Function at 0x14000cbc0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
xor ebx, ebx
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movdqa xmm0, xmmword [0x1400add20]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x1005448
mov ecx, ebx
nop word [rax + rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x12
jb 0x14000cc10
mov byte [rbp - 0x3d], bl
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000cc90
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cc8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cc8b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
movdqa xmm0, xmmword [0x1400add30]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x1005448
mov rcx, rbx
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x12
jb 0x14000ccb0
mov byte [rbp - 0x3d], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000cd31
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cd2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cd2c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
movdqa xmm0, xmmword [str.huvs__DRONOY]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x574955
mov byte [rbp - 0x3c], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x13
jb 0x14000cd60
mov byte [rbp - 0x3c], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000cde1
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cddc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cddc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
movdqa xmm0, xmmword [0x1400add40]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x4b571f47
mov word [rbp - 0x3c], 0x51
mov byte [rbp - 0x3a], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x15
jb 0x14000ce10
mov byte [rbp - 0x3a], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000ce91
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ce8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ce8c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
movdqa xmm0, xmmword [0x1400add70]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x55
mov byte [rbp - 0x3e], 1
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x11
jb 0x14000cec0
mov byte [rbp - 0x3e], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000cf41
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cf3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cf3c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
mov dword [rbp - 0x50], 0x404d5350
mov dword [rbp - 0x4c], 0x9484a49
mov dword [rbp - 0x48], 0x4f514d
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x14000cf70
mov byte [rbp - 0x44], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, recv
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000cff1
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cfec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cfec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
mov dword [rbp - 0x50], 0x52434549
mov dword [rbp - 0x4c], 0x425e400a
mov word [rbp - 0x48], 0x100
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 8
jb 0x14000d020
mov byte [rbp - 0x47], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, 8
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000d0a1
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d09c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d09c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
mov dword [rbp - 0x50], 0x52434549
mov dword [rbp - 0x4c], 0x42081112
mov dword [rbp - 0x48], 0x1004c50
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xa
jb 0x14000d0d0
mov byte [rbp - 0x45], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, 0xa
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000d151
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d14c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d14c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
mov dword [rbp - 0x50], 0x46504877
mov dword [rbp - 0x4c], 0x55474d57
mov dword [rbp - 0x48], 0x534f0743
mov word [rbp - 0x44], 0x49
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14000d180
mov byte [rbp - 0x42], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000d201
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d1fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d1fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
mov dword [rbp - 0x50], 0x47464866
mov dword [rbp - 0x4c], 0x9544048
mov dword [rbp - 0x48], 0x4f514d
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x14000d230
mov byte [rbp - 0x44], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, recv
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000d2b1
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d2ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d2ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
mov dword [rbp - 0x50], 0x4c4c4478
mov dword [rbp - 0x4c], 0x9121357
mov dword [rbp - 0x48], 0x4f514d
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x14000d2e0
mov byte [rbp - 0x44], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, recv
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000d361
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d35c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d35c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
movdqa xmm0, xmmword [0x1400add50]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x100
mov rcx, rbx
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x10
jb 0x14000d380
mov byte [rbp - 0x3f], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000d401
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d3fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d3fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
movdqa xmm0, xmmword [0x1400add10]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [str.U_DG]
movdqu xmmword [rbp - 0x40], xmm1
mov dword [rbp - 0x30], 0x2a206172
mov dword [rbp - 0x2c], 0x22686c30
mov dword [rbp - 0x28], 0x1002c30
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x2a
jb 0x14000d440
mov byte [rbp - 0x25], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, Ordinal_45
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000d4c1
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d4bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d4bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
mov dword [rbp - 0x50], 0x5666526b
mov dword [rbp - 0x4c], 0x55435549
mov dword [rbp - 0x48], 0x4e524c06
mov word [rbp - 0x44], 0x100
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x14000d4f0
mov byte [rbp - 0x43], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, recv
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000d571
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d56c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d56c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
mov dword [rbp - 0x50], 0x47161758
mov dword [rbp - 0x4c], 0x42084246
mov dword [rbp - 0x48], 0x1004c50
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xa
jb 0x14000d5a0
mov byte [rbp - 0x45], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, 0xa
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000d621
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d61c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d61c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
movdqa xmm0, xmmword [0x1400add70]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x55
mov byte [rbp - 0x3e], 1
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x11
jb 0x14000d650
mov byte [rbp - 0x3e], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140005270
nop
lea rcx, [rbp - 0x20]
call fcn.14000c3d0
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000d6d1
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d6cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d6cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009806c
test rdi, rdi
jne 0x14000d885
movdqa xmm0, xmmword [0x1400add80]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x100
mov rcx, rbx
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x10
jb 0x14000d6f0
mov byte [rbp - 0x3f], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000d885
mov dword [rbp - 0x50], 0x4c4f446d
mov dword [rbp - 0x4c], 0x71065c56
mov dword [rbp - 0x48], 0x4e5d4c41
mov word [rbp - 0x44], 0x5e
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14000d740
mov byte [rbp - 0x42], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000d885
mov dword [rbp - 0x50], 0x404d5370
mov dword [rbp - 0x4c], 0x7555641
mov dword [rbp - 0x48], 0x5f594064
mov word [rbp - 0x44], 0x100
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x14000d790
mov byte [rbp - 0x43], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000d885
mov dword [rbp - 0x50], 0x5666526b
mov dword [rbp - 0x4c], 0x55435549
mov word [rbp - 0x48], 0x100
mov rcx, rbx
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 8
jb 0x14000d7d0
mov byte [rbp - 0x47], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000d885
mov dword [rbp - 0x50], 0x73767568
mov dword [rbp - 0x4c], 0x45436104
mov dword [rbp - 0x48], 0x4e4d4e5d
mov word [rbp - 0x44], 0x5e
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x20]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14000d820
mov byte [rbp - 0x42], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000d885
mov dword [rbp - 0x50], 0x5a4e4d6f
mov dword [rbp - 0x4c], 0x414760
mov byte [rbp - 0x48], 1
nop word [rax + rax]
lea eax, [rbx + 0x20]
xor byte [rbp + rbx - 0x50], al
inc rbx
cmp rbx, 7
jb 0x14000d860
mov byte [rbp - 0x48], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14000d88a
call fcn.14000cb10
mov qword [rbp + 0x10], 0x7d0
lea rcx, [rbp + 0x10]
call fcn.140029410
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret