Function at 0x14001d630
Capabilities:
Create thread
Inject dll
Inject thread

Disassembly:
mov r11, rsp
mov qword [r11 + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa0
movaps xmmword [r11 - 0x48], xmm6
mov rax, qword [0x1401b6080]
xor rax, rsp
mov qword [rsp + 0x88], rax
mov r15, rdx
mov qword [r11 - 0x80], rdx
mov r14, rcx
mov qword [rsp + 0x50], rcx
mov qword [r11 - 0x70], rcx
mov qword [r11 - 0x68], rdx
lea rdx, str.Grand_Theft_Auto_V
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14001d6a3
lea r8, str.Injection_failed__Grand_theft_Auto_V_is_not_found
lea rdx, str.Error
mov ecx, Ordinal_200
call fcn.14007c9c0
mov rcx, r15
cmp qword [r15 + 0x18], 0xf
jbe 0x14001d6b0
mov rcx, qword [r15]
call qword [sym.imp.KERNEL32.dll_GlobalAddAtomA]
lea rdx, str.Grand_Theft_Auto_V
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
xor ebp, ebp
test rax, rax
je 0x14001d8dc
lea r8, str.Attached_to_GTAV.exe
lea rdx, str.Success
lea ecx, [rbp + 0x54]
call fcn.14007c9c0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov esi, ebp
lea eax, [rbp + 0x64]
mov ebp, 0xff
movabs r15, 0x7ffffffff1194d7f
movabs r14, 0x7fffffffffffffff
movabs r12, 0x311cdad160000
movabs r13, 0x112e0be826d694b3
movsd xmm6, qword [0x1401a3130]
cmp esi, eax
cmovg esi, eax
lea rdx, str.Injecting__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140010620
xor ebx, ebx
nop dword [rax + rax]
cmp ebx, esi
jge 0x14001d758
mov dl, 0x3d
jmp 0x14001d75e
mov dl, 0x3e
je 0x14001d75e
mov dl, reloc.WLDAP32.dll_Ordinal_32
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400228e0
inc ebx
cmp ebx, 0x64
jl 0x14001d750
lea rdx, [0x140198898]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140010620
mov edx, esi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x140198894]
call fcn.140010620
mov rcx, rax
mov dl, reloc.WS2_32.dll_listen
call fcn.1400228e0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
lea rcx, [rsp + 0x40]
call fcn.14001d550
mov rax, qword [rsp + 0x40]
cmp rax, r15
je 0x14001d7dc
mov ecx, 1
cmovl ecx, ebp
test cl, cl
lea rdi, [rax + 0xee6b280]
js 0x14001d7e0
mov rdi, r14
nop
lea rcx, [rsp + 0x48]
call fcn.14001d550
mov rbx, qword [rsp + 0x48]
cmp rdi, rbx
je 0x14001d85b
mov eax, 1
cmovl eax, ebp
test al, al
jle 0x14001d85b
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
imul rcx, rax, 0x64
mov rax, rdi
sub rax, rbx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
comisd xmm0, xmm6
jbe 0x14001d823
add rcx, r12
jmp 0x14001d826
add rcx, rax
mov rax, r13
imul rcx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rsp + 0x78], rdx
imul eax, edx, 0x3b9aca00
sub ecx, eax
mov dword [rsp + 0x80], ecx
lea rcx, [rsp + 0x78]
call qword [sym.imp.MSVCP140.dll__Thrd_sleep]
jmp 0x14001d7e0
cmp esi, 0x64
je 0x14001d896
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r9d, eax
mov eax, 0x66666667
imul r9d
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea r8d, [rdx + rdx*4]
add r8d, r8d
sub r9d, r8d
add esi, r9d
cmp esi, 0x64
mov eax, 0x64
jne 0x14001d733
lea rdx, [0x140022ab0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, str.Succesfuly_injected_Virtual_X_...
lea rdx, str.Success
mov ecx, 0x54
call fcn.14007c9c0
mov byte [0x1401ee264], 0
mov byte [0x1401ee263], 1
mov r14, qword [rsp + 0x50]
mov r15, qword [rsp + 0x58]
xor ebp, ebp
lea rdx, str.Grand_Theft_Auto_V
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
lea rdx, [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rsp + 0x60]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
mov rcx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x14001d91b
mov rcx, qword [r14]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rcx + r8], 0
jne 0x14001d925
inc r8
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x1000
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rsi, rax
mov r9, rbx
cmp qword [r14 + 0x18], 0xf
jbe 0x14001d970
mov rcx, qword [r14]
nop dword [rax + rax]
inc r9
cmp byte [rcx + r9], 0
jne 0x14001d960
mov r8, rcx
jmp 0x14001d97d
inc r9
cmp byte [r14 + r9], 0
jne 0x14001d970
mov r8, r14
inc r9
mov qword [rsp + 0x20], rbp
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x1401988c8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r9, rax
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], rsi
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rax, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x14001d9f0
mov rax, qword [r14]
nop dword [rax + rax]
lea rbx, [rbx + 1]
cmp byte [rax + rbx], 0
jne 0x14001d9f0
lea r8, [rbx + 1]
mov r9d, 0x8000
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x14001da4b
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x14001da46
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001dad4
mov rcx, r8
call fcn.1400cf324
mov qword [r14 + 0x10], rbp
mov qword [r14 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r14], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x14001da91
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x14001da8c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001dadb
mov rcx, r8
call fcn.1400cf324
mov qword [r15 + 0x10], rbp
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r15], 0
mov rcx, qword [rsp + 0x88]
xor rcx, rsp
call fcn.1400cf080
mov rbx, qword [rsp + 0xf0]
movaps xmm6, xmmword [rsp + 0x90]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3