Function at 0x14003ee10
Capabilities:
Encode data using xor
Execute command
Self delete
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0xb8]
sub rsp, 0x1b0
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
movaps xmmword [rax - 0x48], xmm9
movaps xmmword [rax - 0x58], xmm10
movaps xmmword [rax - 0x68], xmm11
movaps xmmword [rax - 0x78], xmm12
movaps xmmword [rax - 0x88], xmm13
movaps xmmword [rax - 0x98], xmm14
movaps xmmword [rax - 0xa8], xmm15
mov rax, qword [0x1400df040]
xor rax, rsp
mov qword [rbp], rax
mov rcx, qword [0x1401aca78]
call fcn.14000fea0
mov rdx, qword [0x1400df0c8]
call fcn.140033590
mov rbx, qword [0x1401ac1c8]
mov rax, qword [rbx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rsi, qword [rbx + 0x3ef0]
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1401acb3c], eax
jle 0x14003eef2
lea rcx, [0x1401acb3c]
call fcn.1400aa258
cmp dword [0x1401acb3c], 0xffffffff
jne 0x14003eef2
lea rcx, [0x1400ac7b0]
call fcn.1400aa8a4
lea rcx, [0x1401acb3c]
call fcn.1400aa1ec
movss xmm0, dword [rsi + 0x28]
movss xmm14, dword [0x1400d0434]
subss xmm0, xmm14
movss xmm1, dword [0x1400d0418]
unpcklps xmm0, xmm1
movq rdx, xmm0
call fcn.1400359d0
test al, al
je 0x14003ef27
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [0x1401aca38]
call fcn.14000fea0
movss xmm1, dword [rsi + 0x2c]
subss xmm1, dword [0x1400d0448]
movss xmm0, dword [0x1400d0414]
unpcklps xmm0, xmm1
movq rdx, xmm0
call fcn.140035fa0
movss xmm1, dword [0x1401aca48]
movss dword [rbx + 0x37f0], xmm1
xor edi, edi
movss xmm10, dword [0x1400d039c]
xorps xmm9, xmm9
movss xmm12, dword [0x1400d03b8]
movss xmm13, dword [0x1400d0494]
movss xmm11, dword [0x1400d0358]
movss xmm15, dword [0x1400d042c]
movss xmm8, dword [0x1400d045c]
mov eax, dword [0x1401aca28]
test eax, eax
jne 0x14003f110
mov rax, qword [0x1401ac1c8]
movss dword [rax + 0x37f0], xmm1
mov dword [rsp + 0x40], 0x3f800000
mov dword [rsp + 0x60], edi
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm0
mulss xmm0, xmm12
addss xmm0, xmm1
movss dword [rsp + 0x64], xmm0
lea rcx, [rsp + 0x60]
lea rax, [rsp + 0x64]
comiss xmm9, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x40]
comiss xmm0, xmm10
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x1401aca48], xmm0
mov rax, qword [0x1401ab9d8]
lea r9, [rax + 1]
lea r8, [0x1401ab9c0]
cmp rax, 0xf
cmova r8, qword [0x1401ab9c0]
movss xmm0, dword [rsi + 0x28]
subss xmm0, xmm13
mulss xmm0, xmm11
movss xmm1, dword [0x1400d0474]
unpcklps xmm0, xmm1
movq rdx, xmm0
call fcn.140038f30
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
xor r8d, r8d
lea rdx, [0x1400c9b0e]
lea rcx, [rsp + 0x40]
call fcn.1400374a0
movss xmm1, dword [0x1400d0420]
movss xmm2, dword [rsi + 0x28]
subss xmm2, xmm13
mulss xmm2, xmm11
lea r9, [rsp + 0x40]
movaps xmm0, xmm13
unpcklps xmm0, xmm1
movq r8, xmm0
movss xmm3, dword [0x1400d048c]
unpcklps xmm2, xmm3
movq rdx, xmm2
lea rcx, str.Login
call fcn.140036950
test al, al
je 0x14003f0cd
mov dword [0x1401aca48], edi
mov dword [0x1401aca28], 1
movss xmm2, dword [rsi + 0x2c]
subss xmm2, xmm15
movss xmm1, dword [rsi + 0x28]
subss xmm1, xmm8
movups xmm0, xmmword [0x1401ac920]
movdqa xmmword [rsp + 0x40], xmm0
lea r8, [rsp + 0x40]
unpcklps xmm1, xmm2
movq rdx, xmm1
call fcn.140036250
movss xmm1, dword [0x1401aca48]
mov eax, dword [0x1401aca28]
test eax, eax
jle 0x14003f58f
mov dword [rsp + 0x60], 0x3f800000
mov dword [rsp + 0x40], edi
mov rbx, qword [0x1401ac1c8]
movss xmm1, dword [rbx + 0x18]
addss xmm1, xmm1
mulss xmm1, xmm12
movaps xmm0, xmm1
addss xmm0, dword [0x1401aca4c]
movss dword [rsp + 0x64], xmm0
lea rcx, [rsp + 0x40]
lea rax, [rsp + 0x64]
comiss xmm9, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x60]
comiss xmm0, xmm10
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x1401aca4c], xmm0
mov dword [rsp + 0x60], 0x3f800000
mov dword [rsp + 0x40], edi
addss xmm1, dword [0x1401aca80]
movss dword [rsp + 0x64], xmm1
lea rcx, [rsp + 0x40]
lea rax, [rsp + 0x64]
comiss xmm9, xmm1
cmovbe rcx, rax
lea rax, [rsp + 0x60]
comiss xmm1, xmm10
cmovbe rax, rcx
movss xmm6, dword [rax]
movss dword [0x1401aca80], xmm6
lea rcx, [rbx + 0x4850]
movss xmm0, dword [rbx + 0x37f0]
mov dword [rsp + 0x40], edi
movss dword [rsp + 0x44], xmm0
lea rdx, [rsp + 0x40]
call fcn.140019cf0
movss dword [rbx + 0x37f0], xmm6
mov rax, qword [0x1401ac1c8]
movss xmm0, dword [0x1401ac930]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [0x1401ac934]
movss dword [rsp + 0x44], xmm1
movss xmm0, dword [0x1401ac938]
movss dword [rsp + 0x48], xmm0
movss xmm1, dword [0x1401ac93c]
mulss xmm1, dword [rax + 0x37f0]
movss dword [rsp + 0x4c], xmm1
lea rcx, [rsp + 0x40]
call fcn.140003c80
movss xmm2, dword [rsi + 0x24]
addss xmm2, dword [0x1400d044c]
movss xmm1, dword [rsi + 0x20]
movaps xmm0, xmm1
addss xmm0, dword [rsi + 0x28]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm2
addss xmm1, xmm9
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x68], xmm2
movss xmm0, dword [0x1400d03bc]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x64]
mov rcx, qword [rsi + 0x298]
call fcn.14001e9e0
mov rax, qword [0x1401ac1c8]
movss xmm0, dword [0x1401ac930]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [0x1401ac934]
movss dword [rsp + 0x44], xmm1
movss xmm0, dword [0x1401ac938]
movss dword [rsp + 0x48], xmm0
movss xmm1, dword [0x1401ac93c]
mulss xmm1, dword [rax + 0x37f0]
movss dword [rsp + 0x4c], xmm1
lea rcx, [rsp + 0x40]
call fcn.140003c80
movss xmm1, dword [rsi + 0x2c]
subss xmm1, dword [0x1400d03f4]
movss xmm2, dword [rsi + 0x24]
addss xmm1, xmm2
movss xmm0, dword [rsi + 0x20]
movss xmm7, dword [0x1400d0454]
addss xmm0, xmm7
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
addss xmm2, dword [0x1400d044c]
movss dword [rsp + 0x64], xmm0
movss dword [rsp + 0x68], xmm2
movss xmm6, dword [0x1400d03bc]
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x64]
mov rcx, qword [rsi + 0x298]
call fcn.14001e9e0
mov rax, qword [0x1401ac1c8]
movss xmm0, dword [0x1401ac930]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [0x1401ac934]
movss dword [rsp + 0x44], xmm1
movss xmm0, dword [0x1401ac938]
movss dword [rsp + 0x48], xmm0
movss xmm1, dword [0x1401ac93c]
mulss xmm1, dword [rax + 0x37f0]
movss dword [rsp + 0x4c], xmm1
lea rcx, [rsp + 0x40]
call fcn.140003c80
movss xmm2, dword [rsi + 0x2c]
subss xmm2, xmm7
addss xmm2, dword [rsi + 0x24]
movss xmm1, dword [rsi + 0x20]
movaps xmm0, xmm1
addss xmm0, xmm7
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm2
addss xmm1, xmm9
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x68], xmm2
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x64]
mov rcx, qword [rsi + 0x298]
call fcn.14001e9e0
mov rcx, qword [0x1401aca50]
call fcn.14000fea0
cmp dword [0x1401aca28], 1
sete bl
mov rax, qword [0x1401ac1c8]
mov qword [rsp + 0x30], rdi
lea rcx, [0x1400c9f9c]
mov qword [rsp + 0x28], rcx
movss xmm6, dword [0x1400d04f0]
movss dword [rsp + 0x20], xmm6
movss xmm3, dword [0x1400d04e0]
movss xmm2, dword [rax + 0x3c40]
lea rdx, [rsp + 0x40]
mov rcx, qword [rax + 0x3c38]
call fcn.1400242a0
movss xmm0, dword [rsp + 0x40]
addss xmm0, dword [0x1400d0394]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movaps xmm2, xmm7
subss xmm2, xmm0
mulss xmm2, xmm11
movss xmm1, dword [0x1400d0470]
movzx r8d, bl
unpcklps xmm2, xmm1
movq rdx, xmm2
lea rcx, str.G1
call fcn.1400381d0
test al, al
je 0x14003f4c1
mov dword [0x1401aca48], edi
mov eax, 1
mov dword [0x1401aca28], eax
mov dword [0x1401aca6c], edi
mov dword [0x1400df0d0], 0xa
jmp 0x14003f4c7
mov eax, dword [0x1401aca28]
cmp eax, 2
sete bl
mov rax, qword [0x1401ac1c8]
mov qword [rsp + 0x30], rdi
lea rcx, [0x1400c9fa4]
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm6
movss xmm3, dword [0x1400d04e0]
movss xmm2, dword [rax + 0x3c40]
lea rdx, [rsp + 0x40]
mov rcx, qword [rax + 0x3c38]
call fcn.1400242a0
movss xmm0, dword [rsp + 0x40]
addss xmm0, dword [0x1400d0394]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm7, xmm1
mulss xmm7, xmm11
movss xmm1, dword [0x1400d0484]
movzx r8d, bl
unpcklps xmm7, xmm1
movq rdx, xmm7
lea rcx, str.I1
call fcn.1400381d0
test al, al
je 0x14003f572
mov dword [0x1401aca48], edi
mov dword [0x1401aca28], 2
mov dword [0x1400df0d0], edi
mov dword [0x1401aca6c], 0xa
call fcn.14000ff40
mov ecx, 1
call fcn.140003fe0
movss xmm1, dword [0x1401aca48]
mov eax, dword [0x1401aca28]
movss xmm7, dword [0x1400d0424]
cmp eax, 1
jne 0x14003f659
movss xmm6, dword [0x1401aca4c]
mov rbx, qword [0x1401ac1c8]
lea rcx, [rbx + 0x4850]
movss xmm0, dword [rbx + 0x37f0]
mov dword [rsp + 0x40], edi
movss dword [rsp + 0x44], xmm0
lea rdx, [rsp + 0x40]
call fcn.140019cf0
movss dword [rbx + 0x37f0], xmm6
cmp dword [0x1401aca6c], edi
sete r8b
movaps xmm0, xmm8
unpcklps xmm0, xmm7
movq rdx, xmm0
lea rcx, str.Announcements
call fcn.140038760
test al, al
je 0x14003f60a
mov eax, edi
mov dword [0x1401aca6c], eax
jmp 0x14003f610
mov eax, dword [0x1401aca6c]
cmp eax, 1
sete r8b
movss xmm0, dword [0x1400d048c]
unpcklps xmm0, xmm7
movq rdx, xmm0
lea rcx, str.Instructions
call fcn.140038760
test al, al
je 0x14003f641
mov dword [0x1401aca6c], 1
mov ecx, 1
call fcn.140003fe0
movss xmm1, dword [0x1401aca48]
mov eax, dword [0x1401aca28]
cmp eax, 2
jne 0x14003f751
movss xmm6, dword [0x1401aca4c]
mov rbx, qword [0x1401ac1c8]
lea rcx, [rbx + 0x4850]
movss xmm0, dword [rbx + 0x37f0]
mov dword [rsp + 0x40], edi
movss dword [rsp + 0x44], xmm0
lea rdx, [rsp + 0x40]
call fcn.140019cf0
movss dword [rbx + 0x37f0], xmm6
cmp dword [0x1400df0d0], edi
sete r8b
movaps xmm0, xmm8
unpcklps xmm0, xmm7
movq rdx, xmm0
lea rcx, str.Device
call fcn.140038760
test al, al
je 0x14003f6cc
mov eax, edi
mov dword [0x1400df0d0], eax
jmp 0x14003f6d2
mov eax, dword [0x1400df0d0]
cmp eax, 1
sete r8b
movss xmm0, dword [0x1400d047c]
unpcklps xmm0, xmm7
movq rdx, xmm0
lea rcx, str.Spoofer
call fcn.140038760
test al, al
je 0x14003f706
mov eax, 1
mov dword [0x1400df0d0], eax
jmp 0x14003f70c
mov eax, dword [0x1400df0d0]
cmp eax, 2
sete r8b
movaps xmm0, xmm13
unpcklps xmm0, xmm7
movq rdx, xmm0
lea rcx, str.Miscellaneous
call fcn.140038760
test al, al
je 0x14003f739
mov dword [0x1400df0d0], 2
mov ecx, 1
call fcn.140003fe0
movss xmm1, dword [0x1401aca48]
mov eax, dword [0x1401aca28]
movss xmm6, dword [0x1400d043c]
movss xmm7, dword [0x1400d0440]
cmp dword [0x1401aca6c], edi
jne 0x14003f821
test eax, eax
jle 0x14003f920
mov rax, qword [0x1401ac1c8]
movss dword [rax + 0x37f0], xmm1
mov dword [rsp + 0x60], 0x3f800000
mov dword [rsp + 0x40], edi
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm0
mulss xmm0, xmm12
addss xmm0, xmm1
movss dword [rsp + 0x64], xmm0
lea rcx, [rsp + 0x40]
lea rax, [rsp + 0x64]
comiss xmm9, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x60]
comiss xmm0, xmm10
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x1401aca48], xmm0
movaps xmm0, xmm8
unpcklps xmm0, xmm15
movq r8, xmm0
lea rdx, str.core.cpp_posted_this_in_Enigma
lea rcx, str.core.cpp__21_10_24
call fcn.1400352a0
movaps xmm0, xmm8
unpcklps xmm0, xmm14
movq r8, xmm0
lea rdx, str.core.cpp_said_he_loves_you___3
lea rcx, str.core.cpp__22_10_24
call fcn.1400352a0
movss xmm1, dword [0x1401aca48]
mov eax, dword [0x1401aca28]
cmp dword [0x1401aca6c], 1
jne 0x14003f920
test eax, eax
jle 0x14003f920
mov rax, qword [0x1401ac1c8]
movss dword [rax + 0x37f0], xmm1
mov dword [rsp + 0x60], 0x3f800000
mov dword [rsp + 0x40], edi
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm0
mulss xmm0, xmm12
addss xmm0, xmm1
movss dword [rsp + 0x64], xmm0
lea rcx, [rsp + 0x40]
lea rax, [rsp + 0x64]
comiss xmm9, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x60]
comiss xmm0, xmm10
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x1401aca48], xmm0
movaps xmm0, xmm8
unpcklps xmm0, xmm15
movq r8, xmm0
lea rdx, str.Temporary_spoof.
lea rcx, str.STEP_1
call fcn.140035650
movaps xmm0, xmm8
unpcklps xmm0, xmm14
movq r8, xmm0
lea rdx, str.Create_a_new_account.
lea rcx, str.STEP_2
call fcn.140035650
movaps xmm0, xmm8
unpcklps xmm0, xmm6
movq r8, xmm0
lea rdx, str.Use_Vpn_if_banned.
lea rcx, str.STEP_3
call fcn.140035650
movaps xmm0, xmm8
unpcklps xmm0, xmm7
movq r8, xmm0
lea rdx, str.Open_Fortnite.
lea rcx, str.STEP_4
call fcn.140035650
movss xmm1, dword [0x1401aca48]
mov eax, dword [0x1401aca28]
cmp dword [0x1400df0d0], edi
jne 0x14003fd93
test eax, eax
jle 0x1400405a6
mov rax, qword [0x1401ac1c8]
movss dword [rax + 0x37f0], xmm1
mov dword [rsp + 0x60], 0x3f800000
mov dword [rsp + 0x40], edi
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm0
mulss xmm0, xmm12
addss xmm0, xmm1
movss dword [rsp + 0x64], xmm0
lea rcx, [rsp + 0x40]
lea rax, [rsp + 0x64]
comiss xmm9, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x60]
comiss xmm0, xmm10
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x1401aca48], xmm0
lea rdx, [0x1401aba40]
lea rcx, [rsp + 0x70]
call fcn.1400365b0
movaps xmm0, xmm8
movss xmm1, dword [0x1400d0428]
unpcklps xmm0, xmm1
movq r8, xmm0
mov rdx, rax
lea rcx, str.Motherboard_Manufacturer:
call fcn.140034360
lea rdx, [0x1401abaa0]
lea rcx, [rsp + 0x70]
call fcn.1400365b0
movaps xmm0, xmm8
unpcklps xmm0, xmm15
movq r8, xmm0
mov rdx, rax
lea rcx, str.Motherboard_Model:
call fcn.140034360
lea rdx, [0x1401ab9e0]
lea rcx, [rsp + 0x70]
call fcn.1400365b0
movaps xmm0, xmm8
unpcklps xmm0, xmm14
movq r8, xmm0
mov rdx, rax
lea rcx, str.Ethernet_Adapter:
call fcn.140034360
lea rdx, [0x1401abae0]
lea rcx, [rsp + 0x70]
call fcn.1400365b0
movaps xmm0, xmm8
unpcklps xmm0, xmm6
movq r8, xmm0
mov rdx, rax
lea rcx, str.Disk_Drives:
call fcn.140034360
lea rdx, [0x1401aba00]
lea rcx, [rsp + 0x70]
call fcn.1400365b0
movaps xmm0, xmm8
unpcklps xmm0, xmm7
movq r8, xmm0
mov rdx, rax
lea rcx, str.CPU:
call fcn.140034360
mov rax, qword [0x1401ac1c8]
movss xmm0, dword [0x1401ac8c0]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [0x1401ac8c4]
movss dword [rsp + 0x44], xmm1
movss xmm0, dword [0x1401ac8c8]
movss dword [rsp + 0x48], xmm0
movss xmm1, dword [0x1401ac8cc]
mulss xmm1, dword [rax + 0x37f0]
movss dword [rsp + 0x4c], xmm1
lea rcx, [rsp + 0x40]
call fcn.140003c80
movss xmm2, dword [rsi + 0x104]
addss xmm2, dword [0x1400d0444]
movss xmm1, dword [rsi + 0x100]
movaps xmm0, xmm1
addss xmm0, dword [rsi + 0x28]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm2
addss xmm1, xmm8
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x68], xmm2
movss xmm0, dword [0x1400d03bc]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x64]
mov rcx, qword [rsi + 0x298]
call fcn.14001e9e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov r8d, 5
lea rdx, str.WIFI:
lea rcx, [rsp + 0x40]
call fcn.1400374a0
mov r9b, 1
lea r8, [0x1401aca58]
movaps xmm0, xmm8
unpcklps xmm0, xmm13
movq rdx, xmm0
lea rcx, [rsp + 0x40]
call fcn.140034890
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov r8d, 0xa
lea rdx, str.Bluetooth:
lea rcx, [rsp + 0x40]
call fcn.1400374a0
xor r9d, r9d
lea r8, [0x1401aca68]
movss xmm0, dword [0x1400d0490]
unpcklps xmm0, xmm13
movq rdx, xmm0
lea rcx, [rsp + 0x40]
call fcn.140034890
movups xmm6, xmmword [0x1401ac8b0]
movss xmm7, dword [0x1400d049c]
lea rdx, [0x1401abac0]
lea rcx, [rsp + 0x70]
call fcn.1400365b0
movdqa xmmword [rsp + 0x40], xmm6
mov byte [rsp + 0x20], 1
lea r9, [rsp + 0x40]
movaps xmm0, xmm8
unpcklps xmm0, xmm7
movq r8, xmm0
mov rdx, rax
lea rcx, str.Baseboard:
call fcn.140033d80
movups xmm6, xmmword [0x1401ac8b0]
lea rdx, [0x1401aba80]
lea rcx, [rsp + 0x70]
call fcn.1400365b0
movdqa xmmword [rsp + 0x40], xmm6
mov byte [rsp + 0x20], dil
lea r9, [rsp + 0x40]
movss xmm0, dword [0x1400d04a0]
unpcklps xmm0, xmm7
movq r8, xmm0
mov rdx, rax
lea rcx, str.Chassis:
call fcn.140033d80
movups xmm6, xmmword [0x1401ac8b0]
movss xmm7, dword [0x1400d04a4]
lea rdx, [0x1401aba60]
lea rcx, [rsp + 0x70]
call fcn.1400365b0
movdqa xmmword [rsp + 0x40], xmm6
mov byte [rsp + 0x20], 1
lea r9, [rsp + 0x40]
movaps xmm0, xmm8
unpcklps xmm0, xmm7
movq r8, xmm0
mov rdx, rax
lea rcx, str.MAC_Address:
call fcn.140033d80
movups xmm6, xmmword [0x1401ac8b0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 9
lea rdx, str.Not_found
lea rcx, [rbp - 0x70]
call fcn.1400374a0
movdqa xmmword [rsp + 0x40], xmm6
mov byte [rsp + 0x20], dil
lea r9, [rsp + 0x40]
movss xmm0, dword [0x1400d04b4]
unpcklps xmm0, xmm7
movq r8, xmm0
lea rdx, [rbp - 0x70]
lea rcx, str.File_Traces:
call fcn.140033d80
movups xmm6, xmmword [0x1401ac8b0]
movss xmm7, dword [0x1400d04b0]
lea rdx, [0x1401aba20]
lea rcx, [rsp + 0x70]
call fcn.1400365b0
movdqa xmmword [rsp + 0x40], xmm6
mov byte [rsp + 0x20], dil
lea r9, [rsp + 0x40]
movaps xmm0, xmm8
unpcklps xmm0, xmm7
movq r8, xmm0
mov rdx, rax
lea rcx, str.UUID:
call fcn.140033d80
movss xmm6, dword [0x1400d04b8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 0x1f
lea rdx, str.TPM__Trusted_Computing__Status:
lea rcx, [rbp - 0x70]
call fcn.1400374a0
movaps xmm0, xmm8
unpcklps xmm0, xmm6
movq rdx, xmm0
lea rcx, [rbp - 0x70]
call fcn.140034e10
movss xmm1, dword [0x1401aca48]
cmp dword [0x1400df0d0], 1
jne 0x14004053b
mov rax, qword [0x1401ac1c8]
movss dword [rax + 0x37f0], xmm1
mov dword [rsp + 0x60], 0x3f800000
mov dword [rsp + 0x40], edi
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm0
mulss xmm0, xmm12
addss xmm0, xmm1
movss dword [rsp + 0x64], xmm0
lea rcx, [rsp + 0x40]
lea rax, [rsp + 0x64]
comiss xmm9, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x60]
comiss xmm0, xmm10
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x1401aca48], xmm0
movss xmm3, dword [rsi + 0x28]
movss xmm7, dword [0x1400d0464]
subss xmm3, xmm7
movss xmm6, dword [0x1400d0414]
subss xmm3, xmm6
movss xmm1, dword [0x1400d0478]
movss xmm2, dword [0x1400d0458]
unpcklps xmm3, xmm1
movq r8, xmm3
movaps xmm1, xmm7
unpcklps xmm1, xmm2
movq rdx, xmm1
call fcn.1400332e0
mov rbx, qword [0x1401ac1c8]
lea rcx, [rbx + 0x4850]
movss xmm1, dword [rbx + 0x383c]
movss xmm0, dword [rbx + 0x3840]
mov dword [rsp + 0x40], 0xe
movss dword [rsp + 0x44], xmm1
movss dword [rsp + 0x48], xmm0
lea rdx, [rsp + 0x40]
call fcn.140019cf0
mov qword [rbx + 0x383c], rdi
call fcn.140037730
mov rcx, qword [0x1401ac1c8]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
cmp byte [rax + 0xbb], dil
jne 0x14003fec7
mov qword [rsp + 0x40], rdi
movss xmm1, dword [0x1400d04f0]
lea rcx, [rsp + 0x40]
call fcn.1400127e0
mov ecx, 1
call fcn.140003fe0
call fcn.14000a720
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
xor r8d, r8d
lea rdx, [0x1400c9b0e]
lea rcx, [rsp + 0x40]
call fcn.1400374a0
movss xmm0, dword [rsi + 0x28]
subss xmm0, xmm7
subss xmm0, xmm6
movss xmm1, dword [0x1400d0430]
movss xmm2, dword [0x1400d0498]
lea r9, [rsp + 0x40]
unpcklps xmm0, xmm1
movq r8, xmm0
movaps xmm1, xmm7
unpcklps xmm1, xmm2
movq rdx, xmm1
lea rcx, str.Temporary_spoof
call fcn.140036950
test al, al
je 0x140040065
cmp byte [0x1401ac1c2], dil
jne 0x14004005e
movss xmm6, dword [0x1400d041c]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x19
lea rdx, str.Launched_Temporary_spoof_
lea rcx, [rsp + 0x40]
call fcn.1400374a0
nop
xorps xmm0, xmm0
unpcklps xmm0, xmm6
movq r8, xmm0
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.140037610
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14003ffd8
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ffd3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040678
call fcn.1400aa8c4
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x20
lea rdx, str.Please_be_patient_for_2_minutes.
lea rcx, [rsp + 0x40]
call fcn.1400374a0
nop
xorps xmm0, xmm0
movss xmm1, dword [0x1400d0428]
unpcklps xmm0, xmm1
movq r8, xmm0
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.140037610
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14004005e
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040059
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040678
call fcn.1400aa8c4
mov byte [0x1401ac1c1], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
xor r8d, r8d
lea rdx, [0x1400c9b0e]
lea rcx, [rsp + 0x40]
call fcn.1400374a0
movss xmm0, dword [rsi + 0x28]
movss xmm8, dword [0x1400d0468]
subss xmm0, xmm8
mulss xmm0, xmm11
movss xmm13, dword [0x1400d03ec]
subss xmm0, xmm13
movss xmm14, dword [0x1400d0438]
movss xmm15, dword [0x1400d04a8]
lea r9, [rsp + 0x40]
unpcklps xmm0, xmm14
movq r8, xmm0
movaps xmm1, xmm7
unpcklps xmm1, xmm15
movq rdx, xmm1
lea rcx, str.Mac_spoof
call fcn.140036950
mov ebx, dword [0x1400df098]
movdqa xmm6, xmmword [0x1400d05c0]
test al, al
je 0x1400402e7
movups xmm0, xmmword [0x1400cfea0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x1400cfeb0]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [0x1400cfec0]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x1400cfed0]
movups xmmword [rbp - 0x20], xmm1
movsd xmm0, qword [0x1400cfee0]
movsd qword [rbp - 0x10], xmm0
mov eax, dword [0x1400cfee8]
mov dword [rbp - 8], eax
movzx eax, byte [0x1400cfeec]
mov byte [rbp - 4], al
mov r8d, edi
cmp ebx, 2
jl 0x14004027f
movdqa xmm4, xmmword [0x1400d0590]
movdqa xmm3, xmmword [0x1400d0990]
movdqa xmm5, xmmword [str.::::]
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x48
jl 0x140040190
cmp r8d, 0x4d
jge 0x1400402c3
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x4d
jl 0x140040290
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32TasksMac.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:WindowsSystem32TasksMac.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
xor r8d, r8d
lea rdx, [0x1400c9b0e]
lea rcx, [rsp + 0x70]
call fcn.1400374a0
movss xmm0, dword [rsi + 0x28]
subss xmm0, xmm8
mulss xmm0, xmm11
subss xmm0, xmm13
lea r9, [rsp + 0x70]
unpcklps xmm0, xmm14
movq r8, xmm0
movss xmm1, dword [0x1400d04ac]
unpcklps xmm1, xmm15
movq rdx, xmm1
lea rcx, str.Arp_spoof
call fcn.140036950
test al, al
je 0x140040533
movups xmm0, xmmword [str._LHW]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x1400cff00]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [0x1400cff10]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x1400cff20]
movups xmmword [rbp - 0x20], xmm1
movsd xmm0, qword [0x1400cff30]
movsd qword [rbp - 0x10], xmm0
mov eax, dword [0x1400cff38]
mov dword [rbp - 8], eax
movzx eax, byte [0x1400cff3c]
mov byte [rbp - 4], al
cmp ebx, 2
jl 0x1400404ca
movdqa xmm4, xmmword [0x1400d0590]
movdqa xmm3, xmmword [0x1400d0990]
movdqa xmm5, xmmword [str.::::]
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, edi
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdi + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edi, 8
lea rcx, [rcx + 8]
cmp edi, 0x48
jl 0x1400403e0
cmp edi, 0x4d
jge 0x14004050f
movsxd rax, edi
lea r8, [rbp - 0x50]
add r8, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, dil
sub al, cl
add al, 0x38
xor byte [r8], al
inc edi
lea r8, [r8 + 1]
cmp edi, 0x4d
jl 0x1400404e0
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32TasksArp.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:WindowsSystem32TasksArp.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movss xmm1, dword [0x1401aca48]
cmp dword [0x1400df0d0], 2
jne 0x1400405a6
mov rax, qword [0x1401ac1c8]
movss dword [rax + 0x37f0], xmm1
mov dword [rsp + 0x60], 0x3f800000
mov dword [rsp + 0x40], 0
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm0
mulss xmm0, xmm12
addss xmm0, xmm1
movss dword [rsp + 0x64], xmm0
lea rcx, [rsp + 0x40]
lea rax, [rsp + 0x64]
comiss xmm9, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x60]
comiss xmm0, xmm10
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x1401aca48], xmm0
cmp byte [0x1401ac1c1], 0
je 0x140040684
cmp byte [0x1401ac1c2], 0
jne 0x140040684
movss xmm0, dword [0x1401aca70]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x1400d03b0]
cvtpd2ps xmm1, xmm0
movss dword [0x1401aca70], xmm1
comiss xmm1, dword [0x1400d0408]
jbe 0x140040684
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
mov r8d, 0x1f
lea rdx, str.Succesfully_Spoofed_Restart_Pc.
lea rcx, [rsp + 0x70]
call fcn.1400374a0
nop
movaps xmm0, xmm9
movss xmm1, dword [0x1400d0448]
unpcklps xmm0, xmm1
movq r8, xmm0
mov edx, 1
lea rcx, [rsp + 0x70]
call fcn.140037610
mov byte [0x1401ac1c2], 1
mov byte [0x1401ac1c1], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140040684
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004067f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004067f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400aa8c4
call fcn.14000f7e0
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.1400aa190
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop rbp
ret