Function at 0x14000aad0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
xor ebx, ebx
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movdqa xmm0, xmmword [0x14008b8b0]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x100405c
mov ecx, ebx
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x12
jb 0x14000ab20
mov byte [rbp - 0x3d], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3e]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000ab93
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ab8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ab8e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
movdqa xmm0, xmmword [0x14008b8c0]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x100405c
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x12
jb 0x14000abc0
mov byte [rbp - 0x3d], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3e]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000ac34
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ac2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ac2f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
movdqa xmm0, xmmword [0x14008b890]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x435d41
mov byte [rbp - 0x3c], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x13
jb 0x14000ac60
mov byte [rbp - 0x3c], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3d]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000acd4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000accf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000accf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
movdqa xmm0, xmmword [0x14008b8d0]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x5f430b53
mov word [rbp - 0x3c], Ordinal_79
mov byte [rbp - 0x3a], 1
mov rcx, rbx
nop
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x15
jb 0x14000ad00
mov byte [rbp - 0x3a], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3b]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000ad74
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ad6f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ad6f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
movdqa xmm0, xmmword [0x14008b910]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x41
mov byte [rbp - 0x3e], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x11
jb 0x14000ada0
mov byte [rbp - 0x3e], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3f]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000ae14
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ae0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ae0f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
mov dword [rbp - 0x50], 0x74796764
mov dword [rbp - 0x4c], 0x35747675
mov dword [rbp - 0x48], 0x7b6579
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x14000ae40
mov byte [rbp - 0x44], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x45]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000aeb4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aeaf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000aeaf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
mov dword [rbp - 0x50], 0x6677717d
mov dword [rbp - 0x4c], 0x7e627c36
mov word [rbp - 0x48], 0x100
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 8
jb 0x14000aee0
mov byte [rbp - 0x47], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000af54
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000af4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000af4f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
mov dword [rbp - 0x50], 0x6677717d
mov dword [rbp - 0x4c], 0x7e342d2e
mov dword [rbp - 0x48], 0x1007864
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xa
jb 0x14000af80
mov byte [rbp - 0x45], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x46]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000aff4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000afef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000afef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
mov dword [rbp - 0x50], 0x72647c43
mov dword [rbp - 0x4c], 0x697b716b
mov dword [rbp - 0x48], 0x677b3377
mov word [rbp - 0x44], 0x45
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14000b020
mov byte [rbp - 0x42], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x43]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b094
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b08f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b08f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
mov dword [rbp - 0x50], 0x73727c52
mov dword [rbp - 0x4c], 0x35687c74
mov dword [rbp - 0x48], 0x7b6579
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x14000b0c0
mov byte [rbp - 0x44], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x45]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b134
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b12f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b12f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
mov dword [rbp - 0x50], 0x7878704c
mov dword [rbp - 0x4c], 0x352e2f6b
mov dword [rbp - 0x48], 0x7b6579
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x14000b160
mov byte [rbp - 0x44], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x45]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b1d4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b1cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b1cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
movdqa xmm0, xmmword [0x14008b8e0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x100
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x10
jb 0x14000b200
mov byte [rbp - 0x3f], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b274
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b26f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b26f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
movdqa xmm0, xmmword [0x14008b8f0]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x14008b860]
movdqu xmmword [rbp - 0x40], xmm1
mov dword [rbp - 0x30], 0x5e541506
mov dword [rbp - 0x2c], 0x5e14104c
mov dword [rbp - 0x28], 0x1005844
mov rcx, rbx
nop
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x2a
jb 0x14000b2b0
mov byte [rbp - 0x25], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x26]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b324
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b31f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b31f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
mov dword [rbp - 0x50], 0x6252665f
mov dword [rbp - 0x4c], 0x697f6975
mov dword [rbp - 0x48], 0x7a667832
mov word [rbp - 0x44], 0x100
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x14000b350
mov byte [rbp - 0x43], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x44]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b3c4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b3bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b3bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
mov dword [rbp - 0x50], 0x7322236c
mov dword [rbp - 0x4c], 0x7e347e7a
mov dword [rbp - 0x48], 0x1007864
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xa
jb 0x14000b3f0
mov byte [rbp - 0x45], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x46]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b464
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b45f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b45f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
movdqa xmm0, xmmword [0x14008b910]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x41
mov byte [rbp - 0x3e], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x11
jb 0x14000b490
mov byte [rbp - 0x3e], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3f]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012410
nop
lea rcx, [rbp - 0x20]
call fcn.14000a680
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b504
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b4ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b4ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007842c
test rdi, rdi
jne 0x14000b6c5
movdqa xmm0, xmmword [0x14008b900]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x100
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x10
jb 0x14000b530
mov byte [rbp - 0x3f], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b6c5
mov dword [rbp - 0x50], 0x787b7059
mov dword [rbp - 0x4c], 0x4d3a606a
mov dword [rbp - 0x48], 0x7a697875
mov word [rbp - 0x44], 0x52
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14000b580
mov byte [rbp - 0x42], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b6c5
mov dword [rbp - 0x50], 0x74796744
mov dword [rbp - 0x4c], 0x3b696a7d
mov dword [rbp - 0x48], 0x6b6d7450
mov word [rbp - 0x44], 0x100
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x14000b5d0
mov byte [rbp - 0x43], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b6c5
mov dword [rbp - 0x50], 0x6252665f
mov dword [rbp - 0x4c], 0x697f6975
mov word [rbp - 0x48], 0x100
mov rcx, rbx
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 8
jb 0x14000b610
mov byte [rbp - 0x47], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b6c5
mov dword [rbp - 0x50], 0x4742415c
mov dword [rbp - 0x4c], 0x797f5d38
mov dword [rbp - 0x48], 0x7a797a69
mov word [rbp - 0x44], 0x52
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14000b660
mov byte [rbp - 0x42], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b6c5
mov dword [rbp - 0x50], 0x6e7a795b
mov dword [rbp - 0x4c], 0x7d7b5c
mov byte [rbp - 0x48], 1
nop word [rax + rax]
lea eax, [rbx + 0x14]
xor byte [rbp + rbx - 0x50], al
inc rbx
cmp rbx, 7
jb 0x14000b6a0
mov byte [rbp - 0x48], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14000b6ca
call fcn.140006250
mov qword [rbp + 0x10], 0x7d0
lea rcx, [rbp + 0x10]
call fcn.140011d20
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret