Function at 0x14000b210
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x60
lea rcx, str.TitleDetect_Function
call qword [sym.imp.VMProtectSDK64.dll_VMProtectBeginUltra]
cmp byte [0x1407ef7f5], 1
jne 0x14000b849
movdqa xmm0, xmmword [0x14008c570]
lea rdx, [rbp - 0x40]
xor ecx, ecx
mov word [rbp - 0x30], 0
movdqu xmmword [rbp - 0x40], xmm0
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b87f
lea rdx, [rbp - 0x40]
mov dword [rbp - 0x36], 0x726577
xor ecx, ecx
mov dword [rbp - 0x40], 0x6f6d654d
mov dword [rbp - 0x3c], 0x56207972
mov word [rbp - 0x38], 0x6569
mov byte [rbp - 0x32], al
call qword [sym.imp.USER32.dll_FindWindowA]
mov dword [rbp - 0x40], 0x7c797359
test rax, rax
jne 0x14000b8a0
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0x4f653f6a
mov dword [rbp - 0x38], 0x404a4a45
mov word [rbp - 0x34], 0x100
call fcn.1400053e0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b8c8
movdqa xmm0, xmmword [str.Ysyj_eOEJJ_]
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0x100
call fcn.140005130
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b8f7
movdqa xmm0, xmmword [0x14008c390]
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0x100
call fcn.140005130
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b926
movdqa xmm0, xmmword [0x14008c3a0]
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0x100
call fcn.140005130
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b955
movdqa xmm0, xmmword [0x14008c3b0]
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0x100
call fcn.140005130
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b984
movdqa xmm0, xmmword [0x14008c370]
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0x100
call fcn.140005130
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b9b3
movdqa xmm0, xmmword [0x14008c380]
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0x100
call fcn.140005130
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b9e2
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x7e73694a
mov dword [rbp - 0x3c], 0x1536c7b
mov dword [rbp - 0x38], 0x51574a6e
mov word [rbp - 0x34], 0x100
call fcn.1400053e0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000ba11
lea rcx, [rbp + 0x10]
mov dword [rbp + 0x10], 0x592e2862
mov dword [rbp + 0x14], 0x100585c
call fcn.140005010
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov dword [rbp + 0x14], 0x100585c
lea rcx, [rbp + 0x10]
test rax, rax
jne 0x14000ba40
mov dword [rbp + 0x10], 0x59282d62
call fcn.140005010
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000ba59
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x68586851
mov dword [rbp - 0x3c], 0x53456f73
mov word [rbp - 0x38], 0x100
call fcn.140005070
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000ba7d
movdqa xmm0, xmmword [0x14008c400]
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x1004e58
call fcn.1400051e0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000baaf
movdqa xmm0, xmmword [0x14008c2d0]
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x30], 1
call fcn.1400050e0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov dword [rbp - 0x40], 0x7978725c
test rax, rax
jne 0x14000badc
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0x1527a72
mov dword [rbp - 0x38], 0x494268
mov byte [rbp - 0x34], 1
call fcn.1400053a0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov dword [rbp - 0x40], 0x7978725c
lea rcx, [rbp - 0x40]
test rax, rax
jne 0x14000bb07
mov dword [rbp - 0x3c], 0x62527a72
mov dword [rbp - 0x38], 0x1005343
call fcn.140005360
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov dword [rbp - 0x40], 0x7978725c
mov dword [rbp - 0x3c], 0x62527a72
test rax, rax
jne 0x14000bb27
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x38], 0x41514d
mov byte [rbp - 0x34], 1
call fcn.1400053a0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000bb44
movdqa xmm0, xmmword [str.Ixeqr]
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], reloc.WS2_32.dll_select
mov byte [rbp - 0x2e], 1
call fcn.140005180
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000bb7b
movdqa xmm0, xmmword [0x14008c330]
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], reloc.WS2_32.dll_select
mov byte [rbp - 0x2e], 1
call fcn.140005180
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000bbae
movdqa xmm0, xmmword [str.Ixeqr]
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x1004a1f
call fcn.1400051e0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000bbe1
movdqa xmm0, xmmword [0x14008c330]
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x1004a1f
call fcn.1400051e0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000bc14
movdqa xmm0, xmmword [str.Ixeqr]
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], Ordinal_33
mov byte [rbp - 0x2e], 1
call fcn.140005180
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000bc47
movdqa xmm0, xmmword [0x14008c330]
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], Ordinal_33
mov byte [rbp - 0x2e], 1
call fcn.140005180
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000bc7a
movdqa xmm0, xmmword [0x14008c580]
lea rdx, [rbp - 0x40]
xor ecx, ecx
mov word [rbp - 0x2d], Ordinal_50
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0x2e33
mov byte [rbp - 0x2e], Ordinal_50
mov byte [rbp - 0x2b], al
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000bcad
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x6f796d5f
mov dword [rbp - 0x3c], 0x48486b67
mov dword [rbp - 0x38], 0x100444c
call fcn.140005360
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000bce6
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x64707755
mov dword [rbp - 0x3c], 0x477d5a
mov byte [rbp - 0x38], 1
call fcn.140005040
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov dword [rbp - 0x40], 0x64707755
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0x477d5a
mov byte [rbp - 0x38], 1
test rax, rax
jne 0x14000bd19
call fcn.140005040
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000bd2b
lea rdx, [rbp + 0x10]
mov dword [rbp + 0x10], 0x447848
xor ecx, ecx
mov byte [rbp + 0x14], al
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000bd53
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x6a737549
mov dword [rbp - 0x3c], 0x4e7e73
mov byte [rbp - 0x38], 1
call fcn.140005040
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000bd74
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x7f7d695d
mov dword [rbp - 0x3c], 0x4d49593e
mov word [rbp - 0x38], 0x47
mov byte [rbp - 0x36], 1
call fcn.1400050a0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov dword [rbp - 0x40], 0x7f7d695d
test rax, rax
jne 0x14000bd95
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0x444c7658
mov word [rbp - 0x38], 0x100
call fcn.140005070
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b855
add rsp, 0x60
pop rbp
jmp qword [sym.imp.VMProtectSDK64.dll_VMProtectEnd]
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x40], 0x7f7d695d
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0x444c7658
mov word [rbp - 0x38], 0x100
call fcn.1400043c0
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x40]
mov dword [rbp + 0x10], 0x5d5f53
lea rcx, [rbp + 0x10]
mov byte [rbp + 0x14], 1
call fcn.140004290
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x3c], 0x464e5a6a
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x38], 0x414d4b
mov byte [rbp - 0x34], 1
call fcn.140004650
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x40], 0x7c797359
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0x464e5a6a
mov dword [rbp - 0x38], 0x414d4b
mov byte [rbp - 0x34], 1
call fcn.140004650
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x40], 0x7c797359
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0x464e5a6a
mov dword [rbp - 0x38], 0x414d4b
mov byte [rbp - 0x34], 1
call fcn.140004650
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x40], 0x7c797359
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0x464e5a6a
mov dword [rbp - 0x38], 0x414d4b
mov byte [rbp - 0x34], 1
call fcn.140004650
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x40], 0x7c797359
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0x464e5a6a
mov dword [rbp - 0x38], 0x414d4b
mov byte [rbp - 0x34], 1
call fcn.140004650
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x40], 0x7c797359
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0x464e5a6a
mov dword [rbp - 0x38], 0x414d4b
mov byte [rbp - 0x34], 1
call fcn.140004650
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x40], 0x7c797359
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0x464e5a6a
mov dword [rbp - 0x38], 0x414d4b
mov byte [rbp - 0x34], 1
call fcn.140004650
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x40], 0x7c797359
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0x464e5a6a
mov dword [rbp - 0x38], 0x414d4b
mov byte [rbp - 0x34], 1
call fcn.140004650
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x40], 0x7c797359
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0x464e5a6a
mov dword [rbp - 0x38], 0x414d4b
mov byte [rbp - 0x34], 1
call fcn.140004650
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp + 0x10], 0x592e2862
call fcn.140004320
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp + 0x10], 0x59282d62
lea rcx, [rbp + 0x10]
mov dword [rbp + 0x14], 0x100585c
call fcn.140004320
mov rcx, rax
call fcn.140006a50
int3
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x68586851
mov dword [rbp - 0x3c], 0x53456f73
mov word [rbp - 0x38], 0x100
call fcn.140005070
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140003260
mov rcx, rax
call fcn.140006a50
int3
movdqa xmm0, xmmword [0x14008c460]
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
mov word [rbp - 0x30], reloc.WLDAP32.dll_Ordinal_79
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x2e], 1
call fcn.1400044e0
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x3c], 0x62527a72
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x38], 0x5657424e
mov dword [rbp - 0x34], 0x100444f
call fcn.140004780
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x3c], 0x6b527a72
mov dword [rbp - 0x38], 0x1004e43
call fcn.1400045f0
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x38], 0x1005343
lea rcx, [rbp - 0x40]
call fcn.1400045f0
mov rcx, rax
call fcn.140006a50
int3
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x7978725c
mov dword [rbp - 0x3c], 0x62527a72
mov dword [rbp - 0x38], 0x41514d
mov byte [rbp - 0x34], 1
call fcn.1400053a0
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140003260
mov rcx, rax
call fcn.140006a50
int3
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x71657849
mov dword [rbp - 0x3c], 0x597f7e72
mov dword [rbp - 0x38], 0x100151a
call fcn.140005360
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140003260
mov rcx, rax
call fcn.140006a50
int3
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x71657849
mov dword [rbp - 0x3c], 0x597f7e72
mov dword [rbp - 0x38], 0x1001714
call fcn.140005360
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140003260
mov rcx, rax
call fcn.140006a50
int3
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x71657849
mov dword [rbp - 0x3c], 0x597f7e72
mov dword [rbp - 0x38], 0x100151a
call fcn.140005360
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140003260
mov rcx, rax
call fcn.140006a50
int3
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x71657849
mov dword [rbp - 0x3c], 0x597f7e72
mov dword [rbp - 0x38], 0x1001714
call fcn.140005360
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140003260
mov rcx, rax
call fcn.140006a50
int3
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x71657849
mov dword [rbp - 0x3c], 0x597f7e72
mov dword [rbp - 0x38], 0x100151a
call fcn.140005360
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140003260
mov rcx, rax
call fcn.140006a50
int3
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x71657849
mov dword [rbp - 0x3c], 0x597f7e72
mov dword [rbp - 0x38], 0x1001714
call fcn.140005360
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140003260
mov rcx, rax
call fcn.140006a50
int3
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x78687e5e
mov dword [rbp - 0x3c], 0x55696b7d
mov dword [rbp - 0x38], 0x5c574267
mov word [rbp - 0x34], 0x100
call fcn.1400053e0
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140003260
mov rcx, rax
call fcn.140006a50
int3
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x6f796d5f
mov dword [rbp - 0x3c], 0x48486b67
mov dword [rbp - 0x38], 0x100444c
call fcn.140005360
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140003260
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
call fcn.140004370
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x40], 0x64707755
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0x477d5a
mov byte [rbp - 0x38], 1
call fcn.140004370
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp + 0x10], 0x586352
lea rcx, [rbp + 0x10]
mov byte [rbp + 0x14], 1
call fcn.140004290
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp + 0x10], 0x586352
lea rcx, [rbp + 0x10]
mov byte [rbp + 0x14], 1
call fcn.140004290
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x3c], 0x4d49593e
lea rcx, [rbp - 0x40]
mov word [rbp - 0x38], 0x47
mov byte [rbp - 0x36], 1
call fcn.140004410
mov rcx, rax
call fcn.140006a50
int3