Function at 0x1400df900
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x50
movaps xmm0, xmmword [0x140290940]
lea rdx, [rbp - 0x20]
xor ecx, ecx
movaps xmmword [rsp + 0x40], xmm6
movups xmmword [rbp - 0x20], xmm0
call fcn.140088f90
movss xmm0, dword [0x140254088]
call fcn.14008d780
call fcn.1400b9800
lea rcx, str.BY_USING_THIS_APPLICATION_YOURE_ACCEPTING
call fcn.1400bbb60
call fcn.14007f2e0
subss xmm0, dword [0x1402540cc]
call fcn.14008c9f0
lea rcx, [0x14028e62c]
call fcn.1400bbb60
mov ecx, 1
call fcn.1400887f0
movss xmm6, dword [0x140254110]
xorps xmm0, xmm0
movaps xmm1, xmm6
call fcn.14008bf30
movaps xmm0, xmmword [0x140290960]
lea rdx, [rbp - 0x20]
xor ecx, ecx
movups xmmword [rbp - 0x20], xmm0
call fcn.140088f90
xorps xmm0, xmm0
lea rdx, [rbp - 0x20]
mov ecx, reloc.WS2_32.dll_setsockopt
movups xmmword [rbp - 0x20], xmm0
call fcn.140088f90
xorps xmm0, xmm0
lea rdx, [rbp - 0x20]
mov ecx, reloc.WS2_32.dll_shutdown
movups xmmword [rbp - 0x20], xmm0
call fcn.140088f90
xorps xmm0, xmm0
lea rdx, [rbp - 0x20]
mov ecx, reloc.WS2_32.dll_socket
movups xmmword [rbp - 0x20], xmm0
call fcn.140088f90
lea rcx, [0x14028e630]
call fcn.1400bb6c0
xor ebx, ebx
test al, al
je 0x1400dfa09
mov dword [rsp + 0x28], 5
lea r8, str.https:__marne.io_tos
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 4
call fcn.1400887f0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14008bf30
movaps xmm0, xmmword [0x140290940]
lea rdx, [rbp - 0x20]
xor ecx, ecx
movups xmmword [rbp - 0x20], xmm0
call fcn.140088f90
lea rcx, [0x14028e650]
call fcn.1400bbb60
mov ecx, 1
call fcn.1400887f0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14008bf30
movaps xmm0, xmmword [0x140290960]
lea rdx, [rbp - 0x20]
xor ecx, ecx
movups xmmword [rbp - 0x20], xmm0
call fcn.140088f90
xorps xmm0, xmm0
lea rdx, [rbp - 0x20]
mov ecx, reloc.WS2_32.dll_shutdown
movups xmmword [rbp - 0x20], xmm0
call fcn.140088f90
xorps xmm0, xmm0
lea rdx, [rbp - 0x20]
mov ecx, reloc.WS2_32.dll_socket
movups xmmword [rbp - 0x20], xmm0
call fcn.140088f90
xorps xmm0, xmm0
lea rdx, [rbp - 0x20]
mov ecx, reloc.WS2_32.dll_setsockopt
movups xmmword [rbp - 0x20], xmm0
call fcn.140088f90
lea rcx, str.PRIVACY_POLICY.
call fcn.1400bb6c0
test al, al
je 0x1400dfadb
mov dword [rsp + 0x28], 5
lea r8, str.https:__marne.io_privacy
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14008bf30
lea rcx, str.THIRD_PARTY_LICENSES.
call fcn.1400bb6c0
test al, al
je 0x1400dfb17
mov dword [rsp + 0x28], 5
lea r8, str.https:__marne.io_licenses
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 4
call fcn.1400887f0
movaps xmm2, xmmword [0x140290940]
lea rdx, [rbp - 0x20]
xor ecx, ecx
movups xmmword [rbp - 0x20], xmm2
call fcn.140088f90
call fcn.14007f2e0
subss xmm0, dword [0x1402540cc]
call fcn.14008c9f0
lea rcx, str._PROJECT_MARNE_2024.
call fcn.1400bbb60
mov ecx, 1
call fcn.1400887f0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14008bf30
movaps xmm0, xmmword [0x140290910]
lea rdx, [rbp - 0x20]
xor ecx, ecx
movups xmmword [rbp - 0x20], xmm0
call fcn.140088f90
xorps xmm0, xmm0
lea rdx, [rbp - 0x20]
mov ecx, reloc.WS2_32.dll_shutdown
movups xmmword [rbp - 0x20], xmm0
call fcn.140088f90
xorps xmm0, xmm0
lea rdx, [rbp - 0x20]
mov ecx, reloc.WS2_32.dll_socket
movups xmmword [rbp - 0x20], xmm0
call fcn.140088f90
xorps xmm0, xmm0
lea rdx, [rbp - 0x20]
mov ecx, reloc.WS2_32.dll_setsockopt
movups xmmword [rbp - 0x20], xmm0
call fcn.140088f90
lea rcx, str.JOIN_OUR_DISCORD
call fcn.1400bb6c0
test al, al
je 0x1400dfbf0
mov dword [rsp + 0x28], 5
lea r8, str.https:__marne.io_discord
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 4
call fcn.1400887f0
movss xmm0, dword [0x140254098]
mov rbx, qword [rsp + 0x60]
movaps xmm6, xmmword [rsp + 0x40]
add rsp, 0x50
pop rbp
jmp fcn.14008d780