Function at 0x140002ae0
Capabilities:
Create thread
Download url
Enumerate process modules
Execute command
Inject thread
Receive data
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4c0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x4b0], rax
mov rdi, rdx
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xf7
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rdi, qword [rdi]
mov r15, 0xffffffffffffffff
mov rax, r15
nop dword [rax]
inc rax
cmp byte [rdi + rax], 0
jne 0x140002b60
xor r14d, r14d
xor esi, esi
xor ecx, ecx
test rax, rax
je 0x140002ba6
nop word [rax + rax]
lea rdx, [rcx + 1]
movzx r8d, byte [rdx + rdi - 1]
cmp r8b, 0x5b
je 0x140002b9b
cmp r8b, 0x5d
jne 0x140002b9e
mov rsi, rcx
jmp 0x140002b9e
mov r14, rdx
mov rcx, rdx
cmp rdx, rax
jb 0x140002b80
mov rbx, rsi
sub rbx, r14
lea rcx, [rbx + 1]
call fcn.14000cd9c
mov r13, rax
lea rdx, [r14 + rdi]
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r13], 0
lea rdx, str.Russian
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
lea rcx, str.OnlyHacks_Loader
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov edi, 9
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n_Running_OnlyHacks_Loader..._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x90], 0x3e8
lea rcx, [rsp + 0x90]
call fcn.1400055c0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._______________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
mov r12d, 0xf
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov qword [rsp + 0x90], 0x19
lea rcx, [rsp + 0x90]
call fcn.1400055c0
lea rdx, str._______OnlyHack.xyz_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x90], 0x19
lea rcx, [rsp + 0x90]
call fcn.1400055c0
lea rdx, str._TG
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x90], 0x19
lea rcx, [rsp + 0x90]
call fcn.1400055c0
lea rdx, str._YT
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x90], 0x19
lea rcx, [rsp + 0x90]
call fcn.1400055c0
lea rdx, str._VK
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x90], 0x19
lea rcx, [rsp + 0x90]
call fcn.1400055c0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.______________________________
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x90], 0x1f4
lea rcx, [rsp + 0x90]
call fcn.1400055c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x140], xmm0
xor eax, eax
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], r12
mov byte [rsp + 0x140], al
mov dword [rsp + 0x78], eax
mov ebx, 0xe
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000f978]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
mov rcx, rax
lea rdx, str.Grand_Theft_Auto_V
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x90], 0x19
lea rcx, [rsp + 0x90]
call fcn.1400055c0
lea rdx, [0x14000f990]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
mov rcx, rax
lea rdx, str.1.69
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x90], 0x19
lea rcx, [rsp + 0x90]
call fcn.1400055c0
lea rdx, [0x14000f9a8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
mov rcx, rax
lea rdx, str.3274
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x90], 0x19
lea rcx, [rsp + 0x90]
call fcn.1400055c0
lea rdx, str._n___
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
mov rcx, rax
mov rdx, r13
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x90], 0x19
lea rcx, [rsp + 0x90]
call fcn.1400055c0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.______________________________
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
mov rcx, rax
lea rdx, [0x14000f9c4]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x90], 0x1f4
lea rcx, [rsp + 0x90]
call fcn.1400055c0
test r14, r14
je 0x1400047cd
test rsi, rsi
je 0x1400047cd
lea rdx, str.Grand_Theft_Auto_V
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
test rax, rax
jne 0x140003050
mov ecx, 0xfffffff5
mov r14d, 0xc
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fa18]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fa40]
jmp 0x14000482d
lea rdx, [rsp + 0x78]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0x100], xmm0
xor r14d, r14d
mov qword [rsp + 0x110], r14
mov qword [rsp + 0x118], r14
mov r8d, 0x28
lea rdx, str.https:__onlyhack.xyz_auth_check.php_key
lea rcx, [rsp + 0x100]
call fcn.140005b80
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
mov qword [rsp + 0xb0], r14
mov qword [rsp + 0xb8], r12
mov byte [rsp + 0xa0], r14b
lea rcx, str.start_https:__onlyhack.xyz_oops_key.php
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fae0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [rsp + 0xa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400056c0
lea rcx, [rsp + 0x48]
call fcn.1400048e0
nop
lea rdx, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0xf
cmova rdx, qword [rsp + 0xa0]
add rdx, qword [rsp + 0xb0]
lea rcx, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0xf
cmova rcx, qword [rsp + 0xa0]
mov dword [rsp + 0x20], 0x10
mov r9, rax
call fcn.140006490
movzx ebx, al
lea rcx, [rsp + 0x48]
call fcn.140005030
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140003199
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test rax, rax
je 0x140003199
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rax
call r8
test bl, bl
jne 0x140003301
mov ecx, 0xfffffff5
mov r14d, 0xc
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fb08]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
mov r12d, 0xa
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fb20]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov ebx, 0xf
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.start_https:__onlyhack.xyz_oops_key.php
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, rbx
jbe 0x14000329c
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003297
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000475c
call fcn.14000cd94
xor eax, eax
mov qword [rsp + 0xb0], rax
mov byte [rsp + 0xa0], al
mov qword [rsp + 0xb8], rbx
mov rdx, qword [rsp + 0x118]
cmp rdx, 0xf
jbe 0x140004857
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400032f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400047c6
call fcn.14000cd94
jmp 0x140004857
mov rdi, qword [rsp + 0xb0]
lea r9, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0xf
cmova r9, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x118]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x140003378
lea rax, [rdi + rsi]
mov qword [rsp + 0x110], rax
lea rbx, [rsp + 0x100]
cmp rcx, 0xf
cmova rbx, qword [rsp + 0x100]
lea rcx, [rbx + rsi]
mov r8, rdi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov byte [rax + rsi], 0
jmp 0x14000338d
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x100]
call fcn.1400059f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x120], xmm0
mov rbx, r14
mov qword [rsp + 0x130], rbx
mov rsi, r12
mov qword [rsp + 0x138], r12
mov byte [rsp + 0x120], bl
lea rdx, [rsp + 0x100]
cmp qword [rsp + 0x118], 0xf
cmova rdx, qword [rsp + 0x100]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, [rsp + 0x80]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLOpenBlockingStreamA]
test eax, eax
jne 0x1400036f6
mov rcx, qword [rsp + 0x80]
mov rax, qword [rcx]
lea r9, [rsp + 0x90]
mov r8d, 0x1f4
lea rdx, [rsp + 0x160]
call qword [rax + 0x18]
test eax, eax
jne 0x1400034d2
nop dword [rax + rax]
mov eax, dword [rsp + 0x90]
test eax, eax
je 0x1400034d2
mov edi, eax
mov rax, rsi
sub rax, rbx
cmp rdi, rax
ja 0x140003479
lea rax, [rbx + rdi]
mov qword [rsp + 0x130], rax
lea rax, [rsp + 0x120]
cmp rsi, 0xf
cmova rax, qword [rsp + 0x120]
add rbx, rax
mov r8d, edi
lea rdx, [rsp + 0x160]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x140003496
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x160]
mov rdx, rdi
lea rcx, [rsp + 0x120]
call fcn.1400059f0
mov rcx, qword [rsp + 0x80]
mov rax, qword [rcx]
lea r9, [rsp + 0x90]
mov r8d, 0x1f4
lea rdx, [rsp + 0x160]
call qword [rax + 0x18]
mov rsi, qword [rsp + 0x138]
mov rbx, qword [rsp + 0x130]
test eax, eax
je 0x140003420
mov rcx, qword [rsp + 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rcx, [rsp + 0x120]
mov rdi, qword [rsp + 0x120]
cmp rsi, 0xf
cmova rcx, rdi
cmp rbx, 5
jne 0x140003557
mov r8, rbx
lea rdx, str.VALID
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140003557
mov ecx, 0xfffffff5
mov r12d, 0xa
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fb58]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140003704
mov ecx, 0xfffffff5
mov r14d, 0xc
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fb08]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
mov r12d, 0xa
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fb68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov ebx, 0xf
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.start_https:__t.me_OnlyHacks_bot
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
cmp rsi, rbx
jbe 0x14000364a
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140003641
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003641
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.14000cd94
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0xf
jbe 0x140003690
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000368b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000368b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000cd94
xor eax, eax
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], rbx
mov byte [rsp + 0xa0], al
mov rdx, qword [rsp + 0x118]
cmp rdx, 0xf
jbe 0x140004857
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400032f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400032f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r12d, 0xa
mov rdi, qword [rsp + 0x120]
mov edx, dword [rsp + 0x78]
mov ecx, 0x18
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x14000379b
mov ecx, 0xfffffff5
mov r14d, 0xc
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000f7f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000f818]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400037fd
mov dword [rsp + 0x160], 0x238
lea rdx, [rsp + 0x160]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
je 0x140003956
nop
lea rcx, [rsp + 0x190]
mov rax, r15
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400037d0
test rax, rax
je 0x1400038f4
lea rdx, [rsp + 0x160]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x1400037c0
mov r14d, 0xc
mov ebx, 0xb
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fbb8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x90], 0x6d6
lea rcx, [rsp + 0x90]
call fcn.1400055c0
lea rax, str.C:OnlyHacks_Loader_
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 0x14
call fcn.14000db70
movaps xmm0, xmmword [rsp + 0x90]
movdqa xmmword [rsp + 0x90], xmm0
lea r8, [rsp + 0x90]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.140001b70
nop
lea rcx, [rsp + 0x48]
call fcn.1400026e0
movzx ebx, al
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x140003a12
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a0d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 0xfffffff5
mov r14d, 0xc
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000f858]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov ebx, 0xf
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xor r14d, r14d
jmp 0x14000396f
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [rsp + 0x40], 0
je 0x1400037f7
mov ebx, 0xf
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
cmp rsi, 0xf
jbe 0x1400039b5
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400039ac
mov rdi, qword [rdi - 8]
sub rax, rdi
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004712
mov rcx, rdi
call fcn.14000cd94
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0xf
jbe 0x1400039f8
inc rdx
mov rcx, qword [rsp + 0xa0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x1400039f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000475c
call fcn.14000cd94
mov qword [rsp + 0xb0], r14
mov byte [rsp + 0xa0], 0
jmp 0x1400032ad
call fcn.14000cd94
test bl, bl
jne 0x140003b05
lea rax, str.C:OnlyHacks_Loader_
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 0x14
call fcn.14000db70
movaps xmm0, xmmword [rsp + 0x90]
movdqa xmmword [rsp + 0x90], xmm0
lea r8, [rsp + 0x90]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.140001b70
nop
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 7
cmova rcx, qword [rsp + 0x48]
call fcn.14000dcac
shr rax, 0x20
test eax, eax
jne 0x140004889
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x140003ac7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ac2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003ac2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000cd94
jmp 0x140003b05
xorps xmm0, xmm0
movups xmmword [rsp + 0xe0], xmm0
xor ebx, ebx
mov qword [rsp + 0xf0], rbx
mov qword [rsp + 0xf8], rbx
mov r8d, 0x2c
lea rdx, str.https:__onlyhacks.site_files_gtav_dlls_3274_
lea rcx, [rsp + 0xe0]
call fcn.140005b80
nop
mov rdx, r13
lea rcx, [rsp + 0xe0]
call fcn.140004cc0
mov rdx, qword [rsp + 0xf0]
mov r8, qword [rsp + 0xf8]
mov rax, r8
sub rax, rdx
lea rcx, [rsp + 0xe0]
cmp rax, 4
jb 0x140003b99
lea rax, [rdx + 4]
mov qword [rsp + 0xf0], rax
cmp r8, 0xf
cmova rcx, qword [rsp + 0xe0]
mov eax, dword [str..dll]
mov dword [rcx + rdx], eax
mov byte [rcx + rdx + 4], bl
jmp 0x140003bb3
mov qword [rsp + 0x20], 4
lea r9, str..dll
mov edx, 4
call fcn.1400059f0
xorps xmm0, xmm0
movups xmmword [rsp + 0xc0], xmm0
mov qword [rsp + 0xd0], rbx
mov qword [rsp + 0xd8], rbx
mov r8d, 0x14
lea rdx, str.C:OnlyHacks_Loader_
lea rcx, [rsp + 0xc0]
call fcn.140005b80
nop
mov rdx, r13
lea rcx, [rsp + 0xc0]
call fcn.140004cc0
mov rcx, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0xd8]
mov rax, rdx
sub rax, rcx
cmp rax, 0xa
jb 0x140003c51
lea rax, [rcx + 0xa]
mov qword [rsp + 0xd0], rax
lea rbx, [rsp + 0xc0]
cmp rdx, 0xf
cmova rbx, qword [rsp + 0xc0]
add rbx, rcx
mov r8, r12
lea rdx, str..OnlyHacks
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xa], 0
jmp 0x140003c6d
mov qword [rsp + 0x20], r12
lea r9, str..OnlyHacks
mov rdx, r12
lea rcx, [rsp + 0xc0]
call fcn.1400059f0
call qword [sym.imp.libcurl.dll_curl_easy_init]
mov rbx, rax
test rax, rax
je 0x1400045c4
lea rcx, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 0xf
cmova rcx, qword [rsp + 0xc0]
lea rdx, [0x14000fc54]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov r13, rax
mov qword [rsp + 0x90], rax
test rax, rax
jne 0x140003e00
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fc58]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov ebx, 0xf
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000f818]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0xd8]
cmp rdx, 0xf
jbe 0x140003d85
inc rdx
mov rcx, qword [rsp + 0xc0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140003d80
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004662
call fcn.14000cd94
xor r14d, r14d
mov byte [rsp + 0xc0], r14b
mov qword [rsp + 0xd8], rbx
mov qword [rsp + 0xd0], r14
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0xf
jbe 0x140003de3
inc rdx
mov rcx, qword [rsp + 0xe0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140003dde
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400046c3
call fcn.14000cd94
mov qword [rsp + 0xf0], r14
mov qword [rsp + 0xf8], rbx
mov byte [rsp + 0xe0], 0
jmp 0x14000397d
xor r8d, r8d
mov edx, 0x40
mov rcx, rbx
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
xor r8d, r8d
mov edx, 0x51
mov rcx, rbx
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
lea r8, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 0xf
cmova r8, qword [rsp + 0xe0]
mov edx, 0x2712
mov rcx, rbx
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
lea r8, [0x140002ad0]
mov edx, 0x4e2b
mov rcx, rbx
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
mov r8, r13
mov edx, 0x2711
mov rcx, rbx
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
mov rcx, rbx
call qword [sym.imp.libcurl.dll_curl_easy_perform]
mov r13d, eax
test eax, eax
je 0x140003f55
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n____
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov ebx, 0xf
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cmp r13d, 7
jne 0x140003ef4
lea rdx, [0x14000fca8]
jmp 0x140003d1f
cmp r13d, 2
jne 0x140003f06
lea rdx, [0x14000fcc8]
jmp 0x140003d1f
cmp r13d, 3
jne 0x140003f18
lea rdx, [0x14000fce8]
jmp 0x140003d1f
lea rdx, [0x14000fd00]
call fcn.1400053a0
mov rbx, rax
mov ecx, r13d
call qword [sym.imp.libcurl.dll_curl_easy_strerror]
mov rdx, rax
mov rcx, rbx
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ebx, 0xf
jmp 0x140003d34
mov rcx, rbx
call qword [sym.imp.libcurl.dll_curl_easy_cleanup]
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea rax, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 0xf
cmova rax, qword [rsp + 0xc0]
mov qword [rsp + 0x90], rax
nop
inc r15
cmp byte [rax + r15], 0
jne 0x140003f90
mov qword [rsp + 0x98], r15
call fcn.14000db70
movaps xmm0, xmmword [rsp + 0x90]
movdqa xmmword [rsp + 0x90], xmm0
lea r8, [rsp + 0x90]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.140001b70
nop
lea rcx, [rsp + 0x48]
call fcn.1400026e0
movzx ebx, al
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x14000401f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000401a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000401a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000cd94
test bl, bl
jne 0x14000408e
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fd38]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
mov rcx, rax
lea rdx, [0x14000f9c4]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov ebx, 0xf
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
jmp 0x140003d34
lea rcx, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 0xf
cmova rcx, qword [rsp + 0xc0]
xor r9d, r9d
lea r8, [rsp + 0x3a0]
mov edx, 0x104
call qword [sym.imp.KERNEL32.dll_GetFullPathNameA]
test eax, eax
jne 0x1400040e6
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fd68]
jmp 0x140004042
mov r8d, dword [rsp + 0x78]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
jne 0x140004124
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fda0]
jmp 0x140004042
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r15, rax
test rax, rax
jne 0x14000416f
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fdc0]
jmp 0x140004042
xor r13d, r13d
mov qword [rsp + 0x20], r13
mov r9d, 0x104
lea r8, [rsp + 0x3a0]
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x140004352
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fde0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x14000f9c4]
mov rcx, rax
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ebx, 0xf
movzx edx, bx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0xd8]
cmp rdx, rbx
jbe 0x14000424f
inc rdx
mov rcx, qword [rsp + 0xc0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14000424a
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004662
call fcn.14000cd94
mov byte [rsp + 0xc0], 0
mov qword [rsp + 0xd8], rbx
mov qword [rsp + 0xd0], r13
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0xf
jbe 0x1400042aa
inc rdx
mov rcx, qword [rsp + 0xe0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x1400042a5
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400046c3
call fcn.14000cd94
mov byte [rsp + 0xe0], 0
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0xf0], r13
cmp rsi, 0xf
jbe 0x1400042fa
lea rdx, [rsi + 1]
cmp rdx, 0x1000
mov rax, rdi
jb 0x1400042f1
mov rdi, qword [rdi - 8]
sub rax, rdi
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004712
mov rcx, rdi
call fcn.14000cd94
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0xf
jbe 0x14000433d
inc rdx
mov rcx, qword [rsp + 0xa0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140004338
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000475c
call fcn.14000cd94
mov qword [rsp + 0xb0], r13
mov byte [rsp + 0xa0], 0
jmp 0x1400032ad
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r15
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
jne 0x14000439f
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.____
jmp 0x1400041b8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.___
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
mov rcx, rax
lea rdx, [0x14000f9c4]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov ebx, 0xf
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0xd8]
cmp rdx, rbx
jbe 0x140004473
inc rdx
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000446e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004662
call fcn.14000cd94
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xd8], rbx
mov byte [rsp + 0xc0], 0
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0xf
jbe 0x1400044ce
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400044c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400046c3
call fcn.14000cd94
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], rbx
mov byte [rsp + 0xe0], 0
cmp rsi, 0xf
jbe 0x14000451e
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140004515
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004712
mov rcx, rdi
call fcn.14000cd94
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0xf
jbe 0x140004561
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000455c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000475c
call fcn.14000cd94
mov qword [rsp + 0xb0], r13
mov qword [rsp + 0xb8], rbx
mov byte [rsp + 0xa0], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0xf
jbe 0x1400045bd
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400047c6
call fcn.14000cd94
nop
xor eax, eax
jmp 0x14000485c
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fd10]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov ebx, 0xf
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0xd8]
cmp rdx, rbx
jbe 0x14000466e
inc rdx
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004669
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004669
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000cd94
xor r14d, r14d
mov qword [rsp + 0xd0], r14
mov qword [rsp + 0xd8], rbx
mov byte [rsp + 0xc0], r14b
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0xf
jbe 0x1400046cf
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400046ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400046ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000cd94
mov qword [rsp + 0xf0], r14
mov qword [rsp + 0xf8], rbx
mov byte [rsp + 0xe0], 0
cmp rsi, 0xf
jbe 0x140004722
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140004719
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004719
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.14000cd94
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0xf
jbe 0x140004768
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004763
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004763
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000cd94
mov qword [rsp + 0xb0], r14
mov qword [rsp + 0xb8], rbx
mov byte [rsp + 0xa0], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0xf
jbe 0x140004857
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400032f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400032f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 0xfffffff5
mov r14d, 0xc
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000f9c8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000f9e0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400053a0
lea rdx, [0x140005580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov eax, 1
mov rcx, qword [rsp + 0x4b0]
xor rcx, rsp
call fcn.14000cd30
lea r11, [rsp + 0x4c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea r8, [rsp + 0x48]
mov edx, eax
call fcn.140002610
int3