Function at 0x140003280
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov r11, rsp
push rbp
push rdi
push r13
lea rbp, [r11 - 0x168]
sub rsp, 0x250
movaps xmmword [r11 - 0x68], xmm8
movaps xmmword [r11 - 0x98], xmm11
mov rax, qword [0x14027b090]
xor rax, rsp
mov qword [rbp + 0xb0], rax
mov rax, qword [0x14027cba0]
mov rdi, r8
mov qword [r11 + 0x10], rbx
add rax, 0x718
mov qword [r11 - 0x20], rsi
xor ebx, ebx
mov qword [r11 - 0x28], r12
mov rsi, rcx
xor ecx, ecx
mov qword [r11 - 0x30], r14
xor r14d, r14d
mov qword [rbp - 8], rax
lea rax, [rsp + 0x40]
mov qword [r11 - 0x38], r15
mov qword [rsp + 0x38], rbx
mov r12, r8
mov r15, rdx
mov qword [rsp + 0x40], rcx
mov byte [rbp + 0x17], cl
lea r9d, [r14 + 0x28]
mov qword [rbp], rax
lea r8, [rbp - 0x10]
mov eax, dword [0x14027cb58]
mov edx, 0x2201c4
mov byte [rbp + 0x10], cl
mov rcx, qword [0x14027cb50]
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
movaps xmmword [r11 - 0xa8], xmm12
shr r12, 0x20
mov qword [rbp - 0x50], r14
mov dword [rbp - 0x48], r14d
mov dword [rbp + 0x11], ebx
mov word [rbp + 0x15], bx
mov dword [rbp - 0x10], 0x85b3e12
mov qword [rbp + 8], 8
mov dword [rbp - 0xc], eax
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [0x14027cba0]
lea r8d, [r14 + 0x40]
xorps xmm0, xmm0
lea rdx, [rbp + 0x70]
add rcx, 0x4b0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
call fcn.140005800
xorps xmm0, xmm0
mov dword [rbp - 0x60], 0x726f574c
movups xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x5c], 0x6170736b
lea rax, [rbp - 0x5f]
mov word [rbp - 0x58], 0x6563
mov r8, 0xffffffffffffffff
mov byte [rbp - 0x56], bl
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
inc r8
cmp byte [rax + r8], bl
jne 0x1400033c7
movaps xmmword [rsp + 0x220], xmm6
lea rdx, [rbp - 0x5f]
lea rcx, [rbp - 0x40]
movaps xmmword [rsp + 0x210], xmm7
call fcn.140004380
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x60]
lea rcx, [0x14027cb98]
call fcn.140009a50
mov rcx, qword [rbp - 0x60]
add rcx, 0x418
call fcn.14000d150
lea rcx, [rbp + 0x58]
lea rdx, [rax + 0xf4]
lea r13, [rax + 0xd0]
call fcn.14000d1f0
xor eax, eax
lea rdx, [rbp + 0x30]
xorps xmm0, xmm0
mov dword [rbp + 0x50], eax
mov rcx, r13
movups xmmword [rbp + 0x30], xmm0
lea r8d, [rax + 0x24]
movups xmmword [rbp + 0x40], xmm0
call fcn.140005800
cmp byte [0x14027cb96], bl
je 0x140003669
mov eax, dword [0x14027cb90]
test eax, eax
jne 0x140003566
cmp byte [0x14027cb95], bl
je 0x140003481
movsd xmm0, qword [r15]
lea rcx, [rbp - 0x70]
mov eax, dword [r15 + 8]
movsd qword [rbp - 0x70], xmm0
mov dword [rbp - 0x68], eax
jmp 0x1400034ce
lea rcx, [rsi + 0x158]
mov qword [rbp - 0x70], rbx
call fcn.14000d150
test rax, rax
jne 0x14000349b
mov dword [rbp - 0x58], ebx
jmp 0x1400034c0
xor ecx, ecx
lea rdx, [rbp - 0x70]
mov qword [rbp - 0x70], rcx
mov r8d, listen
mov dword [rbp - 0x68], ecx
lea rcx, [rax + 0x154]
call fcn.140005800
mov eax, dword [rbp - 0x68]
mov dword [rbp - 0x58], eax
movsd xmm0, qword [rbp - 0x70]
lea rcx, [rbp - 0x60]
movsd qword [rbp - 0x60], xmm0
movsd xmm7, qword [rcx]
mov eax, 0x158
movss xmm6, dword [rcx + 4]
xor ebx, ebx
movss xmm8, dword [rcx + 8]
divss xmm7, dword [0x14027b15c]
lea rcx, [rsi + rax]
mov qword [rbp - 0x70], rbx
divss xmm6, dword [0x14027b178]
divss xmm8, dword [0x14027b15c]
call fcn.14000d150
test rax, rax
je 0x14000352f
xor ecx, ecx
lea r8d, [rbx + 0xc]
mov qword [rbp - 0x70], rcx
lea rdx, [rbp - 0x70]
mov dword [rbp - 0x68], ecx
lea rcx, [rax + 0x148]
call fcn.140005800
mov ebx, dword [rbp - 0x68]
movsd xmm0, qword [rbp - 0x70]
movsd qword [rbp - 0x60], xmm0
movss xmm1, dword [rbp - 0x5c]
movd xmm2, ebx
addss xmm1, xmm6
addss xmm2, xmm8
movss xmm0, dword [rbp - 0x60]
addss xmm0, xmm7
movss dword [rbp - 0x48], xmm2
movd r14d, xmm2
unpcklps xmm0, xmm1
jmp 0x1400036aa
cmp eax, 1
jne 0x140003662
cmp byte [0x14027cb95], bl
je 0x14000358e
movsd xmm0, qword [r15]
lea rcx, [rbp - 0x70]
mov eax, dword [r15 + 8]
movsd qword [rbp - 0x70], xmm0
mov dword [rbp - 0x68], eax
jmp 0x1400035db
lea rcx, [rsi + 0x158]
mov qword [rbp - 0x70], rbx
call fcn.14000d150
test rax, rax
jne 0x1400035a8
mov dword [rbp - 0x58], ebx
jmp 0x1400035cd
xor ecx, ecx
lea rdx, [rbp - 0x70]
mov qword [rbp - 0x70], rcx
mov r8d, listen
mov dword [rbp - 0x68], ecx
lea rcx, [rax + 0x154]
call fcn.140005800
mov eax, dword [rbp - 0x68]
mov dword [rbp - 0x58], eax
movsd xmm0, qword [rbp - 0x70]
lea rcx, [rbp - 0x60]
movsd qword [rbp - 0x60], xmm0
movsd xmm1, qword [rcx]
mov eax, 0x158
movss xmm6, dword [0x14027b15c]
movaps xmm0, xmm1
movss xmm8, dword [0x14027b178]
movaps xmm7, xmm6
mulss xmm6, dword [rcx + 8]
xor ebx, ebx
lea rcx, [rsi + rax]
mov qword [rbp - 0x70], rbx
shufps xmm0, xmm0, 0x55
mulss xmm8, xmm0
mulss xmm7, xmm1
call fcn.14000d150
test rax, rax
je 0x140003641
xor ecx, ecx
lea r8d, [rbx + 0xc]
mov qword [rbp - 0x70], rcx
lea rdx, [rbp - 0x70]
mov dword [rbp - 0x68], ecx
lea rcx, [rax + 0x148]
call fcn.140005800
mov ebx, dword [rbp - 0x68]
movsd xmm0, qword [rbp - 0x70]
movsd qword [rbp - 0x60], xmm0
movss xmm1, dword [rbp - 0x5c]
movd xmm2, ebx
addss xmm1, xmm8
addss xmm2, xmm6
jmp 0x14000354b
movsd xmm3, qword [rbp - 0x50]
jmp 0x1400036b2
lea rcx, [rsi + 0x158]
mov qword [rbp - 0x70], r14
call fcn.14000d150
test rax, rax
je 0x1400036a1
xor ecx, ecx
lea rdx, [rbp - 0x70]
mov qword [rbp - 0x70], rcx
mov r8d, listen
mov dword [rbp - 0x68], ecx
lea rcx, [rax + 0x148]
call fcn.140005800
mov r14d, dword [rbp - 0x68]
movsd xmm0, qword [rbp - 0x70]
mov dword [rbp - 0x48], r14d
movaps xmm3, xmm0
movsd qword [rbp - 0x50], xmm0
movaps xmm0, xmmword [rbp + 0x70]
lea r8, [rbp - 0x10]
movaps xmm1, xmmword [rbp + 0x80]
lea rcx, [rbp - 0x70]
mov rdx, qword [rsp + 0x40]
movss xmm12, dword [0x14027b13c]
movaps xmmword [rbp - 0x10], xmm0
movaps xmm0, xmmword [rbp + 0x90]
movaps xmmword [rbp], xmm1
movaps xmm1, xmmword [rbp + 0xa0]
movaps xmmword [rsp + 0x1f0], xmm9
movaps xmmword [rbp + 0x10], xmm0
movaps xmmword [rbp + 0x20], xmm1
movaps xmmword [rsp + 0x1e0], xmm10
movsd qword [rbp - 0x70], xmm3
mov dword [rbp - 0x68], r14d
call fcn.1400096c0
cmp byte [0x14027cb94], 0
movss xmm11, dword [0x140262268]
subss xmm11, dword [0x14027b14c]
mov r15, qword [rsp + 0x230]
mov r14, qword [rsp + 0x238]
mov qword [rsp + 0x40], rax
divss xmm11, dword [0x140262264]
je 0x140003823
cmp dword [0x14027cbb0], 0
jne 0x140003779
movss xmm1, dword [0x14027b16c]
movss xmm2, dword [0x14027b188]
mulss xmm1, dword [0x140262230]
mulss xmm2, dword [0x140262230]
jmp 0x14000378c
movss xmm1, dword [0x14027b180]
mulss xmm1, dword [0x140262230]
movaps xmm2, xmm1
cvttss2si esi, xmm2
cvttss2si ebx, xmm1
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movss xmm9, dword [rsp + 0x40]
xorps xmm8, xmm8
xorps xmm0, xmm0
cdq
cvtsi2ss xmm0, ebx
idiv ebx
mulss xmm0, dword [0x140262148]
xorps xmm1, xmm1
cvtsi2ss xmm1, edi
cvtsi2ss xmm8, edx
xorps xmm10, xmm10
subss xmm8, xmm0
movaps xmm0, xmm9
subss xmm0, xmm1
cvtsi2ss xmm10, r12d
addss xmm8, xmm0
mulss xmm8, xmm12
divss xmm8, dword [0x14027b174]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movss xmm6, dword [rsp + 0x44]
xorps xmm7, xmm7
cdq
xorps xmm0, xmm0
idiv esi
cvtsi2ss xmm0, esi
cvtsi2ss xmm7, edx
mulss xmm0, dword [0x140262148]
movaps xmm1, xmm6
subss xmm1, xmm10
subss xmm7, xmm0
addss xmm7, xmm1
jmp 0x14000385f
movss xmm9, dword [rsp + 0x40]
movss xmm6, dword [rsp + 0x44]
movaps xmm8, xmm9
movd xmm0, edi
movaps xmm7, xmm6
cvtdq2ps xmm0, xmm0
movd xmm10, r12d
subss xmm8, xmm0
cvtdq2ps xmm10, xmm10
mulss xmm8, xmm12
subss xmm7, xmm10
divss xmm8, dword [0x14027b174]
movss xmm0, dword [0x140262310]
ucomiss xmm8, xmm0
mov r12, qword [rsp + 0x240]
mov rsi, qword [rsp + 0x248]
mov rbx, qword [rsp + 0x278]
mulss xmm7, xmm12
movaps xmm12, xmmword [rsp + 0x1c0]
divss xmm7, dword [0x14027b17c]
jp 0x1400038a1
je 0x140003b51
ucomiss xmm7, xmm0
jp 0x1400038ac
je 0x140003b51
cmp byte [0x14027cbb7], 0
je 0x140003914
xorps xmm2, xmm2
movaps xmm1, xmm10
cvtsi2ss xmm2, edi
addss xmm1, xmm7
movaps xmm3, xmm10
movaps xmm0, xmm2
addss xmm0, xmm8
subss xmm3, xmm1
subss xmm2, xmm0
xorps xmm0, xmm0
mulss xmm3, xmm3
mulss xmm2, xmm2
addss xmm3, xmm2
ucomiss xmm0, xmm3
ja 0x1400038f5
xorps xmm1, xmm1
sqrtss xmm1, xmm3
jmp 0x140003900
movaps xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm1, xmm0
movd xmm0, dword [reloc.WLDAP32.dll_Ordinal_50]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm1
jae 0x140003b51
cmp byte [0x14027cb87], 0
movd xmm0, edi
cvtdq2ps xmm0, xmm0
je 0x14000396c
subss xmm9, xmm0
xorps xmm0, xmm0
subss xmm6, xmm10
mulss xmm9, xmm9
mulss xmm6, xmm6
addss xmm9, xmm6
ucomiss xmm0, xmm9
ja 0x14000394f
xorps xmm0, xmm0
sqrtss xmm0, xmm9
jmp 0x140003958
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movd xmm1, dword [0x14027b18c]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jb 0x140003b51
mov ecx, dword [0x14027cbc4]
test ecx, ecx
je 0x140003b18
cmp ecx, 1
jne 0x140003b51
lea r8, [rbp - 0x50]
lea rdx, [rbp + 0x58]
lea rcx, [rbp - 0x10]
call fcn.140002520
xor ecx, ecx
mov byte [rbp - 0x20], 1
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
movups xmm9, xmmword [rax + 0x10]
mov dword [rsp + 0x28], ecx
movups xmm8, xmmword [rax]
mov dword [rbp - 0x1f], ecx
movss xmm1, dword [rax + 0x20]
movaps xmm6, xmm9
subss xmm6, dword [rbp + 0x40]
subss xmm1, dword [rbp + 0x50]
movaps xmm7, xmm8
mov word [rbp - 0x1b], cx
subss xmm7, dword [rbp + 0x30]
movaps xmm3, xmm9
mov byte [rbp - 0x19], cl
mulss xmm6, xmm11
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rcx
shufps xmm3, xmm9, 0x55
movaps xmm5, xmm8
subss xmm3, dword [rbp + 0x44]
addss xmm6, dword [rbp + 0x40]
mulss xmm7, xmm11
movaps xmm2, xmm9
shufps xmm5, xmm8, 0x55
movaps xmm4, xmm8
subss xmm5, dword [rbp + 0x34]
addss xmm7, dword [rbp + 0x30]
shufps xmm2, xmm9, 0xaa
subss xmm2, dword [rbp + 0x48]
shufps xmm4, xmm8, 0xaa
subss xmm4, dword [rbp + 0x38]
shufps xmm6, xmm6, 0xe1
shufps xmm7, xmm7, 0xe1
shufps xmm9, xmm9, 0xff
subss xmm9, dword [rbp + 0x4c]
shufps xmm8, xmm8, 0xff
subss xmm8, dword [rbp + 0x3c]
mulss xmm3, xmm11
mulss xmm5, xmm11
addss xmm3, dword [rbp + 0x44]
mulss xmm2, xmm11
addss xmm5, dword [rbp + 0x34]
mulss xmm4, xmm11
addss xmm2, dword [rbp + 0x48]
movss xmm6, xmm3
mulss xmm9, xmm11
addss xmm4, dword [rbp + 0x38]
movss xmm7, xmm5
shufps xmm6, xmm6, 0xc6
addss xmm9, dword [rbp + 0x4c]
shufps xmm7, xmm7, 0xc6
movss xmm6, xmm2
shufps xmm6, xmm6, 0x27
movss xmm7, xmm4
mulss xmm8, xmm11
shufps xmm7, xmm7, 0x27
movss xmm6, xmm9
shufps xmm6, xmm6, 0x39
addss xmm8, dword [rbp + 0x3c]
movups xmmword [rbp - 0x30], xmm6
mov qword [rbp - 0x30], rax
mov eax, dword [0x14027cb58]
mulss xmm1, xmm11
mov qword [rbp - 0x28], Ordinal_41
movss xmm7, xmm8
movaps xmmword [rsp + 0x70], xmm6
shufps xmm7, xmm7, 0x39
addss xmm1, dword [rbp + 0x50]
movups xmmword [rbp - 0x40], xmm7
mov dword [rbp - 0x3c], eax
movaps xmmword [rsp + 0x60], xmm7
mov dword [rbp - 0x40], 0x85b3e12
movss dword [rbp - 0x80], xmm1
mov qword [rbp - 0x38], r13
lea r9d, [rcx + 0x28]
mov edx, 0x2201c4
mov rcx, qword [0x14027cb50]
lea r8, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x140003b51
xor ecx, ecx
mov qword [rbp + 4], 1
cvttss2si eax, xmm8
mov qword [rbp - 0x10], rcx
lea rdx, [rbp - 0x10]
mov qword [rbp + 0xc], rcx
lea r8d, [rcx + 0x28]
mov dword [rbp + 0x14], ecx
mov dword [rbp], ecx
lea ecx, [r8 - 0x27]
mov dword [rbp - 8], eax
cvttss2si eax, xmm7
mov dword [rbp - 4], eax
call qword [sym.imp.USER32.dll_SendInput]
movaps xmm10, xmmword [rsp + 0x1e0]
movaps xmm9, xmmword [rsp + 0x1f0]
movaps xmm7, xmmword [rsp + 0x210]
movaps xmm6, xmmword [rsp + 0x220]
mov rcx, qword [rbp + 0xb0]
xor rcx, rsp
call fcn.140100e40
lea r11, [rsp + 0x250]
movaps xmm8, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x80]
mov rsp, r11
pop r13
pop rdi
pop rbp
ret