Function at 0x1400034a0
Capabilities:
Create thread
Inject thread
Set console window title

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rdi
sub rsp, 0x290
mov rax, qword [0x14004a040]
xor rax, rsp
mov qword [rsp + 0x280], rax
call fcn.140002f10
mov byte [rsp + 0xb0], al
cmp byte [rsp + 0xb0], 1
je 0x1400034db
jmp 0x1400034fb
xor r9d, r9d
lea r8, str.______
lea rdx, str._________vm___
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call fcn.140019e00
lea rax, [rsp + 0x40]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x40]
call fcn.140004980
mov rcx, rax
call fcn.14000c7b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rax, [rsp + 0x41]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x41]
call fcn.140004ab0
mov rcx, rax
call fcn.14000c6d0
mov rcx, rax
call fcn.14001c244
lea rax, [rsp + 0x42]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x42]
call fcn.140005360
mov rcx, rax
call fcn.14000c600
mov rcx, rax
call fcn.14001c244
lea rax, [rsp + 0x43]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x43]
call fcn.140005480
mov rcx, rax
call fcn.14000c520
mov rcx, rax
call fcn.14001c244
lea rax, [rsp + 0x44]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x44]
call fcn.1400058e0
mov rcx, rax
call fcn.14000c450
mov rcx, rax
call fcn.14001c244
lea rax, [rsp + 0x45]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x45]
call fcn.140005a20
mov rcx, rax
call fcn.14000c370
mov rcx, rax
call fcn.14001c244
lea rax, [rsp + 0x46]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x46]
call fcn.140005e30
mov rcx, rax
call fcn.14000c2a0
mov rcx, rax
call fcn.14001c244
lea rax, [rsp + 0x47]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x47]
call fcn.140005fb0
mov rcx, rax
call fcn.14000c1d0
mov rcx, rax
call fcn.14001c244
lea rax, [rsp + 0x48]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x48]
call fcn.140006110
mov rcx, rax
call fcn.14000c1b0
mov rcx, rax
call fcn.14001c244
lea rcx, [rsp + 0x130]
call fcn.14000ceb0
nop
mov dword [rsp + 0x150], 0x130
lea rax, [rsp + 0x154]
mov rdi, rax
xor eax, eax
mov ecx, 0x12c
rep stosb byte [rdi], al
lea rax, [rsp + 0x49]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x49]
call fcn.1400061f0
mov rcx, rax
call fcn.14000c190
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x4a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x4a]
call fcn.1400062d0
mov rcx, rax
call fcn.14000c170
mov edx, 4
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x4b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x4b]
call fcn.1400063b0
mov rcx, rax
call fcn.14000c150
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x4c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x4c]
call fcn.140006490
mov rcx, rax
call fcn.14000c130
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x4d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x4d]
call fcn.1400065a0
mov rcx, rax
call fcn.14000c110
mov edx, 2
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x4e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x4e]
call fcn.1400066e0
mov rcx, rax
call fcn.14000c0f0
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x4f]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x4f]
call fcn.1400067c0
mov rcx, rax
call fcn.14000c020
mov edx, 4
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x50]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x50]
call fcn.1400068a0
mov rcx, rax
call fcn.14000c000
mov edx, 0xf
mov rcx, rax
call fcn.140010920
jmp 0x140003839
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rsp + 0x108]
mov qword [rsp + 0xe0], rax
lea rdx, str.FiveM_GTAProcess.exe
mov rcx, qword [rsp + 0xe0]
call fcn.14000cda0
mov qword [rsp + 0xe8], rax
lea rdx, [rsp + 0x150]
mov rcx, qword [rsp + 0xe8]
call fcn.140003190
movzx eax, al
test eax, eax
jne 0x140003883
jmp 0x14000382e
lea rax, [rsp + 0x51]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x51]
call fcn.140006990
mov rcx, rax
call fcn.14000bfe0
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x52]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x52]
call fcn.140006a70
mov rcx, rax
call fcn.14000bfc0
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x53]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x53]
call fcn.140006b50
mov rcx, rax
call fcn.14000bfa0
mov edx, 4
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x54]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x54]
call fcn.140006c30
mov rcx, rax
call fcn.14000bf80
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x55]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x55]
call fcn.140006d10
mov rcx, rax
call fcn.14000bf60
mov edx, 0xf
mov rcx, rax
call fcn.140010920
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rsp + 0x56]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x56]
call fcn.140006e10
mov rcx, rax
call fcn.14000be90
mov rcx, rax
call fcn.14001c244
lea rax, [rsp + 0x57]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x57]
call fcn.140006ef0
mov rcx, rax
call fcn.14000be70
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x58]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x58]
call fcn.140006fd0
mov rcx, rax
call fcn.14000be50
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x59]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x59]
call fcn.1400070b0
mov rcx, rax
call fcn.14000be30
mov edx, 2
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x5a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x5a]
call fcn.140007190
mov rcx, rax
call fcn.14000be10
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x5b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x5b]
call fcn.140007270
mov rcx, rax
call fcn.14000bd40
mov edx, 0xf
mov rcx, rax
call fcn.140010920
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rsp + 0x5c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x5c]
call fcn.1400073c0
mov rcx, rax
call fcn.14000bd20
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x5d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x5d]
call fcn.1400074a0
mov rcx, rax
call fcn.14000bd00
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x5e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x5e]
call fcn.140007580
mov rcx, rax
call fcn.14000bce0
mov edx, 2
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x5f]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x5f]
call fcn.140007660
mov rcx, rax
call fcn.14000bcc0
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x60]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x60]
call fcn.140007740
mov rcx, rax
call fcn.14000bca0
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x61]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x61]
call fcn.140007840
mov rcx, rax
call fcn.14000bc80
mov edx, 2
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x62]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x62]
call fcn.140007940
mov rcx, rax
call fcn.14000bc60
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x63]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x63]
call fcn.140007a20
mov rcx, rax
call fcn.14000bc40
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x64]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x64]
call fcn.140007b00
mov rcx, rax
call fcn.14000bc20
mov edx, 2
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x65]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x65]
call fcn.140007be0
mov rcx, rax
call fcn.14000bc00
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x66]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x66]
call fcn.140007cc0
mov rcx, rax
call fcn.14000bb30
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x67]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x67]
call fcn.140007dc0
mov rcx, rax
call fcn.14000bb10
mov edx, 2
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x68]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x68]
call fcn.140007ee0
mov rcx, rax
call fcn.14000baf0
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x69]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x69]
call fcn.140007fc0
mov rcx, rax
call fcn.14000bad0
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x6a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x6a]
call fcn.1400080a0
mov rcx, rax
call fcn.14000bab0
mov edx, 2
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x6b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x6b]
call fcn.140008180
mov rcx, rax
call fcn.14000ba90
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x6c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x6c]
call fcn.140008260
mov rcx, rax
call fcn.14000b9c0
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x6d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x6d]
call fcn.140008370
mov rcx, rax
call fcn.14000b9a0
mov edx, 2
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x6e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x6e]
call fcn.140008490
mov rcx, rax
call fcn.14000b980
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x6f]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x6f]
call fcn.140008570
mov rcx, rax
call fcn.14000b960
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x70]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x70]
call fcn.140008650
mov rcx, rax
call fcn.14000b940
mov edx, 2
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x71]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x71]
call fcn.140008730
mov rcx, rax
call fcn.14000b920
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x72]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x72]
call fcn.140008810
mov rcx, rax
call fcn.14000b900
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x73]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x73]
call fcn.140008920
mov rcx, rax
call fcn.14000b8e0
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x74]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x74]
call fcn.140008a00
mov rcx, rax
call fcn.14000b8c0
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x75]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x75]
call fcn.140008ae0
mov rcx, rax
call fcn.14000b8a0
mov edx, 2
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x76]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x76]
call fcn.140008bc0
mov rcx, rax
call fcn.14000b880
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x77]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x77]
call fcn.140008ca0
mov rcx, rax
call fcn.14000b7b0
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x78]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x78]
call fcn.140008d90
mov rcx, rax
call fcn.14000b790
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x79]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x79]
call fcn.140008e70
mov rcx, rax
call fcn.14000b770
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x7a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x7a]
call fcn.140008f50
mov rcx, rax
call fcn.14000b750
mov edx, 4
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x7b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x7b]
call fcn.140009030
mov rcx, rax
call fcn.14000b730
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x7c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x7c]
call fcn.140009110
mov rcx, rax
call fcn.14000b710
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x7d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x7d]
call fcn.140009220
mov rcx, rax
call fcn.14000b6f0
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x7e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x7e]
call fcn.140009300
mov rcx, rax
call fcn.14000b6d0
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x7f]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x7f]
call fcn.1400093e0
mov rcx, rax
call fcn.14000b6b0
mov edx, 4
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x80]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x80]
call fcn.1400094c0
mov rcx, rax
call fcn.14000b690
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x81]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x81]
call fcn.1400095a0
mov rcx, rax
call fcn.14000b5c0
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x82]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x82]
call fcn.1400096e0
mov rcx, rax
call fcn.14000b5a0
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x83]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x83]
call fcn.1400097c0
mov rcx, rax
call fcn.14000b580
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x84]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x84]
call fcn.1400098a0
mov rcx, rax
call fcn.14000b560
mov edx, 4
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x85]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x85]
call fcn.140009980
mov rcx, rax
call fcn.14000b540
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x86]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x86]
call fcn.140009a60
mov rcx, rax
call fcn.14000b520
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x87]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x87]
call fcn.140009b60
mov rcx, rax
call fcn.14000b500
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x88]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x88]
call fcn.140009c40
mov rcx, rax
call fcn.14000b4e0
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x89]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x89]
call fcn.140009d20
mov rcx, rax
call fcn.14000b4c0
mov edx, 4
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x8a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x8a]
call fcn.140009e00
mov rcx, rax
call fcn.14000b4a0
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x8b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x8b]
call fcn.140009ee0
mov rcx, rax
call fcn.14000b3d0
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x8c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x8c]
call fcn.14000a000
mov rcx, rax
call fcn.14000b3b0
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x8d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x8d]
call fcn.14000a0e0
mov rcx, rax
call fcn.14000b390
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x8e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x8e]
call fcn.14000a1c0
mov rcx, rax
call fcn.14000b370
mov edx, 4
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x8f]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x8f]
call fcn.14000a2a0
mov rcx, rax
call fcn.14000b350
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x90]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x90]
call fcn.14000a380
mov rcx, rax
call fcn.14000b280
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x91]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x91]
call fcn.14000a480
mov rcx, rax
call fcn.14000b260
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x92]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x92]
call fcn.14000a560
mov rcx, rax
call fcn.14000b240
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x93]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x93]
call fcn.14000a640
mov rcx, rax
call fcn.14000b220
mov edx, 4
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x94]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x94]
call fcn.14000a720
mov rcx, rax
call fcn.14000b200
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x95]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x95]
call fcn.14000a800
mov rcx, rax
call fcn.14000b130
mov edx, 0xf
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x96]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x96]
call fcn.14000a910
mov rcx, rax
call fcn.14000b060
mov edx, 0xe
mov rcx, rax
call fcn.140010920
lea rax, [rsp + 0x97]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x97]
call fcn.14000a9f0
mov rcx, rax
call fcn.14000af90
mov rcx, rax
call fcn.14001c244
lea rax, [rsp + 0x98]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x98]
call fcn.14000ab70
mov rcx, rax
call fcn.14000aec0
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0x99]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x99]
call fcn.14000acc0
mov rcx, rax
call fcn.14000adf0
mov qword [rsp + 0xf0], rax
mov dword [rsp + 0x9c], 0
cmp dword [rsp + 0x9c], 0
jne 0x140004707
mov rcx, qword [rsp + 0xf0]
call fcn.1400033e0
mov dword [rsp + 0x9c], eax
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400046dc
mov r8d, dword [rsp + 0x9c]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rsp + 0xa0], rax
cmp qword [rsp + 0xa0], 0
je 0x140004836
cmp qword [rsp + 0xa0], 0xffffffffffffffff
je 0x140004836
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x104
xor edx, edx
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0xa8], 0xffffffffffffffff
inc qword [rsp + 0xa8]
mov rax, qword [rsp + 0xf8]
mov rcx, qword [rsp + 0xa8]
cmp byte [rax + rcx], 0
jne 0x14000478a
mov rax, qword [rsp + 0xa8]
inc rax
mov qword [rsp + 0x20], 0
mov r9, rax
mov r8, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x20], rax
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov qword [rsp + 0xd0], rax
cmp qword [rsp + 0xd0], 0
je 0x140004836
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0xa0], 0
je 0x14000484f
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp + 0xb4], 0
lea rcx, [rsp + 0x130]
call fcn.14000cd10
mov eax, dword [rsp + 0xb4]
jmp 0x140004961
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.1400133a0
add rsp, 0x290
pop rdi
ret