Function at 0x1400a54c0
Capabilities:
Create process on windows

Disassembly:
sub rsp, 0x3a8
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
je 0x1400a5fc1
movss xmm0, dword [0x1402fb210]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x278]
call fcn.14005ca30
mov rdx, rax
mov ecx, reloc.WS2_32.dll_setsockopt
call fcn.1400e5ed0
movss xmm0, dword [0x1402fb214]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x288]
call fcn.14005ca30
mov rdx, rax
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.1400e5ed0
movss xmm0, dword [0x1402fb218]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x298]
call fcn.14005ca30
mov rdx, rax
mov ecx, reloc.WS2_32.dll_socket
call fcn.1400e5ed0
movss xmm2, dword [0x14022c764]
movss xmm1, dword [0x14022c764]
lea rcx, [rsp + 0x1d0]
call fcn.14005c9f0
mov qword [rsp + 0x40], rax
cvtsi2ss xmm0, dword [0x140665f74]
mulss xmm0, dword [0x14022c764]
cvtsi2ss xmm1, dword [0x140665f98]
mulss xmm1, dword [0x14022c764]
movaps xmm2, xmm0
lea rcx, [rsp + 0x1d8]
call fcn.14005c9f0
mov qword [rsp + 0x48], rax
mov r8, qword [rsp + 0x40]
mov edx, 2
mov rcx, qword [rsp + 0x48]
call fcn.1400eb0e0
movss xmm2, dword [0x1402fb308]
movss xmm1, dword [0x1402fb350]
lea rcx, [rsp + 0x1e0]
call fcn.14005c9f0
xor edx, edx
mov rcx, rax
call fcn.1400eb170
mov r8d, 0xab
xor edx, edx
lea rcx, str.Active
call fcn.1400ce6f0
movzx eax, al
test eax, eax
je 0x1400a5fc1
xor edx, edx
lea rcx, str.Login_Menu
call fcn.140125c20
movzx eax, al
test eax, eax
je 0x1400a5fbc
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x50]
call fcn.14005c9f0
lea rcx, [rsp + 0x50]
call fcn.1400ea800
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x2a8]
call fcn.14005ca30
mov qword [rsp + 0x58], rax
movss xmm0, dword [0x14022c768]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14022c768]
movss xmm2, dword [0x14022c768]
movss xmm1, dword [0x14022c768]
lea rcx, [rsp + 0x2b8]
call fcn.14005ca30
mov qword [rsp + 0x60], rax
movss xmm2, dword [0x14022c768]
movss xmm1, dword [0x14022c768]
lea rcx, [rsp + 0x1e8]
call fcn.14005c9f0
mov qword [rsp + 0x68], rax
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x1f0]
call fcn.14005c9f0
mov qword [rsp + 0x70], rax
movss xmm2, dword [0x1402fb304]
movss xmm1, dword [0x1402fb350]
lea rcx, [rsp + 0x1f8]
call fcn.14005c9f0
mov qword [rsp + 0x78], rax
mov rax, qword [0x140660288]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x68]
mov r8, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
call fcn.140131500
movss xmm2, dword [0x14025e31c]
movss xmm1, dword [0x1402fb314]
lea rcx, [rsp + 0x88]
call fcn.14005c9f0
lea rcx, [rsp + 0x88]
call fcn.1400ea800
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x2c8]
call fcn.14005ca30
mov qword [rsp + 0x90], rax
movss xmm0, dword [0x14022c768]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14022c768]
movss xmm2, dword [0x14022c768]
movss xmm1, dword [0x14022c768]
lea rcx, [rsp + 0x2d8]
call fcn.14005ca30
mov qword [rsp + 0x98], rax
movss xmm2, dword [0x14022c768]
movss xmm1, dword [0x14022c768]
lea rcx, [rsp + 0x200]
call fcn.14005c9f0
mov qword [rsp + 0xa0], rax
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x208]
call fcn.14005c9f0
mov qword [rsp + 0xa8], rax
movss xmm2, dword [0x1402fb2ec]
movss xmm1, dword [0x1402fb2d8]
lea rcx, [rsp + 0x210]
call fcn.14005c9f0
mov qword [rsp + 0xb0], rax
mov rax, qword [0x140660290]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xa0]
mov r8, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xb8]
call fcn.140131500
movss xmm2, dword [0x1402fb294]
movss xmm1, dword [0x1402fb280]
lea rcx, [rsp + 0xc0]
call fcn.14005c9f0
lea rcx, [rsp + 0xc0]
call fcn.1400ea800
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x2e8]
call fcn.14005ca30
mov qword [rsp + 0xc8], rax
movss xmm0, dword [0x14022c768]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14022c768]
movss xmm2, dword [0x14022c768]
movss xmm1, dword [0x14022c768]
lea rcx, [rsp + 0x2f8]
call fcn.14005ca30
mov qword [rsp + 0xd0], rax
movss xmm2, dword [0x14022c768]
movss xmm1, dword [0x14022c768]
lea rcx, [rsp + 0x218]
call fcn.14005c9f0
mov qword [rsp + 0xd8], rax
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x220]
call fcn.14005c9f0
mov qword [rsp + 0xe0], rax
movss xmm2, dword [0x1402fb28c]
movss xmm1, dword [0x1402fb2e4]
lea rcx, [rsp + 0x228]
call fcn.14005c9f0
mov qword [rsp + 0xe8], rax
mov rax, qword [0x140660268]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xd8]
mov r8, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0xf0]
call fcn.140131500
movss xmm2, dword [0x14025e328]
movss xmm1, dword [0x1402fb288]
lea rcx, [rsp + 0xf8]
call fcn.14005c9f0
lea rcx, [rsp + 0xf8]
call fcn.1400ea800
movss xmm0, dword [0x1402fb2d8]
call fcn.1400eb040
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, reloc.WS2_32.dll_recv
mov r8d, 0x80
lea rdx, [0x140660810]
lea rcx, str.Key
call fcn.140131ed0
movss xmm2, dword [0x1402fb2c0]
movss xmm1, dword [0x1402fb2a0]
lea rcx, [rsp + 0x100]
call fcn.14005c9f0
lea rcx, [rsp + 0x100]
call fcn.1400ea800
movss xmm2, dword [0x1402fb26c]
movss xmm1, dword [0x14022c784]
lea rcx, [rsp + 0x108]
call fcn.14005c9f0
lea rdx, [rsp + 0x108]
lea rcx, str.___Login
call fcn.140126850
movzx eax, al
test eax, eax
je 0x1400a5a91
call fcn.1400b4d30
movss xmm2, dword [0x1402fb2f4]
movss xmm1, dword [0x1402fb280]
lea rcx, [rsp + 0x110]
call fcn.14005c9f0
lea rcx, [rsp + 0x110]
call fcn.1400ea800
movss xmm0, dword [0x14022c768]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14022c768]
movss xmm2, dword [0x14022c768]
movss xmm1, dword [0x14022c768]
lea rcx, [rsp + 0x308]
call fcn.14005ca30
mov qword [rsp + 0x118], rax
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x318]
call fcn.14005ca30
mov qword [rsp + 0x120], rax
movss xmm2, dword [0x14022c768]
movss xmm1, dword [0x14022c768]
lea rcx, [rsp + 0x230]
call fcn.14005c9f0
mov qword [rsp + 0x128], rax
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x238]
call fcn.14005c9f0
mov qword [rsp + 0x130], rax
movss xmm2, dword [0x1402fb258]
movss xmm1, dword [0x1402fb258]
lea rcx, [rsp + 0x240]
call fcn.14005c9f0
mov qword [rsp + 0x138], rax
mov rax, qword [0x140660270]
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xffffffff
mov r9, qword [rsp + 0x128]
mov r8, qword [rsp + 0x130]
mov rdx, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x140]
call fcn.1401317e0
movzx eax, al
test eax, eax
je 0x1400a5c09
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x1402c6988]
lea rdx, [0x1402c69a8]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movss xmm1, dword [0x14025e33c]
movss xmm0, dword [0x1402fb290]
call fcn.1400e9660
movss xmm0, dword [0x14022c768]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14022c768]
movss xmm2, dword [0x14022c768]
movss xmm1, dword [0x14022c768]
lea rcx, [rsp + 0x328]
call fcn.14005ca30
mov qword [rsp + 0x148], rax
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x338]
call fcn.14005ca30
mov qword [rsp + 0x150], rax
movss xmm2, dword [0x14022c768]
movss xmm1, dword [0x14022c768]
lea rcx, [rsp + 0x248]
call fcn.14005c9f0
mov qword [rsp + 0x158], rax
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x250]
call fcn.14005c9f0
mov qword [rsp + 0x160], rax
movss xmm2, dword [0x1402fb258]
movss xmm1, dword [0x1402fb258]
lea rcx, [rsp + 0x258]
call fcn.14005c9f0
mov qword [rsp + 0x168], rax
mov rax, qword [0x140660278]
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xffffffff
mov r9, qword [rsp + 0x158]
mov r8, qword [rsp + 0x160]
mov rdx, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x170]
call fcn.1401317e0
movzx eax, al
test eax, eax
je 0x1400a5d6c
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x1402c69b0]
lea rdx, [0x1402c69c4]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movss xmm1, dword [0x14025e33c]
movss xmm0, dword [0x14022c784]
call fcn.1400e9660
movss xmm0, dword [0x14022c768]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14022c768]
movss xmm2, dword [0x14022c768]
movss xmm1, dword [0x14022c768]
lea rcx, [rsp + 0x348]
call fcn.14005ca30
mov qword [rsp + 0x178], rax
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x358]
call fcn.14005ca30
mov qword [rsp + 0x180], rax
movss xmm2, dword [0x14022c768]
movss xmm1, dword [0x14022c768]
lea rcx, [rsp + 0x260]
call fcn.14005c9f0
mov qword [rsp + 0x188], rax
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x268]
call fcn.14005c9f0
mov qword [rsp + 0x190], rax
movss xmm2, dword [0x1402fb258]
movss xmm1, dword [0x1402fb258]
lea rcx, [rsp + 0x270]
call fcn.14005c9f0
mov qword [rsp + 0x198], rax
mov rax, qword [0x140660280]
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xffffffff
mov r9, qword [rsp + 0x188]
mov r8, qword [rsp + 0x190]
mov rdx, qword [rsp + 0x198]
mov rcx, qword [rsp + 0x1a0]
call fcn.1401317e0
movzx eax, al
test eax, eax
je 0x1400a5ecf
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x1402c69d0]
lea rdx, [0x1402c69f0]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 3
call fcn.1400e5830
lea rdx, [0x1402c6742]
lea rcx, [0x140663830]
call fcn.140022c20
movzx eax, al
test eax, eax
jne 0x1400a5fb7
lea rax, [rsp + 0x378]
mov qword [rsp + 0x1a8], rax
lea rdx, [0x140663830]
mov rcx, qword [rsp + 0x1a8]
call fcn.140012380
mov qword [rsp + 0x1b0], rax
mov rcx, qword [rsp + 0x1b0]
call fcn.1400b3e30
addss xmm0, dword [0x14025e310]
movss xmm2, dword [0x1402fb2d8]
movaps xmm1, xmm0
lea rcx, [rsp + 0x1b8]
call fcn.14005c9f0
lea rcx, [rsp + 0x1b8]
call fcn.1400ea800
lea rcx, [0x140663830]
call fcn.140019640
mov qword [rsp + 0x1c0], rax
movss xmm0, dword [0x14022c768]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
movss xmm1, dword [0x1402fb224]
lea rcx, [rsp + 0x368]
call fcn.14005ca30
mov qword [rsp + 0x1c8], rax
mov rdx, qword [rsp + 0x1c0]
mov rcx, qword [rsp + 0x1c8]
call fcn.14013e140
call fcn.14012fe80
call fcn.1400d64a0
add rsp, 0x3a8
ret