Function at 0x180040c70
Capabilities:
Create thread
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
sub rsp, 0x160
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x180170038]
xor rax, rsp
mov qword [rbp + 0x100], rax
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rbx, rax
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea r8, [0x1801548fc]
lea rdx, str.CONOUT_
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str._________________________________________________________________________________________________________________________________________________________________________________________n______________________________________________________________________n________________________________________________________________n________________________________________________________________n____________________________________________________n________________________________________________n___________________________________________________n_____________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________n__________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________n___Cranium_v1.7_Beta_Owned_by_Kemo__xkem0x___Maintained_by_Timmy__mawmet__PeQu__ImPeQu__GD__GDBOI101__notkrae__notkrae_and_CoolNite__CoolNite2__n_n
lea rdx, [0x1801548a8]
call fcn.180023b00
lea rcx, [0x1801a9938]
cmp qword [0x1801a9950], 0x10
cmovae rcx, qword [0x1801a9938]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xor edi, edi
mov ebx, edi
mov esi, 1
xor eax, eax
lock cmpxchg dword [0x180172fdc], esi
je 0x180040d51
nop dword [rax]
cmp rbx, 0x20
jae 0x180040d3a
xor ecx, ecx
jmp 0x180040d3c
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rbx
xor eax, eax
lock cmpxchg dword [0x180172fdc], esi
jne 0x180040d30
cmp qword [0x180173000], rdi
jne 0x180041269
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapCreate]
mov qword [0x180173000], rax
mov ecx, edi
xchg dword [0x180172fdc], ecx
test rax, rax
je 0x18004126f
call fcn.180026320
test al, al
jne 0x180040daf
lea rdx, str.Failed_to_load_Carbon._Please_make_sure_your_CarbonLauncher_is_up_to_date_
lea rcx, [rbp + 0x20]
call fcn.18000a180
movzx edx, sil
mov rcx, rax
call fcn.180097700
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
call fcn.1800aa940
call fcn.18003d3b0
call fcn.18003d900
call fcn.18003c110
call fcn.1800268f0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x180027950]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
cmp byte [0x1801a92f8], dil
je 0x180040e03
cmp byte [0x1801a9ce0], dil
jne 0x180040e03
mov byte [0x1801a9ce0], sil
call fcn.18003b0b0
cmp byte [0x1801a88f8], dil
jne 0x180040e19
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180040de5
cmp byte [0x18017008d], dil
je 0x1800410ce
call fcn.1800a8130
test al, al
je 0x180040e79
call fcn.18003fd50
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x180027950]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.18011eb40
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
movabs rax, 0xdb3ea464303718ed
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x16f57db34795dfd9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x4fe8da6862bb3fd2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x8bb92a245e61894c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0x9cbe9ce6cd0101a4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x7b53eec56cf3d252
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x3293a2d8d2557889
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x6ceaeb967a3a50e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0xfb59ca0d5b5877a5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x65d5099429e6beae
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x3a8ea91b07d85ca7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0xeafe074a1741a720
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0xe899f289ba2164c9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rcx, 0x5b2a82a0079abe72
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0x5be0d1b7a2751deb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0x6ceaeb965b5f3c84
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm0, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm0
vmovdqu ymm1, ymmword [rbp + 0xe0]
vpxor ymm0, ymm1, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], rdi
lea rax, [rbp + 0x20]
mov r8, 0xffffffffffffffff
vzeroupper
nop dword [rax]
inc r8
cmp byte [rax + r8], dil
jne 0x180041040
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x80]
call fcn.18000a1e0
lea rax, [rbp + 0x80]
mov qword [rbp], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x80]
mov ecx, esi
call fcn.180097260
lea rdx, [rbp + 0x80]
cmp qword [rbp + 0x98], 0x10
cmovae rdx, qword [rbp + 0x80]
mov r9d, 0x10
lea r8, [0x1801541a0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rbp + 0x80]
call fcn.180014770
jmp 0x180040e51
movabs rax, 0xdb3ea464303718ed
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x1b065f64895d7ca
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x5bfcea3b66b12a87
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0x8c9068097a34ce4e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0xe899f289ba0003a0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rcx, 0x5b2a82a0079abe72
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0xfb59ca0d5b5877a5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x65d5099429e6beae
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x3a8ea91b07d85ca7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0xeafe074a1741a720
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0xe899f289ba2164c9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqa xmm2, xmmword [rbp + 0xa0]
vxorps xmm2, xmm2, xmmword [rbp + 0xe0]
vmovdqa xmmword [rbp + 0xe0], xmm2
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], rdi
lea rax, [rbp + 0xc0]
mov r8, 0xffffffffffffffff
vzeroupper
inc r8
cmp byte [rax + r8], dil
jne 0x180041242
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x20]
call fcn.18000a1e0
lea rcx, [rbp + 0x20]
call fcn.180097560
jmp 0x180040e51
xchg dword [0x180172fdc], edi
mov r9d, 0x10
lea r8, [0x1801541a0]
lea rdx, str.Failed_to_initialize_min_hook__terminating_the_thread.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FreeLibraryAndExitThread]