Function at 0x140004780
Capabilities:
Create process on windows
Execute command
Get disk information
Get token membership
Set console window title
Terminate process

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r14
push r15
sub rsp, 0x380
mov rax, qword [0x140076180]
xor rax, rsp
mov qword [rsp + 0x370], rax
xor edi, edi
mov dword [rsp + 0xa8], edi
mov qword [r11 - 0x2d8], rdi
mov dword [rsp + 0x130], edi
mov word [rsp + 0x134], 0x500
lea rax, [r11 - 0x2d8]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], edi
mov dword [rsp + 0x40], edi
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
mov r9d, 0x220
mov r8d, 0x20
mov dl, 2
lea rcx, [r11 - 0x258]
call qword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
test eax, eax
je 0x140004838
lea r8, [rsp + 0xa8]
mov rdx, qword [rsp + 0xb0]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.ADVAPI32.dll_FreeSid]
cmp dword [rsp + 0xa8], edi
jne 0x140004962
lea rdx, str.Redmarrage_en_tant_quadministrateur..._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
mov r8d, 0x104
lea rdx, [rsp + 0x160]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x140004929
mov dword [rsp + 0xc0], WSACleanup
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xc4], xmm0
movups xmmword [rsp + 0xd4], xmm0
movups xmmword [rsp + 0xe4], xmm0
movups xmmword [rsp + 0xf4], xmm0
movups xmmword [rsp + 0x104], xmm0
movups xmmword [rsp + 0x114], xmm0
mov qword [rsp + 0x124], rax
mov dword [rsp + 0x12c], eax
lea rax, str.runas
mov qword [rsp + 0xd0], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xc8], rdi
mov dword [rsp + 0xf0], 1
lea rcx, [rsp + 0xc0]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x140004959
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x4c7
jne 0x140004929
lea rdx, str.Llvation_des_privilges_a_t_annule_par_lutilisateur._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140005890
xor eax, eax
mov rcx, qword [rsp + 0x370]
xor rcx, rsp
call fcn.1400549f0
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop r15
ret
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, str.Fast_Spoofer
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
mov ecx, 0x20
call fcn.140054a10
mov qword [rsp + 0x68], rax
movdqa xmm0, xmmword [0x1400630c0]
movdqu xmmword [rsp + 0x78], xmm0
movups xmm0, xmmword [str.clzv6812a001hns01joqp4amc]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140062b10]
movsd qword [rax + 0x10], xmm0
movzx ecx, byte [0x140062b18]
mov byte [rax + 0x18], cl
mov byte [rax + 0x19], dil
lea rcx, [rsp + 0x68]
call fcn.140030434
nop
mov rdx, qword [rsp + 0x80]
cmp rdx, 0xf
jbe 0x140004a10
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a0b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004a0b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140054d5c
xorps xmm0, xmm0
movups xmmword [rsp + 0x138], xmm0
movdqa xmm1, xmmword [0x140063090]
movdqu xmmword [rsp + 0x148], xmm1
mov byte [rsp + 0x138], 0
mov ecx, 0xfffffff5
mov r14d, recv
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str._____WELCOME_TO_FAST_SPOOFER______n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
mov esi, 0xa
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.____Status_:_Undetected_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.___Initialized____________________________________________________________________________________________________________Connected___n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
mov ebx, 9
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.____Supported_Processors_:_Intels__AMD_____________________________________________________________________________________Supported_:Windows_10__11___n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
mov ecx, 0xfffffff5
mov r15d, 6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.____Secure_Boot_mode_is_disabled__Recomanded__n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Please_enter_your_license_to_login..._n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.Enter_your_license:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, [rsp + 0x138]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140005cd0
nop
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0xa8]
xor r8d, r8d
xor edx, edx
lea rcx, [0x140062190]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x1400052b3
mov edx, dword [rsp + 0xa8]
lea rcx, [rsp + 0x68]
call fcn.1400056f0
nop
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x138]
call fcn.1400251c8
nop
mov rdx, qword [rsp + 0x80]
cmp rdx, 0xf
jbe 0x140004c1d
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004c18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004c18
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140054d5c
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Authenticated_successfully
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, [0x140005c90]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0x150]
cmp rdx, 0xf
jbe 0x140004cac
inc rdx
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004ca7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004ca7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140054d5c
lea rdx, str._Spoofer__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
mov edi, 2
lea rbx, [0x140000000]
mov esi, 4
lea rcx, [0x140062d84]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.____Status_:_Undetected_n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.__1__Permanently_Spoof__n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.__2__Temporary_Spoof__n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.__3__Cleaner__reset_your_HWID___n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.__4__reset__reset_your_PC__Confiramtion____n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.__5__reset_2__reset_all_PC___n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.__6__Show_My_New_Serials__After_Spoofing___n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.__7__Show_My_Old_Serials__Updating___n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.__8__Information__n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.__9__Exit__n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, [0x140062ed8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, [rsp + 0x130]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rsp + 0x130]
dec eax
cmp eax, 8
ja case.default.0x140004e10
cdqe
mov ecx, dword [rbx + rax*4 + 0x52dc]
add rcx, rbx
jmp rcx
call fcn.140001880
lea rcx, [0x140062d84]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Spoofed_Successfully__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rcx, [0x140062d84]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140004cd0
call fcn.140002c20
lea rcx, [0x140062d84]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140004cd0
call fcn.140003490
lea rcx, [0x140062d84]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140004cd0
lea rdx, str.Warning:_This_will_reset_your_computer_to_its_factory_settings._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.Are_you_sure_you_want_to_proceed__This_action_cannot_be_undone.__y_n_:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, [rsp + 0x60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140005bd0
movzx eax, byte [rsp + 0x60]
sub al, 0x59
test al, 0xdf
je 0x140004ede
lea rdx, str.Operation_canceled._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rcx, [0x140062d84]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140004cd0
lea rcx, str.systemreset__factoryreset
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140062d84]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140004cd0
call fcn.140004520
lea rcx, [0x140062d84]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.____Supression___n_n
jmp 0x140005282
lea rcx, [0x140062d84]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.New_Serials:_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.SS_Serial:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, [0x140076248]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rdx, qword [0x140076248]
mov r8, qword [0x140076258]
mov rcx, rax
call fcn.1400065c0
lea rdx, [0x14006279c]
mov rcx, rax
call fcn.140005890
lea rdx, str.BS_Serial:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, [0x140076208]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rdx, qword [0x140076208]
mov r8, qword [0x140076218]
mov rcx, rax
call fcn.1400065c0
lea rdx, [0x14006279c]
mov rcx, rax
call fcn.140005890
lea rdx, str.CS_Serial:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, [0x140076228]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rdx, qword [0x140076228]
mov r8, qword [0x140076238]
mov rcx, rax
call fcn.1400065c0
lea rdx, [0x14006279c]
mov rcx, rax
jmp 0x140005289
lea rcx, [0x140062d84]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Original_Serials:_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.SS_Serial:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, [0x14007d5d8]
cmp qword [0x14007d5f0], 0xf
cmova rdx, qword [0x14007d5d8]
mov r8, qword [0x14007d5e8]
mov rcx, rax
call fcn.1400065c0
lea rdx, [0x14006279c]
mov rcx, rax
call fcn.140005890
lea rdx, str.BS_Serial:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, [0x14007d5b8]
cmp qword [0x14007d5d0], 0xf
cmova rdx, qword [0x14007d5b8]
mov r8, qword [0x14007d5c8]
mov rcx, rax
call fcn.1400065c0
lea rdx, [0x14006279c]
mov rcx, rax
call fcn.140005890
lea rdx, str.CS_Serial:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, [0x14007d5f8]
cmp qword [0x14007d610], 0xf
cmova rdx, qword [0x14007d5f8]
mov r8, qword [0x14007d608]
jmp 0x140004ffc
lea rcx, [0x140062d84]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.____Information_of_Fast_Spoofer___n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, [0x140062f34]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.The_Fast_Spoofer_Spoof_of_your_entire_PC__n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Fortnite__On___n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.Valorant__On___n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.Fivem__On___n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str.Call_Of_Duty__On___n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x140062f34]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._1__Allows_you_to_spoof_yourself_permanently_n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str._2__Allows_you_to_spoof_yourself_temporarily__n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, str._3__Gives_you_back_your_old_serials__n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x140062f34]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, [0x140062f34]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rdx, [0x140062f34]
jmp 0x140005282
lea rdx, str.Invalid_choice
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005890
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140004cd0
lea rdx, str.Exiting...__n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
jmp 0x140004924
lea rdx, str.failed_to_get_hwid
lea rcx, [rsp + 0x90]
call fcn.140001580
lea rdx, [0x140072e08]
lea rcx, [rsp + 0x90]
call sub.VCRUNTIME140.dll__CxxThrowException
int3