Function at 0x100fa120
Capabilities:
Create thread
Enumerate gui resources
Execute command
Hide graphical window
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10255c80
mov eax, dword fs:[0]
push eax
sub esp, 0x290
mov eax, dword [0x103e1bc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 1
mov dword [ebp - 0xf8], 0
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.10061740
call fcn.10061770
push 0xb0
lea eax, [ebp - 0xf0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0xf0], 0x103c8ce4
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
push 0
push 0
lea eax, [ebp - 0xec]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf8], 1
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool_]
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xf0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xf0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0xf4], eax
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xec], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov byte [ebp - 0xa4], 0
mov byte [ebp - 0xaf], 0
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x104690c0]
mov ecx, dword [0x104690c4]
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 0xb4], 0
mov dword [ebp - 4], 2
cmp byte [0x104327de], 1
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
mov ebx, dword [sym.imp.USER32.dll_FindWindowExW]
jne 0x100fa2a5
push 0
push 0x100facd0
call dword [sym.imp.USER32.dll_EnumWindows]
push dword [0x104330a8]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x100fa28a
push 9
push dword [0x104330a8]
call edi
push str.AEngineRenderWindow
push str.AEngineRenderWindowClass
push 0
push dword [0x104330a8]
call ebx
mov dword [0x104330a8], eax
jmp 0x100fa2f5
cmp byte [0x104327df], 1
jne 0x100fa2f0
push 0
push 0x100facd0
call dword [sym.imp.USER32.dll_EnumWindows]
push dword [0x104330a8]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x100fa2d5
push 9
push dword [0x104330a8]
call edi
push str.TitanOpenglWindow
push str.TitanOpenglWindowClass
push 0
push dword [0x104330a8]
call ebx
mov dword [0x104330a8], eax
jmp 0x100fa2f5
mov eax, dword [0x104330a8]
mov ebx, dword [sym.imp.USER32.dll_GetWindowRect]
push 0x104330bc
push eax
call ebx
mov ecx, dword [0x104330bc]
test ecx, ecx
js 0x100fa328
mov eax, dword [0x104330c0]
test eax, eax
js 0x100fa328
cmp dword [0x104330c4], 0
jl 0x100fa328
cmp dword [0x104330c8], 0
jge 0x100fa39f
lea eax, [ebp - 0x20]
push eax
push dword [0x104330a8]
call ebx
mov eax, dword [0x104330c8]
mov ecx, dword [0x104330c0]
sub eax, ecx
mov edx, dword [0x104330c4]
mov esi, dword [0x104330bc]
sub edx, esi
push 3
push eax
push edx
push ecx
push esi
push 0xffffffffffffffff
push dword [0x104326e4]
mov dword [0x10464814], edx
mov dword [0x10464818], eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 1
push dword [0x10464818]
push dword [0x10464814]
push dword [0x104330c0]
push dword [0x104330bc]
push dword [0x104326e4]
call dword [sym.imp.USER32.dll_MoveWindow]
mov eax, dword [0x104330c0]
mov ecx, dword [0x104330bc]
mov dword [0x104326e8], eax
xorps xmm0, xmm0
mov eax, dword [0x10464814]
mov dword [0x10432704], eax
mov eax, dword [0x10464818]
mov dword [0x10432700], eax
lea eax, [ebp - 0x12c]
push eax
mov dword [0x104326ec], ecx
mov dword [ebp - 0x12c], 0x30
mov dword [ebp - 0x128], 3
mov dword [ebp - 0x124], 0x10079680
movups xmmword [ebp - 0x120], xmm0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0x103c9158
mov dword [ebp - 0x104], str.DX11WindowClass
mov dword [ebp - 0x100], 0
call dword [sym.imp.USER32.dll_RegisterClassExW]
push 0
push 0
push 0
push 0
push dword [0x10432700]
push dword [0x10432704]
push dword [0x104326e8]
push dword [0x104326ec]
push connect
push str.DX11Window
push str.DX11WindowClass
push 0x8000028
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x104326e4], eax
test eax, eax
je 0x100fa4a1
movaps xmm0, xmmword [0x103d08d0]
push 2
push 0xff
push 0
push eax
movups xmmword [0x104326f0], xmm0
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
push 0x104326f0
push dword [0x104326e4]
call dword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
push 5
push dword [0x104326e4]
call edi
push ecx
call fcn.100776d0
mov eax, dword [0x104330b0]
add esp, 4
test eax, eax
je 0x100fa4b9
inc dword [eax + 0x370]
push 0x3d48
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov dword [ebp - 0x134], eax
lea ecx, [ebp - 0x12d]
add esp, 4
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0xf8], eax
mov byte [ebp - 4], 3
test eax, eax
je 0x100fa4f2
push 0
mov ecx, eax
call fcn.100b81c0
jmp 0x100fa4f4
xor eax, eax
mov byte [ebp - 4], 2
cmp dword [0x104330b0], 0
jne 0x100fa506
mov dword [0x104330b0], eax
mov ecx, eax
call fcn.100be650
mov ebx, dword [0x104330b0]
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov dword [ebp - 0xf4], ebx
test ebx, ebx
jne 0x100fa543
push 0xd69
push str.D:1DLLDLLdsoundimgui_dockingimgui.cpp
push str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call edi
mov ebx, dword [0x104330b0]
add esp, 0xc
mov dword [ebp - 0xf4], ebx
call fcn.100f9200
push 0x78
lea eax, [ebp - 0x224]
mov byte [ebx + 0x358], 1
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x78
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x1ec], 0x7f7fffff
push 0
mov esi, 0xffff
mov dword [ebp - 0x1e0], 0x3f800000
push eax
mov word [ebp - 0x1dc], si
mov byte [ebp - 0x21c], 1
call sub.VCRUNTIME140.dll_memset
push 0x78
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x198], 3
push 0
push eax
mov dword [ebp - 0x194], 1
mov dword [ebp - 0x174], 0x7f7fffff
mov dword [ebp - 0x168], 0x3f800000
mov word [ebp - 0x164], si
mov byte [ebp - 0x1a4], 0
mov byte [ebp - 0x1e8], 1
mov byte [ebp - 0x208], 1
mov dword [ebp - 0x210], 2
mov dword [ebp - 0x20c], 2
call sub.VCRUNTIME140.dll_memset
movss xmm3, dword [0x103d03b8]
lea eax, [ebp - 0x1ac]
mov ecx, dword [ebx + 0x98]
add esp, 0x24
mov byte [ebp - 0x294], 1
mov dword [ebp - 0x264], 0x7f7fffff
mov dword [ebp - 0x258], 0x3f800000
push 0
push eax
push 0xd3e94
push 0x102eb8f0
mov word [ebp - 0x254], si
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x284], 1
mov byte [ebp - 0x280], 1
call fcn.100d8ac0
movss xmm3, dword [0x103d03c4]
mov esi, eax
mov ecx, dword [ebx + 0x98]
lea eax, [ebp - 0x29c]
push 0x103cffc4
push eax
push 0x6458
push 0x10422a98
call fcn.100d8ac0
movss xmm3, dword [0x103d03b8]
lea eax, [ebp - 0x224]
push 0x103cffc4
push eax
push ecx
mov ecx, dword [ebx + 0x98]
push 0x102cd258
call fcn.100d8be0
movss xmm3, dword [0x103d03a8]
lea eax, [ebp - 0x1ac]
mov ecx, dword [ebx + 0x98]
push 0
push eax
push 0xd3e94
push 0x102eb8f0
call fcn.100d8ac0
mov dword [0x104326d8], esi
mov esi, dword [0x104326e4]
push 0x10469080
mov dword [0x104326d4], eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x100fa860
push 0x10469078
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x100fa860
mov eax, dword [0x104330b0]
mov dword [0x10469074], esi
test eax, eax
jne 0x100fa739
push 0xd69
push str.D:1DLLDLLdsoundimgui_dockingimgui.cpp
push str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call edi
mov eax, dword [0x104330b0]
add esp, 0xc
or dword [eax + 0xc], 6
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [eax + 0xe0], esi
xor esi, esi
mov dword [eax + 0xbc], str.imgui_impl_win32
mov dword [eax + 0x34], 9
mov dword [eax + 0x38], 0x25
mov dword [eax + 0x3c], 0x27
mov dword [eax + 0x40], 0x26
mov dword [eax + 0x44], 0x28
mov dword [eax + 0x48], 0x21
mov dword [eax + 0x4c], 0x22
mov dword [eax + 0x50], 0x24
mov dword [eax + 0x54], 0x23
mov dword [eax + 0x58], 0x2d
mov dword [eax + 0x5c], 0x2e
mov dword [eax + 0x60], 8
mov dword [eax + 0x64], 0x20
mov dword [eax + 0x68], 0xd
mov dword [eax + 0x6c], 0x1b
mov dword [eax + 0x70], 0xd
mov dword [eax + 0x74], 0x41
mov dword [eax + 0x78], 0x43
mov dword [eax + 0x7c], 0x56
mov dword [eax + 0x80], 0x58
mov dword [eax + 0x84], 0x59
mov dword [eax + 0x88], 0x5a
mov dword [ebp - 0x24], 0x103ce090
mov dword [ebp - 0x20], str.xinput1_3.dll
mov dword [ebp - 0x1c], str.xinput9_1_0.dll
mov dword [ebp - 0x18], str.xinput1_2.dll
mov dword [ebp - 0x14], str.xinput1_1.dll
nop dword [eax + eax]
push dword [ebp + esi*4 - 0x24]
call ebx
mov edi, eax
test edi, edi
jne 0x100fa834
inc esi
cmp esi, 5
jl 0x100fa820
jmp 0x100fa854
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.XInputGetCapabilities
push edi
call esi
push str.XInputGetState
push edi
mov dword [0x1046906c], eax
call esi
mov dword [0x10469070], eax
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov ebx, dword [ebp - 0xf4]
mov eax, dword [0x104326d0]
mov esi, dword [0x104326e0]
mov dword [ebp - 0x134], eax
mov eax, dword [0x104330b0]
test eax, eax
jne 0x100fa893
push 0xd69
push str.D:1DLLDLLdsoundimgui_dockingimgui.cpp
push str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call edi
mov eax, dword [0x104330b0]
add esp, 0xc
or dword [eax + 0xc], 8
lea ecx, [ebp - 0xf4]
mov dword [eax + 0xc0], str.imgui_impl_dx11
mov eax, dword [esi]
push ecx
push 0x103ce060
push esi
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xfc], 0
call dword [eax]
test eax, eax
jne 0x100fa91d
mov eax, dword [ebp - 0xf4]
lea edx, [ebp - 0xf8]
push edx
push 0x103ce070
push eax
mov ecx, dword [eax]
call dword [ecx + 0x18]
test eax, eax
jne 0x100fa91d
mov eax, dword [ebp - 0xf8]
lea edx, [ebp - 0xfc]
push edx
push 0x103ce080
push eax
mov ecx, dword [eax]
call dword [ecx + 0x18]
test eax, eax
jne 0x100fa91d
mov eax, dword [ebp - 0x134]
mov dword [0x10469058], esi
mov dword [0x10469064], eax
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x100fa92d
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0xf8]
test ecx, ecx
je 0x100fa93d
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [0x10469058]
push eax
mov ecx, dword [eax]
call dword [ecx + 4]
mov eax, dword [0x10469064]
push eax
mov ecx, dword [eax]
call dword [ecx + 4]
movss xmm3, dword [0x103d03a8]
lea eax, [ebp - 0x1ac]
mov ecx, dword [ebx + 0x98]
push 0
push eax
push 0xd3e94
push 0x102eb8f0
call fcn.100d8ac0
movss xmm3, dword [0x103d039c]
mov ecx, dword [ebx + 0x98]
push 0
mov dword [0x104326d4], eax
lea eax, [ebp - 0x1ac]
push eax
push 0xd3e94
push 0x102eb8f0
call fcn.100d8ac0
push ecx
mov ecx, dword [ebx + 0x98]
mov dword [0x104326d8], eax
call fcn.100d8970
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x1004d670
push 0
push 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call edi
push 0
push 0
push 0
push 0x1008ecf0
push 0
push 0
call esi
push eax
call edi
push 0
push 0
push 0
push 0x100fc820
push 0
push 0
call esi
push eax
call edi
push 0
push 0
push 0
push 0x100fe7e0
push 0
push 0
call esi
push eax
mov dword [0x10433098], eax
call edi
mov ebx, dword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov esi, dword [sym.imp.USER32.dll_SetForegroundWindow]
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 0x19
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push 0
push 0
push dword [0x104326e4]
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x100faa5e
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
cmp byte [0x104327df], 1
jne 0x100faa93
push 0
push 0x103c9194
call dword [sym.imp.USER32.dll_FindWindowW]
push str.TitanOpenglWindow
push str.TitanOpenglWindowClass
push 0
push eax
mov dword [0x104330a8], eax
call dword [sym.imp.USER32.dll_FindWindowExW]
mov dword [0x104330a8], eax
jmp 0x100faa98
mov eax, dword [0x104330a8]
test eax, eax
je 0x100fab42
lea ecx, [ebp - 0x20]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ebx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
sub edx, ebx
mov ecx, dword [ebp - 0x14]
mov dword [0x104326ec], ebx
mov dword [0x104326e8], esi
cmp dword [0x10432704], edx
jne 0x100faad9
mov eax, ecx
sub eax, esi
cmp dword [0x10432700], eax
je 0x100faae7
sub ecx, esi
mov dword [0x10432704], edx
mov dword [0x10432700], ecx
push 3
push dword [0x104643a4]
push dword [0x10464434]
push esi
push ebx
push 0xffffffffffffffff
push dword [0x104326e4]
call dword [sym.imp.USER32.dll_SetWindowPos]
push 1
push dword [0x104643a4]
push dword [0x10464434]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push dword [0x104326e4]
call dword [sym.imp.USER32.dll_MoveWindow]
push 0x104326f0
push dword [0x104326e4]
call dword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov ebx, dword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov esi, dword [sym.imp.USER32.dll_SetForegroundWindow]
cmp byte [0x10433139], 0
je 0x100fab4f
push 0x11
jmp 0x100fab51
push 0
push dword [0x104326e4]
call ebx
cmp byte [0x103ee4e5], 0
je 0x100fab6a
push dword [0x104326e4]
call esi
push 0x24
call edi
test al, 1
je 0x100fab80
cmp byte [0x103eecaf], 0
sete byte [0x103eecaf]
push 0x23
call edi
test al, 1
je 0x100fab96
push str.TaskKill__F__IM_appmarket.exe
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push 0x2d
call edi
test al, 1
je 0x100fac07
cmp byte [0x103e1cb5], 1
mov esi, dword [0x104326e4]
push 0xffffffffffffffec
push esi
jne 0x100fabcd
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0x80000
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov esi, dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x100fabeb
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0xfff7ffff
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push esi
mov esi, dword [sym.imp.USER32.dll_SetForegroundWindow]
call esi
cmp byte [0x103e1cb5], 0
sete byte [0x103e1cb5]
cmp byte [0x103ee4e5], 0
sete byte [0x103ee4e5]
push 0x54
call edi
test al, 1
je 0x100fac44
mov eax, dword [0x10433114]
cmp eax, 2
jne 0x100fac25
mov dword [0x10433114], 0
jmp 0x100fac44
test eax, eax
jne 0x100fac35
mov dword [0x10433114], 1
jmp 0x100fac44
cmp eax, 1
jne 0x100fac44
mov dword [0x10433114], 2
push 0x72
call edi
test al, 1
je 0x100fac80
cmp byte [0x104330e9], 0
sete al
cmp byte [0x104330e8], 0
mov byte [0x104330e9], al
sete byte [0x104330e8]
cmp byte [0x103e98ab], 0
sete byte [0x103e98ab]
test al, al
jne 0x100fac80
call fcn.100fb310
push 0x74
call edi
test al, 1
je 0x100fac96
cmp byte [0x104330f3], 0
sete byte [0x104330f3]
push 0x75
call edi
test al, 1
je 0x100facac
cmp byte [0x10433153], 0
sete byte [0x10433153]
push 0x24
call edi
test al, 1
je 0x100faa28
cmp byte [0x103eecaf], 0
sete byte [0x103eecaf]
jmp 0x100faa28