Function at 0x140044750
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r15
mov rbp, rsp
sub rsp, 0x70
xor ebx, ebx
mov dword [rbp - 0x30], 0xc2b0c27
mov word [rbp - 0x10], bx
mov ecx, ebx
mov dword [rbp - 0x2c], 0xc4b0c31
mov edi, 0xc6e
mov dword [rbp - 0x28], 0xc220c52
mov dword [rbp - 0x24], 0xc1c0c01
mov dword [rbp - 0x20], 0xc1c0c15
mov dword [rbp - 0x1c], 0xc0a0c58
mov dword [rbp - 0x18], 0xc1a0c0e
mov dword [rbp - 0x14], 0xc090c0e
mov byte [rbp - 0xe], 1
nop word [rax + rax]
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x1400447b0
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140044953
mov qword [rsp + 0xa8], r12
mov rcx, rbx
mov qword [rsp + 0xb0], r13
mov qword [rsp + 0xb8], r14
mov dword [rbp - 0x50], 0xc0a0c23
mov dword [rbp - 0x4c], 0xc1e0c1d
mov dword [rbp - 0x48], 0xc0a0c00
mov dword [rbp - 0x44], 0xc230c54
mov dword [rbp - 0x40], 0xc120c1f
mov dword [rbp - 0x3c], 0xc1c0c0f
mov dword [rbp - 0x38], 0xc08
mov byte [rbp - 0x34], 1
nop dword [rax]
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x50], ax
inc rcx
cmp rcx, 0xd
jb 0x140044830
lea rdx, [rbp - 0x50]
mov byte [rbp - 0x34], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140044974
mov dword [rbp - 0x50], 0xc1d0c3e
mov rcx, rbx
mov dword [rbp - 0x4c], 0xc120c1f
mov dword [rbp - 0x48], 0xc000c17
mov dword [rbp - 0x44], 0xc550c07
mov dword [rbp - 0x40], 0xc1e0c3a
mov dword [rbp - 0x3c], 0xc0d0c0b
mov word [rbp - 0x38], bx
mov byte [rbp - 0x36], 1
nop
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x50], ax
inc rcx
cmp rcx, 0xc
jb 0x140044890
lea rdx, [rbp - 0x50]
mov byte [rbp - 0x36], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x1400449a5
mov dword [rbp - 0x50], 0xc1c0c25
mov dword [rbp - 0x4c], 0xc040c34
mov dword [rbp - 0x48], 0xc030c1f
mov dword [rbp - 0x44], 0xc070c11
mov word [rbp - 0x40], bx
mov byte [rbp - 0x3e], 1
nop dword [rax]
lea eax, [rdi + rbx]
xor word [rbp + rbx*2 - 0x50], ax
inc rbx
cmp rbx, 8
jb 0x1400448e0
lea rdx, [rbp - 0x50]
mov byte [rbp - 0x3e], 0
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140044929
mov r13, qword [rsp + 0xb0]
mov r12, qword [rsp + 0xa8]
mov r14, qword [rsp + 0xb8]
add rsp, 0x70
pop r15
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x50], 0x4341c25
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x711031f
mov word [rbp - 0x48], 0x100
call fcn.140045430
mov rcx, rax
call fcn.140043720
int3
lea rdx, [rbp - 0x50]
mov dword [rbp + 0x30], 0x312b27
lea rcx, [rbp + 0x30]
mov byte [rbp + 0x34], 1
call fcn.1400454d0
mov rcx, rax
call fcn.140043720
int3
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x50], 0x1015072d
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x1b315306
mov dword [rbp - 0x48], 0x1c161e11
mov word [rbp - 0x44], 0x100
call fcn.140045120
mov rcx, rax
call fcn.140043720
int3
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x50], 0x1015072d
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x1b315306
mov dword [rbp - 0x48], 0x1c161e11
mov word [rbp - 0x44], 0x100
call fcn.140045120
mov rcx, rax
call fcn.140043720
int3