Function at 0x14001edde
Capabilities:
Execute command
Terminate process

Disassembly:
jmp 0x14004d440
push rbp
push rdi
sub rsp, 0x278
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x66
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140259fc0]
xor rax, rbp
mov qword [rbp + 0x248], rax
lea rcx, [0x14026512b]
call fcn.14001f603
nop
mov edx, 1
mov rcx, qword [0x14025a780]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
lea rcx, [0x14006684c]
call qword [sym.imp.ucrtbased.dll_system]
nop
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x228], rax
lea rdx, [0x1400673c8]
lea rcx, [rbp + 0xe8]
call fcn.14001e32f
mov qword [rbp + 0x230], rax
mov rax, qword [rbp + 0x230]
mov qword [rbp + 0x238], rax
mov rax, qword [rbp + 0x238]
mov qword [rbp + 0x240], rax
mov rdx, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x228]
call fcn.14001edc0
nop
lea rcx, [rbp + 0xe8]
call fcn.14001f48c
nop
lea rdx, str._1__Temp_Spoof
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001e217
mov qword [rbp + 0x228], rax
lea rdx, [0x14001e0c3]
mov rcx, qword [rbp + 0x228]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x228], rax
lea rdx, [0x1400673c8]
lea rcx, [rbp + 0x118]
call fcn.14001e32f
mov qword [rbp + 0x230], rax
mov rax, qword [rbp + 0x230]
mov qword [rbp + 0x238], rax
mov rax, qword [rbp + 0x238]
mov qword [rbp + 0x240], rax
mov rdx, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x228]
call fcn.14001edc0
nop
lea rcx, [rbp + 0x118]
call fcn.14001f48c
nop
lea rdx, str._2__Perm_Spoof
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001e217
mov qword [rbp + 0x228], rax
lea rdx, [0x14001e0c3]
mov rcx, qword [rbp + 0x228]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x228], rax
lea rdx, [0x1400673c8]
lea rcx, [rbp + 0x148]
call fcn.14001e32f
mov qword [rbp + 0x230], rax
mov rax, qword [rbp + 0x230]
mov qword [rbp + 0x238], rax
mov rax, qword [rbp + 0x238]
mov qword [rbp + 0x240], rax
mov rdx, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x228]
call fcn.14001edc0
nop
lea rcx, [rbp + 0x148]
call fcn.14001f48c
nop
lea rdx, str._3__Perm_Custom
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001e217
mov qword [rbp + 0x228], rax
lea rdx, [0x14001e0c3]
mov rcx, qword [rbp + 0x228]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x228], rax
lea rdx, [0x1400673c8]
lea rcx, [rbp + 0x178]
call fcn.14001e32f
mov qword [rbp + 0x230], rax
mov rax, qword [rbp + 0x230]
mov qword [rbp + 0x238], rax
mov rax, qword [rbp + 0x238]
mov qword [rbp + 0x240], rax
mov rdx, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x228]
call fcn.14001edc0
nop
lea rcx, [rbp + 0x178]
call fcn.14001f48c
nop
lea rdx, str._4__Exit_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001e217
mov qword [rbp + 0x228], rax
lea rdx, [0x14001e0c3]
mov rcx, qword [rbp + 0x228]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x228], rax
lea rdx, [0x1400673c8]
lea rcx, [rbp + 0x1a8]
call fcn.14001e32f
mov qword [rbp + 0x230], rax
mov rax, qword [rbp + 0x230]
mov qword [rbp + 0x238], rax
mov rax, qword [rbp + 0x238]
mov qword [rbp + 0x240], rax
mov rdx, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x228]
call fcn.14001edc0
nop
lea rcx, [rbp + 0x1a8]
call fcn.14001f48c
nop
lea rdx, [0x140067424]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001e217
nop
lea rdx, [rbp + 4]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
nop
cmp dword [rbp + 4], 1
jne 0x14004d786
call fcn.14001f6d5
nop
cmp dword [rbp + 4], 2
jne 0x14004d792
call fcn.14001e97e
nop
cmp dword [rbp + 4], 3
jne 0x14004d79e
call fcn.14001e2e4
nop
cmp dword [rbp + 4], 4
jne 0x14004d7f3
call fcn.14001e2cb
nop
lea rax, [rbp + 0x1d8]
mov qword [rbp + 0x218], rax
lea rdx, str.Thanks_For_Using_Foil
mov rcx, qword [rbp + 0x218]
call fcn.14001e9b5
mov qword [rbp + 0x228], rax
mov rcx, qword [rbp + 0x228]
call fcn.14001f11c
nop
mov ecx, 0x7d0
call fcn.14001ea4b
nop
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, [rbp - 0x20]
lea rdx, [0x140064fe0]
call fcn.14001f220
mov rcx, qword [rbp + 0x248]
xor rcx, rbp
call fcn.14001ea6e
lea rsp, [rbp + 0x258]
pop rdi
pop rbp
ret