Function at 0x1400674a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x188]
sub rsp, 0x260
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x14011e080]
xor rax, rsp
mov qword [rbp + 0xb8], rax
mov r14, rcx
lea rcx, [rbp - 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov rcx, qword [0x14011fa98]
lea rdx, [rbp - 0x40]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rax, qword [0x14011fa70]
lea r8, [rbp + 0x20]
xor r12d, r12d
mov dword [rbp + 0x20], 0x85b3e12
xor ecx, ecx
mov qword [rsp + 0x38], r12
add rax, 0x760
mov qword [rbp - 0x58], rcx
mov qword [rbp + 0x28], rax
mov r9d, Ordinal_45
lea rax, [rbp - 0x58]
mov byte [rbp + 0x47], cl
mov qword [rbp + 0x30], rax
mov edx, 0x2201c4
mov eax, dword [0x14011fc58]
mov byte [rbp + 0x40], cl
mov rcx, qword [0x14011fc60]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rbp + 0x24], eax
mov dword [rbp + 0x41], r12d
mov word [rbp + 0x45], r12w
mov qword [rbp + 0x38], 8
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [0x14011fa70]
lea rdx, [rbp + 0x50]
xorps xmm0, xmm0
add rcx, 0x4f0
mov r8d, 0x40
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
call fcn.140069050
movss xmm0, dword [0x14011e168]
addss xmm0, dword [0x14011e174]
mov rcx, qword [0x14011fa80]
movss xmm13, dword [0x1401074e0]
add rcx, 0x418
movss xmm15, dword [0x1401074dc]
mulss xmm0, dword [0x1401073e0]
subss xmm13, xmm0
divss xmm13, xmm15
call fcn.14006d970
mov r8d, ntohs
lea rdx, [rbp + 0x10]
lea r15, [rax + 0xd8]
lea rcx, [rax + 0xfc]
xor eax, eax
mov qword [rbp + 0x10], rax
mov dword [rbp + 0x18], eax
call fcn.140069050
lea rdx, [rbp + 0x90]
xor eax, eax
mov dword [rbp + 0xb0], eax
mov r8d, Ordinal_41
mov rcx, r15
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
call fcn.140069050
add r14, 0x160
xorps xmm7, xmm7
cmp byte [0x14011fa79], r12b
mov rcx, r14
je 0x14006780a
call fcn.14006d970
test rax, rax
jne 0x1400676a3
xorps xmm6, xmm6
xorps xmm8, xmm8
xorps xmm10, xmm10
jmp 0x1400676d3
xor ecx, ecx
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x50], rcx
mov r8d, ntohs
mov dword [rbp - 0x48], ecx
lea rcx, [rax + 0x14c]
call fcn.140069050
movss xmm6, dword [rbp - 0x50]
movss xmm8, dword [rbp - 0x4c]
movss xmm10, dword [rbp - 0x48]
divss xmm6, dword [0x14011e1a4]
xor ebx, ebx
mov rcx, r14
mov qword [rsp + 0x40], rbx
divss xmm8, dword [0x14011e128]
divss xmm10, dword [0x14011e1a4]
call fcn.14006d970
test rax, rax
jne 0x14006770d
movsd xmm0, qword [rsp + 0x40]
mov dword [rsp + 0x48], ebx
jmp 0x140067738
xor ecx, ecx
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x50], rcx
mov r8d, ntohs
mov dword [rbp - 0x48], ecx
lea rcx, [rax + 0x140]
call fcn.140069050
mov eax, dword [rbp - 0x48]
movsd xmm0, qword [rbp - 0x50]
mov dword [rsp + 0x48], eax
movsd qword [rsp + 0x40], xmm0
mov rcx, r14
movss xmm12, dword [rsp + 0x40]
addss xmm12, xmm6
mov qword [rsp + 0x40], rbx
call fcn.14006d970
test rax, rax
jne 0x140067761
mov dword [rbp - 0x48], ebx
jmp 0x14006778a
xor ecx, ecx
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rcx
mov r8d, ntohs
mov dword [rsp + 0x48], ecx
lea rcx, [rax + 0x140]
call fcn.140069050
mov eax, dword [rsp + 0x48]
mov dword [rbp - 0x48], eax
movsd xmm0, qword [rsp + 0x40]
mov rcx, r14
movsd qword [rbp - 0x50], xmm0
movss xmm11, dword [rbp - 0x4c]
addss xmm11, xmm8
mov qword [rsp + 0x40], rbx
call fcn.14006d970
test rax, rax
je 0x1400677d8
xor ecx, ecx
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rcx
mov r8d, ntohs
mov dword [rsp + 0x48], ecx
lea rcx, [rax + 0x140]
call fcn.140069050
mov ebx, dword [rsp + 0x48]
movsd xmm0, qword [rsp + 0x40]
movsd qword [rbp - 0x50], xmm0
movaps xmm0, xmm12
movd xmm9, ebx
addss xmm9, xmm10
unpcklps xmm0, xmm11
movaps xmm2, xmm0
movsd qword [rbp - 0x50], xmm0
movss dword [rbp - 0x48], xmm9
movd ebx, xmm9
jmp 0x140067865
xor ebx, ebx
mov qword [rsp + 0x40], rbx
call fcn.14006d970
test rax, rax
je 0x140067841
xor ecx, ecx
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rcx
mov r8d, ntohs
mov dword [rsp + 0x48], ecx
lea rcx, [rax + 0x140]
call fcn.140069050
mov ebx, dword [rsp + 0x48]
movsd xmm0, qword [rsp + 0x40]
movaps xmm2, xmm0
mov dword [rbp - 0x48], ebx
shufps xmm0, xmm0, 0x55
movsd qword [rbp - 0x50], xmm2
movaps xmm11, xmm0
movss xmm12, dword [rbp - 0x50]
movd xmm9, ebx
movaps xmm0, xmmword [rbp + 0x50]
lea r8, [rbp - 0x30]
movaps xmm1, xmmword [rbp + 0x60]
lea rcx, [rsp + 0x40]
movsd xmm14, qword [rbp - 0x58]
movaps xmmword [rbp - 0x30], xmm0
movq rdx, xmm14
movaps xmm0, xmmword [rbp + 0x70]
movaps xmmword [rbp - 0x20], xmm1
movaps xmm1, xmmword [rbp + 0x80]
movaps xmmword [rbp - 0x10], xmm0
movaps xmmword [rbp], xmm1
movsd qword [rsp + 0x40], xmm2
mov dword [rsp + 0x48], ebx
call fcn.14006bc90
movss xmm10, dword [0x140107570]
mov qword [rbp - 0x58], rax
movss xmm6, dword [rbp - 0x58]
ucomiss xmm6, xmm10
jp 0x1400678c9
je 0x140067fad
movzx ebx, byte [0x14011fa5d]
mov qword [rsp + 0x298], rsi
test bl, bl
je 0x14006796a
movss xmm0, dword [0x14011e114]
mulss xmm0, dword [0x1401074ac]
cvttss2si ebx, xmm0
movss xmm0, dword [0x14011e13c]
mulss xmm0, dword [0x1401074ac]
cvttss2si edi, xmm0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov esi, eax
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
sub ebx, eax
and esi, ebx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, dword [rbp - 0x40]
mov ecx, eax
movss xmm3, dword [rbp - 0x54]
mov eax, edi
movzx ebx, byte [0x14011fa5d]
cdq
cvtdq2ps xmm0, xmm0
sub eax, edx
sar eax, 1
sub edi, eax
and ecx, edi
movd xmm1, esi
cvtdq2ps xmm1, xmm1
subss xmm6, xmm0
movd xmm0, dword [rbp - 0x3c]
cvtdq2ps xmm0, xmm0
addss xmm6, xmm1
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
subss xmm3, xmm0
addss xmm3, xmm1
jmp 0x140067987
movd xmm0, dword [rbp - 0x40]
movss xmm3, dword [rbp - 0x54]
cvtdq2ps xmm0, xmm0
subss xmm6, xmm0
movd xmm0, dword [rbp - 0x3c]
cvtdq2ps xmm0, xmm0
subss xmm3, xmm0
mulss xmm6, dword [0x14011e164]
mulss xmm3, dword [0x14011e164]
divss xmm6, dword [0x14011e174]
divss xmm3, dword [0x14011e168]
ucomiss xmm6, xmm10
jp 0x1400679b3
je 0x140067fa5
ucomiss xmm3, xmm10
jp 0x1400679bf
je 0x140067fa5
cmp dword [0x14011e194], r12d
je 0x140067fa5
mov ecx, dword [reloc.WS2_32.dll_accept]
test ecx, ecx
je 0x140067f30
sub ecx, 1
je 0x140067c85
cmp ecx, 1
jne 0x140067fa5
cmp byte [0x14011fa7a], r12b
je 0x140067fa5
cmp byte [0x14011fa5a], r12b
mov rcx, r14
je 0x140067acd
call fcn.14006d970
test rax, rax
jne 0x140067a1c
xorps xmm6, xmm6
xorps xmm8, xmm8
jmp 0x140067a4b
xor ecx, ecx
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x50], rcx
mov r8d, ntohs
mov dword [rbp - 0x48], ecx
lea rcx, [rax + 0x14c]
call fcn.140069050
movss xmm7, dword [rbp - 0x50]
movss xmm6, dword [rbp - 0x4c]
movss xmm8, dword [rbp - 0x48]
divss xmm7, dword [0x14011e144]
xor ebx, ebx
mov rcx, r14
mov qword [rsp + 0x40], rbx
divss xmm6, dword [0x14011e14c]
divss xmm8, dword [0x14011e144]
call fcn.14006d970
test rax, rax
je 0x140067a9e
xor ecx, ecx
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rcx
mov r8d, ntohs
mov dword [rsp + 0x48], ecx
lea rcx, [rax + 0x140]
call fcn.140069050
mov ebx, dword [rsp + 0x48]
movsd xmm0, qword [rsp + 0x40]
movsd qword [rbp - 0x50], xmm0
movss xmm3, dword [rbp - 0x50]
movss xmm1, dword [rbp - 0x4c]
addss xmm3, xmm7
movd xmm2, ebx
addss xmm1, xmm6
addss xmm2, xmm8
unpcklps xmm3, xmm1
movd ebx, xmm2
jmp 0x140067b0d
xor ebx, ebx
mov qword [rsp + 0x40], rbx
call fcn.14006d970
test rax, rax
je 0x140067b04
xor ecx, ecx
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rcx
mov r8d, ntohs
mov dword [rsp + 0x48], ecx
lea rcx, [rax + 0x140]
call fcn.140069050
mov ebx, dword [rsp + 0x48]
movsd xmm0, qword [rsp + 0x40]
movaps xmm3, xmm0
movaps xmm0, xmmword [rbp + 0x50]
lea r8, [rbp - 0x30]
movaps xmm1, xmmword [rbp + 0x60]
lea rcx, [rsp + 0x40]
movaps xmmword [rbp - 0x30], xmm0
movq rdx, xmm14
movaps xmm0, xmmword [rbp + 0x70]
movaps xmmword [rbp - 0x20], xmm1
movaps xmm1, xmmword [rbp + 0x80]
movaps xmmword [rbp - 0x10], xmm0
movaps xmmword [rbp], xmm1
movsd qword [rsp + 0x40], xmm3
mov dword [rsp + 0x48], ebx
call fcn.14006bc90
mov qword [rbp - 0x58], rax
movss xmm6, dword [rbp - 0x58]
ucomiss xmm6, xmm10
jp 0x140067b62
je 0x140067fa5
movd xmm2, dword [rbp - 0x40]
lea rax, [rsp + 0x41]
movd xmm3, dword [rbp - 0x3c]
xorps xmm0, xmm0
movss xmm7, dword [rbp - 0x54]
mov r8, 0xffffffffffffffff
cvtdq2ps xmm2, xmm2
mov dword [rsp + 0x40], 0x756f4d3e
mov dword [rsp + 0x44], 0x65536573
mov dword [rsp + 0x48], 0x63697672
mov word [rsp + 0x4c], 0x65
cvtdq2ps xmm3, xmm3
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
subss xmm6, xmm2
subss xmm7, xmm3
movups xmmword [rsp + 0x50], xmm0
mulss xmm6, dword [0x140107488]
mulss xmm7, dword [0x140107488]
divss xmm6, dword [0x14011e144]
divss xmm7, dword [0x14011e144]
addss xmm6, xmm2
addss xmm7, xmm3
inc r8
cmp byte [rax + r8], r12b
jne 0x140067be4
lea rdx, [rsp + 0x41]
lea rcx, [rsp + 0x50]
call fcn.140007750
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x58]
lea rcx, [0x14011fab0]
call fcn.14006ca40
mov rax, qword [0x14011fc70]
test rax, rax
jne 0x140067c4b
mov rcx, qword [rbp - 0x58]
add rcx, 0xf0
call fcn.14006d970
mov qword [0x14011fc70], rax
prefetcht0 byte [rax + 0xdc]
prefetcht0 byte [rax + 0xe0]
test rax, rax
je 0x140067fa5
cvttss2si ecx, xmm6
movd xmm1, ecx
lea rcx, [rax + 0xdc]
cvtdq2ps xmm1, xmm1
call fcn.14006dab0
mov rcx, qword [0x14011fc70]
cvttss2si eax, xmm7
add rcx, 0xe0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
call fcn.14006dab0
jmp 0x140067fa5
lea r8, [rbp - 0x50]
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x80]
call fcn.1400672b0
mov ecx, dword [rax + 0x20]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
test bl, bl
je 0x140067d70
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movss xmm1, dword [0x14011e114]
cdq
movss xmm7, dword [0x140107450]
movaps xmm0, xmm1
mulss xmm0, xmm7
cvttss2si ecx, xmm0
idiv ecx
movd xmm8, edx
cvtdq2ps xmm8, xmm8
subss xmm8, xmm1
divss xmm8, xmm15
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movss xmm1, dword [0x14011e13c]
cdq
movaps xmm0, xmm1
mulss xmm0, xmm7
cvttss2si ecx, xmm0
idiv ecx
movd xmm6, edx
cvtdq2ps xmm6, xmm6
subss xmm6, xmm1
divss xmm6, xmm15
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movss xmm1, dword [0x14011e114]
addss xmm8, xmm12
cdq
addss xmm6, xmm11
movaps xmm0, xmm1
lea r8, [rbp - 0x50]
mulss xmm0, xmm7
unpcklps xmm8, xmm6
cvttss2si ecx, xmm0
movsd qword [rbp - 0x50], xmm8
idiv ecx
lea rcx, [rbp + 0x20]
movd xmm2, edx
lea rdx, [rbp + 0x10]
cvtdq2ps xmm2, xmm2
subss xmm2, xmm1
divss xmm2, xmm15
addss xmm2, xmm9
movss dword [rbp - 0x48], xmm2
call fcn.1400672b0
movups xmm0, xmmword [rax]
mov ecx, dword [rax + 0x20]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x38], r12
mov qword [rbp - 0x20], rax
lea r8, [rbp - 0x30]
mov eax, dword [0x14011fc58]
mov r9d, Ordinal_45
mov dword [rsp + 0x70], ecx
mov edx, 0x2201c4
mov rcx, qword [0x14011fc60]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rbp - 0x2c], eax
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x60], xmm1
mov dword [rbp - 0xf], r12d
mov word [rbp - 0xb], r12w
mov byte [rbp - 9], r12b
mov dword [rbp - 0x30], 0x85b3e12
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x18], Ordinal_41
mov byte [rbp - 0x10], 1
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp byte [0x14011fa95], 1
jne 0x140067fa5
mov eax, dword [0x14011faa8]
movabs rsi, 0x7fffffffffffffff
mov edi, 1
mov r14d, 0xff
test eax, eax
jne 0x140067e6a
movsxd rbx, dword [reloc.WS2_32.dll_accept]
lea rcx, [rbp - 0x58]
call fcn.140002b50
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x58], rax
test rbx, rbx
je 0x140067e5b
js 0x140067e5b
imul rdx, rbx, 0x3b9aca00
mov rcx, rsi
sub rcx, rdx
cmp rax, rcx
je 0x140067e57
mov r8d, edi
cmovl r8d, r14d
test r8b, r8b
jns 0x140067e57
lea rcx, [rdx + rax]
mov qword [rbp - 0x58], rcx
jmp 0x140067e5b
mov qword [rbp - 0x58], rsi
lea rcx, [rbp - 0x58]
call fcn.140008260
mov eax, dword [0x14011faa8]
cmp eax, edi
jne 0x140067ec8
movsxd rbx, dword [reloc.WS2_32.dll_accept]
lea rcx, [rbp - 0x58]
call fcn.140002b50
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x58], rax
test rbx, rbx
je 0x140067eb9
js 0x140067eb9
imul rdx, rbx, 0xf4240
mov rcx, rsi
sub rcx, rdx
cmp rax, rcx
je 0x140067eb5
mov r8d, edi
cmovl r8d, r14d
test r8b, r8b
jns 0x140067eb5
lea rcx, [rdx + rax]
mov qword [rbp - 0x58], rcx
jmp 0x140067eb9
mov qword [rbp - 0x58], rsi
lea rcx, [rbp - 0x58]
call fcn.140008260
mov eax, dword [0x14011faa8]
cmp eax, 2
jne 0x140067fa5
movsxd rbx, dword [reloc.WS2_32.dll_accept]
lea rcx, [rbp - 0x58]
call fcn.140002b50
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x58], rax
test rbx, rbx
je 0x140067f25
js 0x140067f25
imul rdx, rbx, 0x3e8
mov rcx, rsi
sub rcx, rdx
cmp rax, rcx
je 0x140067f21
cmovl edi, r14d
test dil, dil
jns 0x140067f21
lea rcx, [rdx + rax]
mov qword [rbp - 0x58], rcx
lea rcx, [rbp - 0x58]
call fcn.140008260
jmp 0x140067fa5
mov qword [rbp - 0x58], rsi
lea rcx, [rbp - 0x58]
call fcn.140008260
jmp 0x140067fa5
movss xmm1, dword [0x1401211a8]
lea rdx, [rbp - 0x30]
movss xmm0, dword [0x1401211ac]
subss xmm6, xmm1
subss xmm3, xmm0
mov qword [rbp - 0x30], r12
mov ecx, 1
mov qword [rbp - 0x14], r12
mov r8d, Ordinal_45
mov dword [rbp - 0xc], r12d
mov qword [rbp - 0x1c], 1
mulss xmm6, xmm13
mov dword [rbp - 0x20], r12d
mulss xmm3, xmm13
addss xmm1, xmm6
addss xmm0, xmm3
cvttss2si eax, xmm1
movss dword [0x1401211a8], xmm1
mov dword [rbp - 0x28], eax
cvttss2si eax, xmm0
movss dword [0x1401211ac], xmm0
mov dword [rbp - 0x24], eax
call qword [sym.imp.USER32.dll_SendInput]
mov rsi, qword [rsp + 0x298]
mov rcx, qword [rbp + 0xb8]
xor rcx, rsp
call fcn.1400e3900
lea r11, [rsp + 0x260]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret