Function at 0x140003ad0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1d8]
sub rsp, 0x2b0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140075040]
xor rax, rsp
mov qword [rbp + 0x108], rax
mov rbx, rcx
mov qword [rsp + 0x70], rcx
xor edi, edi
mov r15d, edi
mov dword [rsp + 0x68], edi
lea rcx, [rbp + 8]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov dword [rsp + 0x40], 0x626f523e
mov dword [rsp + 0x44], 0x786f6c
lea rdx, [rsp + 0x41]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
lea rdx, [rbp + 8]
call qword [sym.imp.USER32.dll_ScreenToClient]
movd xmm0, dword [rbp + 8]
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x68], xmm0
movd xmm0, dword [rbp + 0xc]
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x70], xmm0
mov rax, qword [0x140101d98]
mov qword [rbp - 8], rax
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 8]
call fcn.14000d6b0
nop
mov r12, qword [rbp + 0xb0]
mov r13, qword [rbp + 0xb8]
mov rsi, qword [rsp + 0x70]
mov r14, qword [rsp + 0x70]
cmp r12, r13
je 0x14000429e
mov rax, qword [rbp - 8]
add rax, 0x118
mov qword [rbp - 0x60], rax
mov rbx, qword [r12]
mov qword [rbp - 8], rdi
mov dword [rbp + 0x31], edi
mov word [rbp + 0x35], di
mov byte [rbp + 0x37], 0
mov dword [rbp + 0x10], 0x85b3e12
mov qword [rbp + 0x18], rax
lea rax, [rbp - 8]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], 8
mov eax, dword [0x140101cc8]
mov dword [rbp + 0x14], eax
mov byte [rbp + 0x30], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, 0x28
lea r8, [rbp + 0x10]
mov edx, 0x2201c4
mov rcx, qword [0x140101cc0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rdi, qword [rbp - 8]
cmp rdi, rbx
je 0x14000427f
add rbx, 0x2a0
xor eax, eax
mov qword [rbp + 0x50], rax
mov dword [rbp + 0x81], eax
mov word [rbp + 0x85], ax
mov byte [rbp + 0x87], al
mov dword [rbp + 0x60], 0x85b3e12
mov qword [rbp + 0x68], rbx
lea rax, [rbp + 0x50]
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], 8
mov eax, dword [0x140101cc8]
mov dword [rbp + 0x64], eax
mov byte [rbp + 0x80], 0
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, 0x28
lea r8, [rbp + 0x60]
mov edx, 0x2201c4
mov rcx, qword [0x140101cc0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp + 0x50]
mov qword [rbp - 8], rax
test rax, rax
je 0x14000427f
mov dword [rsp + 0x58], 0x6d75487d
mov dword [rsp + 0x5c], 0x696f6e61
mov word [rsp + 0x60], 0x64
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
lea rax, [rsp + 0x59]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], bl
jne 0x140003d27
lea rdx, [rsp + 0x59]
lea rcx, [rbp - 0x50]
call fcn.140002b50
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 8]
call fcn.14000d940
cmp qword [rbp - 0x68], rbx
je 0x14000427f
xor eax, eax
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x50], eax
add rdi, 0x160
mov qword [rbp + 0x58], rbx
mov dword [rbp + 0xa9], ebx
mov word [rbp + 0xad], bx
mov byte [rbp + 0xaf], al
mov dword [rbp + 0x88], 0x85b3e12
mov qword [rbp + 0x90], rdi
lea rax, [rbp + 0x58]
mov qword [rbp + 0x98], rax
mov qword [rbp + 0xa0], 8
mov eax, dword [0x140101cc8]
mov dword [rbp + 0x8c], eax
mov byte [rbp + 0xa8], bl
xor edi, edi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, 0x28
lea r8, [rbp + 0x88]
mov edx, 0x2201c4
mov rcx, qword [0x140101cc0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ebx, r15d
and ebx, 1
mov rcx, qword [rbp + 0x58]
test rcx, rcx
jne 0x140003e1c
test ebx, ebx
jne 0x140003e72
movss xmm12, dword [rsp + 0x50]
movss xmm11, dword [rsp + 0x4c]
movss xmm10, dword [rsp + 0x48]
jmp 0x140003e97
xor eax, eax
mov qword [rsp + 0x78], rax
mov dword [rbp - 0x80], eax
add rcx, 0x140
mov r8d, 0xc
lea rdx, [rsp + 0x78]
call fcn.14000b580
movss xmm10, dword [rsp + 0x78]
movss dword [rsp + 0x48], xmm10
movss xmm11, dword [rsp + 0x7c]
movss dword [rsp + 0x4c], xmm11
movss xmm12, dword [rbp - 0x80]
movss dword [rsp + 0x50], xmm12
mov qword [rsp + 0x78], rdi
mov dword [rbp - 0x80], edi
test ebx, ebx
je 0x140003e97
xorps xmm12, xmm12
xorps xmm11, xmm11
xorps xmm10, xmm10
movss dword [rsp + 0x50], xmm12
movss dword [rsp + 0x4c], xmm11
movss dword [rsp + 0x48], xmm10
and r15d, 0xfffffffe
mov dword [rsp + 0x40], 0x61654865
mov word [rsp + 0x44], 0x64
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], rdi
lea rax, [rsp + 0x41]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140003ec1
lea rdx, [rsp + 0x41]
lea rcx, [rbp - 0x30]
call fcn.140002b50
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 8]
call fcn.14000d940
mov rbx, qword [rax]
test rbx, rbx
jne 0x140003f08
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x50], 0
jmp 0x140004281
lea rax, [rbx + 0x160]
mov qword [rbp], rdi
mov dword [rbp + 0x31], edi
mov word [rbp + 0x35], di
mov byte [rbp + 0x37], 0
mov dword [rbp + 0x10], 0x85b3e12
mov qword [rbp + 0x18], rax
lea rax, [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], 8
mov eax, dword [0x140101cc8]
mov dword [rbp + 0x14], eax
mov byte [rbp + 0x30], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, 0x28
lea r8, [rbp + 0x10]
mov edx, 0x2201c4
mov rcx, qword [0x140101cc0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov edi, r15d
and edi, 2
mov rcx, qword [rbp]
test rcx, rcx
jne 0x140003f8a
test edi, edi
je 0x140003fd2
jmp 0x140003fce
xor eax, eax
mov qword [rbp - 0x7c], rax
mov dword [rbp - 0x74], eax
add rcx, 0x140
mov r8d, 0xc
lea rdx, [rbp - 0x7c]
call fcn.14000b580
movss xmm13, dword [rbp - 0x7c]
movss xmm15, dword [rbp - 0x78]
movss xmm14, dword [rbp - 0x74]
mov qword [rbp - 0x7c], 0
mov dword [rbp - 0x74], 0
test edi, edi
je 0x140003fde
and r15d, 0xfffffffd
xorps xmm14, xmm14
xorps xmm15, xmm15
xorps xmm13, xmm13
mov rcx, qword [0x140101d80]
add rcx, 0x4d0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
mov r8d, 0x40
lea rdx, [rbp + 0x10]
call fcn.14000b580
movups xmm6, xmmword [rbp + 0x10]
movups xmm7, xmmword [rbp + 0x20]
movups xmm0, xmmword [rbp + 0x30]
movups xmmword [rbp + 0xe8], xmm0
movups xmm8, xmmword [rbp + 0x40]
mov rax, qword [0x140101d80]
add rax, 0x740
xor ecx, ecx
mov qword [rbp], rcx
xor edi, edi
mov dword [rbp + 0xe9], edi
mov word [rbp + 0xed], di
mov byte [rbp + 0xef], cl
mov dword [rbp + 0xc8], 0x85b3e12
mov qword [rbp + 0xd0], rax
lea rax, [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xe0], 8
mov eax, dword [0x140101cc8]
mov dword [rbp + 0xcc], eax
mov byte [rbp + 0xe8], cl
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, 0x28
lea r8, [rbp + 0xc8]
mov edx, 0x2201c4
mov rcx, qword [0x140101cc0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movaps xmm9, xmm6
shufps xmm9, xmm6, 0x55
mulss xmm9, xmm15
movaps xmm0, xmm6
mulss xmm0, xmm13
addss xmm9, xmm0
movaps xmm1, xmm6
shufps xmm1, xmm6, 0xaa
mulss xmm1, xmm14
addss xmm9, xmm1
shufps xmm6, xmm6, 0xff
addss xmm9, xmm6
movaps xmm3, xmm7
shufps xmm3, xmm7, 0x55
mulss xmm3, xmm15
movaps xmm0, xmm7
mulss xmm0, xmm13
addss xmm3, xmm0
movaps xmm1, xmm7
shufps xmm1, xmm7, 0xaa
mulss xmm1, xmm14
addss xmm3, xmm1
shufps xmm7, xmm7, 0xff
addss xmm3, xmm7
movaps xmm4, xmm15
movaps xmm0, xmm8
shufps xmm0, xmm8, 0x55
mulss xmm4, xmm0
movaps xmm1, xmm13
mulss xmm1, xmm8
addss xmm4, xmm1
movaps xmm2, xmm14
movaps xmm0, xmm8
shufps xmm0, xmm8, 0xaa
mulss xmm2, xmm0
addss xmm4, xmm2
shufps xmm8, xmm8, 0xff
addss xmm4, xmm8
movss xmm0, dword [0x14006a868]
comiss xmm0, xmm4
jbe 0x140004179
movss xmm0, dword [0x14006aaac]
movaps xmm9, xmm0
movaps xmm6, xmm0
jmp 0x1400041bc
movss xmm8, dword [0x14006a900]
movaps xmm0, xmm8
divss xmm0, xmm4
mulss xmm9, xmm0
mulss xmm3, xmm0
addss xmm9, xmm8
mulss xmm9, dword [0x14006a8c4]
mulss xmm9, dword [rbp]
movaps xmm6, xmm8
subss xmm6, xmm3
mulss xmm6, dword [0x14006a8c4]
mulss xmm6, dword [rbp + 4]
subss xmm10, xmm13
subss xmm11, xmm15
subss xmm12, xmm14
movss xmm8, dword [0x14006a938]
movaps xmm1, xmm8
movaps xmm0, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm7, xmm0
movaps xmm1, xmm8
movaps xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm7, xmm0
movaps xmm1, xmm8
movaps xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm7, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm7
ja 0x140004217
xorps xmm0, xmm0
sqrtss xmm0, xmm7
jmp 0x14000421f
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, dword [0x14006aa84]
ja 0x140003ef2
subss xmm6, dword [rbp - 0x70]
subss xmm9, dword [rsp + 0x68]
mulss xmm9, xmm9
mulss xmm6, xmm6
addss xmm9, xmm6
xorps xmm0, xmm0
ucomiss xmm0, xmm9
ja 0x140004259
xorps xmm0, xmm0
sqrtss xmm0, xmm9
jmp 0x140004262
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm1, dword [0x14006aa14]
comiss xmm1, xmm0
jbe 0x140003ef2
mov rsi, rbx
mov r14, qword [rbp - 8]
jmp 0x140003ef2
xor edi, edi
add r12, 8
cmp r12, r13
mov rax, qword [rbp - 0x60]
jne 0x140003bf1
mov r12, qword [rbp + 0xb0]
mov rbx, qword [rsp + 0x70]
test r12, r12
je 0x1400042e2
mov rdx, qword [rbp + 0xc0]
sub rdx, r12
and rdx, 0xfffffffffffffff8
mov rax, r12
cmp rdx, 0x1000
jb 0x1400042da
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400042da
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.140057274
mov qword [rbx], r14
mov qword [rbx + 8], rsi
mov rax, rbx
mov rcx, qword [rbp + 0x108]
xor rcx, rsp
call fcn.1400570f0
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret