Function at 0x140008df0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1d8]
sub rsp, 0x2b0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1401a90c0]
xor rax, rsp
mov qword [rbp + 0x100], rax
mov r14, rcx
mov qword [rsp + 0x70], rcx
xor ecx, ecx
mov r15d, ecx
mov dword [rsp + 0x68], ecx
lea rcx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov dword [rsp + 0x40], 0x626f5261
mov dword [rsp + 0x44], 0x786f6c
lea rdx, [rsp + 0x41]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
lea rdx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_ScreenToClient]
movd xmm0, dword [rbp + 0x60]
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x68], xmm0
movd xmm0, dword [rbp + 0x64]
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x7c], xmm0
mov rax, qword [0x1402e35e0]
mov qword [rbp + 0x58], rax
mov r12d, 0x7fffffff
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], rax
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x58]
call fcn.140015770
nop
mov rsi, qword [rbp + 0xa8]
mov rax, qword [rbp + 0xb0]
mov qword [rbp - 0x50], rax
mov rbx, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x70]
cmp rsi, rax
je 0x140009493
movdqa xmm15, xmmword [0x14018bf00]
movss xmm13, dword [0x14018bcd4]
movss xmm12, dword [0x14018bafc]
movss xmm14, dword [0x14018babc]
mov rax, qword [rsi]
test rax, rax
je 0x140009479
add rax, 0x298
xor r14d, r14d
mov qword [rbp + 0x50], r14
mov dword [rbp + 0x89], r14d
mov word [rbp + 0x8d], r14w
mov byte [rbp + 0x8f], r14b
mov dword [rbp + 0x68], 0x85b3e12
mov qword [rbp + 0x70], rax
lea rax, [rbp + 0x50]
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x80], 8
mov eax, dword [0x1402e350c]
mov dword [rbp + 0x6c], eax
mov byte [rbp + 0x88], r14b
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9d, Ordinal_41
lea r8, [rbp + 0x68]
mov edx, 0x2201c4
mov rcx, qword [0x1402e3510]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x140009479
mov rax, qword [0x1402e35d8]
cmp qword [rsi], rax
je 0x140009479
mov dword [rsp + 0x48], 0x6d754868
mov dword [rsp + 0x4c], 0x696f6e61
mov word [rsp + 0x50], 0x64
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r14
lea rax, [rsp + 0x49]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r14b
jne 0x140009024
lea rdx, [rsp + 0x49]
lea rcx, [rbp - 0x48]
call fcn.1400068a0
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x50]
call fcn.140015a00
cmp qword [rbp - 0x58], r14
je 0x140009479
mov ecx, dword [0x1402e3600]
test ecx, ecx
je 0x140009117
sub ecx, 1
je 0x1400090c3
cmp ecx, 1
jne 0x140009479
movdqu xmmword [rbp - 0x70], xmm15
mov word [rbp - 0x60], reloc.WS2_32.dll_WSACleanup
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], r14
lea rax, [rbp - 0x6f]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r14b
jne 0x1400090a0
lea rdx, [rbp - 0x6f]
lea rcx, [rbp - 0x28]
call fcn.1400068a0
lea r8, [rbp - 0x28]
lea rdx, [rbp + 0x38]
jmp 0x140009160
mov dword [rsp + 0x58], 0x70705542
mov dword [rsp + 0x5c], 0x6f547265
mov dword [rsp + 0x60], 0x6f7372
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], r14
lea rax, [rsp + 0x59]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r14b
jne 0x1400090f6
lea rdx, [rsp + 0x59]
lea rcx, [rbp - 8]
call fcn.1400068a0
lea r8, [rbp - 8]
lea rdx, [rbp + 0x40]
jmp 0x140009160
mov dword [rsp + 0x40], 0x61654843
mov word [rsp + 0x44], 0x64
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r14
mov qword [rbp + 0x30], r14
lea rax, [rsp + 0x41]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r14b
jne 0x140009141
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x18]
call fcn.1400068a0
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x50]
call fcn.140015a00
mov r13, qword [rax]
lea rax, [r13 + 0x158]
mov qword [rbp + 0x58], r14
mov dword [rbp + 0x89], r14d
mov word [rbp + 0x8d], r14w
mov byte [rbp + 0x8f], r14b
mov dword [rbp + 0x68], 0x85b3e12
mov qword [rbp + 0x70], rax
lea rax, [rbp + 0x58]
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x80], 8
mov eax, dword [0x1402e350c]
mov dword [rbp + 0x6c], eax
mov byte [rbp + 0x88], r14b
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9d, Ordinal_41
lea r8, [rbp + 0x68]
mov edx, 0x2201c4
mov rcx, qword [0x1402e3510]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r14d, r15d
and r14d, 1
mov rcx, qword [rbp + 0x58]
test rcx, rcx
jne 0x140009202
test r14d, r14d
je 0x140009250
jmp 0x14000924c
xor eax, eax
mov qword [rsp + 0x78], rax
mov dword [rbp - 0x80], eax
add rcx, 0x140
mov r8d, recv
lea rdx, [rsp + 0x78]
call fcn.140013600
movss xmm10, dword [rsp + 0x78]
movss xmm9, dword [rsp + 0x7c]
movss xmm11, dword [rbp - 0x80]
mov qword [rsp + 0x78], 0
mov dword [rbp - 0x80], 0
test r14d, r14d
je 0x14000925c
and r15d, 0xfffffffe
xorps xmm11, xmm11
xorps xmm9, xmm9
xorps xmm10, xmm10
mov rcx, qword [0x1402e35e8]
add rcx, 0x4e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
movups xmmword [rbp + 0x78], xmm0
movups xmmword [rbp + 0x88], xmm0
movups xmmword [rbp + 0x98], xmm0
mov r8d, 0x40
lea rdx, [rbp + 0x68]
call fcn.140013600
movups xmm6, xmmword [rbp + 0x68]
movups xmm7, xmmword [rbp + 0x78]
movups xmm0, xmmword [rbp + 0x88]
movups xmmword [rbp + 0xe0], xmm0
movups xmm8, xmmword [rbp + 0x98]
mov rax, qword [0x1402e35e8]
add rax, 0x750
xor ecx, ecx
mov qword [rbp + 0x58], rcx
mov dword [rbp + 0xe1], ecx
mov word [rbp + 0xe5], cx
mov byte [rbp + 0xe7], cl
mov dword [rbp + 0xc0], 0x85b3e12
mov qword [rbp + 0xc8], rax
lea rax, [rbp + 0x58]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xd8], 8
mov eax, dword [0x1402e350c]
mov dword [rbp + 0xc4], eax
mov byte [rbp + 0xe0], cl
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rcx
mov r9d, Ordinal_41
lea r8, [rbp + 0xc0]
mov edx, 0x2201c4
mov rcx, qword [0x1402e3510]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movaps xmm2, xmm6
shufps xmm2, xmm6, 0x55
mulss xmm2, xmm9
movaps xmm0, xmm6
mulss xmm0, xmm10
addss xmm2, xmm0
movaps xmm1, xmm6
shufps xmm1, xmm6, 0xaa
mulss xmm1, xmm11
addss xmm2, xmm1
shufps xmm6, xmm6, 0xff
addss xmm2, xmm6
movaps xmm3, xmm7
shufps xmm3, xmm7, 0x55
mulss xmm3, xmm9
movaps xmm0, xmm7
mulss xmm0, xmm10
addss xmm3, xmm0
movaps xmm1, xmm7
shufps xmm1, xmm7, 0xaa
mulss xmm1, xmm11
addss xmm3, xmm1
shufps xmm7, xmm7, 0xff
addss xmm3, xmm7
movaps xmm4, xmm8
shufps xmm4, xmm8, 0x55
mulss xmm4, xmm9
movaps xmm0, xmm8
mulss xmm0, xmm10
addss xmm4, xmm0
movaps xmm1, xmm8
shufps xmm1, xmm8, 0xaa
mulss xmm1, xmm11
addss xmm4, xmm1
shufps xmm8, xmm8, 0xff
addss xmm4, xmm8
movss xmm0, dword [0x14018ba18]
comiss xmm0, xmm4
jbe 0x1400093ef
movaps xmm2, xmm13
movaps xmm0, xmm13
jmp 0x140009420
movaps xmm0, xmm12
divss xmm0, xmm4
mulss xmm2, xmm0
mulss xmm3, xmm0
addss xmm2, xmm12
mulss xmm2, xmm14
mulss xmm2, dword [rbp + 0x58]
movaps xmm0, xmm12
subss xmm0, xmm3
mulss xmm0, xmm14
mulss xmm0, dword [rbp + 0x5c]
subss xmm0, dword [rbp - 0x7c]
subss xmm2, dword [rsp + 0x68]
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x140009448
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x140009450
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movd xmm1, dword [0x14026eb4c]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x140009479
movd xmm1, r12d
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x140009479
mov rbx, r13
mov rdi, qword [rbp + 0x50]
cvttss2si r12d, xmm0
add rsi, 8
cmp rsi, qword [rbp - 0x50]
jne 0x140008f44
mov rsi, qword [rbp + 0xa8]
mov r14, qword [rsp + 0x70]
mov qword [r14], rdi
mov qword [r14 + 8], rbx
test rsi, rsi
je 0x1400094dd
mov rdx, qword [rbp + 0xb8]
sub rdx, rsi
and rdx, 0xfffffffffffffff8
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400094d5
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400094d5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.140148954
mov rax, r14
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.140148580
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret