Function at 0x140002dd0
Capabilities:
Create process on windows
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x250]
sub rsp, 0x350
mov rax, qword [0x140041090]
xor rax, rsp
mov qword [rbp + 0x240], rax
xor r12d, r12d
mov r15d, r12d
mov dword [rsp + 0x78], r12d
lea rcx, str.chcp_1252__nul
call fcn.140017480
lea rcx, [0x140039e68]
call fcn.140017480
lea rcx, str.color_0F
call fcn.140017480
lea rcx, str.Iniciando_Automa
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov r9d, r12d
mov qword [rbp - 0x30], r12
mov edx, 0xf
mov qword [rbp - 0x28], rdx
mov byte [rbp - 0x40], r9b
lea edi, [rdx - 7]
lea r13d, [r12 + 4]
test r9, r9
jne 0x140002f76
lea rcx, [0x140039e68]
call fcn.140017480
lea rcx, str.color_0F
call fcn.140017480
lea rdx, str.Digite_o_token_da_sua_automa
call fcn.140007150
mov rcx, rax
call fcn.140007430
lea rcx, [0x140042640]
call fcn.140007430
lea rdx, str.Digite_o_token:
call fcn.140007150
call fcn.1400170c8
mov ecx, eax
cmp al, 0xd
je 0x140002f59
cmp cl, 8
jne 0x140002eff
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x140002f49
dec rcx
mov qword [rbp - 0x30], rcx
lea rax, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rax, qword [rbp - 0x40]
mov byte [rax + rcx], 0
mov ecx, edi
call fcn.140018d74
mov ecx, 0x20
call fcn.140018d74
mov ecx, edi
jmp 0x140002f44
mov rdx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x28]
cmp rdx, r8
jae 0x140002f2b
lea rax, [rdx + 1]
mov qword [rbp - 0x30], rax
lea rax, [rbp - 0x40]
cmp r8, 0x10
cmovae rax, qword [rbp - 0x40]
mov byte [rax + rdx], cl
mov byte [rax + rdx + 1], 0
jmp 0x140002f3f
movzx r9d, cl
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x40]
call fcn.140007600
mov ecx, 0x2a
call fcn.140018d74
call fcn.1400170c8
movzx ecx, al
cmp al, 0xd
jne 0x140002ec3
lea rcx, [0x140042640]
call fcn.140007430
mov r9, qword [rbp - 0x30]
mov rdx, qword [rbp - 0x28]
test r9, r9
je 0x140002e70
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r12
mov esi, 0xf
mov qword [rbp - 8], rsi
mov byte [rbp - 0x20], 0
or r15d, 1
mov dword [rsp + 0x78], r15d
lea rbx, [rbp - 0x40]
cmp rdx, 0x10
setae cl
mov r8, qword [rbp - 0x40]
cmovae rbx, r8
lea r14, [rbp - 0x40]
test cl, cl
cmovne r14, r8
add r14, r9
cmp rbx, r14
je 0x140003024
nop dword [rax]
movsx edi, byte [rbx]
mov ecx, edi
call fcn.1400175d0
test eax, eax
je 0x14000300f
mov rcx, qword [rbp - 0x10]
cmp rcx, rsi
jae 0x140002ff7
lea rax, [rcx + 1]
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x20]
cmp rsi, 0x10
cmovae rax, qword [rbp - 0x20]
mov byte [rax + rcx], dil
mov byte [rax + rcx + 1], 0
jmp 0x14000300b
movzx r9d, dil
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x20]
call fcn.140007600
mov rsi, qword [rbp - 8]
inc rbx
cmp rbx, r14
jne 0x140002fc0
mov rdx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x40]
mov edi, 8
cmp rdx, 0x10
jb 0x14000305a
inc rdx
mov rax, r8
cmp rdx, 0x1000
jb 0x140003052
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400043ad
mov rcx, r8
call fcn.14000ff90
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rbp - 0x10]
movups xmmword [rbp - 0x30], xmm1
and r15d, 0xfffffffe
lea rcx, [rbp - 0x40]
call fcn.140002150
test al, al
jne 0x1400030f8
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.ERRO:_Token_inv
call fcn.140007150
mov rcx, rax
call fcn.140007430
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.pause
call fcn.140017480
mov qword [rbp - 0x30], r12
lea rax, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rax, qword [rbp - 0x40]
mov byte [rax], 0
lea rcx, [0x140039e68]
call fcn.140017480
mov rdx, qword [rbp - 0x28]
mov r9, qword [rbp - 0x30]
jmp 0x140002e67
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rax
lea rcx, [rbp + 0x80]
call fcn.1400044d0
nop
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x40]
cmovae rcx, qword [rbp - 0x40]
add rdx, qword [rbp - 0x30]
mov dword [rsp + 0x20], 0x10
lea r9, [rbp + 0x80]
call fcn.140008280
test al, al
jne 0x140003173
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.ERRO:_Token_inv
jmp 0x140003199
cmp qword [rbp - 0x30], 0
jne 0x1400031d3
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.ERRO:_O_token_est
call fcn.140007150
mov rcx, rax
call fcn.140007430
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movzx edx, di
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.pause
call fcn.140017480
mov ebx, 1
jmp 0x1400042d6
lea r8, str.TEMP
lea rdx, [rbp + 0xa8]
lea rcx, [rbp - 0x68]
call fcn.140019088
mov rax, qword [rbp - 0x68]
lea rdi, [0x140039d00]
mov rdx, rdi
test rax, rax
cmovne rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], r12
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140003220
lea rcx, [rbp + 0x40]
call fcn.140007770
nop
mov rcx, qword [rbp - 0x68]
call fcn.140018088
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x20]
call fcn.140002360
nop
lea r8, str.APPDATA
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x60]
call fcn.140019088
mov rax, qword [rbp - 0x60]
test rax, rax
cmovne rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
nop dword [rax]
inc rbx
cmp byte [rdi + rbx], 0
jne 0x140003280
mov r8, rbx
mov rdx, rdi
lea rcx, [rbp + 0x20]
call fcn.140007770
nop
mov rcx, qword [rbp - 0x60]
call fcn.140018088
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x50]
call fcn.140002360
mov rbx, rax
lea rax, [rbp + 0x20]
cmp rax, rbx
je 0x140003326
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x1400032f7
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400032f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400043b3
call fcn.14000ff90
movdqa xmm0, xmmword [0x14003a600]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140003363
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000335e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400043b3
call fcn.14000ff90
mov r8d, 0x1d
lea rdx, str.MicrosoftInstallerScripts_
lea rcx, [rbp + 0x20]
call fcn.140006930
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r12
lea rsi, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
cmovae rsi, qword [rbp + 0x40]
mov rdi, qword [rbp + 0x50]
movabs r14, 0x7fffffffffffffff
cmp rdi, r14
ja 0x1400043b9
movabs rax, 0x8000000000000000
mov ecx, 0x16
mov qword [rbp + 0x18], 0xf
cmp rdi, 0x10
jae 0x1400033da
mov qword [rbp + 0x10], rdi
movups xmm0, xmmword [rsi]
movups xmmword [rbp], xmm0
jmp 0x14000345d
mov rbx, rdi
or rbx, 0xf
cmp rbx, r14
jbe 0x14000340f
mov rbx, r14
add rax, 0x27
mov rcx, rax
call fcn.14000ff98
mov rcx, rax
test rax, rax
je 0x14000446d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140003441
cmp rbx, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140003432
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004377
jmp 0x1400033ed
test rcx, rcx
je 0x14000343e
call fcn.14000ff98
jmp 0x140003441
mov rax, r12
mov qword [rbp], rax
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0x18], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.140011de0
nop
mov r8d, 0xa
lea rdx, str._token.txt
lea rcx, [rbp]
call fcn.140006930
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xc0]
call fcn.140012630
mov ebx, 2
mov r8d, ebx
lea rdx, [rbp]
lea rcx, [rbp + 0xc0]
call fcn.1400047a0
nop
cmp qword [rbp + 0x148], 0
je 0x140003515
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rdx, qword [rbp - 0x40]
mov r8, qword [rbp - 0x30]
lea rcx, [rbp + 0xc0]
call fcn.140008440
lea rcx, [rbp + 0xc8]
call fcn.1400067f0
test rax, rax
jne 0x140003515
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rbp + rcx + 0x108], 0
cmovne eax, ebx
or eax, dword [rbp + rcx + 0xd0]
and eax, 0x17
mov dword [rbp + rcx + 0xd0], eax
mov edx, dword [rbp + rcx + 0xd4]
and edx, eax
jne 0x1400043bf
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0x78], rax
mov r12, r14
mov r14, qword [rbp - 0x10]
sub r12, r14
cmp r12, 0xd
jb 0x140004413
lea r15, [rbp - 0x20]
mov r13, qword [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae r15, r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea rsi, [r14 + 0xd]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp rsi, rbx
jbe 0x1400035f4
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x1400035b5
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000ff98
test rax, rax
je 0x140004419
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400035ef
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400035de
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000437d
jmp 0x140003596
test rcx, rcx
je 0x1400035ed
call fcn.14000ff98
mov rdi, rax
jmp 0x1400035ef
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rbx
mov r8, r14
mov rdx, r15
mov rcx, rdi
call fcn.140011de0
movsd xmm0, qword [str.msvcp140.dll]
movsd qword [rdi + r14], xmm0
mov eax, dword [0x14003a030]
mov dword [rdi + r14 + 8], eax
movzx eax, byte [0x14003a034]
mov byte [rdi + r14 + 0xc], al
mov byte [rdi + rsi], 0
lea r8, [rsp + 0x50]
mov edx, 0x83
mov rcx, qword [rsp + 0x78]
call fcn.1400028a0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140003687
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003682
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004419
call fcn.14000ff90
cmp r12, 0x11
jb 0x14000441f
lea r15, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae r15, r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea rsi, [r14 + 0x11]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp rsi, rbx
jbe 0x14000374b
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x14000370c
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000ff98
test rax, rax
je 0x140004425
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140003746
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140003735
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004383
jmp 0x1400036ed
test rcx, rcx
je 0x140003744
call fcn.14000ff98
mov rdi, rax
jmp 0x140003746
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rbx
mov r8, r14
mov rdx, r15
mov rcx, rdi
call fcn.140011de0
movups xmm0, xmmword [str._vcruntime140.dll]
movups xmmword [r14 + rdi], xmm0
movzx eax, byte [0x14003a048]
mov byte [r14 + rdi + 0x10], al
mov byte [rdi + rsi], 0
lea r8, [rsp + 0x50]
mov edx, 0x84
mov rcx, qword [rsp + 0x78]
call fcn.1400028a0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1400037d1
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400037cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004425
call fcn.14000ff90
cmp r12, 0x13
jb 0x14000442b
lea r15, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae r15, r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea rsi, [r14 + 0x13]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp rsi, rbx
jbe 0x140003895
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140003856
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000ff98
test rax, rax
je 0x140004431
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140003890
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000387f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004389
jmp 0x140003837
test rcx, rcx
je 0x14000388e
call fcn.14000ff98
mov rdi, rax
jmp 0x140003890
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rbx
mov r8, r14
mov rdx, r15
mov rcx, rdi
call fcn.140011de0
movups xmm0, xmmword [str._vcruntime140_1.dll]
movups xmmword [rdi + r14], xmm0
movzx eax, word [0x14003a060]
mov word [rdi + r14 + 0x10], ax
movzx eax, byte [0x14003a062]
mov byte [rdi + r14 + 0x12], al
mov byte [rdi + rsi], 0
lea r8, [rsp + 0x50]
mov edx, 0x85
mov rcx, qword [rsp + 0x78]
call fcn.1400028a0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140003928
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003923
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004431
call fcn.14000ff90
lea r15, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae r15, r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea rsi, [r14 + 9]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp rsi, rbx
jbe 0x1400039e2
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x1400039a3
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000ff98
test rax, rax
je 0x140004437
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400039dd
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400039cc
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000438f
jmp 0x140003984
test rcx, rcx
je 0x1400039db
call fcn.14000ff98
mov rdi, rax
jmp 0x1400039dd
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rbx
mov r8, r14
mov rdx, r15
mov rcx, rdi
call fcn.140011de0
movsd xmm0, qword [str.LGPO.exe]
movsd qword [rdi + r14], xmm0
movzx eax, byte [0x14003a070]
mov byte [rdi + r14 + 8], al
mov byte [rdi + rsi], 0
lea r8, [rsp + 0x50]
mov edx, 0x7e
mov rcx, qword [rsp + 0x78]
call fcn.1400028a0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140003a6a
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004437
call fcn.14000ff90
cmp r12, 0x14
jb 0x14000443d
lea r15, [rbp - 0x20]
mov r12, qword [rbp - 8]
cmp r12, 0x10
cmovae r15, r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea rsi, [r14 + 0x14]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp rsi, rbx
jbe 0x140003b31
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140003af2
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000ff98
test rax, rax
je 0x140004443
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140003b2c
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140003b1b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004395
jmp 0x140003ad3
test rcx, rcx
je 0x140003b2a
call fcn.14000ff98
mov rdi, rax
jmp 0x140003b2c
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rbx
mov r8, r14
mov rdx, r15
mov rcx, rdi
call fcn.140011de0
movups xmm0, xmmword [str.libcrypto_3_x64.dll]
movups xmmword [rdi + r14], xmm0
mov eax, dword [0x14003a088]
mov dword [rdi + r14 + 0x10], eax
mov byte [rdi + rsi], 0
lea r8, [rsp + 0x50]
mov edx, 4
mov rcx, qword [rsp + 0x78]
call fcn.1400028a0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140003bb6
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003bb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004443
call fcn.14000ff90
lea r15, [rbp - 0x20]
cmp r12, 0x10
cmovae r15, r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea rsi, [r14 + 0xa]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp rsi, rbx
jbe 0x140003c6f
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140003c30
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000ff98
test rax, rax
je 0x140004449
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140003c6a
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140003c59
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000439b
jmp 0x140003c11
test rcx, rcx
je 0x140003c68
call fcn.14000ff98
mov rdi, rax
jmp 0x140003c6a
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rbx
mov r8, r14
mov rdx, r15
mov rcx, rdi
call fcn.140011de0
movsd xmm0, qword [str.zlib1.dll]
movsd qword [rdi + r14], xmm0
movzx eax, word [0x14003a098]
mov word [rdi + r14 + 8], ax
mov byte [rdi + rsi], 0
lea r8, [rsp + 0x50]
mov edx, 0x7a
mov rcx, qword [rsp + 0x78]
call fcn.1400028a0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140003cf8
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003cf3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004449
call fcn.14000ff90
lea r15, [rbp - 0x20]
cmp r12, 0x10
cmovae r15, r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea rsi, [r14 + 0xe]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp rsi, rbx
jbe 0x140003db1
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140003d72
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000ff98
test rax, rax
je 0x14000444f
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140003dac
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140003d9b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400043a1
jmp 0x140003d53
test rcx, rcx
je 0x140003daa
call fcn.14000ff98
mov rdi, rax
jmp 0x140003dac
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rbx
mov r8, r14
mov rdx, r15
mov rcx, rdi
call fcn.140011de0
movsd xmm0, qword [str.Automacao.exe]
movsd qword [rdi + r14], xmm0
mov eax, dword [0x14003a0a8]
mov dword [rdi + r14 + 8], eax
movzx eax, word [0x14003a0ac]
mov word [rdi + r14 + 0xc], ax
mov byte [rdi + rsi], 0
lea r8, [rsp + 0x50]
mov edx, 0x7f
mov rcx, qword [rsp + 0x78]
call fcn.1400028a0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140003e45
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000444f
call fcn.14000ff90
lea r15, [rbp - 0x20]
cmp r12, 0x10
cmovae r15, r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
mov ebx, 0xf
lea rdi, [rsp + 0x78]
cmp rsi, rbx
jbe 0x140003ef9
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140003eba
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000ff98
test rax, rax
je 0x140004455
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140003ef4
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140003ee3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400043a7
jmp 0x140003e9b
test rcx, rcx
je 0x140003ef2
call fcn.14000ff98
mov rdi, rax
jmp 0x140003ef4
xor edi, edi
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], rbx
mov r8, r14
mov rdx, r15
mov rcx, rdi
call fcn.140011de0
movsd xmm0, qword [str.Automacao.exe]
movsd qword [rdi + r14], xmm0
mov eax, dword [0x14003a0a8]
mov dword [rdi + r14 + 8], eax
movzx eax, word [0x14003a0ac]
mov word [rdi + r14 + 0xc], ax
mov byte [rdi + rsi], 0
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x50]
call fcn.140002550
nop
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.1400026f0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140003f98
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f93
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000445b
call fcn.14000ff90
movdqa xmm0, xmmword [0x14003a5f0]
movdqu xmmword [rsp + 0x60], xmm0
xor ebx, ebx
mov word [rsp + 0x50], bx
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x140003fe9
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003fe4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004461
call fcn.14000ff90
movdqa xmm0, xmmword [0x14003a600]
movdqu xmmword [rbp - 0x78], xmm0
mov byte [rsp + 0x78], 0
mov dword [rbp + 0x1d0], 0x68
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d8], xmm0
movups xmmword [rbp + 0x1e8], xmm0
movups xmmword [rbp + 0x1f8], xmm0
movups xmmword [rbp + 0x208], xmm0
movups xmmword [rbp + 0x218], xmm0
movups xmmword [rbp + 0x228], xmm0
lea rcx, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
cmovae rcx, qword [rbp + 0x60]
lea rax, [rbp - 0x58]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x1d0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14000409e
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400040f1
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 4
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.ERRO:_Ao_criar_processo_filho.
call fcn.140007150
mov rcx, rax
call fcn.140007430
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 8
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.pause
call fcn.140017480
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 8
jb 0x140004131
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000412c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004467
call fcn.14000ff90
movdqa xmm0, xmmword [0x14003a5f0]
movdqu xmmword [rbp + 0x70], xmm0
mov word [rbp + 0x60], bx
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xc0], rax
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xbc], edx
lea rcx, [rbp + 0xc8]
call fcn.1400056a0
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xc0], rax
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0xbc], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x168], rax
lea rcx, [rbp + 0x168]
call fcn.14000f280
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140004205
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004200
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000446d
call fcn.14000ff90
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x140004250
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000424b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004473
call fcn.14000ff90
movdqa xmm0, xmmword [0x14003a600]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
cmp r12, 0x10
jb 0x14000429a
lea rdx, [r12 + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x140004291
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004479
mov rcx, r13
call fcn.14000ff90
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x1400042d6
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400042d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000447f
call fcn.14000ff90
nop
lea rcx, [rbp + 0x80]
call fcn.140006500
mov rcx, qword [rbp + 0xa0]
test rcx, rcx
je 0x140004308
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x140004308
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14000433f
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000433a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004371
call fcn.14000ff90
mov eax, ebx
mov rcx, qword [rbp + 0x240]
xor rcx, rsp
call fcn.14000ff70
lea r11, [rsp + 0x350]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140018cbc
nop
call fcn.140001250
nop
call fcn.140001250
int3
call fcn.140001250
int3
call fcn.140001250
int3
call fcn.140001250
int3
call fcn.140001250
int3
call fcn.140001250
int3
call fcn.140001250
int3
call fcn.140001250
nop
call fcn.140018cbc
nop
call fcn.140018cbc
int3
call fcn.1400012f0
nop
test dl, 4
je 0x1400043cd
lea rbx, str.ios_base::badbit_set
jmp 0x1400043e2
test dl, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x78]
call fcn.1400013c0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.140001d00
lea rdx, [0x14003fc60]
lea rcx, [rsp + 0x50]
call fcn.140012450
int3
call fcn.1400012f0
int3
call fcn.140018cbc
int3
call fcn.1400012f0
int3
call fcn.140018cbc
int3
call fcn.1400012f0
int3
call fcn.140018cbc
int3
call fcn.140018cbc
int3
call fcn.1400012f0
int3
call fcn.140018cbc
int3
call fcn.140018cbc
int3
call fcn.140018cbc
int3
call fcn.140018cbc
nop
call fcn.140018cbc
nop
call fcn.140018cbc
nop
call fcn.140018cbc
nop
call fcn.140018cbc
nop
call fcn.140018cbc
nop
call fcn.140018cbc
nop
call fcn.140018cbc
int3