Function at 0x14007fc80
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
push rbp
mov rbp, rsp
sub rsp, 0x80
mov qword [rbp - 0x10], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
movdqa xmm0, xmmword [0x1402d8d20]
movdqu xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x1003729
xor ebx, ebx
mov ecx, ebx
nop word [rax + rax]
lea eax, [rcx + 0x41]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0x12
jb 0x14007fcc0
mov byte [rbp - 0x4d], bl
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], bl
mov r8d, reloc.WS2_32.dll_select
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14007fd41
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007fd3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007fd3c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x140080980
movdqa xmm0, xmmword [0x1402d8d10]
movdqu xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x1003729
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x41]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0x12
jb 0x14007fd70
mov byte [rbp - 0x4d], 0
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, reloc.WS2_32.dll_select
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14007fdf3
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007fdee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007fdee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x140080986
movdqa xmm0, xmmword [0x1402d8ed0]
movdqu xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x312b37
mov byte [rbp - 0x4c], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0x13
jb 0x14007fe20
mov byte [rbp - 0x4c], 0
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, reloc.WS2_32.dll_send
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14007fea3
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007fe9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007fe9e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x14008098c
movdqa xmm0, xmmword [0x1402d8c30]
movdqu xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x282a603a
mov word [rbp - 0x4c], reloc.WS2_32.dll_gethostbyname
mov byte [rbp - 0x4a], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 0x3d]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0x15
jb 0x14007fed0
mov byte [rbp - 0x4a], 0
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14007ff53
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007ff4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007ff4e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x140080992
movdqa xmm0, xmmword [0x1402d8c50]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x50], reloc.WS2_32.dll_getservbyname
mov byte [rbp - 0x4e], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0x11
jb 0x14007ff80
mov byte [rbp - 0x4e], 0
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140080003
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007fffe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007fffe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x140080998
mov dword [rbp - 0x60], 0x262b3132
mov dword [rbp - 0x5c], 0x6726282b
mov dword [rbp - 0x58], 0x29332f
mov byte [rbp - 0x54], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0xb
jb 0x140080030
mov byte [rbp - 0x54], 0
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400800b3
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400800ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400800ae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x14008099e
mov dword [rbp - 0x60], 0x3425272b
mov dword [rbp - 0x5c], 0x2c302268
mov word [rbp - 0x58], 0x100
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 8
jb 0x1400800e0
mov byte [rbp - 0x57], 0
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, 8
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140080163
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008015e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008015e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x1400809a4
mov dword [rbp - 0x60], 0x315e5a54
mov dword [rbp - 0x5c], 0x216d7677
mov dword [rbp - 0x58], 0x100233d
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x3d]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0xa
jb 0x140080190
mov byte [rbp - 0x55], 0
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, 0xa
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140080213
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008020e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008020e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x1400809aa
mov dword [rbp - 0x60], 0x20362a15
mov dword [rbp - 0x5c], 0x3b292f35
mov dword [rbp - 0x58], 0x35296521
mov word [rbp - 0x54], Ordinal_45
mov byte [rbp - 0x52], 1
mov rcx, rbx
nop
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0xd
jb 0x140080240
mov byte [rbp - 0x52], 0
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, reloc.WS2_32.dll_listen
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400802c3
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400802be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400802be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x1400809b0
mov dword [rbp - 0x60], 0x21202a04
mov dword [rbp - 0x5c], 0x673a222a
mov dword [rbp - 0x58], 0x29332f
mov byte [rbp - 0x54], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0xb
jb 0x1400802f0
mov byte [rbp - 0x54], 0
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140080373
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008036e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008036e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x1400809b6
mov dword [rbp - 0x60], 0x2a2a261a
mov dword [rbp - 0x5c], 0x677c7135
mov dword [rbp - 0x58], 0x29332f
mov byte [rbp - 0x54], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0xb
jb 0x1400803a0
mov byte [rbp - 0x54], 0
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140080423
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008041e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008041e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x1400809bc
movdqa xmm0, xmmword [0x1402d8cd0]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x50], 0x100
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0x10
jb 0x140080450
mov byte [rbp - 0x4f], 0
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400804d3
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400804ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400804ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x1400809c2
movdqa xmm0, xmmword [0x1402d8d40]
movdqu xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1402d8de0]
movdqu xmmword [rbp - 0x50], xmm1
mov dword [rbp - 0x40], 0xc064350
mov dword [rbp - 0x3c], 0xc464e12
mov dword [rbp - 0x38], 0x1000e12
mov rcx, rbx
nop
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0x2a
jb 0x140080510
mov byte [rbp - 0x35], 0
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, Ordinal_45
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140080593
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008058e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008058e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x1400809c8
mov dword [rbp - 0x60], 0x357b4d76
mov dword [rbp - 0x5c], 0x3626322c
mov dword [rbp - 0x58], 0x2d3f236b
mov word [rbp - 0x54], 0x100
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x3d]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0xc
jb 0x1400805c0
mov byte [rbp - 0x53], 0
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, reloc.WS2_32.dll_inet_ntoa
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140080643
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008063e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008063e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x1400809ce
mov dword [rbp - 0x60], 0x240b0845
mov dword [rbp - 0x5c], 0x216d2523
mov dword [rbp - 0x58], 0x100233d
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x3d]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0xa
jb 0x140080670
mov byte [rbp - 0x55], 0
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, 0xa
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400806f3
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400806ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400806ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x1400809d4
movdqa xmm0, xmmword [0x1402d8c50]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x50], reloc.WS2_32.dll_getservbyname
mov byte [rbp - 0x4e], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0x11
jb 0x140080720
mov byte [rbp - 0x4e], 0
movdqa xmm0, xmmword [0x1402d8a50]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.14007c570
nop
lea rcx, [rbp - 0x30]
call fcn.14007f830
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400807a3
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008079e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008079e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400897fc
test rdi, rdi
jne 0x1400809da
movdqa xmm0, xmmword [0x1402d8c10]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x50], 0x100
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0x10
jb 0x1400807d0
mov byte [rbp - 0x4f], 0
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400809e0
mov dword [rbp - 0x60], 0x2a29260f
mov dword [rbp - 0x5c], 0x1f683e34
mov dword [rbp - 0x58], 0x283b2e23
mov word [rbp - 0x54], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp - 0x52], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0xd
jb 0x140080820
mov byte [rbp - 0x52], 0
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400809e6
mov dword [rbp - 0x60], 0x23504c6d
mov dword [rbp - 0x5c], 0x64303124
mov dword [rbp - 0x58], 0x3c342f09
mov word [rbp - 0x54], 0x100
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x3d]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0xc
jb 0x140080870
mov byte [rbp - 0x53], 0
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400809ec
mov dword [rbp - 0x60], 0x30003009
mov dword [rbp - 0x5c], 0x3b2d372b
mov word [rbp - 0x58], 0x100
mov rcx, rbx
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 8
jb 0x1400808b0
mov byte [rbp - 0x57], 0
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400809f2
mov dword [rbp - 0x60], 0x1510170a
mov dword [rbp - 0x5c], 0x2b2d0366
mov dword [rbp - 0x58], 0x282b2c3f
mov word [rbp - 0x54], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp - 0x52], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x42]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0xd
jb 0x140080900
mov byte [rbp - 0x52], 0
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400809f8
mov dword [rbp - 0x60], 0x3c282f0d
mov dword [rbp - 0x5c], 0x2f2502
mov byte [rbp - 0x58], 1
nop dword [rax + rax]
lea eax, [rbx + 0x42]
xor byte [rbp + rbx - 0x60], al
inc rbx
cmp rbx, 7
jb 0x140080940
mov byte [rbp - 0x58], 0
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14008097a
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3
call fcn.14007f560
int3