Function at 0x140136107
Capabilities:
Create thread
Terminate process

Disassembly:
jmp 0x1402ed740
push rbp
push rsi
push rdi
mov eax, 0x1220
call fcn.140130248
sub rsp, rax
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x32c
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x1404efd40]
xor rax, rbp
mov qword [rbp + 0x11e0], rax
mov byte [rbp + 0x1164], 0
mov byte [rbp + 0x1144], 0
mov byte [rbp + 0x1184], 0
lea rcx, [0x14052972d]
call fcn.140135801
xor edx, edx
lea rcx, str.grcWindow
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x1404fae68], rax
lea rax, [rbp + 0x608]
mov qword [rbp + 0x648], rax
lea rax, [rbp + 0x664]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x688]
lea rcx, [rbp + 0x664]
call fcn.1402bb230
mov rcx, rax
call fcn.1401301fd
mov rdx, rax
mov rcx, qword [rbp + 0x648]
call fcn.140131f26
mov qword [rbp + 0x1198], rax
mov rcx, qword [rbp + 0x1198]
call fcn.1401311c0
movzx eax, al
test eax, eax
je 0x1402ed8a0
mov byte [rbp + 0x1144], 1
mov eax, dword [0x1404ad35c]
mov dword [rbp + 4], eax
mov byte [rbp + 0x1164], 1
mov eax, dword [0x1404ad358]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0x1184], 1
mov eax, dword [0x1404ad360]
mov dword [rbp + 0x44], eax
lea rax, [rbp + 0x6b4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x6d8]
lea rcx, [rbp + 0x6b4]
call fcn.1402bb3f0
mov rcx, rax
call fcn.140134d57
mov rdx, rax
lea rcx, [0x1404fb000]
call fcn.14012f3bb
mov qword [0x1404faec0], 0x10d8
mov qword [0x1404faeb8], 0x14b8
jmp 0x1402ee098
lea rax, [rbp + 0x708]
mov qword [rbp + 0x748], rax
lea rax, [rbp + 0x764]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x788]
lea rcx, [rbp + 0x764]
call fcn.1402bb460
mov rcx, rax
call fcn.140132e58
mov rdx, rax
mov rcx, qword [rbp + 0x748]
call fcn.140131f26
mov qword [rbp + 0x1198], rax
mov rcx, qword [rbp + 0x1198]
call fcn.1401311c0
movzx eax, al
test eax, eax
je 0x1402ed991
mov byte [rbp + 0x1144], 1
mov eax, dword [0x1404ad35c]
mov dword [rbp + 4], eax
mov byte [rbp + 0x1164], 1
mov eax, dword [0x1404ad358]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0x1184], 1
mov eax, dword [0x1404ad360]
mov dword [rbp + 0x44], eax
lea rax, [rbp + 0x7b4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x7d8]
lea rcx, [rbp + 0x7b4]
call fcn.1402bb4d0
mov rcx, rax
call fcn.14012f1c2
mov rdx, rax
lea rcx, [0x1404fb000]
call fcn.14012f3bb
mov qword [0x1404faec0], 0x10d8
mov qword [0x1404faeb8], 0x14b8
jmp 0x1402ee098
lea rax, [rbp + 0x808]
mov qword [rbp + 0x848], rax
lea rax, [rbp + 0x864]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x888]
lea rcx, [rbp + 0x864]
call fcn.1402bb540
mov rcx, rax
call fcn.140132dea
mov rdx, rax
mov rcx, qword [rbp + 0x848]
call fcn.140131f26
mov qword [rbp + 0x1198], rax
mov rcx, qword [rbp + 0x1198]
call fcn.1401311c0
movzx eax, al
test eax, eax
je 0x1402eda8d
mov byte [rbp + 0x1144], 1
mov eax, dword [0x1404ad350]
mov dword [rbp + 4], eax
mov byte [rbp + 0x1164], 1
mov eax, dword [0x1404ad34c]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0x1184], 1
mov eax, dword [0x1404ad354]
mov dword [rbp + 0x44], eax
lea rax, [rbp + 0x8c4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x8e8]
lea rcx, [rbp + 0x8c4]
call fcn.1402bb5b0
mov rcx, rax
call fcn.14012feab
mov rdx, rax
lea rcx, [0x1404fb000]
call fcn.14012f3bb
mov qword [0x1404faec0], 0x10d8
mov qword [0x1404faed8], 0x20d9868
mov qword [0x1404faeb8], 0x14e0
jmp 0x1402ee098
lea rax, [rbp + 0x928]
mov qword [rbp + 0x968], rax
lea rax, [rbp + 0x984]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x9a8]
lea rcx, [rbp + 0x984]
call fcn.1402bb620
mov rcx, rax
call fcn.140132dea
mov rdx, rax
mov rcx, qword [rbp + 0x968]
call fcn.140131f26
mov qword [rbp + 0x1198], rax
mov rcx, qword [rbp + 0x1198]
call fcn.1401311c0
movzx eax, al
test eax, eax
je 0x1402edb91
mov byte [rbp + 0x1144], 1
mov eax, dword [0x1404ad344]
mov dword [rbp + 4], eax
mov byte [rbp + 0x1164], 1
mov eax, dword [0x1404ad340]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0x1184], 1
mov eax, dword [0x1404ad348]
mov dword [rbp + 0x44], eax
lea rax, [rbp + 0x9e4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xa08]
lea rcx, [rbp + 0x9e4]
call fcn.1402bb690
mov rcx, rax
call fcn.14012feab
mov rdx, rax
lea rcx, [0x1404fb000]
call fcn.14012f3bb
mov qword [0x1404faec0], 0x10d8
mov rcx, qword [0x1404f8e28]
call fcn.140130ae0
mov qword [0x1404faed8], rax
mov qword [0x1404faeb8], 0x14e0
jmp 0x1402ee098
lea rax, [rbp + 0xa48]
mov qword [rbp + 0xa88], rax
lea rax, [rbp + 0xaa4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xac8]
lea rcx, [rbp + 0xaa4]
call fcn.1402bb700
mov rcx, rax
call fcn.140132dea
mov rdx, rax
mov rcx, qword [rbp + 0xa88]
call fcn.140131f26
mov qword [rbp + 0x1198], rax
mov rcx, qword [rbp + 0x1198]
call fcn.1401311c0
movzx eax, al
test eax, eax
je 0x1402edc8d
mov byte [rbp + 0x1144], 1
mov eax, dword [0x1404ad338]
mov dword [rbp + 4], eax
mov byte [rbp + 0x1164], 1
mov eax, dword [0x1404ad334]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0x1184], 1
mov eax, dword [0x1404ad33c]
mov dword [rbp + 0x44], eax
mov qword [0x1404faec0], 0x10d8
lea rax, [rbp + 0xb04]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xb28]
lea rcx, [rbp + 0xb04]
call fcn.1402ba470
mov rcx, rax
call fcn.14012feab
mov rdx, rax
lea rcx, [0x1404fb000]
call fcn.14012f3bb
mov qword [0x1404faeb8], 0x14e0
mov qword [0x1404faed8], 0x1fd8570
jmp 0x1402ee098
lea rax, [rbp + 0xb68]
mov qword [rbp + 0xba8], rax
lea rax, [rbp + 0xbc4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xbe8]
lea rcx, [rbp + 0xbc4]
call fcn.1402ba4e0
mov rcx, rax
call fcn.140132dea
mov rdx, rax
mov rcx, qword [rbp + 0xba8]
call fcn.140131f26
mov qword [rbp + 0x1198], rax
mov rcx, qword [rbp + 0x1198]
call fcn.1401311c0
movzx eax, al
test eax, eax
je 0x1402edd89
mov byte [rbp + 0x1144], 1
mov eax, dword [0x1404ad32c]
mov dword [rbp + 4], eax
mov byte [rbp + 0x1164], 1
mov eax, dword [0x1404ad328]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0x1184], 1
mov eax, dword [0x1404ad330]
mov dword [rbp + 0x44], eax
lea rax, [rbp + 0xc24]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xc48]
lea rcx, [rbp + 0xc24]
call fcn.1402ba550
mov rcx, rax
call fcn.14012feab
mov rdx, rax
lea rcx, [0x1404fb000]
call fcn.14012f3bb
mov qword [0x1404faec0], 0x10d8
mov qword [0x1404faed8], 0x1fd7b48
mov qword [0x1404faeb8], 0x1530
jmp 0x1402ee098
lea rax, [rbp + 0xc88]
mov qword [rbp + 0xcc8], rax
lea rax, [rbp + 0xce4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xd08]
lea rcx, [rbp + 0xce4]
call fcn.1402ba5c0
mov rcx, rax
call fcn.140132dea
mov rdx, rax
mov rcx, qword [rbp + 0xcc8]
call fcn.140131f26
mov qword [rbp + 0x1198], rax
mov rcx, qword [rbp + 0x1198]
call fcn.1401311c0
movzx eax, al
test eax, eax
je 0x1402ede96
mov byte [rbp + 0x1144], 1
mov eax, dword [0x1404ad320]
mov dword [rbp + 4], eax
mov byte [rbp + 0x1164], 1
mov eax, dword [0x1404ad31c]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0x1184], 1
mov eax, dword [0x1404ad324]
mov dword [rbp + 0x44], eax
mov qword [0x1404faec0], 0x10d8
lea rax, [rbp + 0xd44]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xd68]
lea rcx, [rbp + 0xd44]
call fcn.1402ba630
mov rcx, rax
call fcn.14012feab
mov rdx, rax
lea rcx, [0x1404fb000]
call fcn.14012f3bb
mov rax, qword [0x1404f8e28]
add rax, 0x20d9868
mov rcx, rax
call fcn.140130ae0
mov qword [0x1404faed8], rax
mov qword [0x1404faeb8], 0x1530
jmp 0x1402ee098
lea rax, [rbp + 0xda8]
mov qword [rbp + 0xde8], rax
lea rax, [rbp + 0xe04]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xe28]
lea rcx, [rbp + 0xe04]
call fcn.1402ba6a0
mov rcx, rax
call fcn.140132dea
mov rdx, rax
mov rcx, qword [rbp + 0xde8]
call fcn.140131f26
mov qword [rbp + 0x1198], rax
mov rcx, qword [rbp + 0x1198]
call fcn.1401311c0
movzx eax, al
test eax, eax
je 0x1402edf92
mov byte [rbp + 0x1144], 1
mov eax, dword [0x1404acd58]
mov dword [rbp + 4], eax
mov byte [rbp + 0x1164], 1
mov eax, dword [0x14048776c]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0x1184], 1
mov eax, dword [0x1404acd5c]
mov dword [rbp + 0x44], eax
mov qword [0x1404faec0], 0x10d8
lea rax, [rbp + 0xe64]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xe88]
lea rcx, [rbp + 0xe64]
call fcn.1402ba710
mov rcx, rax
call fcn.14012feab
mov rdx, rax
lea rcx, [0x1404fb000]
call fcn.14012f3bb
mov qword [0x1404faed8], 0x20d9868
mov qword [0x1404faeb8], 0x1530
jmp 0x1402ee098
lea rax, [rbp + 0xec8]
mov qword [rbp + 0xf08], rax
lea rax, [rbp + 0xf24]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xf48]
lea rcx, [rbp + 0xf24]
call fcn.1402ba780
mov rcx, rax
call fcn.140132dea
mov rdx, rax
mov rcx, qword [rbp + 0xf08]
call fcn.140131f26
mov qword [rbp + 0x1198], rax
mov rcx, qword [rbp + 0x1198]
call fcn.1401311c0
movzx eax, al
test eax, eax
je 0x1402ee098
mov byte [0x1404faefd], 1
mov qword [0x1404faec0], 0x10b8
mov rcx, qword [0x1404f8e28]
call fcn.140130ae0
mov qword [0x1404faed8], rax
mov byte [rbp + 0x1144], 1
mov eax, dword [0x140487764]
mov dword [rbp + 4], eax
mov byte [rbp + 0x1164], 1
mov eax, dword [0x140462bdc]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0x1184], 1
mov eax, dword [0x140487768]
mov dword [rbp + 0x44], eax
lea rax, [rbp + 0xf84]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xfa8]
lea rcx, [rbp + 0xf84]
call fcn.1402ba7f0
mov rcx, rax
call fcn.14012feab
mov rdx, rax
lea rcx, [0x1404fb000]
call fcn.14012f3bb
mov qword [0x1404faeb8], 0x150c
cmp qword [0x1404fae68], 0
jne 0x1402ee0dc
lea rax, [0x140400d50]
mov qword [rbp + 0x68], rax
lea rax, str.Erro_ao_injetar_o_GoldenShower
mov qword [rbp + 0x88], rax
mov r9d, 0x10
mov r8, qword [rbp + 0x88]
mov rdx, qword [rbp + 0x68]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rdx, [rbp + 0xa4]
mov rcx, qword [0x1404fae68]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rbp + 0xa4]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1404f8e20], rax
lea rcx, [rbp + 0x1054]
call fcn.14013280e
mov qword [rbp + 0x1198], rax
lea rax, [rbp + 0x1078]
mov qword [rbp + 0x10a8], rax
mov rdx, qword [rbp + 0x10a8]
lea rcx, [0x1404fb000]
call fcn.14012fbb8
mov qword [rbp + 0x11a0], rax
mov rax, qword [rbp + 0x11a0]
mov qword [rbp + 0x11a8], rax
lea rax, [rbp + 0x10c8]
mov qword [rbp + 0x10f8], rax
mov rdx, qword [rbp + 0x10f8]
lea rcx, [0x1404fb000]
call fcn.140135a68
mov qword [rbp + 0x11b0], rax
mov rax, qword [rbp + 0x11b0]
mov qword [rbp + 0x11b8], rax
mov r9, qword [rbp + 0x1198]
mov r8, qword [rbp + 0x11a8]
mov rdx, qword [rbp + 0x11b8]
lea rcx, [rbp + 0x1018]
call fcn.1401344a6
mov qword [rbp + 0x11c0], rax
mov rax, qword [rbp + 0x11c0]
mov qword [rbp + 0x11c8], rax
mov rcx, qword [rbp + 0x11c8]
call fcn.140131328
mov qword [rbp + 0x11d0], rax
mov eax, dword [rbp + 0xa4]
mov qword [rbp + 0x11d8], rax
mov r8, qword [rbp + 0x11d0]
mov rdx, qword [rbp + 0x11d8]
lea rcx, [rbp + 0x1118]
call fcn.140130662
lea rcx, [rbp + 0xfe8]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x18
rep movsb byte [rdi], byte [rsi]
lea rax, [0x1404f8e28]
lea rcx, [rbp + 0xfe8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x18
rep movsb byte [rdi], byte [rsi]
lea rcx, [rbp + 0x1018]
call fcn.140134848
cmp byte [rbp + 0x1164], 0
jne 0x1402ee24a
lea rcx, str.off_replay
call fcn.140130095
mov eax, dword [rbp + 0x24]
mov rcx, qword [0x1404f8e28]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.140130ae0
mov qword [0x1404f8e40], rax
cmp byte [rbp + 0x1144], 0
jne 0x1402ee27e
lea rcx, str.off_world
call fcn.140130095
mov eax, dword [rbp + 4]
mov rcx, qword [0x1404f8e28]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.140130ae0
mov qword [0x1404f8e48], rax
cmp byte [rbp + 0x1184], 0
jne 0x1402ee2b2
lea rcx, str.off_view
call fcn.140130095
mov eax, dword [rbp + 0x44]
mov rcx, qword [0x1404f8e28]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.140130ae0
mov qword [0x1404f8e50], rax
mov rax, qword [0x1404f8e48]
add rax, 8
mov rcx, rax
call fcn.140130ae0
mov qword [0x1404f8e58], rax
call fcn.140134217
cmp qword [0x1404faee8], 0
jne 0x1402ee301
mov eax, 1
jmp 0x1402ee34c
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x14012ffa0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.140133aa1
mov rcx, qword [0x1404faee8]
call fcn.14012f3b6
test eax, eax
jne 0x1402ee347
call fcn.1401316b1
call fcn.14013467c
jmp 0x1402ee32b
call fcn.14012fb0e
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x1403f8590]
call fcn.1401345d2
mov rax, rdi
mov rcx, qword [rbp + 0x11e0]
xor rcx, rbp
call fcn.140132205
lea rsp, [rbp + 0x11f0]
pop rdi
pop rsi
pop rbp
ret