Function at 0x140099b10
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rdi
push r14
lea rbp, [rax - 0x5f]
sub rsp, 0xf0
mov rcx, qword [0x1400ec178]
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rax - 0x88], xmm12
movaps xmmword [rsp + 0x70], xmm13
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r15
movaps xmmword [rax - 0x48], xmm8
mov rax, qword [rcx + 0x4000]
movaps xmmword [rsp + 0x60], xmm14
movss xmm14, dword [0x1400b596c]
movss xmm1, dword [rax + 0x114]
subss xmm1, dword [rax + 0x2c]
addss xmm1, dword [rax + 0x90]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
addss xmm1, xmm14
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], 1
addss xmm0, xmm1
movss dword [rax + 0x114], xmm0
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
mov byte [rax + 0x151], 1
addss xmm0, dword [0x1400b5994]
movss dword [rax + 0x110], xmm0
call fcn.14007f8b0
mov rbx, qword [0x1400ec178]
lea r15, str.Connect
movss xmm9, dword [0x1400b59d0]
xor r14d, r14d
cmp byte [0x1400d50c5], r14b
mov rsi, rbx
movss xmm11, dword [0x1400b59c0]
mov rdi, rbx
mov rax, qword [rbx + 0x4000]
movss xmm12, dword [0x1400b5900]
movss xmm7, dword [0x1400b59a8]
movss xmm13, dword [0x1400b58d0]
movss xmm1, dword [rax + 0x114]
subss xmm1, dword [rax + 0x2c]
addss xmm1, dword [rax + 0x90]
mov byte [rax + 0xc0], 1
mov rax, qword [rbx + 0x4000]
addss xmm1, xmm14
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], 1
addss xmm0, xmm1
movss dword [rax + 0x114], xmm0
je 0x14009a061
movss xmm2, dword [rbx + 0x3d38]
lea rdi, str.Click_to_recover_password
mov rcx, qword [rbx + 0x3d30]
lea rdx, [rbp + 0x67]
mov qword [rsp + 0x30], r14
movaps xmm3, xmm11
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm9
movaps xmmword [rsp + 0xa0], xmm10
call fcn.140079950
movss xmm6, dword [rbx + 0x3928]
lea rcx, [rbx + 0x4a78]
movss xmm0, dword [rbp + 0x67]
addss xmm6, xmm6
addss xmm0, xmm12
mov dword [rbp - 0x69], 0x15
movaps xmm8, xmm7
lea rdx, [rbp - 0x69]
addss xmm6, dword [rbp + 0x6b]
cvttss2si eax, xmm0
movd xmm10, eax
mov rax, qword [rbx + 0x4000]
cvtdq2ps xmm10, xmm10
subss xmm8, xmm10
mulss xmm8, xmm13
movaps xmm1, xmm8
subss xmm1, dword [rbx + 0x3934]
mov byte [rax + 0xc0], 1
mov rax, qword [rbx + 0x4000]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
mov byte [rax + 0x151], 1
addss xmm0, xmm1
movss dword [rax + 0x110], xmm0
movups xmm0, xmmword [rbx + 0x3b1c]
movups xmmword [rbp - 0x65], xmm0
call fcn.140069d20
cmp dword [rbx + 0x4a74], 0x15
je 0x140099d82
mov qword [rbx + 0x3b1c], r14
mov qword [rbx + 0x3b24], r14
movaps xmm0, xmmword [0x1400b5c00]
lea rdx, [rbp - 0x69]
mov ecx, 0x16
movups xmmword [rbp - 0x69], xmm0
call fcn.140052220
mov rbx, qword [0x1400ec178]
lea rdx, [rbp - 0x69]
mov dword [rbp - 0x69], 0x17
movups xmm0, xmmword [rbx + 0x3b3c]
lea rcx, [rbx + 0x4a78]
movups xmmword [rbp - 0x65], xmm0
call fcn.140069d20
cmp dword [rbx + 0x4a74], 0x17
je 0x140099df5
mov dword [rbx + 0x3b3c], 0x3f800000
mov dword [rbx + 0x3b40], 0x3f800000
mov dword [rbx + 0x3b44], 0x3f800000
mov dword [rbx + 0x3b48], 0x3e4ccccd
lea rdx, [rbp + 0x67]
movss dword [rbp + 0x67], xmm10
movss dword [rbp + 0x6b], xmm6
call fcn.14007e5a0
movaps xmm10, xmmword [rsp + 0xa0]
test al, al
je 0x140099e47
cmp qword [0x1400ec1b0], 0xf
lea r8, [0x1400ec198]
mov dword [rsp + 0x28], 5
cmova r8, qword [0x1400ec198]
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], r14
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov r8, qword [0x1400ec178]
mov r9d, 3
mov eax, dword [r8 + 0x4a78]
cmp eax, r9d
jge 0x140099e70
mov r9d, eax
test eax, eax
jle 0x140099ea9
nop word [rax + rax]
mov rcx, qword [r8 + 0x4a80]
dec r9d
cdqe
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, rax
movups xmmword [r8 + rax*8 + 0x39cc], xmm0
dec dword [r8 + 0x4a78]
mov eax, dword [r8 + 0x4a78]
test r9d, r9d
jg 0x140099e70
xor ecx, ecx
call fcn.140055470
test al, al
je 0x140099ec0
lea rcx, str.Recover_your_password
call fcn.140062e70
mov rcx, qword [0x1400ec178]
mov rdx, rdi
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
mov byte [rax + 0x151], 1
addss xmm0, xmm8
movss dword [rax + 0x110], xmm0
mov rax, qword [rcx + 0x4000]
movss xmm0, dword [rcx + 0x3d38]
addss xmm0, dword [rcx + 0x3938]
movss xmm1, dword [rax + 0x114]
subss xmm1, dword [rax + 0x2c]
addss xmm1, dword [rax + 0x90]
subss xmm1, xmm0
addss xmm1, dword [rcx + 0x3928]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
lea rcx, [0x1400b44a8]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], 1
addss xmm0, xmm1
movss dword [rax + 0x114], xmm0
call fcn.14007d9c0
mov rbx, qword [0x1400ec178]
lea rdx, [rbp + 0x67]
mov qword [rsp + 0x30], r14
movaps xmm3, xmm11
mov qword [rsp + 0x28], r15
movss dword [rsp + 0x20], xmm9
mov rax, qword [rbx + 0x4000]
movss xmm1, dword [rax + 0x114]
subss xmm1, dword [rax + 0x2c]
addss xmm1, dword [rax + 0x90]
mov byte [rax + 0xc0], 1
mov rax, qword [rbx + 0x4000]
addss xmm1, xmm14
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], 1
addss xmm0, xmm1
movss dword [rax + 0x114], xmm0
movss xmm2, dword [rbx + 0x3d38]
mov rcx, qword [rbx + 0x3d30]
call fcn.140079950
movss xmm2, dword [rbx + 0x3924]
mov rsi, rbx
movss xmm0, dword [rbp + 0x67]
addss xmm2, xmm2
addss xmm0, xmm12
mov rdi, rbx
cvttss2si eax, xmm0
movd xmm1, eax
mov rax, qword [rbx + 0x4000]
cvtdq2ps xmm1, xmm1
mov byte [rax + 0xc0], 1
mov rax, qword [rbx + 0x4000]
addss xmm2, xmm1
movaps xmm1, xmm7
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
mov byte [rax + 0x151], 1
subss xmm1, xmm2
mulss xmm1, xmm13
addss xmm1, xmm0
movss dword [rax + 0x110], xmm1
movss xmm2, dword [rbx + 0x3d38]
lea rdx, [rbp + 0x67]
mov rcx, qword [rbx + 0x3d30]
movaps xmm3, xmm11
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
movss dword [rsp + 0x20], xmm9
call fcn.140079950
movss xmm0, dword [rbp + 0x67]
lea rbx, str.Sign_Up
movss xmm6, dword [rsi + 0x3924]
addss xmm0, xmm12
movss xmm2, dword [rdi + 0x3d38]
addss xmm6, xmm6
mov rcx, qword [rdi + 0x3d30]
lea rdx, [rbp + 0x67]
mov qword [rsp + 0x30], r14
movaps xmm3, xmm11
mov qword [rsp + 0x28], rbx
cvttss2si eax, xmm0
movss dword [rsp + 0x20], xmm9
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm6, xmm1
call fcn.140079950
movss xmm8, dword [rsi + 0x3924]
lea rdx, [rbp + 0x67]
movss xmm0, dword [rbp + 0x67]
addss xmm8, xmm8
addss xmm0, xmm12
movss dword [rbp + 0x67], xmm6
mov rcx, r15
mov dword [rbp + 0x6b], r14d
cvttss2si eax, xmm0
movd xmm1, eax
mov rax, qword [rdi + 0x4000]
cvtdq2ps xmm1, xmm1
mov byte [rax + 0xc0], 1
mov rax, qword [rdi + 0x4000]
addss xmm8, xmm1
movaps xmm1, xmm7
mov byte [rax + 0x151], 1
movaps xmm0, xmm8
addss xmm0, xmm6
xorps xmm6, xmm6
addss xmm0, dword [0x1400b5960]
subss xmm1, xmm0
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
mulss xmm1, xmm13
addss xmm1, xmm0
movss dword [rax + 0x110], xmm1
call fcn.14007e260
movaps xmm14, xmmword [rsp + 0x60]
mov r15, qword [rsp + 0x120]
mov rsi, qword [rsp + 0x118]
test al, al
je 0x14009a1a7
cmp byte [0x1400d50c5], r14b
je 0x14009a1a2
call fcn.140098e50
jmp 0x14009a1a7
call fcn.140099540
cmp byte [0x1400d50c5], r14b
je 0x14009a207
movaps xmm1, xmm9
xorps xmm0, xmm0
call fcn.140061e30
mov rcx, rbx
movss dword [rbp + 0x67], xmm8
lea rdx, [rbp + 0x67]
mov dword [rbp + 0x6b], r14d
call fcn.14007e260
test al, al
je 0x14009a207
cmp qword [0x1400ec1d0], 0xf
lea r8, [0x1400ec1b8]
mov dword [rsp + 0x28], 5
cmova r8, qword [0x1400ec1b8]
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], r14
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp qword [0x1400d5158], r14
movaps xmm8, xmmword [rsp + 0xc0]
je 0x14009a2f1
cmp qword [0x1400d5160], 0xf
lea rdi, [0x1400d5148]
mov rbx, qword [0x1400ec178]
mov rax, rdi
cmova rax, qword [0x1400d5148]
test rax, rax
je 0x14009a285
movss xmm2, dword [rbx + 0x3d38]
lea rdx, [rbp + 0x67]
mov rcx, qword [rbx + 0x3d30]
movaps xmm3, xmm11
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm9
call fcn.140079950
movss xmm0, dword [rbp + 0x67]
addss xmm0, xmm12
cvttss2si eax, xmm0
movd xmm6, eax
cvtdq2ps xmm6, xmm6
mov rax, qword [rbx + 0x4000]
subss xmm7, xmm6
lea rdx, [0x1400b44a8]
lea rcx, [rbp - 0x69]
mov byte [rax + 0xc0], 1
mov rax, qword [rbx + 0x4000]
mulss xmm7, xmm13
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
mov byte [rax + 0x151], 1
addss xmm0, xmm7
movss dword [rax + 0x110], xmm0
cmp qword [0x1400d5160], 0xf
movaps xmm0, xmmword [0x1400b5c20]
cmova rdi, qword [0x1400d5148]
mov r8, rdi
movups xmmword [rbp - 0x69], xmm0
call fcn.14007da30
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret