Function at 0x14003df00
Capabilities:
Log keystrokes via polling
Set console window title

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rsi
push rdi
sub rsp, 0x198
mov rax, qword [0x140447c18]
xor rax, rsp
mov qword [rsp + 0x180], rax
lea rcx, [0x14036eb30]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x170]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x208
mov r9d, 0x352
mov r8d, dword [rsp + 0x174]
mov edx, dword [rsp + 0x170]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.USER32.dll_MoveWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor r8d, r8d
mov edx, 1
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowScrollBar]
call fcn.14026b7c0
lea rdx, [0x1404490d0]
lea rcx, [0x1404535a0]
call fcn.14001c940
call fcn.14026b7c0
lea rax, [rsp + 0x148]
mov qword [rsp + 0x70], rax
lea rdx, [0x14036eb38]
mov rcx, qword [rsp + 0x70]
call fcn.14001dff0
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x78]
call fcn.14026b770
call fcn.14026b8e0
lea rdx, str.Bolmax
lea rcx, [0x1404535a0]
call fcn.14001c990
lea rdx, str.__banlatmayan_hile.
lea rcx, [0x1404535a0]
call fcn.14001c990
call fcn.14026b7c0
lea rdx, [0x14036eb80]
lea rcx, [0x1404535a0]
call fcn.14001c990
call fcn.14026b8e0
lea rdx, str.2018___2023_n_n
lea rcx, [0x1404535a0]
call fcn.14001c990
call fcn.140001a10
call fcn.1402a0c80
call fcn.14003cb00
call fcn.1402353e0
call fcn.1402be1b0
test eax, eax
jne 0x14003e062
mov eax, 1
jmp 0x14003e7e8
lea rax, [0x14036eb98]
mov qword [rsp + 0x80], rax
call fcn.1402bebd0
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
jne 0x14003e08a
xor eax, eax
jmp 0x14003e7e8
mov rcx, qword [rsp + 0x60]
call fcn.1402bec10
mov eax, dword [rax]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x4c]
mov dword [0x1404490a8], eax
mov rcx, qword [rsp + 0x60]
call fcn.1402bec10
mov eax, dword [rax + 4]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x48]
mov dword [0x1404490ac], eax
mov edx, 1
mov ecx, 0x20007
call fcn.1402bd6e0
xor edx, edx
mov ecx, 0x20003
call fcn.1402bd6e0
mov edx, 1
mov ecx, 0x20008
call fcn.1402bd6e0
mov edx, 1
mov ecx, 0x2000d
call fcn.1402bd6e0
mov edx, 1
mov ecx, 0x2000a
call fcn.1402bd6e0
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str.Bolmax_Overlay
mov edx, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x4c]
call fcn.1402bcda0
mov qword [0x1404490c8], rax
cmp qword [0x1404490c8], 0
jne 0x14003e142
mov eax, 1
jmp 0x14003e7e8
xor r8d, r8d
mov edx, 0x20005
mov rcx, qword [0x1404490c8]
call fcn.1402bd560
mov rcx, qword [0x1404490c8]
call fcn.1402bf980
mov ecx, 1
call fcn.1402bfa60
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov r9d, 8
mov r8d, 0x418
mov edx, 0x37b8
lea rcx, [0x14036ebb8]
call fcn.1400a7830
xor ecx, ecx
call fcn.140098010
call fcn.140098180
mov qword [rsp + 0x88], rax
xor ecx, ecx
call fcn.140129290
mov dl, 1
mov rcx, qword [0x1404490c8]
call fcn.140165010
mov rcx, qword [rsp + 0x80]
call fcn.140181920
call fcn.1400981a0
mov qword [rsp + 0x40], rax
movss xmm0, dword [0x140367f84]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14036f024]
movss xmm2, dword [0x14036f01c]
movss xmm1, dword [0x14036f018]
lea rcx, [rsp + 0x98]
call fcn.14005a950
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x40]
lea rdi, [rdx + rcx + 0xc8]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [0x140367f84]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14036f01c]
movss xmm2, dword [0x140367f84]
movss xmm1, dword [0x14036f038]
lea rcx, [rsp + 0xa8]
call fcn.14005a950
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0xd
mov rdx, qword [rsp + 0x40]
lea rdi, [rdx + rcx + 0xc8]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [0x140367f84]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14036f01c]
movss xmm2, dword [0x140367f84]
movss xmm1, dword [0x14036f038]
lea rcx, [rsp + 0xb8]
call fcn.14005a950
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x12
mov rdx, qword [rsp + 0x40]
lea rdi, [rdx + rcx + 0xc8]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [0x140367f84]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14036f02c]
movss xmm2, dword [0x14036f028]
movss xmm1, dword [0x14036f028]
lea rcx, [rsp + 0xc8]
call fcn.14005a950
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x17
mov rdx, qword [rsp + 0x40]
lea rdi, [rdx + rcx + 0xc8]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [0x140367f84]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14036f02c]
movss xmm2, dword [0x14036f028]
movss xmm1, dword [0x14036f028]
lea rcx, [rsp + 0xd8]
call fcn.14005a950
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x16
mov rdx, qword [rsp + 0x40]
lea rdi, [rdx + rcx + 0xc8]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [0x140367f84]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14036f020]
movss xmm2, dword [0x14036f010]
movss xmm1, dword [0x14036f00c]
lea rcx, [rsp + 0xe8]
call fcn.14005a950
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0xe
mov rdx, qword [rsp + 0x40]
lea rdi, [rdx + rcx + 0xc8]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [0x140367f84]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14036f034]
movss xmm2, dword [0x14036f030]
movss xmm1, dword [0x14036f030]
lea rcx, [rsp + 0xf8]
call fcn.14005a950
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0xf
mov rdx, qword [rsp + 0x40]
lea rdi, [rdx + rcx + 0xc8]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [0x140367f84]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14036f024]
movss xmm2, dword [0x14036f01c]
movss xmm1, dword [0x14036f018]
lea rcx, [rsp + 0x108]
call fcn.14005a950
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 4
mov rdx, qword [rsp + 0x40]
lea rdi, [rdx + rcx + 0xc8]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [0x140367f84]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14036f014]
movss xmm2, dword [0x14036f008]
movss xmm1, dword [0x14036f008]
lea rcx, [rsp + 0x118]
call fcn.14005a950
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0xa
mov rdx, qword [rsp + 0x40]
lea rdi, [rdx + rcx + 0xc8]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [0x140367f84]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14036f014]
movss xmm2, dword [0x14036f008]
movss xmm1, dword [0x14036f008]
lea rcx, [rsp + 0x128]
call fcn.14005a950
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0xb
mov rdx, qword [rsp + 0x40]
lea rdi, [rdx + rcx + 0xc8]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [0x140367f84]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14036f014]
movss xmm2, dword [0x14036f008]
movss xmm1, dword [0x14036f008]
lea rcx, [rsp + 0x138]
call fcn.14005a950
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0xc
mov rdx, qword [rsp + 0x40]
lea rdi, [rdx + rcx + 0xc8]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
call fcn.14003cb10
call fcn.14003d250
mov rcx, qword [0x1404490c8]
call fcn.1402bda30
test eax, eax
jne 0x14003e7c4
call fcn.1402bd540
mov ecx, 0x4000
call qword [sym.imp.OPENGL32.dll_glClear]
call fcn.140181cf0
call fcn.140165140
call fcn.1400981c0
call fcn.14003c9d0
mov ecx, reloc.WS2_32.dll_WSASetLastError
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14003e617
movzx eax, byte [0x1404490bc]
test eax, eax
jne 0x14003e5df
mov dword [rsp + 0x50], 1
jmp 0x14003e5e7
mov dword [rsp + 0x50], 0
movzx eax, byte [rsp + 0x50]
mov byte [0x1404490bc], al
movzx eax, byte [0x1404490bc]
test eax, eax
je 0x14003e60b
mov rcx, qword [0x1404490c8]
call fcn.1400208e0
jmp 0x14003e617
mov rcx, qword [0x1404490c8]
call fcn.140020960
cmp dword [section..data], 0xffffffff
je 0x14003e6b5
cmp dword [section..data], 2
je 0x14003e636
cmp dword [section..data], 3
jne 0x14003e671
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14003e671
movzx eax, byte [0x1404490b1]
test eax, eax
jne 0x14003e65e
mov dword [rsp + 0x54], 1
jmp 0x14003e666
mov dword [rsp + 0x54], 0
movzx eax, byte [rsp + 0x54]
mov byte [0x1404490b1], al
cmp dword [section..data], 3
jne 0x14003e6b5
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14003e6b5
movzx eax, byte [0x1404490b8]
test eax, eax
jne 0x14003e6a2
mov dword [rsp + 0x58], 1
jmp 0x14003e6aa
mov dword [rsp + 0x58], 0
movzx eax, byte [rsp + 0x58]
mov byte [0x1404490b8], al
movzx eax, byte [0x1404490bb]
test eax, eax
je 0x14003e6c7
xor eax, eax
jmp 0x14003e7e8
call fcn.14021adc0
movzx eax, byte [0x1404490bc]
test eax, eax
je 0x14003e6dc
call fcn.140250a50
movzx eax, byte [0x1404490b8]
test eax, eax
je 0x14003e6ec
call fcn.140285d10
movzx eax, byte [0x1404490b1]
test eax, eax
jne 0x14003e744
movzx eax, byte [0x1404490b0]
test eax, eax
jne 0x14003e744
movzx eax, byte [0x1404490b2]
test eax, eax
jne 0x14003e744
movzx eax, byte [0x1404490b3]
test eax, eax
jne 0x14003e744
movzx eax, byte [0x1404490b5]
test eax, eax
jne 0x14003e744
movzx eax, byte [0x1404490b4]
test eax, eax
jne 0x14003e744
movzx eax, byte [0x1404490b7]
test eax, eax
jne 0x14003e744
movzx eax, byte [0x1404490b6]
test eax, eax
je 0x14003e749
call fcn.140062570
call fcn.140099500
lea r8, [rsp + 0x168]
lea rdx, [rsp + 0x16c]
mov rcx, qword [0x1404490c8]
call fcn.1402bd2f0
mov r9d, dword [rsp + 0x168]
mov r8d, dword [rsp + 0x16c]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.OPENGL32.dll_glViewport]
call fcn.1400999a0
mov rcx, rax
call fcn.140181d20
mov rcx, qword [0x1404490c8]
call fcn.1402bfa20
mov dword [rsp + 0x5c], 1
lea rdx, [rsp + 0x5c]
lea rcx, [rsp + 0x90]
call fcn.14003b6d0
mov rcx, rax
call fcn.14003c570
jmp 0x14003e57f
call fcn.140181c90
call fcn.1401650a0
xor ecx, ecx
call fcn.1400980d0
mov rcx, qword [0x1404490c8]
call fcn.1402bd210
call fcn.1402be340
xor eax, eax
mov rcx, qword [rsp + 0x180]
xor rcx, rsp
call fcn.140323750
add rsp, 0x198
pop rdi
pop rsi
ret