Function at 0x14004e1b0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
mov qword [r11 + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov rax, qword [0x1400df080]
xor rax, rsp
mov qword [rbp + 0x38], rax
movups xmm3, xmmword [0x1400ce1a8]
mov qword [0x1401b92e8], 0
xor eax, eax
xorps xmm0, xmm0
mov byte [0x1401b9340], al
movups xmmword [0x1401b9300], xmm0
mov dword [0x1401b9034], eax
xor edi, edi
movups xmmword [0x1401b9310], xmm0
mov qword [0x1401b9058], rax
mov rbx, rcx
movups xmmword [0x1401b9320], xmm0
mov dword [0x1401b9060], eax
movups xmmword [0x1401b9330], xmm0
mov byte [0x1401b9064], al
movups xmmword [0x1401b9048], xmm0
mov qword [0x1401b9038], 0
movdqa xmm0, xmm3
mov word [0x1401b92f0], 0
psrldq xmm0, 0xf
movd eax, xmm0
mov word [0x1401b9040], 0
mov byte [0x1401b92f2], 0
mov byte [0x1401b9042], 0
movups xmmword [rbp + 0x28], xmm3
test al, al
je 0x14004e47a
cmp dword [reloc.WS2_32.dll_accept], 2
mov r8d, edi
jl 0x14004e441
movdqa xmm5, xmmword [0x1400ce990]
movdqa xmm2, xmmword [0x1400ce4d0]
movdqa xmm4, xmmword [0x1400ce530]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
movd eax, xmm3
movdqa xmm3, xmmword [0x1400ce500]
movaps xmmword [r11 - 0x38], xmm6
movdqa xmm6, xmmword [str.4444]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
movaps xmmword [r11 - 0x48], xmm7
movdqa xmm7, xmmword [0x1400ce570]
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, eax
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
xorps xmm2, xmm0
movd dword [rbp + 0x28], xmm2
movdqa xmm2, xmmword [0x1400ce4f0]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
pmulld xmm0, xmm6
psubd xmm2, xmm0
punpckldq xmm1, xmm3
movd xmm0, dword [rbp + 0x2c]
andps xmm2, xmm4
pmuldq xmm1, xmm5
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
movd dword [rbp + 0x2c], xmm2
movdqa xmm2, xmmword [0x1400ce510]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm2
pmulld xmm0, xmm6
psubd xmm3, xmm0
punpckldq xmm1, xmm2
movd xmm0, dword [rbp + 0x30]
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
pmuldq xmm1, xmm5
paddb xmm3, xmm7
xorps xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
movd dword [rbp + 0x30], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
movaps xmm6, xmmword [r11 - 0x38]
psubd xmm2, xmm0
movd xmm0, dword [rbp + 0x34]
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
movaps xmm7, xmmword [r11 - 0x48]
xorps xmm2, xmm0
movd dword [rbp + 0x34], xmm2
jmp 0x14004e47a
lea r9, [rbp + 0x28]
nop word [rax + rax]
mov eax, 0x4ec4ec4f
lea r9, [r9 + 1]
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x35
xor byte [r9 - 1], al
cmp r8d, 0x10
jl 0x14004e450
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x28]
call fcn.1400524d0
lea rcx, [0x1401b9070]
call fcn.14005ea90
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edx, 0x65
mov rcx, rbx
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
lea rax, [0x14004ef30]
mov dword [rbp - 0x50], 0x50
mov ebx, 0x40
mov qword [rbp - 0x48], rax
xor ecx, ecx
mov dword [rbp - 0x4c], ebx
mov qword [rbp - 0x40], rdi
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov dword [rsp + 0x60], 0x340031
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm0
lea rcx, [rsp + 0x60]
movdqu xmmword [rbp - 0x20], xmm1
mov qword [rbp - 0x38], rax
mov dword [rsp + 0x64], 0x1006c
mov dword [rsp + 0x68], 0x130066
mov dword [rsp + 0x6c], 0x5a007a
mov dword [rsp + 0x70], 0x590038
mov dword [rsp + 0x74], 0x4f002a
mov dword [rsp + 0x78], 0xd006f
mov dword [rsp + 0x7c], 0x540074
mov dword [rbp - 0x80], 0x430006
mov dword [rbp - 0x7c], 0x470015
mov dword [rbp - 0x78], 0x400005
mov word [rbp - 0x74], di
call fcn.140051790
lea rcx, [rbp - 0x50]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdi
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov rax, qword [0x1401b94f8]
lea rcx, [rsp + 0x60]
xor r12d, r12d
mov dword [rsp + 0x60], 0x340031
mov dword [rsp + 0x64], 0x1006c
mov esi, 5
mov dword [rsp + 0x68], 0x130066
cvttss2si ebx, dword [rax + 0xc]
mov dword [rsp + 0x6c], 0x5a007a
mov dword [rsp + 0x70], 0x590038
mov dword [rsp + 0x74], 0x4f002a
mov dword [rsp + 0x78], 0xd006f
mov dword [rsp + 0x7c], 0x540074
mov dword [rbp - 0x80], 0x430006
mov dword [rbp - 0x7c], 0x470015
cvttss2si edi, dword [rax + 8]
mov dword [rbp - 0x78], 0x400005
mov word [rbp - 0x74], r12w
call fcn.140051790
mov rcx, qword [rbp - 0x38]
mov r9d, 0x80000000
mov rdx, qword [rbp - 0x10]
mov r8, rax
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], rcx
xor ecx, ecx
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r15, rax
mov qword [rsp + 0x74], r12
mov qword [rbp - 0x78], 2
mov qword [rbp - 0x60], 2
mov qword [rbp - 0x70], rax
lea rbx, [0x1401b9488]
mov qword [rsp + 0x58], rbx
lea rax, [rbp]
mov qword [rsp + 0x50], rax
lea r14, [0x1401b9480]
mov qword [rsp + 0x48], r14
lea rax, [rsp + 0x60]
mov edi, 1
mov qword [rsp + 0x60], r12
lea r13, [0x1401b9478]
mov dword [rsp + 0x70], Ordinal_32
mov qword [rsp + 0x40], r13
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], 7
lea rax, [rbp + 0x28]
mov dword [rsp + 0x28], 2
mov edx, edi
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x68], reloc.WLDAP32.dll_Ordinal_60
mov dword [rsp + 0x6c], edi
mov dword [rbp - 0x7c], reloc.WLDAP32.dll_Ordinal_32
mov qword [rsp + 0x7c], rdi
mov qword [rbp - 0x68], rdi
mov dword [rbp + 0x28], 0xb000
mov dword [rbp + 0x2c], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
cmp eax, 0x887a0004
jne 0x14004e72e
mov qword [rsp + 0x58], rbx
lea rax, [rbp]
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], r14
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], r13
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, esi
mov dword [rsp + 0x30], 7
lea rax, [rbp + 0x28]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x14004ead0
call fcn.14004eec0
movdqa xmm0, xmmword [0x1400ce450]
lea rdx, [rbp + 8]
mov rcx, r15
movdqu xmmword [rbp + 8], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xorps xmm0, xmm0
lea rdx, [rbp + 0x18]
mov rcx, r15
movups xmmword [rbp + 0x18], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, edi
mov ebx, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, qword [0x1401b94f8]
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
cvttss2si edx, dword [rcx + 0xc]
sub eax, edx
cdq
sub eax, edx
cvttss2si edx, dword [rcx + 8]
sar eax, 1
mov rcx, r15
mov r9d, eax
sub ebx, edx
mov eax, ebx
cdq
sub eax, edx
xor edx, edx
sar eax, 1
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowPos]
mov edx, 0xa
mov rcx, r15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r15
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rcx, r15
call fcn.14004eb20
xor bl, bl
nop dword [rax]
xor r9d, r9d
mov dword [rsp + 0x20], edi
xor r8d, r8d
lea rcx, [rsp + 0x60]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14004e844
nop dword [rax + rax]
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rsp + 0x68], 0x12
lea rcx, [rsp + 0x60]
movzx ebx, bl
cmove ebx, edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14004e800
test bl, bl
jne 0x14004e913
mov rax, qword [0x1401b9020]
test rax, rax
je 0x14004e859
mov rcx, qword [rax + 0xa0]
jmp 0x14004e85c
mov rcx, r12
cmp qword [rcx + 0x48], r12
jne 0x14004e867
call fcn.14003b870
call fcn.14003d220
call fcn.140009090
mov rcx, qword [0x1401b94f8]
cmp byte [rcx + 0x21a], r12b
jne 0x14004e88e
cmp byte [rcx + 0x19], r12b
je 0x14004e893
call fcn.14004f910
jmp 0x14004e893
call fcn.1400502a0
call fcn.14000b800
mov rcx, qword [0x1401b9488]
lea r8, [0x1401b9470]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x28], xmm0
mov edx, edi
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x1401b9488]
lea r8, [rbp + 0x28]
mov rdx, qword [0x1401b9470]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rax, qword [0x1401b9020]
mov rcx, qword [rax + 0x4a18]
mov rax, qword [rcx]
mov rcx, r12
add rax, 0xa8
cmp byte [rax], r12b
cmovne rcx, rax
call fcn.14003ae00
mov rcx, qword [0x1401b9478]
xor r8d, r8d
mov edx, edi
mov rax, qword [rcx]
call qword [rax + 0x40]
jmp 0x14004e7e0
mov rbx, qword [0x1401b9020]
test rbx, rbx
je 0x14004e928
mov r14, qword [rbx + 0xa0]
jmp 0x14004e92b
mov r14, r12
mov esi, r12d
cmp dword [rbx + 0x4a10], r12d
jle 0x14004e95e
mov rdi, r12
nop word [rax + rax]
mov rcx, qword [rbx + 0x4a18]
mov rcx, qword [rdi + rcx]
call fcn.14001efb0
inc esi
lea rdi, [rdi + 8]
cmp esi, dword [rbx + 0x4a10]
jl 0x14004e940
call fcn.14003bdb0
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x14004e972
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [r14]
test rcx, rcx
je 0x14004e980
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x14004e98f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
and dword [rbx + 0xc], 0xffffeff7
mov rax, qword [0x1401b9020]
mov qword [rbx + 0x90], r12
mov qword [rbx + 0xa0], r12
test rax, rax
je 0x14004e9b6
dec dword [rax + 0xf4]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r14, qword [0x1401b9020]
test r14, r14
je 0x14004e9d4
mov r13, qword [r14 + 0x98]
jmp 0x14004e9d7
mov r13, r12
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, rax
lea rcx, str.ImGui_Platform
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov rsi, qword [0x1401b9020]
mov edi, r12d
cmp dword [rsi + 0x4a10], r12d
jle 0x14004ea2e
mov rbx, r12
nop word [rax + rax]
mov rcx, qword [rsi + 0x4a18]
mov rcx, qword [rbx + rcx]
call fcn.14001efb0
inc edi
lea rbx, [rbx + 8]
cmp edi, dword [rsi + 0x4a10]
jl 0x14004ea10
mov rcx, qword [r13 + 0x30]
test rcx, rcx
je 0x14004ea3d
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
and dword [r14 + 0xc], 0xfffff3f8
mov rax, qword [0x1401b9020]
mov qword [r14 + 0x88], r12
mov qword [r14 + 0x98], r12
test rax, rax
je 0x14004ea65
dec dword [rax + 0xf4]
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1401b9020]
mov qword [0x1401b9020], rbx
call fcn.1400068f0
mov qword [0x1401b9020], r12
test rbx, rbx
je 0x14004eab0
mov rcx, rbx
call fcn.14002aa50
mov rax, qword [0x1401b9020]
test rax, rax
je 0x14004eaa7
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.14004ee40
mov rcx, r15
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x14004eae5
call fcn.14004ee40
mov rdx, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, edi
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.1400b4b30
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret