Function at 0x1400676c0
Capabilities:
Encode data using xor
Hide graphical window

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1e8]
sub rsp, 0x2c0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1402a8800]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
mov eax, dword [str._VQW_b_]
mov dword [rbp + 0x10], eax
movzx eax, word [0x140146864]
mov word [rbp + 0x14], ax
mov byte [rbp + 0x10], WSASetLastError
xor byte [rbp + 0x11], 0x37
xor byte [rbp + 0x12], 0x38
xor byte [rbp + 0x13], 0x39
xor al, 0x3a
mov byte [rbp + 0x14], al
xor byte [rbp + 0x15], 0x3b
lea rcx, [rbp + 0x10]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectBeginUltra]
mov dword [rbp - 0x40], 0x50
mov dword [rbp - 0x3c], 0x40
lea rax, [0x140057860]
mov qword [rbp - 0x38], rax
xor r13d, r13d
mov qword [rbp - 0x30], r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
movups xmm0, xmmword [str.eGWMS_EeGWMS_E]
movups xmmword [rbp + 0x188], xmm0
mov ebx, dword [reloc.WS2_32.dll_accept]
pextrw eax, xmm0, 7
test ax, ax
je 0x1400677cd
mov r8d, r13d
cmp ebx, 2
jge 0x1400677cd
lea r9, [rbp + 0x188]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
mul r8d
shr edx, 5
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x36
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 8
jl 0x1400677a0
lea rax, [rbp + 0x188]
mov qword [rbp], rax
mov qword [rbp + 8], r13
lea rcx, [rbp - 0x40]
call qword [sym.imp.USER32.dll_RegisterClassExW]
cvttss2si edi, dword [0x1402a87a4]
cvttss2si esi, dword [0x1402a87a0]
mov r12d, 1
mov ecx, r12d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm0, dword [0x1402a87a4]
mulss xmm0, dword [0x140140304]
subss xmm1, xmm0
cvttss2si r14d, xmm1
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm0, dword [0x1402a87a0]
mulss xmm0, dword [0x140140304]
subss xmm1, xmm0
cvttss2si r10d, xmm1
movups xmm3, xmmword [0x140146878]
movups xmmword [rsp + 0x60], xmm3
pextrw eax, xmm3, 7
test ax, ax
je 0x14006799d
mov r8d, r13d
cmp ebx, 2
jl 0x140067963
movdqa xmm4, xmmword [0x1401480d0]
movdqa xmm2, xmmword [0x140144390]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.::::]
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmmword [str.66666666]
movq xmm1, xmm3
xorps xmm2, xmm1
movq qword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x140147f90]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.::::]
psubd xmm3, xmm0
pshufhw xmm0, xmm3, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmmword [str.66666666]
movq xmm0, qword [rsp + 0x68]
xorps xmm2, xmm0
movq qword [rsp + 0x68], xmm2
jmp 0x14006799d
lea r9, [rsp + 0x60]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
mul r8d
shr edx, 5
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x36
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 8
jl 0x140067970
mov qword [rsp + 0x58], r13
mov rax, qword [rbp - 0x28]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r10d
mov r9d, 0x80000000
lea r8, [rsp + 0x60]
mov rdx, qword [rbp]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r15, rax
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov edx, 0x38e8
mov r9d, 8
mov r8d, 0x458
lea rcx, str.1.90_WIP
call fcn.14000bbc0
mov qword [rbp - 0x7c], r13
mov qword [rbp - 0x68], 2
mov qword [rbp - 0x50], 2
mov qword [rsp + 0x70], r13
mov dword [rbp - 0x80], Ordinal_30
mov dword [rsp + 0x78], reloc.WLDAP32.dll_Ordinal_60
mov dword [rsp + 0x7c], r12d
mov dword [rbp - 0x6c], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x74], r12
mov qword [rbp - 0x58], r12
mov dword [rbp + 0x180], 0xb000
mov dword [rbp + 0x184], 0xa000
lea rbx, [0x1402a9ca0]
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x10]
mov qword [rsp + 0x50], rax
lea rdi, [0x1402a9c98]
mov qword [rsp + 0x48], rdi
lea rsi, [0x1402a9ca8]
mov qword [rsp + 0x40], rsi
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x180]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
xor ecx, ecx
call sub.d3d11.dll_D3D11CreateDeviceAndSwapChain
cmp eax, 0x887a0004
jne 0x140067b27
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x10]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rsi
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x180]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 5
xor ecx, ecx
call sub.d3d11.dll_D3D11CreateDeviceAndSwapChain
test eax, eax
jne 0x140067b30
call fcn.140056e50
xor ecx, ecx
call fcn.14000b890
mov rcx, r15
call fcn.140002f60
mov rdx, qword [0x1402a9ca0]
mov rcx, qword [0x1402a9c98]
call fcn.140001ef0
nop
call fcn.14000eba0
mov rbx, rax
mov qword [rax + 0x18], r13
mov rdi, qword [0x1402a9c98]
mov qword [0x1402a9ce0], r15
xor ecx, ecx
call fcn.140027140
lea rcx, [rbp + 0xf0]
call fcn.140020e40
mov byte [rbp + 0xfc], 0
lea rcx, [rbp + 0x60]
call fcn.140020e40
mov byte [rbp + 0xa8], 1
mov byte [rbp + 0x80], 1
mov byte [rbp + 0x6c], 0
mov qword [rsp + 0x28], r13
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x20], rax
movss xmm6, dword [0x140144f2c]
movaps xmm3, xmm6
mov r8d, 0x3054c
lea rdx, [0x14018d0b0]
mov rcx, qword [rbx + 0x30]
call fcn.140021f20
lea rsi, [0x1401461ac]
mov qword [rsp + 0x28], rsi
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140144f28]
mov r8d, 0xba660
lea rdx, str.OTTO
mov rcx, qword [rbx + 0x30]
call fcn.140021f20
mov qword [rsp + 0x28], r13
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x20], rax
movaps xmm3, xmm6
mov r8d, 0x305e8
lea rdx, [0x1401bd600]
mov rcx, qword [rbx + 0x30]
call fcn.140021f20
mov qword [rsp + 0x28], rsi
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140140350]
mov r8d, 0xba660
lea rdx, str.OTTO
mov rcx, qword [rbx + 0x30]
call fcn.140021f20
mov qword [rsp + 0x28], r13
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140140358]
mov r8d, 0x305e8
lea rdx, [0x1401bd600]
mov rcx, qword [rbx + 0x30]
call fcn.140021f20
mov qword [rbp + 0x18], 0xffffffffffffffff
mov qword [rbp + 0x20], 0xffffffffffffffff
mov qword [rbp + 0x28], 0xffffffffffffffff
mov qword [rbp + 0x30], 0xffffffffffffffff
mov dword [rbp + 0x38], 0xffffffff
mov qword [rbp + 0x3c], 0xfffffffffffffffd
mov dword [rbp + 0x44], 0xffffffff
mov qword [rbp + 0x48], r13
mov qword [rsp + 0x30], r13
lea rax, [0x1402a9cd8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x18]
mov r8d, 0x54d
lea rdx, [0x1402a8250]
mov rcx, rdi
call sub.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl_c_main::initialize_struct_HWND______ptr64__struct_ImGuiIO____ptr64__struct_ID3D11Device____ptr64____ptr64::_2::_lambda_1___void___.0
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x70]
mov qword [rbp - 0x58], rax
lea rdx, [rsp + 0x70]
xor ecx, ecx
call fcn.140068920
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl_c_main::initialize_struct_HWND______ptr64__struct_ImGuiIO____ptr64__struct_ID3D11Device____ptr64____ptr64::_2::_lambda_2___void___.0
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x70]
mov qword [rbp - 0x58], rax
lea rdx, [rsp + 0x70]
mov ecx, r12d
call fcn.140068920
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl_c_main::initialize_struct_HWND______ptr64__struct_ImGuiIO____ptr64__struct_ID3D11Device____ptr64____ptr64::_2::_lambda_3___void___.0
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x70]
mov qword [rbp - 0x58], rax
lea rdx, [rsp + 0x70]
mov ecx, 2
call fcn.140068920
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl_c_main::initialize_struct_HWND______ptr64__struct_ImGuiIO____ptr64__struct_ID3D11Device____ptr64____ptr64::_2::_lambda_4___void___.0
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x70]
mov qword [rbp - 0x58], rax
lea rdx, [rsp + 0x70]
mov ecx, 3
call fcn.140068920
mov edx, 0xa
mov rcx, r15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r15
call qword [sym.imp.USER32.dll_UpdateWindow]
xor r14b, r14b
movss xmm6, dword [0x14014038c]
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x18]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140067e04
nop dword [rax]
lea rcx, [rbp + 0x18]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x18]
call qword [sym.imp.USER32.dll_DispatchMessageW]
movzx r14d, r14b
cmp dword [rbp + 0x20], 0x12
cmove r14d, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x18]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x140067dc0
test r14b, r14b
jne 0x140067fd3
mov r8d, dword [0x1402a9cb8]
test r8d, r8d
je 0x140067e6f
mov r9d, dword [0x1402a9cbc]
test r9d, r9d
je 0x140067e6f
mov rcx, qword [0x1402a9cb0]
test rcx, rcx
je 0x140067e43
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1402a9cb0], r13
mov r8d, dword [0x1402a9cb8]
mov r9d, dword [0x1402a9cbc]
mov rcx, qword [0x1402a9ca8]
mov rax, qword [rcx]
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor edx, edx
call qword [rax + 0x68]
mov dword [0x1402a9cbc], r13d
mov dword [0x1402a9cb8], r13d
call fcn.140056e50
call fcn.140002170
call fcn.140003100
call fcn.140015aa0
nop
lea rdx, [rbp + 0x50]
mov rcx, r15
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x1402a97d0]
cmp qword [rax + 0x4030], 0
je 0x140067f05
cvttss2si edi, dword [0x1402a87a4]
cvttss2si esi, dword [0x1402a87a0]
movaps xmm2, xmm6
xor edx, edx
lea rcx, [rbp + 0x180]
call fcn.14000ee40
movd xmm0, dword [rbp + 0x54]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax + 4]
cvttss2si ebx, xmm0
movaps xmm2, xmm6
xor edx, edx
lea rcx, [rbp + 0x10]
call fcn.14000ee40
movd xmm0, dword [rbp + 0x50]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax]
cvttss2si edx, xmm0
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], edi
mov r9d, esi
mov r8d, ebx
mov rcx, r15
call qword [sym.imp.USER32.dll_MoveWindow]
lea rcx, [0x1402a997a]
call fcn.14005fac0
nop
call fcn.140017580
mov ecx, 3
call fcn.14000f420
movss xmm0, dword [rax]
movss dword [rbp + 0x188], xmm0
mov ecx, 3
call fcn.14000f420
movss xmm0, dword [rax + 4]
movss dword [rbp + 0x18c], xmm0
mov ecx, 3
call fcn.14000f420
movss xmm0, dword [rax + 8]
movss dword [rbp + 0x190], xmm0
mov ecx, 3
call fcn.14000f420
movss xmm0, dword [rax + 0xc]
movss dword [rbp + 0x194], xmm0
mov rcx, qword [0x1402a9ca0]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x1402a9cb0]
mov edx, r12d
call qword [rax + 0x108]
mov rcx, qword [0x1402a9ca0]
mov rax, qword [rcx]
lea r8, [rbp + 0x188]
mov rdx, qword [0x1402a9cb0]
call qword [rax + 0x190]
call fcn.14000e840
mov rcx, rax
call fcn.1400021b0
mov rcx, qword [0x1402a9ca8]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, r12d
call qword [rax + 0x40]
nop
jmp 0x140067da2
call fcn.140002e20
call fcn.140003410
xor ecx, ecx
call fcn.14000c440
nop
mov rcx, qword [0x1402a9cb0]
test rcx, rcx
je 0x140067ffe
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1402a9cb0], r13
mov rcx, qword [0x1402a9ca8]
test rcx, rcx
je 0x140068017
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1402a9ca8], r13
mov rcx, qword [0x1402a9ca0]
test rcx, rcx
je 0x140068030
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1402a9ca0], r13
mov rcx, qword [0x1402a9c98]
test rcx, rcx
je 0x140068049
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1402a9c98], r13
mov rcx, r15
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp - 0x28]
mov rcx, qword [rbp]
call qword [sym.imp.USER32.dll_UnregisterClassW]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectEnd]
xor eax, eax
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.14007ffa0
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret