Function at 0x18004b320
Capabilities:
Check for time delay via queryperformancecounter
Suspend thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
mov eax, 0x20c0
call fcn.1800d3020
sub rsp, rax
mov rax, qword [0x18012c070]
xor rax, rsp
mov qword [rsp + 0x20b0], rax
mov eax, dword [0x180136af8]
cmp eax, 5
je 0x18004c503
cmp eax, 8
je 0x18004c503
call fcn.1800985d0
mov r14, rax
mov qword [rsp + 0x80], rax
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x8b0]
call sub.VCRUNTIME140.dll_memset
xor sil, sil
xor r15d, r15d
mov ebx, r15d
mov r12d, r15d
mov dword [rsp + 0x48], r15d
lea ecx, [r15 + 1]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xb0], r15
test r14, r14
je 0x18004c44c
mov r13d, r15d
mov dword [rsp + 0x40], r15d
cmp r13d, 3
jge 0x18004c425
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x8b0]
call sub.VCRUNTIME140.dll_memset
mov r9, qword [0x180136d20]
mov edx, r15d
mov dword [rsp + 0x68], edx
cmp edx, 0x100
jge 0x18004b419
movsxd rcx, edx
movzx eax, byte [rcx + r9]
xor al, 0xc4
mov byte [rcx + r9], al
inc edx
jmp 0x18004b3fb
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r9 + r8], 0
jne 0x18004b420
mov rdx, r9
mov rcx, r14
call fcn.180098ba0
mov rdi, rax
mov rdx, qword [0x180136c40]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x18004b446
mov rcx, r14
call fcn.180098ba0
mov rbx, rax
mov rcx, qword [0x180136b38]
mov qword [rsp + 0x30], rcx
mov ecx, dword [0x180136af8]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov r9, rdi
lea r8, str.k_sh_sc_dt_s
mov edx, 0x400
lea rcx, [rsp + 0x8b0]
call fcn.1800046e0
mov edx, r15d
mov dword [rsp + 0x6c], edx
mov r8, qword [0x180136d20]
cmp edx, 0x100
jge 0x18004b4be
movsxd rcx, edx
movzx eax, byte [rcx + r8]
xor al, 0xc4
mov byte [rcx + r8], al
inc edx
mov dword [rsp + 0x6c], edx
jmp 0x18004b4a0
mov rcx, rdi
call fcn.180098e40
mov rcx, rbx
call fcn.180098e40
lea r8, str.https:__www.gamemodi.net_subscription.php
mov edx, 0x2712
mov rcx, r14
call fcn.180098690
mov edx, reloc.WS2_32.dll_listen
lea r8d, [rdx + 0x20]
mov rcx, r14
call fcn.180098690
mov edi, Ordinal_79
lea r8d, [rdi - 0x3f]
mov edx, edi
mov rcx, r14
call fcn.180098690
lea r8, [rsp + 0x8b0]
mov edx, 0x271f
mov rcx, r14
call fcn.180098690
lea r8, str.Hook64_2.0
mov edx, 0x2722
mov rcx, r14
call fcn.180098690
lea r8, [0x18004b270]
mov edx, 0x4e2b
mov rcx, r14
call fcn.180098690
lea r8, [rsp + 0xa8]
mov edx, 0x2711
mov rcx, r14
call fcn.180098690
mov rcx, r14
call fcn.180098680
test eax, eax
jne 0x18004c3bd
xorps xmm0, xmm0
movups xmmword [rsp + 0x88], xmm0
movups xmmword [rsp + 0x98], xmm0
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x10b0]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x18b0]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x58], 0x800
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x10b0]
mov edx, 0x800
lea r8d, [rdi - 0x4d]
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
test eax, eax
jne 0x18004b5e9
mov dword [rsp + 0x58], r15d
movaps xmm0, xmmword [rsp + 0x10b0]
movups xmmword [rsp + 0x88], xmm0
lea rcx, [rsp + 0x10b0]
lea rdx, [rsp + 0x10c0]
mov r8d, 0x7f0
call sub.VCRUNTIME140.dll_memcpy
lea r14, vtable.Rijndael.0
mov qword [rsp + 0x430], r14
mov byte [rsp + 0x438], 0
lea r8, [rsp + 0x88]
lea rcx, [rsp + 0x430]
call fcn.1800434d0
cmp byte [rsp + 0x438], 0
je 0x18004c657
movsxd r8, dword [rsp + 0x800]
xor edx, edx
mov eax, 0x800
div r8
test rdx, rdx
jne 0x18004c67f
mov esi, r15d
mov dword [rsp + 0x74], r15d
lea rdi, [rsp + 0x10b0]
mov qword [rsp + 0xf8], rdi
lea rbx, [rsp + 0x18b0]
mov qword [rsp + 0xb8], rbx
nop dword [rax]
nop word [rax + rax]
movsxd rcx, r8d
xor edx, edx
mov eax, 0x800
div rcx
movsxd rcx, esi
cmp rcx, rax
jae 0x18004b764
mov r8, rbx
lea rdx, [rsp + 0x828]
lea rcx, [rsp + 0x430]
call fcn.180043db0
mov r8, rdi
mov qword [rsp + 0xe8], rdi
mov rcx, rbx
mov qword [rsp + 0xf0], rbx
cmp byte [rsp + 0x438], 0
je 0x18004c6a7
mov edx, r15d
mov dword [rsp + 0x70], edx
movsxd rax, dword [rsp + 0x800]
cmp edx, eax
jge 0x18004b728
movzx eax, byte [r8]
inc r8
mov qword [rsp + 0xe8], r8
xor byte [rcx], al
inc rcx
mov qword [rsp + 0xf0], rcx
inc edx
jmp 0x18004b6f8
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x828]
call sub.VCRUNTIME140.dll_memcpy
movsxd r8, dword [rsp + 0x800]
add rdi, r8
mov qword [rsp + 0xf8], rdi
add rbx, r8
mov qword [rsp + 0xb8], rbx
inc esi
mov dword [rsp + 0x74], esi
jmp 0x18004b6a0
lea rax, vtable.TinyXML::XMLNode.0
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], r15
mov qword [rsp + 0x110], r15
mov dword [rsp + 0x118], r15d
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x120], xmm0
mov dword [rsp + 0x130], r15d
mov qword [rsp + 0x138], r15
movdqa xmmword [rsp + 0x140], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x150], xmm1
mov qword [rsp + 0x160], r15
lea rax, vtable.TinyXML::XMLDocument.0
mov qword [rsp + 0x100], rax
mov byte [rsp + 0x168], 0
mov byte [rsp + 0x169], 1
mov dword [rsp + 0x16c], r15d
mov dword [rsp + 0x170], r15d
mov dword [rsp + 0x178], r15d
movdqa xmmword [rsp + 0x180], xmm0
mov dword [rsp + 0x190], r15d
mov qword [rsp + 0x198], r15
mov qword [rsp + 0x1a0], r15
mov qword [rsp + 0x1b0], r15
lea rax, [rsp + 0x1c0]
mov qword [rsp + 0x3d0], rax
lea rcx, vtable.TinyXML::MemPool.0
mov qword [rsp + 0x1c0], rcx
lea rax, vtable.TinyXML::MemPoolT_120_.0
mov qword [rsp + 0x1c0], rax
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x1c8], rax
mov dword [rsp + 0x220], 0xa
mov dword [rsp + 0x224], r15d
mov qword [rsp + 0x228], r15
movdqa xmmword [rsp + 0x230], xmm0
lea rax, [rsp + 0x240]
mov qword [rsp + 0x3e0], rax
mov qword [rsp + 0x240], rcx
lea rax, vtable.TinyXML::MemPoolT_80_.0
mov qword [rsp + 0x240], rax
lea rax, [rsp + 0x250]
mov qword [rsp + 0x248], rax
mov dword [rsp + 0x2a0], 0xa
mov dword [rsp + 0x2a4], r15d
mov qword [rsp + 0x2a8], r15
movdqa xmmword [rsp + 0x2b0], xmm0
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x3c0], rax
mov qword [rsp + 0x2c0], rcx
lea rax, vtable.TinyXML::MemPoolT_112_.0
mov qword [rsp + 0x2c0], rax
lea rax, [rsp + 0x2d0]
mov qword [rsp + 0x2c8], rax
mov dword [rsp + 0x320], 0xa
mov dword [rsp + 0x324], r15d
mov qword [rsp + 0x328], r15
movdqa xmmword [rsp + 0x330], xmm0
lea rax, [rsp + 0x340]
mov qword [rsp + 0x3c8], rax
mov qword [rsp + 0x340], rcx
lea rax, vtable.TinyXML::MemPoolT_104_.0
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x350]
mov qword [rsp + 0x348], rax
mov dword [rsp + 0x3a0], 0xa
mov dword [rsp + 0x3a4], r15d
mov qword [rsp + 0x3a8], r15
movdqa xmmword [rsp + 0x3b0], xmm0
lea rax, [rsp + 0x100]
mov qword [rsp + 0x108], rax
nop word [rax + rax]
mov rdi, qword [rsp + 0x138]
test rdi, rdi
je 0x18004ba25
mov rax, qword [rdi + 0x50]
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x140]
cmp rdi, rax
jne 0x18004b9e2
mov rax, qword [rax + 0x48]
mov qword [rsp + 0x140], rax
mov rcx, qword [rdi + 0x48]
test rcx, rcx
je 0x18004b9f3
mov rax, qword [rdi + 0x50]
mov qword [rcx + 0x50], rax
mov rcx, qword [rdi + 0x50]
test rcx, rcx
je 0x18004ba04
mov rax, qword [rdi + 0x48]
mov qword [rcx + 0x48], rax
mov qword [rdi + 0x10], r15
mov rbx, qword [rdi + 0x60]
mov rax, qword [rdi]
xor edx, edx
mov rcx, rdi
call qword [rax + 0x78]
mov rax, qword [rbx]
mov rdx, rdi
mov rcx, rbx
call qword [rax + Ordinal_26]
jmp 0x18004b9b0
mov qword [rsp + 0x140], r15
mov qword [rsp + 0x138], r15
mov dword [rsp + 0x16c], r15d
test dword [rsp + 0x178], 0x200
je 0x18004ba57
mov rcx, qword [rsp + 0x180]
call fcn.1800d2490
mov dword [rsp + 0x178], r15d
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x180], xmm0
test dword [rsp + 0x190], 0x200
je 0x18004ba85
mov rcx, qword [rsp + 0x198]
call fcn.1800d2490
mov dword [rsp + 0x190], r15d
mov qword [rsp + 0x198], r15
mov qword [rsp + 0x1a0], r15
mov dword [rsp + 0x1a8], r15d
mov rcx, qword [rsp + 0x1b0]
call fcn.1800d2490
mov qword [rsp + 0x1b0], r15
cmp byte [rsp + 0x18b0], 0
je 0x18004bc5b
lea rax, [rsp + 0x18b0]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x18004bad7
lea rcx, [rbx + 1]
call fcn.1800d2498
mov qword [rsp + 0x1b0], rax
mov r8, rbx
lea rdx, [rsp + 0x18b0]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x1b0]
mov byte [rax + rbx], 0
lea rcx, [rsp + 0x100]
call fcn.180046e90
cmp dword [rsp + 0x16c], 0
je 0x18004bcdc
nop dword [rax + rax]
mov rdi, qword [rsp + 0x138]
test rdi, rdi
je 0x18004bba5
mov rax, qword [rdi + 0x50]
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x140]
cmp rdi, rax
jne 0x18004bb62
mov rax, qword [rax + 0x48]
mov qword [rsp + 0x140], rax
mov rcx, qword [rdi + 0x48]
test rcx, rcx
je 0x18004bb73
mov rax, qword [rdi + 0x50]
mov qword [rcx + 0x50], rax
mov rcx, qword [rdi + 0x50]
test rcx, rcx
je 0x18004bb84
mov rax, qword [rdi + 0x48]
mov qword [rcx + 0x48], rax
mov qword [rdi + 0x10], r15
mov rbx, qword [rdi + 0x60]
mov rax, qword [rdi]
xor edx, edx
mov rcx, rdi
call qword [rax + 0x78]
mov rax, qword [rbx]
mov rdx, rdi
mov rcx, rbx
call qword [rax + Ordinal_26]
jmp 0x18004bb30
mov qword [rsp + 0x140], r15
mov qword [rsp + 0x138], r15
mov rax, qword [rsp + 0x1c0]
mov rdx, qword [rax + 0x28]
lea rax, [fcn.180047950]
lea rcx, [rsp + 0x1c0]
cmp rdx, rax
jne 0x18004bbdc
call fcn.180047950
jmp 0x18004bbde
call rdx
mov rax, qword [rsp + 0x240]
mov rdx, qword [rax + 0x28]
lea rax, [fcn.180047950]
lea rcx, [rsp + 0x240]
cmp rdx, rax
jne 0x18004bc05
call fcn.180047950
jmp 0x18004bc07
call rdx
mov rax, qword [rsp + 0x2c0]
mov rdx, qword [rax + 0x28]
lea rax, [fcn.180047590]
lea rcx, [rsp + 0x2c0]
cmp rdx, rax
jne 0x18004bc2e
call fcn.180047590
jmp 0x18004bc30
call rdx
mov rax, qword [rsp + 0x340]
mov rdx, qword [rax + 0x28]
lea rax, [fcn.180047260]
lea rcx, [rsp + 0x340]
cmp rdx, rax
jne 0x18004bc57
call fcn.180047260
jmp 0x18004bcce
call rdx
jmp 0x18004bcce
mov dword [rsp + 0x16c], reloc.WS2_32.dll_ntohs
test dword [rsp + 0x178], 0x200
je 0x18004bc80
mov rcx, qword [rsp + 0x180]
call fcn.1800d2490
mov dword [rsp + 0x178], r15d
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x180], xmm0
test dword [rsp + 0x190], 0x200
je 0x18004bcae
mov rcx, qword [rsp + 0x198]
call fcn.1800d2490
mov dword [rsp + 0x190], r15d
mov qword [rsp + 0x198], r15
mov qword [rsp + 0x1a0], r15
mov dword [rsp + 0x1a8], r15d
cmp dword [rsp + 0x16c], 0
jne 0x18004c373
mov rdi, qword [rsp + 0x138]
test rdi, rdi
je 0x18004bd44
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov rbx, rax
test rax, rax
je 0x18004bd3e
mov rax, qword [rax]
mov rcx, rbx
call qword [rax + Ordinal_50]
test rax, rax
je 0x18004bd13
mov rax, r15
lea r12, str.userdata
jmp 0x18004bd28
lea rcx, [rbx + 0x18]
call fcn.180044450
lea r12, str.userdata
cmp rax, r12
je 0x18004bd4e
mov r8d, 0x7fffffff
mov rdx, r12
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18004bd4e
mov rdi, qword [rdi + 0x50]
jmp 0x18004bce4
mov rbx, r15
lea r12, str.userdata
lea rdx, str.userid
mov rcx, rbx
call fcn.18004b1d0
mov qword [rsp + 0x78], rax
mov rdi, qword [rsp + 0x138]
nop word [rax + rax]
test rdi, rdi
je 0x18004bdc2
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx]
mov rbx, rax
test rax, rax
je 0x18004bdbc
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_50]
test rax, rax
je 0x18004bd98
mov rax, r15
jmp 0x18004bda6
lea rcx, [rbx + 0x18]
call fcn.180044450
cmp rax, r12
je 0x18004bdc5
mov r8d, 0x7fffffff
mov rdx, r12
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18004bdc5
mov rdi, qword [rdi + 0x50]
jmp 0x18004bd70
mov rbx, r15
lea rdx, str.username
mov rcx, rbx
call fcn.18004b1d0
mov r14, rax
mov qword [rsp + 0x60], rax
mov rdi, qword [rsp + 0x138]
test rdi, rdi
je 0x18004be36
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx]
mov rbx, rax
test rax, rax
je 0x18004be30
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_50]
test rax, rax
je 0x18004be0c
mov rax, r15
jmp 0x18004be1a
lea rcx, [rbx + 0x18]
call fcn.180044450
cmp rax, r12
je 0x18004be39
mov r8d, 0x7fffffff
mov rdx, r12
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18004be39
mov rdi, qword [rdi + 0x50]
jmp 0x18004bde4
mov rbx, r15
lea rdx, str.substate
mov rcx, rbx
call fcn.18004b1d0
mov rsi, rax
mov qword [rsp + 0xe0], rax
mov rdi, qword [rsp + 0x138]
nop dword [rax + rax]
test rdi, rdi
je 0x18004beb2
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx]
mov rbx, rax
test rax, rax
je 0x18004beac
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_50]
test rax, rax
je 0x18004be88
mov rax, r15
jmp 0x18004be96
lea rcx, [rbx + 0x18]
call fcn.180044450
cmp rax, r12
je 0x18004beb5
mov r8d, 0x7fffffff
mov rdx, r12
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18004beb5
mov rdi, qword [rdi + 0x50]
jmp 0x18004be60
mov rbx, r15
lea rdx, str.authlevel
mov rcx, rbx
call fcn.18004b1d0
mov r13, rax
mov rdi, qword [rsp + 0x138]
lea r12, str.sessiondata
test rdi, rdi
je 0x18004bf28
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx]
mov rbx, rax
test rax, rax
je 0x18004bf22
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_50]
test rax, rax
je 0x18004befe
mov rax, r15
jmp 0x18004bf0c
lea rcx, [rbx + 0x18]
call fcn.180044450
cmp rax, r12
je 0x18004bf2b
mov r8d, 0x7fffffff
mov rdx, r12
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18004bf2b
mov rdi, qword [rdi + 0x50]
jmp 0x18004bed6
mov rbx, r15
lea rdx, str.authtoken
mov rcx, rbx
call fcn.18004b1d0
mov r12, rax
mov rdi, qword [rsp + 0x138]
test rdi, rdi
je 0x18004bfa5
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx]
mov rbx, rax
test rax, rax
je 0x18004bf9f
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_50]
test rax, rax
je 0x18004bf74
mov rax, r15
lea rcx, str.sessiondata
jmp 0x18004bf89
lea rcx, [rbx + 0x18]
call fcn.180044450
lea rcx, str.sessiondata
cmp rax, rcx
je 0x18004bfa8
mov r8d, 0x7fffffff
mov rdx, rcx
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18004bfa8
mov rdi, qword [rdi + 0x50]
jmp 0x18004bf45
mov rbx, r15
lea rdx, str.minversion
mov rcx, rbx
call fcn.18004b1d0
mov rdi, rax
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x18004c326
test r14, r14
je 0x18004c326
test rsi, rsi
je 0x18004c326
test r13, r13
je 0x18004c326
test r12, r12
je 0x18004c326
test rax, rax
je 0x18004c326
cmp byte [0x180136b25], 0
jne 0x18004c1c4
mov eax, dword [0x180136af8]
cmp eax, 5
je 0x18004c1c4
cmp eax, 8
je 0x18004c1c4
mov rcx, rdi
call fcn.180046180
mov rbx, 0xffffffffffffffff
nop dword [rax]
lea rbx, [rbx + 1]
cmp byte [rax + rbx], 0
jne 0x18004c030
lea rcx, [rbx + 1]
call fcn.1800d2498
mov r14, rax
lea r8, [rbx + 1]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov ecx, 8
call fcn.1800d2498
mov rsi, rax
xor eax, eax
mov qword [rsi], rax
mov rcx, rdi
call fcn.180046180
mov rdx, r14
sub rdx, rax
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rax]
mov byte [rax + rdx], cl
lea rax, [rax + 1]
test cl, cl
jne 0x18004c080
movabs rax, 0x322e302e302e32
mov qword [rsi], rax
mov rcx, r14
mov qword [rsp + 0xc0], rcx
mov rdx, r14
mov qword [rsp + 0xc8], rdx
movzx r8d, byte [rcx]
test r8b, r8b
je 0x18004c0df
inc rcx
mov qword [rsp + 0xc0], rcx
mov byte [rdx], r8b
mov rax, r15
cmp r8b, 0x2e
setne al
add rdx, rax
mov qword [rsp + 0xc8], rdx
jmp 0x18004c0b1
mov byte [rdx], 0
mov rcx, rsi
mov qword [rsp + 0xd0], rcx
mov rdx, rsi
mov qword [rsp + 0xd8], rdx
nop dword [rax + rax]
movzx r8d, byte [rcx]
test r8b, r8b
je 0x18004c12e
inc rcx
mov qword [rsp + 0xd0], rcx
mov byte [rdx], r8b
mov rax, r15
cmp r8b, 0x2e
setne al
add rdx, rax
mov qword [rsp + 0xd8], rdx
jmp 0x18004c100
mov byte [rdx], 0
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov ebx, eax
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
cmp eax, ebx
jle 0x18004c1a2
lea r8, str.Your_Hook64_version_is_out_of_date_and_must_be_updated_to_continue_usage._n_nPlease_visit_gamemodi.net_to_download_the_latest_version.
mov edx, 0x400
lea rcx, [rsp + 0x8b0]
call fcn.1800046e0
lea rbx, [rsp + 0x8b0]
mov qword [rsp + 0x50], rbx
lea rcx, [rsp + 0x100]
call fcn.180046b20
nop
lea rax, vtable.Rijndael.0
mov qword [rsp + 0x430], rax
mov edi, Ordinal_79
jmp 0x18004c42a
mov rcx, r14
call fcn.1800d2490
mov rcx, rsi
call fcn.1800d2490
mov rsi, qword [rsp + 0xe0]
mov r14, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x78]
mov rcx, r12
call fcn.180046180
mov r8d, reloc.WLDAP32.dll_Ordinal_32
mov rdx, rax
mov rcx, qword [0x180136da8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov rax, qword [0x180136b38]
mov r8, qword [0x180136da8]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004c206
inc rax
test ecx, ecx
jne 0x18004c1f3
test edx, edx
je 0x18004c257
lea r8, str.There_was_an_error_while_retrieving_your_subscription_information._n_E_TOKENINVALID_
mov edx, 0x400
lea rcx, [rsp + 0x8b0]
call fcn.1800046e0
lea rbx, [rsp + 0x8b0]
mov qword [rsp + 0x50], rbx
lea rcx, [rsp + 0x100]
call fcn.180046b20
nop
lea rax, vtable.Rijndael.0
mov qword [rsp + 0x430], rax
mov edi, Ordinal_79
jmp 0x18004c42a
mov rcx, rsi
call fcn.180046180
mov rcx, rax
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [reloc.WS2_32.dll_connect], eax
mov rcx, r13
call fcn.180046180
mov rcx, rax
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [0x180136b30], eax
mov rcx, rbx
call fcn.180046180
mov rcx, rax
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov rcx, r14
call fcn.180046180
lea r8, str.Anonymous
test rax, rax
cmovne r8, rax
mov edx, 0x40
mov rcx, qword [0x180136e28]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov sil, 1
mov byte [rsp + 0x44], sil
mov rbx, r15
mov qword [rsp + 0x50], rbx
lea rcx, [0x180136db0]
call fcn.180048130
nop
lea rcx, [rsp + 0x100]
call fcn.180046b20
nop
lea rax, vtable.Rijndael.0
mov qword [rsp + 0x430], rax
mov edi, Ordinal_79
mov r14, qword [rsp + 0x80]
mov r12d, dword [rsp + 0x48]
mov r13d, dword [rsp + 0x40]
jmp 0x18004c3ed
lea r8, str.There_was_an_error_while_retrieving_your_subscription_information._n_E_DATAINVALID_
mov edx, 0x400
lea rcx, [rsp + 0x8b0]
call fcn.1800046e0
lea rbx, [rsp + 0x8b0]
mov qword [rsp + 0x50], rbx
lea rcx, [rsp + 0x100]
call fcn.180046b20
nop
lea rax, vtable.Rijndael.0
mov qword [rsp + 0x430], rax
mov edi, Ordinal_79
jmp 0x18004c42a
lea r8, str.There_was_an_error_while_retrieving_your_subscription_information._n_E_WEBINVALID_
mov edx, 0x400
lea rcx, [rsp + 0x8b0]
call fcn.1800046e0
lea rbx, [rsp + 0x8b0]
mov qword [rsp + 0x50], rbx
lea rcx, [rsp + 0x100]
call fcn.180046b20
nop
lea rax, vtable.Rijndael.0
mov qword [rsp + 0x430], rax
mov edi, Ordinal_79
jmp 0x18004c42a
mov ecx, eax
call fcn.180099750
mov r9, rax
lea r8, str.There_was_an_error_while_retrieving_your_subscription_information._n__s_
mov edx, 0x400
lea rcx, [rsp + 0x8b0]
call fcn.1800046e0
lea rbx, [rsp + 0x8b0]
mov qword [rsp + 0x50], rbx
test sil, sil
jne 0x18004c42a
inc r12d
mov dword [rsp + 0x48], r12d
cmp byte [0x180136b25], sil
mov ecx, 0x5dc
je 0x18004c40d
mov ecx, 0x1f40
call qword [sym.imp.KERNEL32.dll_Sleep]
inc r13d
mov dword [rsp + 0x40], r13d
jmp 0x18004b3d2
mov edi, Ordinal_79
mov rcx, qword [rsp + 0x80]
call fcn.1800985c0
cmp dword [rsp + 0x48], 3
jl 0x18004c458
test rbx, rbx
jne 0x18004c458
lea rbx, str.The_connection_timed_out_when_trying_to_contact_gamemodi.net.
jmp 0x18004c458
lea rbx, str.There_was_an_error_while_initializing_cURL__please_contact_support.
mov edi, Ordinal_79
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp dword [0x180136b30], 2
jl 0x18004c47b
mov dword [reloc.WS2_32.dll_connect], 6
jmp 0x18004c4a9
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [0x180136e10]
call fcn.1800481a0
cmp rax, 0x1339e0
jle 0x18004c4a9
mov dword [reloc.WS2_32.dll_connect], 4
call fcn.18004c790
test al, al
jne 0x18004c4f7
call fcn.180049310
mov r8d, eax
mov edx, 1
lea ecx, [rdx + 1]
call qword [sym.imp.KERNEL32.dll_OpenThread]
test rax, rax
jne 0x18004c6d0
mov ebx, 0x8000
cmp rbx, 0x8000
jb 0x18004c4e4
call fcn.1800982b0
add rdi, 0x13f
add rbx, rdi
lea rdi, [rbx + 0x17b]
jmp 0x18004c4d6
mov byte [0x180136b25], 1
jmp 0x18004c625
xor r9d, r9d
lea r8, [rsp + 0x40]
xor edx, edx
lea rbx, [0x1801372a0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
test eax, eax
jne 0x18004c528
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
cmp dword [rsp + 0x40], 0
je 0x18004c5b5
mov qword [rsp + 0x88], rbx
mov dword [rsp + 0x90], 4
mov dword [reloc.WS2_32.dll_connect], 5
mov dword [0x180136b30], 1
lea r8, [0x1800fea9d]
mov edx, 0x40
mov rcx, qword [0x180136e28]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
mov rdx, qword [0x180136b38]
mov rcx, qword [0x180136da8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x180136b25], 1
xor r15d, r15d
mov dword [rsp + 0x90], r15d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_InitOnceComplete]
test eax, eax
je 0x18004c783
lea rbx, [0x180136db0]
mov qword [rsp + 0x88], rbx
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x18004c5dd
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov eax, dword [0x180136dfc]
cmp eax, 0x7fffffff
jne 0x18004c5fe
dec eax
mov dword [0x180136dfc], eax
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x60]
mov qword [0x180136e10], rax
mov byte [0x180136e20], 0
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rcx, qword [rsp + 0x20b0]
xor rcx, rsp
call fcn.1800d2160
lea r11, [rsp + 0x20c0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea rdx, str.Object_not_Initialized
lea rcx, [rsp + 0x3e8]
call fcn.180001400
lea rdx, [0x180129208]
lea rcx, [rsp + 0x3e8]
call sub.VCRUNTIME140.dll__CxxThrowException
lea rdx, str.Data_not_multiple_of_Block_Size
lea rcx, [rsp + 0x400]
call fcn.180001400
lea rdx, [0x180129208]
lea rcx, [rsp + 0x400]
call sub.VCRUNTIME140.dll__CxxThrowException
lea rdx, str.Object_not_Initialized
lea rcx, [rsp + 0x418]
call fcn.180001400
lea rdx, [0x180129208]
lea rcx, [rsp + 0x418]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
xor edx, edx
mov rcx, rax
call qword [sym.imp.ntdll.dll_NtSuspendThread]
test rbx, rbx
jne 0x18004c77a
call fcn.18004c850
cmp eax, 1
jne 0x18004c6fa
lea rbx, str.Your_Gamemodi_Plus_subscription_has_expired._n_nPlease_renew_it_at_www.gamemodi.net.
jmp 0x18004c77a
test eax, eax
jne 0x18004c707
lea rbx, str.Your_account_has_had_too_many_logins_from_different_PCs_in_the_last_30_minutes._This_can_happen_when_using_too_many_computers_or_sharing_your_key._n_nYou_are_allowed_one_PC_VM_per_key_instance._n_nPlease_try_again_later_or_buy_more_key_instances.
jmp 0x18004c77a
cmp eax, 2
jne 0x18004c715
lea rbx, str.This_key_and_account_are_banned._n_nPlease_contact_Sorien_if_you_believe_this_is_an_error.
jmp 0x18004c77a
cmp eax, 3
jne 0x18004c723
lea rbx, str.This_computer_has_been_banned._n_nPlease_contact_Sorien_if_you_believe_this_is_an_error.
jmp 0x18004c77a
call fcn.1800480b0
cmp rax, 0x1339e0
jle 0x18004c739
lea rbx, str.Your_Gamemodi_Plus_subscription_was_unable_to_be_validated_timed_out._n_nPlease_check_your_internet_connection__proxy_vpn__or_the_website_availability.
jmp 0x18004c77a
call fcn.18004c830
mov edx, eax
call fcn.18004c850
cmp eax, edx
jge 0x18004c773
lea rdx, str.Guest
mov rcx, qword [0x180136d20]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
lea rcx, str.The_key_you_have_entered_doesnt_have_an_active_Gamemodi_Plus_subscription__or_the_required_access._n_nPlease_check_your_account_on_the_website__or_the_key_you_have_entered_and_try_again.
lea rbx, str.To_use_Hook64_for_this_game__you_must_have_a_Gamemodi_Plus_subscription._n_nPlease_enter_your_key_in_the_Settings_window_of_the_launcher.
test eax, eax
cmovne rbx, rcx
jmp 0x18004c77a
lea rbx, str.An_unexpected_subscription_error_has_occurred._n_nThe_game_will_now_close.
mov rcx, rbx
call fcn.180008d00
int3
call fcn.1800d2140
int3