Function at 0x140002410
Capabilities:
Execute command
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x310]
sub rsp, 0x410
mov rax, qword [0x14000a040]
xor rax, rsp
mov qword [rbp + 0x300], rax
xor esi, esi
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov ecx, 0x20
call fcn.140004b20
mov r15, rax
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x80], 0x11
mov qword [rbp + 0x88], 0x1f
movups xmm0, xmmword [str.KrakenExecuterv01]
movups xmmword [rax], xmm0
movzx eax, byte [0x1400065e8]
mov byte [r15 + 0x10], al
mov byte [r15 + 0x11], sil
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rsi
mov ebx, 0xf
mov qword [rbp + 0x68], rbx
mov byte [rbp + 0x50], sil
lea rdx, str.Enter_the_key_to_proceed:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003eb0
lea rdx, [rbp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140004090
lea rcx, [rbp + 0x50]
mov rdi, qword [rbp + 0x50]
mov r13, qword [rbp + 0x68]
cmp r13, rbx
cmova rcx, rdi
mov r8, qword [rbp + 0x60]
cmp r8, 0x11
jne 0x1400024fa
mov rdx, r15
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400024fa
mov r14b, 1
jmp 0x1400024fd
xor r14b, r14b
cmp r13, 0xf
jbe 0x140002538
lea rdx, [r13 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000252f
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000252f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140004b5c
nop
mov edx, 0x20
mov rcx, r15
call fcn.140004b5c
test r14b, r14b
jne 0x140002577
lea rdx, str.Invalid_key._Exiting.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003eb0
mov rcx, rax
lea rdx, [0x140004270]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 1
jmp 0x140002a11
lea rcx, str.START_https:__discord.gg_3yXwTzghHR
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Hex_Project__By_Sarnax8465__Discord_:_https:__discord.gg_3yXwTzghHR
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rsi
mov qword [rbp + 0xa8], rbx
mov byte [rbp + 0x90], 0
mov qword [rsp + 0x30], rsi
lea r8, str.LOCALAPPDATA
lea rdx, [rbp + 0xb0]
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
test eax, eax
jne 0x1400029a3
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x1400029a3
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400025f0
lea rcx, [rbp + 0x90]
call fcn.140003c40
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor edx, edx
mov r8d, 0x110
lea rcx, [rsp + 0x40]
call sub.VCRUNTIME140.dll_memset
mov r15, qword [rbp + 0xa0]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 0x1d
jb 0x140002a41
lea r12, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova r12, qword [rbp + 0x90]
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x60], xmm1
lea r14, [r15 + 0x1d]
lea rdi, [rbp + 0x50]
cmp r14, 0xf
jbe 0x1400026f5
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400026b0
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140004b20
test rax, rax
je 0x1400026e2
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400026f1
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400026ca
mov rdi, rsi
jmp 0x1400026f1
cmp rcx, 0x1000
jb 0x1400026e9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002a47
jmp 0x140002695
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004b20
mov rdi, rax
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x68], rbx
mov r8, r15
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.FiveMFiveM.app_adhesive.dll]
movups xmmword [rdi + r15], xmm0
movsd xmm0, qword [0x140006ac8]
movsd qword [rdi + r15 + 0x10], xmm0
mov eax, dword [0x140006ad0]
mov dword [rdi + r15 + 0x18], eax
movzx eax, byte [0x140006ad4]
mov byte [rdi + r15 + 0x1c], al
mov byte [rdi + r14], 0
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x40]
call fcn.1400036b0
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x14000278f
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000278a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000278a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004b5c
movdqa xmm0, xmmword [0x140006c50]
movdqu xmmword [rbp + 0x60], xmm0
mov byte [rbp + 0x50], 0
mov rax, qword [rsp + 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x40]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
test al, al
je 0x1400027e8
lea rdx, str.FiveM_is_not_installed_in_the_expected_directory_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140003eb0
mov rcx, rax
lea rdx, [0x140004270]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov esi, 1
jmp 0x140002997
mov dword [rbp + 0xc0], 0x238
xor edx, edx
mov r8d, 0x234
lea rcx, [rbp + 0xc4]
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov ecx, 0x20
call fcn.140004b20
mov rcx, rax
mov qword [rbp + 0x70], rax
movdqa xmm0, xmmword [0x140006c60]
movdqu xmmword [rbp + 0x80], xmm0
movups xmm0, xmmword [str.FiveM_GTAProcess.exe]
movups xmmword [rax], xmm0
mov eax, dword [0x140006b20]
mov dword [rcx + 0x10], eax
mov byte [rcx + 0x14], 0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x70]
call fcn.140001290
movzx ebx, al
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x140002896
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002891
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002967
call fcn.140004b5c
test bl, bl
jne 0x14000296e
lea rdx, str.Waiting_for_FiveM_GTAProcess.exe_to_start...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003eb0
mov rcx, rax
lea rdx, [0x140004270]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov ecx, 0x20
call fcn.140004b20
mov rcx, rax
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x80], 0x14
mov qword [rbp + 0x88], 0x1f
movups xmm0, xmmword [str.FiveM_GTAProcess.exe]
movups xmmword [rax], xmm0
mov eax, dword [0x140006b20]
mov dword [rcx + 0x10], eax
mov byte [rcx + 0x14], 0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x70]
call fcn.140001290
movzx ebx, al
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x140002953
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000294e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002967
call fcn.140004b5c
test bl, bl
jne 0x14000296e
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400028c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, str.FiveM_process_detected._Proceeding...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003eb0
mov rcx, rax
lea rdx, [0x140004270]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140002240
nop
lea rcx, [rsp + 0x40]
call fcn.140001a20
jmp 0x1400029cb
lea rdx, str.Failed_to_get_LOCALAPPDATA_environment_variable.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140003eb0
mov rcx, rax
lea rdx, [0x140004270]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov esi, 1
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x140002a0f
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002a0a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004b5c
mov eax, esi
mov rcx, qword [rbp + 0x300]
xor rcx, rsp
call fcn.140004b00
lea r11, [rsp + 0x410]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400011b0
nop
call fcn.140001110
int3