Function at 0x14000ca00
Capabilities:
Execute command
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x1400aa0c0]
xor rax, rsp
mov qword [rbp + 0xd8], rax
mov byte [rsp + 0x58], r8b
movzx r12d, dl
mov qword [rbp + 0x40], rcx
mov qword [rbp + 0x90], rcx
xor r14d, r14d
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
lea r8d, [r14 + 0x21]
lea rdx, str.C:WindowsSystem32GarfBios.rom
lea rcx, [rsp + 0x30]
call fcn.140014cd0
lea rcx, [rsp + 0x30]
call fcn.14000b500
mov qword [rbp + 0x48], rax
lea rcx, [rax - 0x1000000]
test rcx, 0xfffffffffeffffff
je 0x14000cad4
call fcn.1400056b0
lea rdx, str.e_91mYour_device_is_not_eligible_for_deep_spoofing._Error_code:_2._Press_any_key_to_close_Garf_Spoofer.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.PAUSE__NUL_2_NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea ecx, [r14 + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov r8d, reloc.WLDAP32.dll_Ordinal_33
lea rdx, str.C:WindowsSystem32GarfBios.rom
lea rcx, [rsp + 0x30]
call fcn.140014cd0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x98]
call fcn.14000b090
nop
lea rcx, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rcx, qword [rbp + 0x98]
mov r8, qword [rbp + 0xa8]
test r8, r8
jne 0x14000cb83
lea rdx, [0x140097839]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000cb83
call fcn.1400056b0
lea rdx, str.e_91mYour_device_is_not_eligible_for_deep_spoofing._Error_code:_3._Press_any_key_to_close_Garf_Spoofer.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.PAUSE__NUL_2_NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0xb8]
call fcn.140012780
nop
lea rdx, [0x1400ab580]
lea rcx, [rsp + 0x60]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14000b870
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14000cbc2
mov rax, qword [rax]
cmp r8, 0x20
jne 0x14000cbdf
lea rdx, str.ffffffffffffffffffffffffffffffff
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000cbdf
xor bl, bl
jmp 0x14000cbe1
mov bl, 1
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14000cc1f
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cc1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cc1a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
movabs r13, 0x7fffffffffffffff
mov r15, qword [rbp + 0xb8]
test bl, bl
je 0x14000d395
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x60]
call fcn.14000c000
mov rdi, rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x28], rax
lea rdx, [0x1400ab580]
lea rcx, [rbp - 0x60]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14000b870
mov rbx, rax
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x50]
call fcn.140012780
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14000c1e0
mov rbx, rax
lea rax, [rbp + 0x98]
cmp rax, rbx
je 0x14000cd23
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x14000cce6
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cce1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cd55
call fcn.140085540
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14000cd61
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cd5c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cd5c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
lea rdx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0xf
cmova rdx, r15
lea rcx, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rcx, qword [rbp + 0x98]
mov r8, qword [rbp + 0xa8]
cmp r8, qword [rbp + 0xc8]
jne 0x14000d3ea
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000d3ea
lea rdx, [0x1400ab580]
lea rcx, [rsp + 0x60]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14000b870
mov rbx, rax
lea rdx, [0x1400ab580]
lea rcx, [rbp - 0x60]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp]
call fcn.14000b870
nop
mov rcx, qword [rax + 0x10]
sub rcx, 0xc
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov rax, qword [rbx + 0x10]
cmp rax, rcx
jb 0x14000f253
sub rax, rcx
mov rsi, 0xffffffffffffffff
mov r8, rsi
cmp rax, rsi
cmovb r8, rax
cmp qword [rbx + 0x18], 0xf
jbe 0x14000ce2d
mov rbx, qword [rbx]
lea rdx, [rbx + rcx]
lea rcx, [rsp + 0x30]
call fcn.140014cd0
lea rcx, [rsp + 0x30]
mov rbx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x48]
cmp rdi, 0xf
cmova rcx, rbx
mov r8, qword [rsp + 0x40]
cmp r8, 0xc
jne 0x14000ce72
lea rdx, str.ffffffffffff
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000ce72
xor r14b, r14b
jmp 0x14000ce75
mov r14b, 1
cmp rdi, 0xf
jbe 0x14000ceb0
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000cea7
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cea7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140085540
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x14000ceee
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cee9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cee9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
movdqa xmm0, xmmword [0x14009c2b0]
movdqu xmmword [rbp + 0x10], xmm0
mov byte [rbp], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14000cf3d
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cf38
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cf38
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
test r14b, r14b
je 0x14000d3bf
lea rax, [rbp + 0x70]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x60]
call fcn.14000c000
mov rbx, rax
lea rcx, [rbp - 0x80]
call fcn.14000c000
nop
mov rcx, qword [rax + 0x10]
sub rcx, 0xc
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
xor r14d, r14d
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x88], r14
mov rax, qword [rbx + 0x10]
cmp rax, rcx
jb 0x14000f259
sub rax, rcx
mov r8, rsi
cmp rax, rsi
cmovb r8, rax
cmp qword [rbx + 0x18], 0xf
jbe 0x14000cfaa
mov rbx, qword [rbx]
lea rdx, [rbx + rcx]
lea rcx, [rbp + 0x70]
call fcn.140014cd0
nop
lea rax, [rbp]
mov qword [rsp + 0x28], rax
lea rdx, [0x1400ab580]
lea rcx, [rbp - 0x20]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000b870
mov rbx, rax
lea rdx, [0x1400ab580]
lea rcx, [rbp - 0x40]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14000b870
nop
mov rcx, qword [rax + 0x10]
sub rcx, 0xc
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], r14
mov rax, qword [rbx + 0x10]
cmp rax, rcx
jb 0x14000f25f
sub rax, rcx
cmp rax, 0xffffffffffffffff
cmovb rsi, rax
cmp qword [rbx + 0x18], 0xf
jbe 0x14000d036
mov rbx, qword [rbx]
lea rdx, [rbx + rcx]
mov r8, rsi
lea rcx, [rbp]
call fcn.140014cd0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov rdi, qword [rbp + 0xa8]
lea rsi, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rsi, qword [rbp + 0x98]
cmp rdi, r13
ja 0x14000f265
cmp rdi, 0xf
ja 0x14000d0a1
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x30], xmm0
jmp 0x14000d137
mov rbx, rdi
or rbx, 0xf
cmp rbx, r13
jbe 0x14000d0e0
mov rbx, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140085350
mov rcx, rax
test rax, rax
je 0x14000d208
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000d118
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000d109
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000f229
jmp 0x14000d0be
test rcx, rcx
je 0x14000d115
call fcn.140085350
jmp 0x14000d118
mov rax, r14
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea r9, [rbp + 0x70]
lea r8, [rbp]
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x50]
call fcn.14000c1e0
mov rbx, rax
lea rax, [rbp + 0x98]
cmp rax, rbx
je 0x14000d1d6
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x14000d199
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d194
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d208
call fcn.140085540
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x14000d214
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d20f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d20f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
movdqa xmm0, xmmword [0x14009c2b0]
movdqu xmmword [rbp + 0x60], xmm0
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14000d263
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d25e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d25e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
movdqa xmm0, xmmword [0x14009c2b0]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14000d2b2
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d2ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d2ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
movdqa xmm0, xmmword [0x14009c2b0]
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14000d301
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d2fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d2fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
movdqa xmm0, xmmword [0x14009c2b0]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000d352
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d34d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d34d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
lea rdx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0xf
cmova rdx, r15
lea rcx, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rcx, qword [rbp + 0x98]
mov r8, qword [rbp + 0xa8]
cmp r8, qword [rbp + 0xc8]
jne 0x14000d3ea
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000d3ea
test r12b, r12b
jne 0x14000d3ea
lea rdx, str.e_91mUUID_not_eligible_for_spoofing.e_92m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14000d3ea
test r12b, r12b
jne 0x14000d3e7
lea rdx, str.e_91mUUID_not_eligible_for_spoofing.e_92m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor r14d, r14d
lea rax, [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov ebx, reloc.WLDAP32.dll_Ordinal_22
mov edx, ebx
lea rcx, [rbp - 0x40]
call fcn.140006180
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000b5e0
mov rdi, rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], r14
mov r8d, ebx
lea rdx, str.To_be_filled_by_O.E.M.
lea rcx, [rbp]
call fcn.140014cd0
lea rdx, [rbp]
lea rcx, [rbp - 0x80]
call fcn.14000b5e0
mov rbx, rax
lea rdx, [rbp + 0x98]
lea rcx, [rbp - 0x60]
call fcn.140012780
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000c1e0
mov rbx, rax
lea rax, [rbp + 0x98]
cmp rax, rbx
je 0x14000d4fa
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x14000d4bd
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d4b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d52e
call fcn.140085540
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000d53a
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d535
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d535
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
mov rbx, qword [0x1400ab4a8]
cmp rbx, 4
jbe 0x14000d6e6
lea r15, [0x1400ab498]
mov rdi, qword [0x1400ab4b0]
mov rcx, r15
mov rsi, qword [0x1400ab498]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000d588
mov r8, rbx
lea rdx, str.Unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000d6e6
mov rcx, r15
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000d5b0
mov r8, rbx
lea rdx, str.unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000d6e6
lea rax, [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov edx, ebx
lea rcx, [rbp - 0x40]
call fcn.140006180
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000b5e0
mov rdi, rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov rdx, r15
lea rcx, [rbp - 0x80]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000b5e0
mov rbx, rax
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x20]
call fcn.140012780
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000c1e0
mov rbx, rax
lea rax, [rbp + 0x98]
cmp rax, rbx
je 0x14000d6a4
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x14000d667
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d662
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d6d8
call fcn.140085540
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000d70e
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d6df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d6df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
jmp 0x14000d70e
test r12b, r12b
jne 0x14000d70e
lea rdx, str.e_91mBIOS_version_not_eligible_for_spoofing.e_92m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [0x1400ab908]
cmp rbx, 4
jbe 0x14000d8ba
lea r15, [0x1400ab8f8]
mov rdi, qword [0x1400ab910]
mov rcx, r15
mov rsi, qword [0x1400ab8f8]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000d75c
mov r8, rbx
lea rdx, str.Unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000d8ba
mov rcx, r15
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000d784
mov r8, rbx
lea rdx, str.unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000d8ba
lea rax, [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov edx, ebx
lea rcx, [rbp - 0x40]
call fcn.140006180
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000b5e0
mov rdi, rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov rdx, r15
lea rcx, [rbp - 0x80]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000b5e0
mov rbx, rax
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x20]
call fcn.140012780
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000c1e0
mov rbx, rax
lea rax, [rbp + 0x98]
cmp rax, rbx
je 0x14000d878
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x14000d83b
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d836
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d8ac
call fcn.140085540
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000d8e2
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d8b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d8b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
jmp 0x14000d8e2
test r12b, r12b
jne 0x14000d8e2
lea rdx, str.e_91mSystem_version_not_eligible_for_spoofing.e_92m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [0x1400ab600]
cmp rbx, 4
jbe 0x14000db74
lea r15, [0x1400ab5f0]
mov rdi, qword [0x1400ab608]
mov rcx, r15
mov rsi, qword [0x1400ab5f0]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000d930
mov r8, rbx
lea rdx, str.Unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000db74
mov rcx, r15
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000d958
mov r8, rbx
lea rdx, str.unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000db74
lea rax, [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov edx, ebx
lea rcx, [rbp - 0x40]
call fcn.140006180
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000b5e0
mov r14, rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov rdx, r15
lea rcx, [rbp - 0x80]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000b5e0
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov rdi, qword [rbp + 0xa8]
lea rsi, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rsi, qword [rbp + 0x98]
cmp rdi, r13
ja 0x14000f26b
cmp rdi, 0xf
ja 0x14000d9fb
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x30], xmm0
jmp 0x14000da8c
mov rbx, rdi
or rbx, 0xf
cmp rbx, r13
jbe 0x14000da3a
mov rbx, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140085350
mov rcx, rax
test rax, rax
je 0x14000db66
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000da6d
cmp rbx, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000da63
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000f22f
jmp 0x14000da18
test rcx, rcx
je 0x14000da6d
call fcn.140085350
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov r9, r14
mov r8, r15
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.14000c1e0
mov rbx, rax
lea rax, [rbp + 0x98]
cmp rax, rbx
je 0x14000db2f
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x14000daed
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dae8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000db66
call fcn.140085540
xor r14d, r14d
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], r14b
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r14b
jmp 0x14000db32
xor r14d, r14d
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000db9f
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000db6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000db6d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140085540
jmp 0x14000db9f
test r12b, r12b
jne 0x14000db9c
lea rdx, str.e_91mSystem_serial_number_not_eligible_for_spoofing.e_92m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor r14d, r14d
mov rbx, qword [0x1400ab928]
cmp rbx, 4
jbe 0x14000de31
lea r15, [0x1400ab918]
mov rdi, qword [0x1400ab930]
mov rcx, r15
mov rsi, qword [0x1400ab918]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000dbed
mov r8, rbx
lea rdx, str.Unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000de31
mov rcx, r15
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000dc15
mov r8, rbx
lea rdx, str.unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000de31
lea rax, [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov edx, ebx
lea rcx, [rbp - 0x40]
call fcn.140006180
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000b5e0
mov r14, rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov rdx, r15
lea rcx, [rbp - 0x80]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000b5e0
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov rdi, qword [rbp + 0xa8]
lea rsi, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rsi, qword [rbp + 0x98]
cmp rdi, r13
ja 0x14000f271
cmp rdi, 0xf
ja 0x14000dcb8
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x30], xmm0
jmp 0x14000dd49
mov rbx, rdi
or rbx, 0xf
cmp rbx, r13
jbe 0x14000dcf7
mov rbx, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140085350
mov rcx, rax
test rax, rax
je 0x14000de23
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000dd2a
cmp rbx, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000dd20
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000f235
jmp 0x14000dcd5
test rcx, rcx
je 0x14000dd2a
call fcn.140085350
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov r9, r14
mov r8, r15
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.14000c1e0
mov rbx, rax
lea rax, [rbp + 0x98]
cmp rax, rbx
je 0x14000ddec
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x14000ddaa
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dda5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de23
call fcn.140085540
xor r14d, r14d
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], r14b
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r14b
jmp 0x14000ddef
xor r14d, r14d
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000de59
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000de2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000de2a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140085540
jmp 0x14000de59
test r12b, r12b
jne 0x14000de59
lea rdx, str.e_91mSystem_SKU_number_not_eligible_for_spoofing.e_92m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [0x1400ab898]
cmp rbx, 4
jbe 0x14000e0eb
lea r15, [0x1400ab888]
mov rdi, qword [0x1400ab8a0]
mov rcx, r15
mov rsi, qword [0x1400ab888]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000dea7
mov r8, rbx
lea rdx, str.Unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000e0eb
mov rcx, r15
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000decf
mov r8, rbx
lea rdx, str.unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000e0eb
lea rax, [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov edx, ebx
lea rcx, [rbp - 0x40]
call fcn.140006180
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000b5e0
mov r14, rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov rdx, r15
lea rcx, [rbp - 0x80]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000b5e0
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov rdi, qword [rbp + 0xa8]
lea rsi, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rsi, qword [rbp + 0x98]
cmp rdi, r13
ja 0x14000f277
cmp rdi, 0xf
ja 0x14000df72
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x30], xmm0
jmp 0x14000e003
mov rbx, rdi
or rbx, 0xf
cmp rbx, r13
jbe 0x14000dfb1
mov rbx, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140085350
mov rcx, rax
test rax, rax
je 0x14000e0dd
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000dfe4
cmp rbx, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000dfda
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000f23b
jmp 0x14000df8f
test rcx, rcx
je 0x14000dfe4
call fcn.140085350
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov r9, r14
mov r8, r15
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.14000c1e0
mov rbx, rax
lea rax, [rbp + 0x98]
cmp rax, rbx
je 0x14000e0a6
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x14000e064
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e05f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e0dd
call fcn.140085540
xor r14d, r14d
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], r14b
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r14b
jmp 0x14000e0a9
xor r14d, r14d
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000e113
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e0e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e0e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140085540
jmp 0x14000e113
test r12b, r12b
jne 0x14000e113
lea rdx, str.e_91mSystem_family_not_eligible_for_spoofing.e_92m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [0x1400ab508]
cmp rbx, 4
jbe 0x14000e3a5
lea r15, [0x1400ab4f8]
mov rdi, qword [0x1400ab510]
mov rcx, r15
mov rsi, qword [0x1400ab4f8]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000e161
mov r8, rbx
lea rdx, str.Unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000e3a5
mov rcx, r15
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000e189
mov r8, rbx
lea rdx, str.unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000e3a5
lea rax, [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov edx, ebx
lea rcx, [rbp - 0x40]
call fcn.140006180
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000b5e0
mov r14, rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov rdx, r15
lea rcx, [rbp - 0x80]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000b5e0
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov rdi, qword [rbp + 0xa8]
lea rsi, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rsi, qword [rbp + 0x98]
cmp rdi, r13
ja 0x14000f27d
cmp rdi, 0xf
ja 0x14000e22c
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x30], xmm0
jmp 0x14000e2bd
mov rbx, rdi
or rbx, 0xf
cmp rbx, r13
jbe 0x14000e26b
mov rbx, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140085350
mov rcx, rax
test rax, rax
je 0x14000e397
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000e29e
cmp rbx, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000e294
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000f241
jmp 0x14000e249
test rcx, rcx
je 0x14000e29e
call fcn.140085350
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov r9, r14
mov r8, r15
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.14000c1e0
mov rbx, rax
lea rax, [rbp + 0x98]
cmp rax, rbx
je 0x14000e360
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x14000e31e
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e319
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e397
call fcn.140085540
xor r14d, r14d
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], r14b
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r14b
jmp 0x14000e363
xor r14d, r14d
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000e3cd
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e39e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e39e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140085540
jmp 0x14000e3cd
test r12b, r12b
jne 0x14000e3cd
lea rdx, str.e_91mCPU_serial_number_not_eligible_for_spoofing.e_92m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [0x1400ab5c0]
cmp rbx, 4
jbe 0x14000e579
lea r15, [0x1400ab5b0]
mov rdi, qword [0x1400ab5c8]
mov rcx, r15
mov rsi, qword [0x1400ab5b0]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000e41b
mov r8, rbx
lea rdx, str.Unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000e579
mov rcx, r15
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000e443
mov r8, rbx
lea rdx, str.unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000e579
lea rax, [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov edx, ebx
lea rcx, [rbp - 0x40]
call fcn.140006180
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000b5e0
mov rdi, rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov rdx, r15
lea rcx, [rbp - 0x80]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000b5e0
mov rbx, rax
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x20]
call fcn.140012780
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000c1e0
mov rbx, rax
lea rax, [rbp + 0x98]
cmp rax, rbx
je 0x14000e537
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x14000e4fa
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e4f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e56b
call fcn.140085540
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000e5a1
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e572
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e572
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
jmp 0x14000e5a1
test r12b, r12b
jne 0x14000e5a1
lea rdx, str.e_91mCPU_asset_tag_not_eligible_for_spoofing.e_92m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [0x1400ab568]
cmp rbx, 4
jbe 0x14000e87c
lea r15, [0x1400ab558]
mov rdi, qword [0x1400ab570]
mov rcx, r15
mov rsi, qword [0x1400ab558]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000e5ef
mov r8, rbx
lea rdx, str.Unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000e87c
mov rcx, r15
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000e617
mov r8, rbx
lea rdx, str.unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000e87c
lea rax, [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov edx, ebx
lea rcx, [rbp - 0x40]
call fcn.140006180
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000b5e0
mov rdi, rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov rdx, r15
lea rcx, [rbp - 0x80]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000b5e0
mov rbx, rax
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x20]
call fcn.140012780
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000c1e0
mov rbx, rax
lea rax, [rbp + 0x98]
cmp rax, rbx
je 0x14000e70b
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x14000e6ce
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e6c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e73f
call fcn.140085540
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000e74b
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e746
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e746
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
test r12b, r12b
je 0x14000e8a8
cmp byte [rsp + 0x58], 0
jne 0x14000ee63
mov rbx, qword [0x1400ab4c8]
cmp rbx, 4
jbe 0x14000eaa7
lea r15, [0x1400ab4b8]
mov rdi, qword [0x1400ab4d0]
mov rcx, r15
mov rsi, qword [0x1400ab4b8]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000e7ad
mov r8, rbx
lea rdx, str.Unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000eaa7
mov rcx, r15
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000e7d5
mov r8, rbx
lea rdx, str.unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000eaa7
lea rax, [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov edx, ebx
lea rcx, [rbp - 0x40]
call fcn.140006180
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000b5e0
mov r14, rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov rdx, r15
lea rcx, [rbp - 0x80]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000b5e0
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov rdi, qword [rbp + 0xa8]
lea rsi, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rsi, qword [rbp + 0x98]
cmp rdi, r13
ja 0x14000f283
cmp rdi, 0xf
ja 0x14000e933
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x30], xmm0
jmp 0x14000e9c4
test r12b, r12b
jne 0x14000e754
lea rdx, str.e_91mCPU_part_number_not_eligible_for_spoofing.e_92m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0xf
cmova rdx, qword [rbp + 0xb8]
lea rcx, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rcx, qword [rbp + 0x98]
mov r8, qword [rbp + 0xa8]
cmp r8, qword [rbp + 0xc8]
jne 0x14000e754
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000e754
lea rdx, str.e_91mPreparation_failed._Press_any_key_to_close_Garf_Spoofer.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.PAUSE__NUL_2_NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, rdi
or rbx, 0xf
cmp rbx, r13
jbe 0x14000e972
mov rbx, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140085350
mov rcx, rax
test rax, rax
je 0x14000ea99
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000e9a5
cmp rbx, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000e99b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000f247
jmp 0x14000e950
test rcx, rcx
je 0x14000e9a5
call fcn.140085350
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov r9, r14
mov r8, r15
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.14000c1e0
mov rbx, rax
lea rax, [rbp + 0x98]
cmp rax, rbx
je 0x14000ea65
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x14000ea25
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ea20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ea99
call fcn.140085540
xor r14d, r14d
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], r14b
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r14b
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000eacf
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000eaa0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000eaa0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140085540
jmp 0x14000eacf
test r12b, r12b
jne 0x14000eacf
lea rdx, str.e_91mBIOS_vendor_not_eligible_for_spoofing.e_92m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [0x1400ab548]
cmp rbx, 4
jbe 0x14000ec67
lea r15, [0x1400ab538]
mov rdi, qword [0x1400ab550]
mov rcx, r15
mov rsi, qword [0x1400ab538]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000eb1d
mov r8, rbx
lea rdx, str.Unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000ec67
mov rcx, r15
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000eb45
mov r8, rbx
lea rdx, str.unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000ec67
lea rax, [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov edx, ebx
lea rcx, [rbp - 0x40]
call fcn.140006180
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000b5e0
mov r14, rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
mov rdx, r15
lea rcx, [rsp + 0x60]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14000b5e0
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov rdi, qword [rbp + 0xa8]
lea rsi, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rsi, qword [rbp + 0x98]
cmp rdi, r13
ja 0x14000f289
cmp rdi, 0xf
ja 0x14000ebe6
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x30], xmm0
jmp 0x14000ec39
mov rbx, rdi
or rbx, 0xf
cmp rbx, r13
jbe 0x14000ebf7
mov rbx, r13
jmp 0x14000ec04
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
inc rbx
mov qword [rsp + 0x20], rbx
lea rdx, [rsp + 0x20]
call fcn.140014190
lea rcx, [rbx - 1]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rcx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.1400131e0
nop
mov r9, r14
mov r8, r15
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
call fcn.14000c1e0
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.1400126b0
lea rcx, [rbp - 0x60]
call fcn.140012650
jmp 0x14000ec8f
test r12b, r12b
jne 0x14000ec8f
lea rdx, str.e_91mSystem_manufacturer_not_eligible_for_spoofing.e_92m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [0x1400ab488]
cmp rbx, 4
jbe 0x14000ee3b
lea r14, [0x1400ab478]
mov rdi, qword [0x1400ab490]
mov rcx, r14
mov rsi, qword [0x1400ab478]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000ecdd
mov r8, rbx
lea rdx, str.Unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000ee3b
mov rcx, r14
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14000ed05
mov r8, rbx
lea rdx, str.unknown
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000ee3b
lea rax, [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov edx, ebx
lea rcx, [rbp - 0x40]
call fcn.140006180
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000b5e0
mov rdi, rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov rdx, r14
lea rcx, [rbp - 0x80]
call fcn.140012780
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000b5e0
mov rbx, rax
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x20]
call fcn.140012780
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000c1e0
mov rbx, rax
lea rax, [rbp + 0x98]
cmp rax, rbx
je 0x14000edf9
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x14000edbc
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000edb7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ee2d
call fcn.140085540
xor eax, eax
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], al
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], al
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000ee63
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ee34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ee34
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
jmp 0x14000ee63
test r12b, r12b
jne 0x14000ee63
lea rdx, str.e_91mSystem_product_name_not_eligible_for_spoofing.e_92m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xor esi, esi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rbx, qword [rbp + 0xa8]
lea rdi, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rdi, qword [rbp + 0x98]
cmp rbx, r13
ja 0x14000f223
cmp rbx, 0xf
ja 0x14000eecc
mov rax, rbx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
jmp 0x14000ef65
mov rax, rbx
or rax, 0xf
cmp rax, r13
jbe 0x14000ef04
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140085350
mov rcx, rax
test rax, rax
je 0x14000ef30
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000ef46
mov r13, rax
cmp rax, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb r13, rax
lea rcx, [r13 + 1]
cmp rcx, 0x1000
jb 0x14000ef37
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000f24d
jmp 0x14000eee6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000ef43
call fcn.140085350
jmp 0x14000ef46
mov rax, rsi
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], r13
lea r8, [rbx + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov rbx, qword [rbp + 0x40]
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.140012780
nop
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.14000c3e0
test r12b, r12b
jne 0x14000f101
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.140012780
mov rcx, rax
call fcn.14000b500
cmp rax, qword [rbp + 0x48]
je 0x14000efe7
call fcn.1400056b0
lea rdx, str.e_91mYour_device_is_not_eligible_for_deep_spoofing._Error_code:_4._Press_any_key_to_close_Garf_Spoofer.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.PAUSE__NUL_2_NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.140012780
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000b090
lea rdx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0xf
mov rdi, qword [rbp + 0xb8]
cmova rdx, rdi
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14000f028
mov rax, qword [rax]
cmp r8, qword [rbp + 0xc8]
jne 0x14000f041
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000f041
mov bl, 1
jmp 0x14000f043
xor bl, bl
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000f083
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f07e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f07e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
test bl, bl
je 0x14000f0c8
call fcn.1400056b0
lea rdx, str.e_91mYour_device_is_not_eligible_for_deep_spoofing._Error_code:_5._Press_any_key_to_close_Garf_Spoofer.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.PAUSE__NUL_2_NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, str.e_92mPrepared.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013620
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400137f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [rbp + 0x40]
jmp 0x14000f108
mov rdi, qword [rbp + 0xb8]
mov rax, qword [rbp + 0xd0]
cmp rax, 0xf
jbe 0x14000f14a
lea rdx, [rax + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000f141
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f141
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140085540
nop
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x14000f18e
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f189
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f189
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085540
mov qword [rbp + 0xa8], rsi
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], 0
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000f1dd
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x14000f1d8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000f21c
mov rcx, r8
call fcn.140085540
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rcx, qword [rbp + 0xd8]
xor rcx, rsp
call fcn.140085210
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140001f40
nop
call fcn.140001ea0
nop
call fcn.140001ea0
nop
call fcn.140001ea0
nop
call fcn.140001ea0
nop
call fcn.140001ea0
nop
call fcn.140001ea0
nop
call fcn.140001ea0
nop
call fcn.140013230
nop
call fcn.140013230
nop
call fcn.140013230
nop
call fcn.140001f40
nop
call fcn.140001f40
nop
call fcn.140001f40
nop
call fcn.140001f40
nop
call fcn.140001f40
nop
call fcn.140001f40
nop
call fcn.140001f40
int3