Function at 0x1400371e0
Capabilities:
Enumerate gui resources
Hide graphical window
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rdi
push r14
push r15
lea rbp, [rsp - 0x140]
sub rsp, 0x240
mov rax, qword [0x1400d3010]
xor rax, rsp
mov qword [rbp + 0x130], rax
xor r15d, r15d
lea rcx, [rbp + 0x70]
mov r14d, r15d
mov dword [rsp + 0x60], r15d
call fcn.140009f70
mov rdx, rax
lea rcx, [0x1400d30b0]
mov rbx, rax
call fcn.14000b5c0
lea rdx, [rbx + 0x20]
lea rcx, [0x1400d30d0]
call fcn.14000b5c0
lea rdx, [rbx + 0x40]
lea rcx, [0x1400d30f0]
call fcn.14000b5c0
lea rdx, [rbx + 0x60]
lea rcx, [0x1400d3110]
call fcn.14000b5c0
lea rdx, [rbx + 0x80]
lea rcx, [0x1400d3130]
call fcn.14000b5c0
lea rax, [0x1400d3150]
lea rdi, [rbx + 0xa0]
cmp rax, rdi
je 0x14003730c
mov rcx, qword [0x1400d3150]
test rcx, rcx
je 0x1400372e1
mov rdx, qword [0x1400d3160]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x1400372c7
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400374b2
mov rcx, r8
call fcn.1400553bc
mov qword [0x1400d3150], r15
mov qword [0x1400d3158], r15
mov qword [0x1400d3160], r15
mov rax, qword [rdi]
mov qword [0x1400d3150], rax
mov rax, qword [rdi + 8]
mov qword [0x1400d3158], rax
mov rax, qword [rdi + 0x10]
mov qword [0x1400d3160], rax
mov qword [rdi], r15
mov qword [rdi + 8], r15
mov qword [rdi + 0x10], r15
movzx eax, byte [rbx + 0xb8]
lea rcx, [rbp + 0x70]
mov byte [0x1400d3168], al
movzx eax, byte [rbx + 0xb9]
mov byte [0x1400d3169], al
mov qword [rsp + 0x270], rsi
call fcn.14000ace0
cmp byte [0x1400d3168], r14b
mov esi, 1
jne 0x140037ebf
cmp byte [0x1400d3169], r14b
jne 0x140037ebf
lea rcx, [0x1400afa6f]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edx, 0x7f00
mov dword [rsp + 0x70], 0x50
mov rbx, rax
mov dword [rsp + 0x74], 3
lea rax, [0x1400314f0]
mov qword [rbp - 0x80], r15
mov rcx, rbx
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x78], rbx
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp - 0x70], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
movdqa xmm0, xmmword [0x1400cac90]
lea rdi, str.null
mov rcx, qword [rbp - 0x78]
mov edx, 0x7f00
movdqa xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x50], rdi
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rsp + 0x70]
mov qword [rbp - 0x48], rax
call qword [sym.imp.USER32.dll_RegisterClassExA]
test ax, ax
jne 0x1400375d8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
lea r10, [rbp + 0x35]
nop dword [rax]
dec r10
mov eax, 0xcccccccd
mul r9d
shr edx, 3
movzx ecx, dl
shl cl, 2
lea r8d, [rcx + rdx]
add r8b, r8b
sub r9b, r8b
add r9b, 0x30
mov byte [r10], r9b
mov r9d, edx
test edx, edx
jne 0x140037400
lea rax, [rbp + 0x35]
mov qword [rbp - 0x10], r15
mov r8, r15
mov ecx, select
mov qword [rbp - 8], rcx
mov byte [rbp - 0x20], r8b
cmp r10, rax
je 0x140037464
lea r8, [rbp + 0x35]
mov rdx, r10
sub r8, r10
lea rcx, [rbp - 0x20]
call fcn.140002960
mov rcx, qword [rbp - 8]
mov r8, qword [rbp - 0x10]
mov rax, rcx
lea rbx, str.Error:
sub rax, r8
mov edi, 7
cmp rax, rdi
jb 0x1400374f8
lea rax, [r8 + 7]
cmp rcx, 0x10
lea r14, [rbp - 0x20]
mov qword [rbp - 0x10], rax
cmovae r14, qword [rbp - 0x20]
lea rax, [0x1400c88c7]
cmp rax, r14
jbe 0x1400374b9
lea rax, [r14 + r8]
cmp rbx, rax
ja 0x1400374b9
cmp r14, rbx
jbe 0x1400374bc
mov r15, r14
sub r15, rbx
jmp 0x1400374bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r15, rdi
inc r8
lea rcx, [r14 + 7]
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
mov r8, r15
mov rdx, rbx
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbx + 7]
sub rdi, r15
add rdx, r15
lea rcx, [r14 + r15]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x20]
xor r15d, r15d
jmp 0x14003750e
mov qword [rsp + 0x28], rdi
lea rcx, [rbp - 0x20]
mov rdx, rdi
mov qword [rsp + 0x20], rbx
call fcn.14000dc70
movups xmm0, xmmword [rax]
lea r8, [rbp]
lea rdx, str.Failed_to_register_window_class
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], select
mov byte [rax], 0
cmp qword [rbp + 0x18], 0x10
cmovae r8, qword [rbp]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140037583
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003757e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400375d1
call fcn.1400553bc
mov rdx, qword [rbp - 8]
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], select
mov byte [rbp], 0
cmp rdx, 0x10
jb 0x140037f98
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140037f93
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140037f93
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov qword [rsp + 0x58], r15
lea r8, str.Phantom_Injector
mov qword [rsp + 0x50], rbx
mov r9d, 0x80080000
mov qword [rsp + 0x48], r15
mov rdx, rdi
mov qword [rsp + 0x40], r15
xor ecx, ecx
mov dword [rsp + 0x38], 0x190
mov dword [rsp + 0x30], 0x2d0
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [0x1400d9668], rax
test rax, rax
jne 0x140037812
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
lea r10, [rbp + 0x35]
dec r10
mov eax, 0xcccccccd
mul r9d
shr edx, 3
movzx ecx, dl
shl cl, 2
lea r8d, [rcx + rdx]
add r8b, r8b
sub r9b, r8b
add r9b, 0x30
mov byte [r10], r9b
mov r9d, edx
test edx, edx
jne 0x140037641
lea rax, [rbp + 0x35]
mov qword [rbp - 0x10], r15
mov r8, r15
mov ecx, select
mov qword [rbp - 8], rcx
mov byte [rbp - 0x20], r8b
cmp r10, rax
je 0x1400376a5
lea r8, [rbp + 0x35]
mov rdx, r10
sub r8, r10
lea rcx, [rbp - 0x20]
call fcn.140002960
mov rcx, qword [rbp - 8]
mov r8, qword [rbp - 0x10]
mov rax, rcx
lea rbx, str.Error:
sub rax, r8
mov edi, 7
cmp rax, rdi
jb 0x140037732
lea rax, [r8 + 7]
cmp rcx, 0x10
lea r14, [rbp - 0x20]
mov qword [rbp - 0x10], rax
cmovae r14, qword [rbp - 0x20]
lea rax, [0x1400c88c7]
cmp rax, r14
jbe 0x1400376f3
lea rax, [r14 + r8]
cmp rbx, rax
ja 0x1400376f3
cmp r14, rbx
jbe 0x1400376f6
mov r15, r14
sub r15, rbx
jmp 0x1400376f6
mov r15, rdi
inc r8
lea rcx, [r14 + 7]
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
mov r8, r15
mov rdx, rbx
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbx + 7]
sub rdi, r15
add rdx, r15
lea rcx, [r14 + r15]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x20]
xor r15d, r15d
jmp 0x140037748
mov qword [rsp + 0x28], rdi
lea rcx, [rbp - 0x20]
mov rdx, rdi
mov qword [rsp + 0x20], rbx
call fcn.14000dc70
movups xmm0, xmmword [rax]
lea r8, [rbp]
lea rdx, str.Failed_to_create_window
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], select
mov byte [rax], 0
cmp qword [rbp + 0x18], 0x10
cmovae r8, qword [rbp]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x1400377bd
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400377b8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003780b
call fcn.1400553bc
mov rdx, qword [rbp - 8]
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], select
mov byte [rbp], 0
cmp rdx, 0x10
jb 0x140037f98
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140037f93
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140037f93
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov qword [rsp + 0x278], r12
lea r8, [0x1400ab180]
mov r9d, 0x39d1
mov qword [rsp + 0x280], r13
mov edx, 6
call fcn.14004fe20
mov rcx, qword [0x1400d9670]
lea r8, [0x140066470]
mov r9d, 0x12818
lea rdx, str.icons
mov rcx, qword [rcx + 0x22a8]
call fcn.1400403f0
mov rcx, qword [0x1400d9670]
lea r8, [0x140078ca0]
mov r9d, 0x213ec
lea rdx, str.sans
mov rcx, qword [rcx + 0x22a8]
call fcn.1400403f0
mov rcx, qword [0x1400d9670]
lea r8, [0x14009a950]
mov r9d, 0xff14
lea rdx, str.sans_bold
mov rcx, qword [rcx + 0x22a8]
call fcn.1400403f0
movdqa xmm0, xmmword [0x1400cacb0]
lea rdx, [0x1400c8858]
mov r8d, 2
mov byte [rbp - 0x40], r14b
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x30], xmm0
call fcn.140002960
mov r9d, 0x92
lea r8, [0x1400aa870]
mov edx, 6
lea rcx, [rbp - 0x40]
call fcn.140031420
movdqa xmm0, xmmword [0x1400cacb0]
lea rdx, str.icon_default
mov r8d, recv
mov byte [rbp - 0x40], r14b
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x30], xmm0
call fcn.140002960
mov r9d, 0x918
lea r8, [0x1400aeb60]
mov edx, 6
lea rcx, [rbp - 0x40]
call fcn.140031420
movdqa xmm0, xmmword [0x1400cacb0]
lea rdx, str.icon_minecraft
mov r8d, select
mov byte [rbp - 0x40], r14b
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x30], xmm0
call fcn.140002960
mov r9d, 0x918
lea r8, [0x1400aeb60]
mov edx, 6
lea rcx, [rbp - 0x40]
call fcn.140031420
movdqa xmm0, xmmword [0x1400cacb0]
lea rdx, str.icon_badlion
mov r8d, recv
mov byte [rbp - 0x40], r14b
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x30], xmm0
call fcn.140002960
mov r9d, 0x60a
lea r8, [0x1400aab70]
mov edx, 6
lea rcx, [rbp - 0x40]
call fcn.140031420
movdqa xmm0, xmmword [0x1400cacb0]
lea rdx, str.icon_labymod
mov r8d, recv
mov byte [rbp - 0x40], r14b
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x30], xmm0
call fcn.140002960
mov r9d, 0x8b5
lea r8, [0x14009a090]
mov edx, 6
lea rcx, [rbp - 0x40]
call fcn.140031420
movdqa xmm0, xmmword [0x1400cacb0]
lea rdx, str.branch_stable
mov r8d, select
mov byte [rbp - 0x40], r14b
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x30], xmm0
call fcn.140002960
mov r9d, 0x125
lea r8, [0x1400aaa40]
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.140031420
movdqa xmm0, xmmword [0x1400cacb0]
lea rdx, str.branch_prerelease
mov r8d, select
mov byte [rbp - 0x40], r14b
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x30], xmm0
call fcn.140002960
mov r9d, 0x125
lea r8, [0x1400aa910]
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.140031420
mov rax, qword [0x1400d3158]
mov r12, qword [0x1400d3150]
mov qword [rbp + 0x60], rax
cmp r12, rax
je 0x140037c94
mov rax, qword [r12]
movabs rcx, 0x7fffffffffffffff
mov r13, qword [rax + 0x18]
lea rsi, [rax + 8]
mov qword [rsp + 0x60], rax
mov r8d, socket
mov rax, rcx
movabs rdx, 0x8000000000000027
sub rax, r13
cmp rax, 7
jb 0x140037fc0
cmp qword [rsi + 0x18], 0x10
jb 0x140037ad6
mov rsi, qword [rsi]
mov qword [rbp + 0x50], r15
lea rdi, [rbp + 0x40]
mov qword [rbp + 0x58], r15
mov ebx, select
lea r15, [r13 + 7]
cmp r15, rbx
jbe 0x140037b5a
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x140037b04
mov rbx, rcx
mov rax, rdx
jmp 0x140037b26
cmp rbx, 0x16
cmovb rbx, r8
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140037b45
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140037fc6
mov rcx, rax
call fcn.140055130
test rax, rax
je 0x140037c8d
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140037b56
test rcx, rcx
je 0x140037b54
call fcn.140055130
mov rdi, rax
jmp 0x140037b56
xor edi, edi
mov qword [rbp + 0x40], rdi
mov eax, dword [str.branch_]
lea rcx, [rdi + 7]
mov qword [rbp + 0x50], r15
mov r8, r13
mov qword [rbp + 0x58], rbx
mov rdx, rsi
mov dword [rdi], eax
movzx eax, word [0x1400c899c]
mov word [rdi + 4], ax
movzx eax, byte [0x1400c899e]
mov byte [rdi + 6], al
call sub.VCRUNTIME140.dll_memcpy
lea r8, [rbp + 0x40]
mov byte [rdi + r15], 0
lea rdx, [rbp]
call fcn.140038260
mov rcx, qword [rax]
cmp dword [rcx + 0x30], 0
jne 0x140037be3
xor r15d, r15d
mov qword [rbp - 0x28], select
lea rdx, str.branch_prerelease
mov qword [rbp - 0x30], r15
lea rcx, [rbp - 0x40]
mov byte [rbp - 0x40], r15b
lea r8d, [r15 + 0x11]
call fcn.140002960
lea r8, [rbp - 0x40]
or r14d, 1
lea rdx, [rbp - 0x20]
call fcn.1400384f0
jmp 0x140037bf3
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x20]
call fcn.140038260
xor r15d, r15d
mov rcx, qword [rax]
mov eax, dword [rcx + 0x30]
mov rcx, qword [rsp + 0x60]
mov dword [rcx + 4], eax
test r14b, 1
je 0x140037c42
mov rdx, qword [rbp - 0x28]
and r14d, 0xfffffffe
cmp rdx, 0x10
jb 0x140037c42
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140037c3d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037c86
call fcn.1400553bc
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140037c79
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140037c74
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037c8d
call fcn.1400553bc
add r12, 8
cmp r12, qword [rbp + 0x60]
jmp 0x140037a8b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs r14, 0x346dc5d63886594b
mov rax, r14
imul rcx
mov rdi, rdx
sar rdi, 0xb
mov rax, rdi
shr rax, 0x3f
add rdi, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, qword [0x1400d9668]
mov edx, 5
mov rbx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1400d9668]
mov esi, 1
mov dword [rsp + 0x30], esi
xor edx, edx
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
lea r9d, [rsi + 0x45]
lea r8d, [rsi + 0x13]
call qword [sym.imp.USER32.dll_SetWindowPos]
movdqa xmm0, xmmword [0x1400cacb0]
lea r8d, [rsi + 0x13]
lea rdx, str.Started_successfully
mov byte [rbp - 0x40], 0
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x30], xmm0
call fcn.140002960
movdqa xmm0, xmmword [0x1400cacb0]
lea r8d, [rsi + 7]
lea rdx, str.Injector
mov byte [rbp + 0x40], 0
lea rcx, [rbp + 0x40]
movdqu xmmword [rbp + 0x50], xmm0
call fcn.140002960
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x40]
call fcn.140031090
mov rax, r14
lea r12, [0x1400d9700]
imul rbx
mov rbx, rdx
sar rbx, 0xb
mov rax, rbx
shr rax, 0x3f
add rbx, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
mov rax, r14
imul rcx
sar rdx, 0xb
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rbx
jb 0x140037e11
xor edx, edx
mov dword [0x1400d9664], r15d
lea rcx, [0x140033f70]
call qword [sym.imp.USER32.dll_EnumWindows]
mov r8d, dword [0x1400d9664]
mov ecx, r15d
test r8d, r8d
jle 0x140037ded
mov edx, dword [0x1400d9654]
mov rax, r12
cmp dword [rax], edx
je 0x140037dd9
inc ecx
add rax, 0x38
cmp ecx, r8d
jl 0x140037dc8
jmp 0x140037ddd
test edx, edx
jne 0x140037ded
test r8d, r8d
cmovg edx, dword [0x1400d9700]
mov dword [0x1400d9654], edx
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
mov rax, r14
imul rcx
sar rdx, 0xb
mov rbx, rdx
shr rbx, 0x3f
add rbx, 0x9c4
add rbx, rdx
mov rcx, qword [0x1400d9668]
lea rdx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rcx, [0x1400d9640]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [rbp + 0x60]
sub dword [0x1400d9640], eax
mov eax, dword [rbp + 0x64]
sub dword [0x1400d9644], eax
mov byte [0x1400d960a], 0
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, qword [0x1400d9668]
jne 0x140037e6c
mov ecx, esi
call qword [sym.imp.USER32.dll_GetKeyState]
bt ax, 0xf
jae 0x140037e6c
movzx ecx, sil
jmp 0x140037e6e
xor cl, cl
cmp cl, byte [0x1400d9609]
je 0x140037e8e
movzx eax, byte [0x1400d960a]
test cl, cl
mov byte [0x1400d9609], cl
cmovne eax, esi
mov byte [0x1400d960a], al
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
mov rax, r14
imul rcx
sar rdx, 0xb
mov rax, rdx
shr rax, 0x3f
add rdx, rax
sub rdx, rdi
mov qword [0x1400d9658], rdx
call fcn.140036710
jmp 0x140037d78
mov r8d, 0x47
mov qword [rbp + 0x30], r15
lea rdx, str.You_need_to_redownload_the_injector_in_order_to_use_the_BAC_Injector__3
mov qword [rbp + 0x38], select
lea rcx, [rbp + 0x20]
mov byte [rbp + 0x20], r14b
call fcn.140002960
cmp byte [0x1400d3169], r14b
lea rbx, [0x1400c3e38]
mov rdx, rbx
lea rdi, [0x1400c3e3c]
cmove rdx, rdi
lea rcx, [rbp + 0x20]
mov r8, rsi
call fcn.14000bc60
cmp byte [0x1400d3168], r14b
lea rcx, [rbp + 0x20]
mov r8, rsi
cmove rbx, rdi
mov rdx, rbx
call fcn.14000bc60
mov r8, rsi
lea rdx, [0x1400c88a8]
lea rcx, [rbp + 0x20]
call fcn.14000bc60
cmp qword [rbp + 0x38], 0x10
lea rdx, [rbp + 0x20]
lea r8, str.Invalid_version
cmovae rdx, qword [rbp + 0x20]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x140037f98
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140037f93
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140037f93
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400553bc
mov eax, esi
mov rsi, qword [rsp + 0x270]
mov rcx, qword [rbp + 0x130]
xor rcx, rsp
call fcn.140054e70
add rsp, 0x240
pop r15
pop r14
pop rdi
pop rbx
pop rbp
ret
call fcn.140002140
int3
call fcn.1400020a0
int3