Function at 0x14000ac70
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
xor ebx, ebx
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movdqa xmm0, xmmword [0x14008c8e0]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x1001903
mov ecx, ebx
nop word [rax + rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x12
jb 0x14000acc0
mov byte [rbp - 0x3d], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3e]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000ad33
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ad2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ad2e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
movdqa xmm0, xmmword [str.89_]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x1001903
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x12
jb 0x14000ad60
mov byte [rbp - 0x3d], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3e]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000add4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000adcf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000adcf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
movdqa xmm0, xmmword [0x14008c920]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x18041e
mov byte [rbp - 0x3c], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x13
jb 0x14000ae00
mov byte [rbp - 0x3c], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3d]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000ae74
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ae6f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ae6f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
movdqa xmm0, xmmword [0x14008c8d0]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x618520c
mov word [rbp - 0x3c], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp - 0x3a], 1
mov rcx, rbx
nop
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x15
jb 0x14000aea0
mov byte [rbp - 0x3a], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3b]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000af14
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000af0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000af0f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
movdqa xmm0, xmmword [0x14008c890]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp - 0x3e], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x11
jb 0x14000af40
mov byte [rbp - 0x3e], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3f]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000afb4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000afaf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000afaf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
mov dword [rbp - 0x50], 0xd021e1b
mov dword [rbp - 0x4c], 0x5c1f1f02
mov dword [rbp - 0x48], 0x100c16
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x14000afe0
mov byte [rbp - 0x44], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x45]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b054
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b04f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b04f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
mov dword [rbp - 0x50], 0x1f0c0802
mov dword [rbp - 0x4c], 0x17091541
mov word [rbp - 0x48], 0x100
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 8
jb 0x14000b080
mov byte [rbp - 0x47], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b0f4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b0ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b0ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
mov dword [rbp - 0x50], 0x1f0c0802
mov dword [rbp - 0x4c], 0x175f4459
mov dword [rbp - 0x48], 0x100110b
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xa
jb 0x14000b120
mov byte [rbp - 0x45], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x46]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b194
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b18f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b18f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
mov dword [rbp - 0x50], 0xb1f053c
mov dword [rbp - 0x4c], 0x10181c
mov dword [rbp - 0x48], 0xe105a18
mov word [rbp - 0x44], reloc.WS2_32.dll_select
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14000b1c0
mov byte [rbp - 0x42], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x43]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b234
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b22f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b22f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
mov dword [rbp - 0x50], 0xa09052d
mov dword [rbp - 0x4c], 0x5c031503
mov dword [rbp - 0x48], 0x100c16
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x14000b260
mov byte [rbp - 0x44], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x45]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b2d4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b2cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b2cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
mov dword [rbp - 0x50], 0x1030933
mov dword [rbp - 0x4c], 0x5c45461c
mov dword [rbp - 0x48], 0x100c16
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x14000b300
mov byte [rbp - 0x44], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x45]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b374
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b36f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b36f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
movdqa xmm0, xmmword [0x14008c8c0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x100
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x10
jb 0x14000b3a0
mov byte [rbp - 0x3f], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b414
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b40f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b40f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
movdqa xmm0, xmmword [str.89_O4]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x14008c930]
movdqu xmmword [rbp - 0x40], xmm1
mov dword [rbp - 0x30], 0xe7efacb9
mov dword [rbp - 0x2c], 0xf7bfb9fb
mov dword [rbp - 0x28], 0x100f1eb
mov rcx, rbx
nop
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x2a
jb 0x14000b450
mov byte [rbp - 0x25], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x26]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b4c4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b4bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b4bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
mov dword [rbp - 0x50], 0x1b291f20
mov dword [rbp - 0x4c], 0x140002
mov dword [rbp - 0x48], 0x130d115d
mov word [rbp - 0x44], 0x100
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x14000b4f0
mov byte [rbp - 0x43], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x44]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b564
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b55f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b55f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
mov dword [rbp - 0x50], 0xa595a13
mov dword [rbp - 0x4c], 0x175f170d
mov dword [rbp - 0x48], 0x100110b
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xa
jb 0x14000b590
mov byte [rbp - 0x45], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x46]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b604
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b5ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b5ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
movdqa xmm0, xmmword [0x14008c890]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp - 0x3e], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x11
jb 0x14000b630
mov byte [rbp - 0x3e], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3f]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012a10
nop
lea rcx, [rbp - 0x20]
call fcn.14000a820
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000b6a4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b69f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b69f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007889c
test rdi, rdi
jne 0x14000b865
movdqa xmm0, xmmword [str.___TO_]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x100
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x10
jb 0x14000b6d0
mov byte [rbp - 0x3f], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b865
mov dword [rbp - 0x50], 0x1000926
mov dword [rbp - 0x4c], 0x2451091d
mov dword [rbp - 0x48], 0x1302111a
mov word [rbp - 0x44], 5
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14000b720
mov byte [rbp - 0x42], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b865
mov dword [rbp - 0x50], 0xd021e3b
mov dword [rbp - 0x4c], 0x5202030a
mov dword [rbp - 0x48], 0x2061d3f
mov word [rbp - 0x44], 0x100
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x14000b770
mov byte [rbp - 0x43], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b865
mov dword [rbp - 0x50], 0x1b291f20
mov dword [rbp - 0x4c], 0x140002
mov word [rbp - 0x48], 0x100
mov rcx, rbx
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 8
jb 0x14000b7b0
mov byte [rbp - 0x47], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b865
mov dword [rbp - 0x50], 0x3e393823
mov dword [rbp - 0x4c], 0x1014344f
mov dword [rbp - 0x48], 0x13121306
mov word [rbp - 0x44], 5
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x6b]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14000b800
mov byte [rbp - 0x42], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b865
mov dword [rbp - 0x50], 0x17010024
mov dword [rbp - 0x4c], 0x16122b
mov byte [rbp - 0x48], 1
nop word [rax + rax]
lea eax, [rbx + 0x6b]
xor byte [rbp + rbx - 0x50], al
inc rbx
cmp rbx, 7
jb 0x14000b840
mov byte [rbp - 0x48], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14000b86a
call fcn.1400063e0
mov qword [rbp + 0x10], 0x7d0
lea rcx, [rbp + 0x10]
call fcn.140012150
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret