Function at 0x140002d00
Capabilities:
Create thread
Download url
Execute command
Inject thread
Receive data
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x470
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x460], rax
mov rdi, rdx
xor r13d, r13d
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xf7
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rdi, qword [rdi]
mov r14, 0xffffffffffffffff
mov rax, r14
nop
inc rax
cmp byte [rdi + rax], r13b
jne 0x140002d80
mov r15, r13
mov rsi, r13
mov rcx, r13
test rax, rax
je 0x140002dc6
nop word [rax + rax]
lea rdx, [rcx + 1]
movzx r8d, byte [rdx + rdi - 1]
cmp r8b, 0x5b
je 0x140002dbb
cmp r8b, 0x5d
jne 0x140002dbe
mov rsi, rcx
jmp 0x140002dbe
mov r15, rdx
mov rcx, rdx
cmp rdx, rax
jb 0x140002da0
mov rbx, rsi
sub rbx, r15
lea rcx, [rbx + 1]
call fcn.14000cf8c
mov r12, rax
lea rdx, [r15 + rdi]
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [r12 + rbx], r13b
lea rdx, str.Russian
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
lea rcx, str.OnlyHacks_Loader
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov ebx, 9
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n_Running_OnlyHacks_Loader..._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0x3e8
lea rcx, [rsp + 0x80]
call fcn.1400057b0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._______________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edi, 0xf
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov qword [rsp + 0x80], 0x19
lea rcx, [rsp + 0x80]
call fcn.1400057b0
lea rdx, str._______OnlyHack.xyz_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0x19
lea rcx, [rsp + 0x80]
call fcn.1400057b0
lea rdx, str._TG
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0x19
lea rcx, [rsp + 0x80]
call fcn.1400057b0
lea rdx, str._YT
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0x19
lea rcx, [rsp + 0x80]
call fcn.1400057b0
lea rdx, str._VK
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0x19
lea rcx, [rsp + 0x80]
call fcn.1400057b0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.______________________________
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0xfa
lea rcx, [rsp + 0x80]
call fcn.1400057b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x128], rdi
mov byte [rsp + 0x110], r13b
mov dword [rsp + 0x70], r13d
mov ebx, 0xe
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000f9b8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
mov rcx, rax
lea rdx, str.Grand_Theft_Auto_V
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0x19
lea rcx, [rsp + 0x80]
call fcn.1400057b0
lea rdx, [0x14000f9d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
mov rcx, rax
lea rdx, str.1.69
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0x19
lea rcx, [rsp + 0x80]
call fcn.1400057b0
lea rdx, [0x14000f9e8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
mov rcx, rax
lea rdx, str.3323
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0x19
lea rcx, [rsp + 0x80]
call fcn.1400057b0
lea rdx, str._n___
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
mov rcx, rax
mov rdx, r12
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0x19
lea rcx, [rsp + 0x80]
call fcn.1400057b0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 9
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.______________________________
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
mov rcx, rax
lea rdx, [0x14000fa04]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0xfa
lea rcx, [rsp + 0x80]
call fcn.1400057b0
test r15, r15
je 0x1400049be
test rsi, rsi
je 0x1400049be
lea rdx, str.Grand_Theft_Auto_V
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
test rax, rax
jne 0x14000326c
mov ebx, 0xc
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fa58]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fa80]
jmp 0x140004a1b
lea rdx, [rsp + 0x70]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, 0xa
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fac8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0x19
lea rcx, [rsp + 0x80]
call fcn.1400057b0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._______t.me_onlyhacks_bot
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0x19
lea rcx, [rsp + 0x80]
call fcn.1400057b0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._______vk.me_only.hacks
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0x19
lea rcx, [rsp + 0x80]
call fcn.1400057b0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 9
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.______________________________
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
mov rcx, rax
lea rdx, [0x14000fa04]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0xfa
lea rcx, [rsp + 0x80]
call fcn.1400057b0
xorps xmm0, xmm0
movups xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xe8], r13
mov r8d, 0x21
lea rdx, str.https:__onlyhacks.site_auth__key
lea rcx, [rsp + 0xd0]
call fcn.140005d70
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], rdi
mov byte [rsp + 0x90], 0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fb68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [rsp + 0x90]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400058b0
lea rcx, [rsp + 0x40]
call fcn.140004ad0
nop
lea rdx, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0xf
cmova rdx, qword [rsp + 0x90]
add rdx, qword [rsp + 0xa0]
lea rcx, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0xf
cmova rcx, qword [rsp + 0x90]
mov dword [rsp + 0x20], 0x10
mov r9, rax
call fcn.140006680
movzx ebx, al
lea rcx, [rsp + 0x40]
call fcn.140005220
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140003506
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test rax, rax
je 0x140003506
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rax
call r8
test bl, bl
jne 0x140003619
mov ebx, 0xc
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fb90]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0xf
jbe 0x1400035b5
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400035b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400048ef
call fcn.14000cf84
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], rdi
mov byte [rsp + 0x90], 0
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0xf
jbe 0x140004a45
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000360f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000494d
call fcn.14000cf84
jmp 0x140004a45
mov rdi, qword [rsp + 0xa0]
lea r9, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0xf
cmova r9, qword [rsp + 0x90]
mov rcx, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0xe8]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x14000368e
lea rax, [rcx + rdi]
mov qword [rsp + 0xe0], rax
lea rbx, [rsp + 0xd0]
cmp rdx, 0xf
cmova rbx, qword [rsp + 0xd0]
add rbx, rcx
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x1400036a3
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0xd0]
call fcn.140005be0
xorps xmm0, xmm0
movups xmmword [rsp + 0x130], xmm0
mov rbx, r13
mov qword [rsp + 0x140], rbx
mov r15d, 0xf
mov esi, r15d
mov qword [rsp + 0x148], r15
mov byte [rsp + 0x130], bl
lea rdx, [rsp + 0xd0]
cmp qword [rsp + 0xe8], r15
cmova rdx, qword [rsp + 0xd0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [rsp + 0x78]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLOpenBlockingStreamA]
test eax, eax
jne 0x1400039a7
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
lea r9, [rsp + 0x80]
mov r8d, 0x1f4
lea rdx, [rsp + 0x150]
call qword [rax + 0x18]
test eax, eax
jne 0x1400037df
mov eax, dword [rsp + 0x80]
test eax, eax
je 0x1400037df
mov edi, eax
mov rax, rsi
sub rax, rbx
cmp rdi, rax
ja 0x140003789
lea rax, [rbx + rdi]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x130]
cmp rsi, 0xf
cmova rax, qword [rsp + 0x130]
add rbx, rax
mov r8d, edi
lea rdx, [rsp + 0x150]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x1400037a6
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x150]
mov rdx, rdi
lea rcx, [rsp + 0x130]
call fcn.140005be0
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
lea r9, [rsp + 0x80]
mov r8d, 0x1f4
lea rdx, [rsp + 0x150]
call qword [rax + 0x18]
mov rsi, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x140]
test eax, eax
je 0x140003730
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rcx, [rsp + 0x130]
mov rdi, qword [rsp + 0x130]
cmp rsi, 0xf
cmova rcx, rdi
cmp rbx, 5
jne 0x14000385c
mov r8, rbx
lea rdx, str.VALID
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000385c
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 0xa
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fbb8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400039af
mov ebx, 0xc
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fbc8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
cmp rsi, 0xf
jbe 0x1400038fc
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400038f3
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400038f3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.14000cf84
nop
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0xf
jbe 0x140003942
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000393d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000393d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000cf84
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], r15
mov byte [rsp + 0x90], 0
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0xf
jbe 0x140004a45
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000360f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000360f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdi, qword [rsp + 0x130]
lea rdx, [rsp + 0x110]
mov ecx, dword [rsp + 0x70]
call fcn.140002ad0
test al, al
je 0x140003b10
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
cmp rsi, 0xf
jbe 0x140003a0e
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140003a05
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400048a5
mov rcx, rdi
call fcn.14000cf84
nop
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0xf
jbe 0x140003a51
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400048ef
call fcn.14000cf84
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], r15
mov byte [rsp + 0x90], 0
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0xf
jbe 0x140003aac
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003aa7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000494d
call fcn.14000cf84
mov qword [rsp + 0xe8], r15
mov qword [rsp + 0xe0], r13
mov byte [rsp + 0xd0], 0
mov rdx, qword [rsp + 0x128]
cmp rdx, 0xf
jbe 0x140004a45
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400049b7
call fcn.14000cf84
jmp 0x140004a45
mov ebx, 0xb
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fbf0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x80], 0x6d6
lea rcx, [rsp + 0x80]
call fcn.1400057b0
lea r15, str.C:OnlyHacks_Loader_
mov qword [rsp + 0x80], r15
mov qword [rsp + 0x88], 0x14
call fcn.14000dd60
movaps xmm0, xmmword [rsp + 0x80]
movdqa xmmword [rsp + 0x80], xmm0
lea r8, [rsp + 0x80]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140001b70
nop
lea rcx, [rsp + 0x40]
call fcn.1400026e0
movzx ebx, al
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140003c00
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003bfb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003bfb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000cf84
test bl, bl
jne 0x140003cec
mov qword [rsp + 0x80], r15
mov qword [rsp + 0x88], 0x14
call fcn.14000dd60
movaps xmm0, xmmword [rsp + 0x80]
movdqa xmmword [rsp + 0x80], xmm0
lea r8, [rsp + 0x80]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140001b70
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 7
cmova rcx, qword [rsp + 0x40]
call fcn.14000de9c
shr rax, 0x20
test eax, eax
jne 0x140004a77
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140003cae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ca9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003ca9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000cf84
jmp 0x140003cec
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], r13
mov qword [rsp + 0x108], r13
mov r8d, 0x2c
lea rdx, str.https:__onlyhacks.site_files_gtav_dlls_3323_
lea rcx, [rsp + 0xf0]
call fcn.140005d70
nop
mov rdx, r12
lea rcx, [rsp + 0xf0]
call fcn.140004eb0
mov rdx, qword [rsp + 0x100]
mov r8, qword [rsp + 0x108]
mov rax, r8
sub rax, rdx
lea rcx, [rsp + 0xf0]
cmp rax, 4
jb 0x140003d7f
lea rax, [rdx + 4]
mov qword [rsp + 0x100], rax
cmp r8, 0xf
cmova rcx, qword [rsp + 0xf0]
mov eax, dword [str..dll]
mov dword [rdx + rcx], eax
mov byte [rdx + rcx + 4], 0
jmp 0x140003d99
mov qword [rsp + 0x20], 4
lea r9, str..dll
mov edx, 4
call fcn.140005be0
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xc8], r13
mov r8d, 0x14
mov rdx, r15
lea rcx, [rsp + 0xb0]
call fcn.140005d70
nop
mov rdx, r12
lea rcx, [rsp + 0xb0]
call fcn.140004eb0
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xc8]
mov rax, rdx
sub rax, rcx
cmp rax, 0xa
jb 0x140003e36
lea rax, [rcx + 0xa]
mov qword [rsp + 0xc0], rax
lea rbx, [rsp + 0xb0]
cmp rdx, 0xf
cmova rbx, qword [rsp + 0xb0]
add rbx, rcx
mov r8d, 0xa
lea rdx, str..OnlyHacks
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xa], 0
jmp 0x140003e56
mov eax, 0xa
mov qword [rsp + 0x20], rax
lea r9, str..OnlyHacks
mov edx, eax
lea rcx, [rsp + 0xb0]
call fcn.140005be0
call qword [sym.imp.libcurl.dll_curl_easy_init]
mov r15, rax
test rax, rax
je 0x140004756
lea rcx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0xf
cmova rcx, qword [rsp + 0xb0]
lea rdx, [0x14000fc8c]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov r12, rax
test rax, rax
jne 0x1400040c0
mov ebx, 0xc
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n____
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov ebx, 0xf
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fcc0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0xf
jbe 0x140003f6a
inc rdx
mov rcx, qword [rsp + 0xb0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140003f65
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400047f8
call fcn.14000cf84
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xc8], rbx
mov byte [rsp + 0xb0], 0
mov rdx, qword [rsp + 0x108]
cmp rdx, 0xf
jbe 0x140003fc5
mov rcx, qword [rsp + 0xf0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003fc0
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004856
call fcn.14000cf84
mov byte [rsp + 0xf0], 0
mov qword [rsp + 0x108], rbx
mov qword [rsp + 0x100], r13
cmp rsi, 0xf
jbe 0x140004015
lea rdx, [rsi + 1]
cmp rdx, 0x1000
mov rax, rdi
jb 0x14000400c
mov rdi, qword [rdi - 8]
sub rax, rdi
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400048a5
mov rcx, rdi
call fcn.14000cf84
nop
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0xf
jbe 0x140004058
mov rcx, qword [rsp + 0x90]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004053
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400048ef
call fcn.14000cf84
mov byte [rsp + 0x90], 0
mov qword [rsp + 0xa8], rbx
mov qword [rsp + 0xa0], r13
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0xf
jbe 0x1400040b3
inc rdx
mov rcx, qword [rsp + 0xd0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x1400040ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000494d
call fcn.14000cf84
mov qword [rsp + 0xe8], rbx
jmp 0x140003ab4
xor r8d, r8d
mov edx, 0x40
mov rcx, r15
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
xor r8d, r8d
mov edx, 0x51
mov rcx, r15
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
lea r8, [rsp + 0xf0]
cmp qword [rsp + 0x108], 0xf
cmova r8, qword [rsp + 0xf0]
mov edx, 0x2712
mov rcx, r15
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
lea r8, [0x140002cf0]
mov edx, 0x4e2b
mov rcx, r15
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
mov r8, r12
mov edx, 0x2711
mov rcx, r15
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
mov rcx, r15
call qword [sym.imp.libcurl.dll_curl_easy_perform]
mov ebx, 0xc
test eax, eax
je 0x14000422a
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fd00]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0xf
cmova r8, qword [rsp + 0xb0]
lea rdx, [rsp + 0xf0]
cmp qword [rsp + 0x108], 0xf
cmova rdx, qword [rsp + 0xf0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x14000422a
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fd28]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov ebx, 0xf
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fd50]
jmp 0x140003efd
mov rcx, r15
call qword [sym.imp.libcurl.dll_curl_easy_cleanup]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea rax, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0xf
cmova rax, qword [rsp + 0xb0]
mov qword [rsp + 0x80], rax
nop
inc r14
cmp byte [rax + r14], 0
jne 0x140004260
mov qword [rsp + 0x88], r14
call fcn.14000dd60
movaps xmm0, xmmword [rsp + 0x80]
movdqa xmmword [rsp + 0x80], xmm0
lea r8, [rsp + 0x80]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140001b70
nop
lea rcx, [rsp + 0x40]
call fcn.1400026e0
movzx r14d, al
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x1400042f0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400042eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400042eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000cf84
test r14b, r14b
jne 0x14000435f
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fdb8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x14000fa04]
mov rcx, rax
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov ebx, 0xf
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
jmp 0x140003f19
lea rcx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0xf
cmova rcx, qword [rsp + 0xb0]
xor r9d, r9d
lea r8, [rsp + 0x350]
mov edx, 0x104
call qword [sym.imp.KERNEL32.dll_GetFullPathNameA]
test eax, eax
jne 0x1400043b6
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fde8]
jmp 0x140004313
mov r8d, dword [rsp + 0x70]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
test rax, rax
jne 0x1400043f3
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fe20]
jmp 0x140004313
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r15, rax
test rax, rax
jne 0x140004444
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fe50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
jmp 0x140004329
mov qword [rsp + 0x20], r13
mov r9d, 0x104
lea r8, [rsp + 0x350]
mov rdx, r15
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x14000448a
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fe70]
jmp 0x140004313
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r15
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
jne 0x1400044d6
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.____
jmp 0x140004313
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r15
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 0xa
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.___
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
mov rcx, rax
lea rdx, [0x14000fa04]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov ebx, 0xf
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0xc8]
cmp rdx, rbx
jbe 0x1400045ab
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400047f8
call fcn.14000cf84
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xc8], rbx
mov byte [rsp + 0xb0], 0
mov rdx, qword [rsp + 0x108]
cmp rdx, 0xf
jbe 0x140004606
inc rdx
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004601
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004856
call fcn.14000cf84
mov qword [rsp + 0x100], r13
mov qword [rsp + 0x108], rbx
mov byte [rsp + 0xf0], 0
cmp rsi, 0xf
jbe 0x140004656
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000464d
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400048a5
mov rcx, rdi
call fcn.14000cf84
nop
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0xf
jbe 0x140004699
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004694
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400048ef
call fcn.14000cf84
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], rbx
mov byte [rsp + 0x90], 0
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0xf
jbe 0x1400046f4
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400046ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000494d
call fcn.14000cf84
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xe8], rbx
mov byte [rsp + 0xd0], 0
mov rdx, qword [rsp + 0x128]
cmp rdx, 0xf
jbe 0x14000474f
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000474a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400049b7
call fcn.14000cf84
xor eax, eax
jmp 0x140004a4a
mov ebx, 0xc
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fd90]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov ebx, 0xf
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0xc8]
cmp rdx, rbx
jbe 0x140004804
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400047ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400047ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000cf84
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xc8], rbx
mov byte [rsp + 0xb0], 0
mov rdx, qword [rsp + 0x108]
cmp rdx, 0xf
jbe 0x140004862
inc rdx
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000485d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000485d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000cf84
mov qword [rsp + 0x100], r13
mov qword [rsp + 0x108], rbx
mov byte [rsp + 0xf0], 0
cmp rsi, 0xf
jbe 0x1400048b5
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400048ac
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400048ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.14000cf84
nop
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0xf
jbe 0x1400048fb
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400048f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400048f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000cf84
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], rbx
mov byte [rsp + 0x90], 0
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0xf
jbe 0x140004959
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004954
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004954
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000cf84
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xe8], rbx
mov byte [rsp + 0xd0], 0
mov rdx, qword [rsp + 0x128]
cmp rdx, 0xf
jbe 0x140004a45
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003b06
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ebx, 0xc
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fa08]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14000fa20]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005590
lea rdx, [0x140005770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov eax, 1
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
call fcn.14000cf20
lea r11, [rsp + 0x470]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea r8, [rsp + 0x40]
mov edx, eax
call fcn.140002610
int3