Function at 0x18003c9c4
Capabilities:
Create thread
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x30
xor ebx, ebx
call fcn.18003d8bc
cmp qword [0x180093650], rbx
lea r14d, [rbx + 1]
jne 0x18003ca0b
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapCreate]
mov qword [0x180093650], rax
test rax, rax
jne 0x18003ca0e
lea ebx, [rax + 9]
jmp 0x18003ca0e
mov ebx, r14d
xor eax, eax
xchg dword [0x1800935dc], eax
test ebx, ebx
je 0x18003ca7b
call qword [sym.imp.KERNEL32.dll_AllocConsole]
test eax, eax
jne 0x18003ca35
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov ecx, r14d
call fcn.18004b52c
mov r9, rax
lea r8, [0x180085b60]
lea rdx, str.CONOUT_
lea rcx, [rsp + 0x40]
call fcn.1800547d4
lea rdx, str.Failed_hwid_spoof_
lea rcx, [0x180091a20]
call fcn.1800047a8
mov rcx, rax
call fcn.180004994
mov eax, r14d
jmp 0x18003ceed
mov rcx, qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
lea r8, [0x180093660]
lea rdx, [0x18003c6a0]
call fcn.18003d8fc
lea rbp, [0x180091c70]
test eax, eax
je 0x18003cab7
lea rdx, str.GetAdaptersInfo_failed
mov rcx, rbp
call fcn.1800047a8
mov rcx, rax
call fcn.180004994
mov rcx, qword [sym.imp.KERNEL32.dll_DeviceIoControl]
lea r8, [0x180093668]
lea rdx, [0x18003c748]
call fcn.18003d8fc
test eax, eax
je 0x18003caec
lea rdx, str.DeviceIoControl_failed
mov rcx, rbp
call fcn.1800047a8
mov rcx, rax
call fcn.180004994
lea rcx, str.ole32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.CoSetProxyBlanket
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
lea r8, [0x180093628]
lea rdx, [0x18003c774]
call fcn.18003d8fc
test eax, eax
je 0x18003cb3f
lea rdx, str.Failed_to_lpCoSetProxyBlanket_create.
mov rcx, rbp
call fcn.1800047a8
mov rcx, rax
call fcn.180004994
jmp 0x18003ca1a
mov rcx, qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea r8, [0x180090cb8]
lea rdx, [0x18003c760]
call fcn.18003d8fc
test eax, eax
je 0x18003cb66
lea rdx, str.MH_CreateHook_failed
jmp 0x18003cb2a
lea rcx, str.KERNELBASE.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.EnumProcessModules
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
lea r8, [0x180093638]
lea rdx, [method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_40]
call fcn.18003d8fc
test eax, eax
je 0x18003cbb4
lea rdx, str.EnumProcessModules_failed
mov rcx, rbp
call fcn.1800047a8
mov rcx, rax
call fcn.180004994
lea rcx, str.KERNELBASE.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.EnumProcessModulesEx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
lea r8, [0x1800935f0]
lea rdx, [method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_40]
call fcn.18003d8fc
test eax, eax
je 0x18003cc02
lea rdx, str.EnumProcessModulesEx_failed
mov rcx, rbp
call fcn.1800047a8
mov rcx, rax
call fcn.180004994
mov rcx, qword [sym.imp.USER32.dll_GetWindowTextW]
lea r8, [0x180093670]
lea rdx, [method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_40]
call fcn.18003d8fc
test eax, eax
je 0x18003cc37
lea rdx, str.MH_CreateHook_for_GetWindowTextW_failed
mov rcx, rbp
call fcn.1800047a8
mov rcx, rax
call fcn.180004994
mov rcx, qword [sym.imp.USER32.dll_GetWindowTextA]
lea r8, [0x180093678]
lea rdx, [method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_40]
call fcn.18003d8fc
test eax, eax
je 0x18003cc6c
lea rdx, str.MH_CreateHook_for_GetWindowTextA_failed
mov rcx, rbp
call fcn.1800047a8
mov rcx, rax
call fcn.180004994
lea rcx, str.gdi32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.BitBlt
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
lea r8, [0x1800935a0]
lea rdx, [method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_40]
call fcn.18003d8fc
test eax, eax
je 0x18003ccb5
lea rdx, str.Failed_to_create_hook_lpBitBlt_.
mov rcx, rbp
jmp 0x18003ca66
lea rdx, str.CreateBitmap
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
lea r8, [0x1800935c0]
lea rdx, [method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_40]
call fcn.18003d8fc
test eax, eax
je 0x18003cce8
lea rdx, str.Failed_to_create_hook_lpCreateBitmap.
jmp 0x18003ccad
mov rcx, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea r8, [0x180093640]
lea rdx, [0x18003c7a8]
call fcn.18003d8fc
test eax, eax
je 0x18003cd12
lea rcx, str.Failed_to_hook_LoadLibraryA_n
call fcn.180038528
mov rcx, qword [sym.imp.KERNEL32.dll_LoadLibraryW]
lea r8, [0x1800935b0]
lea rdx, [0x18003c7d0]
call fcn.18003d8fc
test eax, eax
je 0x18003cd3c
lea rcx, str.Failed_to_hook_LoadLibraryW_n
call fcn.180038528
mov rcx, qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
lea r8, [0x1800935e8]
lea rdx, [0x18003c7f8]
call fcn.18003d8fc
test eax, eax
je 0x18003cd66
lea rcx, str.Failed_to_hook_CreateRemoteThread_n
call fcn.180038528
mov rcx, qword [sym.imp.KERNEL32.dll_CreateThread]
lea r8, [0x180093630]
lea rdx, [0x18003c894]
call fcn.18003d8fc
test eax, eax
je 0x18003cd90
lea rcx, str.Failed_to_hook_CreateThread_n
call fcn.180038528
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor r8d, r8d
lea rdx, str.48_8B_C4_48_89_58_10_48_89_70_18_57_48_81_EC_A0_00_00_00_0F_29_70_E8_48_8D_50_88_48_8B_F9
mov rcx, rax
call fcn.18003c494
lea r8, [0x1800935c8]
mov rcx, rax
lea rdx, [0x18003c9a4]
call fcn.18003d8fc
test eax, eax
je 0x18003cdd0
lea rcx, str.Failed_to_hook_sub_1418CFF80_n
call fcn.180038528
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor r8d, r8d
lea rdx, str.48_89_5C_24_18_55_56_57_41_56_41_57_48_8D_AC_24_70_FF_FF_FF_48_81_EC_90_01_00_00_48_8B_05_56
mov rcx, rax
call fcn.18003c494
xor ecx, ecx
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, 2
xor ecx, ecx
sub rbx, rax
add rbx, rdi
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r8, rbx
lea rdx, str.48_89_5C_24_18_55_56_57_41_56_41_57_48_8D_AC_24_70_FF_FF_FF_48_81_EC_90_01_00_00_48_8B_05_56
mov rcx, rax
call fcn.18003c494
lea r8, [0x1800935d0]
mov rcx, rax
lea rdx, [0x18003c188]
call fcn.18003d8fc
test eax, eax
je 0x18003ce4f
lea rdx, str.MH_CreateHook_for_ReceivedEvent_failed
lea rcx, [0x180091a20]
call fcn.1800047a8
mov rcx, rax
call fcn.180004994
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor r8d, r8d
lea rdx, str.40_55_53_56_57_41_56_48_8D_AC_24_00_FD_FF_FF_48_81_EC_00_04_00_00_48_8B_05_________48_33_C4_48_89_85_50_02_00_00
mov rcx, rax
call fcn.18003c494
lea r8, [0x1800935e0]
mov rcx, rax
lea rdx, [0x18003c2d4]
call fcn.18003d8fc
test eax, eax
je 0x18003ce9e
lea rdx, str.MH_CreateHook_for_addr_sub_1442BEE70_failed
lea rcx, [0x180091a20]
call fcn.1800047a8
mov rcx, rax
call fcn.180004994
call fcn.18003d8bc
cmp qword [0x180093650], 0
je 0x18003ceb4
call fcn.18003d81c
mov edi, eax
xor eax, eax
xchg dword [0x1800935dc], eax
test edi, edi
je 0x18003cecc
lea rdx, str.MH_EnableHook_failed
jmp 0x18003cb2a
and qword [rsp + 0x28], 0
lea r8, [0x18003c77c]
and dword [rsp + 0x20], 0
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
add rsp, 0x30
pop r14
ret