Function at 0x1400091f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1e8]
sub rsp, 0x2c0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1401a80c0]
xor rax, rsp
mov qword [rbp + 0x110], rax
mov r14, rcx
mov qword [rsp + 0x68], rcx
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov dword [rsp + 0x40], 0x626f5245
mov dword [rsp + 0x44], 0x786f6c
lea rdx, [rsp + 0x41]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
lea rdx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_ScreenToClient]
movd xmm14, dword [rbp + 0x70]
cvtdq2ps xmm14, xmm14
movd xmm15, dword [rbp + 0x74]
cvtdq2ps xmm15, xmm15
mov rax, qword [0x1402e2798]
mov qword [rbp + 0x68], rax
cvttss2si r12d, dword [0x14026db3c]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], rax
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0x68]
call fcn.1400146c0
nop
mov rsi, qword [rbp + 0xb8]
mov r13, qword [rbp + 0xc0]
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x68]
cmp rsi, r13
je 0x1400098a4
xor r14d, r14d
movdqa xmm13, xmmword [0x14018b0a0]
movss xmm11, dword [0x14018ae64]
movss xmm10, dword [0x14018ac7c]
movss xmm12, dword [0x14018ac3c]
nop word [rax + rax]
mov rax, qword [rsi]
test rax, rax
je 0x14000988b
add rax, 0x298
mov qword [rbp + 0x60], r14
mov dword [rbp + 0x99], r14d
mov word [rbp + 0x9d], r14w
mov byte [rbp + 0x9f], 0
mov dword [rbp + 0x78], 0x85b3e12
mov qword [rbp + 0x80], rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x90], 8
mov eax, dword [0x1402e26bc]
mov dword [rbp + 0x7c], eax
mov byte [rbp + 0x98], 0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9d, Ordinal_41
lea r8, [rbp + 0x78]
mov edx, 0x2201c4
mov rcx, qword [0x1402e26c0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp + 0x60]
mov qword [rbp + 0x60], rax
test rax, rax
je 0x14000988b
mov rax, qword [0x1402e2790]
cmp qword [rsi], rax
je 0x14000988b
mov dword [rsp + 0x48], 0x6d75487b
mov dword [rsp + 0x4c], 0x696f6e61
mov word [rsp + 0x50], 0x64
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], r14
lea rax, [rsp + 0x49]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140009423
lea rdx, [rsp + 0x49]
lea rcx, [rbp - 0x38]
call fcn.140006d00
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x60]
call fcn.140014950
cmp qword [rbp - 0x40], 0
je 0x14000988b
mov ecx, dword [0x1402e27b8]
test ecx, ecx
je 0x140009522
sub ecx, 1
je 0x1400094c4
cmp ecx, 1
jne 0x14000988b
movdqu xmmword [rbp - 0x58], xmm13
mov word [rbp - 0x48], reloc.WS2_32.dll_WSACleanup
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], r14
mov qword [rbp], r14
lea rax, [rbp - 0x57]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400094a0
lea rdx, [rbp - 0x57]
lea rcx, [rbp - 0x18]
call fcn.140006d00
lea r8, [rbp - 0x18]
lea rdx, [rbp + 0x48]
jmp 0x140009570
mov dword [rsp + 0x58], 0x70705507
mov dword [rsp + 0x5c], 0x6f547265
mov dword [rsp + 0x60], 0x6f7372
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], r14
lea rax, [rsp + 0x59]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140009500
lea rdx, [rsp + 0x59]
lea rcx, [rbp + 8]
call fcn.140006d00
lea r8, [rbp + 8]
lea rdx, [rbp + 0x50]
jmp 0x140009570
mov dword [rsp + 0x40], 0x61654801
mov word [rsp + 0x44], 0x64
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], r14
mov qword [rbp + 0x40], r14
lea rax, [rsp + 0x41]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140009550
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x28]
call fcn.140006d00
lea r8, [rbp + 0x28]
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x60]
call fcn.140014950
mov r15, qword [rax]
xor r14d, r14d
mov qword [rbp - 0x78], r14
lea rax, [r15 + 0x158]
xor ecx, ecx
mov qword [rbp + 0x68], rcx
mov dword [rbp + 0x99], ecx
mov word [rbp + 0x9d], cx
mov byte [rbp + 0x9f], cl
mov dword [rbp + 0x78], 0x85b3e12
mov qword [rbp + 0x80], rax
lea rax, [rbp + 0x68]
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x90], 8
mov eax, dword [0x1402e26bc]
mov dword [rbp + 0x7c], eax
mov byte [rbp + 0x98], cl
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rcx
mov r9d, Ordinal_41
lea r8, [rbp + 0x78]
mov edx, 0x2201c4
mov rcx, qword [0x1402e26c0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [rbp + 0x68]
test rcx, rcx
jne 0x140009615
movsd xmm0, qword [rbp - 0x78]
jmp 0x14000964a
xor eax, eax
mov qword [rsp + 0x78], rax
mov dword [rbp - 0x80], eax
add rcx, 0x140
mov r8d, recv
lea rdx, [rsp + 0x78]
call fcn.140012460
movsd xmm0, qword [rsp + 0x78]
movsd qword [rbp - 0x78], xmm0
mov eax, dword [rbp - 0x80]
mov dword [rbp - 0x70], eax
mov r14d, eax
movsd qword [rbp - 0x68], xmm0
mov rcx, qword [0x1402e27a0]
add rcx, 0x4f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
movups xmmword [rbp + 0x88], xmm0
movups xmmword [rbp + 0x98], xmm0
movups xmmword [rbp + 0xa8], xmm0
mov r8d, 0x40
lea rdx, [rbp + 0x78]
call fcn.140012460
movups xmm6, xmmword [rbp + 0x78]
movups xmm7, xmmword [rbp + 0x88]
movups xmm0, xmmword [rbp + 0x98]
movups xmmword [rbp + 0xf0], xmm0
movups xmm8, xmmword [rbp + 0xa8]
mov rax, qword [0x1402e27a0]
add rax, 0x760
xor ecx, ecx
mov qword [rbp + 0x68], rcx
mov dword [rbp + 0xf1], ecx
mov word [rbp + 0xf5], cx
mov byte [rbp + 0xf7], cl
mov dword [rbp + 0xd0], 0x85b3e12
mov qword [rbp + 0xd8], rax
lea rax, [rbp + 0x68]
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xe8], 8
mov eax, dword [0x1402e26bc]
mov dword [rbp + 0xd4], eax
mov byte [rbp + 0xf0], cl
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rcx
mov r9d, Ordinal_41
lea r8, [rbp + 0xd0]
mov edx, 0x2201c4
mov rcx, qword [0x1402e26c0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movss xmm9, dword [rbp - 0x64]
movaps xmm5, xmm9
movaps xmm0, xmm6
shufps xmm0, xmm6, 0x55
mulss xmm5, xmm0
movss xmm3, dword [rbp - 0x68]
movaps xmm1, xmm3
mulss xmm1, xmm6
addss xmm5, xmm1
movd xmm4, r14d
movaps xmm2, xmm4
movaps xmm0, xmm6
shufps xmm0, xmm6, 0xaa
mulss xmm2, xmm0
addss xmm5, xmm2
shufps xmm6, xmm6, 0xff
addss xmm5, xmm6
movaps xmm6, xmm9
movaps xmm0, xmm7
shufps xmm0, xmm7, 0x55
mulss xmm6, xmm0
movaps xmm1, xmm3
mulss xmm1, xmm7
addss xmm6, xmm1
movaps xmm2, xmm4
movaps xmm0, xmm7
shufps xmm0, xmm7, 0xaa
mulss xmm2, xmm0
addss xmm6, xmm2
shufps xmm7, xmm7, 0xff
addss xmm6, xmm7
movaps xmm0, xmm8
shufps xmm0, xmm8, 0x55
mulss xmm9, xmm0
mulss xmm3, xmm8
addss xmm9, xmm3
movaps xmm0, xmm8
shufps xmm0, xmm8, 0xaa
mulss xmm4, xmm0
addss xmm9, xmm4
shufps xmm8, xmm8, 0xff
addss xmm9, xmm8
movss xmm0, dword [0x14018ab98]
comiss xmm0, xmm9
jbe 0x1400097fe
movaps xmm5, xmm11
movaps xmm0, xmm11
jmp 0x140009830
movaps xmm0, xmm10
divss xmm0, xmm9
mulss xmm5, xmm0
mulss xmm6, xmm0
addss xmm5, xmm10
mulss xmm5, xmm12
mulss xmm5, dword [rbp + 0x68]
movaps xmm0, xmm10
subss xmm0, xmm6
mulss xmm0, xmm12
mulss xmm0, dword [rbp + 0x6c]
subss xmm0, xmm15
subss xmm5, xmm14
mulss xmm5, xmm5
mulss xmm0, xmm0
addss xmm5, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm5
ja 0x140009857
xorps xmm0, xmm0
sqrtss xmm0, xmm5
jmp 0x14000985f
movaps xmm0, xmm5
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movd xmm1, dword [0x14026db4c]
cvtdq2ps xmm1, xmm1
xor r14d, r14d
comiss xmm1, xmm0
jbe 0x14000988b
movd xmm1, r12d
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x14000988b
mov rbx, r15
mov rdi, qword [rbp + 0x60]
cvttss2si r12d, xmm0
add rsi, 8
cmp rsi, r13
jne 0x140009340
mov rsi, qword [rbp + 0xb8]
mov r14, qword [rsp + 0x68]
mov qword [r14], rdi
mov qword [r14 + 8], rbx
test rsi, rsi
je 0x1400098ee
mov rdx, qword [rbp + 0xc8]
sub rdx, rsi
and rdx, 0xfffffffffffffff8
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400098e6
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400098e6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.140146f44
mov rax, r14
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.140146b70
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret