Function at 0x140011541
Capabilities:
Connect to http server
Create http request
Enumerate processes
Send data
Send http request

Disassembly:
jmp 0x140016910
push rbp
push rdi
sub rsp, 0xc58
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0x216
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140027040]
xor rax, rbp
mov qword [rbp + 0xc00], rax
lea rcx, [0x14002d0f8]
call fcn.14001175d
lea rdx, [0x1400225d8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.a...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.a...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.an...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x249
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.a...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x352
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.a...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.Authenticated...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.a...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.Waiting_for_RobloxPlayerBeta.exe_to_start...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor eax, eax
cmp eax, 1
je 0x140016bd1
mov dword [rbp + 0x10], 0x238
xor edx, edx
mov ecx, 2
call fcn.1400113a7
mov qword [rbp + 0x268], rax
lea rdx, [rbp + 0x10]
mov rcx, qword [rbp + 0x268]
call fcn.1400114b5
test eax, eax
je 0x140016b6b
lea rdx, [rbp + 0x3c]
lea rcx, [rbp + 0xa08]
call fcn.140011285
mov qword [rbp + 0xbf8], rax
lea rdx, str.RobloxPlayerBeta.exe
mov rcx, qword [rbp + 0xbf8]
call fcn.1400112a3
mov byte [rbp + 0x9e4], al
lea rcx, [rbp + 0xa08]
call fcn.14001169a
movzx eax, byte [rbp + 0x9e4]
test eax, eax
je 0x140016b57
jmp 0x140016b6b
lea rdx, [rbp + 0x10]
mov rcx, qword [rbp + 0x268]
call fcn.14001169f
test eax, eax
jne 0x140016b0e
mov rcx, qword [rbp + 0x268]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x3c]
lea rcx, [rbp + 0xa68]
call fcn.140011285
mov qword [rbp + 0xbf8], rax
lea rdx, str.RobloxPlayerBeta.exe
mov rcx, qword [rbp + 0xbf8]
call fcn.1400112a3
mov byte [rbp + 0xa44], al
lea rcx, [rbp + 0xa68]
call fcn.14001169a
movzx eax, byte [rbp + 0xa44]
test eax, eax
je 0x140016bc1
jmp 0x140016bd1
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140016ad5
lea rdx, str.RobloxPlayerBeta.exe_detected_
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.game_loading...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x284], 1
jmp 0x140016c31
mov eax, dword [rbp + 0x284]
inc eax
mov dword [rbp + 0x284], eax
cmp dword [rbp + 0x284], 0xa
jg 0x140016c97
imul eax, dword [rbp + 0x284], 0xa
mov dword [rbp + 0xbf4], eax
lea rdx, str.Loading_game:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
mov ecx, dword [rbp + 0xbf4]
mov edx, ecx
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, str.__complete
mov rcx, rax
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140016c23
mov dword [rbp + 0x2a4], 0
xor edx, edx
mov ecx, 2
call fcn.1400113a7
mov qword [rbp + 0x2c8], rax
cmp qword [rbp + 0x2c8], 0xffffffffffffffff
je 0x140016d5f
mov dword [rbp + 0x2f0], 0x238
lea rdx, [rbp + 0x2f0]
mov rcx, qword [rbp + 0x2c8]
call fcn.1400114b5
test eax, eax
je 0x140016d52
lea rdx, [rbp + 0x31c]
lea rcx, [rbp + 0xac8]
call fcn.140011285
mov qword [rbp + 0xbf8], rax
lea rdx, str.RobloxPlayerBeta.exe
mov rcx, qword [rbp + 0xbf8]
call fcn.1400112a3
mov byte [rbp + 0xaa4], al
lea rcx, [rbp + 0xac8]
call fcn.14001169a
movzx eax, byte [rbp + 0xaa4]
test eax, eax
je 0x140016d3b
mov eax, dword [rbp + 0x2f8]
mov dword [rbp + 0x2a4], eax
jmp 0x140016d52
lea rdx, [rbp + 0x2f0]
mov rcx, qword [rbp + 0x2c8]
call fcn.14001169f
test eax, eax
jne 0x140016ce3
mov rcx, qword [rbp + 0x2c8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rbp + 0x2a4], 0
je 0x140016dac
mov ecx, dword [rbp + 0x2a4]
call fcn.140011118
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [rbp + 0x2a4]
call fcn.14001178f
lea rdx, str.RobloxPlayerBeta.exe_attached___Removed_DLL_Lua_Production_too_prevent_errors.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.ucrtbased.dll_rand]
cvtsi2sd xmm0, eax
divsd xmm0, qword [0x140022ae8]
movsd qword [rbp + 0x548], xmm0
movsd xmm0, qword [0x140022ac8]
comisd xmm0, xmmword [rbp + 0x548]
jbe 0x140016e94
call qword [sym.imp.ucrtbased.dll_rand]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
mov dword [rbp + 0x564], eax
cmp dword [rbp + 0x564], 0
jne 0x140016e2a
lea rdx, str.system_conflict.txt
lea rcx, [rbp + 0xb08]
call fcn.140011370
nop
lea rcx, [rbp + 0xb08]
call fcn.1400110b4
nop
lea rcx, [rbp + 0xb08]
call fcn.140011168
jmp 0x140016e8f
cmp dword [rbp + 0x564], 1
jne 0x140016e62
lea rdx, str.required_file_not_found.txt
lea rcx, [rbp + 0xb48]
call fcn.140011370
nop
lea rcx, [rbp + 0xb48]
call fcn.1400110b4
nop
lea rcx, [rbp + 0xb48]
call fcn.140011168
jmp 0x140016e8f
lea rdx, str.permission_denied.txt
lea rcx, [rbp + 0xb88]
call fcn.140011370
nop
lea rcx, [rbp + 0xb88]
call fcn.1400110b4
nop
lea rcx, [rbp + 0xb88]
call fcn.140011168
jmp 0x140016f26
movsd xmm0, qword [str.333333]
comisd xmm0, xmmword [rbp + 0x548]
jbe 0x140016ed5
lea rdx, str.unknown_error.txt
lea rcx, [rbp + 0xbc8]
call fcn.140011370
nop
lea rcx, [rbp + 0xbc8]
call fcn.1400110b4
nop
lea rcx, [rbp + 0xbc8]
call fcn.140011168
jmp 0x140016f26
lea rdx, str.Loading_cheat...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.Cheat_loaded_successfully_
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, str.Coles_Backend
call qword [sym.imp.WININET.dll_InternetOpenW]
mov qword [rbp + 0x588], rax
cmp qword [rbp + 0x588], 0
je 0x140017129
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8w, 0x1bb
lea rdx, str.discord.com
mov rcx, qword [rbp + 0x588]
call qword [sym.imp.WININET.dll_InternetConnectW]
mov qword [rbp + 0x5a8], rax
cmp qword [rbp + 0x5a8], 0
je 0x1400170f7
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x14002258c]
lea rdx, str.POST
mov rcx, qword [rbp + 0x5a8]
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov qword [rbp + 0x5c8], rax
cmp qword [rbp + 0x5c8], 0
je 0x1400170c5
lea rax, str.Content_Type:_application_json_r_n
mov qword [rbp + 0x5e8], rax
lea rax, str._content_:_Cheat_loaded_successfully__
mov qword [rbp + 0x608], rax
mov rcx, qword [rbp + 0x608]
call qword [sym.imp.ucrtbased.dll_wcslen]
mov qword [rbp + 0xbf8], rax
mov rcx, qword [rbp + 0x5e8]
call qword [sym.imp.ucrtbased.dll_wcslen]
mov rcx, qword [rbp + 0xbf8]
mov dword [rsp + 0x20], ecx
mov r9, qword [rbp + 0x608]
mov r8d, eax
mov rdx, qword [rbp + 0x5e8]
mov rcx, qword [rbp + 0x5c8]
call qword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
je 0x140017093
lea rdx, str.Message_sent_to_Discord_webhook.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400170b6
lea rdx, str.Failed_to_send_message_to_Discord_webhook.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 0x5c8]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x1400170e8
lea rdx, str.Failed_to_open_HTTP_request.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 0x5a8]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x14001711a
lea rdx, str.Failed_to_connect_to_Discord_server.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 0x588]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x14001714c
lea rdx, str.Failed_to_open_internet_connection.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110dc
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor eax, eax
mov edi, eax
lea rcx, [rbp - 0x40]
lea rdx, [0x140021fc0]
call fcn.14001164f
mov eax, edi
mov rcx, qword [rbp + 0xc00]
xor rcx, rbp
call fcn.1400113c0
lea rsp, [rbp + 0xc18]
pop rdi
pop rbp
ret