Function at 0x140014770
Capabilities:
Create process on windows
Encode data using xor
Get hostname
Query or enumerate registry value
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x868]
sub rsp, 0x940
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
mov rax, qword [0x1401ad080]
xor rax, rsp
mov qword [rbp + 0x7b0], rax
xor r15d, r15d
mov dword [rbp + 0xc0], r15d
cmp dword [reloc.WS2_32.dll_accept], 1
jne 0x1400159a0
call fcn.1400142e0
xor edx, edx
lea r8d, [r15 + 3]
lea rcx, str.Virtual_Engine
call fcn.140027960
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
movss xmm6, dword [rax + 0x50]
movss xmm7, dword [rax + 0x54]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov r10, qword [rax + 0x2f8]
movaps xmm0, xmmword [0x14019c1b0]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.14001bed0
movaps xmm2, xmm7
addss xmm2, dword [0x14019a0ac]
movaps xmm1, xmm6
xorps xmm0, xmm0
addss xmm1, xmm0
movss dword [rbp + 0xb0], xmm1
movss dword [rbp + 0xb4], xmm2
movaps xmm0, xmm6
addss xmm0, dword [0x14019a098]
movss dword [rbp + 0xb8], xmm0
movss dword [rbp + 0xbc], xmm2
addss xmm7, dword [0x14019a04c]
movss dword [rbp + 0xc0], xmm6
movss dword [rbp + 0xc4], xmm7
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xb0]
lea r8, [rbp + 0xb8]
lea rdx, [rbp + 0xc0]
mov rcx, r10
call fcn.14004f0f0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x140199ff4]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x14019a018]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov edx, 0xffffffff
xor ecx, ecx
call fcn.14001c6f0
mov rcx, qword [0x1401e4f30]
call fcn.14002b560
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
movaps xmm1, xmmword [0x14019c240]
movups xmmword [rsp + 0x78], xmm1
mov dword [rbp + 0xb0], 0x3f800000
mov dword [rbp + 0xb4], 0x3f800000
mov qword [rbp + 0xb8], r15
mov dword [rbp + 0xc0], 0x43af0000
mov dword [rbp + 0xc4], 0x43480000
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xb0]
lea r8, [rbp + 0xb8]
lea rdx, [rbp + 0xc0]
mov rcx, qword [0x1401e4f68]
call fcn.14005eba0
call fcn.14002b620
lea ecx, [r15 + 1]
call fcn.14001c7c0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a028]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x14019a03c]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov edx, 0x78ffffff
xor ecx, ecx
call fcn.14001c6f0
mov rcx, qword [0x1401e4f18]
call fcn.14002b560
call fcn.14002b620
lea ecx, [r15 + 1]
call fcn.14001c7c0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a034]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x14019a028]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov edx, 0xffffffff
xor ecx, ecx
call fcn.14001c6f0
mov rcx, qword [0x1401e4f28]
call fcn.14002b560
lea ecx, [r15 + 1]
call fcn.14001c7c0
call fcn.14002b620
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a068]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
movss xmm7, dword [0x14019a020]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov edx, 0xfff0f0f0
xor ecx, ecx
call fcn.14001c6f0
mov rcx, qword [0x1401e4f20]
call fcn.14002b560
lea ecx, [r15 + 1]
call fcn.14001c7c0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a058]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov edx, 0xfff0f0f0
xor ecx, ecx
call fcn.14001c6f0
mov rcx, qword [0x1401e4f40]
call fcn.14002b560
lea rcx, [0x14018f788]
call fcn.14005c250
lea ecx, [r15 + 1]
call fcn.14001c7c0
call fcn.14002b620
call fcn.14002b620
mov rcx, qword [0x1401e4f20]
call fcn.14002b560
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a05c]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov edx, 0xfff0f0f0
xor ecx, ecx
call fcn.14001c6f0
mov rdi, qword [0x1401e4e60]
mov rax, qword [rdi + 0x1d18]
lea rcx, [rax + 0x210]
lea rbx, [rax + 0x204]
mov rdx, rbx
call fcn.140042a00
mov dword [rbx], 0x43820000
and dword [rdi + 0x1e58], 0xfffffffe
mov rdi, qword [0x1401e4e60]
mov rax, qword [rdi + 0x1d18]
lea rcx, [rax + 0x210]
lea rbx, [rax + 0x204]
mov rdx, rbx
call fcn.140042a00
mov dword [rbx], 0x43af0000
and dword [rdi + 0x1e58], 0xfffffffe
mov byte [rsp + 0x70], r15b
movsd xmm0, qword [0x14018fd88]
movsd qword [rsp + 0x78], xmm0
mov eax, dword [0x14018fd90]
mov dword [rbp - 0x80], eax
movzx eax, byte [0x14018fd94]
mov byte [rbp - 0x7c], al
mov r8d, r15d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140014e9e
movdqa xmm4, xmmword [0x14019c260]
movdqa xmm2, xmmword [0x14019a270]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14019afa0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14019c160]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.5555555555555555]
movd xmm0, dword [0x14018fd88]
xorps xmm2, xmm0
movd dword [rsp + 0x78], xmm2
movdqa xmm3, xmmword [0x14019a3b0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14019afa0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14019c160]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.5555555555555555]
movd xmm0, dword [rsp + 0x7c]
xorps xmm2, xmm0
movd dword [rsp + 0x7c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x78]
add r9, rax
nop dword [rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x35
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140014eb0
mov qword [rbp + 0xb0], r15
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9d, Ordinal_60
lea r14, [0x1401e50e0]
mov r8, r14
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x78]
call fcn.140065090
call fcn.14002c880
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a06c]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, [0x14018f6d8]
call fcn.14005c3f0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a07c]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov edx, 0xffffffff
xor ecx, ecx
call fcn.14001c6f0
mov dword [rbp + 0xb0], 0x43af0000
mov dword [rbp + 0xb4], 0x42280000
lea rdx, [rbp + 0xb0]
lea rcx, str.Login_Now
call fcn.14005cc10
test al, al
je 0x1400158b8
lea rdx, [0x1401e51b8]
lea rcx, [rbp + 0x180]
call fcn.1400127e0
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.140013a30
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [r14 + rbx], r15b
jne 0x140015090
lea rcx, [rbp - 0x68]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x50]
cmp rsi, 0xf
cmova rcx, rdi
mov r8, qword [rbp - 0x58]
cmp r8, rbx
jne 0x1400150c6
mov rdx, r14
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400150c6
mov bl, 1
jmp 0x1400150c8
xor bl, bl
cmp rsi, 0xf
jbe 0x140015102
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400150fa
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400150fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400c6094
test bl, bl
je 0x1400158a0
mov dword [reloc.WS2_32.dll_accept], 2
lea r8, str.Login_success
lea rdx, str.Auth
mov ecx, reloc.WS2_32.dll_ntohs
call fcn.140073cc0
lea r8, str.Authorized
lea rdx, str.Auth
mov ecx, reloc.WS2_32.dll_ntohs
call fcn.140073cc0
xor edx, edx
mov r8d, 0xe8
lea rcx, [rbp + 0x3b0]
call sub.VCRUNTIME140.dll_memset
lea rsi, [0x14018fe18]
mov qword [rbp + 0x3b0], rsi
lea rcx, [rbp + 0x438]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rbp + 0xc0], 0x41
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x3b8]
lea rcx, [rbp + 0x3b0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x3b0]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x3b0], rdi
mov rax, qword [rbp + 0x3b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x3ac], edx
lea rcx, [rbp + 0x3b8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea r14, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x3b8], r14
mov qword [rbp + 0x420], r15
mov dword [rbp + 0x428], 4
lea rdx, str.Version_:
lea rcx, [rbp + 0x3b0]
call fcn.140019ad0
mov rcx, rax
lea rdx, str.3.1X1
call fcn.140019ad0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x50], 0
mov dword [rbp + 0xc0], 0x61
movups xmmword [rbp + 0x390], xmm0
mov rcx, r15
mov edx, dword [rbp + 0x428]
mov eax, edx
and al, 0x22
cmp al, 2
je 0x140015287
mov rax, qword [rbp + 0x3f8]
mov rbx, qword [rax]
test rbx, rbx
je 0x140015287
mov rax, qword [rbp + 0x3d8]
mov r9, qword [rax]
cmp rbx, qword [rbp + 0x420]
cmovb rbx, qword [rbp + 0x420]
sub rbx, r9
mov rcx, r9
jmp 0x1400152c4
test dl, 4
jne 0x1400152f4
mov rax, qword [rbp + 0x3f0]
mov rdx, qword [rax]
mov rbx, r15
test rdx, rdx
je 0x1400152bd
mov rax, qword [rbp + 0x3d0]
mov r9, qword [rax]
mov rax, qword [rbp + 0x408]
movsxd rbx, dword [rax]
add rbx, rdx
sub rbx, r9
mov rcx, r9
jmp 0x1400152c4
mov r9, qword [rbp + 0x390]
test rcx, rcx
je 0x1400152f4
lea rcx, [rsp + 0x50]
cmp rbx, 0xf
ja 0x1400152eb
mov qword [rsp + 0x60], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rbx + 0x50], 0
jmp 0x1400152f4
mov rdx, rbx
call fcn.140019ca0
nop
lea r8, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova r8, qword [rsp + 0x50]
lea rdx, str.Auth
mov ecx, reloc.WS2_32.dll_ntohs
call fcn.140073cc0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140015357
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015352
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140015352
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6094
xor edx, edx
mov r8d, 0xe8
lea rcx, [rbp + 0x2a0]
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x2a0], rsi
lea rcx, [rbp + 0x328]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rbp + 0xc0], 0x59
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x2a0], rdi
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x29c], edx
lea rcx, [rbp + 0x2a8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
mov qword [rbp + 0x2a8], r14
mov qword [rbp + 0x310], r15
mov dword [rbp + 0x318], 4
lea rdx, str.Product_:
lea rcx, [rbp + 0x2a0]
call fcn.140019ad0
mov rcx, rax
lea rdx, str.Grand_Theft_Auto_V
call fcn.140019ad0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x50], 0
mov dword [rbp + 0xc0], 0x5d
movups xmmword [rbp + 0x390], xmm0
mov rcx, r15
mov edx, dword [rbp + 0x318]
mov eax, edx
and al, 0x22
cmp al, 2
je 0x140015485
mov rax, qword [rbp + 0x2e8]
mov rbx, qword [rax]
test rbx, rbx
je 0x140015485
mov rax, qword [rbp + 0x2c8]
mov r9, qword [rax]
cmp rbx, qword [rbp + 0x310]
cmovb rbx, qword [rbp + 0x310]
sub rbx, r9
mov rcx, r9
jmp 0x1400154c2
test dl, 4
jne 0x1400154f2
mov rax, qword [rbp + 0x2e0]
mov rdx, qword [rax]
mov rbx, r15
test rdx, rdx
je 0x1400154bb
mov rax, qword [rbp + 0x2c0]
mov r9, qword [rax]
mov rax, qword [rbp + 0x2f8]
movsxd rbx, dword [rax]
add rbx, rdx
sub rbx, r9
mov rcx, r9
jmp 0x1400154c2
mov r9, qword [rbp + 0x390]
test rcx, rcx
je 0x1400154f2
lea rcx, [rsp + 0x50]
cmp rbx, 0xf
ja 0x1400154e9
mov qword [rsp + 0x60], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rbx + 0x50], 0
jmp 0x1400154f2
mov rdx, rbx
call fcn.140019ca0
nop
lea r8, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova r8, qword [rsp + 0x50]
lea rdx, str.Auth
mov ecx, reloc.WS2_32.dll_ntohs
call fcn.140073cc0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140015555
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015550
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140015550
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6094
mov dword [rbp + 0xb8], reloc.WS2_32.dll_recv
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
cmp eax, 1
jne 0x1400157d2
xor edx, edx
mov r8d, 0xe8
lea rcx, [rbp + 0x1b0]
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x1b0], rsi
lea rcx, [rbp + 0x238]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rbp + 0xc0], 0xdb
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x1b8]
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x1b0], rdi
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x1ac], edx
lea rcx, [rbp + 0x1b8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
mov qword [rbp + 0x1b8], r14
mov qword [rbp + 0x220], r15
mov dword [rbp + 0x228], 4
lea rdx, str.Welcome
lea rcx, [rbp + 0x1b0]
call fcn.140019ad0
mov rcx, rax
lea rdx, [rbp + 0x90]
call fcn.140019ad0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x50], 0
mov dword [rbp + 0xc0], 0x2db
movups xmmword [rbp + 0x390], xmm0
mov rcx, r15
mov edx, dword [rbp + 0x228]
mov eax, edx
and al, 0x22
cmp al, 2
je 0x1400156aa
mov rax, qword [rbp + 0x1f8]
mov rbx, qword [rax]
test rbx, rbx
je 0x1400156aa
mov rax, qword [rbp + 0x1d8]
mov r9, qword [rax]
cmp rbx, qword [rbp + 0x220]
cmovb rbx, qword [rbp + 0x220]
sub rbx, r9
mov rcx, r9
jmp 0x1400156e7
test dl, 4
jne 0x140015717
mov rax, qword [rbp + 0x1f0]
mov rdx, qword [rax]
mov rbx, r15
test rdx, rdx
je 0x1400156e0
mov rax, qword [rbp + 0x1d0]
mov r9, qword [rax]
mov rax, qword [rbp + 0x208]
movsxd rbx, dword [rax]
add rbx, rdx
sub rbx, r9
mov rcx, r9
jmp 0x1400156e7
mov r9, qword [rbp + 0x390]
test rcx, rcx
je 0x140015717
lea rcx, [rsp + 0x50]
cmp rbx, 0xf
ja 0x14001570e
mov qword [rsp + 0x60], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rbx + 0x50], 0
jmp 0x140015717
mov rdx, rbx
call fcn.140019ca0
nop
lea r8, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova r8, qword [rsp + 0x50]
lea rdx, str.Auth
mov ecx, reloc.WS2_32.dll_ntohs
call fcn.140073cc0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14001577a
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015775
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140015775
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6094
mov byte [0x1401e50d0], 1
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x1b0], rdi
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x1ac], edx
lea rcx, [rbp + 0x1b8]
call fcn.140019780
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x238]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov dword [rbp + 0xb8], reloc.WS2_32.dll_recv
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
cmp eax, 1
jne 0x1400157fb
mov byte [0x1401e50b8], al
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x2a0], rdi
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x29c], edx
lea rcx, [rbp + 0x2a8]
call fcn.140019780
lea rcx, [rbp + 0x2b0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x328]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rax, qword [rbp + 0x3b0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x3b0], rdi
mov rax, qword [rbp + 0x3b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x3ac], edx
lea rcx, [rbp + 0x3b8]
call fcn.140019780
lea rcx, [rbp + 0x3c0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x438]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
jmp 0x1400158b8
lea r8, str.Login_Failed
lea rdx, str.Error
mov ecx, Ordinal_200
call fcn.140073cc0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x14019a008]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, dword [0x14019a08c]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
mov dword [rbp + 0xb0], 0x437a0000
mov dword [rbp + 0xb4], 0x420c0000
lea rdx, [rbp + 0xb0]
lea rcx, str.Dont_Have_a_Key__Click_here
call fcn.14005cf40
test al, al
je 0x140015982
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, str.https:__link_target.net_1014018_virtual_x_key1
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 1
call fcn.14001c7c0
call fcn.14002b620
mov ecx, 1
call fcn.14001c7c0
jmp 0x140018998
call fcn.140014450
xor edx, edx
lea r8d, [rdx + 3]
lea rcx, str.Virtual_Engine
call fcn.140027960
mov rax, qword [0x1401e4e60]
mov rcx, qword [rax + 0x1d18]
movss xmm7, dword [rcx + 0x50]
movss xmm9, dword [rcx + 0x54]
mov edx, 0xff050505
mov ecx, 3
call fcn.14001c6f0
mov edx, 0xff090909
mov ecx, 2
call fcn.14001c6f0
mov ecx, 2
call fcn.14001c7c0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov r10, qword [rax + 0x2f8]
movups xmm0, xmmword [0x1401ae648]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.14001bed0
movaps xmm8, xmm9
addss xmm8, dword [0x14019a0ac]
movaps xmm6, xmm7
movss xmm11, dword [0x14019a00c]
addss xmm6, xmm11
movss dword [rbp + 0xb0], xmm6
movss dword [rbp + 0xb4], xmm8
movss dword [rbp + 0xb8], xmm7
movss dword [rbp + 0xbc], xmm9
mov dword [rsp + 0x28], r15d
xorps xmm10, xmm10
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0xb0]
lea rdx, [rbp + 0xb8]
mov rcx, r10
call fcn.14004ec10
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov r10, qword [rax + 0x2f8]
movaps xmm0, xmmword [0x14019c180]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.14001bed0
movss dword [rbp + 0xb0], xmm6
movss dword [rbp + 0xb4], xmm8
movss dword [rbp + 0xb8], xmm6
movss dword [rbp + 0xbc], xmm9
movss xmm9, dword [0x140199f60]
movss dword [rsp + 0x20], xmm9
mov r9d, eax
lea r8, [rbp + 0xb0]
lea rdx, [rbp + 0xb8]
mov rcx, r10
call fcn.14004e9a0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x140199ff8]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
movss xmm6, dword [0x140199fe8]
addss xmm2, xmm6
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x1401e4f40]
call fcn.14002b560
movss xmm8, dword [0x140199ff4]
mov dword [rbp + 0xb0], 0x41f00000
mov dword [rbp + 0xb4], 0x41f00000
lea rdx, [rbp + 0xb0]
lea rcx, [0x14018f82c]
call fcn.14005cf40
test al, al
je 0x140015bea
mov dword [reloc.WS2_32.dll_accept], 1
call fcn.14002b620
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm7, dword [0x14019a014]
addss xmm0, xmm7
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm6
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x1401e4f40]
call fcn.14002b560
mov dword [rbp + 0xb0], 0x41f00000
mov dword [rbp + 0xb4], 0x41f00000
lea rdx, [rbp + 0xb0]
lea rcx, [0x14018f830]
call fcn.14005cf40
test al, al
je 0x140015cae
mov dword [reloc.WS2_32.dll_accept], 2
call fcn.14002b620
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm13, dword [0x14019a028]
addss xmm0, xmm13
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm6
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x1401e4f40]
call fcn.14002b560
mov dword [rbp + 0xb0], 0x41f00000
mov dword [rbp + 0xb4], 0x41f00000
lea rdx, [rbp + 0xb0]
lea rcx, [0x14018f834]
call fcn.14005cf40
test al, al
je 0x140015d74
mov dword [reloc.WS2_32.dll_accept], 3
call fcn.14002b620
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm12, dword [0x14019a040]
addss xmm0, xmm12
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm6
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x1401e4f40]
call fcn.14002b560
mov dword [rbp + 0xb0], 0x41f00000
mov dword [rbp + 0xb4], 0x41f00000
lea rdx, [rbp + 0xb0]
lea rcx, [0x14018f838]
call fcn.14005cf40
test al, al
je 0x140015e3a
mov dword [reloc.WS2_32.dll_accept], 4
call fcn.14002b620
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a0a0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm6
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x1401e4f40]
call fcn.14002b560
mov dword [rbp + 0xb0], 0x41f00000
mov dword [rbp + 0xb4], 0x41f00000
lea rdx, [rbp + 0xb0]
lea rcx, [0x14018f83c]
call fcn.14005cf40
test al, al
je 0x140015efe
mov rcx, 0xffffffffffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14002b620
mov ecx, dword [reloc.WS2_32.dll_accept]
sub ecx, 1
je 0x140017065
sub ecx, 1
je 0x140016a2b
sub ecx, 1
je 0x140016459
cmp ecx, 1
jne 0x140018319
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm6, dword [0x140199fe4]
addss xmm0, xmm6
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
movss xmm7, dword [0x14019a010]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
movaps xmm1, xmmword [0x14019c240]
movups xmmword [rbp + 0x90], xmm1
mov dword [rbp + 0xb0], 0x3f800000
mov dword [rbp + 0xb4], 0x3f800000
mov qword [rbp + 0xc0], r15
mov dword [rsp + 0x78], 0x437a0000
mov dword [rsp + 0x7c], 0x43020000
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x90]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xb0]
lea r8, [rbp + 0xc0]
lea rdx, [rsp + 0x78]
mov rcx, qword [0x1401e4f58]
call fcn.14005eba0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm8, dword [0x14019a038]
addss xmm0, xmm8
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x78], 0x437a0000
mov dword [rsp + 0x7c], 0x420c0000
lea rdx, [rsp + 0x78]
lea rcx, str.ELB_Video
call fcn.14005cc10
test al, al
je 0x1400160ef
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, str.https:__youtu.be_HTf8zenHSeQ_sipw0PCeyznWBcthiA
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm6
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x14019a070]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
movaps xmm1, xmmword [0x14019c240]
movups xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x78], 0x3f800000
mov dword [rsp + 0x7c], 0x3f800000
mov qword [rbp + 0xb0], r15
mov dword [rbp + 0xc0], 0x437a0000
mov dword [rbp + 0xc4], 0x43020000
lea rax, [rbp + 0x90]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x78]
lea r8, [rbp + 0xb0]
lea rdx, [rbp + 0xc0]
mov rcx, qword [0x1401e4f60]
call fcn.14005eba0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm8
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x14019a070]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x78], 0x437a0000
mov dword [rsp + 0x7c], 0x420c0000
lea rdx, [rsp + 0x78]
lea rcx, str.Taxroz_Video
call fcn.14005cc10
test al, al
je 0x1400162a0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, str.https:__youtu.be_m0lq0N10NiA_siEa9Nz5qdWFipxTGT
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a048]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
movaps xmm1, xmmword [0x14019c240]
movups xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x78], 0x3f800000
mov dword [rsp + 0x7c], 0x3f800000
mov qword [rbp + 0xb0], r15
mov dword [rbp + 0xc0], 0x437a0000
mov dword [rbp + 0xc4], 0x43020000
lea rax, [rbp + 0x90]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x78]
lea r8, [rbp + 0xb0]
lea rdx, [rbp + 0xc0]
mov rcx, qword [0x1401e4f70]
call fcn.14005eba0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a06c]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x78], 0x437a0000
mov dword [rsp + 0x7c], 0x420c0000
lea rdx, [rsp + 0x78]
lea rcx, str.Max_Mods_Video
call fcn.14005cc10
test al, al
je 0x140018319
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, str.https:__youtu.be_odaSo8Ao1gA_siIbVJREWs_RkFu_E5
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x140018319
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x140199fd0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x14019a064]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm0, xmm8
unpcklps xmm0, xmm8
movq rdx, xmm0
lea rcx, str.Changelog
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.3.1X1
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm13
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.__Kill_selected_palyer_fixed
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a038]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.__Fire_fixed
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a044]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.__Set_waypoint_remove
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a054]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.__Bring_remove
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a05c]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.__Airstrike_remove
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a064]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.__Add_Taze
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a068]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.__Add_Repaire_vehicle_player__vehicle
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a074]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.3.0X1
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a07c]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.Virtual_X_and_loader_V3_Release
call fcn.14005c250
jmp 0x140018319
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x140199fd0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x14019a064]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm0, xmm8
unpcklps xmm0, xmm8
movq rdx, xmm0
lea rcx, str.Settings
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
xor r8d, r8d
lea rdx, [0x1401ae860]
lea rcx, str.BackgroundColor
call fcn.140068ae0
movss xmm8, dword [0x14019a0f8]
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.14002c7d0
lea rcx, str.Background_Color
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm13
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
xor r8d, r8d
lea rdx, [0x1401ae648]
lea rcx, str.MainLineColor
call fcn.140068ae0
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.14002c7d0
lea rcx, str.Main_Line
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm12
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
xor r8d, r8d
lea rdx, [0x1401ae850]
lea rcx, str.ButtonColor
call fcn.140068ae0
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.14002c7d0
lea rcx, str.Button
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a058]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
xor r8d, r8d
lea rdx, [0x1401ae638]
lea rcx, str.CheckBoxColor
call fcn.140068ae0
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.14002c7d0
lea rcx, str.CheckBox
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a064]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov edx, 0xff000000
xor ecx, ecx
call fcn.14001c6f0
mov rax, qword [0x1401e4e60]
mov rdx, qword [rax + 0x1d18]
movss xmm0, dword [rdx + 0x2a8]
cmp qword [rdx + 0x1e8], r15
jne 0x140016e10
cmp qword [rax + 0x2178], r15
je 0x140016e18
movss xmm0, dword [rdx + 0x278]
subss xmm0, dword [rdx + 0x118]
movss dword [rsp + 0x78], xmm0
mov dword [rsp + 0x7c], 0x41f00000
lea rdx, [rsp + 0x78]
lea rcx, str.Discord
call fcn.14005cc10
test al, al
je 0x140016e74
lea r8, [0x1401e5178]
cmp qword [0x1401e5190], 0xf
cmova r8, qword [0x1401e5178]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 1
call fcn.14001c7c0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a06c]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rdx, [0x1401e4e31]
lea rcx, str.Particle
call fcn.1400145b0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a06c]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x14019a048]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str.Manuel_Injection
call fcn.1400145b0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a074]
movss xmm3, dword [rax + 0x50]
subss xmm3, dword [rax + 0x9c]
addss xmm3, xmm7
movss dword [rax + 0x118], xmm3
movss dword [rax + 0x11c], xmm0
movss xmm2, dword [rax + 0x134]
maxss xmm2, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm3
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm2
lea rcx, str.Your_PC_Name_:
call fcn.14005c250
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.14002c7d0
mov dword [rbp + 0xb8], reloc.WS2_32.dll_recv
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0x390]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x140018319
lea rcx, [rbp + 0x390]
call fcn.14005c250
jmp 0x140018319
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x140199fd0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x14019a074]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
movaps xmm1, xmmword [0x14019c240]
movups xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x78], 0x3f800000
mov dword [rsp + 0x7c], 0x3f800000
mov qword [rbp + 0xb0], r15
mov dword [rbp + 0xc0], 0x435c0000
mov dword [rbp + 0xc4], 0x43fa0000
lea rax, [rbp + 0x90]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x78]
lea r8, [rbp + 0xb0]
lea rdx, [rbp + 0xc0]
mov rcx, qword [0x1401e4f50]
call fcn.14005eba0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x140199fd0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x14019a030]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm0, xmm8
unpcklps xmm0, xmm8
movq rdx, xmm0
lea rcx, str.Welcome_to_Virtual_Engine
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.GTA_Online_:
call fcn.14005c250
movss xmm6, dword [0x14019a0f8]
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14002c7d0
mov edx, 0xff3aff3a
xor ecx, ecx
call fcn.14001c6f0
lea rcx, str.Online
call fcn.14005c250
mov ecx, 1
call fcn.14001c7c0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm13
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.GTA_Version_:_1.68
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm12
movss xmm3, dword [rax + 0x50]
subss xmm3, dword [rax + 0x9c]
addss xmm3, xmm7
movss dword [rax + 0x118], xmm3
movss dword [rax + 0x11c], xmm0
movss xmm2, dword [rax + 0x134]
maxss xmm2, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm3
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm2
lea rcx, str.Menu_Status_:
call fcn.14005c250
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14002c7d0
mov edx, 0xff3aff3a
xor ecx, ecx
call fcn.14001c6f0
lea rcx, str.Undetected
call fcn.14005c250
mov ecx, 1
call fcn.14001c7c0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a058]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.Menu_Version_:_3.2X1
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a064]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rdx, str.Grand_Theft_Auto_V
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
lea rdx, str.Launch_:_No
lea rcx, str.Launch_:_Yes
test rax, rax
cmove rcx, rdx
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a06c]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.Product_:_Grand_Theft_Auto_V
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a078]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.Menu_:_Virtual_X
call fcn.14005c250
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
cmp byte [reloc.WS2_32.dll_accept], r15b
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
movss xmm2, dword [rax + 0x50]
subss xmm0, dword [rax + 0xa0]
subss xmm2, dword [rax + 0x9c]
je 0x1400178b2
addss xmm0, dword [0x14019a098]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
cmp byte [0x1401e50d2], r15b
je 0x1400176c9
mov edx, 0xff00ff0d
xor ecx, ecx
call fcn.14001c6f0
lea rcx, str.Menu_inject_load_the_game_to_continue
call fcn.14005c250
mov ecx, 1
call fcn.14001c7c0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a09c]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm11
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov edx, 0xff000000
xor ecx, ecx
call fcn.14001c6f0
mov edx, 0xffff056b
mov ecx, reloc.WS2_32.dll_setsockopt
call fcn.14001c6f0
mov dword [rsp + 0x78], 0x43898000
mov dword [rsp + 0x7c], 0x42340000
lea rdx, [rsp + 0x78]
lea rcx, str.Inject
call fcn.14005cc10
test al, al
je 0x14001827a
mov byte [0x1401e50d3], 1
lea rax, [rbp - 0x28]
mov qword [rsp + 0x78], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], r15
mov r8d, reloc.WLDAP32.dll_Ordinal_50
lea rdx, str.xR_ld2odcOIeYh2nHym_VUjTKdo5hmD24qd4f42A82ATCwmJ0
lea rcx, [rbp - 0x28]
call fcn.140013370
nop
xor eax, eax
mov qword [rbp + 0x40], rax
mov dword [rbp + 0x48], eax
mov word [rbp + 0x4c], ax
mov byte [rbp + 0x4e], al
movdqa xmm0, xmmword [0x14019aa30]
movdqu xmmword [rbp + 0x50], xmm0
movdqa xmm1, xmmword [0x14019a7c0]
movdqu xmmword [rbp + 0x60], xmm1
movdqa xmm0, xmmword [0x14019abc0]
movdqu xmmword [rbp + 0x70], xmm0
mov dword [rbp + 0x80], Ordinal_60
mov dword [rbp + 0x84], Ordinal_60
lea rcx, [rbp + 0x40]
call fcn.140018e30
mov rbx, rax
lea rcx, [rbp + 0x18]
call fcn.140005200
nop
mov rdx, rbx
mov rcx, rax
call fcn.140012590
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x48]
call fcn.140013ff0
nop
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x14001789c
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017897
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017897
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6094
movdqa xmm0, xmmword [0x14019a170]
movdqu xmmword [rbp + 0x28], xmm0
mov byte [rbp + 0x18], 0
jmp 0x14001827a
addss xmm0, dword [0x14019a088]
addss xmm2, xmm11
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov edx, 0xff00ff0d
xor ecx, ecx
call fcn.14001c6f0
mov qword [rsp + 0x78], r15
lea rdx, [rsp + 0x78]
lea rcx, str.Click_here_to_inject
call fcn.14005cf40
test al, al
je 0x140017a6f
mov byte [0x1401e50d3], 1
lea rax, [rbp - 0x68]
mov qword [rsp + 0x78], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], r15
mov r8d, reloc.WLDAP32.dll_Ordinal_50
lea rdx, str.xR_ld2odcOIeYh2nHym_VUjTKdo5hmD24qd4f42A82ATCwmJ0
lea rcx, [rbp - 0x68]
call fcn.140013370
nop
xor eax, eax
mov qword [rbp + 0x110], rax
mov dword [rbp + 0x118], eax
mov word [rbp + 0x11c], ax
mov byte [rbp + 0x11e], al
movdqa xmm0, xmmword [0x14019a9d0]
movdqu xmmword [rbp + 0x120], xmm0
movdqa xmm1, xmmword [0x14019c050]
movdqu xmmword [rbp + 0x130], xmm1
movdqa xmm0, xmmword [0x14019af60]
movdqu xmmword [rbp + 0x140], xmm0
mov dword [rbp + 0x150], WSASetLastError
mov dword [rbp + 0x154], WSASetLastError
lea rcx, [rbp + 0x110]
call fcn.140018a60
mov rbx, rax
lea rcx, [rbp + 0x180]
call fcn.140005200
nop
mov rdx, rbx
mov rcx, rax
call fcn.140012590
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xd8], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0xc0]
call fcn.140013ff0
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x140017a6f
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017a6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017a6a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6094
mov ecx, 1
call fcn.14001c7c0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a09c]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm11
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov edx, 0xff000000
xor ecx, ecx
call fcn.14001c6f0
mov edx, 0xffff056b
mov ecx, reloc.WS2_32.dll_setsockopt
call fcn.14001c6f0
mov dword [rsp + 0x78], 0x43898000
mov dword [rsp + 0x7c], 0x42340000
lea rdx, [rsp + 0x78]
lea rcx, str.launch_GTA_V
call fcn.14005cc10
test al, al
je 0x14001827a
mov qword [rbp + 0xe0], 0xffffffff80000002
lea rdx, str.SOFTWAREWow6432NodeRockstar_GamesGTAV
mov qword [rbp + 0xe8], rdx
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
sete byte [0x1401e4e33]
mov qword [rbp + 0xe0], 0xffffffff80000002
lea rdx, str.SOFTWAREWow6432NodeRockstar_GamesGrand_Theft_Auto_V
mov qword [rbp + 0xe8], rdx
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140018083
mov byte [0x1401e4e32], 1
lea r8, str.Detected_the_rockstar_version_of_GTAV.
lea rdx, str.Success
lea ecx, [rax + 0x54]
call fcn.140073cc0
mov dword [rbp + 0xb0], 1
mov dword [rbp + 0xc0], 0x400
lea rdi, str.InstallFolder
mov qword [rbp + 0xf0], rdi
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x3b0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xb0]
xor r8d, r8d
mov rdx, rdi
mov rcx, qword [rbp + 0xf8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rbx, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
cmp eax, 2
jne 0x140017c5f
movdqa xmm1, xmmword [0x14019a170]
movdqu xmmword [rbp + 0xa0], xmm1
mov byte [rbp + 0x90], 0
jmp 0x140017c91
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa0], xmm1
lea rax, [rbp + 0x3b0]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140017c74
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x90]
call fcn.140013370
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x140017cd5
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017cd0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017cd0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6094
cmp qword [rbp + 0xa0], 0
je 0x14001817b
mov dword [rbp + 0xc0], 1
mov dword [rbp + 0xb0], 0x400
mov qword [rbp + 0xf0], rdi
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x3b0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xc0]
xor r8d, r8d
mov rdx, rdi
mov rcx, qword [rbp + 0xf8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
cmp eax, 2
jne 0x140017d58
movdqa xmm1, xmmword [0x14019a170]
movdqu xmmword [rbp + 0xa0], xmm1
mov byte [rbp + 0x90], 0
jmp 0x140017d8e
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa0], xmm1
lea rax, [rbp + 0x3b0]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140017d70
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x90]
call fcn.140013370
nop
mov r8d, 9
lea rdx, str.GTA5.exe
lea rcx, [rbp + 0x90]
call fcn.140012620
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp - 8]
call fcn.140019840
lea rcx, [rbp - 8]
call fcn.140012740
nop
mov r8, qword [rbp + 0xa8]
cmp r8, 0xf
jbe 0x140017df1
mov rdx, qword [rbp + 0x90]
call fcn.140012b90
lea rcx, [0x1401ae678]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x1401ae678]
lea rdx, [rbp + 0x180]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__stat64i32]
test eax, eax
je 0x140017e31
lea r8, str.GTA5.exe_not_found.
lea rdx, str.Error
mov ecx, Ordinal_200
call fcn.140073cc0
lea r9, [0x14018fa08]
lea r8, str.Starting__s
lea rdx, str.Success
mov ecx, 0x54
call fcn.140073cc0
mov dword [rbp + 0xc0], 1
mov dword [rbp + 0xb0], 0x400
mov qword [rbp + 0xf0], rdi
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x3b0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xc0]
xor r8d, r8d
mov rdx, rdi
mov rcx, qword [rbp + 0xf8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
cmp eax, 2
jne 0x140017ebe
movdqa xmm1, xmmword [0x14019a170]
movdqu xmmword [rbp - 0x78], xmm1
mov byte [rsp + 0x78], 0
jmp 0x140017eee
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
lea rax, [rbp + 0x3b0]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140017ed0
mov r8, rbx
lea rdx, [rbp + 0x3b0]
lea rcx, [rsp + 0x78]
call fcn.140013370
nop
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.GTAVLauncher.exe
lea rcx, [rsp + 0x78]
call fcn.140012620
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova rcx, qword [rsp + 0x50]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x114], xmm0
movups xmmword [rbp + 0x124], xmm0
movups xmmword [rbp + 0x134], xmm0
movups xmmword [rbp + 0x144], xmm0
movups xmmword [rbp + 0x154], xmm0
movups xmmword [rbp + 0x164], xmm0
mov dword [rbp + 0x174], eax
mov dword [rbp + 0x110], WSASetLastError
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rax
lea rax, [rbp + 0x90]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x110]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140018028
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018023
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018023
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6094
movdqa xmm0, xmmword [0x14019a170]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x14001824b
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018079
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018079
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6094
jmp 0x14001824b
mov byte [0x1401e4e32], 0
cmp byte [0x1401e4e33], 0
je 0x14001824b
lea r8, str.Detected_the_steam_version_of_GTAV.
lea rdx, str.Info
mov ecx, 0xf3
call fcn.140073cc0
mov dword [rbp + 0xc0], 1
mov dword [rbp + 0xb0], 0x400
lea rdi, str.InstallFolder
mov qword [rbp + 0xf0], rdi
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x3b0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xc0]
xor r8d, r8d
mov rdx, rdi
mov rcx, qword [rbp + 0xf8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
cmp eax, 2
jne 0x14001812b
movdqa xmm1, xmmword [0x14019a170]
movdqu xmmword [rbp + 0xa0], xmm1
mov byte [rbp + 0x90], 0
jmp 0x140018163
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa0], xmm1
lea rax, [rbp + 0x3b0]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x140018144
mov r8, rbx
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x90]
call fcn.140013370
mov rbx, qword [rbp + 0xa0]
lea rcx, [rbp + 0x90]
call fcn.140012740
test rbx, rbx
jne 0x140018198
lea r8, str.Reading_GTA_V_install_path.
lea rdx, str.Info
mov ecx, 0xf3
call fcn.140073cc0
jmp 0x14001824b
lea rdx, [rbp - 8]
lea rcx, [rbp + 0xe0]
call fcn.140013960
nop
lea r8, str.GTA5.exe
mov rdx, rax
lea rcx, [rbp + 0x180]
call fcn.140012d30
mov rdx, rax
call fcn.140019840
lea rcx, [rbp + 0x180]
call fcn.140012740
nop
lea rcx, [rbp - 8]
call fcn.140012740
lea rcx, [0x1401ae678]
call fcn.140012580
mov rcx, rax
call fcn.1400142a0
test al, al
jne 0x14001820d
lea r8, str.GTA5.exe_not_found.
lea rdx, str.Info
mov ecx, 0xf3
call fcn.140073cc0
lea r8, str.Starting_GTA_V___steam_id:271590
lea rdx, str.Info
mov ecx, 0xf3
call fcn.140073cc0
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, str.steam:__run_271590
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea r9, [0x1401ae658]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova r9, qword [0x1401ae658]
lea r8, str.Waiting_for__s_process_to_become_available...
lea rdx, str.Success
mov ecx, 0x54
call fcn.140073cc0
cmp byte [0x1401e50d3], 0
je 0x140018305
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x14019a084]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x14019a068]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov ecx, 1
call fcn.14001c7c0
mov ecx, 1
call fcn.14001c7c0
cmp byte [0x1401e4e31], 0
je 0x140018998
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov r14, qword [rax + 0x2f8]
mov esi, 4
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
lea r12, [0x1401e5760]
mov r13d, reloc.WS2_32.dll_WSAStartup
mov eax, dword [rsi + rbx]
cmp dword [0x1401e5758], eax
jle 0x1400183a9
lea rcx, [0x1401e5758]
call fcn.1400c6170
cmp dword [0x1401e5758], 0xffffffff
jne 0x1400183a9
mov rax, r12
mov edx, r13d
nop dword [rax]
mov qword [rax], r15
lea rax, [rax + 8]
sub rdx, 1
jne 0x140018390
lea rcx, [0x1401e5758]
call fcn.1400c6104
mov eax, dword [rsi + rbx]
cmp dword [0x1401e53b8], eax
jle 0x1400183e0
lea rcx, [0x1401e53b8]
call fcn.1400c6170
cmp dword [0x1401e53b8], 0xffffffff
jne 0x1400183e0
mov qword [0x1401e5af8], 0
lea rcx, [0x1401e53b8]
call fcn.1400c6104
lea rdi, [0x1401e53c0]
mov eax, dword [rsi + rbx]
cmp dword [0x1401e575c], eax
jle 0x140018429
lea rcx, [0x1401e575c]
call fcn.1400c6170
cmp dword [0x1401e575c], 0xffffffff
jne 0x140018429
mov rax, rdi
mov rdx, r13
nop dword [rax]
mov qword [rax], r15
lea rax, [rax + 8]
sub rdx, 1
jne 0x140018410
lea rcx, [0x1401e575c]
call fcn.1400c6104
cmp byte [0x1401e5120], 0
jne 0x140018532
mov rbx, r15
movss xmm11, dword [0x14019a0c0]
mov rax, qword [0x1401e4e60]
mov rcx, qword [rax + 0x1d18]
movss xmm6, dword [rcx + 0x5c]
movss xmm7, dword [rcx + 0x54]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mulss xmm8, xmm6
divss xmm8, xmm11
addss xmm8, xmm7
mov rax, qword [0x1401e4e60]
mov rcx, qword [rax + 0x1d18]
movss xmm6, dword [rcx + 0x58]
movss xmm7, dword [rcx + 0x50]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm6
divss xmm0, xmm11
addss xmm0, xmm7
movss dword [rbx + r12], xmm0
movss dword [rbx + r12 + 4], xmm8
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [rbx + rdi], xmm0
movss dword [rbx + rdi + 4], xmm6
add rbx, 8
cmp rbx, 0x398
jl 0x140018442
mov byte [0x1401e5120], 1
cmp qword [0x1401e4e60], 0
jne 0x140018556
mov r8d, 0xda0
lea rdx, str.C:UsersxifibOneDriveBureauVXVirtual_X_Loader_V3BackendImGuiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1401e4e60]
movsd xmm0, qword [rax + 0x120]
movsd qword [rbp + 0xb0], xmm0
lea rdi, [0x1401e5764]
movss xmm7, dword [rbp + 0xb4]
movss xmm8, dword [rbp + 0xb0]
movss xmm6, dword [0x14019a004]
movss xmm11, dword [0x14019a000]
nop word [rax + rax]
lea ecx, [r15 + 1]
cmp ecx, 0x73
jge 0x14001868b
lea rbx, [rdi + 4]
movsxd rax, ecx
lea rsi, [r12 + rax*8]
mov r12d, r13d
sub r12d, ecx
lea r13, [0x1401e5760]
nop word [rax + rax]
movss xmm1, dword [rbx + 4]
subss xmm1, dword [rdi]
movss xmm0, dword [rbx]
subss xmm0, dword [rdi - 4]
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
divss xmm0, xmm6
movaps xmm1, xmm9
subss xmm1, xmm0
comiss xmm1, xmm10
jbe 0x14001866d
mov dword [rsp + 0x78], 0x3f800000
mov dword [rsp + 0x7c], 0x3f800000
mov dword [rbp - 0x80], 0x3f800000
movups xmm0, xmmword [rsp + 0x78]
shufps xmm0, xmm0, 0x93
movss xmm0, xmm1
shufps xmm0, xmm0, 0x39
movups xmmword [rsp + 0x78], xmm0
movups xmmword [rsp + 0x50], xmm0
mov rax, qword [0x1401e4e60]
mulss xmm1, dword [rax + 0x1638]
movss dword [rsp + 0x5c], xmm1
lea rcx, [rsp + 0x50]
call fcn.14001bed0
mov r9d, eax
mov eax, r15d
lea rdx, [rax*8]
add rdx, r13
movss dword [rsp + 0x20], xmm9
mov r8, rsi
mov rcx, r14
call fcn.14004e9a0
add rsi, 8
add rbx, 8
sub r12, 1
jne 0x1400185d0
lea r13d, [r12 + 0x73]
lea r12, [0x1401e5760]
movaps xmm1, xmm7
subss xmm1, dword [rdi]
movaps xmm0, xmm8
subss xmm0, dword [rdi - 4]
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
divss xmm0, xmm11
movaps xmm1, xmm9
subss xmm1, xmm0
comiss xmm1, xmm10
jbe 0x14001872f
mov dword [rbp + 0xc0], 0x3f800000
mov dword [rbp + 0xc4], 0x3f800000
mov dword [rbp + 0xc8], 0x3f800000
movups xmm0, xmmword [rbp + 0xc0]
shufps xmm0, xmm0, 0x93
movss xmm0, xmm1
shufps xmm0, xmm0, 0x39
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rsp + 0x50], xmm0
mov rax, qword [0x1401e4e60]
mulss xmm1, dword [rax + 0x1638]
movss dword [rsp + 0x5c], xmm1
lea rcx, [rsp + 0x50]
call fcn.14001bed0
mov r9d, eax
mov eax, r15d
lea r8, [r12 + rax*8]
movss dword [rsp + 0x20], xmm9
lea rdx, [rbp + 0xb0]
mov rcx, r14
call fcn.14004e9a0
inc r15d
add rdi, 8
cmp r15d, 0x73
jl 0x1400185a0
cmp qword [0x1401e4e60], 0
jne 0x140018764
mov r8d, 0xda0
lea rdx, str.C:UsersxifibOneDriveBureauVXVirtual_X_Loader_V3BackendImGuiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1401e4e60]
movss xmm11, dword [rax + 0x18]
mov rsi, r12
xor r15d, r15d
mov ebx, r15d
movss xmm6, dword [0x14019a060]
movss xmm7, dword [0x140199f18]
movss xmm8, dword [0x140199f7c]
movss xmm12, dword [0x140199fc8]
nop dword [rax]
movaps xmm0, xmm11
lea rax, [0x1401e53c0]
mulss xmm0, dword [rbx + rax]
addss xmm0, dword [rbx + r12]
movss dword [rbx + r12], xmm0
movaps xmm0, xmm11
mulss xmm0, dword [rbx + rax + 4]
addss xmm0, dword [rbx + r12 + 4]
movss dword [rbx + r12 + 4], xmm0
mov rcx, qword [0x1401e4e60]
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
movss xmm3, dword [rax + 0x54]
movss xmm2, dword [rbx + r12]
movss xmm0, dword [rax + 0x58]
addss xmm0, xmm1
comiss xmm1, xmm2
jbe 0x140018808
movss dword [rbx + r12], xmm0
jmp 0x140018819
comiss xmm2, xmm0
jbe 0x140018819
movaps xmm0, xmm1
unpcklps xmm0, xmm3
movss dword [rbx + r12], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
movss xmm2, dword [rbx + r12 + 4]
movss xmm0, dword [rax + 0x5c]
addss xmm0, xmm1
comiss xmm1, xmm2
jbe 0x140018843
movss dword [rbx + r12 + 4], xmm0
jmp 0x14001885b
comiss xmm2, xmm0
jbe 0x14001885b
movss xmm2, dword [rax + 0x50]
unpcklps xmm2, xmm1
shufps xmm2, xmm2, 0x55
movss dword [rbx + r12 + 4], xmm2
movss xmm1, dword [0x1401ae870]
comiss xmm10, xmm1
jbe 0x14001886f
movaps xmm0, xmm10
jmp 0x140018877
movaps xmm0, xmm9
minss xmm0, xmm1
mulss xmm0, xmm6
addss xmm0, xmm7
cvttss2si ecx, xmm0
movss xmm1, dword [0x1401ae874]
comiss xmm10, xmm1
jbe 0x140018897
movaps xmm0, xmm10
jmp 0x14001889f
movaps xmm0, xmm9
minss xmm0, xmm1
mulss xmm0, xmm6
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
movss xmm1, dword [0x1401ae878]
comiss xmm10, xmm1
jbe 0x1400188c4
movaps xmm0, xmm10
jmp 0x1400188cc
movaps xmm0, xmm9
minss xmm0, xmm1
mulss xmm0, xmm6
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
movss xmm1, dword [0x1401ae87c]
comiss xmm10, xmm1
jbe 0x1400188f1
movaps xmm0, xmm10
jmp 0x1400188f9
movaps xmm0, xmm9
minss xmm0, xmm1
mulss xmm0, xmm6
addss xmm0, xmm7
cvttss2si edi, xmm0
shl edi, 0x18
or edi, ecx
test edi, 0xff000000
je 0x140018986
movaps xmm1, xmm8
mov rcx, r14
call fcn.14004bf40
movaps xmm2, xmm8
mov rdx, rsi
mov rcx, r14
cmp eax, 0xc
jne 0x14001893f
mov dword [rsp + 0x20], ntohl
xor r9d, r9d
call fcn.14004df60
jmp 0x14001896c
movd xmm0, eax
cvtdq2ps xmm0, xmm0
dec eax
movaps xmm1, xmm0
subss xmm1, xmm9
mulss xmm1, xmm12
divss xmm1, xmm0
mov dword [rsp + 0x28], eax
movss dword [rsp + 0x20], xmm1
movaps xmm3, xmm10
call fcn.14004dff0
mov r9d, edi
mov r8d, dword [r14 + 0x78]
mov rdx, qword [r14 + 0x80]
mov rcx, r14
call fcn.14004d440
mov dword [r14 + 0x78], r15d
add rsi, 8
add rbx, 8
sub r13, 1
jne 0x1400187a0
call fcn.14002a9c0
mov rcx, qword [rbp + 0x7b0]
xor rcx, rsp
call fcn.1400c5df0
lea r11, [rsp + 0x940]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret