Function at 0x1400317d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
xor ebx, ebx
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movdqa xmm0, xmmword [0x1400b3f00]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x100d6ca
mov ecx, ebx
nop dword [rax + rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x12
jb 0x140031820
mov byte [rbp - 0x3d], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3e]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140031893
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003188e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003188e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
movdqa xmm0, xmmword [0x1400b3f10]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x100d6ca
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x12
jb 0x1400318c0
mov byte [rbp - 0x3d], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3e]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140031934
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003192f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003192f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
movdqa xmm0, xmmword [0x1400b3ec0]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0xd1cbd7
mov byte [rbp - 0x3c], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x13
jb 0x140031960
mov byte [rbp - 0x3c], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3d]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400319d4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400319cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400319cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
movdqa xmm0, xmmword [0x1400b3f30]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0xcdd19dc5
mov word [rbp - 0x3c], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp - 0x3a], 1
mov rcx, rbx
nop
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x15
jb 0x140031a00
mov byte [rbp - 0x3a], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3b]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140031a74
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140031a6f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140031a6f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
movdqa xmm0, xmmword [0x1400b3ef0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], Ordinal_217
mov byte [rbp - 0x3e], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x11
jb 0x140031aa0
mov byte [rbp - 0x3e], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3f]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140031b14
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140031b0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140031b0f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
mov dword [rbp - 0x50], 0xc6cbd1d2
mov dword [rbp - 0x4c], 0x87c6c8cb
mov dword [rbp - 0x48], 0xc9d3cf
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x140031b40
mov byte [rbp - 0x44], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x45]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140031bb4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140031baf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140031baf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
mov dword [rbp - 0x50], 0xd4c5c7cb
mov dword [rbp - 0x4c], 0xccd0c288
mov word [rbp - 0x48], 0x100
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 8
jb 0x140031be0
mov byte [rbp - 0x47], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140031c54
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140031c4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140031c4f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
mov dword [rbp - 0x50], 0xd4c5c7cb
mov dword [rbp - 0x4c], 0xcc869390
mov dword [rbp - 0x48], 0x100ced2
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xa
jb 0x140031c80
mov byte [rbp - 0x45], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x46]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140031cf4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140031cef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140031cef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
mov dword [rbp - 0x50], 0xc0d6caf5
mov dword [rbp - 0x4c], 0xdbc9cfd5
mov dword [rbp - 0x48], 0xd5c985c1
mov word [rbp - 0x44], 0xcb
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x140031d20
mov byte [rbp - 0x42], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x43]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140031d94
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140031d8f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140031d8f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
mov dword [rbp - 0x50], 0xc1c0cae4
mov dword [rbp - 0x4c], 0x87dac2ca
mov dword [rbp - 0x48], 0xc9d3cf
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x140031dc0
mov byte [rbp - 0x44], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x45]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140031e34
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140031e2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140031e2f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
mov dword [rbp - 0x50], 0xcacac6fa
mov dword [rbp - 0x4c], 0x879c91d5
mov dword [rbp - 0x48], 0xc9d3cf
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x140031e60
mov byte [rbp - 0x44], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x45]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140031ed4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140031ecf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140031ecf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
movdqa xmm0, xmmword [0x1400b3f20]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x100
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x10
jb 0x140031f00
mov byte [rbp - 0x3f], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140031f74
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140031f6f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140031f6f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
movdqa xmm0, xmmword [0x1400b3f40]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400b3f50]
movdqu xmmword [rbp - 0x40], xmm1
mov dword [rbp - 0x30], 0xaca6e3f0
mov dword [rbp - 0x2c], 0xace6eeb2
mov dword [rbp - 0x28], 0x100aeb2
mov rcx, rbx
nop
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x2a
jb 0x140031fb0
mov byte [rbp - 0x25], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x26]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140032024
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003201f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003201f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
mov dword [rbp - 0x50], 0xd0e0d0e9
mov dword [rbp - 0x4c], 0xdbcdd7cb
mov dword [rbp - 0x48], 0xc8d4ce84
mov word [rbp - 0x44], 0x100
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x140032050
mov byte [rbp - 0x43], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x44]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400320c4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400320bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400320bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
mov dword [rbp - 0x50], 0xc19095da
mov dword [rbp - 0x4c], 0xcc86c0c4
mov dword [rbp - 0x48], 0x100ced2
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xa
jb 0x1400320f0
mov byte [rbp - 0x45], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x46]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140032164
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003215f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003215f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
movdqa xmm0, xmmword [0x1400b3ef0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], Ordinal_217
mov byte [rbp - 0x3e], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x11
jb 0x140032190
mov byte [rbp - 0x3e], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3f]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140039050
nop
lea rcx, [rbp - 0x20]
call fcn.140031380
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140032204
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400321ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400321ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e178
test rdi, rdi
jne 0x1400323c5
movdqa xmm0, xmmword [0x1400b3ee0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x100
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x10
jb 0x140032230
mov byte [rbp - 0x3f], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400323c5
mov dword [rbp - 0x50], 0xcac9c6ef
mov dword [rbp - 0x4c], 0xff88ded4
mov dword [rbp - 0x48], 0xc8dbcec3
mov word [rbp - 0x44], 0xdc
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x140032280
mov byte [rbp - 0x42], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400323c5
mov dword [rbp - 0x50], 0xc6cbd1f2
mov dword [rbp - 0x4c], 0x89dbd4c3
mov dword [rbp - 0x48], 0xd9dfc2e6
mov word [rbp - 0x44], 0x100
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x1400322d0
mov byte [rbp - 0x43], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400323c5
mov dword [rbp - 0x50], 0xd0e0d0e9
mov dword [rbp - 0x4c], 0xdbcdd7cb
mov word [rbp - 0x48], 0x100
mov rcx, rbx
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 8
jb 0x140032310
mov byte [rbp - 0x47], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400323c5
mov dword [rbp - 0x50], 0xf5f0f7ea
mov dword [rbp - 0x4c], 0xcbcde386
mov dword [rbp - 0x48], 0xc8cbccdf
mov word [rbp - 0x44], 0xdc
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx - 0x5e]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x140032360
mov byte [rbp - 0x42], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400323c5
mov dword [rbp - 0x50], 0xdcc8cfed
mov dword [rbp - 0x4c], 0xcfc5e2
mov byte [rbp - 0x48], 1
nop word [rax + rax]
lea eax, [rbx - 0x5e]
xor byte [rbp + rbx - 0x50], al
inc rbx
cmp rbx, 7
jb 0x1400323a0
mov byte [rbp - 0x48], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x1400323ca
call fcn.140004d80
lea rcx, [rbp + 0x10]
call fcn.140001d20
movabs rax, 0x7fffffff88ca6bff
mov rbx, qword [rbp + 0x10]
cmp rbx, rax
jge 0x1400323ef
add rbx, 0x77359400
jmp 0x1400323f9
movabs rbx, 0x7fffffffffffffff
lea rcx, [rbp + 0x10]
call fcn.140001d20
mov rax, qword [rbp + 0x10]
cmp rax, rbx
jge 0x14003246e
movabs rdi, 0x4e94914f0000
movabs rsi, 0x431bde82d7b634db
nop
mov rcx, rbx
sub rcx, rax
cmp rcx, rdi
jl 0x140032432
mov ecx, 0x5265c00
jmp 0x140032457
mov rax, rsi
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140032455
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
lea rcx, [rbp + 0x10]
call fcn.140001d20
mov rax, qword [rbp + 0x10]
cmp rax, rbx
jl 0x140032420
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret