Function at 0x140001880
Capabilities:
Enumerate processes
Execute command
Schedule task via at

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x298]
sub rsp, 0x370
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x140008040]
xor rax, rsp
mov qword [rbp + 0x230], rax
xor r14d, r14d
mov r15d, r14d
mov dword [rbp - 0x48], r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r14 + 3]
lea rcx, str..IoControl
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x140008748], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140002725
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x140001997
mov dword [rbp + 0x100], 0x130
lea rdx, [rbp + 0x100]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14000198e
nop
mov rbx, qword [0x140008780]
mov rdi, qword [0x140008788]
cmp rbx, rdi
je 0x14000197a
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140001960
mov rdx, qword [rbx]
lea rcx, [rbp + 0x12c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x1400019aa
add rbx, 0x20
cmp rbx, rdi
jne 0x140001953
lea rdx, [rbp + 0x100]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140001940
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x140008750], r14d
lea rdx, str.Failed_to_find_the_process_ID.
jmp 0x14000272c
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rbp + 0x108]
mov dword [0x140008750], ebx
test ebx, ebx
je 0x14000199e
lea rdx, str.Process_ID:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a00
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x140002bd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x48], r14
mov ecx, 0x20
call fcn.140003240
mov qword [rsp + 0x40], rax
movdqa xmm0, xmmword [0x1400057b0]
movdqu xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [str.FiveM_b1604_GTAProcess.exe]
movups xmmword [rax], xmm1
movsd xmm0, qword [0x140005578]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140005580]
mov word [rax + 0x18], cx
mov byte [rax + 0x1a], r14b
lea rcx, [rsp + 0x40]
call fcn.1400017b0
cmp dword [0x140008750], eax
sete bl
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140001a8c
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001a87
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001a87
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000358c
test bl, bl
je 0x140001aba
mov dword [0x140008774], 0x1efd4c8
mov dword [0x140008770], 0x247f840
mov dword [0x140008754], 0x2087780
lea rdx, str.Game_Version:_FiveM_b1604_GTAProcess.exe
jmp 0x140001d19
mov qword [rsp + 0x48], r14
mov ecx, 0x20
call fcn.140003240
mov qword [rsp + 0x40], rax
movdqa xmm0, xmmword [0x1400057b0]
movdqu xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [str.FiveM_b2060_GTAProcess.exe]
movups xmmword [rax], xmm1
movsd xmm0, qword [0x140005470]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140005478]
mov word [rax + 0x18], cx
mov byte [rax + 0x1a], r14b
lea rcx, [rsp + 0x40]
call fcn.1400017b0
cmp dword [0x140008750], eax
sete bl
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140001b55
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001b50
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001b50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000358c
test bl, bl
je 0x140001b83
mov dword [0x140008774], 0x1ec3828
mov dword [0x140008770], 0x24c8858
mov dword [0x140008754], 0x1f6a7e0
lea rdx, str.Game_Version:_FiveM_b2060_GTAProcess.exe
jmp 0x140001d19
mov qword [rsp + 0x48], r14
mov ecx, 0x20
call fcn.140003240
mov qword [rsp + 0x40], rax
movdqa xmm0, xmmword [0x1400057b0]
movdqu xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [str.FiveM_b2189_GTAProcess.exe]
movups xmmword [rax], xmm1
movsd xmm0, qword [0x140005490]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140005498]
mov word [rax + 0x18], cx
mov byte [rax + 0x1a], r14b
lea rcx, [rsp + 0x40]
call fcn.1400017b0
cmp dword [0x140008750], eax
sete bl
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140001c1e
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001c19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001c19
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000358c
test bl, bl
je 0x140001c4c
mov dword [0x140008774], 0x1ee18a8
mov dword [0x140008770], 0x24e6d90
mov dword [0x140008754], 0x1f888c0
lea rdx, str.Game_Version:_FiveM_b2189_GTAProcess.exe
jmp 0x140001d19
mov qword [rsp + 0x48], r14
mov ecx, 0x20
call fcn.140003240
mov qword [rsp + 0x40], rax
movdqa xmm0, xmmword [0x1400057b0]
movdqu xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [str.FiveM_b2699_GTAProcess.exe]
movups xmmword [rax], xmm1
movsd xmm0, qword [0x140005510]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140005518]
mov word [rax + 0x18], cx
mov byte [rax + 0x1a], r14b
lea rcx, [rsp + 0x40]
call fcn.1400017b0
cmp dword [0x140008750], eax
sete bl
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140001ce7
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001ce2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001ce2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000358c
test bl, bl
je 0x140001d12
mov dword [0x140008774], 0x20304c8
mov dword [0x140008770], 0x26684d8
mov dword [0x140008754], 0x20d8c90
lea rdx, str.Game_Version:_FiveM_b2699_GTAProcess.exe
jmp 0x140001d19
lea rdx, str.Process_version_not_recognized._Using_default_offsets.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a00
lea rdx, [0x140002bd0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.ReplayInterface_ptr:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a00
mov rcx, rax
mov edx, dword [0x140008774]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140002bd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.world_ptr:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a00
mov rcx, rax
mov edx, dword [0x140008770]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140002bd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.viewport_ptr:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a00
mov rcx, rax
mov edx, dword [0x140008754]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140002bd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor ebx, ebx
mov qword [rbp - 0x48], rbx
mov dword [rbp - 0x58], 0x85b3e12
mov eax, dword [0x140008750]
mov dword [rbp - 0x54], eax
lea rax, [rbp - 0x48]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0x10]
lea r8, [rbp - 0x58]
mov edx, 0x2201c8
mov rcx, qword [0x140008748]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rdx, qword [rbp - 0x48]
mov qword [0x140008758], rdx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov eax, dword [0x140008770]
add rax, qword [0x140008758]
mov qword [rbp - 0x48], rbx
mov dword [rbp - 0x1f], ebx
mov word [rbp - 0x1b], bx
mov byte [rbp - 0x19], bl
mov dword [rbp - 0x40], 0x85b3e12
mov qword [rbp - 0x38], rax
lea rax, [rbp - 0x48]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 8
mov eax, dword [0x140008750]
mov dword [rbp - 0x3c], eax
mov byte [rbp - 0x20], bl
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0x28]
lea r8, [rbp - 0x40]
mov edx, 0x2201c4
mov rcx, qword [0x140008748]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp - 0x48]
mov qword [0x140008768], rax
mov eax, dword [0x140008774]
add rax, qword [0x140008758]
mov qword [rbp - 0x18], rbx
mov dword [rbp + 0x19], ebx
mov word [rbp + 0x1d], bx
mov byte [rbp + 0x1f], bl
mov dword [rbp - 8], 0x85b3e12
mov qword [rbp], rax
lea rax, [rbp - 0x18]
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], 8
mov eax, dword [0x140008750]
mov dword [rbp - 4], eax
mov byte [rbp + 0x18], bl
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0x28]
lea r8, [rbp - 8]
mov edx, 0x2201c4
mov rcx, qword [0x140008748]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp - 0x18]
mov qword [0x140008760], rax
mov eax, dword [0x140008754]
add rax, qword [0x140008758]
mov qword [rbp - 0x10], rbx
mov dword [rbp - 0x1f], ebx
mov word [rbp - 0x1b], bx
mov byte [rbp - 0x19], bl
mov dword [rbp - 0x40], 0x85b3e12
mov qword [rbp - 0x38], rax
lea rax, [rbp - 0x10]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 8
mov eax, dword [0x140008750]
mov dword [rbp - 0x3c], eax
mov byte [rbp - 0x20], bl
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0x28]
lea r8, [rbp - 0x40]
mov edx, 0x2201c4
mov rcx, qword [0x140008748]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [0x140008768]
add rax, 8
mov qword [rbp - 0x18], rbx
mov dword [rbp + 0x79], ebx
mov word [rbp + 0x7d], bx
mov byte [rbp + 0x7f], bl
mov dword [rbp + 0x58], 0x85b3e12
mov qword [rbp + 0x60], rax
lea rax, [rbp - 0x18]
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x70], 8
mov eax, dword [0x140008750]
mov dword [rbp + 0x5c], eax
mov byte [rbp + 0x78], bl
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0x28]
lea r8, [rbp + 0x58]
mov edx, 0x2201c4
mov rcx, qword [0x140008748]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp - 0x18]
mov qword [0x140008778], rax
nop dword [rax]
mov rax, qword [0x140008760]
mov rdi, qword [0x140008778]
mov qword [rbp - 0x60], rdi
test rax, rax
je 0x140002010
mov qword [rbp + 0x20], rbx
mov dword [rbp - 0x1f], ebx
mov word [rbp - 0x1b], bx
mov byte [rbp - 0x19], 0
mov dword [rbp - 0x40], 0x85b3e12
add rax, 0x18
mov qword [rbp - 0x38], rax
lea rax, [rbp + 0x20]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 8
mov eax, dword [0x140008750]
mov dword [rbp - 0x3c], eax
mov byte [rbp - 0x20], 0
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, 0x28
lea r8, [rbp - 0x40]
mov edx, 0x2201c4
mov rcx, qword [0x140008748]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rbx, qword [rbp + 0x20]
xor esi, esi
mov qword [rbp + 0x28], rsi
mov dword [rbp + 0x19], esi
mov word [rbp + 0x1d], si
mov byte [rbp + 0x1f], sil
mov dword [rbp - 8], 0x85b3e12
lea rax, [rbx + 0x100]
mov qword [rbp], rax
lea rax, [rbp + 0x28]
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], 8
mov eax, dword [0x140008750]
mov dword [rbp - 4], eax
mov byte [rbp + 0x18], sil
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea r9d, [rsi + 0x28]
lea r8, [rbp - 8]
mov edx, 0x2201c4
mov rcx, qword [0x140008748]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r12, qword [rbp + 0x28]
mov dword [rbp - 0x48], esi
mov dword [rbp + 0xa1], esi
mov word [rbp + 0xa5], si
mov byte [rbp + 0xa7], sil
mov dword [rbp + 0x80], 0x85b3e12
lea rax, [rbx + 0x108]
mov qword [rbp + 0x88], rax
lea rax, [rbp - 0x48]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], 4
mov eax, dword [0x140008750]
mov dword [rbp + 0x84], eax
mov byte [rbp + 0xa0], sil
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rsi + 0x28]
lea r8, [rbp + 0x80]
mov edx, 0x2201c4
mov rcx, qword [0x140008748]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r13d, dword [rbp - 0x48]
mov r14d, ebx
test r13d, r13d
jle 0x140002010
test r12, r12
je 0x1400026e7
mov qword [rbp + 0x30], rbx
mov dword [rbp + 0xc9], ebx
mov word [rbp + 0xcd], bx
mov byte [rbp + 0xcf], 0
mov dword [rbp + 0xa8], 0x85b3e12
movsxd rax, esi
add rax, r12
mov qword [rbp + 0xb0], rax
lea rax, [rbp + 0x30]
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0xc0], 8
mov eax, dword [0x140008750]
mov dword [rbp + 0xac], eax
mov byte [rbp + 0xc8], 0
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, 0x28
lea r8, [rbp + 0xa8]
mov edx, 0x2201c4
mov rcx, qword [0x140008748]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rbx, qword [rbp + 0x30]
test rbx, rbx
je 0x1400026e5
cmp rbx, rdi
je 0x1400026e5
xor ecx, ecx
mov qword [rbp - 0x10], rcx
mov dword [rbp + 0xf1], ecx
mov word [rbp + 0xf5], cx
mov byte [rbp + 0xf7], cl
mov dword [rbp + 0xd0], 0x85b3e12
lea rax, [rbx + 0x10c8]
mov qword [rbp + 0xd8], rax
lea rax, [rbp - 0x10]
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xe8], 8
mov eax, dword [0x140008750]
mov dword [rbp + 0xd4], eax
mov byte [rbp + 0xf0], cl
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rcx
lea r9d, [rcx + 0x28]
lea r8, [rbp + 0xd0]
mov edx, 0x2201c4
mov rcx, qword [0x140008748]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp qword [rbp - 0x10], 0
je 0x1400026e5
lea rcx, [rbx + 0x90]
mov r8d, 0xc
lea rdx, [rbp - 0x58]
call fcn.1400015c0
movss xmm8, dword [rbp - 0x58]
movss xmm7, dword [rbp - 0x54]
movss xmm6, dword [rbp - 0x50]
lea rdx, str.Ped_Position:_x
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a00
mov rcx, rax
movaps xmm1, xmm8
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___float____ptr64]
mov rcx, rax
lea rdx, str.__y
call fcn.140002a00
mov rcx, rax
movaps xmm1, xmm7
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___float____ptr64]
mov rcx, rax
lea rdx, str.__z
call fcn.140002a00
mov rcx, rax
movaps xmm1, xmm6
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___float____ptr64]
mov rcx, rax
lea rdx, [0x140002bd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Ped_Pointer:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a00
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140002bd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cvtps2pd xmm1, xmm7
lea rcx, [rbp - 0x40]
call fcn.140001650
or r15d, 1
cvtps2pd xmm1, xmm8
lea rcx, [rsp + 0x60]
call fcn.140001650
nop
mov r8, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
sub rax, r8
cmp rax, 0x18
jb 0x140002467
lea rax, [r8 + 0x18]
mov qword [rsp + 0x70], rax
lea rbx, [rsp + 0x60]
cmp rcx, 0xf
cmova rbx, qword [rsp + 0x60]
lea rax, [0x140005768]
cmp rax, rbx
jbe 0x140002416
lea rax, [rbx + r8]
lea rcx, str.curl.exe__k__d___x_:
cmp rcx, rax
ja 0x140002416
cmp rbx, rcx
ja 0x14000240e
xor edi, edi
jmp 0x14000241b
mov rdi, rbx
sub rdi, rcx
jmp 0x14000241b
mov edi, 0x18
lea rcx, [rbx + 0x18]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
lea rdx, str.curl.exe__k__d___x_:
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rdi]
mov r8d, 0x18
sub r8, rdi
lea rdx, str.curl.exe__k__d___x_:
add rdx, 0x18
add rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x60]
mov rdi, qword [rbp - 0x60]
jmp 0x14000247f
mov qword [rsp + 0x28], 0x18
mov edx, 0x18
lea rcx, [rsp + 0x60]
call fcn.140003090
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xor ebx, ebx
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
lea r8d, [rbx + 9]
lea rdx, str.___y_:
lea rcx, [rbp - 0x80]
call fcn.140002790
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
lea r9, [rbp - 0x40]
lea r8, [rbp - 8]
lea rcx, [rsp + 0x40]
call fcn.140002ea0
nop
lea r8d, [rbx + 0x4b]
lea rdx, str.___H__Content_Type:_application_json___X_POST_http:__192.168.178.42:10105_
lea rcx, [rsp + 0x40]
call fcn.140002790
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], rbx
mov qword [rbp + 0x50], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x48], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
or r15d, 0x3e
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140002573
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000256e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026fb
call fcn.14000358c
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x1400025c2
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400025bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002702
call fcn.14000358c
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400025fd
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400025f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002709
call fcn.14000358c
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000264a
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002645
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002710
call fcn.14000358c
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140002698
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002693
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002717
call fcn.14000358c
lea rcx, [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
cmova rcx, qword [rbp + 0x38]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x1400026e7
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000271e
call fcn.14000358c
jmp 0x1400026e7
xor ebx, ebx
inc r14d
add esi, 0x10
cmp r14d, r13d
jl 0x1400021a0
jmp 0x140002010
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, str.Driver_is_not_loaded.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a00
lea rdx, [0x140002bd0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 0xffffffff
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.140003220
lea r11, [rsp + 0x370]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret