Function at 0x14000aad0
Capabilities:
Encode data using xor
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0xb0
mov rax, qword [0x1401fc340]
xor rax, rsp
mov qword [rsp + 0xa0], rax
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_1]
lea rcx, str.mode_100_30
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.leetspoofer_Spoofer_Loader_V_2.0
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea rdx, str._n___________________________________________________________________n_________________________________________________________________n_____________________________________________________________n____________________________________________________________n____________________________________________n__________________________________________________________n_________________________________________________________________n_n_____________https:__discord.gg_leetspoofer_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
lea rdx, [0x14000de50]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140005990
lea rdx, str.Preparing.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
lea rcx, [rsp + 0x20]
call fcn.140003840
movabs rdi, 0x7ffffffff1194d7f
mov rax, qword [rsp + 0x20]
movabs rbx, 0x7fffffffffffffff
cmp rax, rdi
jge 0x14000ab84
add rax, 0xee6b280
mov qword [rsp + 0x20], rax
jmp 0x14000ab89
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x20]
call fcn.1400106a0
lea rdx, reloc.WS2_32.dll_listen
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
call fcn.140005990
lea rdx, str.Preparing..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
lea rcx, [rsp + 0x20]
call fcn.140003840
mov rax, qword [rsp + 0x20]
cmp rax, rdi
jge 0x14000abdf
add rax, 0xee6b280
mov qword [rsp + 0x20], rax
jmp 0x14000abe4
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x20]
call fcn.1400106a0
lea rdx, reloc.WS2_32.dll_listen
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
call fcn.140005990
lea rdx, str.Preparing...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
lea rcx, [rsp + 0x20]
call fcn.140003840
mov rax, qword [rsp + 0x20]
cmp rax, rdi
jge 0x14000ac3a
add rax, 0xee6b280
mov qword [rsp + 0x20], rax
jmp 0x14000ac3f
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x20]
call fcn.1400106a0
lea rdx, reloc.WS2_32.dll_listen
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
call fcn.140005990
lea rdx, str.Preparing_successful
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
lea rcx, [rsp + 0x20]
call fcn.140003840
movabs rsi, 0x7fffffffc46535ff
mov rax, qword [rsp + 0x20]
cmp rax, rsi
jge 0x14000ac9f
add rax, 0x3b9aca00
mov qword [rsp + 0x20], rax
jmp 0x14000aca4
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x20]
call fcn.1400106a0
lea rdx, [0x14008f85c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
call fcn.140005990
lea rdx, str.Authenticating.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
lea rcx, [rsp + 0x20]
call fcn.140003840
mov rax, qword [rsp + 0x20]
cmp rax, rdi
jge 0x14000acfa
add rax, 0xee6b280
mov qword [rsp + 0x20], rax
jmp 0x14000acff
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x20]
call fcn.1400106a0
lea rdx, reloc.WS2_32.dll_listen
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
call fcn.140005990
lea rdx, str.Authenticating..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
lea rcx, [rsp + 0x20]
call fcn.140003840
mov rax, qword [rsp + 0x20]
cmp rax, rdi
jge 0x14000ad55
add rax, 0xee6b280
mov qword [rsp + 0x20], rax
jmp 0x14000ad5a
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x20]
call fcn.1400106a0
lea rdx, reloc.WS2_32.dll_listen
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
call fcn.140005990
lea rdx, str.Authenticating...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
lea rcx, [rsp + 0x20]
call fcn.140003840
mov rax, qword [rsp + 0x20]
cmp rax, rdi
jge 0x14000adb0
add rax, 0xee6b280
mov qword [rsp + 0x20], rax
jmp 0x14000adb5
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x20]
call fcn.1400106a0
lea rdx, reloc.WS2_32.dll_listen
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
call fcn.140005990
lea rdx, str.Authenticating_successful
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
lea rcx, [rsp + 0x20]
call fcn.140003840
mov rax, qword [rsp + 0x20]
cmp rax, rsi
jge 0x14000ae0b
add rax, 0x3b9aca00
mov qword [rsp + 0x20], rax
jmp 0x14000ae10
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x20]
call fcn.1400106a0
lea rdx, reloc.WS2_32.dll_listen
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
lea rdx, [0x14008f85c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140090bfc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1401fd6a0]
call fcn.140021db0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x1400910b0]
movdqu xmmword [rsp + 0x88], xmm1
mov byte [rsp + 0x78], 0
mov eax, dword [str._UI_unknown_error]
mov dword [rsp + 0x20], eax
cmp byte [0x140091037], 0
je 0x14000af53
xor r8d, r8d
cmp dword [reloc.SecureEngineSDK64.dll_Ordinal_1], 2
jl 0x14000af1c
movdqa xmm3, xmmword [0x1400910c0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x140091100]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x140091100]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [str.9999]
psubd xmm3, xmm0
andps xmm3, xmmword [0x1400910e0]
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmmword [0x1400910f0]
movd xmm0, eax
xorps xmm3, xmm0
movd dword [rsp + 0x20], xmm3
jmp 0x14000af53
lea r9, [rsp + 0x20]
mov eax, 0x1f7047dd
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x14000af21
lea rcx, [rsp + 0x20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._n___________________________________________________________________n_________________________________________________________________n_____________________________________________________________n____________________________________________________________n____________________________________________n__________________________________________________________n_________________________________________________________________n_n_____________https:__discord.gg_leetspoofer_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
lea rdx, [0x14000de50]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp byte [0x1401fd8b0], 0
jne 0x14000affb
call fcn.140005990
mov r8, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x20]
call fcn.14000b1e0
movzx ecx, byte [rax + 8]
test cl, cl
je 0x14000afcd
xor byte [rax], 0x38
xor byte [rax + 1], 0x39
xor byte [rax + 2], 0x3a
xor byte [rax + 3], 0x3b
xor byte [rax + 4], 0x3c
xor byte [rax + 5], 0x3d
xor byte [rax + 6], 0x3e
xor byte [rax + 7], 0x3f
xor cl, 0x40
mov byte [rax + 8], cl
mov rdx, rax
mov rcx, r8
call fcn.14000da00
mov rcx, rax
lea rdx, [0x1401fd8b8]
call fcn.14000e720
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x1401fd6a0]
call fcn.14001bb40
nop
lea rcx, [rsp + 0x58]
call fcn.14000a410
nop
call fcn.140005990
lea rdx, str.License:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x68]
mov rcx, rax
call fcn.140010910
lea rdx, [0x14000de50]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x38]
call fcn.14000c850
mov rdx, rax
lea rcx, [0x1401fd6a0]
call fcn.140024920
cmp byte [0x1401fd8b0], 0
jne 0x14000b0db
call fcn.140005990
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000da00
lea rdx, [0x1401fd8b8]
cmp qword [0x1401fd8d0], 0xf
cmova rdx, qword [0x1401fd8b8]
mov r8, qword [0x1401fd8c8]
mov rcx, rax
call fcn.140010910
mov dl, 0xa
mov rcx, rax
call fcn.14000dbe0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14000a6d0
call fcn.140005990
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x48], xmm1
mov r8d, 8
lea rdx, str.Login__3
lea rcx, [rsp + 0x38]
call fcn.14000f650
nop
lea rcx, [rsp + 0x38]
call fcn.140005ac0
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x14000b154
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b14f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b14f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007a30c
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14000a250
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x14000b1a6
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b1a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b1a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007a30c
nop
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_2]
nop
xor eax, eax
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.140079fa0
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret