Function at 0x140001e70
Capabilities:
Check if file exists
Check mutex and terminate process on windows
Check mutex on windows
Create process on windows
Get file attributes
Get file size
Read file on windows
Self delete
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0xb20]
sub rsp, 0xc20
mov rax, qword [0x140008040]
xor rax, rsp
mov qword [rbp + 0xaf0], rax
lea r8, str.Local3DMigotoLoader
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x140002b60
mov qword [rsp + 0xc30], rbx
lea rcx, str._n________________________________3DMigoto_Loader________________________________n_n
mov qword [rsp + 0xc10], r13
call fcn.1400012d0
xor r13d, r13d
lea rcx, str.d3dx.ini
mov qword [rsp + 0x30], r13
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0x80000000
mov r8d, 1
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140002b6d
mov qword [rsp + 0xc38], rsi
xor edx, edx
mov rcx, rax
mov qword [rsp + 0xc40], rdi
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
lea ecx, [rax + 1]
call fcn.1400032b4
lea r9, [rsp + 0x50]
mov qword [rsp + 0x40], rax
mov r8d, edi
mov qword [rsp + 0x20], r13
mov rdx, rax
mov rcx, rbx
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140002b53
cmp edi, dword [rsp + 0x50]
jne 0x140002b53
mov rcx, rbx
mov qword [rsp + 0xc00], r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, rsi
nop dword [rax]
movzx ecx, byte [rbx]
cmp cl, 0x20
je 0x140001f8d
cmp cl, 9
jne 0x140001f92
inc rbx
jmp 0x140001f80
movabs r15, 0x100002200
test cl, cl
je 0x140002b7a
cmp cl, 0x5b
jne 0x140001fda
inc rbx
lea rdi, str.loader
movzx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
movsx ecx, byte [rdi]
cmp eax, ecx
jne 0x140001fce
inc rdi
inc rbx
cmp byte [rdi], r13b
jne 0x140001fb3
movzx eax, byte [rbx]
cmp al, 0x5d
jne 0x140001fda
cmp byte [rdi], r13b
je 0x140002017
movzx eax, byte [rbx]
test al, al
je 0x140001ff4
cmp al, 0xa
je 0x140002008
cmp al, 0xd
je 0x140001ff4
movzx eax, byte [rbx + 1]
inc rbx
test al, al
jne 0x140001fe1
movsx rcx, byte [rbx]
cmp cl, 0xa
je 0x140002008
cmp cl, 0x20
ja 0x14000200d
bt r15, rcx
jae 0x14000200d
inc rbx
jmp 0x140001ff4
test cl, cl
je 0x140002b7a
jmp 0x140001fa4
cmp al, 0xa
je 0x14000202c
cmp al, 0xd
je 0x140002030
movzx eax, byte [rbx + 1]
inc rbx
test al, al
jne 0x140002017
jmp 0x140002030
inc rbx
nop
movzx eax, byte [rbx]
cmp al, 0xa
je 0x14000202c
cmp al, 0xd
je 0x14000202c
cmp al, 0x20
je 0x14000202c
cmp al, 9
je 0x14000202c
test rbx, rbx
je 0x140002b7a
mov qword [rsp + 0xc18], r12
mov r12, rbx
movzx ecx, byte [rbx]
cmp cl, 0x20
je 0x140002064
cmp cl, 9
jne 0x140002069
inc rbx
jmp 0x140002057
test cl, cl
je 0x140002b87
cmp cl, 0x5b
je 0x140002b87
lea rdi, str.target
movzx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
movsx ecx, byte [rdi]
cmp eax, ecx
jne 0x1400020a0
inc rdi
inc rbx
cmp byte [rdi], r13b
jne 0x140002081
nop dword [rax]
movzx eax, byte [rbx]
cmp al, 0x20
je 0x1400020ab
cmp al, 9
jne 0x1400020b0
inc rbx
jmp 0x1400020a0
cmp al, 0x3d
jne 0x1400020b9
cmp byte [rdi], r13b
je 0x1400020f9
test al, al
je 0x1400020d3
nop dword [rax]
cmp al, 0xa
je 0x1400020e7
cmp al, 0xd
je 0x1400020d3
movzx eax, byte [rbx + 1]
inc rbx
test al, al
jne 0x1400020c0
movsx rcx, byte [rbx]
cmp cl, 0xa
je 0x1400020e7
cmp cl, 0x20
ja 0x1400020ec
bt r15, rcx
jae 0x1400020ec
inc rbx
jmp 0x1400020d3
test cl, cl
je 0x140002b87
jmp 0x140002071
inc rbx
nop dword [rax]
movzx eax, byte [rbx]
cmp al, 0x20
je 0x14000210b
cmp al, 9
jne 0x140002110
inc rbx
jmp 0x140002100
lea rcx, [rbp + 0x1a0]
mov rdx, rbx
nop word [rax + rax]
movzx eax, byte [rdx]
mov byte [rcx], al
movzx eax, byte [rdx]
cmp al, 0xa
je 0x14000214d
cmp al, 0xd
je 0x14000214d
test al, al
je 0x14000214d
inc rdx
inc rcx
mov rax, rdx
sub rax, rbx
cmp rax, 0x104
jb 0x140002120
jmp 0x140002b87
lea rax, [rbp + 0x1a0]
movabs rsi, 0x100002600
cmp rcx, rax
jb 0x140002187
movsx rax, byte [rcx]
test al, al
je 0x140002175
cmp al, 0x20
ja 0x140002187
bt rsi, rax
jae 0x140002187
mov byte [rcx], r13b
lea rax, [rbp + 0x1a0]
dec rcx
cmp rcx, rax
jae 0x140002163
mov rbx, r12
nop word [rax + rax]
movzx ecx, byte [rbx]
cmp cl, 0x20
je 0x14000219d
cmp cl, 9
jne 0x1400021a2
inc rbx
jmp 0x140002190
test cl, cl
je 0x140002b94
nop word [rax + rax]
cmp cl, 0x5b
je 0x140002b94
lea rdi, str.module
movzx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
movsx ecx, byte [rdi]
cmp eax, ecx
jne 0x1400021e0
inc rdi
inc rbx
cmp byte [rdi], r13b
jne 0x1400021c0
nop dword [rax + rax]
movzx eax, byte [rbx]
cmp al, 0x20
je 0x1400021eb
cmp al, 9
jne 0x1400021f0
inc rbx
jmp 0x1400021e0
cmp al, 0x3d
jne 0x1400021f9
cmp byte [rdi], r13b
je 0x140002239
test al, al
je 0x140002213
nop dword [rax]
cmp al, 0xa
je 0x140002227
cmp al, 0xd
je 0x140002213
movzx eax, byte [rbx + 1]
inc rbx
test al, al
jne 0x140002200
movsx rcx, byte [rbx]
cmp cl, 0xa
je 0x140002227
cmp cl, 0x20
ja 0x14000222c
bt r15, rcx
jae 0x14000222c
inc rbx
jmp 0x140002213
test cl, cl
je 0x140002b94
jmp 0x1400021b0
inc rbx
nop dword [rax]
movzx eax, byte [rbx]
cmp al, 0x20
je 0x14000224b
cmp al, 9
jne 0x140002250
inc rbx
jmp 0x140002240
lea rcx, [rbp + 0x90]
mov rdx, rbx
nop word [rax + rax]
movzx eax, byte [rdx]
mov byte [rcx], al
movzx eax, byte [rdx]
cmp al, 0xa
je 0x14000228d
cmp al, 0xd
je 0x14000228d
test al, al
je 0x14000228d
inc rdx
inc rcx
mov rax, rdx
sub rax, rbx
cmp rax, 0x104
jb 0x140002260
jmp 0x140002b94
lea rax, [rbp + 0x90]
cmp rcx, rax
jb 0x1400022c4
nop dword [rax]
movsx rax, byte [rcx]
test al, al
je 0x1400022b2
cmp al, 0x20
ja 0x1400022c4
bt rsi, rax
jae 0x1400022c4
mov byte [rcx], r13b
lea rax, [rbp + 0x90]
dec rcx
cmp rcx, rax
jae 0x1400022a0
mov r8b, 1
lea rdx, str.check_version
mov rcx, r12
call fcn.140001170
test al, al
je 0x1400022e6
lea rcx, [rbp + 0x90]
call fcn.1400015a0
xor r8d, r8d
lea rdx, str.require_admin
mov rcx, r12
call fcn.140001170
test al, al
je 0x14000235a
mov dword [rsp + 0x54], 4
mov qword [rsp + 0x48], r13
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rsp + 0x48]
mov edx, 8
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14000235a
mov rcx, qword [rsp + 0x48]
lea rax, [rsp + 0x54]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x58]
mov edx, 0x14
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov rcx, qword [rsp + 0x48]
test eax, eax
jne 0x14000237d
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x90]
mov qword [rsp + 0xc08], r14
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
test rax, rax
je 0x140002ba1
jmp 0x1400023f2
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x58], r13d
jne 0x14000235a
mov r8d, 0x104
lea rdx, [rbp + 0x2b0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x14000235a
mov edx, 6
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
xor r9d, r9d
mov dword [rsp + 0x28], 1
lea r8, [rbp + 0x2b0]
mov qword [rsp + 0x20], r13
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 0x20
jle 0x1400023e4
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp eax, 5
jne 0x140002bce
jmp 0x140002bc1
mov r8d, 0x104
lea rdx, [rbp + 0x6d0]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rdx, [rbp + 0x6d0]
lea rcx, str.Loaded__S_n_n
call fcn.1400012d0
mov rbx, r12
nop
movzx ecx, byte [rbx]
cmp cl, 0x20
je 0x14000242d
cmp cl, 9
jne 0x140002432
inc rbx
jmp 0x140002420
test cl, cl
je 0x1400024b0
cmp cl, 0x5b
je 0x1400024b0
lea rdi, str.entry_point
movzx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
movsx ecx, byte [rdi]
cmp eax, ecx
jne 0x140002460
inc rdi
inc rbx
cmp byte [rdi], r13b
jne 0x140002442
nop dword [rax]
movzx eax, byte [rbx]
cmp al, 0x20
je 0x14000246b
cmp al, 9
jne 0x140002470
inc rbx
jmp 0x140002460
cmp al, 0x3d
jne 0x140002479
cmp byte [rdi], r13b
je 0x1400024ce
test al, al
je 0x140002493
nop dword [rax]
cmp al, 0xa
je 0x1400024a7
cmp al, 0xd
je 0x140002493
movzx eax, byte [rbx + 1]
inc rbx
test al, al
jne 0x140002480
movsx rcx, byte [rbx]
cmp cl, 0xa
je 0x1400024a7
cmp cl, 0x20
ja 0x1400024ac
bt r15, rcx
jae 0x1400024ac
inc rbx
jmp 0x140002493
test cl, cl
jne 0x140002436
lea rdx, str.CBTProc
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
test rax, rax
je 0x140002be9
jmp 0x14000254d
inc rbx
movzx eax, byte [rbx]
cmp al, 0x20
je 0x1400024dc
cmp al, 9
jne 0x1400024e1
inc rbx
jmp 0x1400024d1
lea rcx, [rbp - 0x80]
mov rdx, rbx
nop dword [rax + rax]
movzx eax, byte [rdx]
mov byte [rcx], al
movzx eax, byte [rdx]
cmp al, 0xa
je 0x14000251a
cmp al, 0xd
je 0x14000251a
test al, al
je 0x14000251a
inc rdx
inc rcx
mov rax, rdx
sub rax, rbx
cmp rax, 0x104
jb 0x1400024f0
jmp 0x1400024b0
lea rax, [rbp - 0x80]
cmp rcx, rax
jb 0x140002544
movsx rax, byte [rcx]
test al, al
je 0x140002535
cmp al, 0x20
ja 0x140002544
bt rsi, rax
jae 0x140002544
mov byte [rcx], r13b
lea rax, [rbp - 0x80]
dec rcx
cmp rcx, rax
jae 0x140002523
lea rdx, [rbp - 0x80]
jmp 0x1400024b7
mov rbx, r12
movzx ecx, byte [rbx]
cmp cl, 0x20
je 0x14000255d
cmp cl, 9
jne 0x140002562
inc rbx
jmp 0x140002550
test cl, cl
je 0x1400025e0
cmp cl, 0x5b
je 0x1400025e0
lea rdi, str.hook_proc
movzx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
movsx ecx, byte [rdi]
cmp eax, ecx
jne 0x140002590
inc rdi
inc rbx
cmp byte [rdi], r13b
jne 0x140002572
nop dword [rax]
movzx eax, byte [rbx]
cmp al, 0x20
je 0x14000259b
cmp al, 9
jne 0x1400025a0
inc rbx
jmp 0x140002590
cmp al, 0x3d
jne 0x1400025a9
cmp byte [rdi], r13b
je 0x14000260c
test al, al
je 0x1400025c3
nop dword [rax]
cmp al, 0xa
je 0x1400025d7
cmp al, 0xd
je 0x1400025c3
movzx eax, byte [rbx + 1]
inc rbx
test al, al
jne 0x1400025b0
movsx rcx, byte [rbx]
cmp cl, 0xa
je 0x1400025d7
cmp cl, 0x20
ja 0x1400025dc
bt r15, rcx
jae 0x1400025dc
inc rbx
jmp 0x1400025c3
test cl, cl
jne 0x140002566
mov eax, 5
xor r9d, r9d
mov r8, r14
mov rdx, rsi
mov ecx, eax
call qword [sym.imp.USER32.dll_SetWindowsHookExW]
mov qword [rsp + 0x58], rax
mov r15, rax
test rax, rax
je 0x140002bf6
jmp 0x140002699
inc rbx
nop
movzx eax, byte [rbx]
cmp al, 0x20
je 0x14000261b
cmp al, 9
jne 0x140002620
inc rbx
jmp 0x140002610
lea rcx, [rsp + 0x60]
mov rdx, rbx
mov r8d, 0x2401
nop
movsx eax, byte [rdx]
mov byte [rcx], al
cmp al, 0xd
ja 0x14000263f
bt r8d, eax
jb 0x140002653
inc rdx
inc rcx
mov rax, rdx
sub rax, rbx
cmp rax, 0x10
jb 0x140002630
jmp 0x1400025e0
lea rax, [rsp + 0x60]
cmp rcx, rax
jb 0x140002689
movabs rdx, 0x100002600
movsx rax, byte [rcx]
test al, al
je 0x140002679
cmp al, 0x20
ja 0x140002689
bt rdx, rax
jae 0x140002689
mov byte [rcx], r13b
lea rax, [rsp + 0x60]
dec rcx
cmp rcx, rax
jae 0x140002667
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
jmp 0x1400025e5
mov rbx, r12
nop dword [rax]
movzx ecx, byte [rbx]
cmp cl, 0x20
je 0x1400026ad
cmp cl, 9
jne 0x1400026b2
inc rbx
jmp 0x1400026a0
movabs rsi, 0x100002200
test cl, cl
je 0x140002740
cmp cl, 0x5b
je 0x140002740
lea rdi, str.launch
movzx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
movsx ecx, byte [rdi]
cmp eax, ecx
jne 0x1400026f0
inc rdi
inc rbx
cmp byte [rdi], r13b
jne 0x1400026d0
nop dword [rax + rax]
movzx eax, byte [rbx]
cmp al, 0x20
je 0x1400026fb
cmp al, 9
jne 0x140002700
inc rbx
jmp 0x1400026f0
cmp al, 0x3d
jne 0x140002709
cmp byte [rdi], r13b
je 0x140002768
test al, al
je 0x140002723
nop dword [rax]
cmp al, 0xa
je 0x140002737
cmp al, 0xd
je 0x140002723
movzx eax, byte [rbx + 1]
inc rbx
test al, al
jne 0x140002710
movsx rcx, byte [rbx]
cmp cl, 0xa
je 0x140002737
cmp cl, 0x20
ja 0x14000273c
bt rsi, rcx
jae 0x14000273c
inc rbx
jmp 0x140002723
test cl, cl
jne 0x1400026c4
xor r14b, r14b
lea rcx, str.3DMigoto_ready___Now_run_the_game._n
call fcn.1400012d0
mov rbx, r12
movzx ecx, byte [rbx]
cmp cl, 0x20
je 0x140002763
cmp cl, 9
jne 0x1400028e3
inc rbx
jmp 0x140002752
inc rbx
nop dword [rax + rax]
movzx eax, byte [rbx]
cmp al, 0x20
je 0x14000277b
cmp al, 9
jne 0x140002780
inc rbx
jmp 0x140002770
lea rcx, [rbp - 0x80]
mov rdx, rbx
nop word [rax + rax]
movzx eax, byte [rdx]
mov byte [rcx], al
movzx eax, byte [rdx]
cmp al, 0xa
je 0x1400027ba
cmp al, 0xd
je 0x1400027ba
test al, al
je 0x1400027ba
inc rdx
inc rcx
mov rax, rdx
sub rax, rbx
cmp rax, 0x104
jb 0x140002790
jmp 0x140002740
lea rax, [rbp - 0x80]
cmp rcx, rax
jb 0x1400027fb
movabs rsi, 0x100002600
nop dword [rax]
movsx rax, byte [rcx]
test al, al
je 0x1400027e2
cmp al, 0x20
ja 0x1400027f1
bt rsi, rax
jae 0x1400027f1
mov byte [rcx], r13b
lea rax, [rbp - 0x80]
dec rcx
cmp rcx, rax
jae 0x1400027d0
movabs rsi, 0x100002200
lea rdx, [rbp - 0x80]
mov r14b, 1
lea rcx, str.3DMigoto_ready__launching___s_..._n
call fcn.1400012d0
mov edx, 6
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
lea rax, [rbp + 0x8e0]
mov dword [rsp + 0x28], 0x104
mov r9d, 0xffffffff
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x80]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x140002c03
lea r9, [rsp + 0x48]
mov qword [rsp + 0x48], r13
lea r8, [rbp + 0x4c0]
mov edx, 0x104
lea rcx, [rbp + 0x8e0]
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
dec eax
cmp eax, 0x102
ja 0x1400028ba
lea rcx, [rbp + 0x4c0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400028ba
test al, 0x10
jne 0x14000289e
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x14000289e
mov word [rax], r13w
lea rdx, [rbp + 0x4c0]
lea rcx, str.Using_working_directory:___S__n
call fcn.1400012d0
lea rax, [rbp + 0x4c0]
jmp 0x1400028bd
mov rax, r13
mov dword [rsp + 0x28], 1
lea r8, [rbp + 0x8e0]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x14000274f
test cl, cl
je 0x140002961
cmp cl, 0x5b
je 0x140002961
lea rdi, str.delay
movzx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
movsx ecx, byte [rdi]
cmp eax, ecx
jne 0x140002910
inc rdi
inc rbx
cmp byte [rdi], r13b
jne 0x1400028f3
nop
movzx eax, byte [rbx]
cmp al, 0x20
je 0x14000291b
cmp al, 9
jne 0x140002920
inc rbx
jmp 0x140002910
cmp al, 0x3d
jne 0x14000292d
cmp byte [rdi], r13b
je 0x140002a09
test al, al
je 0x140002944
cmp al, 0xa
je 0x140002958
cmp al, 0xd
je 0x140002944
movzx eax, byte [rbx + 1]
inc rbx
test al, al
jne 0x140002931
movsx rcx, byte [rbx]
cmp cl, 0xa
je 0x140002958
cmp cl, 0x20
ja 0x14000295d
bt rsi, rcx
jae 0x14000295d
inc rbx
jmp 0x140002944
test cl, cl
jne 0x1400028e7
mov ebx, r13d
mov r8b, 1
lea rdx, str.wait_for_target
mov rcx, r12
call fcn.140001170
movzx esi, al
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x2b0]
mov r9d, 0xffffffff
lea r8, [rbp + 0x1a0]
mov qword [rsp + 0x20], rax
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x140002aee
movsxd rdi, ebx
test sil, sil
jne 0x1400029c1
cmp rdi, 0xffffffffffffffff
jne 0x140002aa9
lea rdx, [rbp + 0x6d0]
lea rcx, [rbp + 0x2b0]
call fcn.140001bc0
test al, al
je 0x1400029e2
cmp rdi, 0xffffffffffffffff
jne 0x140002aa9
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
test r14b, r14b
je 0x140002a04
cmp r13d, 3
jne 0x140002a04
lea rcx, str._nStill_waiting_for_the_game_to_start..._nIf_the_game_does_not_launch_automatically__leave_this_window_open_and_run_it_manually._nYou_can_also_adjust_remove_the__Loader__launch_option_in_the_d3dx.ini_as_desired._n_n
call fcn.1400012d0
inc r13d
jmp 0x1400029b2
inc rbx
nop dword [rax]
movzx eax, byte [rbx]
cmp al, 0x20
je 0x140002a1b
cmp al, 9
jne 0x140002a20
inc rbx
jmp 0x140002a10
lea rcx, [rsp + 0x70]
mov rdx, rbx
nop dword [rax + rax]
movsx eax, byte [rdx]
mov byte [rcx], al
cmp al, 0xd
ja 0x140002a45
mov r8d, 0x2401
bt r8d, eax
jb 0x140002a5c
inc rdx
inc rcx
mov rax, rdx
sub rax, rbx
cmp rax, 0x10
jb 0x140002a30
jmp 0x140002961
lea rax, [rsp + 0x70]
cmp rcx, rax
jb 0x140002a97
movabs r15, 0x100002600
movsx rax, byte [rcx]
test al, al
je 0x140002a82
cmp al, 0x20
ja 0x140002a92
bt r15, rax
jae 0x140002a92
mov byte [rcx], r13b
lea rax, [rsp + 0x70]
dec rcx
cmp rcx, rax
jae 0x140002a70
mov r15, qword [rsp + 0x58]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov ebx, eax
jmp 0x140002964
test ebx, ebx
jle 0x140002ae2
nop dword [rax]
mov edx, ebx
lea rcx, str.Shutting_down_loader_in__i..._r
call fcn.1400012d0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0x6d0]
lea rcx, [rbp + 0x2b0]
call fcn.140001bc0
dec ebx
test ebx, ebx
jg 0x140002ab0
lea rcx, [0x140005ad8]
call fcn.1400012d0
mov rcx, r15
call qword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov rcx, qword [rsp + 0x40]
call fcn.140002f10
mov r14, qword [rsp + 0xc08]
xor eax, eax
mov r12, qword [rsp + 0xc18]
mov r15, qword [rsp + 0xc00]
mov rdi, qword [rsp + 0xc40]
mov rsi, qword [rsp + 0xc38]
mov rbx, qword [rsp + 0xc30]
mov r13, qword [rsp + 0xc10]
mov rcx, qword [rbp + 0xaf0]
xor rcx, rsp
call fcn.140002ef0
add rsp, 0xc20
pop rbp
ret
lea rdx, str.Error_reading_d3dx.ini_n
call fcn.140001560
int3
lea rdx, str.ERROR:_Another_instance_of_the_3DMigoto_Loader_is_already_running._Please_close_it_and_try_again_n
call fcn.140001560
int3
lea rcx, str.Unable_to_open_d3dx.ini_n
call fcn.140001580
int3
lea rcx, str.d3dx.ini_missing_required__Loader__section_n
call fcn.140001580
int3
lea rcx, str.d3dx.ini__Loader__section_missing_required__target__setting_n
call fcn.140001580
int3
lea rcx, str.d3dx.ini__Loader__section_missing_required__module__setting_n
call fcn.140001580
int3
lea rdx, [rbp + 0x90]
lea rcx, str.Unable_to_load_3DMigoto___s__n
call fcn.1400012d0
lea rdx, str._nPress_enter_to_close..._n
call fcn.140001560
int3
lea rdx, str.Unable_to_run_as_admin:_Access_Denied_n
call fcn.140001560
int3
mov edx, eax
lea rcx, str.Unable_to_run_as_admin:__d_n
call fcn.1400012d0
lea rdx, str._nPress_enter_to_close..._n
call fcn.140001560
int3
lea rdx, str.Module_does_not_support_injection_method_nMake_sure_this_is_a_recent_3DMigoto_d3d11.dll_n
call fcn.140001560
int3
lea rdx, str.Error_installing_hook_n
call fcn.140001560
int3
lea rdx, str.Invalid_launch_setting_n
call fcn.140001560
int3