Function at 0x14003f420
Capabilities:
Delete file
Execute command
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push r12
push r14
push r15
sub rsp, 0x180
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rax - 0x88], xmm12
movaps xmmword [rax - 0x98], xmm13
movaps xmmword [rax - 0xa8], xmm14
movaps xmmword [rax - 0xb8], xmm15
mov rax, qword [0x14014a180]
xor rax, rsp
mov qword [rsp + 0xd0], rax
mov rcx, qword [0x140246ef8]
call fcn.140010140
mov rdx, qword [0x14014a208]
call fcn.1400338e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x88], xmm1
mov r8d, 0x19
lea rdx, str.cm2d5a55w001uns01m1jhf8me
lea rcx, [rsp + 0x78]
call fcn.140037160
nop
lea rcx, [rsp + 0x78]
call fcn.14006b97c
nop
mov rdx, qword [rsp + 0x90]
cmp rdx, 0xf
jbe 0x14003f51c
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f517
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f517
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400fa144
movdqa xmm0, xmmword [0x14012b210]
movdqu xmmword [rsp + 0x88], xmm0
mov byte [rsp + 0x78], 0
mov rbx, qword [0x140246648]
mov rax, qword [rbx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov r14, qword [rbx + 0x3ef0]
mov qword [rsp + 0xb8], r14
lea rsi, [r14 + 0x28]
mov qword [rsp + 0x50], rsi
movss xmm0, dword [rsi]
subss xmm0, dword [0x14012b0ec]
movss xmm1, dword [0x14012b0d0]
unpcklps xmm0, xmm1
movq rdx, xmm0
call fcn.140035510
test al, al
je 0x14003f58d
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140246fc8], eax
jle 0x14003f5d6
lea rcx, [0x140246fc8]
call fcn.1400f9ad8
cmp dword [0x140246fc8], 0xffffffff
jne 0x14003f5d6
lea rcx, [0x1400fe2d0]
call fcn.1400fa124
lea rcx, [0x140246fc8]
call fcn.1400f9a6c
mov rcx, qword [0x140246eb8]
call fcn.140010140
lea r15, [r14 + 0x2c]
mov qword [rsp + 0xc0], r15
movss xmm1, dword [r15]
subss xmm1, dword [0x14012b100]
movss xmm15, dword [0x14012b0cc]
movaps xmm0, xmm15
unpcklps xmm0, xmm1
movq rdx, xmm0
call fcn.140035ae0
movss xmm1, dword [0x140246ec8]
movss dword [rbx + 0x37f0], xmm1
mov eax, dword [0x140246ea8]
movss xmm12, dword [0x14012b054]
xorps xmm10, xmm10
movss xmm13, dword [0x14012b070]
movss xmm9, dword [0x14012b14c]
movss xmm11, dword [0x14012b008]
test eax, eax
jne 0x14003f93a
mov rax, qword [0x140246648]
movss dword [rax + 0x37f0], xmm1
mov dword [rsp + 0x40], 0x3f800000
mov dword [rsp + 0x48], 0
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm0
mulss xmm0, xmm13
addss xmm0, xmm1
movss dword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x48]
lea rax, [rsp + 0x70]
comiss xmm10, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x40]
comiss xmm0, xmm12
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x140246ec8], xmm0
mov rcx, qword [reloc.WS2_32.dll_ntohs]
lea r9, [rcx + 1]
lea rbx, [0x14023f0d0]
mov r8, rbx
cmp rcx, 0xf
cmova r8, qword [0x14023f0d0]
add r8, 0x32
movss xmm0, dword [rsi]
subss xmm0, xmm9
mulss xmm0, xmm11
movss xmm1, dword [0x14012b12c]
unpcklps xmm0, xmm1
movq rdx, xmm0
call fcn.140038e40
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xor edi, edi
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0x90], rdi
xor r8d, r8d
lea rdx, [0x1401247d6]
lea rcx, [rsp + 0x78]
call fcn.140037160
movss xmm1, dword [0x14012b0d8]
movss xmm2, dword [rsi]
subss xmm2, xmm9
mulss xmm2, xmm11
movss xmm14, dword [0x14012b144]
lea r9, [rsp + 0x78]
movaps xmm0, xmm9
unpcklps xmm0, xmm1
movq r8, xmm0
unpcklps xmm2, xmm14
movq rdx, xmm2
lea rcx, str.Login
call fcn.1400365b0
test al, al
je 0x14003f8ec
lea rcx, [rsp + 0x98]
call fcn.14003f200
mov r12, rax
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rbx, qword [0x14023f0d0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x88], xmm1
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14003f7c0
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.140037160
nop
mov rdx, r12
lea rcx, [rsp + 0x78]
call fcn.140060754
nop
mov rdx, qword [rsp + 0x90]
cmp rdx, 0xf
jbe 0x14003f829
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f824
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f824
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400fa144
movdqa xmm0, xmmword [0x14012b210]
movdqu xmmword [rsp + 0x88], xmm0
mov byte [rsp + 0x78], 0
mov rdx, qword [rsp + 0xb0]
cmp rdx, 0xf
jbe 0x14003f885
inc rdx
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f880
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f880
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400fa144
mov dword [0x140246ec8], 0
mov dword [0x140246ea8], 1
jmp 0x14003f8ec
movss xmm2, dword [rsi + 4]
subss xmm2, dword [0x14012b0e4]
movss xmm1, dword [rsi]
movss xmm8, dword [0x14012b114]
subss xmm1, xmm8
movups xmm0, xmmword [0x140246da0]
movdqa xmmword [rsp + 0x50], xmm0
lea r8, [rsp + 0x50]
unpcklps xmm1, xmm2
movq rdx, xmm1
call fcn.140035d90
movss xmm1, dword [0x140246ec8]
mov eax, dword [0x140246ea8]
jmp 0x14003f94e
xor edi, edi
movss xmm14, dword [0x14012b144]
movss xmm8, dword [0x14012b114]
test eax, eax
jle 0x14003fde4
mov dword [rsp + 0x48], 0x3f800000
mov dword [rsp + 0x40], 0
mov rbx, qword [0x140246648]
movss xmm1, dword [rbx + 0x18]
addss xmm1, xmm1
mulss xmm1, xmm13
movaps xmm0, xmm1
addss xmm0, dword [0x140246ecc]
movss dword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x40]
lea rax, [rsp + 0x70]
comiss xmm10, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x48]
comiss xmm0, xmm12
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x140246ecc], xmm0
mov dword [rsp + 0x48], 0x3f800000
mov dword [rsp + 0x40], 0
addss xmm1, dword [0x140246f00]
movss dword [rsp + 0x70], xmm1
lea rcx, [rsp + 0x40]
lea rax, [rsp + 0x70]
comiss xmm10, xmm1
cmovbe rcx, rax
lea rax, [rsp + 0x48]
comiss xmm1, xmm12
cmovbe rax, rcx
movss xmm6, dword [rax]
movss dword [0x140246f00], xmm6
lea rcx, [rbx + 0x4850]
movss xmm0, dword [rbx + 0x37f0]
mov dword [rsp + 0x50], edi
movss dword [rsp + 0x54], xmm0
lea rdx, [rsp + 0x50]
call fcn.140019f90
movss dword [rbx + 0x37f0], xmm6
mov rax, qword [0x140246648]
movss xmm0, dword [0x140246db0]
movss dword [rsp + 0x50], xmm0
movss xmm1, dword [0x140246db4]
movss dword [rsp + 0x54], xmm1
movss xmm0, dword [0x140246db8]
movss dword [rsp + 0x58], xmm0
movss xmm1, dword [0x140246dbc]
mulss xmm1, dword [rax + 0x37f0]
movss dword [rsp + 0x5c], xmm1
lea rcx, [rsp + 0x50]
call fcn.140003f20
movss xmm2, dword [r14 + 0x24]
addss xmm2, dword [0x14012b104]
movss xmm1, dword [r14 + 0x20]
movaps xmm0, xmm1
addss xmm0, dword [rsi]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm2
addss xmm1, xmm10
movss dword [rsp + 0x70], xmm1
movss dword [rsp + 0x74], xmm2
movss xmm0, dword [0x14012b074]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x70]
mov rcx, qword [r14 + 0x298]
call fcn.14001ecc0
mov rax, qword [0x140246648]
movss xmm0, dword [0x140246db0]
movss dword [rsp + 0x50], xmm0
movss xmm1, dword [0x140246db4]
movss dword [rsp + 0x54], xmm1
movss xmm0, dword [0x140246db8]
movss dword [rsp + 0x58], xmm0
movss xmm1, dword [0x140246dbc]
mulss xmm1, dword [rax + 0x37f0]
movss dword [rsp + 0x5c], xmm1
lea rcx, [rsp + 0x50]
call fcn.140003f20
movss xmm1, dword [r15]
subss xmm1, dword [0x14012b0ac]
movss xmm2, dword [r14 + 0x24]
addss xmm1, xmm2
movss xmm0, dword [r14 + 0x20]
movss xmm7, dword [0x14012b10c]
addss xmm0, xmm7
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
addss xmm2, dword [0x14012b104]
movss dword [rsp + 0x70], xmm0
movss dword [rsp + 0x74], xmm2
movss xmm6, dword [0x14012b074]
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x70]
mov rcx, qword [r14 + 0x298]
call fcn.14001ecc0
mov rax, qword [0x140246648]
movss xmm0, dword [0x140246db0]
movss dword [rsp + 0x50], xmm0
movss xmm1, dword [0x140246db4]
movss dword [rsp + 0x54], xmm1
movss xmm0, dword [0x140246db8]
movss dword [rsp + 0x58], xmm0
movss xmm1, dword [0x140246dbc]
mulss xmm1, dword [rax + 0x37f0]
movss dword [rsp + 0x5c], xmm1
lea rcx, [rsp + 0x50]
call fcn.140003f20
movss xmm2, dword [r15]
subss xmm2, xmm7
addss xmm2, dword [r14 + 0x24]
movss xmm1, dword [r14 + 0x20]
movaps xmm0, xmm1
addss xmm0, xmm7
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm2
addss xmm1, xmm10
movss dword [rsp + 0x70], xmm1
movss dword [rsp + 0x74], xmm2
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x70]
mov rcx, qword [r14 + 0x298]
call fcn.14001ecc0
mov rcx, qword [0x140246ed0]
call fcn.140010140
cmp dword [0x140246ea8], 1
sete bl
mov rax, qword [0x140246648]
mov qword [rsp + 0x30], rdi
lea rcx, [0x140124c6c]
mov qword [rsp + 0x28], rcx
movss xmm6, dword [0x14012b1a8]
movss dword [rsp + 0x20], xmm6
movss xmm3, dword [0x14012b198]
movss xmm2, dword [rax + 0x3c40]
lea rdx, [rsp + 0x50]
mov rcx, qword [rax + 0x3c38]
call fcn.140024580
movss xmm0, dword [rsp + 0x50]
addss xmm0, dword [0x14012b04c]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movaps xmm2, xmm7
subss xmm2, xmm0
mulss xmm2, xmm11
movss xmm1, dword [0x14012b128]
movzx r8d, bl
unpcklps xmm2, xmm1
movq rdx, xmm2
lea rcx, str.G1
call fcn.1400380e0
test al, al
je 0x14003fd12
mov dword [0x140246ec8], 0
mov eax, 1
mov dword [0x140246ea8], eax
mov dword [0x140246eec], edi
mov dword [reloc.WS2_32.dll_ioctlsocket], 0xa
jmp 0x14003fd18
mov eax, dword [0x140246ea8]
cmp eax, 2
sete bl
mov rax, qword [0x140246648]
mov qword [rsp + 0x30], rdi
lea rcx, [0x140124c74]
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm6
movss xmm3, dword [0x14012b198]
movss xmm2, dword [rax + 0x3c40]
lea rdx, [rsp + 0x50]
mov rcx, qword [rax + 0x3c38]
call fcn.140024580
movss xmm0, dword [rsp + 0x50]
addss xmm0, dword [0x14012b04c]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm7, xmm1
mulss xmm7, xmm11
movss xmm1, dword [0x14012b13c]
movzx r8d, bl
unpcklps xmm7, xmm1
movq rdx, xmm7
lea rcx, str.I1
call fcn.1400380e0
test al, al
je 0x14003fdc7
mov dword [0x140246ec8], 0
mov dword [0x140246ea8], 2
mov dword [reloc.WS2_32.dll_ioctlsocket], edi
mov dword [0x140246eec], 0xa
call fcn.1400101e0
mov ecx, 1
call fcn.140004280
movss xmm1, dword [0x140246ec8]
mov eax, dword [0x140246ea8]
cmp eax, 1
jne 0x14003fead
movss xmm6, dword [0x140246ecc]
mov rbx, qword [0x140246648]
lea rcx, [rbx + 0x4850]
movss xmm0, dword [rbx + 0x37f0]
mov dword [rsp + 0x50], edi
movss dword [rsp + 0x54], xmm0
lea rdx, [rsp + 0x50]
call fcn.140019f90
movss dword [rbx + 0x37f0], xmm6
cmp dword [0x140246eec], 0
sete r8b
movss xmm7, dword [0x14012b0dc]
movaps xmm0, xmm8
unpcklps xmm0, xmm7
movq rdx, xmm0
lea rcx, str.Announcements
call fcn.140038670
test al, al
je 0x14003fe60
mov eax, edi
mov dword [0x140246eec], eax
jmp 0x14003fe66
mov eax, dword [0x140246eec]
cmp eax, 1
sete r8b
movaps xmm0, xmm14
unpcklps xmm0, xmm7
movq rdx, xmm0
lea rcx, str.Instructions
call fcn.140038670
test al, al
je 0x14003fe93
mov dword [0x140246eec], 1
mov ecx, 1
call fcn.140004280
movss xmm1, dword [0x140246ec8]
mov eax, dword [0x140246ea8]
jmp 0x14003feb5
movss xmm7, dword [0x14012b0dc]
cmp eax, 2
jne 0x14003ffae
movss xmm6, dword [0x140246ecc]
mov rbx, qword [0x140246648]
lea rcx, [rbx + 0x4850]
movss xmm0, dword [rbx + 0x37f0]
mov dword [rsp + 0x50], edi
movss dword [rsp + 0x54], xmm0
lea rdx, [rsp + 0x50]
call fcn.140019f90
movss dword [rbx + 0x37f0], xmm6
cmp dword [reloc.WS2_32.dll_ioctlsocket], 0
sete r8b
movaps xmm0, xmm8
unpcklps xmm0, xmm7
movq rdx, xmm0
lea rcx, str.Device
call fcn.140038670
test al, al
je 0x14003ff29
mov eax, edi
mov dword [reloc.WS2_32.dll_ioctlsocket], eax
jmp 0x14003ff2f
mov eax, dword [reloc.WS2_32.dll_ioctlsocket]
cmp eax, 1
sete r8b
movss xmm0, dword [0x14012b134]
unpcklps xmm0, xmm7
movq rdx, xmm0
lea rcx, str.Spoofer
call fcn.140038670
test al, al
je 0x14003ff63
mov eax, 1
mov dword [reloc.WS2_32.dll_ioctlsocket], eax
jmp 0x14003ff69
mov eax, dword [reloc.WS2_32.dll_ioctlsocket]
cmp eax, 2
sete r8b
movaps xmm0, xmm9
unpcklps xmm0, xmm7
movq rdx, xmm0
lea rcx, str.Miscellaneous
call fcn.140038670
test al, al
je 0x14003ff96
mov dword [reloc.WS2_32.dll_ioctlsocket], 2
mov ecx, 1
call fcn.140004280
movss xmm1, dword [0x140246ec8]
mov eax, dword [0x140246ea8]
movss xmm6, dword [0x14012b0e4]
cmp dword [0x140246eec], 0
jne 0x14004004c
test eax, eax
jle 0x14004004c
mov rax, qword [0x140246648]
movss dword [rax + 0x37f0], xmm1
mov dword [rsp + 0x48], 0x3f800000
mov dword [rsp + 0x40], 0
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm0
mulss xmm0, xmm13
addss xmm0, xmm1
movss dword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x40]
lea rax, [rsp + 0x70]
comiss xmm10, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x48]
comiss xmm0, xmm12
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x140246ec8], xmm0
movaps xmm0, xmm8
unpcklps xmm0, xmm6
movq r8, xmm0
call fcn.140035160
movss xmm1, dword [0x140246ec8]
mov eax, dword [0x140246ea8]
cmp dword [reloc.WS2_32.dll_ioctlsocket], 0
jne 0x140040522
test eax, eax
jle 0x140040a7d
mov rax, qword [0x140246648]
movss dword [rax + 0x37f0], xmm1
mov dword [rsp + 0x48], 0x3f800000
mov dword [rsp + 0x40], 0
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm0
mulss xmm0, xmm13
addss xmm0, xmm1
movss dword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x40]
lea rax, [rsp + 0x70]
comiss xmm10, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x48]
comiss xmm0, xmm12
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x140246ec8], xmm0
lea rdx, [0x14023f150]
lea rcx, [rsp + 0x98]
call fcn.140036100
movaps xmm0, xmm8
movss xmm1, dword [0x14012b0e0]
unpcklps xmm0, xmm1
movq r8, xmm0
mov rdx, rax
lea rcx, str.Motherboard_Manufacturer:
call fcn.1400346b0
lea rdx, [0x14023f1b0]
lea rcx, [rsp + 0x98]
call fcn.140036100
movaps xmm0, xmm8
unpcklps xmm0, xmm6
movq r8, xmm0
mov rdx, rax
lea rcx, str.Motherboard_Model:
call fcn.1400346b0
lea rdx, [0x14023f0f0]
lea rcx, [rsp + 0x98]
call fcn.140036100
movaps xmm0, xmm8
movss xmm1, dword [0x14012b0ec]
unpcklps xmm0, xmm1
movq r8, xmm0
mov rdx, rax
lea rcx, str.Ethernet_Adapter:
call fcn.1400346b0
movss xmm6, dword [0x14012b0f4]
lea rdx, [0x14023f1f0]
lea rcx, [rsp + 0x98]
call fcn.140036100
movaps xmm0, xmm8
unpcklps xmm0, xmm6
movq r8, xmm0
mov rdx, rax
lea rcx, str.Disk_Drives:
call fcn.1400346b0
movss xmm6, dword [0x14012b0f8]
lea rdx, [0x14023f110]
lea rcx, [rsp + 0x98]
call fcn.140036100
movaps xmm0, xmm8
unpcklps xmm0, xmm6
movq r8, xmm0
mov rdx, rax
lea rcx, str.CPU:
call fcn.1400346b0
mov rax, qword [0x140246648]
movss xmm0, dword [0x140246d40]
movss dword [rsp + 0x50], xmm0
movss xmm1, dword [0x140246d44]
movss dword [rsp + 0x54], xmm1
movss xmm0, dword [0x140246d48]
movss dword [rsp + 0x58], xmm0
movss xmm1, dword [0x140246d4c]
mulss xmm1, dword [rax + 0x37f0]
movss dword [rsp + 0x5c], xmm1
lea rcx, [rsp + 0x50]
call fcn.140003f20
movss xmm2, dword [r14 + 0x104]
addss xmm2, dword [0x14012b0fc]
movss xmm1, dword [r14 + 0x100]
movaps xmm0, xmm1
addss xmm0, dword [rsi]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm2
addss xmm1, xmm8
movss dword [rsp + 0x70], xmm1
movss dword [rsp + 0x74], xmm2
movss xmm0, dword [0x14012b074]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x70]
mov rcx, qword [r14 + 0x298]
call fcn.14001ecc0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0x90], rdi
mov r8d, 5
lea rdx, str.WIFI:
lea rcx, [rsp + 0x78]
call fcn.140037160
mov r9b, 1
lea r8, [0x140246ed8]
movaps xmm0, xmm8
unpcklps xmm0, xmm9
movq rdx, xmm0
lea rcx, [rsp + 0x78]
call fcn.140034be0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0x90], rdi
mov r8d, 0xa
lea rdx, str.Bluetooth:
lea rcx, [rsp + 0x78]
call fcn.140037160
xor r9d, r9d
lea r8, [0x140246ee8]
movss xmm0, dword [0x14012b148]
unpcklps xmm0, xmm9
movq rdx, xmm0
lea rcx, [rsp + 0x78]
call fcn.140034be0
movups xmm6, xmmword [0x140246de0]
movss xmm7, dword [0x14012b154]
lea rdx, [0x14023f1d0]
lea rcx, [rsp + 0x98]
call fcn.140036100
movdqa xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x20], 1
lea r9, [rsp + 0x50]
movaps xmm0, xmm8
unpcklps xmm0, xmm7
movq r8, xmm0
mov rdx, rax
lea rcx, str.Baseboard:
call fcn.1400340d0
movups xmm6, xmmword [0x140246dc0]
lea rdx, [0x14023f190]
lea rcx, [rsp + 0x98]
call fcn.140036100
movdqa xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x20], 0
lea r9, [rsp + 0x50]
movss xmm0, dword [0x14012b158]
unpcklps xmm0, xmm7
movq r8, xmm0
mov rdx, rax
lea rcx, str.Chassis:
call fcn.1400340d0
movups xmm6, xmmword [0x140246de0]
movss xmm7, dword [0x14012b15c]
lea rdx, [0x14023f170]
lea rcx, [rsp + 0x98]
call fcn.140036100
movdqa xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x20], 1
lea r9, [rsp + 0x50]
movaps xmm0, xmm8
unpcklps xmm0, xmm7
movq r8, xmm0
mov rdx, rax
lea rcx, str.MAC_Address:
call fcn.1400340d0
movups xmm6, xmmword [0x140246dc0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0x90], rdi
mov r8d, 9
lea rdx, str.Not_found
lea rcx, [rsp + 0x78]
call fcn.140037160
movdqa xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x20], 0
lea r9, [rsp + 0x50]
movss xmm0, dword [0x14012b16c]
unpcklps xmm0, xmm7
movq r8, xmm0
lea rdx, [rsp + 0x78]
lea rcx, str.File_Traces:
call fcn.1400340d0
movups xmm6, xmmword [0x140246de0]
movss xmm7, dword [0x14012b168]
lea rdx, [0x14023f130]
lea rcx, [rsp + 0x98]
call fcn.140036100
movdqa xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x20], 0
lea r9, [rsp + 0x50]
movaps xmm0, xmm8
unpcklps xmm0, xmm7
movq r8, xmm0
mov rdx, rax
lea rcx, str.UUID:
call fcn.1400340d0
movss xmm6, dword [0x14012b170]
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0x90], rdi
mov r8d, 0x1f
lea rdx, str.TPM__Trusted_Computing__Status:
lea rcx, [rsp + 0x78]
call fcn.140037160
xor r9d, r9d
lea r8, [0x140246ee9]
movaps xmm0, xmm8
unpcklps xmm0, xmm6
movq rdx, xmm0
lea rcx, [rsp + 0x78]
call fcn.140034be0
movss xmm1, dword [0x140246ec8]
cmp dword [reloc.WS2_32.dll_ioctlsocket], 1
jne 0x140040a12
mov rax, qword [0x140246648]
movss dword [rax + 0x37f0], xmm1
mov dword [rsp + 0x48], 0x3f800000
mov dword [rsp + 0x40], 0
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm0
mulss xmm0, xmm13
addss xmm0, xmm1
movss dword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x40]
lea rax, [rsp + 0x70]
comiss xmm10, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x48]
comiss xmm0, xmm12
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x140246ec8], xmm0
movss xmm3, dword [rsi]
movss xmm14, dword [0x14012b11c]
subss xmm3, xmm14
subss xmm3, xmm15
movss xmm1, dword [0x14012b130]
movss xmm2, dword [0x14012b110]
unpcklps xmm3, xmm1
movq r8, xmm3
movaps xmm1, xmm14
unpcklps xmm1, xmm2
movq rdx, xmm1
call fcn.140033600
mov rbx, qword [0x140246648]
lea rcx, [rbx + 0x4850]
movss xmm1, dword [rbx + 0x383c]
movss xmm0, dword [rbx + 0x3840]
mov dword [rsp + 0x50], send
movss dword [rsp + 0x54], xmm1
movss dword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x50]
call fcn.140019f90
mov qword [rbx + 0x383c], 0
call fcn.140037520
mov rcx, qword [0x140246648]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
cmp byte [rax + 0xbb], 0
jne 0x14004065d
mov qword [rsp + 0x40], 0
movss xmm1, dword [0x14012b1a8]
lea rcx, [rsp + 0x40]
call fcn.140012a80
mov ecx, 1
call fcn.140004280
call fcn.14000a9c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
xor r8d, r8d
lea rdx, [0x1401247d6]
lea rcx, [rsp + 0x50]
call fcn.140037160
movss xmm0, dword [rsi]
subss xmm0, xmm14
subss xmm0, xmm15
movss xmm1, dword [0x14012b0e8]
movss xmm2, dword [0x14012b150]
lea r9, [rsp + 0x50]
unpcklps xmm0, xmm1
movq r8, xmm0
movaps xmm1, xmm14
unpcklps xmm1, xmm2
movq rdx, xmm1
lea rcx, str.Temporary_spoof
call fcn.1400365b0
test al, al
je 0x140040928
cmp byte [0x140246642], 0
jne 0x140040921
movss xmm6, dword [0x14012b0d4]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov r8d, 0x19
lea rdx, str.Launched_Temporary_spoof_
lea rcx, [rsp + 0x50]
call fcn.140037160
nop
movaps xmm0, xmm10
unpcklps xmm0, xmm6
movq r8, xmm0
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.140037400
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140040771
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004076c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040b57
call fcn.1400fa144
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov r8d, 0x20
lea rdx, str.Please_be_patient_for_2_minutes.
lea rcx, [rsp + 0x50]
call fcn.140037160
nop
movaps xmm0, xmm10
movss xmm1, dword [0x14012b0e0]
unpcklps xmm0, xmm1
movq r8, xmm0
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.140037400
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x1400407f8
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400407f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040b57
call fcn.1400fa144
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov r8d, 0x1a
lea rdx, str.C:WindowsFonts_spoof.sys
lea rcx, [rsp + 0x50]
call fcn.140037160
nop
mov r8d, 0x63d0
lea rdx, [0x1402159d0]
lea rcx, [rsp + 0x50]
call fcn.14003e900
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140040879
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040874
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040874
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400fa144
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov r8d, 0x1b
lea rdx, str.C:WindowsFontsmapper.exe
lea rcx, [rsp + 0x50]
call fcn.140037160
nop
mov r8d, 0x22200
lea rdx, [0x14021bda0]
lea rcx, [rsp + 0x50]
call fcn.14003e900
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x1400408fa
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400408f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400408f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400fa144
lea rcx, str.C:WindowsFontsmapper.exe_C:WindowsFonts_temp.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsFonts_spoof.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:WindowsFontsmapper.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov byte [0x140246641], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
xor r8d, r8d
lea rdx, [0x1401247d6]
lea rcx, [rsp + 0x50]
call fcn.140037160
movss xmm0, dword [rsi]
subss xmm0, dword [0x14012b120]
mulss xmm0, xmm11
subss xmm0, dword [0x14012b0a4]
movss xmm8, dword [0x14012b0f0]
movss xmm9, dword [0x14012b160]
lea r9, [rsp + 0x50]
unpcklps xmm0, xmm8
movq r8, xmm0
movaps xmm1, xmm14
unpcklps xmm1, xmm9
movq rdx, xmm1
lea rcx, str.Arp_spoof
call fcn.1400365b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
xor r8d, r8d
lea rdx, [0x1401247d6]
lea rcx, [rsp + 0x50]
call fcn.140037160
movss xmm0, dword [rsi]
subss xmm0, dword [0x14012b120]
mulss xmm0, xmm11
subss xmm0, dword [0x14012b0a4]
lea r9, [rsp + 0x50]
unpcklps xmm0, xmm8
movq r8, xmm0
movss xmm1, dword [0x14012b164]
unpcklps xmm1, xmm9
movq rdx, xmm1
lea rcx, str.Mac_spoof
call fcn.1400365b0
movss xmm1, dword [0x140246ec8]
cmp dword [reloc.WS2_32.dll_ioctlsocket], 2
jne 0x140040a7d
mov rax, qword [0x140246648]
movss dword [rax + 0x37f0], xmm1
mov dword [rsp + 0x48], 0x3f800000
mov dword [rsp + 0x40], 0
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm0
mulss xmm0, xmm13
addss xmm0, xmm1
movss dword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x40]
lea rax, [rsp + 0x70]
comiss xmm10, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x48]
comiss xmm0, xmm12
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x140246ec8], xmm0
cmp byte [0x140246641], 0
je 0x140040b63
cmp byte [0x140246642], 0
jne 0x140040b63
movss xmm0, dword [0x140246f04]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x14012b068]
cvtpd2ps xmm1, xmm0
movss dword [0x140246f04], xmm1
comiss xmm1, dword [0x14012b0c0]
jbe 0x140040b63
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x88], xmm1
mov r8d, shutdown
lea rdx, str.Succesfully_Spoofed.
lea rcx, [rsp + 0x78]
call fcn.140037160
nop
movaps xmm0, xmm10
movss xmm1, dword [0x14012b100]
unpcklps xmm0, xmm1
movq r8, xmm0
mov edx, 1
lea rcx, [rsp + 0x78]
call fcn.140037400
mov byte [0x140246642], 1
mov byte [0x140246641], 0
mov rdx, qword [rsp + 0x90]
cmp rdx, 0xf
jbe 0x140040b63
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040b5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040b5e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400fa144
call fcn.14000fa80
mov rcx, qword [rsp + 0xd0]
xor rcx, rsp
call fcn.1400f9a10
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r12
ret