Function at 0x14007a460
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
mov rbp, rsp
sub rsp, 0x60
movdqa xmm0, xmmword [0x140268180]
xor eax, eax
xor ebx, ebx
mov byte [rbp - 0x30], al
mov edx, ebx
movdqu xmmword [rbp - 0x40], xmm0
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0x10
jb 0x14007a490
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x30], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007a4d0
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
mov dword [rbp + 0x10], 0x110b07
mov edx, ebx
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp + 0x10]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 3
jb 0x14007a4e0
lea rdx, [rbp + 0x10]
mov byte [rbp + 0x13], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007a520
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
mov dword [rbp - 0x40], 0x3e3d2a03
mov edx, ebx
mov dword [rbp - 0x3c], 0x3742a20
mov dword [rbp - 0x38], 0x3c2f323f
mov word [rbp - 0x34], Ordinal_41
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0xd
jb 0x14007a540
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x33], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007a580
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
xor eax, eax
mov dword [rbp - 0x40], 0x323f3d1e
mov byte [rbp - 0x34], al
mov edx, ebx
mov dword [rbp - 0x3c], 0x75272037
mov dword [rbp - 0x38], 0x2d2b3e1a
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0xc
jb 0x14007a5a0
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x34], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007a5e0
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
xor eax, eax
mov dword [rbp - 0x40], 0x24143c05
mov byte [rbp - 0x38], al
mov edx, ebx
mov dword [rbp - 0x3c], 0x2731233f
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 8
jb 0x14007a600
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x38], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007a640
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
xor eax, eax
mov dword [rbp - 0x40], 0x323f3d1e
mov byte [rbp - 0x32], al
mov edx, ebx
mov dword [rbp - 0x3c], 0x75272037
mov dword [rbp - 0x38], 0x323b361e
mov word [rbp - 0x34], 0x293f
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0xe
jb 0x14007a670
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x32], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007a6ab
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
xor eax, eax
mov dword [rbp + 0x10], 0x35647936
mov byte [rbp + 0x16], al
mov edx, ebx
mov word [rbp + 0x14], 0x3430
nop
movsxd rax, edx
lea rcx, [rbp + 0x10]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 6
jb 0x14007a6c0
lea rdx, [rbp + 0x10]
mov byte [rbp + 0x16], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007a700
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
xor eax, eax
mov dword [rbp + 0x10], 0x3d292c1d
mov byte [rbp + 0x16], al
mov edx, ebx
mov word [rbp + 0x14], 0x323e
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x10]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 6
jb 0x14007a720
lea rdx, [rbp + 0x10]
mov byte [rbp + 0x16], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007a760
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
mov dword [rbp - 0x40], 0x1041b06
mov edx, ebx
mov dword [rbp - 0x3c], 0x37311772
mov dword [rbp - 0x38], 0x3c3f3023
mov word [rbp - 0x34], Ordinal_41
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0xd
jb 0x14007a780
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x33], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007a7c0
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
movdqa xmm0, xmmword [0x1402681a0]
mov edx, ebx
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], Ordinal_50
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0x11
jb 0x14007a7e0
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x2f], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007a820
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
movdqa xmm0, xmmword [0x140268290]
xor eax, eax
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x30], al
mov edx, ebx
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0x10
jb 0x14007a840
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x30], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007a880
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
movdqa xmm0, xmmword [0x1402682a0]
xor eax, eax
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x30], al
mov edx, ebx
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0x10
jb 0x14007a8a0
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x30], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007a8e0
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
movdqa xmm0, xmmword [0x1402682c0]
xor eax, eax
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x30], al
mov edx, ebx
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0x10
jb 0x14007a900
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x30], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007a940
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
movdqa xmm0, xmmword [0x1402682b0]
xor eax, eax
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x30], al
mov edx, ebx
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0x10
jb 0x14007a960
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x30], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007a9a0
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
movdqa xmm0, xmmword [0x1402682e0]
xor eax, eax
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x30], al
mov edx, ebx
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0x10
jb 0x14007a9c0
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x30], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007aa00
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
movdqa xmm0, xmmword [0x1402682d0]
xor eax, eax
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x30], al
mov edx, ebx
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0x10
jb 0x14007aa20
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x30], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007aa60
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
movdqa xmm0, xmmword [0x140268280]
xor eax, eax
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x30], al
mov edx, ebx
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0x10
jb 0x14007aa80
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x30], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007aac0
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
movdqa xmm0, xmmword [0x140268270]
xor eax, eax
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x30], al
mov edx, ebx
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0x10
jb 0x14007aae0
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x30], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007ab20
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
xor eax, eax
mov dword [rbp - 0x40], 0x3035270d
mov byte [rbp - 0x34], al
mov edx, ebx
mov dword [rbp - 0x3c], 0x3b117326
mov dword [rbp - 0x38], 0x3c363e31
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0xc
jb 0x14007ab40
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x34], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007ab80
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
mov dword [rbp - 0x40], 0x2331270d
mov edx, ebx
mov dword [rbp - 0x3c], 0x7527363e
mov dword [rbp - 0x38], 0x687962
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0xb
jb 0x14007aba0
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x35], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007abe0
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
mov dword [rbp - 0x40], 0x2331270d
mov edx, ebx
mov dword [rbp - 0x3c], 0x7527363e
mov dword [rbp - 0x38], 0x776e7962
mov word [rbp - 0x34], WSAGetLastError
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0xd
jb 0x14007ac00
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x33], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007ac40
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
mov dword [rbp - 0x40], 0x2331270d
mov edx, ebx
mov dword [rbp - 0x3c], 0x7527363e
mov dword [rbp - 0x38], 0x776e7962
mov word [rbp - 0x34], 0x68
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0xd
jb 0x14007ac60
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x33], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007aca0
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
mov dword [rbp - 0x40], 0x2331270d
mov edx, ebx
mov dword [rbp - 0x3c], 0x7527363e
mov dword [rbp - 0x38], 0x776e7962
mov word [rbp - 0x34], 0x69
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0xd
jb 0x14007acc0
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x33], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007ad00
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
mov dword [rbp - 0x40], 0x2331270d
mov edx, ebx
mov dword [rbp - 0x3c], 0x7527363e
mov dword [rbp - 0x38], 0x776e7962
mov word [rbp - 0x34], WSAStartup
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0xd
jb 0x14007ad20
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x33], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007ad5b
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
mov dword [rbp + 0x10], 0x35342608
mov edx, ebx
mov dword [rbp + 0x14], 0x26363e
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x10]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 7
jb 0x14007ad70
lea rdx, [rbp + 0x10]
mov byte [rbp + 0x17], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007adb0
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
movdqa xmm0, xmmword [0x1402681c0]
xor eax, eax
movdqa xmm1, xmmword [str._SOUMVEKG_n]
mov edx, ebx
movdqu xmmword [rbp - 0x28], xmm0
mov byte [rbp - 2], al
movdqu xmmword [rbp - 0x18], xmm1
mov dword [rbp - 8], 0x40020a1a
mov word [rbp - 4], 0x4241
nop
movsxd rax, edx
lea rcx, [rbp - 0x28]
add rcx, rax
lea eax, [rdx + 0x4e]
inc edx
xor byte [rcx], al
cmp edx, 0x26
jb 0x14007ade0
lea rdx, [rbp - 0x28]
mov byte [rbp - 2], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007ae20
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
mov dword [rbp + 0x10], 0x283c2301
mov dword [rbp + 0x14], 0x333116
nop
movsxd rax, ebx
lea rcx, [rbp + 0x10]
add rcx, rax
lea eax, [rbx + 0x4e]
inc ebx
xor byte [rcx], al
cmp ebx, 7
jb 0x14007ae30
lea rdx, [rbp + 0x10]
mov byte [rbp + 0x17], 0
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14007ae71
call fcn.140069c20
lea rcx, [0x140a37c30]
call fcn.1400719e0
call fcn.140069c20
mov rbx, qword [rsp + 0x78]
add rsp, 0x60
pop rbp
ret