Function at 0x1400797a0
Capabilities:
Allocate or change rwx memory
Create thread
Enumerate processes
Execute command
Inject thread
Schedule task via at
Set console window title
Spawn thread to rwx shellcode

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x370
mov rax, qword [0x140140800]
xor rax, rsp
mov qword [rsp + 0x368], rax
xor edi, edi
mov dword [rsp + 0x40], edi
lea rcx, str.Athena
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov byte [rsp + 0xf4], dil
mov ecx, 8
call fcn.1400e6c70
lea rcx, [rsp + 0xf4]
mov qword [rax], rcx
mov qword [rsp + 0x120], rax
mov esi, 1
lea rcx, [rsp + 0x108]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x1400811c0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x100], rax
test rax, rax
je 0x14007a578
cmp dword [rsp + 0x108], edi
je 0x14007a56c
movaps xmm0, xmmword [rsp + 0x100]
movdqa xmmword [rsp + 0x130], xmm0
lea rcx, [rsp + 0x130]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14007a56c
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x100], xmm0
lea rdx, str.Waiting_for_Roblox_process...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001ec0
lea rdx, [0x14007a970]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Roblox
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov r14, rax
mov qword [rsp + 0x120], rax
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x14007a54e
lea rcx, [0x140126ae4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 1
call fcn.1400e6c70
mov qword [rsp + 0x100], rax
or esi, 2
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x1400811f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14007a53e
cmp dword [rsp + 0x48], 0
je 0x14007a532
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x130], xmm0
lea rcx, [rsp + 0x130]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14007a532
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
call fcn.140078b70
test al, al
jne 0x14007a277
lea rcx, [rsp + 0x130]
call fcn.140077f20
mov rbx, rax
lea rcx, [rsp + 0x150]
call fcn.140077fd0
nop
mov r8d, 1
lea rdx, [0x14011df9c]
mov rcx, rax
call fcn.140002be0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
or esi, 4
mov r9, rbx
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0x1b8]
call fcn.140004660
or esi, 8
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140079a11
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140079a0b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140079a0b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6cb4
nop
mov rdx, qword [rsp + 0x168]
cmp rdx, 0xf
jbe 0x140079a57
inc rdx
mov rcx, qword [rsp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140079a52
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140079a52
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6cb4
mov qword [rsp + 0x160], rdi
mov qword [rsp + 0x168], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x150], 0
mov rdx, qword [rsp + 0x148]
cmp rdx, 0xf
jbe 0x140079ab9
inc rdx
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140079ab4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140079ab4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6cb4
mov qword [rsp + 0x140], rdi
mov qword [rsp + 0x148], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x130], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x198], xmm0
mov qword [rsp + 0x1a8], rdi
mov qword [rsp + 0x1b0], rdi
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.http:__209.38.234.222:3520
lea rcx, [rsp + 0x198]
call fcn.1400044d0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x160], rdi
mov qword [rsp + 0x168], rdi
mov r8d, reloc.WS2_32.dll_select
lea rdx, str._StartCheckpoints_
lea rcx, [rsp + 0x150]
call fcn.1400044d0
nop
lea r8, [rsp + 0x1b8]
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x198]
call fcn.140078240
test al, al
jne 0x140079b8a
lea rdx, str.Failed_to_start_checkpoints._Unable_to_connect_to_the_server_after_multiple_attempts.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001ec0
lea rdx, [0x14007a970]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14007a1a3
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x130]
call fcn.140005c30
mov rbx, rax
movabs rcx, 0x7fffffffffffffff
mov rdx, qword [rsp + 0x1a8]
sub rcx, rdx
mov r8, qword [rsp + 0x160]
cmp rcx, r8
jae 0x140079bca
call fcn.1400012a0
int3
lea r9, [rsp + 0x198]
cmp qword [rsp + 0x1b0], 0xf
cmova r9, qword [rsp + 0x198]
lea rax, [rsp + 0x150]
cmp qword [rsp + 0x168], 0xf
cmova rax, qword [rsp + 0x150]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rsp + 0x50]
call fcn.140002df0
or esi, 0x10
mov r9, rbx
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0x208]
call fcn.140004660
or esi, 0x20
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140079c73
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140079c6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140079c6d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6cb4
nop
mov rdx, qword [rsp + 0x148]
cmp rdx, 0xf
jbe 0x140079cb9
inc rdx
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140079cb4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140079cb4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6cb4
mov qword [rsp + 0x140], rdi
mov qword [rsp + 0x148], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x130], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x230], xmm0
movups xmmword [rsp + 0x240], xmm0
movups xmmword [rsp + 0x250], xmm0
movups xmmword [rsp + 0x260], xmm0
movups xmmword [rsp + 0x270], xmm0
movups xmmword [rsp + 0x280], xmm0
movups xmmword [rsp + 0x290], xmm0
movups xmmword [rsp + 0x2a0], xmm0
movups xmmword [rsp + 0x2b0], xmm0
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x40], 0x1388
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0x50]
call fcn.140001b60
nop
lea r8, [rsp + 0x40]
mov rdx, rax
lea rcx, [rsp + 0x230]
call fcn.14007a860
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140079d9c
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140079d97
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140079d97
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6cb4
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x50], 0
cmp dword [rsp + 0x230], 0xc8
je 0x140079df4
lea rdx, str.Failed_to_start_checkpoints._Server_returned_status_code:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001ec0
mov edx, dword [rsp + 0x230]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x14007a970]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14007a14e
mov qword [rsp + 0xb0], rdi
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0x130]
call fcn.14007aad0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x100], xmm0
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], rdi
mov r8d, recv
lea rdx, str.LinkvertiseUrl
lea rcx, [rsp + 0x100]
call fcn.1400044d0
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x130]
call fcn.14006d360
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x178], xmm0
mov qword [rsp + 0x188], rdi
mov ecx, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x190], rcx
mov byte [rsp + 0x178], 0
bts esi, 8
mov dword [rsp + 0x40], esi
cmp byte [rax], 3
je 0x140079ee4
mov rcx, rax
call fcn.14006d770
mov qword [rsp + 0x100], rax
lea r8, [rsp + 0x100]
lea rcx, [rsp + 0x78]
call fcn.140085160
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0xb8]
call fcn.14006e840
lea rdx, [0x14013bec0]
lea rcx, [rsp + 0xb8]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rdx, qword [rax + 8]
lea rax, [rsp + 0x178]
cmp rax, rdx
je 0x140079f17
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], rcx
jbe 0x140079f02
mov rdx, qword [rdx]
lea rcx, [rsp + 0x178]
call fcn.140001d60
mov rcx, qword [rsp + 0x190]
lea r8, [rsp + 0x178]
cmp rcx, 0xf
cmova r8, qword [rsp + 0x178]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
nop
adc eax, 0x71695
lea rdx, str.discord.gg_reversing__discord.gg_reversing__p1ty
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001ec0
lea rdx, [0x14007a970]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14007a021
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0xf
jbe 0x14007a067
inc rdx
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a062
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a062
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6cb4
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x1e0], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0xf
jbe 0x14007a0ca
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a0c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a0c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6cb4
nop
mov rdx, qword [rsp + 0x190]
cmp rdx, 0xf
jbe 0x14007a110
inc rdx
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a10b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a10b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6cb4
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x190], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x178], 0
movzx edx, byte [rsp + 0x130]
lea rcx, [rsp + 0x138]
call fcn.14006a270
nop
jmp 0x14007a14e
lea rcx, [rsp + 0x230]
call fcn.140003700
nop
mov rdx, qword [rsp + 0x220]
cmp rdx, 0xf
jbe 0x14007a1a3
inc rdx
mov rcx, qword [rsp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a19d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a19d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6cb4
nop
mov rdx, qword [rsp + 0x168]
cmp rdx, 0xf
jbe 0x14007a1ea
inc rdx
mov rcx, qword [rsp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a1e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a1e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6cb4
nop
mov rdx, qword [rsp + 0x1b0]
cmp rdx, 0xf
jbe 0x14007a231
inc rdx
mov rcx, qword [rsp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a22b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a22b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6cb4
nop
mov rdx, qword [rsp + 0x1d0]
cmp rdx, 0xf
jbe 0x14007a277
inc rdx
mov rcx, qword [rsp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a272
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a272
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6cb4
lea rdx, str.Valid_key._Enjoy_Athena.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001ec0
lea rdx, [0x14007a970]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14007a30f
mov dword [rsp + 0x230], 0x130
lea rdx, [rsp + 0x230]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14007a306
lea rdx, str.RobloxPlayerBeta.exe
lea rcx, [rsp + 0x25c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x14007a2ff
lea rdx, [rsp + 0x230]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14007a2d0
jmp 0x14007a306
mov edi, dword [rsp + 0x238]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp + 0xf0], edi
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
lea rcx, str.wintrust.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.WinVerifyTrust
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov dword [rsp + 0x360], 0x59c03148
mov word [rsp + 0x364], 0xe1ff
lea rax, [rsp + 0x170]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8d, 6
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
test eax, eax
jne 0x14007a398
lea r9, str.Failed_to_protect_WinVerifyTrust.
mov edx, 2
call fcn.14007abf0
lea r9, str.New_protection:_PAGE_EXECUTE_READWRITE.
mov edx, 1
call fcn.14007abf0
lea rax, [rsp + 0x200]
mov qword [rsp + 0x20], rax
mov r9d, 6
lea r8, [rsp + 0x360]
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x14007a3e5
lea r9, str.Failed_to_patch_WinVerifyTrust.
mov edx, 2
call fcn.14007abf0
lea rax, [rsp + 0x170]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 6
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
test eax, eax
jne 0x14007a41f
lea r9, str.Failed_to_protect_WinVerifyTrust.
mov edx, 2
call fcn.14007abf0
lea rdx, [rsp + 0xf0]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edi, eax
test eax, eax
jne 0x14007a447
lea r9, str.Window_thread_ID_is_invalid.
mov edx, 2
call fcn.14007abf0
xor edx, edx
mov r8d, 1
lea rcx, str.Athena.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov rbx, rax
test rax, rax
jne 0x14007a475
lea r9, str.Failed_to_find_module.
mov edx, 2
call fcn.14007abf0
lea rdx, str.NextHook
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
test rax, rax
jne 0x14007a49e
lea r9, str.Failed_to_find_module_hook.
mov edx, 2
call fcn.14007abf0
mov r9d, edi
mov r8, rbx
mov rdx, rsi
mov ecx, 3
call qword [sym.imp.USER32.dll_SetWindowsHookExA]
test rax, rax
jne 0x14007a4c8
lea r9, str.Module_hook_failed.
mov edx, 2
call fcn.14007abf0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, edi
call qword [sym.imp.USER32.dll_PostThreadMessageA]
test eax, eax
jne 0x14007a4ed
lea r9, str.Failed_to_post_thread_message.
mov edx, 2
call fcn.14007abf0
lea r9, str.Module_attached_successfully.
xor edx, edx
call fcn.14007abf0
lea r9, str.Press_END_to_toggle_overlay.
mov edx, 1
call fcn.14007abf0
lea rdx, str.Roblox
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov rcx, qword [0x140142788]
call fcn.140086a40
jmp 0x14007a530
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x48], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov qword [rsp + 0x120], WSAGetLastError
lea rcx, [rsp + 0x120]
call fcn.14007a9b0
jmp 0x1400798a0
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x108], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3