Function at 0x140001290
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x140006040]
xor rax, rsp
mov qword [rbp + 0x2f], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
xor r14d, r14d
mov qword [rbp - 0x41], r14
mov qword [rbp - 0x39], 0xf
mov byte [rbp - 0x51], r14b
lea rdx, str.Enter_your_password:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001970
lea rdx, [rbp - 0x51]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140001b80
lea rcx, [rbp - 0x51]
mov r15, qword [rbp - 0x51]
mov r13, qword [rbp - 0x39]
cmp r13, 0xf
cmova rcx, r15
mov r8, qword [rbp - 0x41]
cmp r8, 0xf
jne 0x1400016d3
lea rdx, str.h0Okn3wJzw3Xn1Q
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400016d3
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001970
mov rcx, rax
lea rdx, str.Valid_password__n
call fcn.140001970
mov rcx, rax
lea rdx, str.e_0m
call fcn.140001970
mov rcx, rax
lea rdx, [0x140001b40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140003554]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.HotKey_TO_START_SCAN:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001970
mov rcx, rax
lea rdx, str.e_34m
call fcn.140001970
mov rcx, rax
lea rdx, str.ALT__X
call fcn.140001970
mov rcx, rax
lea rdx, str.e_0m
call fcn.140001970
mov rcx, rax
lea rdx, [0x140001b40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.HotKey_TO_PAUSE_SCRIPT:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001970
mov rcx, rax
lea rdx, str.e_34m
call fcn.140001970
mov rcx, rax
lea rdx, str.ALT__Q
call fcn.140001970
mov rcx, rax
lea rdx, str.e_0m
call fcn.140001970
mov rcx, rax
lea rdx, [0x140001b40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001970
mov rcx, rax
lea rdx, [0x140001b40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r12d, 0x58
mov r9d, r12d
mov edx, 1
xor ecx, ecx
mov r8d, edx
call qword [sym.imp.USER32.dll_RegisterHotKey]
test eax, eax
jne 0x140001476
lea rdx, str.Failed_to_register_hotkey
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
jmp 0x1400016ff
mov edx, 2
xor ecx, ecx
lea r9d, [rdx + 0x4f]
lea r8d, [rdx - 1]
call qword [sym.imp.USER32.dll_RegisterHotKey]
test eax, eax
jne 0x1400014a2
lea rdx, str.Failed_to_register_exit_hotkey
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
jmp 0x1400016ff
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
movups xmmword [rbp - 0x21], xmm0
movups xmmword [rbp - 0x11], xmm0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x31]
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x1400016b7
cmp dword [rbp - 0x29], 0x312
jne 0x1400014b1
mov rax, qword [rbp - 0x21]
cmp rax, 1
jne 0x1400016ad
lea rdx, str.STALCRAFT
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rsi, rax
test rax, rax
je 0x1400014b1
nop dword [rax]
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetForegroundWindow]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x79], xmm0
movups xmmword [rbp - 0x69], xmm0
mov qword [rbp - 0x59], rax
mov dword [rbp - 0x79], 1
mov word [rbp - 0x71], r12w
lea r8d, [rax + 0x28]
lea rdx, [rbp - 0x79]
lea ecx, [rax + 1]
call qword [sym.imp.USER32.dll_SendInput]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x79], xmm0
movups xmmword [rbp - 0x69], xmm0
mov qword [rbp - 0x59], rax
mov dword [rbp - 0x79], 1
mov word [rbp - 0x71], r12w
mov dword [rbp - 0x6d], 2
lea r8d, [rax + 0x28]
lea rdx, [rbp - 0x79]
lea ecx, [rax + 1]
call qword [sym.imp.USER32.dll_SendInput]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov rbx, rax
mov edx, 0x2b2
mov r8d, 0x199
mov rcx, rax
call qword [sym.imp.GDI32.dll_GetPixel]
mov edi, eax
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
movzx eax, di
shr eax, 8
mov ecx, edi
shr ecx, 0x10
movzx edx, cl
movzx ecx, dil
cmp eax, ecx
jbe 0x1400015bd
cmp eax, edx
ja 0x1400015fc
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 1]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140001500
cmp dword [rbp + 7], 0x312
jne 0x140001500
cmp qword [rbp + 0xf], 2
jne 0x140001500
jmp 0x1400014b1
mov edx, 0x318
mov ecx, 0x544
call qword [sym.imp.USER32.dll_SetCursorPos]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 4]
call qword [sym.imp.USER32.dll_mouse_event]
inc dword [0x140006778]
lea rdx, [0x1400034f0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001970
mov rcx, rax
lea rdx, str.e_32m
call fcn.140001970
mov rcx, rax
mov edx, dword [0x140006778]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, str.e_0m
call fcn.140001970
mov rcx, rax
lea rdx, [0x1400034d0]
call fcn.140001970
mov rcx, rax
lea rdx, [0x140001b40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400014b1
cmp rax, 2
jne 0x1400014b1
mov edx, 1
xor ecx, ecx
call qword [sym.imp.USER32.dll_UnregisterHotKey]
mov edx, 2
xor ecx, ecx
call qword [sym.imp.USER32.dll_UnregisterHotKey]
jmp 0x14000171a
lea rdx, str.e_31m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140001970
mov rcx, rax
lea rdx, str.Invalid_password
call fcn.140001970
mov rcx, rax
lea rdx, str.e_0m
call fcn.140001970
lea rdx, [0x140001b40]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r14d, 1
cmp r13, 0xf
jbe 0x140001754
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x14000174c
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000174c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.140001fbc
mov eax, r14d
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140001f60
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret