Function at 0x1400295ac
Capabilities:
Create process on windows
Execute command
Set console window title
Terminate process

Disassembly:
push rdi
sub rsp, 0x410
mov rax, qword [0x14013c8c0]
xor rax, rsp
mov qword [rsp + 0x400], rax
lea rcx, [0x140098fcc]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rdx, [0x140021b34]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x30]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x44]
lea rcx, [rsp + 0x30]
call fcn.140019b64
mov rcx, rax
call fcn.1400189b8
mov qword [rsp + 0x60], rax
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
call fcn.140003050
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x70], rax
lea rdx, str._n_n_n__________________________W_e_l_c_o_m_e___t_o___A_A___S_e_r_v_i_c_e_s___T_E_M_P___S_P_O_O_F_E_R___n_n_n_n_n_n_n_n
lea rcx, [rsp + 0xf0]
call fcn.140015010
mov dword [rsp + 0x110], Ordinal_26
lea rdx, [rsp + 0xf0]
mov rcx, qword [rsp + 0x70]
call fcn.1400181d0
nop
lea rcx, [rsp + 0xf0]
call fcn.140017f54
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140021b70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], rax
lea rax, [rsp + 0x31]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x380]
lea rcx, [rsp + 0x31]
call fcn.140019e4c
mov rcx, rax
call fcn.140018bd8
mov qword [rsp + 0x78], rax
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
call fcn.140003050
lea rdx, [0x140021af8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0x32]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x45]
lea rcx, [rsp + 0x32]
call fcn.140019f48
mov rcx, rax
call fcn.1400189b8
mov qword [rsp + 0x88], rax
mov rdx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x90]
call fcn.140003050
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x98], rax
lea rdx, [0x140099470]
lea rcx, [rsp + 0x118]
call fcn.140015010
mov dword [rsp + 0x138], 1
lea rdx, [rsp + 0x118]
mov rcx, qword [rsp + 0x98]
call fcn.1400181d0
nop
lea rcx, [rsp + 0x118]
call fcn.140017f54
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0xa0], rax
lea rdx, str.________1__Load_Cleaner__________________________2__Load_TEMP_SPOOFER______________________3__Check_Serials_n_n
lea rcx, [rsp + 0x140]
call fcn.140015010
mov dword [rsp + 0x160], 4
lea rdx, [rsp + 0x140]
mov rcx, qword [rsp + 0xa0]
call fcn.1400181d0
nop
lea rcx, [rsp + 0x140]
call fcn.140017f54
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0xa8], rax
lea rdx, str.____________________________________________________________________________________________________________________n_n
lea rcx, [rsp + 0x168]
call fcn.140015010
mov dword [rsp + 0x188], 1
lea rdx, [rsp + 0x168]
mov rcx, qword [rsp + 0xa8]
call fcn.1400181d0
nop
lea rcx, [rsp + 0x168]
call fcn.140017f54
lea rdx, [0x140021af8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0xb8], rax
lea rax, [rsp + 0x33]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x46]
lea rcx, [rsp + 0x33]
call fcn.140019fb4
mov rcx, rax
call fcn.1400189b8
mov qword [rsp + 0xb0], rax
mov rdx, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xb8]
call fcn.140003050
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0xc0], rax
lea rdx, str._______________________________________________________Type_Here:_n
lea rcx, [rsp + 0x190]
call fcn.140015010
mov dword [rsp + 0x1b0], 1
lea rdx, [rsp + 0x190]
mov rcx, qword [rsp + 0xc0]
call fcn.1400181d0
nop
lea rcx, [rsp + 0x190]
call fcn.140017f54
lea rdx, [0x140021b34]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0xd0], rax
lea rax, [rsp + 0x34]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x34]
call fcn.14001a02c
mov rcx, rax
call fcn.140018a78
mov qword [rsp + 0xc8], rax
mov rdx, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0xd0]
call fcn.140003050
lea rdx, [rsp + 0x48]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 1
je 0x14002998e
cmp dword [rsp + 0x40], 2
je 0x140029b5a
cmp dword [rsp + 0x40], 3
je 0x140029b7a
cmp dword [rsp + 0x40], 4
je 0x140029c27
jmp 0x140029ca1
lea rcx, [0x140099624]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140021b34]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0xe0], rax
lea rax, [rsp + 0x35]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x47]
lea rcx, [rsp + 0x35]
call fcn.14001a0dc
mov rcx, rax
call fcn.1400189b8
mov qword [rsp + 0xd8], rax
mov rdx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0xe0]
call fcn.140003050
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0xe8], rax
lea rdx, str.Loading_applecheats_cleaner..._________________________________________________________Press_NO_on_reset_adapters_
lea rcx, [rsp + 0x1b8]
call fcn.140015010
mov dword [rsp + 0x1d8], 6
lea rdx, [rsp + 0x1b8]
mov rcx, qword [rsp + 0xe8]
call fcn.1400181d0
nop
lea rcx, [rsp + 0x1b8]
call fcn.140017f54
call fcn.14001c9b4
lea rax, [rsp + 0x36]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x4c]
lea rcx, [rsp + 0x36]
call fcn.14001a148
mov rcx, rax
call fcn.1400189d8
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x37]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x37]
call fcn.14001a1c0
mov rcx, rax
call fcn.140018e20
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x38]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0x38]
call fcn.14001a238
mov rcx, rax
call fcn.140018e00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x39]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x39]
call fcn.1400195b0
mov rcx, rax
call fcn.140018de0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x3a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x3a]
call fcn.140019608
mov rcx, rax
call fcn.1400189d8
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400295ac
jmp 0x140029ca1
call fcn.14001ce6c
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.14001cd88
jmp 0x140029ca1
lea rcx, [0x1400996a4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x3b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x2b0]
lea rcx, [rsp + 0x3b]
call fcn.140019648
mov rcx, rax
call fcn.140018b58
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x3c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x3c]
call fcn.1400196a0
mov rcx, rax
call fcn.140018a38
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x3d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x54]
lea rcx, [rsp + 0x3d]
call fcn.1400196ec
mov rcx, rax
call fcn.1400189d8
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400295ac
jmp 0x140029ca1
lea rcx, [0x1400996a8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str.https:__discord.gg_wQFCzBtUB2
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rax, [rsp + 0x3e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x3e]
call fcn.140019738
mov rcx, rax
call fcn.1400189d8
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.1400295ac
nop
mov rcx, qword [rsp + 0x400]
xor rcx, rsp
call fcn.1400938b0
add rsp, 0x410
pop rdi
ret