Function at 0x14004f0b0
Capabilities:
Create thread
Enumerate gui resources
Get graphical window text

Disassembly:
push rdi
sub rsp, 0x1c0
mov rax, qword [0x1400a9040]
xor rax, rsp
mov qword [rsp + 0x1b0], rax
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov ecx, 1
call fcn.14006585c
mov r9, rax
lea r8, [0x140098ee0]
lea rdx, str.CONOUT_
lea rcx, [rsp + 0x30]
call fcn.140066a74
xor ecx, ecx
call fcn.14006585c
mov r9, rax
lea r8, [0x140098ee0]
lea rdx, str.CONIN_
lea rcx, [rsp + 0x30]
call fcn.140066a74
lea rcx, str.color_E
call fcn.140060de4
lea rcx, [0x140098f00]
mov dword [0x1400af078], 9
call fcn.140060de4
lea rdx, [0x140098530]
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
lea rcx, [0x1400ab2f0]
call fcn.14004ee10
test al, al
je 0x14004f16e
mov edx, 2
lea rcx, [0x1400ab2f0]
call fcn.14004ef00
lea rdx, str._____Discord:_quyengabon0676
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x1400943ac]
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x1400943ac]
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x1400943ac]
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
lea rcx, [0x1400ab2f0]
call fcn.14004ee10
test al, al
je 0x14004f1fc
mov edx, 2
lea rcx, [0x1400ab2f0]
call fcn.14004ef00
lea rdx, str._n_____Processing
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x1400943ac]
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x1400943ac]
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x1400943ac]
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
lea rcx, [0x1400ab2f0]
call fcn.14004ee10
test al, al
je 0x14004f28a
mov edx, 6
lea rcx, [0x1400ab2f0]
call fcn.14004ef00
lea rdx, str._n_____Open_Game_And_Wait_Game_Load
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
lea rdx, [0x140098530]
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
lea rcx, [0x1400ab2f0]
call fcn.14004ee10
test al, al
je 0x14004f2d1
mov edx, 7
lea rcx, [0x1400ab2f0]
call fcn.14004ef00
lea rdx, str.Not_Log_In
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
lea rcx, [0x1400ab2f0]
call fcn.14004ee10
test al, al
je 0x14004f305
mov edx, 6
lea rcx, [0x1400ab2f0]
call fcn.14004ef00
lea rdx, str.Then
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
lea rcx, [0x1400ab2f0]
call fcn.14004ee10
test al, al
je 0x14004f339
mov edx, 1
lea rcx, [0x1400ab2f0]
call fcn.14004ef00
lea rdx, str.Open_Hack
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
lea rcx, [0x1400ab2f0]
call fcn.14004ee10
test al, al
je 0x14004f36d
mov edx, 6
lea rcx, [0x1400ab2f0]
call fcn.14004ef00
lea rdx, [0x1400943c4]
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
lea rcx, [0x1400ab2f0]
call fcn.14004ee10
test al, al
je 0x14004f3a1
mov edx, 1
lea rcx, [0x1400ab2f0]
call fcn.14004ef00
lea rdx, str.Run_Admin___n
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
lea rdx, [0x1400987d0]
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [0x1400af078], 1
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r8d, 0x100
lea rdx, [rsp + 0xb0]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextA]
xor edi, edi
lea rax, [rsp + 0xb0]
xorps xmm0, xmm0
mov qword [rsp + 0x58], rdi
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x60], rdi
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], dil
jne 0x14004f420
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x48]
call fcn.14000e770
mov qword [rsp + 0x38], rdi
call fcn.14004f860
lea rdx, [rsp + 0x38]
mov dword [rsp + 0x40], eax
lea rcx, [0x14004f040]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
jne 0x14004f474
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xffffffff
jne 0x14004f474
mov rax, qword [rsp + 0x38]
test rax, rax
jne 0x14004f477
mov rax, rdi
mov rdx, qword [rsp + 0x60]
mov qword [0x1400adf08], rax
cmp rdx, 0xf
jbe 0x14004f4bd
mov rcx, qword [rsp + 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f4b8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004f4b8
call fcn.1400655cc
int3
call fcn.140052c70
mov ecx, 0x3e8
mov qword [rsp + 0x1d0], rbx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x1400adf08]
lea rdx, [rsp + 0x98]
call qword [sym.imp.USER32.dll_GetWindowRect]
xor ecx, ecx
call fcn.14006585c
mov rcx, rax
call fcn.14005dfd0
mov edx, dword [0x1400af078]
lea rcx, [0x1400ab2f0]
call fcn.14000bb10
mov rcx, rax
call fcn.14000ded0
call fcn.14004f860
lea rdx, str.Process_ID:
mov ebx, eax
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
mov rcx, rax
mov edx, ebx
call fcn.14000bb10
mov rcx, rax
call fcn.14000ded0
call fcn.14004f860
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rdx, str.Process_Handle:
mov qword [0x1400adee0], rax
lea rcx, [0x1400ab2f0]
call fcn.14000dc20
mov rcx, rax
call fcn.14004f660
mov rcx, rax
call fcn.14000ded0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov qword [rsp + 0x28], rdi
lea r8, [0x140013180]
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov qword [rsp + 0x28], rdi
lea r8, [0x14000b280]
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov qword [rsp + 0x28], rdi
lea r8, [0x1400132f0]
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [rsp + 0x1d0]
nop
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rsp + 0x68]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14004f635
lea rcx, [rsp + 0x68]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x68]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rsp + 0x70], 0x12
je 0x14004f649
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14004f600
xor ecx, ecx
call fcn.140059d28
int3