Function at 0x14007aba0
Capabilities:
Create thread
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x468]
sub rsp, 0x540
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140112080]
xor rax, rsp
mov qword [rbp + 0x390], rax
xor r15d, r15d
mov dword [rsp + 0x64], r15d
lea rcx, [0x1401b9280]
call fcn.1400891a0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov dword [rbp + 0x230], 0x50
mov dword [rbp + 0x234], 0x40
lea rax, [0x14007d2f0]
mov qword [rbp + 0x238], rax
mov qword [rbp + 0x240], r15
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp + 0x248], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x260], xmm1
lea rdi, str.taskmgr
mov qword [rbp + 0x270], rdi
mov qword [rbp + 0x278], r15
lea rcx, [rbp + 0x230]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r12d, 1
mov ecx, r12d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
lea ebx, [rax - 0xf0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
sub eax, 0xd4
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], 0x1e2
mov dword [rsp + 0x30], 0x1ab
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
mov r8, rdi
mov rdx, qword [rbp + 0x270]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x1401b9210], rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongW]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [0x1401b9210]
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, qword [0x1401b9210]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x140101aa0]
movdqu xmmword [rbp + 0x2d0], xmm0
lea rdx, [rbp + 0x2d0]
mov rcx, qword [0x1401b9210]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xorps xmm0, xmm0
movups xmmword [0x1401b9218], xmm0
lea rdx, [0x1401b9218]
mov rcx, qword [0x1401b9210]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rbp + 0x1b4], r15
mov qword [rbp + 0x1c8], 2
mov qword [rbp + 0x1e0], 2
mov qword [rbp + 0x1a0], r15
mov dword [rbp + 0x1b0], Ordinal_32
mov dword [rbp + 0x1a8], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x1ac], r12d
mov dword [rbp + 0x1c4], reloc.WLDAP32.dll_Ordinal_32
mov rax, qword [0x1401b9210]
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x1bc], r12
mov qword [rbp + 0x1d8], r12
mov dword [rbp + 0x2e0], 0xb000
mov dword [rbp + 0x2e4], 0xa000
lea rbx, [0x1401b9630]
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x280]
mov qword [rsp + 0x50], rax
lea rdi, [0x1401b9610]
mov qword [rsp + 0x48], rdi
lea rsi, [0x1401b9608]
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x2e0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
cmp eax, 0x887a0004
jne 0x14007aee2
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x280]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x2e0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 5
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x14007af07
call fcn.14007d270
mov rdx, qword [rbp + 0x248]
mov rcx, qword [rbp + 0x270]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r12d
jmp 0x14007d1e9
mov rcx, qword [0x1401b9608]
mov rax, qword [rcx]
lea r9, [rbp + 0x190]
lea r8, [0x140101878]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [0x1401b9610]
mov rax, qword [rcx]
lea r9, [0x1401b9600]
xor r8d, r8d
mov rdx, qword [rbp + 0x190]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x190]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov edx, 0xa
mov rcx, qword [0x1401b9210]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1401b9210]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x1401b9180]
mov ecx, 0x6280
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r9, rax
mov r8, qword [0x1401b9180]
test r8, r8
je 0x14007afef
mov r10d, dword [r8 + 0x3f58]
movsx rax, word [r8 + 0x60f0]
lea rdx, [r8 + 0x60f4]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x14007afe4
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60f0], cx
movsx rax, cx
lea rdx, [r8 + 0x60f4]
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], r15d
inc word [rdx + 4]
inc dword [r8 + 0x60e8]
mov qword [rsp + 0x70], r9
lea rax, [rsp + 0x60]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x68], r9
test r9, r9
je 0x14007b014
xor edx, edx
mov rcx, r9
call fcn.140037ed0
jmp 0x14007b017
mov rax, r15
mov qword [0x1401b9180], rax
call fcn.14003c360
test rbx, rbx
je 0x14007b031
mov qword [0x1401b9180], rbx
jmp 0x14007b038
mov rbx, qword [0x1401b9180]
or dword [rbx + 8], 3
xor ecx, ecx
call fcn.14005b230
mov rcx, qword [0x1401b9210]
call fcn.140064f80
call fcn.140064db0
movups xmm1, xmmword [0x140112110]
divps xmm1, xmmword [0x140101e80]
movups xmmword [rbp + 0x2a0], xmm1
mov rdi, qword [0x1401b9180]
mov dword [rbp + 0x2f0], 2
movups xmm0, xmmword [rdi + 0x39ec]
movups xmmword [rbp + 0x2f4], xmm0
lea rcx, [rdi + 0x4a78]
lea rdx, [rbp + 0x2f0]
call fcn.140052690
cmp dword [rdi + 0x4a74], 2
je 0x14007b0b2
movups xmm0, xmmword [rbp + 0x2a0]
movups xmmword [rdi + 0x39ec], xmm0
movdqa xmm6, xmmword [0x140101c00]
mov rdi, qword [0x1401b9180]
mov dword [rbp + 0x2f0], 3
movups xmm0, xmmword [rdi + 0x39fc]
movups xmmword [rbp + 0x2f4], xmm0
lea rcx, [rdi + 0x4a78]
lea rdx, [rbp + 0x2f0]
call fcn.140052690
cmp dword [rdi + 0x4a74], 3
je 0x14007b0fc
movups xmmword [rdi + 0x39fc], xmm6
mov rax, qword [0x1401b9180]
mov qword [rax + 0x3914], 0x40a00000
mov qword [rax + 0x38f8], 0x41200000
mov qword [rax + 0x392c], 0x40a00000
xorps xmm2, xmm2
movups xmmword [rbp + 0x1a0], xmm2
movups xmmword [rbp + 0x1b0], xmm2
movups xmmword [rbp + 0x1e0], xmm2
movups xmmword [rbp + 0x1f0], xmm2
mov byte [rbp + 0x1ac], 1
mov dword [rbp + 0x1b8], 2
mov dword [rbp + 0x1bc], r12d
mov dword [rbp + 0x1e4], 0x7f7fffff
mov dword [rbp + 0x1f0], 0x3f800000
mov dword [rbp + 0x1f4], 0x3f800000
mov edi, 0xffff
mov word [rbp + 0x1f8], di
movaps xmm0, xmmword [rbp + 0x1a0]
movaps xmmword [rbp + 0xe0], xmm0
movaps xmm1, xmmword [rbp + 0x1b0]
movaps xmmword [rbp + 0xf0], xmm1
movaps xmmword [rbp + 0x100], xmm2
movaps xmmword [rbp + 0x110], xmm2
movaps xmm0, xmmword [rbp + 0x1e0]
movaps xmmword [rbp + 0x120], xmm0
movaps xmm1, xmmword [rbp + 0x1f0]
movaps xmmword [rbp + 0x130], xmm1
movaps xmmword [rbp + 0x140], xmm2
movaps xmmword [rbp + 0x150], xmm2
movaps xmmword [rbp + 0x160], xmm2
lea rax, [0x14011d2c0]
mov qword [rbp + 0xe0], rax
mov dword [rbp + 0xe8], 0x4d33c
mov dword [rbp + 0xf4], 0x41880000
lea rdx, [rbp + 0xe0]
mov rcx, qword [rbx + 0x38]
call fcn.14005f640
mov qword [0x1401b9270], rax
xorps xmm2, xmm2
movups xmmword [rbp + 0x1a0], xmm2
movups xmmword [rbp + 0x1b0], xmm2
movups xmmword [rbp + 0x1e0], xmm2
movups xmmword [rbp + 0x1f0], xmm2
mov byte [rbp + 0x1ac], 1
mov dword [rbp + 0x1b8], 2
mov dword [rbp + 0x1bc], r12d
mov dword [rbp + 0x1e4], 0x7f7fffff
mov dword [rbp + 0x1f0], 0x3f800000
mov dword [rbp + 0x1f4], 0x3f800000
mov word [rbp + 0x1f8], di
movaps xmm0, xmmword [rbp + 0x1a0]
movaps xmmword [rbp + 0xe0], xmm0
movaps xmm1, xmmword [rbp + 0x1b0]
movaps xmmword [rbp + 0xf0], xmm1
movaps xmmword [rbp + 0x100], xmm2
movaps xmmword [rbp + 0x110], xmm2
movaps xmm0, xmmword [rbp + 0x1e0]
movaps xmmword [rbp + 0x120], xmm0
movaps xmm1, xmmword [rbp + 0x1f0]
movaps xmmword [rbp + 0x130], xmm1
movaps xmmword [rbp + 0x140], xmm2
movaps xmmword [rbp + 0x150], xmm2
movaps xmmword [rbp + 0x160], xmm2
lea rax, [0x14016ad50]
mov qword [rbp + 0xe0], rax
mov dword [rbp + 0xe8], 0x4d4a8
mov dword [rbp + 0xf4], 0x41c80000
lea rdx, [rbp + 0xe0]
mov rcx, qword [rbx + 0x38]
call fcn.14005f640
mov qword [rsp + 0x30], r15
lea rax, [0x1401b9248]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8d, 0xa561
lea rdx, [0x140112460]
mov rcx, qword [0x1401b9610]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov qword [rsp + 0x30], r15
lea rax, [0x1401b9260]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8d, 0x108
lea rdx, [0x1401b8200]
mov rcx, qword [0x1401b9610]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov qword [rsp + 0x30], r15
lea rax, [0x1401b9278]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8d, 0x7c
lea rdx, [0x14011d240]
mov rcx, qword [0x1401b9610]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov qword [rsp + 0x30], r15
lea rax, [0x1401b9228]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8d, 0x16e
lea rdx, [0x14011d0d0]
mov rcx, qword [0x1401b9610]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov qword [rsp + 0x30], r15
lea rax, [0x1401b9268]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8d, 0x407
lea rdx, [0x14011ccc0]
mov rcx, qword [0x1401b9610]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov qword [rsp + 0x30], r15
lea rax, [0x1401b9238]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8d, 0x2e2
lea rdx, [0x14011c9d0]
mov rcx, qword [0x1401b9610]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov qword [rsp + 0x30], r15
lea rax, [0x1401b9258]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8d, 0x749
lea rdx, [0x14016a600]
mov rcx, qword [0x1401b9610]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov qword [rsp + 0x30], r15
lea rax, [0x1401b9250]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8d, 0x340
lea rdx, [0x140112120]
mov rcx, qword [0x1401b9610]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
xorps xmm10, xmm10
mov dword [rbp + 0x190], 0
mov ebx, Ordinal_41
movss xmm7, dword [0x140101ea0]
movss xmm8, dword [0x1401019fc]
movss xmm9, dword [0x14010192c]
movss xmm11, dword [0x14010194c]
movss xmm12, dword [0x140101980]
nop dword [rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x44fc3a35
imul r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x1db
sub r8d, ecx
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x5d9f7391
imul r8d
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x2bc
sub r8d, ecx
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x2f0], xmm0
movss dword [rbp + 0x2f4], xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 2
sub r8d, ecx
movd xmm1, r8d
cvtdq2ps xmm1, xmm1
divss xmm1, xmm8
addss xmm1, xmm9
xorps xmm1, xmm7
movsd xmm0, qword [rbp + 0x190]
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm1
shufps xmm0, xmm0, 0xe1
movsd qword [rbp + 0x190], xmm0
movsd qword [rbp + 0x2f8], xmm0
movss dword [rbp + 0x300], xmm12
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x55555556
imul r8d
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*2]
sub r8d, ecx
inc r8d
movd xmm2, r8d
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm11
movss dword [rbp + 0x304], xmm2
mov dword [rbp + 0x308], 0x60ffffff
mov rdx, qword [0x1401b9620]
cmp rdx, qword [0x1401b9628]
je 0x14007b625
movups xmm0, xmmword [rbp + 0x2f0]
movups xmmword [rdx], xmm0
movaps xmm1, xmm12
unpcklps xmm1, xmm2
movsd qword [rdx + 0x10], xmm1
mov dword [rdx + 0x18], 0x60ffffff
add qword [0x1401b9620], 0x1c
jmp 0x14007b631
lea r8, [rbp + 0x2f0]
call fcn.14007d980
sub rbx, 1
jne 0x14007b4e0
xor r13b, r13b
mov dword [rbp + 0x280], r13d
movss xmm9, dword [0x1401019e4]
movdqa xmm12, xmmword [0x140101e70]
movdqa xmm8, xmmword [0x140101e60]
movss xmm15, dword [0x140101910]
movss xmm14, dword [0x1401019bc]
movss xmm7, dword [0x140101a34]
movss xmm13, dword [0x14010190c]
movss xmm6, dword [0x1401019ec]
movabs r14, 0x4924924924924925
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14007b70a
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
movzx r13d, r13b
cmp dword [rbp + 0x1a8], 0x12
cmove r13d, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x14007b6b3
mov dword [rbp + 0x280], r13d
test r13b, r13b
jne 0x14007ceca
mov rax, qword [0x1401b9180]
test rax, rax
je 0x14007b71f
mov rcx, qword [rax + 0x98]
jmp 0x14007b722
mov rcx, r15
cmp qword [rcx + 0x48], 0
jne 0x14007b72e
call fcn.140064750
call fcn.140065990
call fcn.14003e9f0
xor edx, edx
mov r8d, Ordinal_60
lea rcx, str.Main
call fcn.1400445b0
mov dword [rbp - 0x60], 0x43d48000
mov dword [rbp - 0x5c], 0x43f00000
xor r8d, r8d
lea rdx, [rbp - 0x60]
mov rcx, qword [0x1401b9180]
mov rcx, qword [rcx + 0x4000]
call fcn.1400472f0
lea rdx, [0x1401b9218]
mov rcx, qword [0x1401b9210]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x1401b9180]
mov rcx, qword [rax + 0x4000]
movss xmm2, dword [rcx + 0x28]
ucomiss xmm2, xmm10
jp 0x14007b7b0
jne 0x14007b7b0
movss xmm0, dword [rcx + 0x2c]
ucomiss xmm0, xmm10
jp 0x14007b7b0
je 0x14007b81a
movd xmm0, dword [0x1401b921c]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rcx + 0x2c]
cvttss2si r8d, xmm0
movd xmm1, dword [0x1401b9218]
cvtdq2ps xmm1, xmm1
addss xmm1, xmm2
cvttss2si edx, xmm1
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 0x1e0
mov r9d, 0x1a9
mov rcx, qword [0x1401b9210]
call qword [sym.imp.USER32.dll_MoveWindow]
mov qword [rbp - 0x58], 0
mov rax, qword [0x1401b9180]
xor r8d, r8d
lea rdx, [rbp - 0x58]
mov rcx, qword [rax + 0x4000]
call fcn.140047180
mov edi, r15d
mov r9, qword [0x1401b9620]
mov rcx, r9
mov r8, qword [0x1401b9618]
sub rcx, r8
mov rax, r14
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x14007b8fc
mov rbx, r15
nop
movss xmm1, dword [r8 + rbx + 0xc]
mulss xmm1, xmm15
mulss xmm1, xmm6
movss xmm0, dword [r8 + rbx + 4]
addss xmm0, xmm1
movss dword [r8 + rbx + 4], xmm0
mov r8, qword [0x1401b9618]
comiss xmm10, dword [r8 + rbx + 4]
jbe 0x14007b8c9
mov dword [r8 + rbx + 4], 0x43ed8000
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x5d9f7391
imul r8d
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x2bc
sub r8d, ecx
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
mov rax, qword [0x1401b9618]
movss dword [rax + rbx], xmm0
mov r8, qword [0x1401b9618]
inc edi
add rbx, 0x1c
mov r9, qword [0x1401b9620]
mov rcx, r9
sub rcx, r8
mov rax, r14
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, edi
cmp rax, rdx
jb 0x14007b850
mov esi, r15d
sub r9, r8
mov rax, r14
imul r9
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x14007b9ed
mov r8, r15
mov rdi, r15
movabs r13, 0x4924924924924925
nop dword [rax]
mov rcx, qword [0x1401b9180]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
mov rbx, qword [rax + 0x2a8]
mov rax, qword [0x1401b9618]
mov r14d, dword [rax + rdi + 0x18]
movss xmm2, dword [rax + rdi + 0x14]
imul rdx, r8, 0x1c
add rdx, rax
test r14d, 0xff000000
je 0x14007b9b6
comiss xmm11, xmm2
ja 0x14007b9b6
mov dword [rsp + 0x20], Ordinal_50
xor r9d, r9d
mov rcx, rbx
call fcn.14005d5a0
mov r8d, dword [rbx + 0x78]
dec r8d
mov dword [rbx + 0x78], r8d
mov r9d, r14d
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.14005d010
mov dword [rbx + 0x78], r15d
mov rax, qword [0x1401b9618]
inc esi
add rdi, 0x1c
movsxd r8, esi
mov rcx, qword [0x1401b9620]
sub rcx, rax
mov rax, r13
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r8, rdx
jb 0x14007b930
mov r13d, dword [rbp + 0x280]
mov rdi, qword [0x1401b9210]
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rbx, rax
test rax, rax
je 0x14007ba65
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14007ba5c
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
movdqu xmmword [rbp + 0x290], xmm0
mov dword [rbp + 0x170], reloc.WS2_32.dll_send
lea rcx, [rbp + 0x290]
mov qword [rbp + 0x178], rcx
mov dword [rbp + 0x180], reloc.WS2_32.dll_recv
lea rdx, [rbp + 0x170]
mov rcx, rdi
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [0x1401b9180]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
mov r14, qword [rax + 0x2a8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
movss xmm6, dword [0x1401019c4]
addss xmm1, xmm6
addss xmm0, dword [0x140101a3c]
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
movups xmmword [rbp + 0x2e0], xmm12
mov dword [rbp - 0x50], 0x3f800000
mov dword [rbp - 0x4c], 0x3f800000
mov qword [rbp - 0x48], 0
mov dword [rbp - 0x40], 0x41a00000
mov dword [rbp - 0x3c], 0x41a00000
lea rax, [rbp + 0x290]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2e0]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x50]
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x40]
mov rcx, qword [0x1401b9228]
call fcn.140069d90
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.140048430
test al, al
je 0x14007bb60
xor ecx, ecx
call fcn.14003db60
test al, al
jne 0x14007cedf
mov rcx, qword [0x1401b9180]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm1, xmm6
addss xmm0, dword [0x140101a38]
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
movups xmmword [rbp + 0x2e0], xmm12
mov dword [rbp - 0x38], 0x3f800000
mov dword [rbp - 0x34], 0x3f800000
mov qword [rbp - 0x30], 0
mov dword [rbp - 0x28], 0x41980000
mov dword [rbp - 0x24], 0x41980000
lea rax, [rbp + 0x290]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2e0]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x38]
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x28]
mov rcx, qword [0x1401b9278]
call fcn.140069d90
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.140048430
test al, al
je 0x14007bc4c
xor ecx, ecx
call fcn.14003db60
test al, al
je 0x14007bc4c
mov edx, 6
mov rcx, qword [0x1401b9210]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1401b9180]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm1, dword [0x1401b831c]
addss xmm0, dword [0x140101a0c]
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
movups xmmword [rbp + 0x2e0], xmm12
mov dword [rbp - 0x20], 0x3f800000
mov dword [rbp - 0x1c], 0x3f800000
mov qword [rbp - 0x18], 0
mov dword [rbp - 0x10], 0x43110000
mov dword [rbp - 0xc], 0x43110000
lea rax, [rbp + 0x290]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2e0]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x20]
lea r8, [rbp - 0x18]
lea rdx, [rbp - 0x10]
mov rcx, qword [0x1401b9248]
call fcn.140069d90
movss xmm2, dword [0x1401b831c]
addss xmm2, xmm14
mov rcx, qword [0x1401b9180]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm1, xmm2
addss xmm0, dword [0x140101a00]
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
movups xmmword [rbp + 0x2e0], xmm12
mov dword [rbp - 8], 0x3f800000
mov dword [rbp - 4], 0x3f800000
mov qword [rbp], 0
mov dword [rbp + 8], 0x43340000
mov dword [rbp + 0xc], 0x43340000
lea rax, [rbp + 0x290]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2e0]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 8]
lea r8, [rbp]
lea rdx, [rbp + 8]
mov rcx, qword [0x1401b9240]
call fcn.140069d90
mov rcx, qword [0x1401b9270]
call fcn.140047040
mov eax, dword [0x1401b95fc]
test eax, eax
jne 0x14007c418
mov rax, qword [0x1401b9180]
movss xmm1, dword [rax + 0x18]
mulss xmm1, dword [0x1401019a8]
movss xmm0, dword [0x1401019cc]
movss xmm2, dword [0x1401b831c]
subss xmm0, xmm2
mulss xmm0, xmm1
addss xmm2, xmm0
movss dword [0x1401b831c], xmm2
addss xmm2, dword [0x140101a18]
mov dword [rsp + 0x38], r15d
movss xmm6, dword [0x140101a28]
movss dword [rsp + 0x30], xmm6
movss dword [rsp + 0x28], xmm2
movss xmm0, dword [0x1401019f0]
movss dword [rsp + 0x20], xmm0
lea r8, [0x1401b95d0]
lea rdx, [0x140101790]
lea rcx, str.Username
call fcn.140079940
movss xmm0, dword [0x1401b831c]
addss xmm0, dword [0x140101a20]
mov dword [rsp + 0x38], 0x8000
movss dword [rsp + 0x30], xmm6
movss dword [rsp + 0x28], xmm0
movss xmm6, dword [0x1401019f0]
movss dword [rsp + 0x20], xmm6
lea rsi, [0x1401b95e8]
mov r8, rsi
lea rdx, [0x1401017b0]
lea rcx, str.Password
call fcn.140079940
movss xmm2, dword [0x1401b831c]
addss xmm2, xmm7
movdqa xmmword [rbp + 0xc0], xmm8
movdqa xmmword [rbp + 0x90], xmm8
movdqa xmmword [rbp + 0xd0], xmm8
movdqa xmmword [rbp + 0x170], xmm8
mov rcx, qword [0x1401b9180]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm1, xmm2
addss xmm0, xmm6
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
mov rbx, qword [rax + 0x2a8]
mov dword [rbp + 0x10], 0x43960000
mov dword [rbp + 0x14], 0x42200000
lea rdx, [rbp + 0x10]
lea rcx, [0x1401017d4]
call fcn.140069160
movzx edi, al
mov rcx, qword [0x1401b9180]
movsd xmm0, qword [rcx + 0x49bc]
movsd qword [rbp + 0x290], xmm0
movsd xmm1, qword [rcx + 0x49c4]
movsd qword [rbp + 0x2e0], xmm1
lea rcx, [rbp + 0xc0]
call fcn.14003a530
mov r10d, eax
lea rcx, [rbp + 0x90]
call fcn.14003a530
mov r9d, eax
lea rcx, [rbp + 0xd0]
call fcn.14003a530
mov r8d, eax
lea rcx, [rbp + 0x170]
call fcn.14003a530
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x20], r8d
mov r9d, eax
lea r8, [rbp + 0x2e0]
lea rdx, [rbp + 0x290]
mov rcx, rbx
call fcn.14005e700
movups xmmword [rbp + 0x170], xmm8
lea rcx, [rbp + 0x170]
call fcn.14003a530
movss xmm1, dword [rbp + 0x2e4]
movss xmm3, dword [0x140101980]
addss xmm1, xmm3
movss xmm0, dword [rbp + 0x2e0]
addss xmm0, xmm3
movss dword [rbp + 0x18], xmm0
movss dword [rbp + 0x1c], xmm1
movss xmm6, dword [rbp + 0x294]
movaps xmm2, xmm6
subss xmm2, xmm3
movss xmm7, dword [rbp + 0x290]
movaps xmm0, xmm7
subss xmm0, xmm3
movss dword [rbp + 0x20], xmm0
movss dword [rbp + 0x24], xmm2
movss xmm0, dword [0x140101994]
movss dword [rsp + 0x30], xmm0
movss xmm0, dword [0x1401019a8]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x20]
mov rcx, rbx
call fcn.14005e440
mov rax, qword [0x1401b9180]
mov qword [rsp + 0x30], r15
lea rcx, str.Login
mov qword [rsp + 0x28], rcx
movss xmm0, dword [0x140101a68]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140101a5c]
movss xmm2, dword [rax + 0x3d38]
lea rdx, [rbp + 0x190]
mov rcx, qword [rax + 0x3d30]
call fcn.140062540
movss xmm0, dword [rbp + 0x190]
addss xmm0, dword [0x140101978]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x190], xmm1
movaps xmm2, xmm9
subss xmm2, dword [rbp + 0x194]
mulss xmm2, xmm11
addss xmm2, xmm6
movss xmm0, dword [0x140101a28]
subss xmm0, xmm1
mulss xmm0, xmm11
addss xmm0, xmm7
movss dword [rbp + 0x28], xmm0
movss dword [rbp + 0x2c], xmm2
movups xmmword [rbp + 0x170], xmm12
lea rcx, [rbp + 0x170]
call fcn.14003a530
test eax, 0xff000000
je 0x14007c1bb
mov r8, qword [rbx + 0x38]
movups xmm0, xmmword [rbx + 0x88]
movups xmmword [rbp + 0x170], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm10
lea rcx, [0x1401017d1]
mov qword [rsp + 0x38], rcx
lea rcx, str.Login
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x170]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x28]
movss xmm2, dword [r8 + 0x10]
mov rdx, rbx
mov rcx, qword [r8 + 8]
call fcn.140062760
test dil, dil
je 0x14007c40a
lea rax, [rbp + 0x70]
mov qword [rbp + 0x290], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r15
mov qword [rbp + 0x88], r15
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp byte [rsi + rbx], 0
jne 0x14007c1f0
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
ja 0x14007d251
cmp rbx, 0xf
ja 0x14007c23d
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov r8, rbx
mov rdx, rsi
lea rcx, [rbp + 0x70]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0x70], 0
jmp 0x14007c2dc
mov rdi, rbx
or rdi, 0xf
cmp rdi, rax
jbe 0x14007c25c
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14007c28d
cmp rdi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x14007c277
mov rsi, r15
jmp 0x14007c2b4
cmp rcx, 0x1000
jb 0x14007c2ac
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14007d257
mov rcx, rax
call fcn.1400dffb0
test rax, rax
je 0x14007cee8
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14007c2b4
call fcn.1400dffb0
mov rsi, rax
mov qword [rbp + 0x70], rsi
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], rdi
mov r8, rbx
lea rdx, [0x1401b95e8]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rbx], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], r15
mov rbx, 0xffffffffffffffff
lea rcx, [0x1401b95d0]
nop dword [rax]
inc rbx
cmp byte [rcx + rbx], 0
jne 0x14007c300
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
ja 0x14007d263
cmp rbx, 0xf
ja 0x14007c347
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov r8, rbx
mov rdx, rcx
lea rcx, [rbp - 0x80]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx - 0x80], 0
jmp 0x14007c3e0
mov rdi, rbx
or rdi, 0xf
cmp rdi, rax
jbe 0x14007c366
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14007c397
cmp rdi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x14007c381
mov rsi, r15
jmp 0x14007c3be
cmp rcx, 0x1000
jb 0x14007c3b6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14007d25d
mov rcx, rax
call fcn.1400dffb0
test rax, rax
je 0x14007cee8
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14007c3be
call fcn.1400dffb0
mov rsi, rax
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rdi
mov r8, rbx
lea rdx, [0x1401b95d0]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rbx], 0
lea r8, [rbp + 0x70]
lea rdx, [rbp - 0x80]
lea rcx, [0x1401b9280]
call fcn.14008bca0
cmp byte [0x1401b9490], 0
je 0x14007ceef
mov dword [0x1401b95fc], r12d
jmp 0x14007c421
mov eax, dword [0x1401b95fc]
movss xmm7, dword [0x140101a34]
cmp eax, 1
jne 0x14007cdbe
mov dword [0x1401b95e4], 0
mov rax, qword [0x1401b9180]
movss xmm2, dword [rax + 0x18]
mulss xmm2, dword [0x1401019a8]
movss xmm0, dword [0x140101a74]
movss xmm1, dword [0x1401b831c]
subss xmm0, xmm1
mulss xmm0, xmm2
addss xmm1, xmm0
movss dword [0x1401b831c], xmm1
movss xmm0, dword [0x140101a70]
comiss xmm0, xmm1
jbe 0x14007ce33
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
mov qword [rbp + 0x320], 2
mov qword [rbp + 0x328], reloc.WS2_32.dll_ntohs
movzx eax, word [0x1401017d8]
mov word [rbp + 0x310], ax
mov byte [rbp + 0x312], 0
movups xmmword [rbp + 0x330], xmm0
mov qword [rbp + 0x340], 2
mov qword [rbp + 0x348], reloc.WS2_32.dll_ntohs
movzx eax, word [0x1401017dc]
mov word [rbp + 0x330], ax
mov byte [rbp + 0x332], 0
movups xmmword [rbp + 0x350], xmm0
mov qword [rbp + 0x360], 2
mov qword [rbp + 0x368], reloc.WS2_32.dll_ntohs
movzx eax, word [0x1401017e0]
mov word [rbp + 0x350], ax
mov byte [rbp + 0x352], 0
movups xmmword [rbp + 0x370], xmm0
mov qword [rbp + 0x380], 2
mov qword [rbp + 0x388], reloc.WS2_32.dll_ntohs
movzx eax, word [0x1401017e4]
mov word [rbp + 0x370], ax
mov byte [rbp + 0x372], 0
movss xmm0, dword [0x1401019f8]
movss xmm7, dword [0x1401b8318]
subss xmm0, xmm7
mulss xmm0, xmm2
addss xmm7, xmm0
movss dword [0x1401b8318], xmm7
movups xmm6, xmmword [0x140100428]
mov rbx, qword [0x1401b9270]
subss xmm7, dword [0x1401019f4]
mov rcx, rbx
call fcn.140047040
mov rcx, qword [0x1401b9180]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
mov r10, qword [rax + 0x2a8]
movaps xmm0, xmm6
shufps xmm0, xmm6, 0xff
cvttss2si r8d, xmm0
movaps xmm1, xmm6
shufps xmm1, xmm6, 0xaa
cvttss2si edx, xmm1
movaps xmm0, xmm6
shufps xmm0, xmm6, 0x55
cvttss2si ecx, xmm0
cvttss2si eax, xmm6
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm13
movss dword [rbp + 0xa0], xmm0
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm13
movss dword [rbp + 0xa4], xmm1
movd xmm0, edx
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm13
movss dword [rbp + 0xa8], xmm0
movd xmm1, r8d
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm13
movss dword [rbp + 0xac], xmm1
lea rcx, [rbp + 0xa0]
call fcn.14003a530
mov dword [rbp + 0x30], 0x41c80000
movss dword [rbp + 0x34], xmm7
test eax, 0xff000000
je 0x14007c6a1
test rbx, rbx
jne 0x14007c647
mov rcx, qword [r10 + 0x38]
mov rbx, qword [rcx + 8]
movups xmm0, xmmword [r10 + 0x88]
movups xmmword [rbp + 0x170], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm10
lea rcx, [0x1401017f4]
mov qword [rsp + 0x38], rcx
lea rcx, str.RJS_Spoofer
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x170]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x30]
movss xmm2, dword [0x1401019cc]
mov rdx, r10
mov rcx, rbx
call fcn.140062760
call fcn.1400470e0
movups xmm6, xmmword [0x140100428]
mov rbx, qword [0x1401b9270]
movss xmm7, dword [0x1401b8318]
subss xmm7, dword [0x140101a6c]
mov rcx, rbx
call fcn.140047040
mov rcx, qword [0x1401b9180]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
mov r10, qword [rax + 0x2a8]
movaps xmm0, xmm6
shufps xmm0, xmm6, 0xff
cvttss2si r8d, xmm0
movaps xmm1, xmm6
shufps xmm1, xmm6, 0xaa
cvttss2si edx, xmm1
movaps xmm0, xmm6
shufps xmm0, xmm6, 0x55
cvttss2si ecx, xmm0
cvttss2si eax, xmm6
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm13
movss dword [rbp + 0xb0], xmm0
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm13
movss dword [rbp + 0xb4], xmm1
movd xmm0, edx
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm13
movss dword [rbp + 0xb8], xmm0
movd xmm1, r8d
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm13
movss dword [rbp + 0xbc], xmm1
lea rcx, [rbp + 0xb0]
call fcn.14003a530
mov dword [rbp + 0x38], 0x42be0000
movss dword [rbp + 0x3c], xmm7
test eax, 0xff000000
je 0x14007c7ec
test rbx, rbx
jne 0x14007c792
mov rcx, qword [r10 + 0x38]
mov rbx, qword [rcx + 8]
movups xmm0, xmmword [r10 + 0x88]
movups xmmword [rbp + 0x170], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm10
lea rcx, [0x140101802]
mov qword [rsp + 0x38], rcx
lea rcx, str.Temp_Spoof
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x170]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x38]
movss xmm2, dword [0x1401019cc]
mov rdx, r10
mov rcx, rbx
call fcn.140062760
call fcn.1400470e0
movups xmmword [rbp + 0x170], xmm8
lea rcx, [rbp + 0x170]
call fcn.14003a530
mov r10d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
lea rcx, [rbp + 0x170]
call fcn.14003a530
mov r9d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
lea rcx, [rbp + 0x170]
call fcn.14003a530
mov r8d, eax
movups xmmword [rbp + 0x170], xmm8
lea rcx, [rbp + 0x170]
call fcn.14003a530
movss xmm1, dword [0x1401b8318]
movaps xmm0, xmm1
subss xmm0, dword [0x1401019dc]
mov dword [rbp + 0x40], 0x43d48000
movss dword [rbp + 0x44], xmm0
subss xmm1, dword [0x1401019e0]
mov dword [rbp + 0x48], 0
movss dword [rbp + 0x4c], xmm1
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x20], r8d
mov r9d, eax
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x48]
mov rcx, r14
call fcn.14005e700
mov dword [rbp + 0x50], 0x43be0000
mov dword [rbp + 0x54], 0x42820000
movups xmmword [rbp + 0xd0], xmm12
mov dword [rbp + 0x58], 0x3f800000
mov dword [rbp + 0x5c], 0x3f800000
mov qword [rbp + 0x60], 0
mov dword [rbp + 0x68], 0x42820000
mov dword [rbp + 0x6c], 0x42820000
mov r12d, r15d
mov r15d, 0x87
lea rdi, [rbp + 0x310]
movss xmm4, dword [0x1401b8318]
mov rcx, qword [0x1401b9180]
movss xmm7, dword [0x140101a34]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r12d
cvtdq2ps xmm2, xmm2
addss xmm2, xmm4
mov rsi, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14007c929
mov rsi, qword [rdi]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
addss xmm2, xmm0
addss xmm1, dword [0x1401019d0]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm2
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rbx, qword [rcx + 0x4000]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
mov rcx, rsi
call fcn.140039ec0
mov r14d, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x404c], eax
jne 0x14007c9ca
mov r8, rsi
mov edx, listen
mov ecx, eax
call fcn.140051ba0
xor ebx, ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [rbp + 0x50]
mov edx, r14d
mov rcx, rsi
call fcn.140041230
mov rcx, qword [0x1401b9180]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm1, xmm11
addss xmm0, dword [0x140101998]
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
lea rax, [rbp + 0x170]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x58]
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x68]
mov rcx, qword [0x1401b9248]
call fcn.140069d90
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14007ca83
mov rcx, qword [rdi]
movdqa xmmword [rbp + 0x170], xmm8
movdqa xmmword [rbp + 0x90], xmm8
movdqa xmmword [rbp + 0xc0], xmm8
movdqa xmmword [rbp + 0x290], xmm8
lea rax, [rbp + 0x170]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x90]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x290]
mov qword [rsp + 0x30], rax
movss dword [rsp + 0x28], xmm9
movss dword [rsp + 0x20], xmm9
movaps xmm3, xmm14
movss xmm2, dword [0x140101a2c]
lea rdx, [0x1400f221f]
call fcn.140079bb0
test al, al
je 0x14007cc3c
mov dword [0x1401b95fc], 2
lea rcx, str.spoofcheck2
call qword [sym.imp.KERNEL32.dll_GlobalFindAtomA]
test ax, ax
jne 0x14007cbb0
mov ecx, 1
call fcn.1400dffb0
mov qword [rbp + 0x290], rax
or dword [rsp + 0x64], 1
lea rcx, [rbp + 0x2a8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14007dbc0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x2a0], rax
test rax, rax
je 0x14007cf35
cmp dword [rbp + 0x2a8], 0
je 0x14007cf29
movaps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x170], xmm0
lea rcx, [rbp + 0x170]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14007cf29
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x2a0], xmm0
jmp 0x14007cc3c
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14007cbd4
dec eax
or eax, 0xfffffff0
inc eax
lea edx, [rax + 1]
lea rcx, [rbp + 0x2b0]
call fcn.14007aa90
mov rdx, qword [rbp + 0x2c8]
cmp rdx, 0xf
jbe 0x14007cc24
inc rdx
mov rcx, qword [rbp + 0x2b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007cc1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007cf47
call fcn.1400dfc40
mov qword [rbp + 0x2c0], rbx
mov qword [rbp + 0x2c8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2b0], bl
mov rcx, qword [0x1401b9180]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm1, dword [0x1401019d4]
addss xmm0, dword [0x140101a30]
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x90], xmm12
mov dword [rsp + 0x68], 0x3f800000
mov dword [rsp + 0x6c], 0x3f800000
mov qword [rsp + 0x78], 0
mov dword [rsp + 0x70], 0x41700000
mov dword [rsp + 0x74], 0x41700000
lea rax, [rbp + 0x170]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x90]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x70]
mov rcx, qword [0x1401b9260]
call fcn.140069d90
call fcn.140041640
movss xmm4, dword [0x1401b8318]
movaps xmm2, xmm4
addss xmm2, xmm7
movd xmm3, r15d
cvtdq2ps xmm3, xmm3
mov rcx, qword [0x1401b9180]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm1, xmm2
addss xmm3, xmm0
movss dword [rax + 0x110], xmm3
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
add r15d, 0x2d
add r12d, 0x50
add rdi, 0x20
cmp r15d, 0xb4
jl 0x14007c910
lea r9, [fcn.140074b30]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 4
lea rcx, [rbp + 0x310]
call fcn.1400e0020
mov eax, dword [0x1401b95fc]
xor r15d, r15d
mov r12d, 1
cmp eax, 2
jne 0x14007ce3b
mov dword [0x1401b8318], 0x43fa0000
mov rax, qword [0x1401b9180]
movss xmm3, dword [rax + 0x18]
movaps xmm2, xmm3
addss xmm2, xmm3
movss xmm0, dword [0x140101a14]
movss xmm1, dword [0x1401b831c]
subss xmm0, xmm1
mulss xmm2, xmm0
addss xmm1, xmm2
movss dword [0x1401b831c], xmm1
movss xmm0, dword [0x1401b95e4]
comiss xmm1, dword [0x140101a10]
jbe 0x14007ce21
addss xmm0, xmm3
movss dword [0x1401b95e4], xmm0
comiss xmm0, dword [0x14010199c]
jb 0x14007ce3b
mov dword [0x1401b95fc], r12d
jmp 0x14007ce3b
movss xmm7, dword [0x140101a34]
call fcn.140046980
call fcn.140040b10
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f0], xmm0
mov rcx, qword [0x1401b9630]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x1401b9600]
mov edx, r12d
call qword [rax + 0x108]
mov rcx, qword [0x1401b9630]
mov rax, qword [rcx]
lea r8, [rbp + 0x2f0]
mov rdx, qword [0x1401b9600]
call qword [rax + 0x190]
mov rax, qword [0x1401b9180]
mov rcx, qword [rax + 0x4b10]
mov rax, qword [rcx]
add rax, 0x48
mov rcx, r15
cmp byte [rax], 0
cmovne rcx, rax
call fcn.140063ce0
mov rcx, qword [0x1401b9608]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, r12d
call qword [rax + 0x40]
test r13b, r13b
je 0x14007b683
mov rbx, qword [0x1401b9180]
test rbx, rbx
je 0x14007cf4e
mov rdi, qword [rbx + 0x98]
jmp 0x14007cf51
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140079ea0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14007cf11
dec eax
or eax, 0xfffffff0
inc eax
lea edx, [rax + 1]
lea rcx, [rbp + 0x2b0]
call fcn.14007aa90
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x2a8], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdi, r15
call fcn.140064c90
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x14007cf65
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x14007cf73
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14007cf82
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x88], r15
mov qword [rbx + 0x98], r15
and dword [rbx + 0xc], 0xfffffff7
mov r8, qword [0x1401b9180]
test r8, r8
je 0x14007d003
mov r9d, dword [r8 + 0x3f58]
movsx rdx, word [r8 + 0x60f0]
lea rcx, [r8 + 0x60f4]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x14007cff8
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60f0], cx
movsx rax, cx
lea rcx, [r8 + 0x60f4]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x60ec]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [0x1401b9180]
test r8, r8
je 0x14007d021
mov rdi, qword [r8 + 0x90]
jmp 0x14007d024
mov rdi, r15
lea rbx, [r8 + 8]
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x14007d03e
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r8, qword [0x1401b9180]
mov qword [rbx + 0x78], r15
mov qword [rbx + 0x88], r15
and dword [rbx + 4], 0xfffffff8
test r8, r8
je 0x14007d0b5
mov r9d, dword [r8 + 0x3f58]
movsx rdx, word [r8 + 0x60f0]
lea rcx, [rdx*8 + 0x60f4]
add rcx, r8
cmp dword [rcx], r9d
je 0x14007d0aa
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60f0], cx
movsx rax, cx
lea rcx, [rax*8 + 0x60f4]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x60ec]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1401b9180]
mov qword [0x1401b9180], rbx
call fcn.14003c870
mov qword [0x1401b9180], r15
test rbx, rbx
je 0x14007d162
mov rcx, rbx
call fcn.1400535c0
mov r8, qword [0x1401b9180]
test r8, r8
je 0x14007d159
mov r9d, dword [r8 + 0x3f58]
movsx r10, word [r8 + 0x60f0]
lea rdx, [r8 + 0x60f4]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x14007d14e
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60f0], cx
movsx rax, cx
lea rdx, [r8 + 0x60f4]
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], 0
inc word [rdx + 6]
inc dword [r8 + 0x60ec]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x1401b9600]
test rcx, rcx
je 0x14007d17b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401b9600], r15
mov rcx, qword [0x1401b9608]
test rcx, rcx
je 0x14007d194
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401b9608], r15
mov rcx, qword [0x1401b9630]
test rcx, rcx
je 0x14007d1ad
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401b9630], r15
mov rcx, qword [0x1401b9610]
test rcx, rcx
je 0x14007d1c6
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401b9610], r15
mov rcx, qword [0x1401b9210]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x248]
mov rcx, qword [rbp + 0x270]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
mov rcx, qword [rbp + 0x390]
xor rcx, rsp
call fcn.1400df980
lea r11, [rsp + 0x540]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140070ee0
int3
call fcn.140070e40
nop
call fcn.140070e40
nop
call fcn.140070ee0
int3