Function at 0x140105780
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x838]
sub rsp, 0x8f8
vmovaps xmmword [rax - 0x58], xmm6
vmovaps xmmword [rax - 0x68], xmm7
vmovaps xmmword [rax - 0x78], xmm8
vmovaps xmmword [rax - 0x88], xmm9
vmovaps xmmword [rax - 0x98], xmm10
vmovaps xmmword [rax - 0xa8], xmm11
vmovaps xmmword [rax - 0xb8], xmm12
vmovaps xmmword [rax - 0xc8], xmm13
vmovaps xmmword [rax - 0xd8], xmm14
vmovaps xmmword [rax - 0xe8], xmm15
vmovsd xmm0, qword [str.bQk_UXXL_]
vmovsd qword [rsp + 0x40], xmm0
movzx eax, byte [0x1401c2470]
mov byte [rsp + 0x40], 0x55
xor byte [rsp + 0x41], 0x38
xor byte [rsp + 0x42], 0x39
xor byte [rsp + 0x43], 0x3a
xor byte [rsp + 0x44], 0x3b
xor byte [rsp + 0x45], 0x3c
xor byte [rsp + 0x46], 0x3d
xor byte [rsp + 0x47], 0x3e
xor al, 0x3f
mov byte [rsp + 0x48], al
lea rcx, [rsp + 0x40]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectBeginUltra]
mov cl, 1
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsDebuggerPresent]
mov cl, 1
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsDebuggerPresent]
mov cl, 1
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsDebuggerPresent]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsProtected]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsVirtualMachinePresent]
lea rcx, [rsp + 0x78]
call fcn.1401156b0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x14010589c
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140105897
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401059a7
call fcn.14019ebcc
lea rcx, [rsp + 0x78]
call fcn.140115890
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x1401058e2
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401058dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401059a7
call fcn.14019ebcc
lea rcx, [rsp + 0x78]
call fcn.14010a7f0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x140105928
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140105923
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401059a7
call fcn.14019ebcc
lea rcx, [rsp + 0x78]
call fcn.14010a9d0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x14010596a
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140105965
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401059a7
call fcn.14019ebcc
lea rcx, [rsp + 0x78]
call fcn.140115a70
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x1401059b3
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401059ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401059ae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14019ebcc
xor esi, esi
lea r14d, [rsi + 1]
lea r15, str.username
lea r12, str.password
lea r13, [0x14029ac20]
lea rdi, [0x14029ad68]
vmovss xmm10, dword [0x1401b6194]
vxorps xmm9, xmm9, xmm9
vmovss xmm7, dword [0x1401b6160]
vmovss xmm11, dword [0x1401b6164]
vmovss xmm12, dword [0x1401b62a0]
vmovss xmm13, dword [0x1401c3584]
vmovss xmm8, dword [0x1401b6158]
vmovss xmm14, dword [0x1401b616c]
vmovss xmm15, dword [0x1401c3588]
nop word [rax + rax]
xor bl, bl
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x248]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140105a8e
lea rcx, [rbp + 0x248]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x248]
call qword [sym.imp.USER32.dll_DispatchMessageA]
movzx ebx, bl
cmp dword [rbp + 0x250], 0x12
cmove ebx, r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x248]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140105a40
test bl, bl
jne 0x140108409
call fcn.1400ac740
call fcn.1400add80
call fcn.14008fd00
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, 1
jne 0x1401076a0
vmovss xmm6, dword [0x1401c35a4]
vmovss dword [rbp + 0x130], xmm6
vmovss xmm0, dword [0x1401b6180]
vmovss dword [rbp + 0x134], xmm0
lea rdx, [rbp + 0x130]
lea ecx, [rax + 3]
call fcn.1400918e0
xor edx, edx
lea r8d, [rdx + 3]
lea rcx, [0x1401c21b8]
call fcn.140079b30
vmovss dword [rbp + 0x138], xmm6
vmovss xmm0, dword [0x1401c357c]
vmovss dword [rbp + 0x13c], xmm0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x138]
lea rcx, str.TopLine
call fcn.14007c740
lea rcx, [rbp + 0x1b8]
call fcn.1400895c0
vmovss xmm6, dword [rax]
vmovss dword [rsp + 0x20], xmm10
xor r9d, r9d
xor r8d, r8d
lea rdx, str.NEMESIS.CC
lea rcx, [rbp + 0x1c8]
call fcn.14007de50
vsubss xmm0, xmm6, dword [rax]
vmulss xmm6, xmm0, dword [0x1401b60ec]
call fcn.140089630
vaddss xmm7, xmm0, xmm6
lea rcx, [rbp + 0x1e0]
call fcn.1400895c0
vmovss xmm6, dword [rax + 4]
call fcn.14008a040
vsubss xmm1, xmm6, xmm0
vmulss xmm6, xmm1, dword [0x1401b60ec]
call fcn.140089660
vaddss xmm6, xmm0, xmm6
vmovss dword [rbp + 0x140], xmm7
vmovss dword [rbp + 0x144], xmm6
lea rcx, [rbp + 0x140]
call fcn.1400954b0
lea rcx, str.NEMESIS.
call fcn.1400b9790
vmovups xmm0, xmmword [0x1401b9de0]
vmovups xmmword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.140091880
vmovaps xmm1, xmm10
vmovaps xmm0, xmm9
call fcn.140094ce0
lea rcx, [0x1401c24f4]
call fcn.1400b9790
vmovss xmm0, dword [0x1401c35a0]
vmovss dword [rbp + 0x148], xmm0
vmovss dword [rbp + 0x14c], xmm6
lea rcx, [rbp + 0x148]
call fcn.1400954b0
lea rcx, [0x1401b60a8]
call fcn.1400b9790
xor ecx, ecx
call fcn.14008b3b0
test al, al
jne 0x14010851c
mov ecx, r14d
call fcn.140091250
call fcn.140087320
call fcn.140089660
vmovss xmm7, dword [0x1401b6160]
vaddss xmm6, xmm0, xmm7
call fcn.140089630
vaddss xmm1, xmm0, xmm7
vmovss dword [rbp + 0x150], xmm1
vmovss dword [rbp + 0x154], xmm6
lea rcx, [rbp + 0x150]
call fcn.1400954b0
lea rcx, [rbp + 0x1e8]
call fcn.1400895c0
vmovss xmm0, dword [rax + 4]
vsubss xmm6, xmm0, xmm11
lea rcx, [rbp + 0x240]
call fcn.1400895c0
vmovss xmm0, dword [rax]
vsubss xmm1, xmm0, xmm11
vmovss dword [rbp - 0x48], xmm1
vmovss dword [rbp - 0x44], xmm6
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp - 0x48]
lea rcx, str.centerlogin
call fcn.14007c740
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, 1
jne 0x140106973
vmovaps xmm0, xmm12
call fcn.140095770
vmovss dword [rbp - 0x40], xmm13
vmovss xmm0, dword [0x1401b629c]
vmovss dword [rbp - 0x3c], xmm0
lea rcx, [rbp - 0x40]
call fcn.1400954b0
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8d, 0xff
mov rdx, r15
lea rcx, str.Username
call fcn.1400b2960
vmovaps xmm0, xmm12
call fcn.140095770
call fcn.140089660
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp - 0x38], xmm13
vmovss dword [rbp - 0x34], xmm1
lea rcx, [rbp - 0x38]
call fcn.1400954b0
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8d, 0xff
mov rdx, r12
lea rcx, str.Password
call fcn.1400b2960
call fcn.140089660
vaddss xmm0, xmm0, xmm8
call fcn.140095580
vmovaps xmm0, xmm13
call fcn.140095530
vmovss dword [rbp - 0x30], xmm12
vmovss dword [rbp - 0x2c], xmm14
lea rdx, [rbp - 0x30]
lea rcx, str.LOGIN
call fcn.1400b15f0
test al, al
je 0x1401068ec
mov cl, 1
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsDebuggerPresent]
mov eax, dword [str.wsu_]
mov dword [rbp + 0x858], eax
movzx eax, word [0x1401c2478]
mov word [rbp + 0x85c], ax
mov byte [rbp + 0x858], Ordinal_79
xor byte [rbp + 0x859], 0x38
xor byte [rbp + 0x85a], 0x39
xor byte [rbp + 0x85b], 0x3a
xor al, 0x3b
mov byte [rbp + 0x85c], al
xor byte [rbp + 0x85d], 0x3c
lea rcx, [rbp + 0x858]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectBeginUltra]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsProtected]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsVirtualMachinePresent]
call fcn.140050740
lea rax, [rsp + 0x58]
mov qword [rbp + 0x178], rax
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], rsi
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r12 + r8], 0
jne 0x140105e23
mov rdx, r12
lea rcx, [rsp + 0x58]
call fcn.140070960
nop
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x50], rsi
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r15 + r8], 0
jne 0x140105e53
mov rdx, r15
lea rcx, [rbp - 0x68]
call fcn.140070960
nop
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x68]
lea rcx, [0x1402f0c90]
call fcn.140144350
call fcn.140050740
cmp byte [0x1402f0ea0], 0
je 0x14010846f
mov eax, dword [str._WSU_]
mov dword [rbp + 0x850], eax
movzx eax, word [0x1401c249c]
mov word [rbp + 0x854], ax
mov byte [rbp + 0x850], WSAGetLastError
xor byte [rbp + 0x851], 0x38
xor byte [rbp + 0x852], 0x39
xor byte [rbp + 0x853], 0x3a
xor al, 0x3b
mov byte [rbp + 0x854], al
xor byte [rbp + 0x855], 0x3c
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x50], rsi
lea rax, [rbp + 0x850]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140105ef5
lea rdx, [rbp + 0x850]
lea rcx, [rbp - 0x68]
call fcn.140070960
lea r8, [rbp - 0x68]
lea rdx, [rsp + 0x78]
lea rcx, [0x1402f0c90]
call fcn.140149ac0
nop
cmp qword [rbp - 0x78], 2
jbe 0x140106894
mov r8d, dword [0x1402efa60]
xor edx, edx
lea ecx, [rdx + 8]
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rbx, rax
test rax, rax
je 0x14010619f
mov dword [rbp + 0x2b0], 0x100001
lea rdx, [rbp + 0x280]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
mov rcx, rbx
test eax, eax
je 0x140105f7a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14010619f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140106016
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140106016
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140106011
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140105ff0
cmp r8d, 0xcded1a85
je 0x14010601b
test r9d, r9d
jne 0x140105fd0
mov rax, qword [rax]
jmp 0x140105fa0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401060c6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401060c6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1401060c1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1401060a0
cmp r8d, 0xe80fd3a
je 0x1401060cb
test r9d, r9d
jne 0x140106080
mov rax, qword [rax]
jmp 0x140106050
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140106176
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140106176
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140106171
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140106150
cmp r8d, 0xa52bcaf9
je 0x14010617b
test r9d, r9d
jne 0x140106130
mov rax, qword [rax]
jmp 0x140106100
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
mov byte [0x1402ef9e5], 0
call fcn.14010cbb0
call fcn.14010dab0
call fcn.14010d330
call fcn.14010d580
call fcn.14010d950
call fcn.14010d060
call fcn.14010ce10
call fcn.14010da90
cmp byte [0x1402ef9e5], 0
je 0x1401063ef
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140106266
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140106266
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140106261
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140106240
cmp r8d, 0xcded1a85
je 0x14010626b
test r9d, r9d
jne 0x140106220
mov rax, qword [rax]
jmp 0x1401061f0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140106316
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140106316
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140106311
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1401062f0
cmp r8d, 0xe80fd3a
je 0x14010631b
test r9d, r9d
jne 0x1401062d0
mov rax, qword [rax]
jmp 0x1401062a0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401063c6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401063c6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1401063c1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1401063a0
cmp r8d, 0xa52bcaf9
je 0x1401063cb
test r9d, r9d
jne 0x140106380
mov rax, qword [rax]
jmp 0x140106350
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
cmp byte [0x1402ef9e0], 0
je 0x14010660f
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140106486
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140106486
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140106481
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140106460
cmp r8d, 0xcded1a85
je 0x14010648b
test r9d, r9d
jne 0x140106440
mov rax, qword [rax]
jmp 0x140106410
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140106536
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140106536
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140106531
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140106510
cmp r8d, 0xe80fd3a
je 0x14010653b
test r9d, r9d
jne 0x1401064f0
mov rax, qword [rax]
jmp 0x1401064c0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401065e6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401065e6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1401065e1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1401065c0
cmp r8d, 0xa52bcaf9
je 0x1401065eb
test r9d, r9d
jne 0x1401065a0
mov rax, qword [rax]
jmp 0x140106570
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
mov eax, dword [0x1401c24a0]
mov dword [rbp + 0x840], eax
movzx eax, word [0x1401c24a4]
mov word [rbp + 0x844], ax
mov byte [rbp + 0x840], reloc.WLDAP32.dll_Ordinal_46
xor byte [rbp + 0x841], 0x38
xor byte [rbp + 0x842], 0x39
xor byte [rbp + 0x843], 0x3a
xor byte [rbp + 0x844], 0x3b
xor byte [rbp + 0x845], 0x3c
xor edx, edx
lea rcx, [rbp + 0x840]
call fcn.1400eb830
test al, al
je 0x14010687f
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401066f6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401066f6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1401066f1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1401066d0
cmp r8d, 0xcded1a85
je 0x1401066fb
test r9d, r9d
jne 0x1401066b0
mov rax, qword [rax]
jmp 0x140106680
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401067a6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401067a6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1401067a1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140106780
cmp r8d, 0xe80fd3a
je 0x1401067ab
test r9d, r9d
jne 0x140106760
mov rax, qword [rax]
jmp 0x140106730
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140106856
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140106856
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140106851
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140106830
cmp r8d, 0xa52bcaf9
je 0x14010685b
test r9d, r9d
jne 0x140106810
mov rax, qword [rax]
jmp 0x1401067e0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
mov edx, Ordinal_301
lea ecx, [rdx - 0x32]
call qword [sym.imp.KERNEL32.dll_Beep]
mov dword [reloc.WS2_32.dll_accept], r14d
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x1401068d0
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401068cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140108468
call fcn.14019ebcc
lea rcx, [0x1402f0c90]
call fcn.14013e550
call qword [sym.imp.VMProtectSDK64.dll_VMProtectEnd]
mov dword [reloc.WS2_32.dll_accept], 2
vmovss xmm0, dword [0x1401c359c]
vmovss dword [rbp - 0x28], xmm0
vmovss xmm0, dword [0x1401c3590]
vmovss dword [rbp - 0x24], xmm0
lea rcx, [rbp - 0x28]
call fcn.1400954b0
lea rcx, str.Register
call fcn.1400b9790
vmovups xmm0, xmmword [0x1401b9de0]
vmovups xmmword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.140091880
vmovaps xmm1, xmm10
vmovaps xmm0, xmm9
call fcn.140094ce0
lea rcx, str.Here
call fcn.1400b9790
xor ecx, ecx
call fcn.14008b3b0
test al, al
je 0x140106965
mov dword [reloc.WS2_32.dll_accept], 2
mov ecx, r14d
call fcn.140091250
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, 2
jne 0x140107681
vmovaps xmm0, xmm12
call fcn.140095770
vmovss dword [rbp - 0x20], xmm13
vmovss xmm0, dword [0x1401c3580]
vmovss dword [rbp - 0x1c], xmm0
lea rcx, [rbp - 0x20]
call fcn.1400954b0
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8d, 0xff
mov rdx, r15
lea rcx, str.Username
call fcn.1400b2960
vmovaps xmm0, xmm12
call fcn.140095770
call fcn.140089660
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp - 0x18], xmm13
vmovss dword [rbp - 0x14], xmm1
lea rcx, [rbp - 0x18]
call fcn.1400954b0
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8d, 0xff
mov rdx, r12
lea rcx, str.Password
call fcn.1400b2960
vmovaps xmm0, xmm12
call fcn.140095770
call fcn.140089660
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp - 0x10], xmm13
vmovss dword [rbp - 0xc], xmm1
lea rcx, [rbp - 0x10]
call fcn.1400954b0
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8d, 0xff
mov rdx, r13
lea rcx, str.Key
call fcn.1400b2960
call fcn.140089660
vaddss xmm0, xmm0, xmm8
call fcn.140095580
vmovaps xmm0, xmm13
call fcn.140095530
vmovss dword [rbp - 8], xmm12
vmovss dword [rbp - 4], xmm14
lea rdx, [rbp - 8]
lea rcx, str.REGISTER
call fcn.1400b15f0
test al, al
je 0x140107681
mov cl, 1
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsDebuggerPresent]
vmovsd xmm0, qword [str.eshhxl_]
vmovsd qword [rsp + 0x49], xmm0
movzx eax, byte [0x1401c24b0]
mov byte [rsp + 0x49], 0x52
xor byte [rsp + 0x4a], 0x38
xor byte [rsp + 0x4b], 0x39
xor byte [rsp + 0x4c], 0x3a
xor byte [rsp + 0x4d], 0x3b
xor byte [rsp + 0x4e], 0x3c
xor byte [rsp + 0x4f], 0x3d
xor byte [rsp + 0x50], 0x3e
xor al, 0x3f
mov byte [rsp + 0x51], al
lea rcx, [rsp + 0x49]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectBeginUltra]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsProtected]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsVirtualMachinePresent]
call fcn.140050740
call fcn.140050740
lea rax, [rbp - 0x68]
mov qword [rbp + 0x128], rax
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x68], 0
lea rax, [rbp + 0x180]
mov qword [rbp + 0x178], rax
vmovups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], rsi
mov qword [rbp + 0x198], rsi
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [r8 + r13], 0
jne 0x140106b50
mov rdx, r13
lea rcx, [rbp + 0x180]
call fcn.140070960
nop
lea rax, [rbp + 0x158]
mov qword [rbp + 0x1c0], rax
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x158], xmm0
mov qword [rbp + 0x168], rsi
mov qword [rbp + 0x170], rsi
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x140106ba0
mov rdx, r12
lea rcx, [rbp + 0x158]
call fcn.140070960
nop
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], rsi
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r15 + r8], 0
jne 0x140106bd3
mov rdx, r15
lea rcx, [rsp + 0x78]
call fcn.140070960
nop
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x180]
lea r8, [rbp + 0x158]
lea rdx, [rsp + 0x78]
lea rcx, [0x1402f0c90]
call fcn.1401462f0
call fcn.140050740
cmp byte [0x1402f0ea0], 0
je 0x140108513
vmovsd xmm0, qword [str.E_SHHXL_]
vmovsd qword [rsp + 0x40], xmm0
movzx eax, byte [0x1401c24c0]
mov byte [rsp + 0x40], WSAStartup
xor byte [rsp + 0x41], 0x38
xor byte [rsp + 0x42], 0x39
xor byte [rsp + 0x43], 0x3a
xor byte [rsp + 0x44], 0x3b
xor byte [rsp + 0x45], 0x3c
xor byte [rsp + 0x46], 0x3d
xor byte [rsp + 0x47], 0x3e
xor al, 0x3f
mov byte [rsp + 0x48], al
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], rsi
lea rax, [rsp + 0x40]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140106c86
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x78]
call fcn.140070960
lea r8, [rsp + 0x78]
lea rdx, [rbp + 0x158]
lea rcx, [0x1402f0c90]
call fcn.140149ac0
nop
cmp qword [rbp + 0x168], 2
jbe 0x140107624
mov r8d, dword [0x1402efa60]
xor edx, edx
lea ecx, [rdx + 8]
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rbx, rax
test rax, rax
je 0x140106f2f
mov dword [rbp + 0x2b0], 0x100001
lea rdx, [rbp + 0x280]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
mov rcx, rbx
test eax, eax
je 0x140106d10
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140106f2f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140106da6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140106da6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140106da1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140106d80
cmp r8d, 0xcded1a85
je 0x140106dab
test r9d, r9d
jne 0x140106d60
mov rax, qword [rax]
jmp 0x140106d30
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140106e56
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140106e56
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140106e51
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140106e30
cmp r8d, 0xe80fd3a
je 0x140106e5b
test r9d, r9d
jne 0x140106e10
mov rax, qword [rax]
jmp 0x140106de0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140106f06
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140106f06
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140106f01
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140106ee0
cmp r8d, 0xa52bcaf9
je 0x140106f0b
test r9d, r9d
jne 0x140106ec0
mov rax, qword [rax]
jmp 0x140106e90
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
mov byte [0x1402ef9e5], 0
call fcn.14010cbb0
call fcn.14010dab0
call fcn.14010d330
call fcn.14010d580
call fcn.14010d950
call fcn.14010d060
call fcn.14010ce10
call fcn.14010da90
cmp byte [0x1402ef9e5], 0
je 0x14010717f
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140106ff6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140106ff6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140106ff1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140106fd0
cmp r8d, 0xcded1a85
je 0x140106ffb
test r9d, r9d
jne 0x140106fb0
mov rax, qword [rax]
jmp 0x140106f80
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401070a6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401070a6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1401070a1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140107080
cmp r8d, 0xe80fd3a
je 0x1401070ab
test r9d, r9d
jne 0x140107060
mov rax, qword [rax]
jmp 0x140107030
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140107156
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140107156
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140107151
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140107130
cmp r8d, 0xa52bcaf9
je 0x14010715b
test r9d, r9d
jne 0x140107110
mov rax, qword [rax]
jmp 0x1401070e0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
cmp byte [0x1402ef9e0], 0
je 0x14010739f
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140107216
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140107216
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140107211
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1401071f0
cmp r8d, 0xcded1a85
je 0x14010721b
test r9d, r9d
jne 0x1401071d0
mov rax, qword [rax]
jmp 0x1401071a0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401072c6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401072c6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1401072c1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1401072a0
cmp r8d, 0xe80fd3a
je 0x1401072cb
test r9d, r9d
jne 0x140107280
mov rax, qword [rax]
jmp 0x140107250
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140107376
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140107376
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140107371
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140107350
cmp r8d, 0xa52bcaf9
je 0x14010737b
test r9d, r9d
jne 0x140107330
mov rax, qword [rax]
jmp 0x140107300
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
mov eax, dword [0x1401c24c4]
mov dword [rbp + 0x848], eax
movzx eax, word [0x1401c24c8]
mov word [rbp + 0x84c], ax
mov byte [rbp + 0x848], reloc.WLDAP32.dll_Ordinal_46
xor byte [rbp + 0x849], 0x38
xor byte [rbp + 0x84a], 0x39
xor byte [rbp + 0x84b], 0x3a
xor byte [rbp + 0x84c], 0x3b
xor byte [rbp + 0x84d], 0x3c
xor edx, edx
lea rcx, [rbp + 0x848]
call fcn.1400eb830
test al, al
je 0x14010760f
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140107486
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140107486
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140107481
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140107460
cmp r8d, 0xcded1a85
je 0x14010748b
test r9d, r9d
jne 0x140107440
mov rax, qword [rax]
jmp 0x140107410
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140107536
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140107536
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140107531
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140107510
cmp r8d, 0xe80fd3a
je 0x14010753b
test r9d, r9d
jne 0x1401074f0
mov rax, qword [rax]
jmp 0x1401074c0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401075e6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401075e6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1401075e1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1401075c0
cmp r8d, 0xa52bcaf9
je 0x1401075eb
test r9d, r9d
jne 0x1401075a0
mov rax, qword [rax]
jmp 0x140107570
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
mov edx, Ordinal_301
lea ecx, [rdx - 0x32]
call qword [sym.imp.KERNEL32.dll_Beep]
mov dword [reloc.WS2_32.dll_accept], r14d
mov rdx, qword [rbp + 0x170]
cmp rdx, 0xf
jbe 0x140107665
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140107660
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14010850c
call fcn.14019ebcc
lea rcx, [0x1402f0c90]
call fcn.14013e550
mov dword [reloc.WS2_32.dll_accept], 2
call qword [sym.imp.VMProtectSDK64.dll_VMProtectEnd]
call fcn.140087320
call fcn.140086fb0
mov ecx, r14d
call fcn.1400912a0
mov eax, dword [reloc.WS2_32.dll_accept]
lea rdi, [0x14029ad68]
cmp eax, 2
jne 0x1401082d6
vmovss xmm6, dword [0x1401c35a8]
vmovss dword [rbp], xmm6
vmovss xmm0, dword [0x1401b62a4]
vmovss dword [rbp + 4], xmm0
lea rdx, [rbp]
lea ecx, [rax + 2]
call fcn.1400918e0
xor edx, edx
lea r8d, [rdx + 3]
lea rcx, str.Nemesis_Menu
call fcn.140079b30
mov rcx, qword [0x1402f53c0]
call fcn.1400915b0
vmovss dword [rbp + 8], xmm9
vmovss dword [rbp + 0xc], xmm9
lea rcx, [rbp + 8]
call fcn.1400954b0
vmovss dword [rbp + 0x10], xmm6
vmovss xmm0, dword [0x1401b6298]
vmovss dword [rbp + 0x14], xmm0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x10]
lea rcx, str.NavBar
call fcn.14007c740
call fcn.140089660
vaddss xmm6, xmm0, xmm7
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x18], xmm1
vmovss dword [rbp + 0x1c], xmm6
lea rcx, [rbp + 0x18]
call fcn.1400954b0
lea rcx, str.Nemesis.
call fcn.1400b9790
vmovups xmm0, xmmword [0x1401b9de0]
vmovups xmmword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.140091880
vmovaps xmm1, xmm10
vmovaps xmm0, xmm9
call fcn.140094ce0
lea rcx, [0x1401c258c]
call fcn.1400b9790
mov ecx, r14d
call fcn.140091250
vmovaps xmm1, xmm10
vmovaps xmm0, xmm9
call fcn.140094ce0
cmp dword [reloc.WS2_32.dll_accept], 1
jne 0x1401077c8
vmovups xmm0, xmmword [0x1401c37c0]
vmovups xmmword [rbp + 0x1f0], xmm0
lea rdx, [rbp + 0x1f0]
jmp 0x1401077df
vmovups xmm0, xmmword [0x1401c37d0]
vmovups xmmword [rbp + 0x200], xmm0
lea rdx, [rbp + 0x200]
xor ecx, ecx
call fcn.140091880
call fcn.140089660
vmovaps xmm6, xmm0
call fcn.140089630
vaddss xmm1, xmm0, dword [0x1401c3594]
vmovss dword [rbp + 0x20], xmm1
vmovss dword [rbp + 0x24], xmm6
lea rcx, [rbp + 0x20]
call fcn.1400954b0
lea rcx, str.Spoofer
call fcn.1400b9790
xor ecx, ecx
call fcn.14008b3b0
test al, al
je 0x14010782d
mov dword [reloc.WS2_32.dll_accept], r14d
mov ecx, r14d
call fcn.140091250
vmovaps xmm1, xmm10
vmovaps xmm0, xmm9
call fcn.140094ce0
cmp dword [reloc.WS2_32.dll_accept], 2
jne 0x140107866
vmovups xmm0, xmmword [0x1401c37c0]
vmovups xmmword [rbp + 0x210], xmm0
lea rdx, [rbp + 0x210]
jmp 0x14010787d
vmovups xmm0, xmmword [0x1401c37d0]
vmovups xmmword [rbp + 0x220], xmm0
lea rdx, [rbp + 0x220]
xor ecx, ecx
call fcn.140091880
call fcn.140089660
vmovaps xmm6, xmm0
call fcn.140089630
vaddss xmm1, xmm0, xmm11
vmovss dword [rbp + 0x28], xmm1
vmovss dword [rbp + 0x2c], xmm6
lea rcx, [rbp + 0x28]
call fcn.1400954b0
lea rcx, str.Extras
call fcn.1400b9790
xor ecx, ecx
call fcn.14008b3b0
test al, al
je 0x1401078cb
mov dword [reloc.WS2_32.dll_accept], 2
mov ecx, r14d
call fcn.140091250
vmovaps xmm1, xmm10
vmovaps xmm0, xmm9
call fcn.140094ce0
cmp dword [reloc.WS2_32.dll_accept], 3
jne 0x140107904
vmovups xmm0, xmmword [0x1401c37c0]
vmovups xmmword [rbp + 0x230], xmm0
lea rdx, [rbp + 0x230]
jmp 0x14010791b
vmovups xmm0, xmmword [0x1401c37d0]
vmovups xmmword [rbp + 0x1a0], xmm0
lea rdx, [rbp + 0x1a0]
xor ecx, ecx
call fcn.140091880
call fcn.140089660
vmovaps xmm6, xmm0
call fcn.140089630
vaddss xmm1, xmm0, xmm11
vmovss dword [rbp + 0x30], xmm1
vmovss dword [rbp + 0x34], xmm6
lea rcx, [rbp + 0x30]
call fcn.1400954b0
lea rcx, str.Exit
call fcn.1400b9790
xor ecx, ecx
call fcn.14008b3b0
test al, al
jne 0x14010851c
mov ecx, r14d
call fcn.140091250
call fcn.140087320
call fcn.140089660
vaddss xmm0, xmm0, xmm8
call fcn.140095580
call fcn.140089630
vaddss xmm0, xmm0, xmm8
call fcn.140095530
lea rcx, [rbp + 0x1d0]
call fcn.1400895c0
vmovss xmm0, dword [rax + 4]
vsubss xmm1, xmm0, dword [0x1401b6290]
vmovss xmm2, dword [0x1401c358c]
vmovss dword [rbp + 0x38], xmm2
vmovss dword [rbp + 0x3c], xmm1
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x38]
lea rcx, str.left
call fcn.14007c740
cmp dword [reloc.WS2_32.dll_accept], 1
jne 0x140107a7d
call fcn.140089660
vaddss xmm6, xmm0, xmm8
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x40], xmm1
vmovss dword [rbp + 0x44], xmm6
lea rcx, [rbp + 0x40]
call fcn.1400954b0
lea rdx, [0x1402efa78]
lea rcx, str.Permanent_Spoof
call fcn.1400b1e50
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401c3598]
call fcn.140089630
vaddss xmm1, xmm0, xmm11
vmovss dword [rbp + 0x48], xmm1
vmovss dword [rbp + 0x4c], xmm6
lea rcx, [rbp + 0x48]
call fcn.1400954b0
vmovss dword [rbp + 0x50], xmm15
vmovss dword [rbp + 0x54], xmm14
lea rdx, [rbp + 0x50]
lea rcx, str.SPOOF
call fcn.1400b15f0
test al, al
je 0x140107a7d
mov edx, 0x3e8
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.1400ed720
call fcn.1401164e0
call fcn.140130d80
cmp dword [reloc.WS2_32.dll_accept], 2
jne 0x140107ad5
call fcn.140089660
vaddss xmm6, xmm0, xmm8
call fcn.140089630
vaddss xmm1, xmm0, xmm11
vmovss dword [rbp + 0x58], xmm1
vmovss dword [rbp + 0x5c], xmm6
lea rcx, [rbp + 0x58]
call fcn.1400954b0
vmovss dword [rbp + 0x60], xmm15
vmovss dword [rbp + 0x64], xmm14
lea rdx, [rbp + 0x60]
lea rcx, str.Cleaner
call fcn.1400b15f0
test al, al
je 0x140107ad5
call fcn.1400cdc30
call fcn.1401107d0
call fcn.140087320
vmovaps xmm1, xmm10
vmovaps xmm0, xmm9
call fcn.140094ce0
call fcn.140089630
vaddss xmm0, xmm0, xmm8
call fcn.140095530
lea rcx, [rbp + 0x1d8]
call fcn.1400895c0
vmovss xmm0, dword [rax + 4]
vsubss xmm1, xmm0, dword [0x1401b6290]
vmovss xmm0, dword [0x1401c358c]
vmovss dword [rbp + 0x68], xmm0
vmovss dword [rbp + 0x6c], xmm1
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x68]
lea rcx, str.right
call fcn.14007c740
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, 1
jne 0x140107ea5
call fcn.140089660
vaddss xmm6, xmm0, xmm8
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x70], xmm1
vmovss dword [rbp + 0x74], xmm6
lea rcx, [rbp + 0x70]
call fcn.1400954b0
vmovups xmm0, xmmword [0x1401b9de0]
vmovups xmmword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.140091880
lea rcx, str.Disk_Serials:
call fcn.1400b9790
mov ecx, r14d
call fcn.140091250
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b613c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x78], xmm1
vmovss dword [rbp + 0x7c], xmm6
lea rcx, [rbp + 0x78]
call fcn.1400954b0
mov rcx, rdi
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14029ad68]
call fcn.1400b9ce0
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b613c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x80], xmm1
vmovss dword [rbp + 0x84], xmm6
lea rcx, [rbp + 0x80]
call fcn.1400954b0
vmovups xmm0, xmmword [0x1401b9de0]
vmovups xmmword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.140091880
lea rcx, str.BIOS_Serials:
call fcn.1400b9790
mov ecx, r14d
call fcn.140091250
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b613c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x88], xmm1
vmovss dword [rbp + 0x8c], xmm6
lea rcx, [rbp + 0x88]
call fcn.1400954b0
lea rcx, [0x14029ad88]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14029ad88]
call fcn.1400b9ce0
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b613c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x90], xmm1
vmovss dword [rbp + 0x94], xmm6
lea rcx, [rbp + 0x90]
call fcn.1400954b0
vmovups xmm0, xmmword [0x1401b9de0]
vmovups xmmword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.140091880
lea rcx, str.MotherBoard:
call fcn.1400b9790
mov ecx, r14d
call fcn.140091250
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b613c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x98], xmm1
vmovss dword [rbp + 0x9c], xmm6
lea rcx, [rbp + 0x98]
call fcn.1400954b0
lea rcx, [0x14029adc8]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14029adc8]
call fcn.1400b9ce0
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b613c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xa0], xmm1
vmovss dword [rbp + 0xa4], xmm6
lea rcx, [rbp + 0xa0]
call fcn.1400954b0
vmovups xmm0, xmmword [0x1401b9de0]
vmovups xmmword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.140091880
lea rcx, str.Windows_UUID:
call fcn.1400b9790
mov ecx, r14d
call fcn.140091250
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b613c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xa8], xmm1
vmovss dword [rbp + 0xac], xmm6
lea rcx, [rbp + 0xa8]
call fcn.1400954b0
lea rcx, [0x14029ada8]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14029ada8]
call fcn.1400b9ce0
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b614c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xb0], xmm1
vmovss dword [rbp + 0xb4], xmm6
lea rcx, [rbp + 0xb0]
call fcn.1400954b0
vmovups xmm0, xmmword [0x1401b9de0]
vmovups xmmword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.140091880
lea rcx, str.Windows_Identifier:
call fcn.1400b9790
mov ecx, r14d
call fcn.140091250
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b614c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xb8], xmm1
vmovss dword [rbp + 0xbc], xmm6
lea rcx, [rbp + 0xb8]
call fcn.1400954b0
lea rcx, [0x14029ade8]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14029ade8]
call fcn.1400b9ce0
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, 2
jne 0x1401082bf
call fcn.140089660
vaddss xmm6, xmm0, xmm8
call fcn.140089630
vaddss xmm1, xmm0, xmm11
vmovss dword [rbp + 0xc0], xmm1
vmovss dword [rbp + 0xc4], xmm6
lea rcx, [rbp + 0xc0]
call fcn.1400954b0
vmovss dword [rbp + 0xc8], xmm15
vmovss dword [rbp + 0xcc], xmm14
lea rdx, [rbp + 0xc8]
lea rcx, str.SERIAL_CHECKER
call fcn.1400b15f0
test al, al
je 0x140107f17
cmp byte [0x1402f53c8], 0
sete al
mov byte [0x1402f53c8], al
jmp 0x140107f1e
movzx eax, byte [0x1402f53c8]
test al, al
je 0x1401082bf
call fcn.140089660
vaddss xmm6, xmm0, xmm8
call fcn.140089630
vaddss xmm1, xmm0, xmm11
vmovss dword [rbp + 0xd0], xmm1
vmovss dword [rbp + 0xd4], xmm6
lea rcx, [rbp + 0xd0]
call fcn.1400954b0
call fcn.140089660
vaddss xmm6, xmm0, xmm8
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xd8], xmm1
vmovss dword [rbp + 0xdc], xmm6
lea rcx, [rbp + 0xd8]
call fcn.1400954b0
vmovups xmm0, xmmword [0x1401b9de0]
vmovups xmmword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.140091880
lea rcx, str.Disk_Serials:
call fcn.1400b9790
mov ecx, r14d
call fcn.140091250
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b613c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xe0], xmm1
vmovss dword [rbp + 0xe4], xmm6
lea rcx, [rbp + 0xe0]
call fcn.1400954b0
mov rcx, rdi
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14029ad68]
call fcn.1400b9ce0
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b613c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xe8], xmm1
vmovss dword [rbp + 0xec], xmm6
lea rcx, [rbp + 0xe8]
call fcn.1400954b0
vmovups xmm0, xmmword [0x1401b9de0]
vmovups xmmword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.140091880
lea rcx, str.BIOS_Serials:
call fcn.1400b9790
mov ecx, r14d
call fcn.140091250
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b613c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xf0], xmm1
vmovss dword [rbp + 0xf4], xmm6
lea rcx, [rbp + 0xf0]
call fcn.1400954b0
lea rcx, [0x14029ad88]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14029ad88]
call fcn.1400b9ce0
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b613c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0xf8], xmm1
vmovss dword [rbp + 0xfc], xmm6
lea rcx, [rbp + 0xf8]
call fcn.1400954b0
vmovups xmm0, xmmword [0x1401b9de0]
vmovups xmmword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.140091880
lea rcx, str.MotherBoard:
call fcn.1400b9790
mov ecx, r14d
call fcn.140091250
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b613c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x100], xmm1
vmovss dword [rbp + 0x104], xmm6
lea rcx, [rbp + 0x100]
call fcn.1400954b0
lea rcx, [0x14029adc8]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14029adc8]
call fcn.1400b9ce0
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b613c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x108], xmm1
vmovss dword [rbp + 0x10c], xmm6
lea rcx, [rbp + 0x108]
call fcn.1400954b0
vmovups xmm0, xmmword [0x1401b9de0]
vmovups xmmword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.140091880
lea rcx, str.Windows_UUID:
call fcn.1400b9790
mov ecx, r14d
call fcn.140091250
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b613c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x110], xmm1
vmovss dword [rbp + 0x114], xmm6
lea rcx, [rbp + 0x110]
call fcn.1400954b0
lea rcx, [0x14029ada8]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14029ada8]
call fcn.1400b9ce0
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b614c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x118], xmm1
vmovss dword [rbp + 0x11c], xmm6
lea rcx, [rbp + 0x118]
call fcn.1400954b0
vmovups xmm0, xmmword [0x1401b9de0]
vmovups xmmword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.140091880
lea rcx, str.Windows_Identifier:
call fcn.1400b9790
mov ecx, r14d
call fcn.140091250
call fcn.140089660
vaddss xmm6, xmm0, dword [0x1401b614c]
call fcn.140089630
vaddss xmm1, xmm0, xmm8
vmovss dword [rbp + 0x120], xmm1
vmovss dword [rbp + 0x124], xmm6
lea rcx, [rbp + 0x120]
call fcn.1400954b0
lea rcx, [0x14029ade8]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14029ade8]
call fcn.1400b9ce0
call fcn.140087320
call fcn.140091140
call fcn.140086fb0
mov ecx, r14d
call fcn.1400912a0
call fcn.140087500
mov rcx, qword [0x1402f13c0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x1402f13c0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x1402f13c0]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [0x1402f13c0]
mov rax, qword [rcx]
mov dword [rsp + 0x30], esi
vmovss xmm0, dword [0x1401b611c]
vmovss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], esi
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1402f13c0]
mov rax, qword [rcx]
call qword [rax + pe_nt_image_headers64]
test eax, eax
js 0x140108388
call fcn.140091a90
call fcn.140089690
mov rcx, rax
call fcn.1400ac7d0
mov rcx, qword [0x1402f13c0]
mov rax, qword [rcx]
call qword [rax + 0x150]
call fcn.140089a80
test dword [rax], 0x400
je 0x1401083a3
call fcn.140097980
xor edx, edx
xor ecx, ecx
call fcn.1400926f0
mov rcx, qword [0x1402f13c0]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140105a20
mov rcx, qword [0x1402f13c0]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x140105a20
call fcn.1400ac610
mov rcx, qword [0x1402f13c0]
mov rax, qword [rcx]
lea rdx, [0x1402f13d0]
call qword [rax + 0x80]
call fcn.1400ac1c0
jmp 0x140105a20
xor al, al
lea r11, [rsp + 0x8f8]
vmovaps xmm6, xmmword [r11 - 0x18]
vmovaps xmm7, xmmword [r11 - 0x28]
vmovaps xmm8, xmmword [r11 - 0x38]
vmovaps xmm9, xmmword [r11 - 0x48]
vmovaps xmm10, xmmword [r11 - 0x58]
vmovaps xmm11, xmmword [r11 - 0x68]
vmovaps xmm12, xmmword [r11 - 0x78]
vmovaps xmm13, xmmword [r11 - 0x88]
vmovaps xmm14, xmmword [r11 - 0x98]
vmovaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x840]
call fcn.1400c6a30
movzx edx, byte [rax + 0x16]
test dl, dl
je 0x1401084e7
xor byte [rax], 0x37
xor byte [rax + 1], 0x38
xor byte [rax + 2], 0x39
xor byte [rax + 3], 0x3a
xor byte [rax + 4], 0x3b
xor byte [rax + 5], 0x3c
xor byte [rax + 6], 0x3d
xor byte [rax + 7], 0x3e
xor byte [rax + 8], 0x3f
xor byte [rax + 9], 0x40
xor byte [rax + 0xa], 0x41
xor byte [rax + 0xb], 0x42
xor byte [rax + 0xc], 0x43
xor byte [rax + 0xd], 0x44
xor byte [rax + 0xe], 0x45
xor byte [rax + 0xf], 0x46
xor byte [rax + 0x10], 0x47
xor byte [rax + 0x11], 0x48
xor byte [rax + 0x12], 0x49
xor byte [rax + 0x13], 0x4a
xor byte [rax + 0x14], 0x4b
xor byte [rax + 0x15], 0x4c
xor dl, 0x4d
mov byte [rax + 0x16], dl
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.14006d660
mov rdx, rax
lea rcx, [0x1402f0c90]
call fcn.140143c80
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3