax
movzx eax, byte [0x140132cb6]
mov byte [rbp - 0x32], al
mov r8d, ebx
cmp edi, 2
jl 0x1400349cd
movdqa xmm5, xmmword [0x140133480]
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm6, xmmword [0x1401334a0]
movdqa xmm0, xmmword [0x1401337b0]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rbp - 0x60]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400348c0
cmp r8d, 0x1f
jge 0x140034a13
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1f
jl 0x1400349e0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140034ac1
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14004d6f4
mov rdx, rax
mov qword [rbp - 0x50], rax
movdqa xmm0, xmmword [reloc.WLDAP32.dll_Ordinal_30]
movdqu xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [str.The_Wireshark_Network_Analyzer]
movups xmmword [rax], xmm1
movsd xmm0, qword [0x1401316d8]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x1401316e0]
mov dword [rax + 0x18], ecx
movzx eax, word [0x1401316e4]
mov word [rdx + 0x1c], ax
mov byte [rdx + 0x1e], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140034ac1
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034abc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
mov eax, dword [str.v1D]
mov dword [rbp - 0x58], eax
movzx eax, word [0x14013255c]
mov word [rbp - 0x54], ax
movzx eax, byte [0x14013255e]
movsd xmm0, qword [str.fEWZ_HO]
mov byte [rbp - 0x52], al
movsd qword [rbp - 0x60], xmm0
mov r8d, ebx
cmp edi, 2
jl 0x140034bff
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm2, xmmword [0x140133480]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
mov eax, dword [0x1401337b0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.fEWZ_HO]
xorps xmm2, xmm0
movd dword [rbp - 0x60], xmm2
movdqa xmm3, xmmword [0x140133490]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x5c]
xorps xmm2, xmm1
movd dword [rbp - 0x5c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xf
jl 0x140034c10
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140034cd2
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_ntohl]
movdqu xmmword [rbp - 0x40], xmm1
movsd xmm0, qword [str.Process_Hacker]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [0x1401316f0]
mov dword [rbp - 0x48], eax
movzx eax, word [0x1401316f4]
mov word [rbp - 0x44], ax
mov byte [rbp - 0x42], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140034cd2
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034ccd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
movups xmm0, xmmword [str.fEWHON]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x140132bc8]
movups xmmword [rbp - 0x40], xmm1
mov eax, dword [0x140132bd8]
mov dword [rbp - 0x30], eax
movzx eax, byte [0x140132bdc]
mov byte [rbp - 0x2c], al
mov r8d, ebx
cmp edi, 2
jl 0x140034e4d
movdqa xmm5, xmmword [0x140133480]
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm6, xmmword [0x1401334a0]
movdqa xmm0, xmmword [0x1401337b0]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rbp - 0x60]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140034d40
cmp r8d, 0x25
jge 0x140034e93
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x25
jl 0x140034e60
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140034f31
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov ecx, Ordinal_50
call fcn.14004d6f4
mov qword [rbp - 0x50], rax
movdqa xmm0, xmmword [0x1401333f0]
movdqu xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [str.Progress_Telerik_Folder_Web_Debugger]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x140131708]
movups xmmword [rax + 0x10], xmm0
mov ecx, dword [0x140131718]
mov dword [rax + 0x20], ecx
mov byte [rax + 0x24], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140034f31
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034f2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
movsd xmm0, qword [0x140132948]
movzx eax, byte [0x140132950]
movsd qword [rbp - 0x60], xmm0
mov byte [rbp - 0x60], 0x46
xor byte [rbp - 0x5f], 0x37
xor byte [rbp - 0x5e], 0x38
xor byte [rbp - 0x5d], 0x39
xor byte [rbp - 0x5c], 0x3a
xor byte [rbp - 0x5b], 0x3b
xor byte [rbp - 0x5a], 0x3c
xor byte [rbp - 0x59], 0x3d
xor al, 0x3e
mov byte [rbp - 0x58], al
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140034fe6
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_htonl]
movdqu xmmword [rbp - 0x40], xmm1
movabs rax, 0x72656c64646e6946
mov qword [rbp - 0x50], rax
mov byte [rbp - 0x48], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140034fe6
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034fe1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
mov eax, dword [0x140132be8]
mov dword [rbp - 0x58], eax
movzx eax, word [0x140132bec]
mov word [rbp - 0x54], ax
movzx eax, byte [0x140132bee]
movsd xmm0, qword [str.gC_rhmRRYQH_t___D]
mov byte [rbp - 0x52], al
movsd qword [rbp - 0x60], xmm0
mov r8d, ebx
cmp edi, 2
jl 0x140035124
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm2, xmmword [0x140133480]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
mov eax, dword [0x1401337b0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.gC_rhmRRYQH_t___D]
xorps xmm2, xmm0
movd dword [rbp - 0x60], xmm2
movdqa xmm3, xmmword [0x140133490]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x5c]
xorps xmm2, xmm1
movd dword [rbp - 0x5c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xf
jl 0x140035130
xor edx, edx
lea rcx, [rbp - 0x60]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140035203
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14004d6f4
mov qword [rbp - 0x50], rax
movdqa xmm0, xmmword [0x1401333a0]
movdqu xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [str.Vmprotect__X64dbg__Themida_]
movups xmmword [rax], xmm1
movsd xmm0, qword [0x140131730]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x140131738]
mov dword [rax + 0x18], ecx
mov byte [rax + 0x1c], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140035203
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400351fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
movsd xmm0, qword [0x140132468]
movsd qword [rbp - 0x60], xmm0
mov eax, dword [0x140132470]
mov dword [rbp - 0x58], eax
movzx eax, word [0x140132474]
mov word [rbp - 0x54], ax
cmp byte [0x140132475], 0
je 0x140035383
mov r8d, ebx
cmp edi, 2
jl 0x140035344
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm2, xmmword [0x140133480]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
mov eax, dword [0x1401337b0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x140132468]
xorps xmm2, xmm0
movd dword [rbp - 0x60], xmm2
movdqa xmm3, xmmword [0x140133490]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x5c]
xorps xmm2, xmm1
movd dword [rbp - 0x5c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x140035350
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140035411
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_listen]
movdqu xmmword [rbp - 0x40], xmm1
movsd xmm0, qword [str.HTTP_Debugger]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [0x140131748]
mov dword [rbp - 0x48], eax
movzx eax, byte [0x14013174c]
mov byte [rbp - 0x44], al
mov byte [rbp - 0x43], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140035411
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003540c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
mov eax, dword [str.RYkIC_]
mov dword [rbp + 0x10], eax
movzx eax, word [0x140132598]
mov word [rbp + 0x14], ax
mov byte [rbp + 0x10], 0x64
xor byte [rbp + 0x11], 0x37
xor byte [rbp + 0x12], 0x38
xor byte [rbp + 0x13], 0x39
xor byte [rbp + 0x14], 0x3a
xor byte [rbp + 0x15], 0x3b
lea rdx, [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x1400354be
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_getpeername]
movdqu xmmword [rbp - 0x40], xmm1
mov eax, dword [str.dnSpy]
mov dword [rbp - 0x50], eax
movzx eax, byte [0x140131754]
mov byte [rbp - 0x4c], al
mov byte [rbp - 0x4b], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x1400354be
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400354b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
movups xmm0, xmmword [str.pXT__I]
movups xmmword [rbp - 0x50], xmm0
movzx eax, word [0x140132548]
mov word [rbp - 0x40], ax
cmp byte [0x140132549], 0
je 0x140035673
mov r8d, ebx
cmp edi, 2
jl 0x14003562d
movdqa xmm5, xmmword [0x140133480]
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm6, xmmword [0x1401334a0]
movdqa xmm0, xmmword [0x1401337b0]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rbp - 0x60]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140035520
cmp r8d, 0x12
jge 0x140035673
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x12
jl 0x140035640
xor edx, edx
lea rcx, [rbp - 0x50]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140035703
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14004d6f4
mov qword [rbp - 0x50], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_recvfrom]
movdqu xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [str.FolderChangesView]
movups xmmword [rax], xmm1
movzx ecx, byte [0x1401316c0]
mov byte [rax + 0x10], cl
mov byte [rax + 0x11], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140035703
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400356fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
mov eax, dword [str.O9]
mov dword [rbp + 0x10], eax
cmp byte [reloc.WS2_32.dll_gethostname], 0
je 0x1400357e3
cmp edi, 2
jl 0x1400357a3
movdqa xmm3, xmmword [0x140133480]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x140133b10]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x140133b10]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401337b0]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0x10], xmm2
jmp 0x1400357e3
lea r9, [rbp + 0x10]
mov r8d, ebx
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x1400357b0
lea rdx, [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140035865
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_closesocket]
movdqu xmmword [rbp - 0x40], xmm1
mov eax, dword [0x140131758]
mov word [rbp - 0x50], ax
movzx eax, byte [0x14013175a]
mov byte [rbp - 0x4e], al
mov byte [rbp - 0x4d], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140035865
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035860
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
movups xmm0, xmmword [str.u__XNeySYV._btjwF]
movups xmmword [rbp - 0x50], xmm0
movzx eax, byte [0x140132978]
mov byte [rbp - 0x40], al
mov r8d, ebx
cmp edi, 2
jl 0x1400359bf
movdqa xmm5, xmmword [0x140133480]
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm6, xmmword [0x1401334a0]
movdqa xmm0, xmmword [0x1401337b0]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rbp - 0x60]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400358b2
cmp r8d, 0x11
jge 0x140035a03
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400359d0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140035a89
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14004d6f4
mov qword [rbp - 0x50], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_recv]
movdqu xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [str.Cheat_Engine_7.2]
movups xmmword [rax], xmm1
mov byte [rax + 0x10], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140035a89
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035a84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
movups xmm0, xmmword [str.u__XNeySYV._btjtF]
movups xmmword [rbp - 0x50], xmm0
movzx eax, byte [0x1401327d0]
mov byte [rbp - 0x40], al
mov r8d, ebx
cmp edi, 2
jl 0x140035bed
movdqa xmm5, xmmword [0x140133480]
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm6, xmmword [0x1401334a0]
movdqa xmm0, xmmword [0x1401337b0]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rbp - 0x60]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140035ae0
cmp r8d, 0x11
jge 0x140035c33
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x140035c00
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140035cb9
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14004d6f4
mov qword [rbp - 0x50], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_recv]
movdqu xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [str.Cheat_Engine_7.1]
movups xmmword [rax], xmm1
mov byte [rax + 0x10], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140035cb9
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035cb4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
movups xmm0, xmmword [str.u__XNeySYV._btjuF]
movups xmmword [rbp - 0x50], xmm0
movzx eax, byte [0x1401325e0]
mov byte [rbp - 0x40], al
mov r8d, ebx
cmp edi, 2
jl 0x140035e1d
movdqa xmm5, xmmword [0x140133480]
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm6, xmmword [0x1401334a0]
movdqa xmm0, xmmword [0x1401337b0]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rbp - 0x60]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140035d10
cmp r8d, 0x11
jge 0x140035e63
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x140035e30
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140035ee9
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14004d6f4
mov qword [rbp - 0x50], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_recv]
movdqu xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [str.Cheat_Engine_7.0]
movups xmmword [rax], xmm1
mov byte [rax + 0x10], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140035ee9
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035ee4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
movups xmm0, xmmword [str.u__XNeySYV._bujF]
movups xmmword [rbp - 0x50], xmm0
movzx eax, byte [0x140132cf0]
mov byte [rbp - 0x40], al
mov r8d, ebx
cmp edi, 2
jl 0x14003604d
movdqa xmm5, xmmword [0x140133480]
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm6, xmmword [0x1401334a0]
movdqa xmm0, xmmword [0x1401337b0]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rbp - 0x60]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140035f40
cmp r8d, 0x11
jge 0x140036093
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x140036060
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140036119
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14004d6f4
mov qword [rbp - 0x50], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_recv]
movdqu xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [str.Cheat_Engine_6.9]
movups xmmword [rax], xmm1
mov byte [rax + 0x10], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140036119
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036114
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
movups xmm0, xmmword [0x140132bf0]
movups xmmword [rbp - 0x50], xmm0
movzx eax, byte [0x140132c00]
mov byte [rbp - 0x40], al
mov r8d, ebx
cmp edi, 2
jl 0x14003627d
movdqa xmm5, xmmword [0x140133480]
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm6, xmmword [0x1401334a0]
movdqa xmm0, xmmword [0x1401337b0]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rbp - 0x60]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140036170
cmp r8d, 0x11
jge 0x1400362c3
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x140036290
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140036349
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14004d6f4
mov qword [rbp - 0x50], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_recv]
movdqu xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [str.Cheat_Engine_6.8]
movups xmmword [rax], xmm1
mov byte [rax + 0x10], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140036349
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036344
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
mov eax, dword [0x140132960]
mov dword [rbp + 0x10], eax
cmp byte [reloc.WS2_32.dll_gethostname], 0
je 0x140036423
cmp edi, 2
jl 0x1400363e9
movdqa xmm3, xmmword [0x140133480]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x140133b10]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x140133b10]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401337b0]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0x10], xmm2
jmp 0x140036423
lea r9, [rbp + 0x10]
mov r8d, ebx
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x1400363f0
lea rdx, [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x1400364a5
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_closesocket]
movdqu xmmword [rbp - 0x40], xmm1
mov eax, dword [0x1401317d4]
mov word [rbp - 0x50], ax
movzx eax, byte [0x1401317d6]
mov byte [rbp - 0x4e], al
mov byte [rbp - 0x4d], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x1400364a5
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400364a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
mov rax, qword [0x140132958]
mov qword [rbp + 0x10], rax
cmp byte [0x14013295f], 0
je 0x140036603
cmp edi, 2
jl 0x1400365c6
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm2, xmmword [0x140133480]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
mov eax, dword [0x1401337b0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x10]
xorps xmm2, xmm1
movd dword [rbp + 0x10], xmm2
movdqa xmm3, xmmword [0x140133490]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x14]
xorps xmm2, xmm1
movd dword [rbp + 0x14], xmm2
jmp 0x140036603
lea r9, [rbp + 0x10]
mov r8d, ebx
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x1400365d0
lea rdx, [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140036690
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_getsockopt]
movdqu xmmword [rbp - 0x40], xmm1
mov rax, qword [str.Ida_Pro]
mov dword [rbp - 0x50], eax
movzx eax, word [0x1401317dc]
mov word [rbp - 0x4c], ax
movzx eax, byte [reloc.WS2_32.dll_WSAGetLastError]
mov byte [rbp - 0x4a], al
mov byte [rbp - 0x49], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140036690
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003668b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
mov eax, dword [0x1401327b8]
mov dword [rbp - 0x58], eax
movzx eax, byte [0x1401327bc]
movsd xmm0, qword [0x1401327b0]
mov byte [rbp - 0x54], al
movsd qword [rbp - 0x60], xmm0
mov r8d, ebx
cmp edi, 2
jl 0x1400367c3
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm2, xmmword [0x140133480]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
mov eax, dword [0x1401337b0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x1401327b0]
xorps xmm2, xmm0
movd dword [rbp - 0x60], xmm2
movdqa xmm3, xmmword [0x140133490]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x5c]
xorps xmm2, xmm1
movd dword [rbp - 0x5c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x1400367d0
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140036887
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x140133310]
movdqu xmmword [rbp - 0x40], xmm1
movsd xmm0, qword [str.Ida_Freeware]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [0x1401317e8]
mov dword [rbp - 0x48], eax
mov byte [rbp - 0x44], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140036887
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036882
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
movups xmm0, xmmword [str.cli]
movups xmmword [rbp - 0x50], xmm0
movzx eax, word [0x140132530]
mov word [rbp - 0x40], ax
cmp byte [0x140132531], 0
je 0x140036a33
mov r8d, ebx
cmp edi, 2
jl 0x1400369ef
movdqa xmm5, xmmword [0x140133480]
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm6, xmmword [0x1401334a0]
movdqa xmm0, xmmword [0x1401337b0]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rbp - 0x60]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400368e2
cmp r8d, 0x12
jge 0x140036a33
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x12
jl 0x140036a00
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140036ac3
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14004d6f4
mov qword [rbp - 0x50], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_recvfrom]
movdqu xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [str.HTTP_Debugger_Pro]
movups xmmword [rax], xmm1
movzx ecx, byte [reloc.WS2_32.dll_WSAGetLastError]
mov byte [rax + 0x10], cl
mov byte [rax + 0x11], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140036ac3
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036abe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
movsd xmm0, qword [str.fEWZ_HOu__0C]
movsd qword [rbp - 0x60], xmm0
mov eax, dword [0x1401325c8]
mov dword [rbp - 0x58], eax
movzx eax, word [0x1401325cc]
mov word [rbp - 0x54], ax
cmp byte [0x1401325cd], 0
je 0x140036c43
mov r8d, ebx
cmp edi, 2
jl 0x140036c04
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm2, xmmword [0x140133480]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
mov eax, dword [0x1401337b0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.fEWZ_HOu__0C]
xorps xmm2, xmm0
movd dword [rbp - 0x60], xmm2
movdqa xmm3, xmmword [0x140133490]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x5c]
xorps xmm2, xmm1
movd dword [rbp - 0x5c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x140036c10
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140036cd1
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_listen]
movdqu xmmword [rbp - 0x40], xmm1
movsd xmm0, qword [str.ProcessHacker]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [0x140131810]
mov dword [rbp - 0x48], eax
movzx eax, byte [0x140131814]
mov byte [rbp - 0x44], al
mov byte [rbp - 0x43], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140036cd1
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036ccc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
movups xmm0, xmmword [0x140132c80]
movups xmmword [rbp - 0x50], xmm0
movzx eax, byte [0x140132c90]
mov byte [rbp - 0x40], al
mov r8d, ebx
cmp edi, 2
jl 0x140036e2d
movdqa xmm5, xmmword [0x140133480]
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm6, xmmword [0x1401334a0]
movdqa xmm0, xmmword [0x1401337b0]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rbp - 0x60]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140036d20
cmp r8d, 0x11
jge 0x140036e73
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x140036e40
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140036ef9
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14004d6f4
mov qword [rbp - 0x50], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_recv]
movdqu xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [str.Process_Hacker_2]
movups xmmword [rax], xmm1
mov byte [rax + 0x10], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140036ef9
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036ef4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
mov rax, qword [str.y_T_Y_RRZL_YO_]
mov qword [rbp + 0x10], rax
cmp byte [0x140132a8f], 0
je 0x140037063
cmp edi, 2
jl 0x14003701a
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm2, xmmword [0x140133480]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
mov eax, dword [0x1401337b0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x10]
xorps xmm2, xmm1
movd dword [rbp + 0x10], xmm2
movdqa xmm3, xmmword [0x140133490]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401334a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x14]
xorps xmm2, xmm1
movd dword [rbp + 0x14], xmm2
jmp 0x140037063
lea r9, [rbp + 0x10]
mov r8d, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140037030
lea rdx, [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x1400370f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_getsockopt]
movdqu xmmword [rbp - 0x40], xmm1
mov rax, qword [str.OllyDbg]
mov dword [rbp - 0x50], eax
movzx eax, word [0x140131834]
mov word [rbp - 0x4c], ax
movzx eax, byte [0x140131836]
mov byte [rbp - 0x4a], al
mov byte [rbp - 0x49], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x1400370f0
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400370eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037346
call fcn.14004d314
movups xmm0, xmmword [0x140132ac0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x140132ad0]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [0x140132ae0]
movups xmmword [rbp - 0x30], xmm0
movsd xmm0, qword [0x140132af0]
movsd qword [rbp - 0x20], xmm0
cmp edi, 2
jl 0x140037258
movdqa xmm5, xmmword [0x140133480]
movdqa xmm4, xmmword [0x140133b10]
movdqa xmm6, xmmword [0x1401334a0]
movdqa xmm0, xmmword [0x1401337b0]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rbp - 0x60]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401334d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add ebx, 8
lea rcx, [rcx + 8]
cmp ebx, 0x38
jl 0x140037153
jmp 0x14003728e
lea r8, [rbp - 0x50]
nop dword [rax]
mov eax, 0x8fb823ef
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, bl
sub al, cl
add al, 0x36
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x38
jl 0x140037260
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140037352
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov ecx, 0x40
call fcn.14004d6f4
mov rcx, rax
mov qword [rbp - 0x50], rax
movdqa xmm0, xmmword [0x140133410]
movdqu xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [str.Detect_It_Easy_v3.07__Windows_10_Version_2009___x86_64_]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x140131848]
movups xmmword [rax + 0x10], xmm0
movups xmm1, xmmword [0x140131858]
movups xmmword [rax + 0x20], xmm1
mov eax, dword [0x140131868]
mov dword [rcx + 0x30], eax
movzx eax, word [0x14013186c]
mov word [rcx + 0x34], ax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_41]
mov byte [rcx + 0x36], al
mov byte [rcx + 0x37], 0
lea rcx, [rbp - 0x50]
call fcn.140031ef0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140037352
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003734d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003734d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004d314
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [rsp + 0x70]
mov rsp, r11
pop rbp
ret