Function at 0x18002d490
Capabilities:
Create directory
Download url
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5f0]
sub rsp, 0x6f0
mov rax, qword [0x1801007a0]
xor rax, rsp
mov qword [rbp + 0x5e0], rax
xor r14d, r14d
mov dword [rsp + 0x50], r14d
lea rax, str.C:River_
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 9
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.180024bc0
nop
mov dword [rsp + 0x40], r14d
lea rbx, [0x18011cc68]
mov qword [rsp + 0x48], rbx
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.18009d310
cmp dword [rsp + 0x40], r14d
jne 0x18002e892
lea rcx, [rbp + 0x2a0]
call fcn.180025e00
lea rax, str.C:Scooby_
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 0xa
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.180024bc0
nop
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x48], rbx
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.18009d310
cmp dword [rsp + 0x40], r14d
jne 0x18002e8ab
lea rcx, [rbp + 0x2a0]
call fcn.180025e00
lea rax, str.C:ScoobySlot_
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 0xf
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.180024bc0
nop
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x48], rbx
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.18009d310
cmp dword [rsp + 0x40], r14d
jne 0x18002e8c4
lea rcx, [rbp + 0x2a0]
call fcn.180025e00
lea rax, str.C:ScoobyHeist_
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.180024bc0
nop
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x48], rbx
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.18009d310
cmp dword [rsp + 0x40], r14d
jne 0x18002e8dd
lea rcx, [rbp + 0x2a0]
call fcn.180025e00
lea rax, str.C:ScoobyOutfit_
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 0x11
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.180024bc0
nop
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x48], rbx
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.18009d310
cmp dword [rsp + 0x40], r14d
jne 0x18002e8f6
lea rcx, [rbp + 0x2a0]
call fcn.180025e00
lea rax, str.C:ScoobyRecovery_
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 0x13
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.180024bc0
nop
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x48], rbx
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.18009d310
cmp dword [rsp + 0x40], r14d
jne 0x18002e90f
lea rcx, [rbp + 0x2a0]
call fcn.180025e00
lea rax, str.C:ScoobyKiddions_
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 0x13
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.180024bc0
nop
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x48], rbx
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.18009d310
cmp dword [rsp + 0x40], r14d
jne 0x18002e928
lea rcx, [rbp + 0x2a0]
call fcn.180025e00
lea rax, str.C:ScoobyKiddionsScripts
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 0x1a
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.180024bc0
nop
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x48], rbx
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.18009d310
cmp dword [rsp + 0x40], r14d
jne 0x18002e941
lea rcx, [rbp + 0x2a0]
call fcn.180025e00
lea rcx, [0x1800c31a0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmkdir]
lea rcx, [0x1800c31b8]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmkdir]
lea rcx, [0x1800c31e0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmkdir]
lea rcx, [0x1800c31f8]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmkdir]
lea rcx, [0x1800c3218]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmkdir]
lea rcx, str.C:ScoobySTAT_EDITOR_.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmkdir]
lea rcx, [0x1800c3260]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmkdir]
lea rcx, [0x1800c3288]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmkdir]
lea rcx, [0x1800c32a8]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmkdir]
lea rcx, str.C:ScoobyRecovery_stat.txt
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmkdir]
lea rcx, str.C:ScoobyRecovery_stats.txt
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmkdir]
mov qword [rbp + 0x5c0], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x5d0], xmm0
mov byte [rbp + 0x5c0], r14b
lea rcx, [rbp + 0x190]
call fcn.180028100
nop
mov qword [rbp + 0x5a0], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x5b0], xmm0
mov byte [rbp + 0x5a0], r14b
lea r8d, [r14 + 0x15]
lea rdx, [0x1800c31a0]
lea rcx, [rbp + 0x5a0]
call fcn.1800207a0
nop
lea r8, [rbp + 0x5a0]
cmp qword [rbp + 0x5b8], 0x10
cmovae r8, qword [rbp + 0x5a0]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_937375414664454255_1037821823494127716_River_P_ESP.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x580], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x590], xmm0
mov byte [rbp + 0x580], r14b
lea r8d, [r14 + 0x15]
lea rdx, str.C:ScoobyYimMenu.dll
lea rcx, [rbp + 0x580]
call fcn.1800207a0
nop
lea r8, [rbp + 0x580]
cmp qword [rbp + 0x598], 0x10
cmovae r8, qword [rbp + 0x580]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1161541902856880150_1162260856084639764_YimMenu.dll
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x560], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x570], xmm0
mov byte [rbp + 0x560], r14b
lea r8d, [r14 + 0x1b]
lea rdx, str.C:Scooby_vehicle_names.txt
lea rcx, [rbp + 0x560]
call fcn.1800207a0
nop
lea r8, [rbp + 0x560]
cmp qword [rbp + 0x578], 0x10
cmovae r8, qword [rbp + 0x560]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1115964177887023146_1126181417135648818_vehicle_names.txt
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x540], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x550], xmm0
mov byte [rbp + 0x540], r14b
lea r8d, [r14 + 0x17]
lea rdx, str.C:Scoobyipl_names.txt
lea rcx, [rbp + 0x540]
call fcn.1800207a0
nop
lea r8, [rbp + 0x540]
cmp qword [rbp + 0x558], 0x10
cmovae r8, qword [rbp + 0x540]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1115964177887023146_1126181416787529930_ipl_names.txt
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x520], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x530], xmm0
mov byte [rbp + 0x520], r14b
lea r8d, [r14 + 0x1a]
lea rdx, str.C:Scoobyweapon_names.txt
lea rcx, [rbp + 0x520]
call fcn.1800207a0
nop
lea r8, [rbp + 0x520]
cmp qword [rbp + 0x538], 0x10
cmovae r8, qword [rbp + 0x520]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1115964177887023146_1126181416493920357_weapon_names.txt
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x500], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x510], xmm0
mov byte [rbp + 0x500], r14b
lea r8d, [r14 + 0x15]
lea rdx, [0x1800c3570]
lea rcx, [rbp + 0x500]
call fcn.1800207a0
nop
lea r8, [rbp + 0x500]
cmp qword [rbp + 0x518], 0x10
cmovae r8, qword [rbp + 0x500]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1115964177887023146_1126181429856968814_Xenos64.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x4e0], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x4f0], xmm0
mov byte [rbp + 0x4e0], r14b
lea r8d, [r14 + 0x21]
lea rdx, str.C:ScoobyXenosCurrentProfile.xpr
lea rcx, [rbp + 0x4e0]
call fcn.1800207a0
nop
lea r8, [rbp + 0x4e0]
cmp qword [rbp + 0x4f8], 0x10
cmovae r8, qword [rbp + 0x4e0]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1115964177887023146_1126964657509367918_XenosCurrentProfile.xpr
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x4c0], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x4d0], xmm0
mov byte [rbp + 0x4c0], r14b
lea r8d, [r14 + 0x1f]
lea rdx, [0x1800c32a8]
lea rcx, [rbp + 0x4c0]
call fcn.1800207a0
nop
lea r8, [rbp + 0x4c0]
cmp qword [rbp + 0x4d8], 0x10
cmovae r8, qword [rbp + 0x4c0]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1125425837110460518_1126193865272078437_GTAHaXUI.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x4a0], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x4b0], xmm0
mov byte [rbp + 0x4a0], r14b
lea r8d, [r14 + 0x1b]
lea rdx, str.C:ScoobyRecovery_stat.txt
lea rcx, [rbp + 0x4a0]
call fcn.1800207a0
nop
lea r8, [rbp + 0x4a0]
cmp qword [rbp + 0x4b8], 0x10
cmovae r8, qword [rbp + 0x4a0]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1035286351127515187_1074053015998312588_stat.txt
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x480], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x490], xmm0
mov byte [rbp + 0x480], r14b
lea r8d, [r14 + 0x1c]
lea rdx, str.C:ScoobyRecovery_stats.txt
lea rcx, [rbp + 0x480]
call fcn.1800207a0
nop
lea r8, [rbp + 0x480]
cmp qword [rbp + 0x498], 0x10
cmovae r8, qword [rbp + 0x480]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1035286351127515187_1074053016476450956_stats.txt
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x460], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x470], xmm0
mov byte [rbp + 0x460], r14b
lea r8d, [r14 + 0x22]
lea rdx, [0x1800c31b8]
lea rcx, [rbp + 0x460]
call fcn.1800207a0
nop
lea r8, [rbp + 0x460]
cmp qword [rbp + 0x478], 0x10
cmovae r8, qword [rbp + 0x460]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1161541902856880150_1162261875740901457_modest_menu.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x440], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x450], xmm0
mov byte [rbp + 0x440], r14b
lea r8d, [r14 + 0x1e]
lea rdx, str.C:ScoobyKiddions_themes.json
lea rcx, [rbp + 0x440]
call fcn.1800207a0
nop
lea r8, [rbp + 0x440]
cmp qword [rbp + 0x458], 0x10
cmovae r8, qword [rbp + 0x440]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_891365380797378610_1034077295197032549_themes.json
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x420], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x430], xmm0
mov byte [rbp + 0x420], r14b
lea r8d, [r14 + 0x1e]
lea rdx, str.C:ScoobyKiddionsconfig.json
lea rcx, [rbp + 0x420]
call fcn.1800207a0
nop
lea r8, [rbp + 0x420]
cmp qword [rbp + 0x438], 0x10
cmovae r8, qword [rbp + 0x420]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_937375414664454255_1034082199533793302_config.json
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x400], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x410], xmm0
mov byte [rbp + 0x400], r14b
lea r8d, [r14 + 0x38]
lea rdx, str.C:ScoobyKiddionsScripts1.64_Ultimate_Recovery_V4.lua
lea rcx, [rbp + 0x400]
call fcn.1800207a0
nop
lea r8, [rbp + 0x400]
cmp qword [rbp + 0x418], 0x10
cmovae r8, qword [rbp + 0x400]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1067905888842694687_1067908878387400794_1.64_Ultimate_Recovery_V4.lua
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x3e0], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x3f0], xmm0
mov byte [rbp + 0x3e0], r14b
lea r8d, [r14 + 0x3a]
lea rdx, str.C:ScoobyKiddionsScriptsAutomatic_Sell_Crate_AFK_Female
lea rcx, [rbp + 0x3e0]
call fcn.1800207a0
nop
lea r8, [rbp + 0x3e0]
cmp qword [rbp + 0x3f8], 0x10
cmovae r8, qword [rbp + 0x3e0]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1067905888842694687_1067909103772500120_Automatic_Sell_Crate_AFK_Female.lua
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x3c0], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x3d0], xmm0
mov byte [rbp + 0x3c0], r14b
lea r8d, [r14 + 0x38]
lea rdx, str.C:ScoobyKiddionsScriptsAutomatic_Sell_Crate_AFK_Male
lea rcx, [rbp + 0x3c0]
call fcn.1800207a0
nop
lea r8, [rbp + 0x3c0]
cmp qword [rbp + 0x3d8], 0x10
cmovae r8, qword [rbp + 0x3c0]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1067905888842694687_1067909104133218314_Automatic_Sell_Crate_AFK_Male.lua
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x3a0], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x3b0], xmm0
mov byte [rbp + 0x3a0], r14b
lea r8d, [r14 + 0x17]
lea rdx, [0x1800c31e0]
lea rcx, [rbp + 0x3a0]
call fcn.1800207a0
nop
lea r8, [rbp + 0x3a0]
cmp qword [rbp + 0x3b8], 0x10
cmovae r8, qword [rbp + 0x3a0]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1123986859907878984_1124088332721340487_Bot_.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x380], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x390], xmm0
mov byte [rbp + 0x380], r14b
lea r8d, [r14 + 0x18]
lea rdx, [0x1800c31f8]
lea rcx, [rbp + 0x380]
call fcn.1800207a0
nop
lea r8, [rbp + 0x380]
cmp qword [rbp + 0x398], 0x10
cmovae r8, qword [rbp + 0x380]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1123986859907878984_1124088432189255680_SlotBot_1.67_.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x360], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x370], xmm0
mov byte [rbp + 0x360], r14b
lea r8d, [r14 + 0x26]
lea rdx, [0x1800c3218]
lea rcx, [rbp + 0x360]
call fcn.1800207a0
nop
lea r8, [rbp + 0x360]
cmp qword [rbp + 0x378], 0x10
cmovae r8, qword [rbp + 0x360]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1161541902856880150_1162261876068073512_Heist_Editor_3.5.15_unknowncheats.me_.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x340], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x350], xmm0
mov byte [rbp + 0x340], r14b
lea r8d, [r14 + 0x22]
lea rdx, [0x1800c3260]
lea rcx, [rbp + 0x340]
call fcn.1800207a0
nop
lea r8, [rbp + 0x340]
cmp qword [rbp + 0x358], 0x10
cmovae r8, qword [rbp + 0x340]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1082486507274772602_1126357928467767427_Outfit_Editor.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x320], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x330], xmm0
mov byte [rbp + 0x320], r14b
lea r8d, [r14 + 0x1d]
lea rdx, [0x1800c3288]
lea rcx, [rbp + 0x320]
call fcn.1800207a0
nop
lea r8, [rbp + 0x320]
cmp qword [rbp + 0x338], 0x10
cmovae r8, qword [rbp + 0x320]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1125425837110460518_1126194065998893246_LSCHax.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rbp + 0x300], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x310], xmm0
mov byte [rbp + 0x300], r14b
lea r8d, [r14 + 0x2b]
lea rdx, [0x1800c3d60]
lea rcx, [rbp + 0x300]
call fcn.1800207a0
nop
lea r8, [rbp + 0x300]
cmp qword [rbp + 0x318], 0x10
cmovae r8, qword [rbp + 0x300]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1123986859907878984_1124089171355643995_WealthBoosterOverlay.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea r8d, [r14 + 6]
lea rdx, str.scooby
lea rbx, [0x18011cbc8]
mov rcx, rbx
call fcn.1800207a0
mov rcx, qword [0x18011cbd8]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 4
jb 0x18002e95a
cmp qword [0x18011cbe0], 0x10
cmovae rbx, qword [0x18011cbc8]
mov qword [rsp + 0x30], 4
lea rax, str..ytd
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r9, rbx
lea rcx, [rbp + 0x2a0]
call fcn.18001f6a0
lea rcx, [0x18011cc08]
call fcn.180003aa0
movups xmm0, xmmword [rbp + 0x2a0]
movups xmmword [0x18011cc08], xmm0
movups xmm1, xmmword [rbp + 0x2b0]
movups xmmword [0x18011cc18], xmm1
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x2b0], xmm0
mov byte [rbp + 0x2a0], r14b
lea rcx, [rbp + 0x2a0]
call fcn.180003aa0
lea r8d, [r14 + 6]
lea rdx, str.header
lea rcx, [0x18011cbe8]
call fcn.1800207a0
lea r8d, [r14 + 0xa]
lea rdx, str.Background
lea rcx, [0x18011cb68]
call fcn.1800207a0
lea r8d, [r14 + 6]
lea rdx, str.footer
lea rcx, [0x18011cb88]
call fcn.1800207a0
lea r8d, [r14 + 8]
lea rdx, str.selected
lea rcx, [0x18011cba8]
call fcn.1800207a0
lea r12, [0x180000000]
lea rax, [r12 + 0xc3038]
mov qword [rbp + 0x70], rax
lea rax, [0x1800c2d90]
mov qword [rbp + 0x80], rax
lea rcx, [rbp + 0x128]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x50], 0x3ff
xor r8d, r8d
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x70]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea r13, vtable.std::basic_fstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x70], r13
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb8]
mov dword [rbp + rcx + 0x6c], edx
lea rax, [rbp + 0x88]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x88]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
lea r15, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x88], r15
mov byte [rbp + 0x104], r14b
mov byte [rbp + 0xf9], r14b
lea rcx, [rbp + 0x88]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x108], r14
mov rax, qword [0x180177670]
mov qword [rbp + 0xfc], rax
mov qword [rbp + 0xf0], r14
lea r8d, [r14 + 3]
lea rsi, str.C:Scooby
mov rdx, rsi
lea rcx, [rbp + 0x88]
call fcn.180028440
test rax, rax
jne 0x18002e316
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x70]
add rcx, rax
xor r8d, r8d
lea edx, [r14 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], 9
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.180024bc0
mov edi, 0x7ff
lea rcx, [rbp + 0x2a0]
call fcn.1800260b0
movzx ebx, al
lea rcx, [rbp + 0x2a0]
call fcn.180025e00
test bl, bl
jne 0x18002e3b1
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], 9
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.180024bc0
mov edi, 0xfff
lea rcx, [rbp + 0x2a0]
cmp qword [rbp + 0x2b8], 8
cmovae rcx, qword [rbp + 0x2a0]
call fcn.1800a87b4
shr rax, 0x20
test eax, eax
jne 0x18002e883
lea rcx, [rbp + 0x2a0]
call fcn.180025e00
mov qword [rbp + 0x2e0], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x2f0], xmm0
mov byte [rbp + 0x2e0], 0
mov r8d, 0x14
lea rdx, str.C:Scooby_scooby.ytd
lea rcx, [rbp + 0x2e0]
call fcn.1800207a0
nop
lea r8, [rbp + 0x2e0]
cmp qword [rbp + 0x2f8], 0x10
cmovae r8, qword [rbp + 0x2e0]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1149158318091276392_1162265846765326457_scooby.ytd
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov rbx, qword [0x18011cd20]
lea rcx, [rsp + 0x40]
call fcn.18009d560
mov rcx, qword [rax]
mov qword [rbx], rcx
mov rsi, qword [0x18011cd20]
mov qword [rbp + 0x2a0], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x2b0], xmm0
mov byte [rbp + 0x2a0], 0
mov r8d, 0xa
lea rdx, str.scooby.ytd
lea rcx, [rbp + 0x2a0]
call fcn.1800207a0
nop
mov qword [rbp + 0x2c0], r14
movdqa xmm0, xmmword [0x1800db100]
movdqu xmmword [rbp + 0x2d0], xmm0
mov byte [rbp + 0x2c0], 0
mov r8d, 0x14
lea rdx, str.C:Scooby_scooby.ytd
lea rcx, [rbp + 0x2c0]
call fcn.1800207a0
nop
lea rbx, [rbp + 0x2c0]
cmp qword [rbp + 0x2d8], 0x10
cmovae rbx, qword [rbp + 0x2c0]
lea rax, [r12 + 0xc2e50]
mov qword [rsp + 0x58], rax
lea rcx, [rbp + 8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
bts edi, 0xc
mov dword [rsp + 0x50], edi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x58]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x58]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x58], rdi
mov rax, qword [rsp + 0x58]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x54], edx
lea rax, [rsp + 0x68]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov qword [rsp + 0x68], r15
mov byte [rbp - 0x1c], 0
mov byte [rbp - 0x27], 0
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp - 0x18], r14
mov rax, qword [0x180177670]
mov qword [rbp - 0x24], rax
mov qword [rbp - 0x30], r14
mov r8d, 1
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.180028440
test rax, rax
jne 0x18002e593
mov rax, qword [rsp + 0x58]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x58]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rsp + 0x58]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x58], rdi
mov rax, qword [rsp + 0x58]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x54], edx
mov rax, qword [rsp + 0x58]
movsxd rcx, dword [rax + 4]
mov ebx, dword [rsp + rcx + 0x68]
mov qword [rsp + rcx + 0x58], rdi
mov rax, qword [rsp + 0x58]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x54], edx
lea rcx, [rsp + 0x68]
call fcn.180028020
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
test bl, 6
jne 0x18002e63d
mov rax, qword [rsi]
lea r9, [rbp + 0x2a0]
cmp qword [rbp + 0x2b8], 0x10
cmovae r9, qword [rbp + 0x2a0]
lea rdx, [rbp + 0x2c0]
cmp qword [rbp + 0x2d8], 0x10
cmovae rdx, qword [rbp + 0x2c0]
lea rcx, [rsi + 8]
mov byte [rsp + 0x20], 0
mov r8b, 1
call rax
nop
lea rcx, [rbp + 0x2c0]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x2a0]
call fcn.180003aa0
lea rdx, str.yScooby_has_Injected__gOpen_scooby:_F5
lea rcx, str.Recon
call fcn.18001e1f0
lea rdx, str.Hello
lea rcx, str.Recon
call fcn.18001ddc0
nop
lea rcx, [rbp + 0x2e0]
call fcn.180003aa0
nop
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x70], r13
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb8]
mov dword [rbp + rcx + 0x6c], edx
lea rcx, [rbp + 0x88]
call fcn.180028020
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x128]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x300]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x320]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x340]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x360]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x380]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x3a0]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x3c0]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x3e0]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x400]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x420]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x440]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x460]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x480]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x4a0]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x4c0]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x4e0]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x500]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x520]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x540]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x560]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x580]
call fcn.180003aa0
nop
lea rcx, [rbp + 0x5a0]
call fcn.180003aa0
nop
mov rax, qword [rbp + 0x190]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x190], rax
mov rax, qword [rbp + 0x190]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x18c], edx
lea rcx, [rbp + 0x198]
call fcn.180028020
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x238]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x5c0]
call fcn.180003aa0
mov rcx, qword [rbp + 0x5e0]
xor rcx, rsp
call fcn.1800a8bf0
lea r11, [rsp + 0x6f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea r8, [rbp + 0x2a0]
mov edx, eax
call fcn.1800291c0
nop
lea r8, [rbp + 0x2a0]
lea rdx, [rsp + 0x40]
lea rcx, str.create_directories
call fcn.180026050
nop
lea r8, [rbp + 0x2a0]
lea rdx, [rsp + 0x40]
lea rcx, str.create_directories
call fcn.180026050
nop
lea r8, [rbp + 0x2a0]
lea rdx, [rsp + 0x40]
lea rcx, str.create_directories
call fcn.180026050
nop
lea r8, [rbp + 0x2a0]
lea rdx, [rsp + 0x40]
lea rcx, str.create_directories
call fcn.180026050
nop
lea r8, [rbp + 0x2a0]
lea rdx, [rsp + 0x40]
lea rcx, str.create_directories
call fcn.180026050
nop
lea r8, [rbp + 0x2a0]
lea rdx, [rsp + 0x40]
lea rcx, str.create_directories
call fcn.180026050
nop
lea r8, [rbp + 0x2a0]
lea rdx, [rsp + 0x40]
lea rcx, str.create_directories
call fcn.180026050
nop
lea r8, [rbp + 0x2a0]
lea rdx, [rsp + 0x40]
lea rcx, str.create_directories
call fcn.180026050
nop
call fcn.180020780
int3