Function at 0x140010a00
Capabilities:
Hide graphical window

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1a0
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400feb78]
xor rax, rsp
mov qword [rbp + 0x140], rax
xor r15d, r15d
mov dword [rbp], r15d
movabs rax, 0x294d9e1e4210434a
mov qword [rbp + 0x60], rax
movabs rax, 0xadce4a67906592f1
mov qword [rbp + 0x68], rax
movabs rax, 0x6a83bc9af9a38856
mov qword [rbp + 0x70], rax
movabs rax, 0x5f5b1dc5f39a6221
mov qword [rbp + 0x78], rax
movabs rax, 0x9f6cfe9d96d4b5be
mov qword [rbp + 0x80], rax
movabs rax, 0xef1db37fc6d4e91b
mov qword [rbp + 0x88], rax
movabs rax, 0x39e1368f9f4c2227
mov qword [rbp + 0x90], rax
movabs rax, 0x69c6c1050627cb9d
mov qword [rbp + 0x98], rax
movabs rax, 0x9e9da7dde4a4d46
mov qword [rbp + 0xa0], rax
movabs rax, 0x30eb1f967b563ff3
mov qword [rbp + 0xa8], rax
movabs r13, 0x4629f077154c7909
mov qword [rbp + 0xe0], r13
movabs r12, 0xc8ba391ec339e186
mov qword [rbp + 0xe8], r12
movabs rax, 0xcedd3f9a591bb3b
mov qword [rbp + 0xf0], rax
movabs rbx, 0x3e197aa0a1c60548
mov qword [rbp + 0xf8], rbx
movabs rax, 0xdb2fc7abed88dedd
mov qword [rbp + 0x100], rax
movabs rax, 0xd95bf75282e6af2a
mov qword [rbp + 0x108], rax
movabs rax, 0xcc05bdda780f1f
mov qword [rbp + 0x110], rax
movabs rax, 0x59f183342b1ffbac
mov qword [rbp + 0x118], rax
movabs rax, 0x30dce24f98797571
mov qword [rbp + 0x120], rax
movabs rax, 0x30eb1f967b563f8e
mov qword [rbp + 0x128], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqa xmm0, xmmword [rbp + 0xa0]
vpxor xmm0, xmm0, xmmword [rbp + 0x120]
vmovdqa xmmword [rbp + 0xa0], xmm0
lea rax, [rbp + 0xc0]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x60]
mov rdi, 0xffffffffffffffff
mov rsi, rdi
vzeroupper
inc rsi
cmp byte [rax + rsi], r15b
jne 0x140010be6
call fcn.140014a2c
mov r14d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r15w
mov dword [rbp], 4
test rsi, rsi
je 0x140010caf
cmp rsi, 0x7fffffff
ja 0x1400115f1
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov r8d, esi
lea rdx, [rbp + 0x60]
mov ecx, eax
call fcn.140014a54
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x1400115fc
xor r8d, r8d
movsxd rdx, ebx
lea rcx, [rbp + 0xc0]
call fcn.14000f600
lea r9, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 8
cmovae r9, qword [rbp + 0xc0]
mov dword [rsp + 0x20], ebx
mov r8d, esi
lea rdx, [rbp + 0x60]
mov ecx, r14d
call fcn.140014a54
shr rax, 0x20
test eax, eax
jne 0x140011604
movabs rbx, 0x3e197aa0a1c60548
lea rcx, [rbp + 0xc0]
call fcn.14000f310
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb 0x140010d02
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010cfd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001160c
call fcn.140015768
movabs rax, 0x294d9e1e4210434a
mov qword [rbp + 0x60], rax
movabs rax, 0xadce4a67906592f1
mov qword [rbp + 0x68], rax
movabs rax, 0x6a83bc9af9a38856
mov qword [rbp + 0x70], rax
movabs rax, 0x5f5b1dc5f39a6221
mov qword [rbp + 0x78], rax
movabs rax, 0x9f6cfe9d96d4b5be
mov qword [rbp + 0x80], rax
movabs rax, 0xef1db37fc6d4e91b
mov qword [rbp + 0x88], rax
movabs rax, 0x39e1368f9f4c2227
mov qword [rbp + 0x90], rax
movabs rax, 0x69c6c1050627cb9d
mov qword [rbp + 0x98], rax
movabs rax, 0x9eada7dde4a4d46
mov qword [rbp + 0xa0], rax
movabs rax, 0x30eb1f967b563ff3
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xe8], r12
movabs rax, 0xcedd3f9a591bb3b
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rbx
movabs rax, 0xdb2fc7abed88dedd
mov qword [rbp + 0x100], rax
movabs rax, 0xd95bf75282e6af2a
mov qword [rbp + 0x108], rax
movabs rax, 0xcc05bdda780f1f
mov qword [rbp + 0x110], rax
movabs rax, 0x59f183342b1ffbac
mov qword [rbp + 0x118], rax
movabs rax, 0x30dce24f98797571
mov qword [rbp + 0x120], rax
movabs rax, 0x30eb1f967b563f8e
mov qword [rbp + 0x128], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqa xmm0, xmmword [rbp + 0xa0]
vpxor xmm0, xmm0, xmmword [rbp + 0x120]
vmovdqa xmmword [rbp + 0xa0], xmm0
lea rax, [rbp + 0xc0]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x60]
mov rsi, rdi
vzeroupper
inc rsi
cmp byte [rax + rsi], 0
jne 0x140010e83
call fcn.140014a2c
mov r14d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r15w
mov dword [rbp], reloc.WLDAP32.dll_Ordinal_35
test rsi, rsi
je 0x140010f3e
cmp rsi, 0x7fffffff
ja 0x140011612
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov r8d, esi
lea rdx, [rbp + 0x60]
mov ecx, eax
call fcn.140014a54
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x14001161d
xor r8d, r8d
movsxd rdx, ebx
lea rcx, [rbp + 0xc0]
call fcn.14000f600
lea r9, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 8
cmovae r9, qword [rbp + 0xc0]
mov dword [rsp + 0x20], ebx
mov r8d, esi
lea rdx, [rbp + 0x60]
mov ecx, r14d
call fcn.140014a54
shr rax, 0x20
test eax, eax
jne 0x140011625
lea rcx, [rbp + 0xc0]
call fcn.14000f310
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb 0x140010f91
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010f8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001162d
call fcn.140015768
xor edx, edx
lea rcx, str.ConsoleWindowClass
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, str.taskkill__f__im_agent.exe
call fcn.140068234
lea rcx, str.taskkill__f__im_Steam.exe
call fcn.140068234
lea rcx, str.taskkill__f__im_steam.exe
call fcn.140068234
lea rcx, str.taskkill__f__im_Battle.net.exe
call fcn.140068234
movabs rsi, 0x4629f077153f156a
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], r12
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xc8], r12
movdqa xmm0, xmmword [rbp + 0x10]
pxor xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x10], xmm0
lea rcx, [rbp + 0x10]
call fcn.140068234
mov edx, 1
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.14000c590
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], 9
mov qword [rbp + 0xd8], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.._Key.ini]
movsd qword [rbp + 0xc0], xmm0
movzx eax, byte [0x140092f00]
mov byte [rbp + 0xc8], al
mov byte [rbp + 0xc9], 0
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0xc0]
call fcn.14006cbe4
test eax, eax
sete bl
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x1400110c9
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400110c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011633
call fcn.140015768
call fcn.14000dba0
test bl, bl
je 0x140011284
lea rax, [rbp + 0x40]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], 3
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
movzx eax, word [0x140092eec]
mov word [rbp + 0x40], ax
movzx eax, byte [0x140092eee]
mov byte [rbp + 0x42], al
mov byte [rbp + 0x43], 0
lea rax, [rbp + 0xc0]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0xc8], r15
mov qword [rbp + 0xd0], 7
mov qword [rbp + 0xd8], reloc.WS2_32.dll_ntohs
mov eax, dword [str.License]
mov dword [rbp + 0xc0], eax
movzx eax, word [0x140092ef4]
mov word [rbp + 0xc4], ax
movzx eax, byte [0x140092ef6]
mov byte [rbp + 0xc6], al
mov byte [rbp + 0xc7], 0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], 9
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.._Key.ini]
movsd qword [rbp + 0x10], xmm0
movzx eax, byte [0x140092f00]
mov byte [rbp + 0x18], al
mov byte [rbp + 0x19], 0
lea r9, [rbp + 0x40]
lea r8, [rbp + 0xc0]
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xe0]
call fcn.140006d70
mov rdx, rax
lea rbx, [0x1400feaf8]
mov rcx, rbx
call fcn.1400052f0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0x10
jb 0x140011201
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400111fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001142f
call fcn.140015768
movabs rax, 0x2a489e0570381740
mov qword [rbp + 0x10], rax
movabs rax, 0xc8ba4b77a251a2ab
mov qword [rbp + 0x18], rax
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xc8], r12
movdqa xmm0, xmmword [rbp + 0x10]
pxor xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x10], xmm0
lea rax, [rbp + 0x10]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140011241
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rbx, qword [0x1400feaf8]
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x10]
xor r8d, r8d
mov rdx, qword [0x1400feb08]
mov rcx, rbx
call fcn.140003dc0
cmp rax, 0xffffffffffffffff
je 0x140011435
jmp 0x1400113ee
lea rdx, [0x1400929b3]
lea rcx, [0x140100380]
call fcn.140003200
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.1400104c0
movzx edx, al
mov rcx, rbx
call fcn.14000e3e0
mov rcx, rbx
call fcn.14000b630
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movabs rax, 0x235d9e3235115452
mov qword [rbp + 0x40], rax
movabs rax, 0xbbd45c7daa55c1f4
mov qword [rbp + 0x48], rax
movabs rax, 0xcedd3f9a5b1815e
mov qword [rbp + 0x50], rax
movabs r14, 0x3e197aa0a1c60548
mov qword [rbp + 0x58], r14
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xc8], r12
movabs r15, 0xcedd3f9a591bb3b
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xd8], r14
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
lea rdx, [rbp + 0x40]
lea rcx, [0x140100380]
vzeroupper
call fcn.140003200
lea rbx, [0x1400feaf8]
mov rdx, rbx
lea rcx, [0x1401002f0]
call fcn.140002f70
movabs rax, 0x2a489e0570381740
mov qword [rbp + 0x10], rax
movabs rax, 0xc8ba4b77a251a2ab
mov qword [rbp + 0x18], rax
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xc8], r12
movdqa xmm0, xmmword [rbp + 0x10]
pxor xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x10], xmm0
lea rax, [rbp + 0x10]
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400113b0
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rbx, qword [0x1400feaf8]
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x10]
xor r8d, r8d
mov rdx, qword [0x1400feb08]
mov rcx, rbx
call fcn.140003dc0
cmp rax, 0xffffffffffffffff
je 0x14001151d
call fcn.140005920
call fcn.1400087b0
call fcn.140006f40
xor eax, eax
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.140015810
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140067e44
int3
call fcn.14000dba0
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], r12
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xc8], r12
movdqa xmm0, xmmword [rbp + 0x10]
pxor xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x10], xmm0
lea rcx, [rbp + 0x10]
call fcn.140068234
call fcn.14000c590
lea rdx, [0x14000f150]
lea rcx, [0x140100380]
call fcn.140005380
movabs rcx, 0x664d991b743a1740
mov qword [rbp + 0x40], rcx
movabs rcx, 0xe9df4a70a65a88ea
mov qword [rbp + 0x48], rcx
movabs rcx, 0xcedd3f9a591bb3b
mov qword [rbp + 0x50], rcx
movabs r14, 0x3e197aa0a1c60548
mov qword [rbp + 0x58], r14
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xc8], r12
mov qword [rbp + 0xd0], rcx
mov qword [rbp + 0xd8], r14
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
lea rdx, [rbp + 0x40]
mov rcx, rax
vzeroupper
call fcn.140003200
lea rdx, [0x140003e90]
mov rcx, rax
call fcn.140005380
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 3
call fcn.1400681e4
int3
call fcn.14000dba0
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], r12
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xc8], r12
movdqa xmm0, xmmword [rbp + 0x10]
pxor xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x10], xmm0
lea rcx, [rbp + 0x10]
call fcn.140068234
call fcn.14000c590
lea rdx, [0x14000f150]
lea rcx, [0x140100380]
call fcn.140005380
movabs rcx, 0x664d991b743a1740
mov qword [rbp + 0x40], rcx
movabs rcx, 0xe9df4a70a65a88ea
mov qword [rbp + 0x48], rcx
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x58], r14
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xc8], r12
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xd8], r14
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
lea rdx, [rbp + 0x40]
mov rcx, rax
vzeroupper
call fcn.140003200
lea rdx, [0x140003e90]
mov rcx, rax
call fcn.140005380
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 3
call fcn.1400681e4
nop
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.14000a500
int3
mov ecx, eax
call fcn.14000a540
int3
mov ecx, eax
call fcn.14000a540
nop
call fcn.140067e44
nop
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.14000a500
int3
mov ecx, eax
call fcn.14000a540
int3
mov ecx, eax
call fcn.14000a540
nop
call fcn.140067e44
int3
call fcn.140067e44
int3