Function at 0x140073b70
Capabilities:
Log keystrokes
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x100
movaps xmmword [rsp + 0xf0], xmm6
mov rax, qword [0x1400e0170]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov rbx, rdx
mov r15, rcx
mov qword [rbp - 0x29], rcx
lea rax, [0x1400e0120]
cmp qword [0x1400e0138], 0x10
cmovae rax, qword [0x1400e0120]
mov qword [0x1400e0dc8], rax
mov edx, 0x65
mov rcx, rbx
call qword [sym.imp.USER32.dll_LoadIconA]
mov rdi, rax
xor r12d, r12d
mov qword [rbp - 0x79], 0x50
mov qword [rbp - 0x69], r12
mov qword [rbp - 0x59], r12
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x31], r12
mov qword [rbp - 0x61], rbx
lea rax, [0x1400743a0]
mov qword [rbp - 0x71], rax
lea rax, str.Millennium
mov qword [rbp - 0x39], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rbp - 0x51], rax
lea rcx, [rbp - 0x79]
call qword [sym.imp.USER32.dll_RegisterClassExW]
movaps xmm0, xmmword [rbp - 0x79]
movaps xmmword [0x1400e0d70], xmm0
movaps xmm1, xmmword [rbp - 0x69]
movaps xmmword [0x1400e0d80], xmm1
movaps xmm0, xmmword [rbp - 0x59]
movaps xmmword [0x1400e0d90], xmm0
movaps xmm1, xmmword [rbp - 0x49]
movaps xmmword [0x1400e0da0], xmm1
movaps xmm0, xmmword [rbp - 0x39]
movaps xmmword [0x1400e0db0], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov eax, dword [0x1400e0144]
mov dword [rsp + 0x38], eax
mov eax, dword [0x1400e0140]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r13d, 0x80cf0000
mov r9d, r13d
mov r8, qword [0x1400e0dc8]
movq rdx, xmm0
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x1400e0dc0], rax
mov r9, rdi
mov edx, 0x80
lea r8d, [r12 + 1]
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageA]
mov r9, rdi
xor r8d, r8d
mov edx, 0x80
mov rcx, qword [0x1400e0dc0]
call qword [sym.imp.USER32.dll_SendMessageA]
mov r14, qword [0x1400e0dc0]
lea rdx, [rbp - 0x11]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClientRect]
lea rdx, [rbp - 0x21]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowRect]
mov edi, dword [rbp - 0x19]
sub edi, dword [rbp - 0x21]
mov ebx, dword [rbp - 0x15]
sub ebx, dword [rbp - 0x1d]
lea ecx, [r12 + 1]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
mov esi, eax
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
sub esi, eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
mov r10d, eax
mov eax, edi
cdq
sub eax, edx
sar eax, 1
sub r10d, eax
mov eax, dword [rbp - 5]
sub eax, dword [rbp - 0xd]
mov r9d, dword [rbp - 9]
sub r9d, dword [rbp - 0x11]
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], eax
mov r8d, esi
mov edx, r10d
mov rcx, r14
call qword [sym.imp.USER32.dll_MoveWindow]
mov dword [rbp - 0x21], r12d
lea rcx, [rbp - 0x21]
call qword [sym.imp.dwmapi.dll_DwmIsCompositionEnabled]
cmp dword [rbp - 0x21], r12d
je 0x140073d97
test eax, eax
jne 0x140073d97
mov al, 1
jmp 0x140073d99
xor al, al
mov ebx, 0x800f0000
test al, al
cmovne ebx, r13d
mov edx, 0xfffffff0
mov rcx, qword [0x1400e0dc0]
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
cmp ebx, eax
je 0x140073e37
movsxd r8, ebx
mov edx, 0xfffffff0
mov rcx, qword [0x1400e0dc0]
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov rbx, qword [0x1400e0dc0]
mov dword [rbp - 0x21], r12d
lea rcx, [rbp - 0x21]
call qword [sym.imp.dwmapi.dll_DwmIsCompositionEnabled]
cmp dword [rbp - 0x21], r12d
je 0x140073dfe
test eax, eax
jne 0x140073dfe
lea rdx, [0x14008c6a8]
mov rcx, rbx
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov dword [rsp + 0x30], 0x23
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x1400e0dc0]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov edx, 5
mov rcx, qword [0x1400e0dc0]
call qword [sym.imp.USER32.dll_ShowWindow]
cmp byte [0x1400b91f1], r12b
je 0x140073e76
mov byte [0x1400b91f2], 1
mov rbx, qword [0x1400e0dc0]
mov dword [rbp - 0x21], r12d
lea rcx, [rbp - 0x21]
call qword [sym.imp.dwmapi.dll_DwmIsCompositionEnabled]
cmp dword [rbp - 0x21], r12d
je 0x140073e76
test eax, eax
jne 0x140073e76
lea rdx, [0x14008c6a8]
mov rcx, rbx
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rbx, qword [0x1400e0dc0]
mov ecx, 0x20
call sub.d3d9.dll_Direct3DCreate9
mov rcx, rax
mov qword [0x1400e0cf0], rax
lea rsi, [0x1400e0d00]
test rax, rax
je 0x140073f2f
xorps xmm0, xmm0
movups xmmword [0x1400e0d00], xmm0
movups xmmword [0x1400e0d10], xmm0
movups xmmword [0x1400e0d20], xmm0
movups xmmword [0x1400e0d30], xmm0
mov dword [0x1400e0d28], 1
mov dword [0x1400e0d18], 1
mov dword [0x1400e0d08], r12d
mov dword [0x1400e0d2c], 1
mov dword [0x1400e0d30], 0x50
mov dword [0x1400e0d3c], 1
mov rax, qword [rax]
lea rdx, [0x1400e0cf8]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x40
mov r9, rbx
xor edx, edx
lea r8d, [rdx + 1]
call qword [rax + 0x80]
test eax, eax
jns 0x140073f78
mov rcx, qword [0x1400e0cf0]
mov rdx, qword [0x1400e0cf8]
test rdx, rdx
je 0x140073f52
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov qword [0x1400e0cf8], r12
mov rcx, qword [0x1400e0cf0]
test rcx, rcx
je 0x140073f64
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1400e0cf0], r12
mov rdx, qword [0x1400e0d88]
mov rcx, qword [0x1400e0db0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov edx, 5
mov rcx, qword [0x1400e0dc0]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1400e0dc0]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x1400e0dc0]
call qword [sym.imp.USER32.dll_SetWindowPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, eax
xor edx, edx
mov rcx, qword [0x1400e0dc0]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ebx, eax
mov r8d, 1
mov edx, edi
mov ecx, eax
call qword [sym.imp.USER32.dll_AttachThreadInput]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [r9 - 1]
mov rcx, qword [0x1400e0dc0]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov dword [rsp + 0x30], 0x43
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [r9 - 2]
mov rcx, qword [0x1400e0dc0]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, qword [0x1400e0dc0]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov rcx, qword [0x1400e0dc0]
call qword [sym.imp.USER32.dll_SetFocus]
mov rcx, qword [0x1400e0dc0]
call qword [sym.imp.USER32.dll_SetActiveWindow]
xor r8d, r8d
mov edx, edi
mov ecx, ebx
call qword [sym.imp.USER32.dll_AttachThreadInput]
xor ecx, ecx
call fcn.140034f00
mov rcx, rax
call fcn.14004e3f0
call fcn.140042660
mov rbx, rax
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
movss xmm3, dword [0x140085dc0]
mov r8d, 0x269f0
lea rdx, [0x1400b9200]
mov rcx, qword [rax + 0xa0]
call fcn.140055ce0
or dword [rbx], 0x400
mov dword [0x1400e0d3c], 1
mov dword [0x1400e0d38], r12d
lea r9, [rbp - 0x21]
mov r8d, 0x52e
lea rdx, [0x1400dfbf0]
mov rcx, qword [0x1400e0cf8]
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
test eax, eax
jne 0x140074105
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
lea r8, [rbp - 0x11]
xor edx, edx
call qword [rax + 0x88]
mov rax, qword [rbp - 0x21]
mov qword [0x1400e0ce8], rax
mov rcx, qword [0x1400e0dc0]
call fcn.140069410
test al, al
je 0x140074343
mov rcx, qword [0x1400e0cf8]
call fcn.140067d60
test al, al
je 0x140074343
call fcn.140074830
xorps xmm0, xmm0
movups xmmword [0x1400e0d40], xmm0
movups xmmword [0x1400e0d50], xmm0
movups xmmword [0x1400e0d60], xmm0
movss xmm6, dword [0x14007d628]
nop dword [rax]
nop word [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400e0d40]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1400741a0
lea rcx, [0x1400e0d40]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [0x1400e0d40]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x14007430d
call fcn.140067f40
call fcn.1400697d0
call fcn.140048da0
mov qword [rbp - 0x21], r12
call fcn.140042740
lea rcx, [rax + 0x18]
lea r8, [rbp - 0x21]
xor edx, edx
call fcn.14004e920
call fcn.140042740
lea rcx, [rax + 0x20]
xor edx, edx
call fcn.14004e9c0
mov r8d, dword [0x1400e0148]
lea rdx, [0x1400b91f0]
lea rcx, [0x140083d44]
call fcn.14002ee20
mov rcx, qword [r15 + 0x38]
test rcx, rcx
je 0x140074396
mov rax, qword [rcx]
call qword [rax + 0x10]
call fcn.14003eef0
call fcn.14003f6a0
mov rcx, qword [0x1400e0cf8]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r12d
movss dword [rsp + 0x28], xmm6
mov dword [rsp + 0x20], r12d
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1400e0cf8]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14007426f
call fcn.14004a9d0
call fcn.140042120
mov rcx, rax
call fcn.140068040
mov rcx, qword [0x1400e0cf8]
mov rax, qword [rcx]
call qword [rax + 0x150]
call fcn.140042660
test dword [rax], 0x400
je 0x140074281
call fcn.1400508a0
xor edx, edx
xor ecx, ecx
call fcn.14004b660
mov rcx, qword [0x1400e0cf8]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140074300
mov rcx, qword [0x1400e0cf8]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x140074300
call fcn.140067e00
mov rcx, qword [0x1400e0cf8]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x1400742fb
mov r8d, 0x6c
lea rdx, str.C:UsersAdminDocumentsmillennium_steam_patcherinstaller_srcwindowwindow.cpp
lea rcx, [0x14007f868]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.1400678b0
cmp byte [0x1400b91f0], r12b
je 0x14007438d
cmp dword [0x1400e0d48], 0x12
jne 0x140074160
mov rcx, qword [rbx + 0xa0]
call fcn.140058140
call fcn.140068cc0
call fcn.140069f30
call fcn.1400744f0
mov rcx, qword [0x1400e0dc0]
call qword [sym.imp.USER32.dll_DestroyWindow]
nop
mov rcx, qword [r15 + 0x38]
test rcx, rcx
je 0x14007435c
mov rax, qword [rcx]
cmp rcx, r15
setne dl
call qword [rax + 0x20]
mov qword [r15 + 0x38], r12
xor al, al
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.140076580
mov rbx, qword [rsp + 0x150]
movaps xmm6, xmmword [rsp + 0xf0]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call sub.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_
int3