Function at 0x10001290
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xac
mov eax, dword [0x1006a00c]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x1006a018], 1
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push esi
push edi
jne 0x10001656
mov esi, dword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
call esi
call esi
push 0
push 0x989680
push edx
push eax
call fcn.10056010
mov dword [ebp - 0xa8], eax
mov ecx, 0x1005741c
mov eax, dword [0x10070674]
mov dword [ebp - 0xa4], edx
mov edx, 0x1006a018
push 0x2b
or dword [eax + 0x3fec], 3
mov dword [eax + 0x4010], 0x43aa0000
mov dword [eax + 0x4014], 0x41f00000
mov dword [eax + 0x3ff4], 1
mov dword [eax + 0x4000], 0x3f800000
mov dword [eax + 0x4004], 0x3f800000
mov dword [eax + 0x4008], 0
mov dword [eax + 0x400c], 0
mov dword [eax + 0x3ff0], 1
mov byte [eax + 0x4028], 1
call fcn.1000f0f0
add esp, 4
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__ctime64]
movaps xmm0, xmmword [0x10066c80]
add esp, 4
movups xmmword [ebp - 0x9c], xmm0
push eax
lea eax, [ebp - 0x9c]
push str.__PRESS___F5___TO_HIDE___SHOW__s
push eax
call fcn.10041ac0
add esp, 0xc
call fcn.10012370
mov eax, dword [0x10070674]
cmp dword [eax + 0x40d8], 0
jg 0x100013b7
push 0x74d
push str.D:MyFilesDLLDLL_WITH_HWID_demetImGui_StandaloneImGuiimgui.h
push str.i___0__i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x10070674]
add esp, 0xc
or dword [eax + 0x3fec], 2
mov dword [eax + 0x4010], 0x43960000
mov dword [eax + 0x4014], 0x43af0000
mov dword [eax + 0x3ff4], 1
movsd xmm0, qword [eax + 0x3e98]
push dword [eax + 0x3ea0]
mulsd xmm0, qword [0x10066890]
cvttsd2si eax, xmm0
and eax, 3
movsx eax, byte [eax + 0x10057474]
push eax
lea eax, [ebp - 0x88]
push str._c__dAnimatedTitle
push eax
call fcn.100010c0
push 0x2b
mov edx, 0x1006a018
lea ecx, [ebp - 0x88]
call fcn.1000f0f0
add esp, 0x14
mov edx, 0x10070697
mov ecx, str.AUTO_POTION_Q
call fcn.10043310
mov edx, 0x10070694
mov ecx, str.TARGET_FIX
call fcn.10043310
mov edx, 0x10070695
mov ecx, str.REMOVE_FOG
call fcn.10043310
mov edx, 0x10070696
mov ecx, str.WALL_HACK
call fcn.10043310
mov ecx, dword [0x10070674]
movss xmm0, dword [0x10066954]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x100014bd
movaps xmm1, xmm0
mov dword [ebp - 0x94], 0
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x90], 0
call fcn.10014760
mov ecx, dword [0x10070674]
movss xmm0, dword [0x10066954]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x100014fb
movaps xmm1, xmm0
mov dword [ebp - 0x94], 0
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x90], 0
call fcn.10014760
sub esp, 0x10
call fcn.10044870
mov eax, dword [0x10070690]
add esp, 0x10
cmp eax, 3
ja case.default.0x10001510
jmp dword [eax*4 + 0x10001b18]
mov dword [0x10070148], 0x40000000
jmp 0x10001545
mov dword [0x10070148], 0x41200000
jmp 0x10001545
mov dword [0x10070148], 0x42200000
jmp 0x10001545
mov dword [0x10070148], 0x42700000
push 0
push 4
push 0x10070148
push 0xc
push dword [0x1007068c]
call ebx
push ecx
push str._.3f
lea eax, [ebp - 0x90]
mov dword [ebp - 0x8c], 0
push eax
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x90], 0x40800000
push eax
push 0x1007069c
mov edx, 8
mov ecx, 0x100574d4
call fcn.100453b0
add esp, 0x10
mov dword [ebp - 0x8c], 0x43480000
lea eax, [ebp - 0x90]
mov dword [ebp - 0x90], 0x43c80000
mov edx, 8
mov ecx, str.DRONE
push str._.3f
push eax
lea eax, [ebp - 0x8c]
push eax
push 0x10070140
call fcn.100453b0
add esp, 0x10
mov dword [ebp - 0x90], 0x3e8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x8c], 0
mov edx, 4
mov ecx, str.AUTO_SP_W
push 0x100574e0
push eax
lea eax, [ebp - 0x8c]
push eax
push 0x100706a0
call fcn.100453b0
add esp, 0x10
mov dword [ebp - 0x90], 0x3e8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x8c], 0
mov edx, 4
mov ecx, str.AUTO_MP_E
push 0x100574e0
push eax
lea eax, [ebp - 0x8c]
push eax
push 0x10070698
call fcn.100453b0
add esp, 0x14
call fcn.10012370
push 0x74
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x10001670
cmp byte [0x1006a018], 0
sete byte [0x1006a018]
cmp byte [0x10070697], 0
lea eax, [ebp - 0x8c]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 1
push 0x9c302e
je 0x1000169a
call edi
mov byte [0x9c302e], 1
jmp 0x100016a3
call edi
mov byte [0x9c302e], 2
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x8c]
push 1
push 0x9c302e
call edi
cmp byte [0x10070694], 0
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x4ff5b2
je 0x100016dd
call edi
mov byte [0x4ff5b2], 0
jmp 0x100016e6
call edi
mov byte [0x4ff5b2], 6
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x8c]
push 1
push 0x4ff5b2
call edi
cmp byte [0x10070696], 0
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x64c7f8
je 0x100017b4
call edi
lea eax, [ebp - 0x8c]
mov byte [0x64c7f8], 0xeb
push eax
push dword [ebp - 0x8c]
push 1
push 0x64c7f8
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x64c843
call edi
lea eax, [ebp - 0x8c]
mov byte [0x64c843], 0xeb
push eax
push dword [ebp - 0x8c]
push 1
push 0x64c843
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x64c993
call edi
lea eax, [ebp - 0x8c]
mov byte [0x64c993], 0xeb
push eax
push dword [ebp - 0x8c]
push 1
push 0x64c993
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x64c9f7
call edi
mov byte [0x64c9f7], 0xeb
jmp 0x1000184a
call edi
lea eax, [ebp - 0x8c]
mov byte [0x64c7f8], 0x74
push eax
push dword [ebp - 0x8c]
push 1
push 0x64c7f8
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x64c843
call edi
lea eax, [ebp - 0x8c]
mov byte [0x64c843], 0x74
push eax
push dword [ebp - 0x8c]
push 1
push 0x64c843
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x64c993
call edi
lea eax, [ebp - 0x8c]
mov byte [0x64c993], 0x74
push eax
push dword [ebp - 0x8c]
push 1
push 0x64c993
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x64c9f7
call edi
mov byte [0x64c9f7], 0x74
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x8c]
push 1
push 0x64c9f7
call edi
cmp byte [0x10070695], 0
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 4
push 0x38f93c0
je 0x100018c6
call edi
lea eax, [ebp - 0x8c]
mov dword [0x38f93c0], 0x461c3c00
push eax
push dword [ebp - 0x8c]
push 4
push 0x38f93c0
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 4
push 0x38f93e8
call edi
lea eax, [ebp - 0x8c]
mov dword [0x38f93e8], 0x461c3c00
push eax
push dword [ebp - 0x8c]
jmp 0x10001911
call edi
lea eax, [ebp - 0x8c]
mov dword [0x38f93c0], 0x442f0000
push eax
push dword [ebp - 0x8c]
push 4
push 0x38f93c0
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 4
push 0x38f93e8
call edi
lea eax, [ebp - 0x90]
mov dword [0x38f93e8], 0x451c4000
push eax
push dword [ebp - 0x90]
push 4
push 0x38f93e8
call edi
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 2
push 0x1007066c
push 0x11256ec
push dword [0x1007068c]
call esi
movzx eax, word [0x1007066c]
cmp eax, dword [0x10070698]
jge 0x10001974
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x38f86ce
call edi
lea eax, [ebp - 0x90]
mov byte [0x38f86ce], 3
push eax
push dword [ebp - 0x90]
push 1
push 0x38f86ce
call edi
push 0
push 2
push 0x10070664
push 0x11256f0
push dword [0x1007068c]
call esi
movzx eax, word [0x10070664]
cmp eax, dword [0x100706a0]
jge 0x100019c8
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x38f86cd
call edi
lea eax, [ebp - 0x90]
mov byte [0x38f86cd], 3
push eax
push dword [ebp - 0x90]
push 1
push 0x38f86cd
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0xa5c5ae
call edi
lea eax, [ebp - 0x90]
mov byte [0xa5c5ae], 0xeb
push eax
push dword [ebp - 0x90]
push 1
push 0xa5c5ae
call edi
push 0
push 4
push 0x10070140
push 0x38f8d48
push dword [0x1007068c]
call ebx
push 0
push 4
push 0x1007069c
push 0xc
push dword [0x1007068c]
call ebx
lea eax, [ebp - 0x90]
mov dword [0x10070668], 0x649322
push eax
push 0x40
push 6
push 0x64931c
call edi
mov eax, 0x64931c
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov eax, 0x10001260
sub eax, 0x649321
mov byte [0x64931c], 0xe9
mov dword [0x64931d], eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x90]
push 6
push 0x64931c
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 5
push 0x4225bb
call edi
mov esi, 0x10001280
mov dword [0x4225bc], 0x90909090
mov byte [0x4225bb], 0xe8
lea eax, [esi - 0x4225c0]
mov dword [0x4225bc], eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x90]
push 5
push 0x4225bb
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 5
push 0x4f176b
call edi
mov dword [0x4f176c], 0x90909090
lea eax, [ebp - 0x8c]
push eax
mov byte [0x4f176b], 0xe8
sub esi, 0x4f1770
mov dword [0x4f176c], esi
push dword [ebp - 0x90]
push 5
push 0x4f176b
call edi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.10054ea4
mov esp, ebp
pop ebp
ret