Function at 0x409400
Capabilities:
Enumerate process modules
Execute command
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x411038
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x12b0
call fcn.00410240
mov eax, dword [0x41800c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xorps xmm0, xmm0
mov dword [ebp - 0x1224], 0
movups xmmword [ebp - 0x1234], xmm0
mov dword [ebp - 0x1220], 0xf
mov byte [ebp - 0x1234], 0
mov dword [ebp - 4], 0
movups xmmword [ebp - 0x1284], xmm0
mov dword [ebp - 0x1274], 0
mov dword [ebp - 0x1270], 0xf
mov byte [ebp - 0x1284], 0
mov byte [ebp - 4], 1
mov edx, str.Welcome_to_the
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov byte [ebp - 0x12a1], 0
call fcn.00403cf0
mov edx, str.Losen
lea ecx, [ebp - 0x123c]
mov esi, eax
call fcn.0040ae20
mov edx, eax
mov byte [ebp - 4], 2
mov ecx, esi
call fcn.0040af10
mov edx, str._San_Andreas_Multiplayer
lea ecx, [ebp - 0x12ac]
mov esi, eax
call fcn.0040b580
mov edx, eax
mov byte [ebp - 4], 3
mov ecx, esi
call fcn.0040af10
mov edx, str.Loader__n
mov ecx, eax
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x12ac]
call fcn.0040a6a0
lea ecx, [ebp - 0x123c]
mov byte [ebp - 4], 1
call fcn.0040a6a0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.I_allow_you_to_load_an_ESP_into_your_game__that_has_the_ability_to_hide_itself_from_Shadowplay_
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.However__before_I_can_do_my_job__I_need_to_make_sure_that_your_system_is_suitable_for_proper_use_
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Therefore__do_not_mind_when_im_printing_out_some_information_about_your_system_
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._nSo__lets_get_started__shall_we_
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push str.pause
call esi
push 0x413310
call esi
add esp, 8
lea eax, [ebp - 0x12a0]
push eax
push 0x20019
push 0
push str.GeForceExperienceShellOpenCommand
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push SysReAllocString
call edi
test eax, eax
jne 0x40a4d9
push dword [ebp - 0x12a0]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._DEBUG_:_GeForce_Experience_has_been_detected.
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
call fcn.004052e0
test al, al
je 0x40a42a
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._DEBUG_:_ShadowPlay_supported_GPU_has_been_detected.
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea eax, [ebp - 0x12a0]
push eax
push 0x20019
push 0
push str.SoftwareSAMP
push SysReAllocString
call edi
test eax, eax
jne 0x40a3cb
push dword [ebp - 0x12a0]
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._DEBUG_:_SAMP_has_been_installed.
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
sub esp, 8
lea ecx, [ebp - 0x129c]
call fcn.004050a0
mov ecx, dword [ebp - 0x1220]
add esp, 8
cmp ecx, 0x10
jb 0x4096aa
mov edx, dword [ebp - 0x1234]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4096a0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409ace
push ecx
push edx
call fcn.0040ef56
add esp, 8
movups xmm0, xmmword [ebp - 0x129c]
sub esp, 0x18
lea eax, [ebp - 0x1234]
mov ecx, esp
movups xmmword [ebp - 0x1234], xmm0
movq xmm0, qword [ebp - 0x128c]
push eax
movq qword [ebp - 0x1224], xmm0
call fcn.0040ab20
lea ecx, [ebp - 0x123c]
call fcn.0040b670
add esp, 0x18
mov edi, eax
mov byte [ebp - 4], 8
mov edx, 0x412dcc
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00403cf0
lea ecx, [ebp - 0x12ac]
mov esi, eax
call fcn.0040b4a0
mov edx, eax
mov byte [ebp - 4], 9
mov ecx, esi
call fcn.0040af10
mov edx, 0x412dc0
mov ecx, eax
call fcn.00403cf0
mov edx, str.Selected_Game:
mov ecx, eax
call fcn.00403cf0
mov edx, edi
mov ecx, eax
call fcn.0040af10
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x12ac]
call fcn.0040a6a0
lea ecx, [ebp - 0x123c]
mov byte [ebp - 4], 1
call fcn.0040a6a0
mov ecx, dword [ebp - 0x1224]
mov eax, SysReAllocString
sub eax, ecx
cmp eax, 9
jb 0x40a5c1
cmp dword [ebp - 0x1220], 0x10
lea eax, [ebp - 0x1234]
push 9
cmovae eax, dword [ebp - 0x1234]
push str._samp.dll
push ecx
push eax
push ecx
push dword [ebp - 0x12a8]
lea ecx, [ebp - 0x129c]
call fcn.0040cc80
sub esp, 0x18
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x129c]
mov ecx, esp
push eax
call fcn.0040ab20
lea ecx, [ebp - 0x126c]
call fcn.00405e50
add esp, 0x18
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x126c]
cmp dword [ebp - 0x1258], 0x10
mov esi, dword [ebp - 0x125c]
cmovae ecx, dword [ebp - 0x126c]
cmp esi, 0xb
jne 0x4099b6
mov edx, str.Unsupported
sub esi, 4
jb 0x409809
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40980e
add ecx, 4
add edx, 4
sub esi, 4
jae 0x4097f8
cmp esi, 0xfffffffc
je 0x409842
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x40983b
cmp esi, 0xfffffffd
je 0x409842
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x40983b
cmp esi, 0xfffffffe
je 0x409842
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x40983b
cmp esi, 0xffffffff
je 0x409842
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x409842
sbb eax, eax
or eax, 1
jmp 0x409844
xor eax, eax
test eax, eax
jne 0x4099b6
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, 0x412dcc
call fcn.00403cf0
mov edx, str.ERROR
lea ecx, [ebp - 0x12ac]
mov esi, eax
call fcn.0040ae20
mov edx, eax
mov byte [ebp - 4], 0xc
mov ecx, esi
call fcn.0040af10
mov edx, 0x412dc0
mov ecx, eax
call fcn.00403cf0
mov edx, str.Unsupported_SAMP_Version_detected_
mov ecx, eax
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x12ac]
mov byte [ebp - 4], 0xb
call fcn.0040a6a0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.Please_make_sure_that_you_have_installed_0.3.7_R1_or_0.3.7_R4_in_your_selected_Gamepath_
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [ebp - 0x1258]
cmp ecx, 0x10
jb 0x409906
mov edx, dword [ebp - 0x126c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4098fc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409ace
push ecx
push edx
call fcn.0040ef56
add esp, 8
mov ecx, dword [ebp - 0x1288]
mov dword [ebp - 0x125c], 0
mov dword [ebp - 0x1258], 0xf
mov byte [ebp - 0x126c], 0
cmp ecx, 0x10
jb 0x40995b
mov edx, dword [ebp - 0x129c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x409951
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409ace
push ecx
push edx
call fcn.0040ef56
add esp, 8
mov ecx, dword [ebp - 0x1220]
cmp ecx, 0x10
jb 0x409995
mov edx, dword [ebp - 0x1234]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40998b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409ace
push ecx
push edx
call fcn.0040ef56
add esp, 8
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040ef13
mov esp, ebp
pop ebp
ret
sub esp, 0x18
lea eax, [ebp - 0x126c]
mov ecx, esp
push eax
call fcn.0040ab20
lea ecx, [ebp - 0x123c]
call fcn.0040b670
add esp, 0x18
mov edi, eax
mov byte [ebp - 4], 0xd
mov edx, 0x412dcc
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00403cf0
lea ecx, [ebp - 0x12ac]
mov esi, eax
call fcn.0040b4a0
mov edx, eax
mov byte [ebp - 4], 0xe
mov ecx, esi
call fcn.0040af10
mov edx, 0x412dc0
mov ecx, eax
call fcn.00403cf0
mov edx, str.Selected_SAMP_Version:
mov ecx, eax
call fcn.00403cf0
mov edx, edi
mov ecx, eax
call fcn.0040af10
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x12ac]
call fcn.0040a6a0
lea ecx, [ebp - 0x123c]
call fcn.0040a6a0
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x1258]
cmp ecx, 0x10
jb 0x409a83
mov edx, dword [ebp - 0x126c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x409a79
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409ace
push ecx
push edx
call fcn.0040ef56
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x1288]
mov dword [ebp - 0x125c], 0
mov dword [ebp - 0x1258], 0xf
mov byte [ebp - 0x126c], 0
cmp ecx, 0x10
jb 0x409ade
mov edx, dword [ebp - 0x129c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x409ad4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x409ad4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0040ef56
add esp, 8
call fcn.00408770
test al, al
jne 0x409b7b
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, 0x412dcc
call fcn.00403cf0
mov edx, str.ERROR
lea ecx, [ebp - 0x12ac]
mov esi, eax
call fcn.0040ae20
mov edx, eax
mov byte [ebp - 4], 0x10
mov ecx, esi
call fcn.0040af10
mov edx, str._:Failed_to_download_the_cheat__Perhaps_the_server_does_not_exist_anymore.
mov ecx, eax
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x12ac]
call fcn.0040a6a0
mov ecx, dword [ebp - 0x1220]
cmp ecx, 0x10
jb 0x409995
mov edx, dword [ebp - 0x1234]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40998b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a5bb
jmp 0x40998b
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x413614
call fcn.00403cf0
mov edx, str.Congratulations_
lea ecx, [ebp - 0x12ac]
mov esi, eax
call fcn.0040af80
mov edx, eax
mov byte [ebp - 4], 0x11
mov ecx, esi
call fcn.0040af10
mov edx, str._Your_system_is_suitable_for_proper_use_
mov ecx, eax
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x12ac]
mov byte [ebp - 4], 1
call fcn.0040a6a0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.I_will_simply_wait_until_the_detected_folder_is_being_used_to_start_a
call fcn.00403cf0
mov edx, str.San_Andreas_Multiplayer
lea ecx, [ebp - 0x12ac]
mov esi, eax
call fcn.0040b580
mov edx, eax
mov byte [ebp - 4], 0x12
mov ecx, esi
call fcn.0040af10
mov edx, str._session_
mov ecx, eax
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x12ac]
mov byte [ebp - 4], 1
call fcn.0040a6a0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.When_that_happens__i_will_load_the_cheat_into_your_game_and_disappear_
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0xa
movups xmmword [ecx], xmm0
push str.gta_sa.exe
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.0040bfe0
call fcn.00407e40
mov edi, eax
add esp, 0x18
mov ecx, edi
mov dword [ebp - 0x12bc], edi
call fcn.00407da0
test edi, edi
je 0x40a07b
test eax, eax
je 0x40a07b
push 0x104
lea eax, [ebp - 0x118]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x1238], 0x104
push edi
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
jne 0x409cf5
xorps xmm0, xmm0
mov dword [ebp - 0x1244], 0
push 0
movups xmmword [ebp - 0x1254], xmm0
mov dword [ebp - 0x1240], 0
push 0x412baf
jmp 0x409d57
lea eax, [ebp - 0x1238]
push eax
lea eax, [ebp - 0x118]
push eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_QueryFullProcessImageNameA]
push esi
test eax, eax
jne 0x409d19
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x409cce
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
mov dword [ebp - 0x1244], 0
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x1240], 0
movups xmmword [ebp - 0x1254], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409d46
sub ecx, edx
lea eax, [ebp - 0x118]
push ecx
push eax
lea ecx, [ebp - 0x1254]
call fcn.0040bfe0
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x1234]
cmp dword [ebp - 0x1220], 0x10
mov edx, dword [ebp - 0x1234]
mov edi, dword [ebp - 0x1224]
cmovae eax, edx
setae cl
add eax, edi
mov dword [ebp - 0x12b0], eax
lea eax, [ebp - 0x1234]
test cl, cl
je 0x409d9e
mov eax, edx
lea esi, [edi + edx]
jmp 0x409da7
lea esi, [eax + edi]
lea eax, [ebp - 0x1234]
cmp eax, esi
je 0x409dd9
nop dword [eax + eax]
cmp byte [eax], 0
je 0x409dba
inc eax
cmp eax, esi
jne 0x409db0
cmp eax, esi
je 0x409dd9
lea ecx, [eax + 1]
cmp ecx, esi
je 0x409dd9
mov dl, byte [ecx]
test dl, dl
je 0x409dce
mov byte [eax], dl
inc eax
inc ecx
cmp ecx, esi
jne 0x409dc5
mov edi, dword [ebp - 0x1224]
cmp dword [ebp - 0x1220], 0x10
lea ecx, [ebp - 0x1234]
mov esi, eax
cmovae ecx, dword [ebp - 0x1234]
setae dl
sub esi, ecx
mov ecx, dword [ebp - 0x12b0]
sub ecx, eax
mov eax, edi
sub eax, esi
cmp eax, ecx
cmovb ecx, eax
test dl, dl
mov dword [ebp - 0x12b0], ecx
lea eax, [ebp - 0x1234]
cmovne eax, dword [ebp - 0x1234]
sub edi, ecx
mov ecx, edi
sub ecx, esi
inc ecx
lea edx, [eax + esi]
mov eax, dword [ebp - 0x12b0]
push ecx
add eax, edx
push eax
push edx
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x1254]
lea ecx, [ebp - 0x1254]
add esp, 0xc
mov dword [ebp - 0x1224], edi
cmp dword [ebp - 0x1240], 0x10
lea edx, [ebp - 0x1234]
mov esi, edi
mov dword [ebp - 0x12b0], eax
cmovae ecx, eax
cmp dword [ebp - 0x1220], 0x10
cmovae edx, dword [ebp - 0x1234]
cmp dword [ebp - 0x1244], edi
cmovb esi, dword [ebp - 0x1244]
sub esi, 4
jb 0x409e92
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x409e97
add edx, 4
add ecx, 4
sub esi, 4
jae 0x409e81
cmp esi, 0xfffffffc
je 0x409ecb
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x409ec4
cmp esi, 0xfffffffd
je 0x409ecb
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x409ec4
cmp esi, 0xfffffffe
je 0x409ecb
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x409ec4
cmp esi, 0xffffffff
je 0x409ecb
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x409ecb
sbb eax, eax
or eax, 1
jmp 0x409ecd
xor eax, eax
test eax, eax
jne 0x40a035
cmp edi, dword [ebp - 0x1244]
jb 0x40a035
ja 0x40a035
push dword [ebp - 0x12bc]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_OpenProcess]
push 0x1fffff
call eax
mov esi, eax
mov dword [ebp - 0x12a8], esi
test esi, esi
je 0x40a02e
lea eax, [ebp - 0x12a0]
push eax
push 0x1000
lea eax, [ebp - 0x121c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_K32EnumProcessModules]
test eax, eax
je 0x40a02e
xor edi, edi
test dword [ebp - 0x12a0], 0xfffffffc
jbe 0x40a02e
nop
push 0x104
lea eax, [ebp - 0x21c]
push eax
push dword [ebp + edi*4 - 0x121c]
push esi
call dword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExA]
test eax, eax
je 0x40a01c
lea eax, [ebp - 0x21c]
push str.samp.dll
push eax
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsstr]
add esp, 8
test eax, eax
je 0x40a01c
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x412dcc
call fcn.00403cf0
lea ecx, [ebp - 0x12b8]
mov esi, eax
call fcn.0040b4a0
mov edx, eax
mov byte [ebp - 4], 0x14
mov ecx, esi
call fcn.0040af10
mov edx, 0x412dc0
mov ecx, eax
call fcn.00403cf0
mov edx, str.SAMP_has_been_started_
mov ecx, eax
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x12b8]
mov byte [ebp - 4], 0x13
call fcn.0040a6a0
cmp dword [ebp - 0x1240], 0x10
lea eax, [ebp - 0x1254]
push dword [ebp - 0x1244]
cmovae eax, dword [ebp - 0x12b0]
lea ecx, [ebp - 0x1284]
push eax
mov byte [ebp - 0x12a1], 1
call fcn.0040ac20
mov eax, dword [ebp - 0x1254]
mov esi, dword [ebp - 0x12a8]
mov dword [ebp - 0x12b0], eax
mov eax, dword [ebp - 0x12a0]
inc edi
shr eax, 2
cmp edi, eax
jb 0x409f40
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x1240]
cmp eax, 0x10
jb 0x40a075
mov edx, dword [ebp - 0x12b0]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x40a06b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a5bb
push ecx
push edx
call fcn.0040ef56
add esp, 8
mov edi, dword [ebp - 0x12bc]
cmp byte [ebp - 0x12a1], 0
je 0x409c46
push 0x413700
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
add esp, 4
mov edx, 0x412dcc
call fcn.00403cf0
lea ecx, [ebp - 0x12b8]
mov esi, eax
call fcn.0040b4a0
mov edx, eax
mov byte [ebp - 4], 0x15
mov ecx, esi
call fcn.0040af10
mov edx, 0x412dc0
mov ecx, eax
call fcn.00403cf0
mov edx, str.Injecting_the_cheat_into_the_game...
mov ecx, eax
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x12b8]
call fcn.0040a6a0
push edi
push 0
mov byte [ebp - 4], 0x16
mov eax, dword [sym.imp.KERNEL32.dll_OpenProcess]
push 0x1fffff
call eax
mov esi, eax
test esi, esi
jne 0x40a1f3
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x412dcc
call fcn.00403cf0
lea ecx, [ebp - 0x12b8]
mov esi, eax
call fcn.0040b4a0
mov edx, eax
mov byte [ebp - 4], 0x17
mov ecx, esi
call fcn.0040af10
mov edx, 0x412dc0
mov ecx, eax
call fcn.00403cf0
mov edx, str._We_ran_into_some_problems..._486
mov ecx, eax
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x12b8]
mov byte [ebp - 4], 0x16
call fcn.0040a6a0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call dword [sym.imp.MSVCP140.dll_public:_int___thiscall_std::basic_istream_char__struct_std::char_traits_char__::get_void_]
mov ecx, dword [ebp - 0x1270]
cmp ecx, 0x10
jb 0x40a1b1
mov edx, dword [ebp - 0x1284]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40a1a7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2ff
push ecx
push edx
call fcn.0040ef56
add esp, 8
mov ecx, dword [ebp - 0x1220]
cmp ecx, 0x10
jb 0x40a1eb
mov edx, dword [ebp - 0x1234]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40a1e1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2ff
push ecx
push edx
call fcn.0040ef56
add esp, 8
or eax, 0xffffffff
jmp 0x40999a
cmp dword [0x418068], 0x10
mov edx, 0x418054
mov ecx, esi
cmovae edx, dword [0x418054]
call fcn.00401f40
push esi
mov byte [ebp - 0x12a1], al
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x412dcc
call fcn.00403cf0
lea ecx, [ebp - 0x12b8]
mov esi, eax
call fcn.0040b4a0
cmp byte [ebp - 0x12a1], 0
jne 0x40a305
mov edx, eax
mov byte [ebp - 4], 0x18
mov ecx, esi
call fcn.0040af10
mov edx, 0x412dc0
mov ecx, eax
call fcn.00403cf0
mov edx, str._We_ran_into_some_problems..._487
mov ecx, eax
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x12b8]
mov byte [ebp - 4], 0x16
call fcn.0040a6a0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call dword [sym.imp.MSVCP140.dll_public:_int___thiscall_std::basic_istream_char__struct_std::char_traits_char__::get_void_]
mov ecx, dword [ebp - 0x1270]
cmp ecx, 0x10
jb 0x40a2c7
mov edx, dword [ebp - 0x1284]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40a2bd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2ff
push ecx
push edx
call fcn.0040ef56
add esp, 8
mov ecx, dword [ebp - 0x1220]
cmp ecx, 0x10
jb 0x40a1eb
mov edx, dword [ebp - 0x1234]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40a1e1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a1e1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov edx, eax
mov byte [ebp - 4], 0x19
mov ecx, esi
call fcn.0040af10
mov edx, 0x412dc0
mov ecx, eax
call fcn.00403cf0
mov edx, str.Done__Your_cheat_has_been_injected_
mov ecx, eax
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x12b8]
call fcn.004055e0
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.OOPS__An_exception_occured_:_
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [ebp - 0x12c0]
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov edx, eax
mov ecx, esi
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call dword [sym.imp.MSVCP140.dll_public:_int___thiscall_std::basic_istream_char__struct_std::char_traits_char__::get_void_]
mov eax, 0x40a3ad
ret
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, 0x412dcc
call fcn.00403cf0
mov edx, str.ERROR
lea ecx, [ebp - 0x12b8]
mov esi, eax
call fcn.0040ae20
mov edx, eax
mov byte [ebp - 4], 0xf
mov ecx, esi
call fcn.0040af10
mov edx, 0x412dc0
mov ecx, eax
call fcn.00403cf0
mov edx, str.Failed_to_detect_San_Andreas_Multiplayer.
mov ecx, eax
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x12b8]
jmp 0x409b39
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, 0x412dcc
call fcn.00403cf0
mov edx, str.ERROR
lea ecx, [ebp - 0x12ac]
mov esi, eax
call fcn.0040ae20
mov edx, eax
mov byte [ebp - 4], 6
mov ecx, esi
call fcn.0040af10
mov edx, 0x412dc0
mov ecx, eax
call fcn.00403cf0
mov edx, str.NVIDIA
lea ecx, [ebp - 0x12b8]
mov esi, eax
call fcn.0040af80
mov edx, eax
mov byte [ebp - 4], 7
mov ecx, esi
call fcn.0040af10
mov edx, str.Failed_to_find_a_ShadowPlay_supported_GPU_on_system_
mov ecx, eax
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x12b8]
call fcn.0040a6a0
lea ecx, [ebp - 0x12ac]
mov byte [ebp - 4], 1
call fcn.0040a6a0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.You_either_need_a_GTX_or_RTX_NVIDIA_Graphics_Card_in_order_to_use_Shadowplay_
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
jmp 0x409b3e
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, 0x412dcc
call fcn.00403cf0
mov edx, str.ERROR
lea ecx, [ebp - 0x12ac]
mov esi, eax
call fcn.0040ae20
mov edx, eax
mov byte [ebp - 4], 4
mov ecx, esi
call fcn.0040af10
mov edx, 0x412dc0
mov ecx, eax
call fcn.00403cf0
mov edx, str.NVIDIA
lea ecx, [ebp - 0x12b8]
mov esi, eax
call fcn.0040af80
mov edx, eax
mov byte [ebp - 4], 5
mov ecx, esi
call fcn.0040af10
mov edx, str._Geforce_Experience_has_not_been_detected_
mov ecx, eax
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x12b8]
call fcn.0040a6a0
lea ecx, [ebp - 0x12ac]
mov byte [ebp - 4], 1
call fcn.0040a6a0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.Please_make_sure_that_you_have_installed_the_latest_version_of_the_NVIDIA_GeForce_Experience_
call fcn.00403cf0
push 0x403f10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [ebp - 0x1220]
cmp ecx, 0x10
jb 0x409995
mov edx, dword [ebp - 0x1234]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40998b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40998b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
call fcn.00401e70
int3