Function at 0x100c8070
Capabilities:
Create thread
Enumerate gui resources
Execute command
Hide graphical window
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10220440
mov eax, dword fs:[0]
push eax
sub esp, 0x290
mov eax, dword [0x10320bc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 1
mov dword [ebp - 0xf8], 0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xb0
lea eax, [ebp - 0xf0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0xf0], 0x10306c40
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
push 0
push 0
lea eax, [ebp - 0xec]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf8], 1
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool_]
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xf0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xf0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0xf4], eax
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xec], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov byte [ebp - 0xa4], 0
mov byte [ebp - 0xaf], 0
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x1042432c]
mov ecx, dword [0x10424330]
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 0xb4], 0
mov dword [ebp - 4], 2
cmp byte [0x103ee7ff], 1
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
mov ebx, dword [sym.imp.USER32.dll_FindWindowExW]
jne 0x100c81eb
push 0
push 0x100c8bc0
call dword [sym.imp.USER32.dll_EnumWindows]
push dword [0x103ee84c]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x100c81d0
push 9
push dword [0x103ee84c]
call edi
push str.AEngineRenderWindow
push str.AEngineRenderWindowClass
push 0
push dword [0x103ee84c]
call ebx
mov dword [0x103ee84c], eax
jmp 0x100c823b
cmp byte [0x103ee7fe], 1
jne 0x100c8236
push 0
push 0x100c8bc0
call dword [sym.imp.USER32.dll_EnumWindows]
push dword [0x103ee84c]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x100c821b
push 9
push dword [0x103ee84c]
call edi
push str.TitanOpenglWindow
push str.TitanOpenglWindowClass
push 0
push dword [0x103ee84c]
call ebx
mov dword [0x103ee84c], eax
jmp 0x100c823b
mov eax, dword [0x103ee84c]
mov ebx, dword [sym.imp.USER32.dll_GetWindowRect]
push 0x103ee860
push eax
call ebx
mov ecx, dword [0x103ee860]
test ecx, ecx
js 0x100c826e
mov eax, dword [0x103ee864]
test eax, eax
js 0x100c826e
cmp dword [0x103ee868], 0
jl 0x100c826e
cmp dword [0x103ee86c], 0
jge 0x100c82e5
lea eax, [ebp - 0x20]
push eax
push dword [0x103ee84c]
call ebx
mov eax, dword [0x103ee86c]
mov ecx, dword [0x103ee864]
sub eax, ecx
mov edx, dword [0x103ee868]
mov esi, dword [0x103ee860]
sub edx, esi
push 3
push eax
push edx
push ecx
push esi
push 0xffffffffffffffff
push dword [0x103ee3e0]
mov dword [0x1041fe88], edx
mov dword [0x1041fe8c], eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 1
push dword [0x1041fe8c]
push dword [0x1041fe88]
push dword [0x103ee864]
push dword [0x103ee860]
push dword [0x103ee3e0]
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [0x103ee864]
mov ecx, dword [0x103ee860]
mov dword [0x103ee3cc], eax
xorps xmm0, xmm0
mov eax, dword [0x1041fe88]
mov dword [0x103ee3c8], eax
mov eax, dword [0x1041fe8c]
mov dword [0x103ee3c4], eax
lea eax, [ebp - 0x12c]
push eax
mov dword [0x103ee3e4], ecx
mov dword [ebp - 0x12c], 0x30
mov dword [ebp - 0x128], 3
mov dword [ebp - 0x124], 0x100570e0
movups xmmword [ebp - 0x120], xmm0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0x10306d20
mov dword [ebp - 0x104], str.DX11WindowClass
mov dword [ebp - 0x100], 0
call dword [sym.imp.USER32.dll_RegisterClassExW]
push 0
push 0
push 0
push 0
push dword [0x103ee3c4]
push dword [0x103ee3c8]
push dword [0x103ee3cc]
push dword [0x103ee3e4]
push accept
push str.DX11Window
push str.DX11WindowClass
push 0x8000028
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x103ee3e0], eax
test eax, eax
je 0x100c83e7
movaps xmm0, xmmword [0x10311ca0]
push 2
push 0xff
push 0
push eax
movups xmmword [0x103ee3d0], xmm0
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
push 0x103ee3d0
push dword [0x103ee3e0]
call dword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
push 5
push dword [0x103ee3e0]
call edi
push ecx
call fcn.100547d0
mov eax, dword [0x103ee858]
add esp, 4
test eax, eax
je 0x100c83ff
inc dword [eax + 0x370]
push 0x3d48
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov dword [ebp - 0x134], eax
lea ecx, [ebp - 0x12d]
add esp, 4
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0xf8], eax
mov byte [ebp - 4], 3
test eax, eax
je 0x100c8438
push 0
mov ecx, eax
call fcn.10085b30
jmp 0x100c843a
xor eax, eax
mov byte [ebp - 4], 2
cmp dword [0x103ee858], 0
jne 0x100c844c
mov dword [0x103ee858], eax
mov ecx, eax
call fcn.1008bf20
mov edi, dword [0x103ee858]
mov ebx, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov dword [ebp - 0xf4], edi
test edi, edi
jne 0x100c8489
push 0xd69
push str.C:Users_sDesktop_sydsoundimgui_dockingimgui.cpp
push str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call ebx
mov edi, dword [0x103ee858]
add esp, 0xc
mov dword [ebp - 0xf4], edi
call fcn.100c77e0
push 0x78
lea eax, [ebp - 0x224]
mov byte [edi + 0x358], 1
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x78
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x1ec], 0x7f7fffff
push 0
mov esi, 0xffff
mov dword [ebp - 0x1e0], 0x3f800000
push eax
mov word [ebp - 0x1dc], si
mov byte [ebp - 0x21c], 1
call sub.VCRUNTIME140.dll_memset
push 0x78
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x198], 3
push 0
push eax
mov dword [ebp - 0x194], 1
mov dword [ebp - 0x174], 0x7f7fffff
mov dword [ebp - 0x168], 0x3f800000
mov word [ebp - 0x164], si
mov byte [ebp - 0x1a4], 0
mov byte [ebp - 0x1e8], 1
mov byte [ebp - 0x208], 1
mov dword [ebp - 0x210], 2
mov dword [ebp - 0x20c], 2
call sub.VCRUNTIME140.dll_memset
movss xmm3, dword [0x10311920]
lea eax, [ebp - 0x1ac]
mov ecx, dword [edi + 0x98]
add esp, 0x24
mov byte [ebp - 0x294], 1
mov dword [ebp - 0x264], 0x7f7fffff
mov dword [ebp - 0x258], 0x3f800000
push 0
push eax
push 0x4f2a4
push 0x102b5600
mov word [ebp - 0x254], si
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x284], 1
mov byte [ebp - 0x280], 1
call fcn.100a63b0
movss xmm3, dword [0x10311930]
mov esi, eax
mov ecx, dword [edi + 0x98]
lea eax, [ebp - 0x29c]
push 0x1031162c
push eax
push 0x6458
push 0x103df7f0
call fcn.100a63b0
movss xmm3, dword [0x10311920]
lea eax, [ebp - 0x224]
push 0x1031162c
push eax
push ecx
mov ecx, dword [edi + 0x98]
push 0x10296f68
call fcn.100a64d0
movss xmm3, dword [0x10311910]
lea eax, [ebp - 0x1ac]
mov ecx, dword [edi + 0x98]
push 0
push eax
push 0x4f2a4
push 0x102b5600
call fcn.100a63b0
mov dword [0x103ee39c], esi
mov esi, dword [0x103ee3e0]
push 0x104242e8
mov dword [0x103ee398], eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x100c87a1
push 0x104242e0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x100c87a1
mov eax, dword [0x103ee858]
mov dword [0x104242d8], esi
test eax, eax
jne 0x100c867f
push 0xd69
push str.C:Users_sDesktop_sydsoundimgui_dockingimgui.cpp
push str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call ebx
mov eax, dword [0x103ee858]
add esp, 0xc
or dword [eax + 0xc], 6
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [eax + 0xe0], esi
xor esi, esi
mov dword [eax + 0xbc], str.imgui_impl_win32
mov dword [eax + 0x34], 9
mov dword [eax + 0x38], 0x25
mov dword [eax + 0x3c], 0x27
mov dword [eax + 0x40], 0x26
mov dword [eax + 0x44], 0x28
mov dword [eax + 0x48], 0x21
mov dword [eax + 0x4c], 0x22
mov dword [eax + 0x50], 0x24
mov dword [eax + 0x54], 0x23
mov dword [eax + 0x58], 0x2d
mov dword [eax + 0x5c], 0x2e
mov dword [eax + 0x60], 8
mov dword [eax + 0x64], 0x20
mov dword [eax + 0x68], 0xd
mov dword [eax + 0x6c], 0x1b
mov dword [eax + 0x70], 0xd
mov dword [eax + 0x74], 0x41
mov dword [eax + 0x78], 0x43
mov dword [eax + 0x7c], 0x56
mov dword [eax + 0x80], 0x58
mov dword [eax + 0x84], 0x59
mov dword [eax + 0x88], 0x5a
mov dword [ebp - 0x24], 0x1030f348
mov dword [ebp - 0x20], str.xinput1_3.dll
mov dword [ebp - 0x1c], str.xinput9_1_0.dll
mov dword [ebp - 0x18], str.xinput1_2.dll
mov dword [ebp - 0x14], str.xinput1_1.dll
push dword [ebp + esi*4 - 0x24]
call ebx
mov edi, eax
test edi, edi
jne 0x100c8775
inc esi
cmp esi, 5
jl 0x100c8761
jmp 0x100c8795
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.XInputGetCapabilities
push edi
call esi
push str.XInputGetState
push edi
mov dword [0x104242d0], eax
call esi
mov dword [0x104242d4], eax
mov edi, dword [ebp - 0xf4]
mov ebx, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x103ee38c]
mov esi, dword [0x103ee3a8]
mov dword [ebp - 0x134], eax
mov eax, dword [0x103ee858]
test eax, eax
jne 0x100c87d4
push 0xd69
push str.C:Users_sDesktop_sydsoundimgui_dockingimgui.cpp
push str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call ebx
mov eax, dword [0x103ee858]
add esp, 0xc
or dword [eax + 0xc], 8
lea ecx, [ebp - 0xf4]
mov dword [eax + 0xc0], str.imgui_impl_dx11
mov eax, dword [esi]
push ecx
push 0x1030f318
push esi
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xfc], 0
call dword [eax]
test eax, eax
jne 0x100c885e
mov eax, dword [ebp - 0xf4]
lea edx, [ebp - 0xf8]
push edx
push 0x1030f328
push eax
mov ecx, dword [eax]
call dword [ecx + 0x18]
test eax, eax
jne 0x100c885e
mov eax, dword [ebp - 0xf8]
lea edx, [ebp - 0xfc]
push edx
push 0x1030f338
push eax
mov ecx, dword [eax]
call dword [ecx + 0x18]
test eax, eax
jne 0x100c885e
mov eax, dword [ebp - 0x134]
mov dword [0x104242bc], esi
mov dword [0x104242c8], eax
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x100c886e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0xf8]
test ecx, ecx
je 0x100c887e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [0x104242bc]
push eax
mov ecx, dword [eax]
call dword [ecx + 4]
mov eax, dword [0x104242c8]
push eax
mov ecx, dword [eax]
call dword [ecx + 4]
movss xmm3, dword [0x10311910]
lea eax, [ebp - 0x1ac]
mov ecx, dword [edi + 0x98]
push 0
push eax
push 0x4f2a4
push 0x102b5600
call fcn.100a63b0
movss xmm3, dword [0x10311908]
mov ecx, dword [edi + 0x98]
push 0
mov dword [0x103ee398], eax
lea eax, [ebp - 0x1ac]
push eax
push 0x4f2a4
push 0x102b5600
call fcn.100a63b0
push ecx
mov ecx, dword [edi + 0x98]
mov dword [0x103ee39c], eax
call fcn.100a6260
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x1004bec0
push 0
push 0
call edi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call esi
push 0
push 0
push 0
push 0x10062950
push 0
push 0
call edi
push eax
call esi
push 0
push 0
push 0
push 0x100ca680
push 0
push 0
call edi
push eax
call esi
mov ebx, dword [sym.imp.USER32.dll_SetForegroundWindow]
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop word [eax + eax]
push 0x19
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push 0
push 0
push dword [0x103ee3e0]
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x100c8986
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
cmp byte [0x103ee7fe], 1
jne 0x100c89bb
push 0
push 0x103115b4
call dword [sym.imp.USER32.dll_FindWindowW]
push str.TitanOpenglWindow
push str.TitanOpenglWindowClass
push 0
push eax
mov dword [0x103ee84c], eax
call dword [sym.imp.USER32.dll_FindWindowExW]
mov dword [0x103ee84c], eax
jmp 0x100c89c0
mov eax, dword [0x103ee84c]
test eax, eax
je 0x100c8a66
lea ecx, [ebp - 0x20]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ebx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
sub edx, ebx
mov ecx, dword [ebp - 0x14]
mov dword [0x103ee3e4], ebx
mov dword [0x103ee3cc], esi
cmp dword [0x103ee3c8], edx
jne 0x100c8a01
mov eax, ecx
sub eax, esi
cmp dword [0x103ee3c4], eax
je 0x100c8a0f
sub ecx, esi
mov dword [0x103ee3c8], edx
mov dword [0x103ee3c4], ecx
push 3
push dword [0x1041faec]
push dword [0x1041fe84]
push esi
push ebx
push 0xffffffffffffffff
push dword [0x103ee3e0]
call dword [sym.imp.USER32.dll_SetWindowPos]
push 1
push dword [0x1041faec]
push dword [0x1041fe84]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push dword [0x103ee3e0]
call dword [sym.imp.USER32.dll_MoveWindow]
push 0x103ee3d0
push dword [0x103ee3e0]
call dword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov ebx, dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x100c8a74
push 0
push dword [0x103ee3e0]
call dword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
cmp byte [0x1032170c], 0
je 0x100c8a85
push dword [0x103ee3e0]
call ebx
push 0x24
call edi
push 0x23
call edi
test al, 1
je 0x100c8a9f
push str.TaskKill__F__IM_appmarket.exe
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push 0x2d
call edi
test al, 1
je 0x100c8b04
cmp byte [0x10320cb5], 1
mov esi, dword [0x103ee3e0]
push 0xffffffffffffffec
push esi
jne 0x100c8ad0
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0x80000
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x100c8ae8
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0xfff7ffff
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push esi
call ebx
cmp byte [0x10320cb5], 0
sete byte [0x10320cb5]
cmp byte [0x1032170c], 0
sete byte [0x1032170c]
push 0x54
call edi
test al, 1
je 0x100c8b41
mov eax, dword [0x103ee894]
cmp eax, 2
jne 0x100c8b22
mov dword [0x103ee894], 0
jmp 0x100c8b41
test eax, eax
jne 0x100c8b32
mov dword [0x103ee894], 1
jmp 0x100c8b41
cmp eax, 1
jne 0x100c8b41
mov dword [0x103ee894], 2
push 0x72
call edi
test al, 1
je 0x100c8b7d
cmp byte [0x103ee8b0], 0
sete al
cmp byte [0x103ee87b], 0
mov byte [0x103ee8b0], al
sete byte [0x103ee87b]
cmp byte [0x103ee8a1], 0
sete byte [0x103ee8a1]
test al, al
jne 0x100c8b7d
call fcn.100c9200
push 0x74
call edi
test al, 1
je 0x100c8b93
cmp byte [0x10320f23], 0
sete byte [0x10320f23]
push 0x75
call edi
test al, 1
je 0x100c8ba9
cmp byte [0x103ee8a8], 0
sete byte [0x103ee8a8]
push 0x24
call edi
jmp 0x100c8950