Function at 0x1400017c0
Capabilities:
Capture network configuration via ipconfig
Encode data using xor
Execute command
Get disk information
Persist via windows service
Self delete
Set registry value
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0xd00
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x140078180]
xor rax, rsp
mov qword [rsp + 0xcd0], rax
xor r13d, r13d
call fcn.140001530
test al, al
jne 0x14000182f
lea rdx, str.Run_as_Administrator__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movups xmm3, xmmword [0x140064b70]
movups xmmword [rsp + 0x50], xmm3
movsd xmm0, qword [0x140064b80]
movsd qword [rsp + 0x60], xmm0
movzx eax, word [0x140064b88]
mov word [rsp + 0x68], ax
mov ebx, dword [0x1400781d8]
movdqa xmm7, xmmword [0x140064ca0]
cmp byte [0x140064b89], r13b
je 0x140001b35
mov r8d, r13d
cmp ebx, 2
jl 0x140001aee
movdqa xmm4, xmmword [0x140064cc0]
movdqa xmm5, xmmword [str.3333]
movdqa xmm6, xmmword [0x140064cb0]
movdqa xmm2, xmmword [0x140064c30]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm6
movd eax, xmm3
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rsp + 0x50], xmm2
movdqa xmm2, xmmword [0x140064c40]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm6
movd xmm0, dword [rsp + 0x54]
xorps xmm2, xmm0
movd dword [rsp + 0x54], xmm2
movdqa xmm3, xmmword [0x140064c50]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm6
movd xmm0, dword [rsp + 0x58]
xorps xmm3, xmm0
movd dword [rsp + 0x58], xmm3
movdqa xmm2, xmmword [0x140064c60]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm6
movd xmm0, dword [rsp + 0x5c]
xorps xmm2, xmm0
movd dword [rsp + 0x5c], xmm2
movdqa xmm3, xmmword [0x140064c70]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm6
movd xmm0, dword [rsp + 0x60]
xorps xmm3, xmm0
movd dword [rsp + 0x60], xmm3
movdqa xmm2, xmmword [0x140064c80]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm6
movd xmm0, dword [rsp + 0x64]
xorps xmm2, xmm0
movd dword [rsp + 0x64], xmm2
mov r8d, 0x18
mov eax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x33
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1a
jl 0x140001b00
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.140005d20
nop
lea rcx, [rsp + 0x70]
call fcn.140031280
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x140001b93
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001b8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001b8e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
lea rdx, str.key:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x390], xmm0
movdqa xmm6, xmmword [0x140064b90]
movdqu xmmword [rsp + 0x3a0], xmm6
mov byte [rsp + 0x390], 0
lea rdx, [rsp + 0x390]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400069c0
nop
movups xmm0, xmmword [0x140064b40]
movups xmmword [rsp + 0xf0], xmm0
movsd xmm0, qword [0x140064b50]
movsd qword [rsp + 0x100], xmm0
mov eax, dword [0x140064b58]
mov dword [rsp + 0x108], eax
movzx eax, byte [0x140064b5c]
mov byte [rsp + 0x10c], al
mov ecx, r13d
cmp ebx, 2
jl 0x140001d4c
movdqa xmm4, xmmword [0x140064c30]
movdqa xmm3, xmmword [0x140064cc0]
movdqa xmm5, xmmword [str.3333]
movdqa xmm0, xmmword [0x140064cb0]
movdqa xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0xf4]
mov r8d, dword [rsp + 0x50]
nop dword [rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x18
jl 0x140001c60
cmp ecx, 0x1d
jge 0x140001d90
movsxd rax, ecx
lea r8, [rsp + 0xf0]
add r8, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul edx, eax, 0x33
add dl, cl
xor byte [r8], dl
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x1d
jl 0x140001d60
lea rdx, [rsp + 0xf0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
mov dword [rsp + 0x298], r13d
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x298]
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400631d0]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
mov edx, dword [rsp + 0x298]
lea rcx, [rsp + 0x70]
call fcn.140006640
nop
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x390]
call fcn.1400260f8
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x140001e42
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001e3d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001e3d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
movzx eax, byte [0x140064b6c]
mov edx, dword [0x140064b68]
movsd xmm0, qword [0x140064b60]
mov byte [rsp + 0x5c], al
mov dword [rsp + 0x58], edx
movsd qword [rsp + 0x50], xmm0
mov r9, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov ecx, r13d
cmp ebx, 2
jl 0x140001fc8
movdqa xmm4, xmmword [0x140064cc0]
movdqa xmm5, xmmword [str.3333]
movdqa xmm3, xmmword [0x140064c30]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
mov eax, dword [0x140064cb0]
movd xmm0, eax
paddb xmm3, xmm0
movd xmm0, dword [0x140064b60]
xorps xmm3, xmm0
movd dword [rsp + 0x50], xmm3
movdqa xmm2, xmmword [0x140064c40]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x54]
xorps xmm2, xmm1
movd dword [rsp + 0x54], xmm2
movdqa xmm3, xmmword [0x140064c50]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, eax
paddb xmm3, xmm0
movd xmm1, edx
xorps xmm3, xmm1
movd dword [rsp + 0x58], xmm3
mov ecx, recv
mov eax, ecx
lea r8, [rsp + 0x50]
add r8, rax
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul edx, eax, 0x33
add dl, cl
xor byte [r8], dl
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0xd
jl 0x140001fd2
lea rdx, [rsp + 0x50]
mov rcx, r9
call fcn.1400067e0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov edx, 0x400
lea rcx, [rsp + 0x8d0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__getcwd]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__0.0__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x130], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x140], xmm1
mov ecx, 0x30
call fcn.1400558a0
mov rsi, rax
mov qword [rsp + 0x130], rax
movdqa xmm0, xmmword [0x140064bd0]
movdqu xmmword [rsp + 0x140], xmm0
movups xmm0, xmmword [str.AMIDEWINx64.EXE__IVN__AMI____NUL]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140063230]
movups xmmword [rax + 0x10], xmm1
movzx ecx, word [0x140063240]
mov word [rax + 0x20], cx
mov byte [rax + 0x22], 0
lea rax, [rsp + 0x8d0]
mov rbx, 0xffffffffffffffff
mov rdi, rbx
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400020c1
cmp rdi, 0xd
ja 0x140002173
lea rax, [rdi + 0x22]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x8d0]
add rax, rdi
cmp rax, rsi
jbe 0x140002123
lea rax, [rsi + 0x22]
lea rcx, [rsp + 0x8d0]
cmp rcx, rax
ja 0x140002123
lea rax, [rsp + 0x8d0]
cmp rsi, rax
ja 0x140002113
mov r14, r13
jmp 0x140002126
lea rax, [rsp + 0x8d0]
mov r14, rsi
sub r14, rax
jmp 0x140002126
mov r14, rdi
lea rcx, [rsi + rdi]
mov r8d, 0x23
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, [rsp + 0x8d0]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
sub r8, r14
lea rax, [r14 + rdi]
lea rdx, [rsp + 0x8d0]
add rdx, rax
lea rcx, [rsi + r14]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x130]
jmp 0x14000219e
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x8d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movzx r8d, byte [rsp + 0x40]
mov rdx, rdi
lea rcx, [rsp + 0x130]
call fcn.140007a60
xorps xmm0, xmm0
movups xmmword [rsp + 0x2c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2d8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x2c8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x2d8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x148]
cmp rdx, 0xf
jbe 0x140002221
inc rdx
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000221c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000221c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
movdqu xmmword [rsp + 0x140], xmm6
mov byte [rsp + 0x130], 0
lea rcx, [rsp + 0x2c8]
cmp qword [rsp + 0x2e0], 0xf
cmova rcx, qword [rsp + 0x2c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r12d, eax
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__4.5__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x100], xmm1
mov ecx, 0x40
call fcn.1400558a0
mov rsi, rax
mov qword [rsp + 0xf0], rax
movdqa xmm0, xmmword [0x140064c00]
movdqu xmmword [rsp + 0x100], xmm0
movups xmm0, xmmword [str.AMIDEWINx64.EXE__SM__System_manufacturer____NUL]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140063270]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x140063280]
movups xmmword [rax + 0x20], xmm0
movzx eax, byte [0x140063290]
mov byte [rsi + 0x30], al
mov byte [rsi + 0x31], 0
lea rax, [rsp + 0x8d0]
mov rdi, rbx
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400022f0
cmp rdi, 0xe
ja 0x1400023a2
lea rax, [rdi + 0x31]
mov qword [rsp + 0x100], rax
lea rax, [rsp + 0x8d0]
add rax, rdi
cmp rax, rsi
jbe 0x140002352
lea rax, [rsi + 0x31]
lea rcx, [rsp + 0x8d0]
cmp rcx, rax
ja 0x140002352
lea rax, [rsp + 0x8d0]
cmp rsi, rax
ja 0x140002342
mov r14, r13
jmp 0x140002355
lea rax, [rsp + 0x8d0]
mov r14, rsi
sub r14, rax
jmp 0x140002355
mov r14, rdi
lea rcx, [rsi + rdi]
mov r8d, 0x32
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, [rsp + 0x8d0]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
sub r8, r14
lea rax, [r14 + rdi]
lea rdx, [rsp + 0x8d0]
add rdx, rax
lea rcx, [rsi + r14]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0xf0]
jmp 0x1400023cd
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x8d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movzx r8d, byte [rsp + 0x40]
mov rdx, rdi
lea rcx, [rsp + 0xf0]
call fcn.140007a60
xorps xmm0, xmm0
movups xmmword [rsp + 0x2a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2b8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x2a8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x2b8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x108]
cmp rdx, 0xf
jbe 0x140002450
inc rdx
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000244b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000244b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
movdqu xmmword [rsp + 0x100], xmm6
mov byte [rsp + 0xf0], 0
lea rcx, [rsp + 0x2a8]
cmp qword [rsp + 0x2c0], 0xf
cmova rcx, qword [rsp + 0x2a8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__9.0__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov ecx, 0x40
call fcn.1400558a0
mov rsi, rax
mov qword [rsp + 0x50], rax
movdqa xmm0, xmmword [0x140064c00]
movdqu xmmword [rsp + 0x60], xmm0
movups xmm0, xmmword [str.AMIDEWINx64.EXE__SP__System_product_name____NUL]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400632c0]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1400632d0]
movups xmmword [rax + 0x20], xmm0
movzx eax, byte [0x1400632e0]
mov byte [rsi + 0x30], al
mov byte [rsi + 0x31], 0
lea rax, [rsp + 0x8d0]
mov rdi, rbx
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140002510
cmp rdi, 0xe
ja 0x1400025bc
lea rax, [rdi + 0x31]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x8d0]
add rax, rdi
cmp rax, rsi
jbe 0x14000256f
lea rax, [rsi + 0x31]
lea rcx, [rsp + 0x8d0]
cmp rcx, rax
ja 0x14000256f
lea rax, [rsp + 0x8d0]
cmp rsi, rax
ja 0x14000255f
mov r14, r13
jmp 0x140002572
lea rax, [rsp + 0x8d0]
mov r14, rsi
sub r14, rax
jmp 0x140002572
mov r14, rdi
lea rcx, [rdi + rsi]
mov r8d, 0x32
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, [rsp + 0x8d0]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
sub r8, r14
lea rax, [r14 + rdi]
lea rdx, [rsp + 0x8d0]
add rdx, rax
lea rcx, [r14 + rsi]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x50]
jmp 0x1400025e4
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x8d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movzx r8d, byte [rsp + 0x40]
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.140007a60
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x360], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x350], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x360], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140002661
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000265c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000265c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
movdqu xmmword [rsp + 0x60], xmm6
mov byte [rsp + 0x50], 0
lea rcx, [rsp + 0x350]
cmp qword [rsp + 0x368], 0xf
cmova rcx, qword [rsp + 0x350]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__13.5__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x178], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x188], xmm1
mov ecx, 0x30
call fcn.1400558a0
mov rsi, rax
mov qword [rsp + 0x178], rax
movdqa xmm0, xmmword [0x140064bf0]
movdqu xmmword [rsp + 0x188], xmm0
movups xmm0, xmmword [str.AMIDEWINx64.EXE__SV__System_version____NUL]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140063310]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x140063320]
movsd qword [rax + 0x20], xmm0
mov eax, dword [0x140063328]
mov dword [rsi + 0x28], eax
mov byte [rsi + 0x2c], 0
lea rax, [rsp + 0x8d0]
mov rdi, rbx
inc rdi
cmp byte [rax + rdi], 0
jne 0x140002723
cmp rdi, 3
ja 0x1400027d5
lea rax, [rdi + 0x2c]
mov qword [rsp + 0x188], rax
lea rax, [rsp + 0x8d0]
add rax, rdi
cmp rax, rsi
jbe 0x140002785
lea rax, [rsi + 0x2c]
lea rcx, [rsp + 0x8d0]
cmp rcx, rax
ja 0x140002785
lea rax, [rsp + 0x8d0]
cmp rsi, rax
ja 0x140002775
mov r14, r13
jmp 0x140002788
lea rax, [rsp + 0x8d0]
mov r14, rsi
sub r14, rax
jmp 0x140002788
mov r14, rdi
lea rcx, [rsi + rdi]
mov r8d, 0x2d
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, [rsp + 0x8d0]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
sub r8, r14
lea rax, [r14 + rdi]
lea rdx, [rsp + 0x8d0]
add rdx, rax
lea rcx, [rsi + r14]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x178]
jmp 0x140002800
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x8d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movzx r8d, byte [rsp + 0x40]
mov rdx, rdi
lea rcx, [rsp + 0x178]
call fcn.140007a60
xorps xmm0, xmm0
movups xmmword [rsp + 0x370], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x380], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x370], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x380], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x190]
cmp rdx, 0xf
jbe 0x140002883
inc rdx
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000287e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000287e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
movdqu xmmword [rsp + 0x188], xmm6
mov byte [rsp + 0x178], 0
lea rcx, [rsp + 0x370]
cmp qword [rsp + 0x388], 0xf
cmova rcx, qword [rsp + 0x370]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__18.0__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x110], xmm0
movdqa xmm1, xmmword [0x140064ba0]
movdqu xmmword [rsp + 0x120], xmm1
movabs rax, 0x204c554e203e2022
mov qword [rsp + 0x110], rax
mov byte [rsp + 0x118], 0
xor r8d, r8d
mov edx, 0xa
lea rcx, [rsp + 0x70]
call fcn.1400015e0
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x198], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1a8], xmm1
mov ecx, 0x20
call fcn.1400558a0
mov rsi, rax
mov qword [rsp + 0x198], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_shutdown]
movdqu xmmword [rsp + 0x1a8], xmm0
movups xmm0, xmmword [str.AMIDEWINx64.EXE__SS__]
movups xmmword [rax], xmm0
mov ecx, dword [0x140063368]
mov dword [rax + 0x10], ecx
movzx ecx, word [0x14006336c]
mov word [rax + 0x14], cx
mov byte [rax + 0x16], 0
lea rax, [rsp + 0x8d0]
mov rdi, rbx
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140002990
cmp rdi, 9
ja 0x140002a42
lea rax, [rdi + 0x16]
mov qword [rsp + 0x1a8], rax
lea rax, [rsp + 0x8d0]
add rax, rdi
cmp rax, rsi
jbe 0x1400029f2
lea rax, [rsi + 0x16]
lea rcx, [rsp + 0x8d0]
cmp rcx, rax
ja 0x1400029f2
lea rax, [rsp + 0x8d0]
cmp rsi, rax
ja 0x1400029e2
mov r14, r13
jmp 0x1400029f5
lea rax, [rsp + 0x8d0]
mov r14, rsi
sub r14, rax
jmp 0x1400029f5
mov r14, rdi
lea rcx, [rsi + rdi]
mov r8d, reloc.WS2_32.dll_socket
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, [rsp + 0x8d0]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
sub r8, r14
lea rax, [r14 + rdi]
lea rdx, [rsp + 0x8d0]
add rdx, rax
lea rcx, [rsi + r14]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x198]
jmp 0x140002a6d
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x8d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movzx r8d, byte [rsp + 0x40]
mov rdx, rdi
lea rcx, [rsp + 0x198]
call fcn.140007a60
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xa0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r15
lea r8, [rsp + 0x90]
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0xb0]
call fcn.140007660
nop
lea r9, [rsp + 0x110]
lea r8, [rsp + 0xb0]
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x520]
call fcn.140007660
nop
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0xf
jbe 0x140002b1b
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002b15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002b15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
nop
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0xf
jbe 0x140002b62
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002b5c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002b5c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
nop
mov rdx, qword [rsp + 0x1b0]
cmp rdx, 0xf
jbe 0x140002ba8
inc rdx
mov rcx, qword [rsp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002ba3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002ba3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
movdqu xmmword [rsp + 0x1a8], xmm6
mov byte [rsp + 0x198], 0
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x140002bfc
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002bf7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002bf7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
movdqu xmmword [rsp + 0x80], xmm6
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x128]
cmp rdx, 0xf
jbe 0x140002c50
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c4b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c4b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
lea rcx, [rsp + 0x520]
cmp qword [rsp + 0x538], 0xf
cmova rcx, qword [rsp + 0x520]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__22.5__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x158], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x168], xmm1
mov ecx, 0x30
call fcn.1400558a0
mov rsi, rax
mov qword [rsp + 0x158], rax
movdqa xmm0, xmmword [0x140064bc0]
movdqu xmmword [rsp + 0x168], xmm0
movups xmm0, xmmword [str.AMIDEWINx64.EXE__SU_AUTO___NUL]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140063398]
movups xmmword [rax + 0x10], xmm1
mov byte [rax + 0x20], 0
lea rax, [rsp + 0x8d0]
mov rdi, rbx
inc rdi
cmp byte [rax + rdi], 0
jne 0x140002cf1
cmp rdi, 0xf
ja 0x140002da3
lea rax, [rdi + 0x20]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x8d0]
add rax, rdi
cmp rax, rsi
jbe 0x140002d53
lea rax, [rsi + 0x20]
lea rcx, [rsp + 0x8d0]
cmp rcx, rax
ja 0x140002d53
lea rax, [rsp + 0x8d0]
cmp rsi, rax
ja 0x140002d43
mov r14, r13
jmp 0x140002d56
lea rax, [rsp + 0x8d0]
mov r14, rsi
sub r14, rax
jmp 0x140002d56
mov r14, rdi
lea rcx, [rdi + rsi]
mov r8d, 0x21
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, [rsp + 0x8d0]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
sub r8, r14
lea rax, [r14 + rdi]
lea rdx, [rsp + 0x8d0]
add rdx, rax
lea rcx, [r14 + rsi]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x158]
jmp 0x140002dce
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x8d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movzx r8d, byte [rsp + 0x40]
mov rdx, rdi
lea rcx, [rsp + 0x158]
call fcn.140007a60
xorps xmm0, xmm0
movups xmmword [rsp + 0x330], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x340], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x330], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x340], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x170]
cmp rdx, 0xf
jbe 0x140002e51
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002e4c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
movdqu xmmword [rsp + 0x168], xmm6
mov byte [rsp + 0x158], 0
lea rcx, [rsp + 0x330]
cmp qword [rsp + 0x348], 0xf
cmova rcx, qword [rsp + 0x330]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__27.0__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
xorps xmm0, xmm0
movups xmmword [rsp + 0xd0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xe0], xmm1
mov ecx, 0x40
call fcn.1400558a0
mov rsi, rax
mov qword [rsp + 0xd0], rax
movdqa xmm0, xmmword [0x140064c10]
movdqu xmmword [rsp + 0xe0], xmm0
movups xmm0, xmmword [str.AMIDEWINx64.EXE__SK__To_Be_Filled_By_O.E.M____NUL]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400633d8]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1400633e8]
movups xmmword [rax + 0x20], xmm0
movzx eax, word [0x1400633f8]
mov word [rsi + 0x30], ax
movzx eax, byte [0x1400633fa]
mov byte [rsi + 0x32], al
mov byte [rsi + 0x33], 0
lea rax, [rsp + 0x8d0]
mov rdi, rbx
inc rdi
cmp byte [rax + rdi], 0
jne 0x140002f23
cmp rdi, 0xc
ja 0x140002fd5
lea rax, [rdi + 0x33]
mov qword [rsp + 0xe0], rax
lea rax, [rsp + 0x8d0]
add rax, rdi
cmp rax, rsi
jbe 0x140002f85
lea rax, [rsi + 0x33]
lea rcx, [rsp + 0x8d0]
cmp rcx, rax
ja 0x140002f85
lea rax, [rsp + 0x8d0]
cmp rsi, rax
ja 0x140002f75
mov r14, r13
jmp 0x140002f88
lea rax, [rsp + 0x8d0]
mov r14, rsi
sub r14, rax
jmp 0x140002f88
mov r14, rdi
lea rcx, [rsi + rdi]
mov r8d, 0x34
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, [rsp + 0x8d0]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
sub r8, r14
lea rax, [r14 + rdi]
lea rdx, [rsp + 0x8d0]
add rdx, rax
lea rcx, [rsi + r14]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0xd0]
jmp 0x140003000
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x8d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movzx r8d, byte [rsp + 0x40]
mov rdx, rdi
lea rcx, [rsp + 0xd0]
call fcn.140007a60
xorps xmm0, xmm0
movups xmmword [rsp + 0x310], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x320], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x310], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x320], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0xf
jbe 0x140003083
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000307e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000307e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
movdqu xmmword [rsp + 0xe0], xmm6
mov byte [rsp + 0xd0], 0
lea rcx, [rsp + 0x310]
cmp qword [rsp + 0x328], 0xf
cmova rcx, qword [rsp + 0x310]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__31.5__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xc0], xmm1
mov ecx, 0x40
call fcn.1400558a0
mov rdi, rax
mov qword [rsp + 0xb0], rax
movdqa xmm0, xmmword [0x140064c20]
movdqu xmmword [rsp + 0xc0], xmm0
movups xmm0, xmmword [str.AMIDEWINx64.EXE__SF__To_Be_Filled_By_O.E.M.____NUL]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140063428]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x140063438]
movups xmmword [rax + 0x20], xmm0
mov eax, dword [0x140063448]
mov dword [rdi + 0x30], eax
mov byte [rdi + 0x34], 0
lea rax, [rsp + 0x8d0]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140003146
cmp rbx, 0xb
ja 0x1400031f8
lea rax, [rbx + 0x34]
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0x8d0]
add rax, rbx
cmp rax, rdi
jbe 0x1400031a8
lea rax, [rdi + 0x34]
lea rcx, [rsp + 0x8d0]
cmp rcx, rax
ja 0x1400031a8
lea rax, [rsp + 0x8d0]
cmp rdi, rax
ja 0x140003198
mov rsi, r13
jmp 0x1400031ab
lea rax, [rsp + 0x8d0]
mov rsi, rdi
sub rsi, rax
jmp 0x1400031ab
mov rsi, rbx
lea rcx, [rdi + rbx]
mov r8d, 0x35
mov rdx, rdi
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
lea rdx, [rsp + 0x8d0]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rbx
sub r8, rsi
lea rax, [rsi + rbx]
lea rdx, [rsp + 0x8d0]
add rdx, rax
lea rcx, [rdi + rsi]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0xb0]
jmp 0x140003223
mov qword [rsp + 0x28], rbx
lea rax, [rsp + 0x8d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movzx r8d, byte [rsp + 0x40]
mov rdx, rbx
lea rcx, [rsp + 0xb0]
call fcn.140007a60
xorps xmm0, xmm0
movups xmmword [rsp + 0x2f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x300], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x2f0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x300], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0xf
jbe 0x1400032a6
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400032a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400032a1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
movdqu xmmword [rsp + 0xc0], xmm6
mov byte [rsp + 0xb0], 0
lea rcx, [rsp + 0x2f0]
cmp qword [rsp + 0x308], 0xf
cmova rcx, qword [rsp + 0x2f0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__36.0__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x130], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x140], xmm1
mov ecx, 0x30
call fcn.1400558a0
mov qword [rsp + 0x130], rax
movdqa xmm0, xmmword [0x140064be0]
movdqu xmmword [rsp + 0x140], xmm0
movups xmm0, xmmword [str.AMIDEWINx64.EXE__BM__ASRock____NUL]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140063478]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x140063488]
mov dword [rax + 0x20], ecx
mov byte [rax + 0x24], 0
lea r8, [rsp + 0x130]
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x770]
call fcn.140006d30
nop
lea rcx, [rsp + 0x130]
call fcn.140005c30
lea rcx, [rsp + 0x770]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__40.5__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.AMIDEWINx64.EXE__BP__B560M_C____NUL
lea rcx, [rsp + 0x70]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x750]
call fcn.140006d30
nop
lea rcx, [rsp + 0x70]
call fcn.140005c30
lea rcx, [rsp + 0x750]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__45.0__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.AMIDEWINx64.EXE__BV_______NUL
lea rcx, [rsp + 0x90]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x730]
call fcn.140006d30
nop
lea rcx, [rsp + 0x90]
call fcn.140005c30
lea rcx, [rsp + 0x730]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__49.5__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, [0x140063348]
lea rcx, [rsp + 0x158]
call fcn.140005d20
mov rdi, rax
xor r8d, r8d
mov edx, recv
lea rcx, [rsp + 0xd0]
call fcn.1400015e0
mov rbx, rax
lea rdx, str.AMIDEWINx64.EXE__BS__
lea rcx, [rsp + 0xb0]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x110]
call fcn.140006d30
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140006e60
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x7f0]
call fcn.140006e60
nop
lea rcx, [rsp + 0x70]
call fcn.140005c30
nop
lea rcx, [rsp + 0x110]
call fcn.140005c30
nop
lea rcx, [rsp + 0xb0]
call fcn.140005c30
nop
lea rcx, [rsp + 0xd0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x158]
call fcn.140005c30
lea rcx, [rsp + 0x7f0]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__54.0__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.AMIDEWINx64.EXE__BT__Default_string____NUL
lea rcx, [rsp + 0x90]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x6f0]
call fcn.140006d30
nop
lea rcx, [rsp + 0x90]
call fcn.140005c30
lea rcx, [rsp + 0x6f0]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__58.5__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.AMIDEWINx64.EXE__BLC__Default_string____NUL
lea rcx, [rsp + 0x70]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x6d0]
call fcn.140006d30
nop
lea rcx, [rsp + 0x70]
call fcn.140005c30
lea rcx, [rsp + 0x6d0]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__63.0__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.AMIDEWINx64.EXE__CM__Default_string____NUL
lea rcx, [rsp + 0x90]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x6b0]
call fcn.140006d30
nop
lea rcx, [rsp + 0x90]
call fcn.140005c30
lea rcx, [rsp + 0x6b0]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__67.5__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.AMIDEWINx64.EXE__CV__Default_string____NUL
lea rcx, [rsp + 0x70]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x690]
call fcn.140006d30
nop
lea rcx, [rsp + 0x70]
call fcn.140005c30
lea rcx, [rsp + 0x690]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__72.0__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, [0x140063348]
lea rcx, [rsp + 0x158]
call fcn.140005d20
mov rdi, rax
xor r8d, r8d
mov edx, 0xa
lea rcx, [rsp + 0xd0]
call fcn.1400015e0
mov rbx, rax
lea rdx, str.AMIDEWINx64.EXE__CS__
lea rcx, [rsp + 0xb0]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x110]
call fcn.140006d30
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.140006e60
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x670]
call fcn.140006e60
nop
lea rcx, [rsp + 0x90]
call fcn.140005c30
nop
lea rcx, [rsp + 0x110]
call fcn.140005c30
nop
lea rcx, [rsp + 0xb0]
call fcn.140005c30
nop
lea rcx, [rsp + 0xd0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x158]
call fcn.140005c30
lea rcx, [rsp + 0x670]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__76.5__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.AMIDEWINx64.EXE__CA__Default_string____NUL
lea rcx, [rsp + 0x70]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x650]
call fcn.140006d30
nop
lea rcx, [rsp + 0x70]
call fcn.140005c30
lea rcx, [rsp + 0x650]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__81.0__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.AMIDEWINx64.EXE__CSK__SKU____NUL
lea rcx, [rsp + 0x90]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x8b0]
call fcn.140006d30
nop
lea rcx, [rsp + 0x90]
call fcn.140005c30
lea rcx, [rsp + 0x8b0]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__85.5__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.AMIDEWINx64.EXE__PSN__To_Be_Filled_By_O.E.M.____NUL
lea rcx, [rsp + 0x70]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x890]
call fcn.140006d30
nop
lea rcx, [rsp + 0x70]
call fcn.140005c30
lea rcx, [rsp + 0x890]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__90.0__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.AMIDEWINx64.EXE__PAT__To_Be_Filled_By_O.E.M.____NUL
lea rcx, [rsp + 0x90]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x870]
call fcn.140006d30
nop
lea rcx, [rsp + 0x90]
call fcn.140005c30
lea rcx, [rsp + 0x870]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__94.5__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.AMIDEWINx64.EXE__PPN__To_Be_Filled_By_O.E.M.____NUL
lea rcx, [rsp + 0x70]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x850]
call fcn.140006d30
nop
lea rcx, [rsp + 0x70]
call fcn.140005c30
lea rcx, [rsp + 0x850]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__100.0___n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
cmp r12d, 0x10
jne 0x140003a7e
lea rdx, str.Bios_Spoofing_Error_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
mov qword [rsp + 0x2a0], r13
mov qword [rsp + 0x2e8], r13
lea r8, str.TEMP
lea rdx, [rsp + 0x2e8]
lea rcx, [rsp + 0x2a0]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
xor r8d, r8d
mov edx, 5
lea rcx, [rsp + 0xd0]
call fcn.1400015e0
mov rbx, rax
mov rdx, qword [rsp + 0x2a0]
lea rcx, [rsp + 0xb0]
call fcn.140005d20
nop
lea r8, [0x140063840]
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.140006e90
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.140006e60
nop
lea r8, str..bat
mov rdx, rax
lea rcx, [rsp + 0x500]
call fcn.140006e90
nop
lea rcx, [rsp + 0x90]
call fcn.140005c30
nop
lea rcx, [rsp + 0x110]
call fcn.140005c30
nop
lea rcx, [rsp + 0xb0]
call fcn.140005c30
nop
lea rcx, [rsp + 0xd0]
call fcn.140005c30
lea rcx, [rsp + 0x540]
call fcn.140004f10
lea rdx, [rsp + 0x500]
lea rcx, [rsp + 0x540]
call fcn.140005bd0
nop
lea rdx, str._ECHO_OFF_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.SETLOCAL_ENABLEDELAYEDEXPANSION_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.SETLOCAL_ENABLEEXTENSIONS_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, [0x14006389c]
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.FOR__F__tokens1____a_IN__wmic_nic_where_physicaladaptertrue_get_deviceid__findstr__0_9___DO___n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str._CALL_:MAC_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str._FOR___b_IN__0_00_000__DO___n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str._REG_QUERY_HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlClass4D36E972_E325_11CE_BFC1_08002bE10318__b__a__NUL_2_NUL__REG_ADD_HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlClass4D36E972_E325_11CE_BFC1_08002bE10318__b__a__v_NetworkAddress__t_REG_SZ__d__MAC____f__NUL_2_NUL_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, [0x140063a68]
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, [0x140063a6c]
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, [0x14006389c]
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.FOR__F__tokens1____a_IN__wmic_nic_where_physicaladaptertrue_get_deviceid__findstr__0_9___DO___n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str._FOR___b_IN__0_00_000__DO___n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str._REG_QUERY_HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlClass4D36E972_E325_11CE_BFC1_08002bE10318__b__a__NUL_2_NUL__REG_ADD_HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlClass4D36E972_E325_11CE_BFC1_08002bE10318__b__a__v_PnPCapabilities__t_REG_DWORD__d_24__f__NUL_2_NUL_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, [0x140063a68]
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, [0x140063a6c]
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, [0x14006389c]
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.FOR__F__tokens2_delims__skip2____a_IN___wmic_nic_where__netconnectionid_like_____get_netconnectionid_netconnectionstatus__format:csv___DO___n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str._netsh_interface_set_interface_name___a__disable__NUL_2_NUL_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str._netsh_interface_set_interface_name___a__enable__NUL_2_NUL_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, [0x140063a6c]
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, [0x14006389c]
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.GOTO_:EOF_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.:MAC_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.SET_COUNT0_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.SET_GENABCDEF0123456789_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.SET_GEN226AE_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.SET_MAC_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.:MACLOOP_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.SET__a_COUNT1_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.SET_RND_random__n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.SET__A_RNDRND__16_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.SET_RNDGEN_GEN:_RND__1__n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.SET__A_RND2RND__4_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.SET_RNDGEN2_GEN2:_RND2__1__n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.IF___COUNT____EQU__2___SET_MAC_MAC__RNDGEN2___ELSE__SET_MAC_MAC__RNDGEN___n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rdx, str.IF__COUNT___LEQ_11_GOTO_MACLOOP_n
lea rcx, [rsp + 0x540]
call fcn.1400067e0
lea rcx, [rsp + 0x540]
call fcn.140005b90
lea r8, [rsp + 0x500]
lea rdx, str.cmd__c__
lea rcx, [rsp + 0x70]
call fcn.140006bd0
nop
lea r8, str.____NUL
mov rdx, rax
lea rcx, [rsp + 0x4e0]
call fcn.140006e90
nop
lea rcx, [rsp + 0x70]
call fcn.140005c30
lea rcx, [rsp + 0x4e0]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea r8, [rsp + 0x500]
lea rdx, str.del__q__f__
lea rcx, [rsp + 0x110]
call fcn.140006bd0
nop
lea r8, [0x140063348]
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.140006e90
mov rdx, rax
lea rcx, [rsp + 0x4e0]
call fcn.140005c90
lea rcx, [rsp + 0x90]
call fcn.140005c30
nop
lea rcx, [rsp + 0x110]
call fcn.140005c30
lea rcx, [rsp + 0x4e0]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Mac_spoofing__100.0___n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.__accepteula___NUL
lea rcx, [rsp + 0x50]
call fcn.140005d20
mov r14, rax
mov r8b, 1
mov edx, 4
lea rcx, [rsp + 0xf0]
call fcn.1400015e0
mov rsi, rax
lea rdx, [0x140063e9c]
lea rcx, [rsp + 0x178]
call fcn.140005d20
mov rdi, rax
mov r8b, 1
mov edx, 4
lea rcx, [rsp + 0x198]
call fcn.1400015e0
mov rbx, rax
lea rdx, str.Volumeid64.exe_C:
lea rcx, [rsp + 0x158]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0xd0]
call fcn.140006d30
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0xb0]
call fcn.140006e60
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.140006e60
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.140006e60
nop
mov r8, r14
mov rdx, rax
lea rcx, [rsp + 0x830]
call fcn.140006e60
nop
lea rcx, [rsp + 0x90]
call fcn.140005c30
nop
lea rcx, [rsp + 0x110]
call fcn.140005c30
nop
lea rcx, [rsp + 0xb0]
call fcn.140005c30
nop
lea rcx, [rsp + 0xd0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x158]
call fcn.140005c30
nop
lea rcx, [rsp + 0x198]
call fcn.140005c30
nop
lea rcx, [rsp + 0x178]
call fcn.140005c30
nop
lea rcx, [rsp + 0xf0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x50]
call fcn.140005c30
lea rcx, [rsp + 0x830]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r15d, eax
lea rdx, str.__accepteula___NUL
lea rcx, [rsp + 0x130]
call fcn.140005d20
mov r14, rax
mov r8b, 1
mov edx, 4
lea rcx, [rsp + 0x1b8]
call fcn.1400015e0
mov rsi, rax
lea rdx, [0x140063e9c]
lea rcx, [rsp + 0x278]
call fcn.140005d20
mov rdi, rax
mov r8b, 1
mov edx, 4
lea rcx, [rsp + 0x258]
call fcn.1400015e0
mov rbx, rax
lea rdx, str.Volumeid64.exe_D:
lea rcx, [rsp + 0x1d8]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x238]
call fcn.140006d30
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x218]
call fcn.140006e60
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x1f8]
call fcn.140006e60
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140006e60
nop
mov r8, r14
mov rdx, rax
lea rcx, [rsp + 0x810]
call fcn.140006e60
nop
lea rcx, [rsp + 0x70]
call fcn.140005c30
nop
lea rcx, [rsp + 0x1f8]
call fcn.140005c30
nop
lea rcx, [rsp + 0x218]
call fcn.140005c30
nop
lea rcx, [rsp + 0x238]
call fcn.140005c30
nop
lea rcx, [rsp + 0x1d8]
call fcn.140005c30
nop
lea rcx, [rsp + 0x258]
call fcn.140005c30
nop
lea rcx, [rsp + 0x278]
call fcn.140005c30
nop
lea rcx, [rsp + 0x1b8]
call fcn.140005c30
nop
lea rcx, [rsp + 0x130]
call fcn.140005c30
lea rcx, [rsp + 0x810]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.__accepteula___NUL
lea rcx, [rsp + 0x50]
call fcn.140005d20
mov r14, rax
mov r8b, 1
mov edx, 4
lea rcx, [rsp + 0xf0]
call fcn.1400015e0
mov rsi, rax
lea rdx, [0x140063e9c]
lea rcx, [rsp + 0x178]
call fcn.140005d20
mov rdi, rax
mov r8b, 1
mov edx, 4
lea rcx, [rsp + 0x198]
call fcn.1400015e0
mov rbx, rax
lea rdx, str.Volumeid64.exe_E:
lea rcx, [rsp + 0x158]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0xd0]
call fcn.140006d30
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0xb0]
call fcn.140006e60
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.140006e60
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.140006e60
nop
mov r8, r14
mov rdx, rax
lea rcx, [rsp + 0x7d0]
call fcn.140006e60
nop
lea rcx, [rsp + 0x90]
call fcn.140005c30
nop
lea rcx, [rsp + 0x110]
call fcn.140005c30
nop
lea rcx, [rsp + 0xb0]
call fcn.140005c30
nop
lea rcx, [rsp + 0xd0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x158]
call fcn.140005c30
nop
lea rcx, [rsp + 0x198]
call fcn.140005c30
nop
lea rcx, [rsp + 0x178]
call fcn.140005c30
nop
lea rcx, [rsp + 0xf0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x50]
call fcn.140005c30
lea rcx, [rsp + 0x7d0]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.__accepteula___NUL
lea rcx, [rsp + 0x70]
call fcn.140005d20
mov r14, rax
mov r8b, 1
mov edx, 4
lea rcx, [rsp + 0x1f8]
call fcn.1400015e0
mov rsi, rax
lea rdx, [0x140063e9c]
lea rcx, [rsp + 0x218]
call fcn.140005d20
mov rdi, rax
mov r8b, 1
mov edx, 4
lea rcx, [rsp + 0x238]
call fcn.1400015e0
mov rbx, rax
lea rdx, str.Volumeid64.exe_F:
lea rcx, [rsp + 0x1d8]
call fcn.140005d20
nop
mov r8, rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x258]
call fcn.140006d30
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x278]
call fcn.140006e60
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x1b8]
call fcn.140006e60
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.140006e60
nop
mov r8, r14
mov rdx, rax
lea rcx, [rsp + 0x7b0]
call fcn.140006e60
nop
lea rcx, [rsp + 0x130]
call fcn.140005c30
nop
lea rcx, [rsp + 0x1b8]
call fcn.140005c30
nop
lea rcx, [rsp + 0x278]
call fcn.140005c30
nop
lea rcx, [rsp + 0x258]
call fcn.140005c30
nop
lea rcx, [rsp + 0x1d8]
call fcn.140005c30
nop
lea rcx, [rsp + 0x238]
call fcn.140005c30
nop
lea rcx, [rsp + 0x218]
call fcn.140005c30
nop
lea rcx, [rsp + 0x1f8]
call fcn.140005c30
nop
lea rcx, [rsp + 0x70]
call fcn.140005c30
lea rcx, [rsp + 0x7b0]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__100.0___n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
cmp r12d, 0x10
jne 0x140004522
lea rdx, str.Bios_Spoofing_Error_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.Mac_spoofing__100.0___n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.Disk_spoofing__100.0___n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
cmp r15d, 1
jne 0x140004561
lea rdx, str.Disk_Spoofing_Error_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rcx, str.netsh_winsock_reset_catalog___NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_int_ip_reset___NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_reset___NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_int_reset_all___NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_int_ipv4_reset___NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_int_ipv6_reset___NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.WMIC_PATH_WIN32_NETWORKADAPTER_WHERE_PHYSICALADAPTERTRUE_CALL_DISABLE___NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.WMIC_PATH_WIN32_NETWORKADAPTER_WHERE_PHYSICALADAPTERTRUE_CALL_ENABLE___NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140001530
test al, al
je 0x1400045ec
lea rcx, str.net_stop_winmgmt__y___NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_start_winmgmt___NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r8d, r8d
mov edx, 5
lea rcx, [rsp + 0xd0]
call fcn.1400015e0
mov rbx, rax
mov rdx, qword [rsp + 0x2a0]
lea rcx, [rsp + 0xb0]
call fcn.140005d20
nop
lea r8, [0x140063840]
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.140006e90
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.140006e60
nop
lea r8, str..bat
mov rdx, rax
lea rcx, [rsp + 0x4c0]
call fcn.140006e90
nop
lea rcx, [rsp + 0x90]
call fcn.140005c30
nop
lea rcx, [rsp + 0x110]
call fcn.140005c30
nop
lea rcx, [rsp + 0xb0]
call fcn.140005c30
nop
lea rcx, [rsp + 0xd0]
call fcn.140005c30
lea rcx, [rsp + 0x3b0]
call fcn.140004f10
lea rdx, [rsp + 0x4c0]
lea rcx, [rsp + 0x3b0]
call fcn.140005bd0
nop
lea rdx, str._echo_off_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.setlocal_EnableDelayedExpansion_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.netsh_interface_ipv6_uninstall_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.netsh_advfirewall_firewall_set_rule_group_File_and_Printer_Sharing__new_enableno_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.netsh_int_tcp_set_global_autotuninglevelnormal_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.netsh_interface_set_interface__Microsoft_Network_Adapter_Multiplexor_Protocol__admindisabled_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.sc_config_lltdsvc_startdisabled_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.netsh_advfirewall_firewall_set_rule_group_Network_Discovery__new_enableno_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.reg_add__HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpip6Parameters___v_DisabledComponents__t_REG_DWORD__d_0xFFFFFFFF__f_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.netsh_advfirewall_firewall_set_rule_group_Network_Discovery__new_enableno_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.sc_config_lltdsvc_startdisabled_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.reg_add__HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpip6Parameters___v_DisabledComponents__t_REG_DWORD__d_0xFFFFFFFF__f_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.reg_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v_EEE__t_REG_DWORD__d_0__f_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.reg_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v_NetworkAddress__t_REG_SZ__d_____f_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.reg_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v_ArpOffload__t_REG_DWORD__d_0__f_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.reg_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v_TcpAckFrequency__t_REG_DWORD__d_1__f_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.reg_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v_TcpChecksumOffloadIPv4__t_REG_DWORD__d_0__f_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.reg_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v_LargeSendOffloadv2IPv6__t_REG_DWORD__d_0__f_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.reg_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v_TcpChecksumOffloadIPv6__t_REG_DWORD__d_0__f_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.reg_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v_UdpChecksumOffloadIPv6__t_REG_DWORD__d_0__f_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.echo_network_properties_have_been_configured._n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.set_KEY_NAMEHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpip6Parameters_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.set_VALUE_NAME_DNSDhcpv6DNSServers_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.set_VALUE_NAME_SEARCHLISTDhcpv6DomainSearchList_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.set_VALUE_NAME_DISABLEDDisabledComponents_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.::random_binary_data_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.set__RANDOM_DNS__n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.set__RANDOM_SEARCHLIST__n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.set__RANDOM_DUID__n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.::_set_random_binary_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.reg_add___KEY_NAME____v___VALUE_NAME_DNS____t_REG_BINARY__d__RANDOM_DNS___f_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.reg_add___KEY_NAME____v___VALUE_NAME_SEARCHLIST____t_REG_BINARY__d__RANDOM_SEARCHLIST___f_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.reg_add___KEY_NAME____v___VALUE_NAME_DUID____t_REG_BINARY__d__RANDOM_DUID___f_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.echo_random_binary_values_set_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.ipconfig__flushdns_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.ipconfig__registerdns_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.ipconfig__release_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.ipconfig__renew_n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rdx, str.netsh_winsock_reset__n
lea rcx, [rsp + 0x3b0]
call fcn.1400067e0
lea rcx, [rsp + 0x3b0]
call fcn.140005b90
lea r8, [rsp + 0x4c0]
lea rdx, str.cmd__c__
lea rcx, [rsp + 0x130]
call fcn.140006bd0
nop
lea r8, str.____NUL
mov rdx, rax
lea rcx, [rsp + 0x790]
call fcn.140006e90
nop
lea rcx, [rsp + 0x130]
call fcn.140005c30
lea rcx, [rsp + 0x790]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea r8, [rsp + 0x4c0]
lea rdx, str.del__q__f__
lea rcx, [rsp + 0x1b8]
call fcn.140006bd0
nop
lea r8, [0x140063348]
mov rdx, rax
lea rcx, [rsp + 0x710]
call fcn.140006e90
nop
lea rcx, [rsp + 0x1b8]
call fcn.140005c30
lea rcx, [rsp + 0x710]
call fcn.140005c20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140063200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_spoofing__100.0___n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
cmp r12d, 0x10
jne 0x140004aba
lea rdx, str.Bios_Spoofing_Error_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.Mac_spoofing__100.0___n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.Disk_spoofing__100.0___n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
cmp r15d, 1
jne 0x140004af9
lea rdx, str.Disk_Spoofing_Error_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.Network_spoofing__100.0___n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rdx, str.successfully_spoofed_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400067e0
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rcx, [rsp + 0x710]
call fcn.140005c30
nop
lea rcx, [rsp + 0x790]
call fcn.140005c30
nop
lea rcx, [rsp + 0x3b0]
call fcn.140004e50
nop
lea rcx, [rsp + 0x4c0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x7b0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x7d0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x810]
call fcn.140005c30
nop
lea rcx, [rsp + 0x830]
call fcn.140005c30
nop
lea rcx, [rsp + 0x4e0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x540]
call fcn.140004e50
nop
lea rcx, [rsp + 0x500]
call fcn.140005c30
nop
lea rcx, [rsp + 0x850]
call fcn.140005c30
nop
lea rcx, [rsp + 0x870]
call fcn.140005c30
nop
lea rcx, [rsp + 0x890]
call fcn.140005c30
nop
lea rcx, [rsp + 0x8b0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x650]
call fcn.140005c30
nop
lea rcx, [rsp + 0x670]
call fcn.140005c30
nop
lea rcx, [rsp + 0x690]
call fcn.140005c30
nop
lea rcx, [rsp + 0x6b0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x6d0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x6f0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x7f0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x730]
call fcn.140005c30
nop
lea rcx, [rsp + 0x750]
call fcn.140005c30
nop
lea rcx, [rsp + 0x770]
call fcn.140005c30
nop
lea rcx, [rsp + 0x2f0]
call fcn.140005c30
nop
lea rcx, [rsp + 0x310]
call fcn.140005c30
nop
lea rcx, [rsp + 0x330]
call fcn.140005c30
nop
lea rcx, [rsp + 0x520]
call fcn.140005c30
nop
lea rcx, [rsp + 0x370]
call fcn.140005c30
nop
lea rcx, [rsp + 0x350]
call fcn.140005c30
nop
mov rdx, qword [rsp + 0x2c0]
cmp rdx, 0xf
jbe 0x140004d25
inc rdx
mov rcx, qword [rsp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004d20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
movdqu xmmword [rsp + 0x2b8], xmm6
mov byte [rsp + 0x2a8], 0
mov rdx, qword [rsp + 0x2e0]
cmp rdx, 0xf
jbe 0x140004d7c
inc rdx
mov rcx, qword [rsp + 0x2c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004d77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
movdqu xmmword [rsp + 0x2d8], xmm6
mov byte [rsp + 0x2c8], 0
mov rdx, qword [rsp + 0x3a8]
cmp rdx, 0xf
jbe 0x140004dd3
inc rdx
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004dce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004dce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400558e4
xor eax, eax
mov rcx, qword [rsp + 0xcd0]
xor rcx, rsp
call fcn.140055880
lea r11, [rsp + 0xd00]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
ret