Function at 0x1400db080
Capabilities:
Check if file exists
Execute command
Get common file path
Get program files directory
Log keystrokes via polling

Disassembly:
sub rsp, 0x598
mov dword [rsp + 0x30], 0
lea rcx, str.start_https:__discord.gg_nightsector
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_https:__t.me_nightsector1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400dbf90
nop
mov ecx, 0x10
call fcn.1400dc2f0
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
je 0x1400db168
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x34]
call fcn.1400be170
mov rcx, rax
call fcn.1400bd080
mov rdx, rax
lea rcx, [rsp + 0x2d0]
call fcn.140006530
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x88], rax
mov eax, dword [rsp + 0x30]
or eax, 1
mov dword [rsp + 0x30], eax
mov rcx, qword [rsp + 0x88]
call fcn.140037ff0
mov dword [rsp + 0x48], eax
lea rdx, [rsp + 0x2b0]
lea rcx, [rsp + 0x35]
call fcn.1400bd930
mov rcx, rax
call fcn.1400bce60
mov qword [rsp + 0x90], rax
mov r8d, dword [rsp + 0x48]
mov rdx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x68]
call fcn.1400065f0
mov qword [rsp + 0x70], rax
jmp 0x1400db171
mov qword [rsp + 0x70], 0
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x98]
mov qword [0x1401d9390], rax
mov eax, dword [rsp + 0x30]
and eax, 1
test eax, eax
je 0x1400db1ab
and dword [rsp + 0x30], 0xfffffffe
lea rcx, [rsp + 0x2d0]
call fcn.140006a00
nop
mov rcx, qword [0x1401d9390]
call fcn.140006cd0
movzx eax, al
test eax, eax
jne 0x1400db3d1
mov rcx, qword [0x1401d9390]
call fcn.140007770
mov qword [rsp + 0xa0], rax
mov rdx, qword [rsp + 0xa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x140137208]
mov rcx, rax
call fcn.1400056d0
nop
lea rdx, [0x1400b8d60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0xb0], rax
lea rdx, [rsp + 0x397]
lea rcx, [rsp + 0x36]
call fcn.1400be690
mov rcx, rax
call fcn.1400bcf20
mov qword [rsp + 0xa8], rax
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xb0]
call fcn.1400056d0
mov qword [rsp + 0xb8], rax
lea rdx, [0x1400b8d60]
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rdx, [rsp + 0x283]
lea rcx, [rsp + 0x37]
call fcn.1400beb50
mov rcx, rax
call fcn.1400bd0c0
mov rdx, rax
lea rcx, [rsp + 0x2f0]
call fcn.140006530
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0xc8], rax
mov rcx, qword [rsp + 0xc8]
call fcn.140037ff0
mov dword [rsp + 0x4c], eax
lea rcx, [rsp + 0x2f0]
call fcn.140006a00
cmp dword [rsp + 0x4c], 0
je 0x1400db363
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x38]
call fcn.1400bef10
mov rcx, rax
call fcn.1400bcd80
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0xd8], rax
lea rdx, [rsp + 0x275]
lea rcx, [rsp + 0x39]
call fcn.1400bf280
mov rcx, rax
call fcn.1400bd0a0
mov qword [rsp + 0xd0], rax
mov rdx, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xd8]
call fcn.1400056d0
mov qword [rsp + 0xe0], rax
lea rdx, [0x1400b8d60]
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
jmp 0x1400db0af
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0xf0], rax
lea rdx, [rsp + 0x381]
lea rcx, [rsp + 0x3a]
call fcn.1400bf600
mov rcx, rax
call fcn.1400bcf00
mov qword [rsp + 0xe8], rax
mov rdx, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0xf0]
call fcn.1400056d0
mov qword [rsp + 0xf8], rax
lea rdx, [0x1400b8d60]
mov rcx, qword [rsp + 0xf8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
jmp 0x1400db0af
lea rdx, [rsp + 0x292]
lea rcx, [rsp + 0x3b]
call fcn.1400bf8b0
mov rcx, rax
call fcn.1400bd0c0
mov rdx, rax
lea rcx, [rsp + 0x310]
call fcn.140006530
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x108], rax
mov rcx, qword [rsp + 0x108]
call fcn.140037ff0
mov dword [rsp + 0x50], eax
lea rcx, [rsp + 0x310]
call fcn.140006a00
cmp dword [rsp + 0x50], 0
je 0x1400db622
lea rdx, [rsp + 0x2a1]
lea rcx, [rsp + 0x3c]
call fcn.1400bf9f0
mov rcx, rax
call fcn.1400bd0c0
mov rdx, rax
lea rcx, [rsp + 0x330]
call fcn.140006530
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x118], rax
mov rcx, qword [rsp + 0x118]
call fcn.140037ff0
mov eax, eax
mov qword [0x1401d9a40], rax
lea rcx, [rsp + 0x330]
call fcn.140006a00
nop
mov ecx, 0x10
call fcn.1400dc2f0
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
je 0x1400db503
mov eax, dword [0x1401d9a40]
mov dword [rsp + 0x54], eax
lea rdx, [rsp + 0x2c0]
lea rcx, [rsp + 0x3d]
call fcn.1400bd360
mov rcx, rax
call fcn.1400bce60
mov qword [rsp + 0x120], rax
mov r8d, dword [rsp + 0x54]
mov rdx, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x58]
call fcn.1400065f0
mov qword [rsp + 0x60], rax
jmp 0x1400db50c
mov qword [rsp + 0x60], 0
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x128]
mov qword [0x1401d9390], rax
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rdx, [rsp + 0x370]
lea rcx, [rsp + 0x3e]
call fcn.1400bd400
mov rcx, rax
call fcn.1400bce80
mov qword [rsp + 0x130], rax
mov rdx, qword [rsp + 0x130]
mov rcx, qword [0x1401d9390]
call fcn.1400076e0
mov qword [0x1401d9a18], rax
cmp qword [0x1401d9a18], 0
jne 0x1400db5cd
lea rdx, [rsp + 0x3cc]
lea rcx, [rsp + 0x3f]
call fcn.1400bd430
mov rcx, rax
call fcn.1400bcea0
mov qword [rsp + 0x138], rax
mov rcx, qword [0x1401d9390]
call fcn.140007770
mov qword [rsp + 0x140], rax
mov rdx, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x140]
call fcn.140037e60
mov qword [0x1401d9a18], rax
mov rdx, qword [0x1401d9a18]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, str._get_module_address
mov rcx, rax
call fcn.1400056d0
mov qword [rsp + 0x148], rax
lea rdx, [0x1400b8d60]
mov rcx, qword [rsp + 0x148]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
cmp qword [0x1401d9a18], 0
jne 0x1400db61d
jmp 0x1400db3d1
jmp 0x1400db6dc
lea rdx, [rsp + 0x7c]
lea rcx, [rsp + 0x40]
call fcn.1400bd4e0
mov rcx, rax
call fcn.1400bcd80
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x41]
call fcn.1400bd540
mov rcx, rax
call fcn.1400bce00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x158], rax
lea rdx, [rsp + 0x3ae]
lea rcx, [rsp + 0x42]
call fcn.1400bd5e0
mov rcx, rax
call fcn.1400bcfa0
mov qword [rsp + 0x150], rax
mov rdx, qword [rsp + 0x150]
mov rcx, qword [rsp + 0x158]
call fcn.1400056d0
mov qword [rsp + 0x160], rax
lea rdx, [0x1400b8d60]
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov ecx, 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x1400db3d1
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x170], rax
lea rdx, [rsp + 0x419]
lea rcx, [rsp + 0x43]
call fcn.1400bd660
mov rcx, rax
call fcn.1400bcfe0
mov qword [rsp + 0x168], rax
mov rdx, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x170]
call fcn.1400056d0
mov qword [rsp + 0x178], rax
lea rdx, [0x1400b8d60]
mov rcx, qword [rsp + 0x178]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
jne 0x1400db763
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x1400db740
lea rax, [rsp + 0x480]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2a
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jl 0x1400db834
lea rdx, [rsp + 0x3ee]
lea rcx, [rsp + 0x44]
call fcn.1400bd700
mov rcx, rax
call fcn.1400bcfc0
mov rdx, rax
lea rcx, [rsp + 0x480]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
nop
lea rcx, [rsp + 0x480]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x1400db7e0
lea rdx, [rsp + 0x480]
lea rcx, [0x1401d3630]
call fcn.140019210
nop
jmp 0x1400db834
lea rdx, [rsp + 0x446]
lea rcx, [rsp + 0x45]
call fcn.1400bd780
mov rcx, rax
call fcn.1400bd000
mov rdx, rax
lea rcx, [rsp + 0x350]
call fcn.140006530
mov qword [rsp + 0x180], rax
mov rdx, qword [rsp + 0x180]
lea rcx, [0x1401d3630]
call fcn.1400a37f0
lea rcx, [rsp + 0x350]
call fcn.140006a00
nop
lea rcx, [rsp + 0x190]
call fcn.1400b9030
mov qword [rsp + 0x188], rax
mov rdx, qword [rsp + 0x188]
lea rcx, [0x1401eb5a0]
call fcn.1400b3610
lea rcx, [rsp + 0x190]
call fcn.1400bbdc0
nop
lea rcx, [rsp + 0x1a8]
call fcn.1400b90b0
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0x1a0], rax
lea rcx, [0x1401eb5a0]
call fcn.1400076d0
mov rdx, qword [rsp + 0x1a0]
mov rcx, rax
call fcn.1400b3660
lea rcx, [rsp + 0x1a8]
call fcn.1400bbe10
nop
lea rcx, [rsp + 0x1b8]
call fcn.1400b91a0
mov qword [rsp + 0x1b0], rax
mov rdx, qword [rsp + 0x1b0]
lea rcx, [0x1401eb728]
call fcn.1400b36b0
lea rcx, [rsp + 0x1b8]
call fcn.1400bbeb0
nop
lea rcx, [rsp + 0x1c8]
call fcn.1400b91a0
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
lea rcx, [0x1401eb730]
call fcn.1400b3750
lea rcx, [rsp + 0x1c8]
call fcn.1400bbf50
nop
lea rcx, [rsp + 0x1d8]
call fcn.1400b91a0
mov qword [rsp + 0x1d0], rax
mov rdx, qword [rsp + 0x1d0]
lea rcx, [0x1401eb738]
call fcn.1400b3700
lea rcx, [rsp + 0x1d8]
call fcn.1400bbf00
nop
call fcn.1400c1ae0
nop
lea rdx, [0x1400d92c0]
lea rcx, [rsp + 0x228]
call fcn.1400b3070
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x1e8], rax
mov rcx, qword [rsp + 0x1e8]
call fcn.1400cd100
nop
lea rcx, [rsp + 0x228]
call fcn.1400bc2a0
nop
lea rdx, [0x1400c5d30]
lea rcx, [rsp + 0x238]
call fcn.1400b3070
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x1f8], rax
mov rcx, qword [rsp + 0x1f8]
call fcn.1400cd100
nop
lea rcx, [rsp + 0x238]
call fcn.1400bc2a0
nop
lea rdx, [0x1400cdc90]
lea rcx, [rsp + 0x248]
call fcn.1400b3070
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x208], rax
mov rcx, qword [rsp + 0x208]
call fcn.1400cd100
nop
lea rcx, [rsp + 0x248]
call fcn.1400bc2a0
nop
lea rdx, [0x1400c02f0]
lea rcx, [rsp + 0x258]
call fcn.1400b3070
mov qword [rsp + 0x210], rax
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x218], rax
mov rcx, qword [rsp + 0x218]
call fcn.1400cd100
nop
lea rcx, [rsp + 0x258]
call fcn.1400bc2a0
nop
call fcn.1400cf020
nop
xor eax, eax
add rsp, 0x598
ret