Function at 0x18004b710
Capabilities:
Check for time delay via queryperformancecounter
Suspend thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
mov eax, 0x20c0
call fcn.1800d3260
sub rsp, rax
mov rax, qword [0x18010f050]
xor rax, rsp
mov qword [rsp + 0x20b0], rax
mov eax, dword [0x180119834]
cmp eax, 4
je 0x18004c8f3
cmp eax, 7
je 0x18004c8f3
call fcn.1800989c0
mov r14, rax
mov qword [rsp + 0x80], rax
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x8b0]
call sub.VCRUNTIME140.dll_memset
xor sil, sil
xor r15d, r15d
mov ebx, r15d
mov r12d, r15d
mov dword [rsp + 0x48], r15d
lea ecx, [r15 + 1]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xb0], r15
test r14, r14
je 0x18004c83c
mov r13d, r15d
mov dword [rsp + 0x40], r15d
cmp r13d, 3
jge 0x18004c815
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x8b0]
call sub.VCRUNTIME140.dll_memset
mov r9, qword [0x180119a70]
mov edx, r15d
mov dword [rsp + 0x68], edx
cmp edx, 0x100
jge 0x18004b809
movsxd rcx, edx
movzx eax, byte [rcx + r9]
xor al, 0xc4
mov byte [rcx + r9], al
inc edx
jmp 0x18004b7eb
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r9 + r8], 0
jne 0x18004b810
mov rdx, r9
mov rcx, r14
call fcn.180098f90
mov rdi, rax
mov rdx, qword [0x180119990]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x18004b836
mov rcx, r14
call fcn.180098f90
mov rbx, rax
mov rcx, qword [0x180119880]
mov qword [rsp + 0x30], rcx
mov ecx, dword [0x180119834]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov r9, rdi
lea r8, str.k_sh_sc_dt_s
mov edx, 0x400
lea rcx, [rsp + 0x8b0]
call fcn.180004d80
mov edx, r15d
mov dword [rsp + 0x6c], edx
mov r8, qword [0x180119a70]
cmp edx, 0x100
jge 0x18004b8ae
movsxd rcx, edx
movzx eax, byte [rcx + r8]
xor al, 0xc4
mov byte [rcx + r8], al
inc edx
mov dword [rsp + 0x6c], edx
jmp 0x18004b890
mov rcx, rdi
call fcn.180099230
mov rcx, rbx
call fcn.180099230
lea r8, str.https:__www.gamemodi.net_subscription.php
mov edx, 0x2712
mov rcx, r14
call fcn.180098a80
mov edx, reloc.WS2_32.dll_listen
lea r8d, [rdx + 0x20]
mov rcx, r14
call fcn.180098a80
mov edi, Ordinal_79
lea r8d, [rdi - 0x3f]
mov edx, edi
mov rcx, r14
call fcn.180098a80
lea r8, [rsp + 0x8b0]
mov edx, 0x271f
mov rcx, r14
call fcn.180098a80
lea r8, str.Hook64_2.0
mov edx, 0x2722
mov rcx, r14
call fcn.180098a80
lea r8, [0x18004b660]
mov edx, 0x4e2b
mov rcx, r14
call fcn.180098a80
lea r8, [rsp + 0xa8]
mov edx, 0x2711
mov rcx, r14
call fcn.180098a80
mov rcx, r14
call fcn.180098a70
test eax, eax
jne 0x18004c7ad
xorps xmm0, xmm0
movups xmmword [rsp + 0x88], xmm0
movups xmmword [rsp + 0x98], xmm0
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x10b0]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x18b0]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x58], 0x800
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x10b0]
mov edx, 0x800
lea r8d, [rdi - 0x4d]
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
test eax, eax
jne 0x18004b9d9
mov dword [rsp + 0x58], r15d
movaps xmm0, xmmword [rsp + 0x10b0]
movups xmmword [rsp + 0x88], xmm0
lea rcx, [rsp + 0x10b0]
lea rdx, [rsp + 0x10c0]
mov r8d, 0x7f0
call sub.VCRUNTIME140.dll_memcpy
lea r14, vtable.Rijndael.0
mov qword [rsp + 0x430], r14
mov byte [rsp + 0x438], 0
lea r8, [rsp + 0x88]
lea rcx, [rsp + 0x430]
call fcn.1800438f0
cmp byte [rsp + 0x438], 0
je 0x18004ca47
movsxd r8, dword [rsp + 0x800]
xor edx, edx
mov eax, 0x800
div r8
test rdx, rdx
jne 0x18004ca6f
mov esi, r15d
mov dword [rsp + 0x74], r15d
lea rdi, [rsp + 0x10b0]
mov qword [rsp + 0xf8], rdi
lea rbx, [rsp + 0x18b0]
mov qword [rsp + 0xb8], rbx
nop dword [rax]
nop word [rax + rax]
movsxd rcx, r8d
xor edx, edx
mov eax, 0x800
div rcx
movsxd rcx, esi
cmp rcx, rax
jae 0x18004bb54
mov r8, rbx
lea rdx, [rsp + 0x828]
lea rcx, [rsp + 0x430]
call fcn.1800441d0
mov r8, rdi
mov qword [rsp + 0xe8], rdi
mov rcx, rbx
mov qword [rsp + 0xf0], rbx
cmp byte [rsp + 0x438], 0
je 0x18004ca97
mov edx, r15d
mov dword [rsp + 0x70], edx
movsxd rax, dword [rsp + 0x800]
cmp edx, eax
jge 0x18004bb18
movzx eax, byte [r8]
inc r8
mov qword [rsp + 0xe8], r8
xor byte [rcx], al
inc rcx
mov qword [rsp + 0xf0], rcx
inc edx
jmp 0x18004bae8
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x828]
call sub.VCRUNTIME140.dll_memcpy
movsxd r8, dword [rsp + 0x800]
add rdi, r8
mov qword [rsp + 0xf8], rdi
add rbx, r8
mov qword [rsp + 0xb8], rbx
inc esi
mov dword [rsp + 0x74], esi
jmp 0x18004ba90
lea rax, vtable.TinyXML::XMLNode.0
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], r15
mov qword [rsp + 0x110], r15
mov dword [rsp + 0x118], r15d
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x120], xmm0
mov dword [rsp + 0x130], r15d
mov qword [rsp + 0x138], r15
movdqa xmmword [rsp + 0x140], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x150], xmm1
mov qword [rsp + 0x160], r15
lea rax, vtable.TinyXML::XMLDocument.0
mov qword [rsp + 0x100], rax
mov byte [rsp + 0x168], 0
mov byte [rsp + 0x169], 1
mov dword [rsp + 0x16c], r15d
mov dword [rsp + 0x170], r15d
mov dword [rsp + 0x178], r15d
movdqa xmmword [rsp + 0x180], xmm0
mov dword [rsp + 0x190], r15d
mov qword [rsp + 0x198], r15
mov qword [rsp + 0x1a0], r15
mov qword [rsp + 0x1b0], r15
lea rax, [rsp + 0x1c0]
mov qword [rsp + 0x3d0], rax
lea rcx, vtable.TinyXML::MemPool.0
mov qword [rsp + 0x1c0], rcx
lea rax, vtable.TinyXML::MemPoolT_120_.0
mov qword [rsp + 0x1c0], rax
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x1c8], rax
mov dword [rsp + 0x220], 0xa
mov dword [rsp + 0x224], r15d
mov qword [rsp + 0x228], r15
movdqa xmmword [rsp + 0x230], xmm0
lea rax, [rsp + 0x240]
mov qword [rsp + 0x3e0], rax
mov qword [rsp + 0x240], rcx
lea rax, vtable.TinyXML::MemPoolT_80_.0
mov qword [rsp + 0x240], rax
lea rax, [rsp + 0x250]
mov qword [rsp + 0x248], rax
mov dword [rsp + 0x2a0], 0xa
mov dword [rsp + 0x2a4], r15d
mov qword [rsp + 0x2a8], r15
movdqa xmmword [rsp + 0x2b0], xmm0
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x3c0], rax
mov qword [rsp + 0x2c0], rcx
lea rax, vtable.TinyXML::MemPoolT_112_.0
mov qword [rsp + 0x2c0], rax
lea rax, [rsp + 0x2d0]
mov qword [rsp + 0x2c8], rax
mov dword [rsp + 0x320], 0xa
mov dword [rsp + 0x324], r15d
mov qword [rsp + 0x328], r15
movdqa xmmword [rsp + 0x330], xmm0
lea rax, [rsp + 0x340]
mov qword [rsp + 0x3c8], rax
mov qword [rsp + 0x340], rcx
lea rax, vtable.TinyXML::MemPoolT_104_.0
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x350]
mov qword [rsp + 0x348], rax
mov dword [rsp + 0x3a0], 0xa
mov dword [rsp + 0x3a4], r15d
mov qword [rsp + 0x3a8], r15
movdqa xmmword [rsp + 0x3b0], xmm0
lea rax, [rsp + 0x100]
mov qword [rsp + 0x108], rax
nop word [rax + rax]
mov rdi, qword [rsp + 0x138]
test rdi, rdi
je 0x18004be15
mov rax, qword [rdi + 0x50]
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x140]
cmp rdi, rax
jne 0x18004bdd2
mov rax, qword [rax + 0x48]
mov qword [rsp + 0x140], rax
mov rcx, qword [rdi + 0x48]
test rcx, rcx
je 0x18004bde3
mov rax, qword [rdi + 0x50]
mov qword [rcx + 0x50], rax
mov rcx, qword [rdi + 0x50]
test rcx, rcx
je 0x18004bdf4
mov rax, qword [rdi + 0x48]
mov qword [rcx + 0x48], rax
mov qword [rdi + 0x10], r15
mov rbx, qword [rdi + 0x60]
mov rax, qword [rdi]
xor edx, edx
mov rcx, rdi
call qword [rax + 0x78]
mov rax, qword [rbx]
mov rdx, rdi
mov rcx, rbx
call qword [rax + Ordinal_26]
jmp 0x18004bda0
mov qword [rsp + 0x140], r15
mov qword [rsp + 0x138], r15
mov dword [rsp + 0x16c], r15d
test dword [rsp + 0x178], 0x200
je 0x18004be47
mov rcx, qword [rsp + 0x180]
call fcn.1800d25ac
mov dword [rsp + 0x178], r15d
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x180], xmm0
test dword [rsp + 0x190], 0x200
je 0x18004be75
mov rcx, qword [rsp + 0x198]
call fcn.1800d25ac
mov dword [rsp + 0x190], r15d
mov qword [rsp + 0x198], r15
mov qword [rsp + 0x1a0], r15
mov dword [rsp + 0x1a8], r15d
mov rcx, qword [rsp + 0x1b0]
call fcn.1800d25ac
mov qword [rsp + 0x1b0], r15
cmp byte [rsp + 0x18b0], 0
je 0x18004c04b
lea rax, [rsp + 0x18b0]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x18004bec7
lea rcx, [rbx + 1]
call fcn.1800d25b4
mov qword [rsp + 0x1b0], rax
mov r8, rbx
lea rdx, [rsp + 0x18b0]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x1b0]
mov byte [rax + rbx], 0
lea rcx, [rsp + 0x100]
call fcn.1800472b0
cmp dword [rsp + 0x16c], 0
je 0x18004c0cc
nop dword [rax + rax]
mov rdi, qword [rsp + 0x138]
test rdi, rdi
je 0x18004bf95
mov rax, qword [rdi + 0x50]
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x140]
cmp rdi, rax
jne 0x18004bf52
mov rax, qword [rax + 0x48]
mov qword [rsp + 0x140], rax
mov rcx, qword [rdi + 0x48]
test rcx, rcx
je 0x18004bf63
mov rax, qword [rdi + 0x50]
mov qword [rcx + 0x50], rax
mov rcx, qword [rdi + 0x50]
test rcx, rcx
je 0x18004bf74
mov rax, qword [rdi + 0x48]
mov qword [rcx + 0x48], rax
mov qword [rdi + 0x10], r15
mov rbx, qword [rdi + 0x60]
mov rax, qword [rdi]
xor edx, edx
mov rcx, rdi
call qword [rax + 0x78]
mov rax, qword [rbx]
mov rdx, rdi
mov rcx, rbx
call qword [rax + Ordinal_26]
jmp 0x18004bf20
mov qword [rsp + 0x140], r15
mov qword [rsp + 0x138], r15
mov rax, qword [rsp + 0x1c0]
mov rdx, qword [rax + 0x28]
lea rax, [fcn.180047d70]
lea rcx, [rsp + 0x1c0]
cmp rdx, rax
jne 0x18004bfcc
call fcn.180047d70
jmp 0x18004bfce
call rdx
mov rax, qword [rsp + 0x240]
mov rdx, qword [rax + 0x28]
lea rax, [fcn.180047d70]
lea rcx, [rsp + 0x240]
cmp rdx, rax
jne 0x18004bff5
call fcn.180047d70
jmp 0x18004bff7
call rdx
mov rax, qword [rsp + 0x2c0]
mov rdx, qword [rax + 0x28]
lea rax, [fcn.1800479b0]
lea rcx, [rsp + 0x2c0]
cmp rdx, rax
jne 0x18004c01e
call fcn.1800479b0
jmp 0x18004c020
call rdx
mov rax, qword [rsp + 0x340]
mov rdx, qword [rax + 0x28]
lea rax, [fcn.180047680]
lea rcx, [rsp + 0x340]
cmp rdx, rax
jne 0x18004c047
call fcn.180047680
jmp 0x18004c0be
call rdx
jmp 0x18004c0be
mov dword [rsp + 0x16c], reloc.WS2_32.dll_ntohs
test dword [rsp + 0x178], 0x200
je 0x18004c070
mov rcx, qword [rsp + 0x180]
call fcn.1800d25ac
mov dword [rsp + 0x178], r15d
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x180], xmm0
test dword [rsp + 0x190], 0x200
je 0x18004c09e
mov rcx, qword [rsp + 0x198]
call fcn.1800d25ac
mov dword [rsp + 0x190], r15d
mov qword [rsp + 0x198], r15
mov qword [rsp + 0x1a0], r15
mov dword [rsp + 0x1a8], r15d
cmp dword [rsp + 0x16c], 0
jne 0x18004c763
mov rdi, qword [rsp + 0x138]
test rdi, rdi
je 0x18004c134
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov rbx, rax
test rax, rax
je 0x18004c12e
mov rax, qword [rax]
mov rcx, rbx
call qword [rax + Ordinal_50]
test rax, rax
je 0x18004c103
mov rax, r15
lea r12, str.userdata
jmp 0x18004c118
lea rcx, [rbx + 0x18]
call fcn.180044870
lea r12, str.userdata
cmp rax, r12
je 0x18004c13e
mov r8d, 0x7fffffff
mov rdx, r12
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18004c13e
mov rdi, qword [rdi + 0x50]
jmp 0x18004c0d4
mov rbx, r15
lea r12, str.userdata
lea rdx, str.userid
mov rcx, rbx
call fcn.18004b5c0
mov qword [rsp + 0x78], rax
mov rdi, qword [rsp + 0x138]
nop word [rax + rax]
test rdi, rdi
je 0x18004c1b2
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx]
mov rbx, rax
test rax, rax
je 0x18004c1ac
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_50]
test rax, rax
je 0x18004c188
mov rax, r15
jmp 0x18004c196
lea rcx, [rbx + 0x18]
call fcn.180044870
cmp rax, r12
je 0x18004c1b5
mov r8d, 0x7fffffff
mov rdx, r12
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18004c1b5
mov rdi, qword [rdi + 0x50]
jmp 0x18004c160
mov rbx, r15
lea rdx, str.username
mov rcx, rbx
call fcn.18004b5c0
mov r14, rax
mov qword [rsp + 0x60], rax
mov rdi, qword [rsp + 0x138]
test rdi, rdi
je 0x18004c226
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx]
mov rbx, rax
test rax, rax
je 0x18004c220
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_50]
test rax, rax
je 0x18004c1fc
mov rax, r15
jmp 0x18004c20a
lea rcx, [rbx + 0x18]
call fcn.180044870
cmp rax, r12
je 0x18004c229
mov r8d, 0x7fffffff
mov rdx, r12
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18004c229
mov rdi, qword [rdi + 0x50]
jmp 0x18004c1d4
mov rbx, r15
lea rdx, str.substate
mov rcx, rbx
call fcn.18004b5c0
mov rsi, rax
mov qword [rsp + 0xe0], rax
mov rdi, qword [rsp + 0x138]
nop dword [rax + rax]
test rdi, rdi
je 0x18004c2a2
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx]
mov rbx, rax
test rax, rax
je 0x18004c29c
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_50]
test rax, rax
je 0x18004c278
mov rax, r15
jmp 0x18004c286
lea rcx, [rbx + 0x18]
call fcn.180044870
cmp rax, r12
je 0x18004c2a5
mov r8d, 0x7fffffff
mov rdx, r12
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18004c2a5
mov rdi, qword [rdi + 0x50]
jmp 0x18004c250
mov rbx, r15
lea rdx, str.authlevel
mov rcx, rbx
call fcn.18004b5c0
mov r13, rax
mov rdi, qword [rsp + 0x138]
lea r12, str.sessiondata
test rdi, rdi
je 0x18004c318
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx]
mov rbx, rax
test rax, rax
je 0x18004c312
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_50]
test rax, rax
je 0x18004c2ee
mov rax, r15
jmp 0x18004c2fc
lea rcx, [rbx + 0x18]
call fcn.180044870
cmp rax, r12
je 0x18004c31b
mov r8d, 0x7fffffff
mov rdx, r12
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18004c31b
mov rdi, qword [rdi + 0x50]
jmp 0x18004c2c6
mov rbx, r15
lea rdx, str.authtoken
mov rcx, rbx
call fcn.18004b5c0
mov r12, rax
mov rdi, qword [rsp + 0x138]
test rdi, rdi
je 0x18004c395
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx]
mov rbx, rax
test rax, rax
je 0x18004c38f
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_50]
test rax, rax
je 0x18004c364
mov rax, r15
lea rcx, str.sessiondata
jmp 0x18004c379
lea rcx, [rbx + 0x18]
call fcn.180044870
lea rcx, str.sessiondata
cmp rax, rcx
je 0x18004c398
mov r8d, 0x7fffffff
mov rdx, rcx
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18004c398
mov rdi, qword [rdi + 0x50]
jmp 0x18004c335
mov rbx, r15
lea rdx, str.minversion
mov rcx, rbx
call fcn.18004b5c0
mov rdi, rax
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x18004c716
test r14, r14
je 0x18004c716
test rsi, rsi
je 0x18004c716
test r13, r13
je 0x18004c716
test r12, r12
je 0x18004c716
test rax, rax
je 0x18004c716
cmp byte [0x18011959d], 0
jne 0x18004c5b4
mov eax, dword [0x180119834]
cmp eax, 4
je 0x18004c5b4
cmp eax, 7
je 0x18004c5b4
mov rcx, rdi
call fcn.1800465a0
mov rbx, 0xffffffffffffffff
nop dword [rax]
lea rbx, [rbx + 1]
cmp byte [rax + rbx], 0
jne 0x18004c420
lea rcx, [rbx + 1]
call fcn.1800d25b4
mov r14, rax
lea r8, [rbx + 1]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov ecx, 8
call fcn.1800d25b4
mov rsi, rax
xor eax, eax
mov qword [rsi], rax
mov rcx, rdi
call fcn.1800465a0
mov rdx, r14
sub rdx, rax
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rax]
mov byte [rax + rdx], cl
lea rax, [rax + 1]
test cl, cl
jne 0x18004c470
movabs rax, 0x312e302e302e32
mov qword [rsi], rax
mov rcx, r14
mov qword [rsp + 0xc0], rcx
mov rdx, r14
mov qword [rsp + 0xc8], rdx
movzx r8d, byte [rcx]
test r8b, r8b
je 0x18004c4cf
inc rcx
mov qword [rsp + 0xc0], rcx
mov byte [rdx], r8b
mov rax, r15
cmp r8b, 0x2e
setne al
add rdx, rax
mov qword [rsp + 0xc8], rdx
jmp 0x18004c4a1
mov byte [rdx], 0
mov rcx, rsi
mov qword [rsp + 0xd0], rcx
mov rdx, rsi
mov qword [rsp + 0xd8], rdx
nop dword [rax + rax]
movzx r8d, byte [rcx]
test r8b, r8b
je 0x18004c51e
inc rcx
mov qword [rsp + 0xd0], rcx
mov byte [rdx], r8b
mov rax, r15
cmp r8b, 0x2e
setne al
add rdx, rax
mov qword [rsp + 0xd8], rdx
jmp 0x18004c4f0
mov byte [rdx], 0
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov ebx, eax
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
cmp eax, ebx
jle 0x18004c592
lea r8, str.Your_Hook64_version_is_out_of_date_and_must_be_updated_to_continue_usage._n_nPlease_visit_gamemodi.net_to_download_the_latest_version.
mov edx, 0x400
lea rcx, [rsp + 0x8b0]
call fcn.180004d80
lea rbx, [rsp + 0x8b0]
mov qword [rsp + 0x50], rbx
lea rcx, [rsp + 0x100]
call fcn.180046f40
nop
lea rax, vtable.Rijndael.0
mov qword [rsp + 0x430], rax
mov edi, Ordinal_79
jmp 0x18004c81a
mov rcx, r14
call fcn.1800d25ac
mov rcx, rsi
call fcn.1800d25ac
mov rsi, qword [rsp + 0xe0]
mov r14, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x78]
mov rcx, r12
call fcn.1800465a0
mov r8d, reloc.WLDAP32.dll_Ordinal_32
mov rdx, rax
mov rcx, qword [0x180119af8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov rax, qword [0x180119880]
mov r8, qword [0x180119af8]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004c5f6
inc rax
test ecx, ecx
jne 0x18004c5e3
test edx, edx
je 0x18004c647
lea r8, str.There_was_an_error_while_retrieving_your_subscription_information._n_E_TOKENINVALID_
mov edx, 0x400
lea rcx, [rsp + 0x8b0]
call fcn.180004d80
lea rbx, [rsp + 0x8b0]
mov qword [rsp + 0x50], rbx
lea rcx, [rsp + 0x100]
call fcn.180046f40
nop
lea rax, vtable.Rijndael.0
mov qword [rsp + 0x430], rax
mov edi, Ordinal_79
jmp 0x18004c81a
mov rcx, rsi
call fcn.1800465a0
mov rcx, rax
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [reloc.WS2_32.dll_connect], eax
mov rcx, r13
call fcn.1800465a0
mov rcx, rax
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [0x180119878], eax
mov rcx, rbx
call fcn.1800465a0
mov rcx, rax
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov rcx, r14
call fcn.1800465a0
lea r8, str.Anonymous
test rax, rax
cmovne r8, rax
mov edx, 0x40
mov rcx, qword [0x180119b78]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov sil, 1
mov byte [rsp + 0x44], sil
mov rbx, r15
mov qword [rsp + 0x50], rbx
lea rcx, [0x180119b00]
call fcn.180048550
nop
lea rcx, [rsp + 0x100]
call fcn.180046f40
nop
lea rax, vtable.Rijndael.0
mov qword [rsp + 0x430], rax
mov edi, Ordinal_79
mov r14, qword [rsp + 0x80]
mov r12d, dword [rsp + 0x48]
mov r13d, dword [rsp + 0x40]
jmp 0x18004c7dd
lea r8, str.There_was_an_error_while_retrieving_your_subscription_information._n_E_DATAINVALID_
mov edx, 0x400
lea rcx, [rsp + 0x8b0]
call fcn.180004d80
lea rbx, [rsp + 0x8b0]
mov qword [rsp + 0x50], rbx
lea rcx, [rsp + 0x100]
call fcn.180046f40
nop
lea rax, vtable.Rijndael.0
mov qword [rsp + 0x430], rax
mov edi, Ordinal_79
jmp 0x18004c81a
lea r8, str.There_was_an_error_while_retrieving_your_subscription_information._n_E_WEBINVALID_
mov edx, 0x400
lea rcx, [rsp + 0x8b0]
call fcn.180004d80
lea rbx, [rsp + 0x8b0]
mov qword [rsp + 0x50], rbx
lea rcx, [rsp + 0x100]
call fcn.180046f40
nop
lea rax, vtable.Rijndael.0
mov qword [rsp + 0x430], rax
mov edi, Ordinal_79
jmp 0x18004c81a
mov ecx, eax
call fcn.180099b40
mov r9, rax
lea r8, str.There_was_an_error_while_retrieving_your_subscription_information._n__s_
mov edx, 0x400
lea rcx, [rsp + 0x8b0]
call fcn.180004d80
lea rbx, [rsp + 0x8b0]
mov qword [rsp + 0x50], rbx
test sil, sil
jne 0x18004c81a
inc r12d
mov dword [rsp + 0x48], r12d
cmp byte [0x18011959d], sil
mov ecx, 0x5dc
je 0x18004c7fd
mov ecx, 0x1f40
call qword [sym.imp.KERNEL32.dll_Sleep]
inc r13d
mov dword [rsp + 0x40], r13d
jmp 0x18004b7c2
mov edi, Ordinal_79
mov rcx, qword [rsp + 0x80]
call fcn.1800989b0
cmp dword [rsp + 0x48], 3
jl 0x18004c848
test rbx, rbx
jne 0x18004c848
lea rbx, str.The_connection_timed_out_when_trying_to_contact_gamemodi.net.
jmp 0x18004c848
lea rbx, str.There_was_an_error_while_initializing_cURL__please_contact_support.
mov edi, Ordinal_79
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp dword [0x180119878], 2
jl 0x18004c86b
mov dword [reloc.WS2_32.dll_connect], 6
jmp 0x18004c899
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [0x180119b60]
call fcn.1800485c0
cmp rax, 0x1339e0
jle 0x18004c899
mov dword [reloc.WS2_32.dll_connect], 4
call fcn.18004cb80
test al, al
jne 0x18004c8e7
call fcn.180049730
mov r8d, eax
mov edx, 1
lea ecx, [rdx + 1]
call qword [sym.imp.KERNEL32.dll_OpenThread]
test rax, rax
jne 0x18004cac0
mov ebx, 0x8000
cmp rbx, 0x8000
jb 0x18004c8d4
call fcn.1800986a0
add rdi, 0x13f
add rbx, rdi
lea rdi, [rbx + 0x17b]
jmp 0x18004c8c6
mov byte [0x18011959d], 1
jmp 0x18004ca15
xor r9d, r9d
lea r8, [rsp + 0x40]
xor edx, edx
lea rbx, [0x180119fe0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
test eax, eax
jne 0x18004c918
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
cmp dword [rsp + 0x40], 0
je 0x18004c9a5
mov qword [rsp + 0x88], rbx
mov dword [rsp + 0x90], 4
mov dword [reloc.WS2_32.dll_connect], 5
mov dword [0x180119878], 1
lea r8, [0x1800e1a96]
mov edx, 0x40
mov rcx, qword [0x180119b78]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
mov rdx, qword [0x180119880]
mov rcx, qword [0x180119af8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x18011959d], 1
xor r15d, r15d
mov dword [rsp + 0x90], r15d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_InitOnceComplete]
test eax, eax
je 0x18004cb73
lea rbx, [0x180119b00]
mov qword [rsp + 0x88], rbx
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x18004c9cd
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov eax, dword [0x180119b4c]
cmp eax, 0x7fffffff
jne 0x18004c9ee
dec eax
mov dword [0x180119b4c], eax
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x60]
mov qword [0x180119b60], rax
mov byte [0x180119b70], 0
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rcx, qword [rsp + 0x20b0]
xor rcx, rsp
call fcn.1800d2550
lea r11, [rsp + 0x20c0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea rdx, str.Object_not_Initialized
lea rcx, [rsp + 0x3e8]
call fcn.180004c80
lea rdx, [0x18010bed8]
lea rcx, [rsp + 0x3e8]
call sub.VCRUNTIME140.dll__CxxThrowException
lea rdx, str.Data_not_multiple_of_Block_Size
lea rcx, [rsp + 0x400]
call fcn.180004c80
lea rdx, [0x18010bed8]
lea rcx, [rsp + 0x400]
call sub.VCRUNTIME140.dll__CxxThrowException
lea rdx, str.Object_not_Initialized
lea rcx, [rsp + 0x418]
call fcn.180004c80
lea rdx, [0x18010bed8]
lea rcx, [rsp + 0x418]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
xor edx, edx
mov rcx, rax
call qword [sym.imp.ntdll.dll_NtSuspendThread]
test rbx, rbx
jne 0x18004cb6a
call fcn.18004cc40
cmp eax, 1
jne 0x18004caea
lea rbx, str.Your_Gamemodi_Plus_subscription_has_expired._n_nPlease_renew_it_at_www.gamemodi.net.
jmp 0x18004cb6a
test eax, eax
jne 0x18004caf7
lea rbx, str.Your_account_has_had_too_many_logins_from_different_PCs_in_the_last_30_minutes._This_can_happen_when_using_too_many_computers_or_sharing_your_key._n_nYou_are_allowed_one_PC_VM_per_key_instance._n_nPlease_try_again_later_or_buy_more_key_instances.
jmp 0x18004cb6a
cmp eax, 2
jne 0x18004cb05
lea rbx, str.This_key_and_account_are_banned._n_nPlease_contact_Sorien_if_you_believe_this_is_an_error.
jmp 0x18004cb6a
cmp eax, 3
jne 0x18004cb13
lea rbx, str.This_computer_has_been_banned._n_nPlease_contact_Sorien_if_you_believe_this_is_an_error.
jmp 0x18004cb6a
call fcn.1800484d0
cmp rax, 0x1339e0
jle 0x18004cb29
lea rbx, str.Your_Gamemodi_Plus_subscription_was_unable_to_be_validated_timed_out._n_nPlease_check_your_internet_connection__proxy_vpn__or_the_website_availability.
jmp 0x18004cb6a
call fcn.18004cc20
mov edx, eax
call fcn.18004cc40
cmp eax, edx
jge 0x18004cb63
lea rdx, str.Guest
mov rcx, qword [0x180119a70]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
lea rcx, str.The_key_you_have_entered_doesnt_have_an_active_Gamemodi_Plus_subscription__or_the_required_access._n_nPlease_check_your_account_on_the_website__or_the_key_you_have_entered_and_try_again.
lea rbx, str.To_use_Hook64_for_this_game__you_must_have_a_Gamemodi_Plus_subscription._n_nPlease_enter_your_key_in_the_Settings_window_of_the_launcher.
test eax, eax
cmovne rbx, rcx
jmp 0x18004cb6a
lea rbx, str.An_unexpected_subscription_error_has_occurred._n_nThe_game_will_now_close.
mov rcx, rbx
call fcn.1800092f0
int3
call fcn.1800d2530
int3