Function at 0x4058a0
Capabilities:
Check if file exists
Create process on windows
Create thread
Download url
Get file attributes
Inject dll
Inject thread
Receive data
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x455d3a
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xa58
mov eax, dword [0x4a2040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [0x4a20ac], 1
jne 0x4080dd
mov esi, dword [0x4a2bec]
movaps xmm0, xmmword [0x49d150]
push 0x2b
mov dword [ebp - 0x960], esi
mov dword [esi + 0x3868], 0
mov dword [esi + 0x3898], 0x40400000
mov dword [esi + 0x38cc], 0
mov dword [esi + 0x38d4], 0
mov dword [esi + 0x3888], 0
mov dword [esi + 0x3864], 0x40400000
mov dword [esi + 0x3880], 0x40800000
movups xmmword [esi + 0x393c], xmm0
movaps xmm0, xmmword [0x49d170]
movups xmmword [esi + 0x398c], xmm0
movaps xmm0, xmmword [0x49d180]
movups xmmword [esi + 0x39ac], xmm0
movaps xmm0, xmmword [0x49d180]
movups xmmword [esi + 0x399c], xmm0
movaps xmm0, xmmword [0x49d170]
movups xmmword [esi + 0x3a6c], xmm0
movaps xmm0, xmmword [0x49d1d0]
movups xmmword [esi + 0x3a8c], xmm0
movaps xmm0, xmmword [0x49d160]
movups xmmword [esi + 0x3a7c], xmm0
xorps xmm0, xmm0
movups xmmword [esi + 0x396c], xmm0
movaps xmm0, xmmword [0x49d1b0]
movups xmmword [esi + 0x3acc], xmm0
movaps xmm0, xmmword [0x49d170]
movups xmmword [esi + 0x3afc], xmm0
movaps xmm0, xmmword [0x49d180]
movups xmmword [esi + 0x3b1c], xmm0
movaps xmm0, xmmword [0x49d180]
movups xmmword [esi + 0x3b0c], xmm0
movaps xmm0, xmmword [0x49d160]
movups xmmword [esi + 0x394c], xmm0
movaps xmm0, xmmword [0x49d1a0]
movups xmmword [esi + 0x39fc], xmm0
movaps xmm0, xmmword [0x49d1a0]
movups xmmword [esi + 0x3a0c], xmm0
movaps xmm0, xmmword [0x49d1a0]
movups xmmword [esi + 0x3a2c], xmm0
movaps xmm0, xmmword [0x49d1c0]
movups xmmword [esi + 0x3a9c], xmm0
movaps xmm0, xmmword [0x49d1c0]
movups xmmword [esi + 0x3abc], xmm0
movaps xmm0, xmmword [0x49d1c0]
movups xmmword [esi + 0x3aac], xmm0
movaps xmm0, xmmword [0x49d190]
movups xmmword [esi + 0x3a3c], xmm0
mov edx, dword [esi + 0x3fec]
or edx, 2
mov dword [esi + 0x3fec], edx
or edx, 0x40
mov ecx, dword [0x4a20d8]
mov eax, dword [0x4a20d4]
mov dword [esi + 0x4014], ecx
mov ecx, str.GorillaMaintainer
mov dword [esi + 0x3fec], edx
mov edx, 0x4a20ac
mov dword [esi + 0x4010], eax
mov dword [esi + 0x3ff4], 2
mov dword [esi + 0x4044], 0x3f800000
call fcn.0041bf60
mov ecx, dword [0x4a2bec]
add esp, 4
mov eax, dword [ecx + 0x3f04]
movss xmm0, dword [eax + 0x48]
movss dword [ebp - 0x95c], xmm0
movss xmm0, dword [eax + 0x4c]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
movss dword [ebp - 0x944], xmm0
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
movss xmm2, dword [eax + 0x40]
movss xmm0, dword [eax + 0x44]
subss xmm2, dword [eax + 0x90]
subss xmm0, dword [eax + 0x94]
addss xmm2, dword [0x49cfd4]
addss xmm0, dword [0x49d004]
mov ecx, dword [0x4a2bf4]
movss dword [eax + 0x10c], xmm0
movss dword [eax + 0x108], xmm2
movss xmm1, dword [eax + 0x124]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x120]
maxss xmm0, xmm2
movss dword [eax + 0x124], xmm1
movss dword [eax + 0x120], xmm0
call fcn.0041f4d0
mov ecx, dword [0x4a2bec]
lea edx, [ebp - 0x950]
push ecx
mov dword [ebp - 0x950], 0x43070000
mov dword [ebp - 0x94c], 0x42700000
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
mov ecx, str.Main
movss xmm1, dword [eax + 0x40]
subss xmm1, dword [eax + 0x90]
movss xmm0, dword [eax + 0x120]
addss xmm1, dword [0x49cfd4]
maxss xmm0, xmm1
movss dword [eax + 0x108], xmm1
movss dword [eax + 0x120], xmm0
call fcn.00447aa0
add esp, 4
test al, al
je 0x405bd8
mov dword [0x4a20dc], 1
mov ecx, dword [0x4a2bec]
lea edx, [ebp - 0x950]
push ecx
mov dword [ebp - 0x950], 0x43070000
mov dword [ebp - 0x94c], 0x41f00000
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
mov ecx, str.About
movss xmm1, dword [eax + 0x40]
subss xmm1, dword [eax + 0x90]
movss xmm0, dword [eax + 0x120]
addss xmm1, dword [0x49cfd4]
maxss xmm0, xmm1
movss dword [eax + 0x108], xmm1
movss dword [eax + 0x120], xmm0
call fcn.00447aa0
add esp, 4
test al, al
je 0x405c58
mov dword [0x4a20dc], 2
cmp byte [0x4a29da], 0
je 0x405c6b
mov dword [0x4a20dc], 3
call fcn.0041f610
mov esi, dword [0x4a2bec]
xor edx, edx
mov eax, dword [esi + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [esi + 0x3f04]
movss xmm0, dword [eax + 0x44]
subss xmm0, dword [eax + 0x94]
movss xmm2, dword [eax + 0x40]
subss xmm2, dword [eax + 0x90]
addss xmm0, dword [0x49d000]
addss xmm2, dword [0x49d024]
movss dword [eax + 0x10c], xmm0
movss dword [eax + 0x108], xmm2
movss xmm1, dword [eax + 0x124]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x120]
maxss xmm0, xmm2
movss dword [eax + 0x124], xmm1
movss xmm1, dword [ebp - 0x944]
subss xmm1, dword [0x49d00c]
movss dword [eax + 0x120], xmm0
mov eax, dword [esi + 0x3f04]
movss xmm0, dword [ebp - 0x95c]
subss xmm0, dword [0x49cff0]
movss dword [ebp - 0x94c], xmm1
mov byte [eax + 0xc5], 1
mov eax, dword [esi + 0x3f04]
movss dword [ebp - 0x950], xmm0
mov ecx, dword [eax + 0xfc]
mov eax, dword [eax + 0x104]
push dword [eax + ecx*4 - 4]
mov ecx, str.MainContent
call fcn.00411890
mov edi, eax
add esp, 4
cmp dword [esi + 0x3f28], edi
jne 0x405d6c
push ecx
push str.MainContent
mov edx, 0xb
mov ecx, edi
call fcn.00430c90
add esp, 8
push 0
lea eax, [ebp - 0x950]
mov edx, edi
push 0
push eax
mov ecx, str.MainContent
call fcn.00418f20
mov eax, dword [0x4a20dc]
add esp, 0xc
test eax, eax
je 0x407705
cmp eax, 4
jne 0x40618d
push str.Resolution:
call fcn.00447240
push 5
push 0x4a20b4
push ecx
mov edx, 0x4a29e0
mov ecx, str.ResolutionCombo
call fcn.0044a630
add esp, 0x10
test al, al
je case.default.0x405dce
mov eax, dword [0x4a29e0]
cmp eax, 4
ja case.default.0x405dce
jmp dword [eax*4 + 0x4080fc]
push str._w_1920__h_1080
jmp 0x405df6
push str._w_1600__h_900
jmp 0x405df6
push str._w_1366__h_768
jmp 0x405df6
push str._w_1280__h_720
jmp 0x405df6
push str._w_1176__h_664
push 0x4a29e8
call fcn.0040c6c0
add esp, 8
push str.DirectX_Level:
call fcn.00447240
push 3
push 0x4a20c8
push ecx
mov edx, 0x4a29dc
mov ecx, str.DirectXLevelCombo
call fcn.0044a630
add esp, 0x10
test al, al
je 0x405e6e
mov eax, dword [0x4a29dc]
sub eax, 0
je 0x405e57
sub eax, 1
je 0x405e4b
sub eax, 1
jne 0x405e6e
push 0x4a29e8
push str._s__dxlevel_98
jmp 0x405e61
push 0x4a29e8
push str._s__dxlevel_95
jmp 0x405e61
push 0x4a29e8
push str._s__dxlevel_90
push 0x4a29e8
call fcn.0040c6c0
add esp, 0xc
mov edx, 0x4a29e4
mov ecx, str.Skip_Startup_Videos
call fcn.004490a0
mov edx, 0x4a29d8
mov ecx, str.No_Borders
call fcn.004490a0
mov edx, 0x4a29d9
mov ecx, str.Windowed
call fcn.004490a0
push ecx
lea edx, [ebp - 0x950]
mov dword [ebp - 0x950], 0
mov ecx, str.Save_settings_to_JSON
mov dword [ebp - 0x94c], 0
call fcn.00447aa0
add esp, 4
test al, al
je 0x405fdd
lea ecx, [ebp - 0x89c]
call fcn.00403ab0
push ecx
lea edx, [ebp - 0x89c]
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x860]
call fcn.0040aed0
add esp, 4
push 0x38
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 1
push 0
push eax
call sub.VCRUNTIME140.dll_memset
sub esp, 0xc
lea ecx, [ebp - 0x920]
call fcn.00403590
add esp, 0x18
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x860]
cmp dword [ebp - 0x84c], 0xf
lea edx, [ebp - 0x920]
cmova ecx, dword [ebp - 0x860]
call fcn.00403de0
lea ecx, [ebp - 0x920]
call fcn.00409950
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x84c]
cmp ecx, 0xf
jbe 0x405f7f
mov edx, dword [ebp - 0x860]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405f75
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405fcd
push ecx
push edx
call fcn.0045476e
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x888]
mov dword [ebp - 0x850], 0
mov dword [ebp - 0x84c], 0xf
mov byte [ebp - 0x860], 0
cmp ecx, 0xf
jbe 0x405fdd
mov edx, dword [ebp - 0x89c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405fd3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x405fd3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0045476e
add esp, 8
push ecx
lea edx, [ebp - 0x950]
mov dword [ebp - 0x950], 0
mov ecx, str.Load_settings_from_JSON
mov dword [ebp - 0x94c], 0
call fcn.00447aa0
add esp, 4
test al, al
je 0x4060ec
lea ecx, [ebp - 0x89c]
call fcn.00403ab0
push ecx
lea edx, [ebp - 0x89c]
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x860]
call fcn.0040aed0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x860]
cmp dword [ebp - 0x84c], 0xf
cmova ecx, dword [ebp - 0x860]
sub esp, 0x14
call fcn.004041a0
mov byte [ebp - 4], 3
add esp, 0x18
mov ecx, dword [ebp - 0x84c]
cmp ecx, 0xf
jbe 0x40608e
mov edx, dword [ebp - 0x860]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406084
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4060dc
push ecx
push edx
call fcn.0045476e
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x888]
mov dword [ebp - 0x850], 0
mov dword [ebp - 0x84c], 0xf
mov byte [ebp - 0x860], 0
cmp ecx, 0xf
jbe 0x4060ec
mov edx, dword [ebp - 0x89c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4060e2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4060e2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0045476e
add esp, 8
mov edx, 0x4a29e5
mov ecx, str.hl2.exe
call fcn.004490a0
test al, al
je 0x406114
mov byte [0x4a29e5], 1
mov byte [0x4a29db], 0
mov byte [0x4a20ad], 0
movss xmm1, dword [0x49d084]
xorps xmm0, xmm0
call fcn.004205d0
mov edx, 0x4a29db
mov ecx, 0x4754f4
call fcn.004490a0
test al, al
je 0x40614c
mov byte [0x4a29db], 1
mov byte [0x4a29e5], 0
mov byte [0x4a20ad], 0
movss xmm1, dword [0x49d084]
xorps xmm0, xmm0
call fcn.004205d0
mov edx, 0x4a20ad
mov ecx, 0x4754fc
call fcn.004490a0
test al, al
je 0x407705
mov byte [0x4a20ad], 1
mov byte [0x4a29e5], 0
mov byte [0x4a29db], 0
jmp 0x407705
cmp eax, 1
jne 0x407209
push 0x4a2fa0
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov esi, eax
mov dword [ebp - 0x840], str.Manual_Map
push ecx
lea edx, [ebp - 0x950]
mov dword [ebp - 0x944], esi
mov ecx, str.Disable_VAC_module
mov dword [ebp - 0x83c], str.Native_Inject
mov dword [ebp - 0x950], 0x43a78000
mov dword [ebp - 0x94c], 0x41f00000
call fcn.00447aa0
add esp, 4
test al, al
je 0x406778
push 0x104
lea eax, [ebp - 0x220]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 0x220]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406210
sub ecx, edx
mov dword [ebp - 0x8a4], 0
sar ecx, 1
lea eax, [ebp - 0x220]
push ecx
xorps xmm0, xmm0
mov dword [ebp - 0x8a0], 0
push eax
lea ecx, [ebp - 0x8b4]
movups xmmword [ebp - 0x8b4], xmm0
call fcn.00401780
mov dword [ebp - 4], 5
lea edi, [ebp - 0x8b4]
cmp dword [ebp - 0x8a0], 7
mov eax, dword [ebp - 0x8a4]
cmova edi, dword [ebp - 0x8b4]
mov ecx, edi
lea edx, [edi + eax*2]
call fcn.00401d60
cmp eax, edx
je 0x4062d5
nop
movzx ecx, word [eax]
cmp ecx, 0x5c
je 0x40628d
cmp ecx, 0x2f
jne 0x406294
add eax, 2
cmp eax, edx
jne 0x406280
cmp eax, edx
je 0x4062d5
nop dword [eax + eax]
movzx ecx, word [edx - 2]
cmp ecx, 0x5c
je 0x4062b7
cmp ecx, 0x2f
je 0x4062b7
add edx, 0xfffffffe
cmp eax, edx
jne 0x4062a0
jmp 0x4062d5
cmp eax, edx
je 0x4062d5
nop dword [eax + eax]
movzx ecx, word [edx - 2]
cmp ecx, 0x5c
je 0x4062ce
cmp ecx, 0x2f
jne 0x4062d5
add edx, 0xfffffffe
cmp eax, edx
jne 0x4062c0
sub edx, edi
mov dword [ebp - 0x88c], 0
sar edx, 1
lea ecx, [ebp - 0x89c]
push edx
xorps xmm0, xmm0
mov dword [ebp - 0x888], 0
push edi
movups xmmword [ebp - 0x89c], xmm0
call fcn.00401780
push 0x104
lea eax, [ebp - 0x630]
mov byte [ebp - 4], 6
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x630]
push eax
lea eax, [ebp - 0x428]
push 0x104
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
add esp, 0xc
lea eax, [ebp - 0x428]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x838]
push str._sVACBYPASS.exe
push eax
call fcn.0040c6a0
add esp, 0xc
lea eax, [ebp - 0x838]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x4066bd
push 0
push 0
push 0x475578
push str.https:__github.com_FUFUGUA_GorillaLoader_releases_download_2.0.0_VACBYPASS.exe
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
js 0x4066b3
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.DLL_downloaded_successfully.
call fcn.0040bd00
push 0x40bf20
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0xd
push 0x475578
mov dword [0x4a20a8], 0x4755bc
call fcn.00454423
mov edx, eax
lea ecx, [ebp - 0x8cc]
call fcn.00401be0
add esp, 8
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x8cc]
cmp dword [ebp - 0x8b8], 7
mov eax, dword [ebp - 0x8bc]
cmova ecx, dword [ebp - 0x8cc]
lea edx, [ecx + eax*2]
mov esi, edx
call fcn.00401d60
cmp eax, edx
je 0x406435
movzx ecx, word [eax]
cmp ecx, 0x5c
je 0x406410
cmp ecx, 0x2f
jne 0x406417
add eax, 2
cmp eax, edx
jne 0x406403
cmp eax, edx
je 0x406435
nop dword [eax + eax]
movzx ecx, word [esi - 2]
cmp ecx, 0x5c
je 0x406435
cmp ecx, 0x2f
je 0x406435
add esi, 0xfffffffe
cmp eax, esi
jne 0x406420
sub edx, esi
mov dword [ebp - 0x968], 0
sar edx, 1
lea ecx, [ebp - 0x978]
push edx
xorps xmm0, xmm0
mov dword [ebp - 0x964], 0
push esi
movups xmmword [ebp - 0x978], xmm0
call fcn.00401780
lea eax, [ebp - 0x978]
mov byte [ebp - 4], 8
push eax
lea edx, [ebp - 0x89c]
lea ecx, [ebp - 0x878]
call fcn.00402150
add esp, 4
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x964]
cmp ecx, 7
jbe 0x4064c9
mov edx, dword [ebp - 0x978]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4064bf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4064bf
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0045476e
add esp, 8
xor eax, eax
mov dword [ebp - 0x968], 0
cmp dword [ebp - 0x864], 7
lea ecx, [ebp - 0x878]
mov word [ebp - 0x978], ax
lea eax, [ebp - 0x8cc]
cmova ecx, dword [ebp - 0x878]
cmp dword [ebp - 0x8b8], 7
push ecx
cmova eax, dword [ebp - 0x8cc]
push eax
mov dword [ebp - 0x964], 7
call fcn.00454528
test eax, eax
jne 0x406604
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.DLL_moved_to:
call fcn.0040bd00
cmp dword [ebp - 0x864], 7
lea ecx, [ebp - 0x878]
push dword [ebp - 0x868]
cmova ecx, dword [ebp - 0x878]
mov esi, eax
push ecx
lea ecx, [ebp - 0x860]
call fcn.0040d4b0
add esp, 8
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x860]
cmp dword [ebp - 0x84c], 0xf
lea edx, [ebp - 0x954]
mov ecx, esi
mov word [ebp - 0x94c], 0x5c22
cmova eax, dword [ebp - 0x860]
mov dword [ebp - 0x954], eax
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0x950], eax
call fcn.0040d860
mov byte [ebp - 4], 0xa
mov esi, eax
mov ecx, dword [ebp - 0x84c]
cmp ecx, 0xf
jbe 0x4065da
mov edx, dword [ebp - 0x860]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4065d0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4065d0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0045476e
add esp, 8
push 0x40bf20
mov ecx, esi
mov dword [ebp - 0x850], 0
mov dword [ebp - 0x84c], 0xf
mov byte [ebp - 0x860], 0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
jmp 0x40660e
mov dword [0x4a20a8], str.Error_moving_exe
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x864]
cmp ecx, 7
jbe 0x40664e
mov edx, dword [ebp - 0x878]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x406644
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4066a1
push ecx
push edx
call fcn.0045476e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x8b8]
mov dword [ebp - 0x868], 0
mov dword [ebp - 0x864], 7
mov word [ebp - 0x878], ax
cmp ecx, 7
jbe 0x4066bd
mov edx, dword [ebp - 0x8cc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4066a7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4066a7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0045476e
add esp, 8
jmp 0x4066bd
mov dword [0x4a20a8], str.Seems_like_something_went_wrong_in_fetching_the_VACBYPASS.exe_from_Github__try_downloading_it_yourself_and_place_it_to_the_same_folder_as_your_GorillaMaintainer_is_in.
call fcn.00404ef0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x888]
mov dword [0x4a20a8], 0x475628
cmp ecx, 7
jbe 0x40670c
mov edx, dword [ebp - 0x89c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x406702
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406745
push ecx
push edx
call fcn.0045476e
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x8a0]
cmp ecx, 7
jbe 0x406755
mov edx, dword [ebp - 0x8b4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40674b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40674b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0045476e
add esp, 8
mov esi, dword [ebp - 0x944]
xor eax, eax
mov dword [ebp - 0x8a4], 0
mov dword [ebp - 0x8a0], 7
mov word [ebp - 0x8b4], ax
mov ecx, dword [0x4a2c00]
call fcn.0041f4d0
push str.Choose_Method
call fcn.00447240
push 2
lea eax, [ebp - 0x840]
mov edx, 0x4a2f90
push eax
push ecx
mov ecx, 0x475680
call fcn.0044a630
call fcn.0041f610
mov ecx, dword [0x4a2bf8]
call fcn.0041f4d0
add esp, 0xc
mov dword [ebp - 0x950], 0
lea edx, [ebp - 0x950]
mov dword [ebp - 0x94c], 0
mov ecx, str.Select_DLL
call fcn.00447aa0
mov edi, dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
add esp, 4
test al, al
je 0x40684a
push 0x58
lea eax, [ebp - 0x940]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [ebp - 0x940], 0x58
add esp, 0xc
mov word [0x4a2d80], ax
lea eax, [ebp - 0x940]
mov dword [ebp - 0x924], 0x4a2d80
mov dword [ebp - 0x920], 0x104
mov dword [ebp - 0x934], str.Dynamic_Link_Libraries__.dll_
push eax
mov dword [ebp - 0x928], 1
mov dword [ebp - 0x90c], 0x1800
call edi
movss xmm1, dword [0x49d084]
xorps xmm0, xmm0
call fcn.004205d0
push ecx
lea edx, [ebp - 0x950]
mov dword [ebp - 0x950], 0
mov ecx, str.Select_EXE
mov dword [ebp - 0x94c], 0
call fcn.00447aa0
add esp, 4
test al, al
je 0x4068f5
push 0x58
lea eax, [ebp - 0x940]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [ebp - 0x940], 0x58
add esp, 0xc
mov word [0x4a2fa0], ax
lea eax, [ebp - 0x940]
mov dword [ebp - 0x924], 0x4a2fa0
mov dword [ebp - 0x920], 0x104
mov dword [ebp - 0x934], str.Executable_Files
push eax
mov dword [ebp - 0x928], 1
mov dword [ebp - 0x90c], 0x1800
call edi
test eax, eax
je 0x4068f5
push 0x4a2fa0
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
call fcn.0041f610
mov ecx, dword [0x4a2bfc]
call fcn.0041f4d0
push 0x4a2d80
push str.Selected_DLL:__ls
call fcn.004473c0
push esi
push str.Selected_EXE:__ls
call fcn.004473c0
call fcn.0041f610
mov ecx, dword [0x4a2bf8]
call fcn.0041f4d0
mov ecx, dword [0x4a2bec]
lea edx, [ebp - 0x950]
add esp, 0xc
mov dword [ebp - 0x950], 0x43a78000
mov dword [ebp - 0x94c], 0x41f00000
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
mov ecx, str.Inject
movss xmm0, dword [eax + 0x44]
movss xmm2, dword [eax + 0x40]
subss xmm0, dword [eax + 0x94]
subss xmm2, dword [eax + 0x90]
addss xmm0, dword [0x49d020]
addss xmm2, dword [0x49cfc4]
movss dword [eax + 0x10c], xmm0
movss dword [eax + 0x108], xmm2
movss xmm1, dword [eax + 0x124]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x120]
maxss xmm0, xmm2
movss dword [eax + 0x124], xmm1
movss dword [eax + 0x120], xmm0
call fcn.00447aa0
add esp, 4
test al, al
je 0x406e44
mov eax, dword [0x4a2f90]
test eax, eax
jne 0x406c37
push eax
push eax
push eax
push eax
push 0xffffffffffffffff
push esi
push eax
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
test edi, edi
jle 0x406a2a
push edi
call fcn.00454bba
add esp, 4
mov esi, eax
push 0
push 0
push edi
push esi
push 0xffffffffffffffff
push dword [ebp - 0x944]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jmp 0x406a2c
xor esi, esi
mov ecx, esi
call fcn.00454220
mov esi, eax
test esi, esi
jne 0x406a48
mov dword [0x4a20b0], str.Process_not_found_
jmp 0x406e44
mov ecx, 0x4a2d80
mov dword [ebp - 0x868], 0
xorps xmm0, xmm0
mov dword [ebp - 0x864], 0
movups xmmword [ebp - 0x878], xmm0
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406a70
sub ecx, edx
sar ecx, 1
push ecx
push 0x4a2d80
lea ecx, [ebp - 0x878]
call fcn.00401780
mov dword [ebp - 4], 0xc
lea edx, [ebp - 0x878]
cmp dword [ebp - 0x864], 7
lea ecx, [ebp - 0x860]
cmova edx, dword [ebp - 0x878]
call fcn.00404c00
cmp dword [ebp - 0x84c], 0xf
lea eax, [ebp - 0x860]
cmova eax, dword [ebp - 0x860]
mov ecx, eax
mov dword [ebp - 0x944], eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406ad5
sub ecx, edx
push 4
push 0x1000
lea eax, [ecx + 1]
push eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov edi, eax
test edi, edi
je 0x406b8a
mov edx, dword [ebp - 0x944]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x944], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406b10
sub ecx, dword [ebp - 0x944]
push 0
lea eax, [ecx + 1]
push eax
push edx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x406b7b
push 0
push 0
push edi
push dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov dword [ebp - 0x944], eax
test eax, eax
je 0x406b7b
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x944]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x8000
push 0
push edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, str.Success_injecting_with_Manual_Map
jmp 0x406b8f
push 0x8000
push 0
push edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, str.Failed_injecting_with_Manual_Map
push esi
mov dword [0x4a20b0], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x84c]
cmp ecx, 0xf
jbe 0x406bd1
mov edx, dword [ebp - 0x860]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406bc7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406c31
push ecx
push edx
call fcn.0045476e
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x864]
mov dword [ebp - 0x850], 0
mov dword [ebp - 0x84c], 0xf
mov byte [ebp - 0x860], 0
cmp ecx, 7
jbe 0x406e44
mov edx, dword [ebp - 0x878]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x406e3a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x406e3a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
cmp eax, 1
jne 0x406e44
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
test edi, edi
jle 0x406c86
push edi
call fcn.00454bba
add esp, 4
mov esi, eax
push 0
push 0
push edi
push esi
push 0xffffffffffffffff
push dword [ebp - 0x944]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jmp 0x406c88
xor esi, esi
mov ecx, esi
call fcn.00454220
mov esi, eax
test esi, esi
jne 0x406ca4
mov dword [0x4a20b0], str.Process_not_found_
jmp 0x406e44
mov ecx, 0x4a2d80
mov dword [ebp - 0x868], 0
xorps xmm0, xmm0
mov dword [ebp - 0x864], 0
movups xmmword [ebp - 0x878], xmm0
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406cd0
sub ecx, edx
sar ecx, 1
push ecx
push 0x4a2d80
lea ecx, [ebp - 0x878]
call fcn.00401780
mov dword [ebp - 4], 0xd
lea edx, [ebp - 0x878]
cmp dword [ebp - 0x864], 7
lea ecx, [ebp - 0x860]
cmova edx, dword [ebp - 0x878]
call fcn.00404c00
cmp dword [ebp - 0x84c], 0xf
lea eax, [ebp - 0x860]
cmova eax, dword [ebp - 0x860]
mov ecx, eax
mov dword [ebp - 0x94c], eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406d35
sub ecx, edx
push 4
push 0x1000
lea eax, [ecx + 1]
push eax
push 0
push esi
mov dword [ebp - 0x944], eax
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov edi, eax
test edi, edi
je 0x406dec
push 0
push dword [ebp - 0x944]
push dword [ebp - 0x94c]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x406ddd
push 0x49ce88
push 0x49ce98
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x406ddd
push 0
push 0
push edi
push eax
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov dword [ebp - 0x94c], eax
test eax, eax
je 0x406ddd
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x94c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x8000
push 0
push edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, str.Success_injecting_with_Native_Inject
jmp 0x406df1
push 0x8000
push 0
push edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, str.Failed_injecting_with_Native_Inject
push esi
mov dword [0x4a20b0], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x84c]
cmp ecx, 0xf
jbe 0x406bd1
mov edx, dword [ebp - 0x860]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406bc7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406c31
jmp 0x406bc7
push ecx
push edx
call fcn.0045476e
add esp, 8
call fcn.0041f610
mov ecx, dword [0x4a2c00]
call fcn.0041f4d0
mov ecx, dword [0x4a2bec]
lea edx, [ebp - 0x950]
push ecx
mov dword [ebp - 0x950], 0x43280000
mov dword [ebp - 0x94c], 0x41c80000
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
mov ecx, str.TF2_launch_options
movss xmm0, dword [eax + 0x44]
movss xmm2, dword [eax + 0x40]
subss xmm0, dword [eax + 0x94]
subss xmm2, dword [eax + 0x90]
addss xmm0, dword [0x49d02c]
addss xmm2, dword [0x49cfc4]
movss dword [eax + 0x10c], xmm0
movss dword [eax + 0x108], xmm2
movss xmm1, dword [eax + 0x124]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x120]
maxss xmm0, xmm2
movss dword [eax + 0x124], xmm1
movss dword [eax + 0x120], xmm0
call fcn.00447aa0
add esp, 4
test al, al
je 0x406f05
mov dword [0x4a20dc], 4
movss xmm1, dword [0x49d084]
xorps xmm0, xmm0
call fcn.004205d0
push ecx
lea edx, [ebp - 0x950]
mov dword [ebp - 0x950], 0x429a0000
mov ecx, str.Open_TF2
mov dword [ebp - 0x94c], 0x41c80000
call fcn.00447aa0
add esp, 4
test al, al
je 0x406ff7
cmp byte [0x4a29e4], 0
mov esi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
je 0x406f68
push str.__novid
push 0x100
push 0x4a29e8
call esi
add esp, 0xc
cmp byte [0x4a29d8], 0
je 0x406f85
push str.__noborder
push 0x100
push 0x4a29e8
call esi
add esp, 0xc
cmp byte [0x4a29d9], 0
je 0x406fa2
push str.__window
push 0x100
push 0x4a29e8
call esi
add esp, 0xc
push str.__secure
push 0x100
push 0x4a29e8
call esi
add esp, 0xc
push str.__steam
push 0x100
push 0x4a29e8
call esi
add esp, 0xc
push str.__console
push 0x100
push 0x4a29e8
call esi
add esp, 0xc
push str.__game_tf
push 0x100
push 0x4a29e8
call esi
add esp, 0xc
call fcn.004052a0
movss xmm1, dword [0x49d084]
xorps xmm0, xmm0
call fcn.004205d0
push ecx
lea edx, [ebp - 0x950]
mov dword [ebp - 0x950], 0x429a0000
mov ecx, str.Close_TF2
mov dword [ebp - 0x94c], 0x41c80000
call fcn.00447aa0
add esp, 4
test al, al
je 0x407700
push 7
xorps xmm0, xmm0
mov dword [ebp - 0x88c], 0
push 0x47475c
lea ecx, [ebp - 0x89c]
mov dword [ebp - 0x888], 0
movups xmmword [ebp - 0x89c], xmm0
call fcn.00401780
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x878]
push 6
xorps xmm0, xmm0
mov dword [ebp - 0x868], 0
push str.tf.exe
movups xmmword [ebp - 0x878], xmm0
mov dword [ebp - 0x864], 0
call fcn.00401780
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x860]
push 0xc
xorps xmm0, xmm0
mov dword [ebp - 0x850], 0
push str.tf_win64.exe
movups xmmword [ebp - 0x860], xmm0
mov dword [ebp - 0x84c], 0
call fcn.00401780
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 0x10
call fcn.00405720
lea ecx, [ebp - 0x878]
call fcn.00405720
lea ecx, [ebp - 0x860]
call fcn.00405720
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x84c]
cmp ecx, 7
jbe 0x40713b
mov edx, dword [ebp - 0x860]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x407131
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406c31
push ecx
push edx
call fcn.0045476e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x864]
mov dword [ebp - 0x850], 0
mov dword [ebp - 0x84c], 7
mov word [ebp - 0x860], ax
cmp ecx, 7
jbe 0x40719c
mov edx, dword [ebp - 0x878]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x407192
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406c31
push ecx
push edx
call fcn.0045476e
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x888]
mov dword [ebp - 0x868], 0
mov dword [ebp - 0x864], 7
mov word [ebp - 0x878], ax
cmp ecx, 7
jbe 0x407700
mov edx, dword [ebp - 0x89c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4071fa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406c31
push ecx
push edx
call fcn.0045476e
add esp, 8
jmp 0x407700
cmp eax, 2
jne 0x407480
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 1
push 0
push 0
push str.https:__github.com_FUFUGUA_GorillaLoader
push str.FufuGua
push 0
call esi
mov ecx, dword [0x4a2bf4]
call fcn.0041f4d0
mov ecx, dword [0x4a2bec]
push str.My_Github:
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
movss xmm0, dword [eax + 0x44]
movss xmm2, dword [eax + 0x40]
subss xmm0, dword [eax + 0x94]
subss xmm2, dword [eax + 0x90]
addss xmm0, dword [0x49cfd4]
addss xmm2, dword [0x49cfc4]
movss dword [eax + 0x10c], xmm0
movss dword [eax + 0x108], xmm2
movss xmm1, dword [eax + 0x124]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x120]
maxss xmm0, xmm2
movss dword [eax + 0x124], xmm1
movss dword [eax + 0x120], xmm0
call fcn.00447240
add esp, 4
call fcn.0041f610
mov ecx, dword [0x4a2bf8]
call fcn.0041f4d0
mov ecx, dword [0x4a2bec]
lea edx, [ebp - 0x840]
push ecx
mov dword [ebp - 0x840], 0x43a50000
mov dword [ebp - 0x83c], 0x41f00000
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
mov ecx, str.Projects_Github
movss xmm0, dword [eax + 0x44]
movss xmm2, dword [eax + 0x40]
subss xmm0, dword [eax + 0x94]
subss xmm2, dword [eax + 0x90]
addss xmm0, dword [0x49cff8]
addss xmm2, dword [0x49cfd4]
movss dword [eax + 0x10c], xmm0
movss dword [eax + 0x108], xmm2
movss xmm1, dword [eax + 0x124]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x120]
maxss xmm0, xmm2
movss dword [eax + 0x124], xmm1
movss dword [eax + 0x120], xmm0
call fcn.00447aa0
add esp, 4
test al, al
je 0x40738a
push 1
push 0
push 0
push str.https:__github.com_FUFUGUA_GorillaLoader
push str.open
push 0
call esi
call fcn.0041f610
mov ecx, dword [0x4a2bec]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
mov ecx, dword [0x4a2bf4]
movss xmm1, dword [eax + 0x40]
subss xmm1, dword [eax + 0x90]
movss xmm0, dword [eax + 0x120]
addss xmm1, dword [0x49cfc4]
maxss xmm0, xmm1
movss dword [eax + 0x108], xmm1
movss dword [eax + 0x120], xmm0
call fcn.0041f4d0
push str.Credits_to_Daniel_Krupinski_for_the_VAC_n_Bypass__and_the_loader_for_it
call fcn.00447240
mov ecx, dword [0x4a2bec]
lea edx, [ebp - 0x840]
mov dword [ebp - 0x840], 0
mov dword [ebp - 0x83c], 0
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
mov ecx, str.Daniel_Krupinskis_VAC_Bypass_Github
movss xmm1, dword [eax + 0x40]
subss xmm1, dword [eax + 0x90]
movss xmm0, dword [eax + 0x120]
addss xmm1, dword [0x49cfc4]
maxss xmm0, xmm1
movss dword [eax + 0x108], xmm1
movss dword [eax + 0x120], xmm0
call fcn.00447aa0
add esp, 4
test al, al
je 0x407700
push 1
push 0
push 0
push str.https:__github.com_danielkrupinski_VAC_Bypass_Loader
push str.open
push 0
call esi
jmp 0x407700
cmp eax, 3
jne 0x407705
mov ecx, dword [0x4a2c00]
call fcn.0041f4d0
push str.Path_to_hl2.exe:
call fcn.00447240
mov ecx, dword [0x4a2bec]
add esp, 4
xor edx, edx
mov dword [ebp - 0x840], 0
mov dword [ebp - 0x83c], 0
mov eax, dword [ecx + 0x3f04]
push 0
push 0
push 0
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
mov ecx, 0x475680
movss xmm1, dword [eax + 0x40]
subss xmm1, dword [eax + 0x90]
movss xmm0, dword [eax + 0x120]
addss xmm1, dword [0x49cfc4]
maxss xmm0, xmm1
movss dword [eax + 0x108], xmm1
movss dword [eax + 0x120], xmm0
lea eax, [ebp - 0x840]
push eax
push 0x104
push 0x4a2c70
call fcn.0044c020
mov ecx, dword [0x4a2bec]
lea edx, [ebp - 0x840]
add esp, 0x14
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
mov ecx, str.Open_TF2
mov dword [ebp - 0x840], 0x43960000
mov dword [ebp - 0x83c], 0x41f00000
movss xmm1, dword [eax + 0x40]
subss xmm1, dword [eax + 0x90]
movss xmm0, dword [eax + 0x120]
addss xmm1, dword [0x49cfc4]
maxss xmm0, xmm1
movss dword [eax + 0x108], xmm1
movss dword [eax + 0x120], xmm0
call fcn.00447aa0
add esp, 4
test al, al
je 0x40759f
call fcn.004052a0
mov ecx, dword [0x4a2bec]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
movss xmm1, dword [eax + 0x40]
subss xmm1, dword [eax + 0x90]
movss xmm0, dword [eax + 0x120]
addss xmm1, dword [0x49cfc4]
maxss xmm0, xmm1
movss dword [eax + 0x108], xmm1
movss dword [eax + 0x120], xmm0
call fcn.0041f610
mov ecx, dword [0x4a2bfc]
call fcn.0041f4d0
push str.The_path_to_hl2.exe_needs_to_be_inputted_in_a_format_for_an_example:
call fcn.00447240
add esp, 4
push str.E:SteamLibrary_steamappscommonTeam_Fortress_2hl2.exe
call fcn.00447240
movss xmm1, dword [0x49d084]
add esp, 4
xorps xmm0, xmm0
call fcn.004205d0
push 0x475a5c
call fcn.00447240
add esp, 4
push str.E:_SteamLibrary_steamapps_common_Team_Fortress_2_hl2.exe
call fcn.00447240
mov ecx, dword [0x4a2bec]
add esp, 4
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
mov ecx, dword [0x4a2bf8]
movss xmm0, dword [eax + 0x44]
movss xmm2, dword [eax + 0x40]
subss xmm0, dword [eax + 0x94]
subss xmm2, dword [eax + 0x90]
addss xmm0, dword [0x49d030]
addss xmm2, dword [0x49cfc4]
movss dword [eax + 0x10c], xmm0
movss dword [eax + 0x108], xmm2
movss xmm1, dword [eax + 0x124]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x120]
maxss xmm0, xmm2
movss dword [eax + 0x124], xmm1
movss dword [eax + 0x120], xmm0
call fcn.0041f4d0
push ecx
lea edx, [ebp - 0x840]
mov dword [ebp - 0x840], 0x43a50000
mov ecx, str.Back_to_GorillaInternal_tab_
mov dword [ebp - 0x83c], 0x41f00000
call fcn.00447aa0
add esp, 4
test al, al
je 0x407700
mov byte [0x4a29da], 0
mov dword [0x4a20dc], 1
call fcn.0041f610
call fcn.00419130
mov esi, dword [0x4a2bec]
xor edx, edx
mov dword [ebp - 0x840], 0x43020000
mov dword [ebp - 0x83c], 0x43090000
mov eax, dword [esi + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [esi + 0x3f04]
movss xmm0, dword [eax + 0x44]
movss xmm2, dword [eax + 0x40]
subss xmm0, dword [eax + 0x94]
subss xmm2, dword [eax + 0x90]
addss xmm0, dword [0x49d028]
addss xmm2, dword [0x49cfd4]
movss dword [eax + 0x10c], xmm0
movss dword [eax + 0x108], xmm2
movss xmm1, dword [eax + 0x124]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x120]
maxss xmm0, xmm2
movss dword [eax + 0x124], xmm1
movss dword [eax + 0x120], xmm0
mov eax, dword [esi + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [esi + 0x3f04]
mov ecx, dword [eax + 0xfc]
mov eax, dword [eax + 0x104]
push dword [eax + ecx*4 - 4]
mov ecx, str.InformationContent
call fcn.00411890
mov edi, eax
add esp, 4
cmp dword [esi + 0x3f28], edi
jne 0x4077ea
push ecx
push str.InformationContent
mov edx, 0xb
mov ecx, edi
call fcn.00430c90
add esp, 8
push 0
lea eax, [ebp - 0x840]
mov edx, edi
push 0
push eax
mov ecx, str.InformationContent
call fcn.00418f20
add esp, 0xc
test al, al
je 0x40790a
mov ecx, dword [0x4a2bf4]
call fcn.0041f4d0
push dword [0x4a20b0]
call fcn.004473c0
add esp, 4
call fcn.0041f610
mov ecx, dword [0x4a2bec]
push str.Github.com_Fufugua__nGorillaLoader
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
movss xmm0, dword [eax + 0x44]
movss xmm2, dword [eax + 0x40]
subss xmm0, dword [eax + 0x94]
subss xmm2, dword [eax + 0x90]
addss xmm0, dword [0x49cfd4]
addss xmm2, dword [0x49cfc4]
movss dword [eax + 0x10c], xmm0
movss dword [eax + 0x108], xmm2
movss xmm1, dword [eax + 0x124]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x120]
maxss xmm0, xmm2
movss dword [eax + 0x124], xmm1
movss dword [eax + 0x120], xmm0
call fcn.00447240
mov ecx, dword [0x4a2bec]
add esp, 4
mov eax, dword [ecx + 0x3f04]
push dword [0x4a20a8]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
movss xmm1, dword [eax + 0x44]
subss xmm1, dword [eax + 0x94]
movss xmm0, dword [eax + 0x124]
addss xmm1, dword [0x49d00c]
maxss xmm0, xmm1
movss dword [eax + 0x10c], xmm1
movss dword [eax + 0x124], xmm0
call fcn.004473c0
add esp, 4
call fcn.00419130
mov esi, dword [0x4a2bec]
xor edx, edx
mov dword [ebp - 0x840], 0x43f00000
mov dword [ebp - 0x83c], 0x41d80000
mov eax, dword [esi + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [esi + 0x3f04]
movss xmm1, dword [eax + 0x44]
subss xmm1, dword [eax + 0x94]
movss xmm0, dword [eax + 0x124]
addss xmm1, dword [0x49cfe8]
movss dword [eax + 0x10c], xmm1
maxss xmm0, xmm1
movss dword [eax + 0x124], xmm0
mov eax, dword [esi + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [esi + 0x3f04]
mov ecx, dword [eax + 0xfc]
mov eax, dword [eax + 0x104]
push dword [eax + ecx*4 - 4]
mov ecx, 0x475af4
call fcn.00411890
mov edi, eax
add esp, 4
cmp dword [esi + 0x3f28], edi
jne 0x4079be
push ecx
push 0x475af4
mov edx, 0xb
mov ecx, edi
call fcn.00430c90
add esp, 8
push 0
lea eax, [ebp - 0x840]
mov edx, edi
push 0
push eax
mov ecx, 0x475af4
call fcn.00418f20
mov eax, dword [0x4a2bec]
add esp, 0xc
movss xmm3, dword [0x49d064]
movss xmm2, dword [eax + 0x3c98]
push 0
push 0
push str.GorillaMaintainer
push ecx
lea ecx, [ebp - 0x840]
mov dword [esp], 0xbf800000
push ecx
mov ecx, dword [eax + 0x3c94]
call fcn.00440820
movss xmm0, dword [ebp - 0x840]
addss xmm0, dword [0x49cf48]
movss xmm1, dword [ebp - 0x95c]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
mulss xmm1, dword [0x49cf04]
movss dword [ebp - 0x95c], xmm1
call fcn.00419130
mov ecx, dword [0x4a2bf8]
call fcn.0041f4d0
mov ecx, dword [0x4a2bec]
push str.GorillaMaintainer
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
movss xmm0, dword [eax + 0x44]
movss xmm2, dword [eax + 0x40]
subss xmm0, dword [eax + 0x94]
subss xmm2, dword [eax + 0x90]
addss xmm0, dword [0x49cff0]
addss xmm2, dword [ebp - 0x95c]
movss dword [eax + 0x10c], xmm0
movss dword [eax + 0x108], xmm2
movss xmm1, dword [eax + 0x124]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x120]
maxss xmm0, xmm2
movss dword [eax + 0x124], xmm1
movss dword [eax + 0x120], xmm0
call fcn.00447240
add esp, 4
call fcn.0041f610
push 0x24
xorps xmm0, xmm0
mov dword [ebp - 0x8d4], 0
push str.Skill_always_beats_luck__you_weasel.
lea ecx, [ebp - 0x8e4]
mov dword [ebp - 0x8d0], 0
movups xmmword [ebp - 0x8e4], xmm0
call fcn.00401880
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0xa68]
xorps xmm0, xmm0
mov dword [ebp - 0x87c], 0
push 0x10
push str.Made_by_Softcare
movq qword [ebp - 0x884], xmm0
movups xmmword [ebp - 0xa68], xmm0
mov dword [ebp - 0xa58], 0
mov dword [ebp - 0xa54], 0
call fcn.00401880
mov byte [ebp - 4], 0x12
xorps xmm0, xmm0
movups xmmword [ebp - 0xa50], xmm0
mov dword [ebp - 0xa40], 0
mov dword [ebp - 0xa3c], 0
push 0x12
push str.Github.com_Fufugua
lea ecx, [ebp - 0xa50]
call fcn.00401880
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xa38]
push 0x13
xorps xmm0, xmm0
mov dword [ebp - 0xa28], 0
push str.Discord:_softcare0
movups xmmword [ebp - 0xa38], xmm0
mov dword [ebp - 0xa24], 0
call fcn.00401880
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xa20]
push 0xe
xorps xmm0, xmm0
mov dword [ebp - 0xa10], 0
push 0x475b5c
movups xmmword [ebp - 0xa20], xmm0
mov dword [ebp - 0xa0c], 0
call fcn.00401880
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xa08]
push 0x21
xorps xmm0, xmm0
mov dword [ebp - 0x9f8], 0
push str.Boing..._Ah__Im_a_stupid_Gorilla
movups xmmword [ebp - 0xa08], xmm0
mov dword [ebp - 0x9f4], 0
call fcn.00401880
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x9f0]
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x9e0], 0
push str.I_hit_my_head_with_a.._a_pan
movups xmmword [ebp - 0x9f0], xmm0
mov dword [ebp - 0x9dc], 0
call fcn.00401880
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x9d8]
push 0x15
xorps xmm0, xmm0
mov dword [ebp - 0x9c8], 0
push str.What_even_is_this____
movups xmmword [ebp - 0x9d8], xmm0
mov dword [ebp - 0x9c4], 0
call fcn.00401880
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x9c0]
push 0x1b
xorps xmm0, xmm0
mov dword [ebp - 0x9b0], 0
push str.When_will_VAC_bypasser_come
movups xmmword [ebp - 0x9c0], xmm0
mov dword [ebp - 0x9ac], 0
call fcn.00401880
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x9a8]
push 0x33
xorps xmm0, xmm0
mov dword [ebp - 0x998], 0
push str.Well__its_coming_soon__thank_you_for_your_patience
movups xmmword [ebp - 0x9a8], xmm0
mov dword [ebp - 0x994], 0
call fcn.00401880
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
push 0xe
movups xmmword [ebp - 0x990], xmm0
mov dword [ebp - 0x980], 0
mov dword [ebp - 0x97c], 0
push str.So_stay_tuned_
lea ecx, [ebp - 0x990]
call fcn.00401880
mov byte [ebp - 4], 0x1b
push 0xf0
mov dword [ebp - 0x884], 0
mov dword [ebp - 0x880], 0
mov dword [ebp - 0x87c], 0
call fcn.00454565
mov esi, eax
add esp, 4
lea eax, [ebp - 0x884]
mov dword [ebp - 0x884], esi
mov dword [ebp - 0x880], esi
mov dword [ebp - 0x94c], eax
lea ecx, [esi + 0xf0]
mov dword [ebp - 0x87c], ecx
xorps xmm0, xmm0
mov dword [ebp - 0x83c], 0
movq qword [ebp - 0x844], xmm0
lea edi, [ebp - 0xa68]
mov dword [ebp - 0x844], esi
mov dword [ebp - 0x840], esi
mov dword [ebp - 0x83c], eax
mov byte [ebp - 4], 0x1d
push edi
mov ecx, esi
call fcn.00401670
add esi, 0x18
lea eax, [ebp - 0x978]
add edi, 0x18
mov dword [ebp - 0x840], esi
cmp edi, eax
jne 0x407db7
push ecx
mov edx, esi
mov ecx, esi
call fcn.0040cc70
add esp, 4
mov dword [ebp - 0x880], esi
push 0x401620
push 0xa
push 0x18
lea eax, [ebp - 0xa68]
mov byte [ebp - 4], 0x1f
push eax
call fcn.00454854
mov ecx, dword [0x4a2bec]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x90]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x94]
addss xmm0, dword [0x49d038]
addss xmm2, dword [0x49d040]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x124]
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
movss xmm0, dword [0x4a31a8]
call fcn.004019c0
mulss xmm0, dword [0x49cf0c]
addss xmm0, dword [0x49cf0c]
movss dword [ebp - 0x848], xmm0
movss xmm0, dword [0x4a31a8]
addss xmm0, dword [0x49cf90]
call fcn.004019c0
mulss xmm0, dword [0x49cf0c]
addss xmm0, dword [0x49cf0c]
movss dword [ebp - 0x844], xmm0
movss xmm0, dword [0x4a31a8]
addss xmm0, dword [0x49cfc0]
call fcn.004019c0
mulss xmm0, dword [0x49cf0c]
mov ecx, dword [0x4a2bf4]
mov dword [ebp - 0x83c], 0x3f800000
addss xmm0, dword [0x49cf0c]
movss dword [ebp - 0x840], xmm0
call fcn.0041f4d0
lea eax, [ebp - 0x848]
push str.Hello_Gorillas
push eax
call fcn.00447330
call fcn.0041f610
mov ecx, dword [0x4a2bec]
mov esi, dword [ebp - 0x960]
movss xmm0, dword [ecx + 0x18]
mulss xmm0, dword [0x49cee4]
addss xmm0, dword [0x4a31a8]
movss dword [0x4a31a8], xmm0
movups xmm0, xmmword [esi + 0x3a8c]
movups xmmword [ebp - 0x958], xmm0
movups xmm0, xmmword [esi + 0x3a6c]
movups xmmword [ebp - 0x870], xmm0
movups xmm0, xmmword [esi + 0x3a7c]
movups xmmword [ebp - 0x970], xmm0
movaps xmm0, xmmword [0x49d0d0]
movups xmmword [esi + 0x3a8c], xmm0
movaps xmm0, xmmword [0x49d0d0]
movups xmmword [esi + 0x3a6c], xmm0
movaps xmm0, xmmword [0x49d0d0]
movups xmmword [esi + 0x3a7c], xmm0
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x90]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x94]
addss xmm0, dword [0x49d044]
mov ecx, dword [0x4a2bf8]
subss xmm2, dword [0x49cfc0]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x124]
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
call fcn.0041f4d0
add esp, 4
mov dword [ebp - 0x840], 0
lea edx, [ebp - 0x840]
mov dword [ebp - 0x83c], 0
mov ecx, 0x475c38
call fcn.00447aa0
add esp, 4
test al, al
je 0x408059
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.0041f610
mov ecx, dword [0x4a2c00]
call fcn.0041f4d0
movups xmm0, xmmword [ebp - 0x958]
movups xmmword [esi + 0x3a8c], xmm0
movups xmm0, xmmword [ebp - 0x970]
movups xmmword [esi + 0x3a7c], xmm0
movups xmm0, xmmword [ebp - 0x870]
movups xmmword [esi + 0x3a6c], xmm0
call fcn.0041efe0
lea ecx, [ebp - 0x884]
call fcn.00408110
mov ecx, dword [ebp - 0x8d0]
cmp ecx, 0xf
jbe 0x4080dd
mov edx, dword [ebp - 0x8e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4080d3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406c31
push ecx
push edx
call fcn.0045476e
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00454557
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret