Function at 0x140002c20
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov rax, qword [0x140076180]
xor rax, rsp
mov qword [rbp + 0x20], rax
xor r13d, r13d
mov edx, 0xa
lea rcx, [rsp + 0x20]
call fcn.140001720
mov rdi, rax
lea rsi, [0x140076248]
mov ebx, reloc.WS2_32.dll_ntohs
cmp rsi, rax
je 0x140002ce9
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, rbx
jbe 0x140002cb4
mov rcx, qword [0x140076248]
inc rdx
cmp rdx, 0x1000
jb 0x140002caf
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140002d1c
mov rcx, r8
call fcn.140054d5c
mov qword [0x140076258], r13
mov qword [reloc.WS2_32.dll_ntohs], rbx
mov byte [0x140076248], r13b
movups xmm0, xmmword [rdi]
movups xmmword [0x140076248], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [0x140076258], xmm1
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], rbx
mov byte [rdi], r13b
mov rdx, qword [rsp + 0x38]
cmp rdx, rbx
jbe 0x140002d28
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d23
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002d23
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140054d5c
mov edx, recv
lea rcx, [rsp + 0x20]
call fcn.140001720
mov rdi, rax
lea rax, [0x140076208]
cmp rax, rdi
je 0x140002db7
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, rbx
jbe 0x140002d82
mov rcx, qword [0x140076208]
inc rdx
cmp rdx, 0x1000
jb 0x140002d7d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140002dea
mov rcx, r8
call fcn.140054d5c
mov qword [0x140076218], r13
mov qword [reloc.WS2_32.dll_ntohs], rbx
mov byte [0x140076208], r13b
movups xmm0, xmmword [rdi]
movups xmmword [0x140076208], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [0x140076218], xmm1
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], rbx
mov byte [rdi], r13b
mov rdx, qword [rsp + 0x38]
cmp rdx, rbx
jbe 0x140002df6
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002df1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002df1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140054d5c
mov edx, 0xa
lea rcx, [rsp + 0x20]
call fcn.140001720
mov rdi, rax
lea rax, [0x140076228]
cmp rax, rdi
je 0x140002e85
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, rbx
jbe 0x140002e50
mov rcx, qword [0x140076228]
inc rdx
cmp rdx, 0x1000
jb 0x140002e4b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140002eb8
mov rcx, r8
call fcn.140054d5c
mov qword [0x140076238], r13
mov qword [reloc.WS2_32.dll_ntohs], rbx
mov byte [0x140076228], r13b
movups xmm0, xmmword [rdi]
movups xmmword [0x140076228], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [0x140076238], xmm1
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], rbx
mov byte [rdi], r13b
mov rdx, qword [rsp + 0x38]
cmp rdx, rbx
jbe 0x140002ec4
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002ebf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002ebf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140054d5c
mov r14, qword [0x140076258]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0x14
jb 0x14000347f
mov r12, rsi
cmp qword [reloc.WS2_32.dll_ntohs], rbx
cmova r12, qword [0x140076248]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x60], xmm1
lea r15, [r14 + 0x14]
mov rdi, rbx
lea rsi, [rsp + 0x50]
movabs rax, 0x8000000000000000
mov edx, reloc.WS2_32.dll_shutdown
cmp r15, rbx
jbe 0x140002f96
mov rdi, r15
or rdi, rbx
cmp rdi, rcx
jbe 0x140002f55
mov rdi, rcx
add rax, 0x27
mov rcx, rax
call fcn.140054a10
test rax, rax
je 0x140002f82
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140002f91
cmp rdi, rdx
cmovb rdi, rdx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140002f6a
mov rsi, r13
jmp 0x140002f91
cmp rcx, 0x1000
jb 0x140002f89
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000346d
jmp 0x140002f3a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140054a10
mov rsi, rax
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], rdi
movups xmm0, xmmword [str.AMIDEWINx64.EXE__SS]
movups xmmword [rsi], xmm0
mov ecx, dword [0x1400622e0]
mov dword [rsi + 0x10], ecx
lea rcx, [rsi + 0x14]
mov r8, r14
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r15], r13b
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x80], xmm1
mov ecx, 0x30
call fcn.140054a10
mov qword [rsp + 0x70], rax
movdqa xmm0, xmmword [0x140063100]
movdqa xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [str.Erreur_lors_de_lexcution_de__SS]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x1400622f8]
movups xmmword [rax + 0x10], xmm0
movzx ecx, word [0x140062308]
mov word [rax + 0x20], cx
mov byte [rax + 0x22], 0
mov r13, qword [0x140076218]
movabs r12, 0x7fffffffffffffff
mov rax, r12
sub rax, r13
cmp rax, 0x14
jb 0x140003485
lea r15, [0x140076208]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova r15, qword [0x140076208]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x60], xmm1
lea r14, [r13 + 0x14]
mov rdi, rbx
lea rsi, [rbp - 0x70]
cmp r14, rbx
jbe 0x1400030ea
mov rdi, r14
or rdi, 0xf
cmp rdi, r12
jbe 0x1400030a5
mov rdi, r12
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140054a10
test rax, rax
je 0x1400030d7
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400030e6
cmp rdi, 0x16
mov eax, reloc.WS2_32.dll_shutdown
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x1400030bf
xor esi, esi
jmp 0x1400030e6
cmp rcx, 0x1000
jb 0x1400030de
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003473
jmp 0x14000308a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140054a10
mov rsi, rax
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], rdi
movups xmm0, xmmword [str.AMIDEWINx64.EXE__BS]
movups xmmword [rsi], xmm0
mov ecx, dword [0x140062450]
mov dword [rsi + 0x10], ecx
lea rcx, [rsi + 0x14]
mov r8, r13
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r14], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x40], xmm1
mov ecx, 0x30
call fcn.140054a10
mov qword [rbp - 0x50], rax
movdqa xmm0, xmmword [0x140063100]
movdqa xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [str.Erreur_lors_de_lexcution_de__BS]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x140062468]
movups xmmword [rax + 0x10], xmm0
movzx ecx, word [0x140062478]
mov word [rax + 0x20], cx
mov byte [rax + 0x22], 0
mov r15, qword [0x140076238]
mov rax, r12
sub rax, r15
cmp rax, 0x14
jb 0x140003467
lea r12, [0x140076228]
mov r14, r12
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova r14, qword [0x140076228]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x20], xmm1
lea rsi, [r15 + 0x14]
lea rdi, [rbp - 0x30]
cmp rsi, 0xf
jbe 0x140003240
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x1400031fb
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140054a10
test rax, rax
je 0x14000322d
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000323c
cmp rbx, 0x16
mov eax, reloc.WS2_32.dll_shutdown
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140003215
xor edi, edi
jmp 0x14000323c
cmp rcx, 0x1000
jb 0x140003234
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003479
jmp 0x1400031e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140054a10
mov rdi, rax
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], rbx
movups xmm0, xmmword [str.AMIDEWINx64.EXE__CS]
movups xmmword [rdi], xmm0
mov r9d, dword [0x1400625d0]
mov dword [rdi + 0x10], r9d
lea rcx, [rdi + 0x14]
mov r8, r15
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp], xmm1
mov ecx, 0x30
call fcn.140054a10
mov qword [rbp - 0x10], rax
movdqa xmm0, xmmword [0x140063100]
movdqa xmmword [rbp], xmm0
movups xmm1, xmmword [str.Erreur_lors_de_lexcution_de__CS]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x1400625e8]
movups xmmword [rax + 0x10], xmm0
movzx ecx, word [0x1400625f8]
mov word [rax + 0x20], cx
mov byte [rax + 0x22], 0
mov dil, 1
lea rbx, [rbp - 0x80]
lea rcx, [rbx - 0x30]
cmp qword [rbx - 0x18], 0xf
jbe 0x1400032d3
mov rcx, qword [rcx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
test eax, eax
je 0x14000330c
lea rdx, [rbx - 0x10]
cmp qword [rbx + 8], 0xf
jbe 0x1400032eb
mov rdx, qword [rdx]
mov r8, qword [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400065c0
lea rdx, [0x14006279c]
mov rcx, rax
call fcn.140005890
xor dil, dil
add rbx, 0x40
lea rax, [rbx - 0x30]
lea rcx, [rbp + 0x10]
cmp rax, rcx
jne 0x1400032c5
test dil, dil
je 0x14000340a
lea rdx, str.Temporary_Spoof_Applied:_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.SS_Serial:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
lea rdx, [0x140076248]
cmova rdx, qword [0x140076248]
mov r8, qword [0x140076258]
mov rcx, rax
call fcn.1400065c0
lea rdx, [0x14006279c]
mov rcx, rax
call fcn.140005890
lea rdx, str.BS_Serial:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
lea rdx, [0x140076208]
cmova rdx, qword [0x140076208]
mov r8, qword [0x140076218]
mov rcx, rax
call fcn.1400065c0
lea rdx, [0x14006279c]
mov rcx, rax
call fcn.140005890
lea rdx, str.CS_Serial:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova r12, qword [0x140076228]
mov r8, qword [0x140076238]
mov rdx, r12
mov rcx, rax
call fcn.1400065c0
lea rdx, [0x14006279c]
mov rcx, rax
jmp 0x140003418
lea rdx, str.Error._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140005890
nop
lea r9, [0x140002b70]
mov edx, 0x40
mov r8d, 3
lea rcx, [rsp + 0x50]
call fcn.140054a4c
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.1400549f0
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001560
nop
call fcn.1400014c0
nop
call fcn.1400014c0
nop
call fcn.1400014c0
nop
call fcn.140001560
nop
call fcn.140001560
int3