Function at 0x180006300
Capabilities:
Create thread
Encode data using xor
Link many functions at runtime

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0x100
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
mov rax, qword [0x1800593b0]
xor rax, rsp
mov qword [rbp + 0x17], rax
cmp edx, 1
jne 0x180006d47
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov ecx, 1
call fcn.180043860
mov qword [rbp - 0x19], rax
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x28], rcx
xor ebx, ebx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x180007d40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 7], rax
test rax, rax
je 0x180006d38
cmp dword [rbp + 0xf], ebx
jne 0x180006392
lea ecx, [rbx + 1]
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp - 0x29], xmm0
lea rcx, [rbp - 0x29]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x1800063b2
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp + 7], xmm0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rdi, rax
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rdi
lea r8, [0x18004d9d8]
lea rdx, str.CONOUT_
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
lea rax, [rbp - 0x79]
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], recv
mov r8d, listen
lea rdx, str.Dll_Injected
lea rcx, [rbp - 0x79]
call fcn.180007070
nop
mov qword [rbp - 0x59], rbx
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], recv
mov r8d, 6
lea rdx, str.Inject
lea rcx, [rbp - 0x59]
call fcn.180007070
nop
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x59]
call fcn.18003a940
lea rax, [rbp - 0x59]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x59], rbx
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], recv
mov r8d, 7
lea rdx, str.started
lea rcx, [rbp - 0x59]
call fcn.180007070
nop
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], recv
mov esi, 4
mov r8d, esi
lea rdx, str.Hook
lea rcx, [rbp - 0x79]
call fcn.180007070
nop
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x79]
call fcn.18003a940
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
mov qword [rbp - 0x11], rbx
mov dword [rbp - 9], ebx
lea rdx, str.CraftRise
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x180006500
lea rdx, str.Failed_to_get_window
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.180007220
lea rdx, [0x1800073f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rbp - 0x11]
jmp 0x18000654e
lea rdx, [rbp - 9]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rbp - 9]
test r8d, r8d
jne 0x18000653d
lea rdx, str.Failed_to_get_process_ID
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.180007220
lea rdx, [0x1800073f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8d, dword [rbp - 9]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp - 0x11], rax
test rax, rax
jne 0x18000655f
lea rdx, str.ERROR
jmp 0x180006cfa
lea rcx, [rbp - 0x11]
call fcn.18003b990
lea r8, [0x180059dc0]
mov edx, 1
lea rcx, [0x180059db0]
call qword [sym.imp.jvm.dll_JNI_GetCreatedJavaVMs]
test eax, eax
jne 0x180006cf3
cmp dword [0x180059dc0], eax
je 0x180006cf3
mov rcx, qword [0x180059db0]
mov rax, qword [rcx]
mov r9, qword [rax + 0x30]
mov r8d, 0x10006
lea rdx, [0x180059db8]
call r9
mov dword [0x180059d98], eax
cmp eax, 0xfffffffe
jne 0x1800065d9
mov rcx, qword [0x180059db0]
mov rax, qword [rcx]
mov r9, qword [rax + 0x20]
xor r8d, r8d
lea rdx, [0x180059db8]
call r9
call fcn.18003d7c0
test rax, rax
je 0x180006c80
lea rax, [rbp - 0x59]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x59], rbx
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], recv
mov r8d, recv
lea rdx, str.Minecraft_Found
lea rcx, [rbp - 0x59]
call fcn.180007070
nop
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], recv
mov r8d, 6
lea rdx, str.Inject
lea rcx, [rbp - 0x79]
call fcn.180007070
nop
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x79]
call fcn.18003a940
mov rcx, qword [0x180059db8]
mov rax, qword [rcx]
mov r8, qword [rax + 0x30]
lea rdx, str.com_craftrise_client_S
call r8
mov qword [0x18005a288], rax
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x108]
lea r9, str.__Lcom_craftrise_client_fa_
lea r8, [0x18004f2fc]
mov rdx, rax
call r10
mov rdi, rax
call fcn.18003d7c0
mov r8, rdi
mov rdx, rax
mov rcx, qword [0x180059db8]
call fcn.1800343c0
mov qword [rbp - 0x19], rax
movdqa xmm0, xmmword [0x1800501f0]
movdqu xmmword [rbp - 0x59], xmm0
movdqa xmm1, xmmword [0x180050200]
movdqu xmmword [rbp - 0x49], xmm1
mov dword [rbp - 0x39], 0x65a067de
mov dword [rbp - 0x35], 0x61a463a2
mov dword [rbp - 0x31], 0x6da86fa6
mov word [rbp - 0x2d], 0xaa
mov byte [rbp - 0x2b], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx - 0x61]
xor byte [rbp + rcx - 0x59], al
inc rcx
cmp rcx, 0x2d
jb 0x1800066f0
mov byte [rbp - 0x2b], 0
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], recv
mov byte [rbp - 0x79], 0
mov r8d, 0x2d
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x79]
call fcn.180007070
nop
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x19]
call fcn.18003d460
nop
mov rdx, qword [rbp - 0x61]
cmp rdx, 0x10
jb 0x180006778
inc rdx
mov rcx, qword [rbp - 0x79]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006773
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006773
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18004389c
lea rdx, str.CraftRise
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov r10, rax
test rax, rax
je 0x18000697d
movups xmm0, xmmword [str.cTEG]
movups xmmword [rbp - 0x79], xmm0
movsd xmm1, qword [0x18004dbb0]
movsd qword [rbp - 0x69], xmm1
mov ecx, dword [0x18004dbb8]
mov dword [rbp - 0x61], ecx
movzx ecx, word [0x18004dbbc]
mov word [rbp - 0x5d], cx
cmp byte [0x18004dbbd], 0
je 0x180006970
mov r8d, ebx
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x180006927
movdqa xmm5, xmmword [0x1800501c0]
movdqa xmm4, xmmword [0x1800504b0]
movd xmm6, esi
movdqa xmm7, xmmword [str.6666]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm0, xmmword [str.4444444444444444]
movdqa xmmword [rbp - 0x29], xmm0
lea rcx, [rbp - 0x79]
mov edx, dword [rbp - 0x29]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1800501e0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1800501e0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x180006820
cmp r8d, 0x1e
jge 0x180006970
movsxd rax, r8d
lea r9, [rbp - 0x79]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1e
jl 0x180006940
lea rdx, [rbp - 0x79]
mov rcx, r10
call qword [sym.imp.USER32.dll_SetWindowTextA]
cmp qword [0x18005a138], 0
jne 0x180006a43
mov ecx, 0x18
call fcn.180043860
mov rdi, rax
mov qword [rbp - 0x29], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbx
xor edx, edx
lea rcx, str.LWJGL
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [rdi], rax
test rax, rax
jne 0x1800069d6
xor edx, edx
lea rcx, str.GLFW30
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [rdi], rax
mov rcx, qword [rdi]
test rcx, rcx
je 0x180006a3c
lea r8, [0x18003a540]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x18005a568], rax
call fcn.18003fa40
lea rcx, str.opengl32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.wglSwapBuffers
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 8], rax
test rax, rax
je 0x180006a3c
lea r8, [rdi + 0x10]
lea rdx, [0x18003a5c0]
mov rcx, rax
call fcn.18003fb70
xor ecx, ecx
call fcn.180040050
mov qword [0x18005a138], rdi
lea rcx, str.opengl32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
lea rcx, str.OpenGL32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rdi, rax
test rsi, rsi
je 0x180006c1b
lea rdx, [0x18004da78]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180059de8], rax
test rax, rax
je 0x180006bda
call fcn.180001e60
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.1800024e0
lea rdx, [0x180002da0]
lea rcx, [0x180059de8]
call fcn.180002580
call fcn.180001f40
lea rdx, [0x18004da80]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180059de0], rax
lea rdx, [0x18004da90]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180059d90], rax
lea rdx, str.wglSwapBuffers
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180059dc8], rax
lea rdx, [0x18004da78]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180059e00], rax
lea rdx, str.glScalef
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180059da0], rax
lea rdx, str.glTranslatef
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180059d88], rax
call fcn.18003f7c0
call fcn.180001e60
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.1800024e0
lea rdx, [0x1800045b0]
lea rcx, [0x180059de0]
call fcn.180002580
lea rdx, [0x180004610]
lea rcx, [0x180059d90]
call fcn.180002580
lea rdx, [0x180004180]
lea rcx, [0x180059e00]
call fcn.180002580
lea rdx, [0x1800040f0]
lea rcx, [0x180059dc8]
call fcn.180002580
lea rdx, [0x180004430]
lea rcx, [0x180059d88]
call fcn.180002580
lea rdx, [0x180004500]
lea rcx, [0x180059da0]
call fcn.180002580
call fcn.180001f40
test eax, eax
sete bl
jmp 0x180006d17
lea rax, [rbp - 0x59]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x59], rbx
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], recv
mov r8d, 0x24
lea rdx, str.Failed_to_get_the_address_of_glOrtho
lea rcx, [rbp - 0x59]
call fcn.180007070
nop
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], recv
jmp 0x180006c5a
lea rax, [rbp - 0x59]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x59], rbx
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], recv
mov r8d, 0x28
lea rdx, str.Failed_to_get_the_handle_of_opengl32.dll
lea rcx, [rbp - 0x59]
call fcn.180007070
nop
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], recv
mov r8d, 5
lea rdx, str.Error
lea rcx, [rbp - 0x79]
call fcn.180007070
nop
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x79]
call fcn.18003a940
jmp 0x180006ca4
lea rdx, str.Minecraft_not_found
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.180007220
lea rdx, [0x1800073f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rcx, qword [rbp - 0x11]
test rcx, rcx
je 0x180006cb4
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
cmp dword [rbp + 0xf], 0
jne 0x180006d31
mov eax, 1
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.180043840
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop rbp
ret
lea rdx, str.VM_Bulunamadi
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.180007220
lea rdx, [0x1800073f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rcx, qword [rbp - 0x11]
test rcx, rcx
je 0x180006d27
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
cmp dword [rbp + 0xf], 0
je 0x180006de6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov dword [rbp + 0xf], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
test edx, edx
jne 0x180006cba
call fcn.180001e60
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.1800024e0
lea rdx, [0x1800045b0]
lea rcx, [0x180059de0]
call fcn.1800028f0
lea rdx, [0x180004610]
lea rcx, [0x180059d90]
call fcn.1800028f0
lea rdx, [0x180004180]
lea rcx, [0x180059e00]
call fcn.1800028f0
lea rdx, [0x1800040f0]
lea rcx, [0x180059dc8]
call fcn.1800028f0
lea rdx, [0x180004430]
lea rcx, [0x180059d88]
call fcn.1800028f0
lea rdx, [0x180004500]
lea rcx, [0x180059da0]
call fcn.1800028f0
call qword [sym.imp.KERNEL32.dll_FreeConsole]
call fcn.180001f40
xor ebx, ebx
test eax, eax
sete bl
mov eax, ebx
jmp 0x180006cbf