Function at 0x14000ff90
Capabilities:
Create thread
Encode data using xor
Execute command
Hide graphical window
Log keystrokes via polling
Set console window title

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3f8]
sub rsp, 0x4c0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
xor r13d, r13d
lea ebx, [r13 + 0x1f]
lea r15d, [r13 + 4]
mov r12d, dword [reloc.WS2_32.dll_accept]
nop dword [rax]
nop dword [rax + rax]
mov edi, r13d
mov dword [rbp + 0x400], r13d
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 3
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [str.VY_WK]
mov qword [rbp + 0x408], rax
cmp byte [reloc.WLDAP32.dll_Ordinal_60], dil
je 0x140010180
cmp r12d, 2
jl 0x14001013a
movdqa xmm4, xmmword [0x140066a60]
movd xmm6, r15d
movd xmm5, ebx
movdqa xmm2, xmmword [0x140066a00]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140066a20]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140066a40]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140066a50]
movd xmm0, dword [rbp + 0x408]
xorps xmm2, xmm0
movd dword [rbp + 0x408], xmm2
movdqa xmm3, xmmword [0x140066a10]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140066a20]
psubd xmm3, xmm0
psubd mm3, mm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140066a40]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140066a50]
movd xmm0, dword [rbp + 0x40c]
xorps xmm2, xmm0
movd dword [rbp + 0x40c], xmm2
jmp 0x140010180
lea r9, [rbp + 0x408]
mov r8d, r13d
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140010150
lea rcx, [rbp + 0x408]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140065dd0]
movups xmmword [rbp + 0x310], xmm0
movups xmm1, xmmword [0x140065de0]
movups xmmword [rbp + 0x320], xmm1
movups xmm0, xmmword [str._ijklmn]
movups xmmword [rbp + 0x330], xmm0
movups xmm1, xmmword [0x140065e00]
movups xmmword [rbp + 0x340], xmm1
movups xmm0, xmmword [0x140065e10]
movups xmmword [rbp + 0x350], xmm0
movups xmm1, xmmword [0x140065e20]
movups xmmword [rbp + 0x360], xmm1
movsd xmm0, qword [0x140065e30]
movsd qword [rbp + 0x370], xmm0
mov eax, dword [0x140065e38]
mov dword [rbp + 0x378], eax
movzx eax, word [reloc.WS2_32.dll_gethostname]
mov word [rbp + 0x37c], ax
mov r8d, r13d
cmp r12d, 2
jl 0x14001033f
movdqa xmm5, xmmword [0x140066a00]
movdqa xmm4, xmmword [0x140066a60]
movd xmm6, r15d
movdqa xmm7, xmmword [0x140066a20]
movd xmm8, ebx
movdqa xmm9, xmmword [0x140066a30]
lea rcx, [rbp + 0x310]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x30
jl 0x140010250
cmp r8d, 0x37
jge 0x140010384
movsxd rax, r8d
lea r9, [rbp + 0x310]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x32
movzx eax, r8w
sub ax, cx
add ax, 0x35
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x37
jl 0x140010350
lea rcx, [rbp + 0x310]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov eax, dword [str.VZD8]
mov dword [rbp + 0x408], eax
cmp byte [0x140065d9b], dil
je 0x140010480
cmp r12d, 2
jl 0x14001043b
movdqa xmm3, xmmword [0x140066a00]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x140066a60]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x140066a60]
shufps xmm2, xmm0, 0xdd
movd xmm0, r15d
psrad xmm2, xmm0
movd xmm0, ebx
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x140066a20]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140066a40]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140066a50]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0x408], xmm2
jmp 0x140010480
lea r9, [rbp + 0x408]
mov r8d, r13d
nop word [rax + rax]
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140010450
lea rcx, [rbp + 0x408]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov ecx, Ordinal_50
call fcn.140055f10
mov rsi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], Ordinal_45
mov qword [rsp + 0x48], Ordinal_50
movups xmm0, xmmword [str._n_n_n_Welcome_To_OverWOrld_Perm_Spoofer]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140065970]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x140065980]
mov dword [rax + 0x20], ecx
movzx ecx, byte [0x140065984]
mov byte [rax + 0x24], cl
lea r14, [rax + 0x25]
mov byte [r14], dil
mov dword [rsp + 0x50], reloc.WLDAP32.dll_Ordinal_50
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rax
cmp rax, r14
je 0x14001053f
mov qword [rbp + 0x408], reloc.WLDAP32.dll_Ordinal_50
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, r15
call fcn.1400122c0
mov rcx, rax
lea rdx, [0x140012490]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x408]
call fcn.1400124b0
inc rbx
cmp rbx, r14
jne 0x140010510
mov edx, Ordinal_50
mov rcx, rsi
call fcn.14005626c
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov ecx, Ordinal_50
call fcn.140055f10
mov rsi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], Ordinal_41
mov qword [rsp + 0x48], Ordinal_50
movups xmm0, xmmword [str._n_n_Checking_For_Blacklisted_Programs]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140065998]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x1400659a8]
mov dword [rax + 0x20], ecx
lea r14, [rax + 0x24]
mov byte [r14], 0
mov dword [rsp + 0x50], reloc.WLDAP32.dll_Ordinal_50
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rax
cmp rax, r14
je 0x1400105ef
mov qword [rbp + 0x408], reloc.WLDAP32.dll_Ordinal_50
movzx edx, byte [rbx]
mov rcx, r15
call fcn.1400122c0
mov rcx, rax
lea rdx, [0x140012490]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x408]
call fcn.1400124b0
inc rbx
cmp rbx, r14
jne 0x1400105c0
mov edx, Ordinal_50
mov rcx, rsi
call fcn.14005626c
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [0x14000f390]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [0x14000f3b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], ntohs
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str....___Done_]
movsd qword [rbp - 0x60], xmm0
movzx eax, word [0x140065958]
mov word [rbp - 0x58], ax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_33]
mov byte [rbp - 0x56], al
mov byte [rbp - 0x55], 0
mov dword [rbp - 0x40], reloc.WLDAP32.dll_Ordinal_50
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp - 0x60]
lea rsi, [rbp - 0x60]
add rsi, 0xb
cmp rbx, rsi
je 0x1400106df
mov qword [rbp + 0x408], reloc.WLDAP32.dll_Ordinal_50
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.1400122c0
mov rcx, rax
lea rdx, [0x140012490]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x408]
call fcn.1400124b0
inc rbx
cmp rbx, rsi
jne 0x1400106b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140055f10
mov rsi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], Ordinal_35
mov qword [rsp + 0x48], Ordinal_35
movups xmm0, xmmword [str._n_n_Closing_Epic_Gammes_Tasks]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400659c0]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x1400659c8]
mov dword [rax + 0x18], ecx
lea r14, [rax + 0x1c]
mov byte [r14], 0
mov dword [rsp + 0x50], reloc.WLDAP32.dll_Ordinal_50
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rax
cmp rax, r14
je 0x140010784
mov qword [rbp + 0x408], reloc.WLDAP32.dll_Ordinal_50
movzx edx, byte [rbx]
mov rcx, r15
call fcn.1400122c0
mov rcx, rax
lea rdx, [0x140012490]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x408]
call fcn.1400124b0
inc rbx
cmp rbx, r14
jne 0x140010755
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, rsi
call fcn.14005626c
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [0x14000fe60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r15d, 4
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 3
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.14000fe80
nop
lea rax, [rbp - 0x80]
mov qword [rbp + 0x408], rax
lea rdx, [0x14006574c]
lea rcx, [rbp - 0x80]
call fcn.140011f50
mov rbx, rax
lea rdx, [0x1400659d0]
lea rcx, [rsp + 0x30]
call fcn.140011f50
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140012b20
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x250], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x258], rax
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x260]
call fcn.140012980
or edi, 0x20
mov dword [rbp + 0x400], edi
lea r9, [0x140002100]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.140055f4c
lea rdx, [rbp + 0x260]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140012810
and edi, 0xffffffdf
mov dword [rbp + 0x400], edi
lea rcx, [rbp + 0x260]
call fcn.140011d50
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x408], rax
lea rdx, [0x140065778]
lea rcx, [rsp + 0x30]
call fcn.140011f50
mov rbx, rax
lea rdx, [0x140065728]
lea rcx, [rbp - 0x80]
call fcn.140011f50
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140012b20
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x270], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x278], rax
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x280]
call fcn.140012980
or edi, 0x40
mov dword [rbp + 0x400], edi
lea r9, [0x140002100]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.140055f4c
lea rdx, [rbp + 0x280]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140012810
and edi, 0xffffffbf
mov dword [rbp + 0x400], edi
lea rcx, [rbp + 0x280]
call fcn.140011d50
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], 2
mov qword [rbp + 0x80], reloc.WS2_32.dll_ntohs
mov eax, 0x3146
mov word [rbp + 0x68], ax
mov byte [rbp + 0x6a], 0
mov dword [rbp + 0x88], reloc.WLDAP32.dll_Ordinal_50
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0x68]
lea rsi, [rbp + 0x68]
add rsi, 2
cmp rbx, rsi
je 0x1400109d4
mov qword [rbp + 0x408], reloc.WLDAP32.dll_Ordinal_50
movzx edx, byte [rbx]
mov rcx, r14
call fcn.1400122c0
mov rcx, rax
lea rdx, [0x140012490]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x408]
call fcn.1400124b0
inc rbx
cmp rbx, rsi
jne 0x1400109a5
lea rax, [rsp + 0x30]
mov qword [rbp + 0x408], rax
lea rdx, [0x14006574c]
lea rcx, [rsp + 0x30]
call fcn.140011f50
mov rbx, rax
lea rdx, [0x1400659d8]
lea rcx, [rbp - 0x80]
call fcn.140011f50
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140012b20
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x1c0], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x1c8], rax
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x290]
call fcn.140012980
bts edi, 7
mov dword [rbp + 0x400], edi
lea r9, [0x140002100]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.140055f4c
lea rdx, [rbp + 0x290]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140012810
btr edi, 7
mov dword [rbp + 0x400], edi
lea rcx, [rbp + 0x290]
call fcn.140011d50
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xa8], reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x90], 0x203e2d20
mov byte [rbp + 0x94], 0
mov dword [rbp + 0xb0], reloc.WLDAP32.dll_Ordinal_50
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0x90]
lea rsi, [rbp + 0x90]
add rsi, 4
cmp rbx, rsi
je 0x140010b1f
mov qword [rbp + 0x408], reloc.WLDAP32.dll_Ordinal_50
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.1400122c0
mov rcx, rax
lea rdx, [0x140012490]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x408]
call fcn.1400124b0
inc rbx
cmp rbx, rsi
jne 0x140010af0
lea rax, [rsp + 0x30]
mov qword [rbp + 0x408], rax
lea rdx, [0x14006574c]
lea rcx, [rsp + 0x30]
call fcn.140011f50
mov rbx, rax
lea rdx, [0x1400659e4]
lea rcx, [rbp - 0x80]
call fcn.140011f50
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140012b20
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x2a0], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x2a8], rax
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x2b0]
call fcn.140012980
bts edi, 8
mov dword [rbp + 0x400], edi
lea r9, [0x140002100]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.140055f4c
lea rdx, [rbp + 0x2b0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140012810
btr edi, 8
mov dword [rbp + 0x400], edi
lea rcx, [rbp + 0x2b0]
call fcn.140011d50
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], 0xa
mov qword [rbp + 8], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.PERM_UNBAN]
movsd qword [rbp - 0x10], xmm0
movzx eax, word [0x1400659f0]
mov word [rbp - 8], ax
mov byte [rbp - 6], 0
mov dword [rbp + 0x10], reloc.WLDAP32.dll_Ordinal_50
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp - 0x10]
lea rsi, [rbp - 0x10]
add rsi, 0xa
cmp rbx, rsi
je 0x140010c64
mov qword [rbp + 0x408], reloc.WLDAP32.dll_Ordinal_50
movzx edx, byte [rbx]
mov rcx, r14
call fcn.1400122c0
mov rcx, rax
lea rdx, [0x140012490]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x408]
call fcn.1400124b0
inc rbx
cmp rbx, rsi
jne 0x140010c35
lea rax, [rsp + 0x30]
mov qword [rbp + 0x408], rax
lea rdx, [0x14006574c]
lea rcx, [rsp + 0x30]
call fcn.140011f50
mov rbx, rax
lea rdx, [0x1400659d8]
lea rcx, [rbp - 0x80]
call fcn.140011f50
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140012b20
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x2d0], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x2d8], rax
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x2e0]
call fcn.140012980
bts edi, 9
mov dword [rbp + 0x400], edi
lea r9, [0x140002100]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.140055f4c
lea rdx, [rbp + 0x2e0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140012810
btr edi, 9
mov dword [rbp + 0x400], edi
lea rcx, [rbp + 0x2e0]
call fcn.140011d50
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x408], rax
lea rdx, [0x14006574c]
lea rcx, [rsp + 0x30]
call fcn.140011f50
mov rbx, rax
lea rdx, [0x1400659d0]
lea rcx, [rbp - 0x80]
call fcn.140011f50
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140012b20
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x2f0], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x2f8], rax
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x300]
call fcn.140012980
bts edi, 0xa
mov dword [rbp + 0x400], edi
lea r9, [0x140002100]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.140055f4c
lea rdx, [rbp + 0x300]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140012810
btr edi, 0xa
mov dword [rbp + 0x400], edi
lea rcx, [rbp + 0x300]
call fcn.140011d50
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x408], rax
lea rdx, [0x140065778]
lea rcx, [rsp + 0x30]
call fcn.140011f50
mov rbx, rax
lea rdx, [0x140065728]
lea rcx, [rbp - 0x80]
call fcn.140011f50
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140012b20
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x130], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x138], rax
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call fcn.140012980
bts edi, 0xb
mov dword [rbp + 0x400], edi
lea r9, [0x140002100]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.140055f4c
lea rdx, [rbp + 0x140]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140012810
btr edi, 0xb
mov dword [rbp + 0x400], edi
lea rcx, [rbp + 0x140]
call fcn.140011d50
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], 2
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov eax, 0x3246
mov word [rbp + 0x40], ax
mov byte [rbp + 0x42], 0
mov dword [rbp + 0x60], reloc.WLDAP32.dll_Ordinal_50
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0x40]
lea rsi, [rbp + 0x40]
add rsi, 2
cmp rbx, rsi
je 0x140010f0f
mov qword [rbp + 0x408], reloc.WLDAP32.dll_Ordinal_50
nop
movzx edx, byte [rbx]
mov rcx, r14
call fcn.1400122c0
mov rcx, rax
lea rdx, [0x140012490]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x408]
call fcn.1400124b0
inc rbx
cmp rbx, rsi
jne 0x140010ee0
lea rax, [rsp + 0x30]
mov qword [rbp + 0x408], rax
lea rdx, [0x14006574c]
lea rcx, [rsp + 0x30]
call fcn.140011f50
mov rbx, rax
lea rdx, [0x1400659d8]
lea rcx, [rbp - 0x80]
call fcn.140011f50
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140012b20
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x150], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x158], rax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x160]
call fcn.140012980
or edi, 0x10
mov dword [rbp + 0x400], edi
lea r9, [0x140002100]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.140055f4c
lea rdx, [rbp + 0x160]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140012810
and edi, 0xffffffef
mov dword [rbp + 0x400], edi
lea rcx, [rbp + 0x160]
call fcn.140011d50
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], r15
mov qword [rbp + 0xd0], reloc.WS2_32.dll_ntohs
mov dword [rbp + 0xb8], 0x203e2d20
mov byte [rbp + 0xbc], 0
mov dword [rbp + 0xd8], reloc.WLDAP32.dll_Ordinal_50
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0xb8]
lea rsi, [rbp + 0xb8]
add rsi, 4
cmp rbx, rsi
je 0x14001105f
mov qword [rbp + 0x408], reloc.WLDAP32.dll_Ordinal_50
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.1400122c0
mov rcx, rax
lea rdx, [0x140012490]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x408]
call fcn.1400124b0
inc rbx
cmp rbx, rsi
jne 0x140011030
lea rax, [rsp + 0x30]
mov qword [rbp + 0x408], rax
lea rdx, [0x14006574c]
lea rcx, [rsp + 0x30]
call fcn.140011f50
mov rbx, rax
lea rdx, [0x1400659e4]
lea rcx, [rbp - 0x80]
call fcn.140011f50
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140012b20
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x170], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x178], rax
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x180]
call fcn.140012980
or edi, 8
mov dword [rbp + 0x400], edi
lea r9, [0x140002100]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.140055f4c
lea rdx, [rbp + 0x180]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140012810
and edi, 0xfffffff7
mov dword [rbp + 0x400], edi
lea rcx, [rbp + 0x180]
call fcn.140011d50
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], reloc.WS2_32.dll_listen
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.CHECK_SERIALS]
movsd qword [rbp - 0x38], xmm0
mov eax, dword [0x140065a00]
mov dword [rbp - 0x30], eax
movzx eax, byte [0x140065a04]
mov byte [rbp - 0x2c], al
mov byte [rbp - 0x2b], 0
mov dword [rbp - 0x18], reloc.WLDAP32.dll_Ordinal_50
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp - 0x38]
lea rsi, [rbp - 0x38]
add rsi, 0xd
cmp rbx, rsi
je 0x1400111af
mov qword [rbp + 0x408], reloc.WLDAP32.dll_Ordinal_50
nop dword [rax + rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.1400122c0
mov rcx, rax
lea rdx, [0x140012490]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x408]
call fcn.1400124b0
inc rbx
cmp rbx, rsi
jne 0x140011180
lea rax, [rsp + 0x30]
mov qword [rbp + 0x408], rax
lea rdx, [0x14006574c]
lea rcx, [rsp + 0x30]
call fcn.140011f50
mov rbx, rax
lea rdx, [0x1400659d8]
lea rcx, [rbp - 0x80]
call fcn.140011f50
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140012b20
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x190], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x198], rax
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x1a0]
call fcn.140012980
or edi, 4
mov dword [rbp + 0x400], edi
lea r9, [0x140002100]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.140055f4c
lea rdx, [rbp + 0x1a0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140012810
and edi, 0xfffffffb
mov dword [rbp + 0x400], edi
lea rcx, [rbp + 0x1a0]
call fcn.140011d50
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x408], rax
lea rdx, [0x14006574c]
lea rcx, [rsp + 0x30]
call fcn.140011f50
mov rbx, rax
lea rdx, [0x1400659d0]
lea rcx, [rbp - 0x80]
call fcn.140011f50
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140012b20
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x1b0], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x1b8], rax
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x2c0]
call fcn.140012980
or edi, 2
mov dword [rbp + 0x400], edi
lea r9, [0x140002100]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.140055f4c
lea rdx, [rbp + 0x2c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140012810
and edi, 0xfffffffd
mov dword [rbp + 0x400], edi
lea rcx, [rbp + 0x2c0]
call fcn.140011d50
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x408], rax
lea rdx, [0x140065778]
lea rcx, [rsp + 0x30]
call fcn.140011f50
mov rbx, rax
lea rdx, [0x140065728]
lea rcx, [rbp - 0x80]
call fcn.140011f50
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140012b20
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x1d0], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x1d8], rax
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x1e0]
call fcn.140012980
or edi, 1
mov dword [rbp + 0x400], edi
lea r9, [0x140002100]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.140055f4c
lea rdx, [rbp + 0x1e0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140012810
and edi, 0xfffffffe
mov dword [rbp + 0x400], edi
lea rcx, [rbp + 0x1e0]
call fcn.140011d50
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], 2
mov qword [rbp + reloc.WS2_32.dll_ntohs8], 0xf
mov eax, 0x3346
mov word [rbp + 0xe0], ax
mov byte [rbp + 0xe2], 0
mov dword [rbp + 0x100], reloc.WLDAP32.dll_Ordinal_50
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0xe0]
lea rsi, [rbp + 0xe0]
add rsi, 2
cmp rbx, rsi
je 0x14001146f
mov qword [rbp + 0x408], reloc.WLDAP32.dll_Ordinal_50
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.1400122c0
mov rcx, rax
lea rdx, [0x140012490]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x408]
call fcn.1400124b0
inc rbx
cmp rbx, rsi
jne 0x140011440
lea rax, [rsp + 0x30]
mov qword [rbp + 0x408], rax
lea rdx, [0x14006574c]
lea rcx, [rsp + 0x30]
call fcn.140011f50
mov rbx, rax
lea rdx, [0x1400659d8]
lea rcx, [rbp - 0x80]
call fcn.140011f50
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140012b20
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x1f0], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x1f8], rax
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x200]
call fcn.140012980
bts edi, 0xc
mov dword [rbp + 0x400], edi
lea r9, [0x140002100]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.140055f4c
lea rdx, [rbp + 0x200]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140012810
btr edi, 0xc
mov dword [rbp + 0x400], edi
lea rcx, [rbp + 0x200]
call fcn.140011d50
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r15
mov qword [rbp + 0x120], reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x108], 0x203e2d20
mov byte [rbp + 0x10c], 0
mov dword [rbp + 0x128], reloc.WLDAP32.dll_Ordinal_50
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0x108]
lea rsi, [rbp + 0x108]
add rsi, 4
cmp rbx, rsi
je 0x1400115bf
mov qword [rbp + 0x408], reloc.WLDAP32.dll_Ordinal_50
nop dword [rax + rax]
movzx edx, byte [rbx]
mov rcx, r14
call fcn.1400122c0
mov rcx, rax
lea rdx, [0x140012490]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x408]
call fcn.1400124b0
inc rbx
cmp rbx, rsi
jne 0x140011590
lea rax, [rsp + 0x30]
mov qword [rbp + 0x408], rax
lea rdx, [0x14006574c]
lea rcx, [rsp + 0x30]
call fcn.140011f50
mov rbx, rax
lea rdx, [0x1400659e4]
lea rcx, [rbp - 0x80]
call fcn.140011f50
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140012b20
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x210], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x218], rax
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x220]
call fcn.140012980
bts edi, 0xd
mov dword [rbp + 0x400], edi
lea r9, [0x140002100]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.140055f4c
lea rdx, [rbp + 0x220]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140012810
btr edi, 0xd
mov dword [rbp + 0x400], edi
lea rcx, [rbp + 0x220]
call fcn.140011d50
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], 5
mov qword [rbp + 0x30], reloc.WS2_32.dll_ntohs
mov eax, dword [str.CLEAN]
mov dword [rbp + 0x18], eax
movzx eax, byte [0x140065a0c]
mov byte [rbp + 0x1c], al
mov byte [rbp + 0x1d], 0
mov dword [rbp + 0x38], reloc.WLDAP32.dll_Ordinal_50
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rbp + 0x18]
lea rsi, [rbp + 0x18]
add rsi, 5
cmp rbx, rsi
je 0x1400116ff
mov qword [rbp + 0x408], reloc.WLDAP32.dll_Ordinal_50
movzx edx, byte [rbx]
mov rcx, r14
call fcn.1400122c0
mov rcx, rax
lea rdx, [0x140012490]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x408]
call fcn.1400124b0
inc rbx
cmp rbx, rsi
jne 0x1400116d0
lea rax, [rsp + 0x30]
mov qword [rbp + 0x408], rax
lea rdx, [0x14006574c]
lea rcx, [rsp + 0x30]
call fcn.140011f50
mov rbx, rax
lea rdx, [0x1400659d8]
lea rcx, [rbp - 0x80]
call fcn.140011f50
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140012b20
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x230], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x238], rax
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x240]
call fcn.140012980
bts edi, 0xe
mov dword [rbp + 0x400], edi
lea r9, [0x140002100]
mov edx, Ordinal_41
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.140055f4c
lea rdx, [rbp + 0x240]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140012810
btr edi, 0xe
mov dword [rbp + 0x400], edi
lea rcx, [rbp + 0x240]
call fcn.140011d50
mov ecx, reloc.WS2_32.dll_WSASetLastError
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x140011805
nop word [rax + rax]
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x140011a81
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x140011a8b
mov ecx, reloc.WS2_32.dll_WSASetLastError
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400117d0
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.1400023d0
movups xmm0, xmmword [str.FBVJM]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [0x140065bb0]
movups xmmword [rsp + 0x40], xmm1
mov eax, dword [0x140065bc0]
mov dword [rsp + 0x50], eax
mov ecx, r13d
cmp r12d, 2
jl 0x140011983
movdqa xmm5, xmmword [0x140066a00]
movdqa xmm4, xmmword [0x140066a60]
movd xmm6, r15d
movdqa xmm7, xmmword [0x140066a20]
mov eax, Ordinal_35
movd xmm8, eax
movdqa xmm0, xmmword [0x140066a50]
movdqa xmmword [rbp - 0x80], xmm0
lea rdx, [rsp + 0x34]
mov r8d, dword [rbp - 0x80]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140066a40]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140066a40]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x20
jl 0x140011883
cmp ecx, 0x24
jge 0x1400119bc
movsxd rax, ecx
lea r8, [rsp + 0x30]
add r8, rax
nop
mov eax, 0x51eb851f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x32
movzx eax, cl
sub al, dl
add al, 0x35
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x24
jl 0x140011990
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov ecx, Ordinal_50
call fcn.140055f10
mov rsi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], Ordinal_41
mov qword [rsp + 0x48], Ordinal_50
movups xmm0, xmmword [str._n_n_n____________Done_Perm_Spoofing_n_n_n]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140065a20]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x140065a30]
mov dword [rax + 0x20], ecx
lea r14, [rax + 0x24]
mov byte [r14], 0
mov dword [rsp + 0x50], reloc.WLDAP32.dll_Ordinal_50
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rax
cmp rax, r14
je 0x140011a6f
mov qword [rbp + 0x408], reloc.WLDAP32.dll_Ordinal_50
nop dword [rax + rax]
movzx edx, byte [rbx]
mov rcx, r15
call fcn.1400122c0
mov rcx, rax
lea rdx, [0x140012490]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x408]
call fcn.1400124b0
inc rbx
cmp rbx, r14
jne 0x140011a40
mov edx, Ordinal_50
mov rcx, rsi
call fcn.14005626c
jmp 0x1400107af
call fcn.140004450
jmp 0x1400107b5
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov ecx, reloc.WS2_32.dll_WSASetLastError
call fcn.140055f10
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], WSAStartup
mov qword [rsp + 0x48], reloc.WS2_32.dll_WSAGetLastError
movups xmm0, xmmword [str._n_n_n_Cleaning_Pc_Please_Wait._This_Window_Will_Close_For_A_Second_But_When_Were_Done_The_Window_Will_Open_Again]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140065a50]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x140065a60]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [0x140065a70]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [0x140065a80]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [0x140065a90]
movups xmmword [rax + 0x50], xmm1
movsd xmm0, qword [0x140065aa0]
movsd qword [rax + 0x60], xmm0
mov eax, dword [0x140065aa8]
mov dword [rdi + 0x68], eax
movzx eax, word [0x140065aac]
mov word [rdi + 0x6c], ax
lea rsi, [rdi + 0x6e]
mov byte [rsi], 0
mov dword [rsp + 0x50], reloc.WLDAP32.dll_Ordinal_50
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rdi
cmp rdi, rsi
je 0x140011b71
mov qword [rbp + 0x408], reloc.WLDAP32.dll_Ordinal_50
movzx edx, byte [rbx]
mov rcx, r14
call fcn.1400122c0
mov rcx, rax
lea rdx, [0x140012490]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x408]
call fcn.1400124b0
inc rbx
cmp rbx, rsi
jne 0x140011b42
mov edx, reloc.WS2_32.dll_WSASetLastError
mov rcx, rdi
call fcn.14005626c
call fcn.140005920
movups xmm0, xmmword [str.FBVJM]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [0x140065bb0]
movups xmmword [rsp + 0x40], xmm1
mov eax, dword [0x140065bc0]
mov dword [rsp + 0x50], eax
mov r8d, r13d
mov ebx, Ordinal_35
cmp r12d, 2
jl 0x140011cf3
movdqa xmm5, xmmword [0x140066a00]
movdqa xmm4, xmmword [0x140066a60]
movd xmm6, r15d
movdqa xmm7, xmmword [0x140066a20]
movd xmm8, ebx
movdqa xmm0, xmmword [0x140066a50]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rbp - 0x80]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140066a40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140066a40]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140011bf0
cmp r8d, 0x24
jge 0x140011d30
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x24
jl 0x140011d00
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x14000ffe0