Function at 0x1400402d0
Capabilities:
Get geographical location
Get keyboard layout

Disassembly:
push rbp
push rsi
sub rsp, 0x58
mov rsi, qword [0x1401c6ae0]
mov rbp, rcx
test rsi, rsi
jne 0x140040307
mov r8d, 0x10ae
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rsi, qword [0x1401c6ae0]
cmp qword [rsi + 0x90], 0
je 0x14004032b
mov r8d, Ordinal_143
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLL_backendsimgui_impl_win32.cpp
lea rcx, str.io.BackendPlatformUserData__nullptr___Already_initialized_a_platform_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rcx, [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x1400404ff
lea rcx, [rsp + 0x88]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x1400404ff
mov qword [rsp + 0x70], rbx
mov ecx, 0x50
mov qword [rsp + 0x50], rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [0x1401c6ae0]
mov rdi, rax
test rcx, rcx
je 0x140040381
inc dword [rcx + 0xf0]
xor ebx, ebx
test rax, rax
je 0x1400403a0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
jmp 0x1400403a3
mov rdi, rbx
or dword [rsi + 0xc], 6
lea rax, str.imgui_impl_win32
mov qword [rsi + 0x80], rax
mov qword [rsi + 0x90], rdi
mov qword [rdi], rbp
mov rax, qword [rsp + 0x80]
mov qword [rdi + 0x20], rax
mov rax, qword [rsp + 0x88]
mov qword [rdi + 0x18], rax
mov dword [rdi + 0x28], 9
test rcx, rcx
je 0x1400403ec
mov rsi, qword [rcx + 0x90]
jmp 0x1400403ef
mov rsi, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
shr rax, 0x10
mov r9d, 4
movzx ecx, ax
lea r8, [rsi + 0x2c]
mov edx, 0x20001004
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
test eax, eax
jne 0x14004041a
mov dword [rsi + 0x2c], ebx
mov rsi, qword [0x1401c6ae0]
cmp dword [rsi + 0x48f8], ebx
jg 0x140040443
mov r8d, 0x732
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsi + 0x4900]
mov rcx, qword [rax]
lea rax, str.xinput1_4.dll
mov qword [rsp + 0x28], rax
lea rax, str.xinput1_3.dll
mov qword [rsp + 0x30], rax
lea rax, str.xinput9_1_0.dll
mov qword [rsp + 0x38], rax
lea rax, str.xinput1_2.dll
mov qword [rsp + 0x40], rax
lea rax, str.xinput1_1.dll
mov qword [rcx + 0x28], rbp
mov qword [rsp + 0x48], rax
mov byte [rdi + 0x31], 1
mov rcx, qword [rsp + rbx*8 + 0x28]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x1400404c0
inc rbx
cmp rbx, 5
jl 0x140040491
mov rdi, qword [rsp + 0x50]
mov al, 1
mov rbx, qword [rsp + 0x70]
add rsp, 0x58
pop rsi
pop rbp
ret
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x38], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, rsi
mov qword [rdi + 0x40], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, qword [rsp + 0x70]
mov qword [rdi + 0x48], rax
mov al, 1
mov rdi, qword [rsp + 0x50]
add rsp, 0x58
pop rsi
pop rbp
ret
xor al, al
add rsp, 0x58
pop rsi
pop rbp
ret