Function at 0x140001f50
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
xor ecx, ecx
call fcn.140034fd0
mov rcx, qword [0x1400ea430]
test rcx, rcx
jne 0x140001fb3
mov r8d, 0x997
lea rdx, str.C:UsersgilbeDesktopImGui_Keyauth_Login_mainImGui_login_using_KeyAuthimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x1400ea430]
lea r15, [rcx + 0x1638]
mov dword [r15 + 0x2c], 0x3c23d70a
mov dword [r15 + 0x14], 0x43960000
mov dword [r15 + 0x18], 0x43960000
mov dword [r15 + 0x1c], 0x3f000000
mov dword [r15 + 0x20], 0x3f000000
mov byte [r15 + 0xba], 1
xor r13d, r13d
mov dword [r15 + 0xc], r13d
mov dword [r15 + 0x28], 0x40000000
mov dword [r15 + 0x40], r13d
mov qword [r15 + 0x70], 0x3f666666
mov dword [r15 + 0x84], r13d
mov dword [r15 + 0x7c], r13d
movaps xmm0, xmmword [0x1400d83f0]
movups xmmword [r15 + 0x164], xmm0
movaps xmm1, xmmword [0x1400d8440]
movups xmmword [r15 + 0x174], xmm1
movaps xmm0, xmm1
movups xmmword [r15 + 0x184], xmm1
movaps xmm1, xmmword [0x1400d8430]
movups xmmword [r15 + 0xe4], xmm1
movaps xmm0, xmmword [0x1400d8480]
movups xmmword [r15 + 0x1e4], xmm0
movups xmmword [r15 + 0xf4], xmm1
movaps xmm0, xmm1
movups xmmword [r15 + 0x114], xmm1
movaps xmm1, xmmword [0x1400d8420]
movups xmmword [r15 + 0x134], xmm1
movaps xmm0, xmmword [0x1400d83c0]
movups xmmword [r15 + 0x154], xmm0
movaps xmm1, xmm0
movups xmmword [r15 + 0x144], xmm0
movaps xmm0, xmmword [0x1400d8480]
movups xmmword [r15 + 0x244], xmm0
movaps xmm1, xmmword [0x1400d83d0]
movups xmmword [r15 + 0x264], xmm1
movaps xmm0, xmm1
movups xmmword [r15 + 0x254], xmm1
movaps xmm1, xmmword [0x1400d8450]
movups xmmword [r15 + 0x2a4], xmm1
movaps xmm0, xmm1
movups xmmword [r15 + 0x2c4], xmm1
movups xmmword [r15 + 0x2b4], xmm1
movaps xmm0, xmmword [0x1400d8460]
movups xmmword [r15 + 0x214], xmm0
movaps xmm1, xmmword [0x1400d8470]
movups xmmword [r15 + 0x234], xmm1
movaps xmm0, xmmword [0x1400d83b0]
movups xmmword [r15 + 0x224], xmm0
movaps xmm1, xmmword [0x1400d8480]
movups xmmword [r15 + 0x1f4], xmm1
movaps xmm0, xmm1
movups xmmword [r15 + 0x204], xmm1
test rcx, rcx
jne 0x14000214b
mov r8d, 0xda0
lea rdx, str.C:UsersgilbeDesktopImGui_Keyauth_Login_mainImGui_login_using_KeyAuthimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x1400ea430]
cmp byte [reloc.WS2_32.dll_accept], r13b
je 0x14000325d
xorps xmm2, xmm2
movss xmm0, dword [0x1400e9100]
movss xmm1, dword [0x1400e9104]
mov eax, dword [rcx + 0x1dc0]
or eax, 1
mov dword [rcx + 0x1dc0], eax
unpcklps xmm0, xmm1
movsd qword [rcx + 0x1dd4], xmm0
xorps xmm1, xmm1
unpcklps xmm1, xmm2
movsd qword [rcx + 0x1ddc], xmm1
mov dword [rcx + 0x1dc4], 2
mov byte [rcx + 0x1dfc], 1
movss xmm0, dword [0x1400e9108]
movss xmm1, dword [0x1400e910c]
movss dword [rcx + 0x1de4], xmm0
movss dword [rcx + 0x1de8], xmm1
mov dword [rcx + 0x1dc8], 1
or eax, 0x42
mov dword [rcx + 0x1dc0], eax
mov dword [rcx + 0x1e20], 0x3f800000
lea r12, str.username
lea r14, str.password
mov rbx, 0xffffffffffffffff
movabs rsi, 0x7fffffffffffffff
movss xmm9, dword [0x1400d812c]
movss xmm7, dword [0x1400d8158]
cmp byte [reloc.WS2_32.dll_accept], r13b
je 0x140002710
mov r8d, Ordinal_301
lea rdx, [0x1400e9310]
lea rcx, str.HYPEX
call fcn.140010e80
mov rcx, qword [0x1400ea430]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400d8128]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm9
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov qword [rbp + 0x67], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
lea rax, [rbp + 0x67]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
mov r8, r12
xor edx, edx
lea rcx, [0x1400ca380]
call fcn.14004a7a0
mov rcx, qword [0x1400ea430]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400d8138]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm9
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov qword [rbp + 0x67], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x8000
lea rax, [rbp + 0x67]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
mov r8, r14
xor edx, edx
lea rcx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14004a7a0
mov rcx, qword [0x1400ea430]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400d8164]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400d815c]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov qword [rbp + 0x6f], r13
mov dword [rbp + 0x67], 0x929d96b4
mov word [rbp + 0x6b], __WSAFDIsSet
mov byte [rbp + 0x6d], 1
mov rcx, r13
nop dword [rax]
lea eax, [rcx - 8]
xor byte [rbp + rcx + 0x67], al
inc rcx
cmp rcx, 5
jb 0x140002430
mov byte [rbp + 0x6d], r13b
lea rdx, [rbp + 0x6f]
lea rcx, [rbp + 0x67]
call fcn.140045cc0
test al, al
je 0x14000266b
lea rax, [rbp - 0x79]
mov qword [rbp + 0x6f], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x69], r13
mov qword [rbp - 0x61], r13
mov rdi, rbx
inc rdi
cmp byte [r14 + rdi], r13b
jne 0x140002473
cmp rdi, rsi
ja 0x1400032b0
cmp rdi, 0xf
ja 0x1400024b0
mov qword [rbp - 0x69], rdi
mov qword [rbp - 0x61], reloc.WS2_32.dll_ntohs
mov r8, rdi
mov rdx, r14
lea rcx, [rbp - 0x79]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi - 0x79], r13b
jmp 0x140002554
mov r14, rdi
or r14, 0xf
cmp r14, rsi
jbe 0x1400024e9
mov r14, rsi
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400b79b0
test rax, rax
je 0x140002512
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x14000252b
cmp r14, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb r14, rax
lea rcx, [r14 + 1]
cmp rcx, 0x1000
jb 0x140002519
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003292
jmp 0x1400024cd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140002528
call fcn.1400b79b0
mov r12, rax
jmp 0x14000252b
mov r12, r13
mov qword [rbp - 0x79], r12
mov qword [rbp - 0x69], rdi
mov qword [rbp - 0x61], r14
mov r8, rdi
lea rdx, str.password
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [r12 + rdi], r13b
lea r12, str.username
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], r13
mov qword [rbp - 0x41], r13
mov rdi, rbx
inc rdi
cmp byte [r12 + rdi], 0
jne 0x140002566
cmp rdi, rsi
ja 0x1400032b6
cmp rdi, 0xf
ja 0x1400025a4
mov qword [rbp - 0x49], rdi
mov qword [rbp - 0x41], reloc.WS2_32.dll_ntohs
mov r8, rdi
mov rdx, r12
lea rcx, [rbp - 0x59]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi - 0x59], 0
jmp 0x140002649
mov r14, rdi
or r14, 0xf
cmp r14, rsi
jbe 0x1400025dd
mov r14, rsi
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400b79b0
test rax, rax
je 0x140002606
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x14000261f
cmp r14, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb r14, rax
lea rcx, [r14 + 1]
cmp rcx, 0x1000
jb 0x14000260d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003298
jmp 0x1400025c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000261c
call fcn.1400b79b0
mov r12, rax
jmp 0x14000261f
mov r12, r13
mov qword [rbp - 0x59], r12
mov qword [rbp - 0x49], rdi
mov qword [rbp - 0x41], r14
mov r8, rdi
lea rdx, str.username
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [r12 + rdi], 0
lea r12, str.username
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x59]
call fcn.140053d20
lea r14, str.password
test al, al
je 0x14000266b
mov dword [reloc.WS2_32.dll_accept], 0x100
mov rcx, qword [0x1400ea430]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400d816c]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov qword [rbp + 0x67], 0
lea rdx, [rbp + 0x67]
lea rcx, str.register
call fcn.140045cc0
test al, al
je 0x14000270b
mov dword [reloc.WS2_32.dll_accept], 0x1000000
call fcn.1400140d0
movss xmm8, dword [0x1400d80bc]
movss xmm6, dword [0x1400d8170]
cmp byte [0x1400e9612], 0
je 0x140002e39
mov r8d, Ordinal_301
lea rdx, [0x1400e9310]
lea rcx, str.HYPEX
call fcn.140010e80
mov rcx, qword [0x1400ea430]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400d8128]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm9
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov qword [rbp + 0x67], 0
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
lea rax, [rbp + 0x67]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
mov r8, r12
xor edx, edx
lea rcx, [0x1400ca380]
call fcn.14004a7a0
mov rcx, qword [0x1400ea430]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400d8138]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm9
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov qword [rbp + 0x67], 0
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x8000
lea rax, [rbp + 0x67]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
mov r8, r14
xor edx, edx
lea rcx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14004a7a0
mov rcx, qword [0x1400ea430]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400d813c]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm9
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov qword [rbp + 0x67], 0
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
lea rax, [rbp + 0x67]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r12, [0x1400e950f]
mov r8, r12
xor edx, edx
lea rcx, [0x1400ca3fc]
call fcn.14004a7a0
mov rcx, qword [0x1400ea430]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400d8164]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm7
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov qword [rbp + 0x67], 0
lea rdx, [rbp + 0x67]
lea rcx, str.register
call fcn.140045cc0
test al, al
je 0x140002d5b
lea rax, [rbp - 0x59]
mov qword [rbp + 0x67], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], r13
mov qword [rbp - 0x41], r13
mov rdi, rbx
nop dword [rax + rax]
inc rdi
cmp byte [r12 + rdi], 0
jne 0x140002a20
cmp rdi, rsi
ja 0x1400032bc
cmp rdi, 0xf
ja 0x140002a5e
mov qword [rbp - 0x49], rdi
mov qword [rbp - 0x41], reloc.WS2_32.dll_ntohs
mov r8, rdi
mov rdx, r12
lea rcx, [rbp - 0x59]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi - 0x59], 0
jmp 0x140002b03
mov r14, rdi
or r14, 0xf
cmp r14, rsi
jbe 0x140002a97
mov r14, rsi
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400b79b0
test rax, rax
je 0x140002ac0
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x140002ad9
cmp r14, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb r14, rax
lea rcx, [r14 + 1]
cmp rcx, 0x1000
jb 0x140002ac7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000329e
jmp 0x140002a7b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140002ad6
call fcn.1400b79b0
mov r12, rax
jmp 0x140002ad9
mov r12, r13
mov qword [rbp - 0x59], r12
mov qword [rbp - 0x49], rdi
mov qword [rbp - 0x41], r14
mov r8, rdi
lea rdx, [0x1400e950f]
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [r12 + rdi], 0
lea r14, str.password
lea rax, [rbp - 0x79]
mov qword [rbp + 0x6f], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x69], r13
mov qword [rbp - 0x61], r13
mov rdi, rbx
nop dword [rax]
inc rdi
cmp byte [r14 + rdi], 0
jne 0x140002b20
cmp rdi, rsi
ja 0x1400032c2
cmp rdi, 0xf
ja 0x140002b5e
mov qword [rbp - 0x69], rdi
mov qword [rbp - 0x61], reloc.WS2_32.dll_ntohs
mov r8, rdi
mov rdx, r14
lea rcx, [rbp - 0x79]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi - 0x79], 0
jmp 0x140002bfc
mov r14, rdi
or r14, 0xf
cmp r14, rsi
jbe 0x140002b97
mov r14, rsi
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400b79b0
test rax, rax
je 0x140002bc0
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x140002bd9
cmp r14, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb r14, rax
lea rcx, [r14 + 1]
cmp rcx, 0x1000
jb 0x140002bc7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400032a4
jmp 0x140002b7b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140002bd6
call fcn.1400b79b0
mov r12, rax
jmp 0x140002bd9
mov r12, r13
mov qword [rbp - 0x79], r12
mov qword [rbp - 0x69], rdi
mov qword [rbp - 0x61], r14
mov r8, rdi
lea rdx, str.password
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [r12 + rdi], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], r13
mov qword [rbp - 0x21], r13
lea r14, str.username
inc rbx
cmp byte [r14 + rbx], 0
jne 0x140002c12
cmp rbx, rsi
ja 0x14000328c
cmp rbx, 0xf
ja 0x140002c50
mov qword [rbp - 0x29], rbx
mov qword [rbp - 0x21], reloc.WS2_32.dll_ntohs
mov r8, rbx
mov rdx, r14
lea rcx, [rbp - 0x39]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx - 0x39], 0
jmp 0x140002ce8
mov rax, rbx
or rax, 0xf
cmp rax, rsi
jbe 0x140002c85
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400b79b0
test rax, rax
je 0x140002cb1
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002cca
mov rsi, rax
cmp rax, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x140002cb8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400032aa
jmp 0x140002c6a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140002cc7
call fcn.1400b79b0
mov rdi, rax
jmp 0x140002cca
mov rdi, r13
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x29], rbx
mov qword [rbp - 0x21], rsi
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
lea r8, [rbp - 0x59]
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x39]
call fcn.140053ef0
test al, al
je 0x140002d5b
mov rax, qword [reloc.WS2_32.dll_ntohs]
cmp rax, 0x18
jb 0x140002d43
lea rbx, [0x1400e9638]
cmp rax, 0xf
cmova rbx, qword [0x1400e9638]
mov qword [0x1400e9648], 0x18
mov r8d, Ordinal_27
lea rdx, str.Successfully_registered_
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x18], 0
jmp 0x140002d5b
lea r9, str.Successfully_registered_
mov edx, Ordinal_27
lea rcx, [0x1400e9638]
call fcn.140003990
lea rdx, [0x1400e9638]
lea rcx, [rbp - 0x39]
call fcn.140003610
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm6
movaps xmm2, xmm6
movaps xmm1, xmm6
mov rcx, rax
call fcn.140054230
mov rcx, qword [0x1400ea430]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400d8140]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, dword [0x1400d816c]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
mov qword [rbp + 0x67], 0
lea rdx, [rbp + 0x67]
lea rcx, str.return_to_login
call fcn.140045cc0
test al, al
je 0x140002e34
mov word [0x1400e9610], 0
mov byte [0x1400e9612], 0
mov byte [reloc.WS2_32.dll_accept], 1
call fcn.1400140d0
movss xmm7, dword [0x1400d81a4]
cmp byte [0x1400e9610], 0
je 0x140003061
mov r8d, Ordinal_301
lea rdx, [0x1400e9310]
lea rcx, str.HYPEX
call fcn.140010e80
mov rcx, qword [0x1400ea430]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x140002ea7
mov qword [rbp + 0x67], 0
movaps xmm1, xmm7
lea rcx, [rbp + 0x67]
call fcn.140015b70
mov rcx, qword [0x1400ea430]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x140002ed9
mov qword [rbp + 0x67], 0
movaps xmm1, xmm7
lea rcx, [rbp + 0x67]
call fcn.140015b70
movaps xmm0, xmmword [0x1400d8400]
movups xmmword [r15 + 0xc4], xmm0
lea rcx, str.BE:_Undetected
call fcn.1400453a0
movaps xmm0, xmmword [0x1400d8410]
movups xmmword [r15 + 0xc4], xmm0
lea rcx, str.EAC:_Risky
call fcn.1400453a0
movaps xmm0, xmmword [0x1400d8480]
movups xmmword [r15 + 0xc4], xmm0
mov rcx, qword [0x1400ea430]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400d8150]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, dword [0x1400d8168]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
mov qword [rbp + 0x67], 0
lea rdx, [rbp + 0x67]
lea rcx, str.Inject_Cheat
call fcn.140045cc0
test al, al
je 0x140002fbd
call fcn.140001b80
mov rcx, qword [0x1400ea430]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400d8154]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, dword [0x1400d8160]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
mov qword [rbp + 0x67], 0
lea rdx, [rbp + 0x67]
lea rcx, str.Load_Driver
call fcn.140045cc0
test al, al
je 0x14000305c
call fcn.140001660
call fcn.1400140d0
cmp byte [0x1400e9611], 0
je 0x14000325d
mov r8d, Ordinal_301
lea rdx, [0x1400e9310]
lea rcx, str.HYPEX
call fcn.140010e80
lea r8, [0x1400ea5e0]
lea rdx, str.username:
lea rcx, [rbp - 0x39]
call fcn.140054770
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm6
movaps xmm2, xmm6
movaps xmm1, xmm6
mov rcx, rax
call fcn.140054230
lea r8, [0x1400ea600]
lea rdx, str.ip:
lea rcx, [rbp - 0x39]
call fcn.140054770
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm6
movaps xmm2, xmm6
movaps xmm1, xmm6
mov rcx, rax
call fcn.140054230
lea r8, [0x1400ea620]
lea rdx, str.hwid:
lea rcx, [rbp - 0x59]
call fcn.140054770
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm6
movaps xmm2, xmm6
movaps xmm1, xmm6
mov rcx, rax
call fcn.140054230
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], 5
mov qword [rbp - 0x21], reloc.WS2_32.dll_ntohs
mov eax, dword [0x1400ca46c]
mov dword [rbp - 0x39], eax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_32]
mov byte [rbp - 0x35], al
mov byte [rbp - 0x34], 0
mov rbx, qword [0x1400ea430]
mov rax, qword [rbx + 0x1d18]
movss xmm6, dword [rax + 0x58]
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
lea rax, [rbp - 0x39]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm7
movss xmm3, dword [0x1400d8194]
movss xmm2, dword [rbx + 0x1a80]
lea rdx, [rbp + 0x67]
mov rcx, qword [rbx + 0x1a78]
call fcn.14003df00
movss xmm0, dword [rbp + 0x67]
addss xmm0, dword [0x1400d80b4]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
subss xmm6, xmm1
mulss xmm6, dword [0x1400d8078]
addss xmm2, xmm6
movss dword [rax + 0x118], xmm2
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
mov rdx, qword [rbp - 0x21]
cmp rdx, 0xf
jbe 0x140003232
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000322d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000322d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b7c2c
mov qword [rbp + 0x67], 0
lea rdx, [rbp + 0x67]
lea rcx, str.back
call fcn.140045cc0
test al, al
je 0x140003258
mov dword [reloc.WS2_32.dll_accept], 0x100
call fcn.1400140d0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x58]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400014f0
nop
call fcn.140001450
nop
call fcn.140001450
nop
call fcn.140001450
nop
call fcn.140001450
nop
call fcn.140001450
nop
call fcn.1400014f0
nop
call fcn.1400014f0
nop
call fcn.1400014f0
nop
call fcn.1400014f0
int3