Function at 0x14000acc0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
xor ebx, ebx
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movdqa xmm0, xmmword [0x14008c6d0]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x100332d
mov ecx, ebx
nop word [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x12
jb 0x14000ad10
mov byte [rbp - 0x3d], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3e]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000ad83
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ad7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ad7e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
movdqa xmm0, xmmword [0x14008c6c0]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x100332d
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x12
jb 0x14000adb0
mov byte [rbp - 0x3d], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3e]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000ae24
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ae1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ae1f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
movdqa xmm0, xmmword [0x14008c720]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x322e30
mov byte [rbp - 0x3c], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x13
jb 0x14000ae50
mov byte [rbp - 0x3c], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3d]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000aec4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aebf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000aebf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
movdqa xmm0, xmmword [0x14008c6b0]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x20327822
mov word [rbp - reloc.WLDAP32.dll_Ordinal_60], 0x3c
mov byte [rbp - 0x3a], 1
mov rcx, rbx
nop
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x15
jb 0x14000aef0
mov byte [rbp - 0x3a], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3b]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000af64
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000af5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000af5f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
movdqa xmm0, xmmword [0x14008c690]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], Ordinal_50
mov byte [rbp - 0x3e], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x11
jb 0x14000af90
mov byte [rbp - 0x3e], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3f]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000b004
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000afff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000afff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
mov dword [rbp - 0x50], 0x2b283435
mov dword [rbp - 0x4c], 0x62252524
mov dword [rbp - 0x48], 0x2a3628
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x14000b030
mov byte [rbp - 0x44], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x45]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000b0a4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b09f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b09f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
mov dword [rbp - 0x50], 0x3926222c
mov dword [rbp - 0x4c], 0x29332f67
mov word [rbp - 0x48], 0x100
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 8
jb 0x14000b0d0
mov byte [rbp - 0x47], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000b144
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b13f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b13f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
mov dword [rbp - 0x50], 0x3926222c
mov dword [rbp - 0x4c], 0x29657e7f
mov dword [rbp - 0x48], 0x1002b35
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xa
jb 0x14000b170
mov byte [rbp - 0x45], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x46]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000b1e4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b1df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b1df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
mov dword [rbp - 0x50], 0x2d352f12
mov dword [rbp - 0x4c], 0x3e2a223a
mov dword [rbp - 0x48], 0x282a6026
mov word [rbp - 0x44], gethostname
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14000b210
mov byte [rbp - 0x42], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x43]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000b284
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b27f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b27f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
mov dword [rbp - 0x50], 0x2c232f03
mov dword [rbp - 0x4c], 0x62392f25
mov dword [rbp - 0x48], 0x2a3628
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x14000b2b0
mov byte [rbp - 0x44], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x45]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000b324
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b31f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b31f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
mov dword [rbp - 0x50], 0x2729231d
mov dword [rbp - 0x4c], 0x627f7c3a
mov dword [rbp - 0x48], 0x2a3628
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x14000b350
mov byte [rbp - 0x44], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x45]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000b3c4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b3bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b3bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
movdqa xmm0, xmmword [0x14008c6a0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x100
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x10
jb 0x14000b3f0
mov byte [rbp - 0x3f], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000b464
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b45f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b45f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
movdqa xmm0, xmmword [0x14008c6f0]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x14008c710]
movdqu xmmword [rbp - 0x40], xmm1
mov dword [rbp - 0x30], 0x1054657
mov dword [rbp - 0x2c], 0x945431d
mov dword [rbp - 0x28], 0x1000b15
mov rcx, rbx
nop
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x2a
jb 0x14000b4a0
mov byte [rbp - 0x25], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x26]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000b514
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b50f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b50f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
mov dword [rbp - 0x50], 0x3d03350e
mov dword [rbp - 0x4c], 0x3e2e3a24
mov dword [rbp - 0x48], 0x35372b63
mov word [rbp - 0x44], 0x100
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x14000b540
mov byte [rbp - 0x43], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x44]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000b5b4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b5af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b5af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
mov dword [rbp - 0x50], 0x2c73703d
mov dword [rbp - 0x4c], 0x29652d2b
mov dword [rbp - 0x48], 0x1002b35
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xa
jb 0x14000b5e0
mov byte [rbp - 0x45], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x46]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000b654
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b64f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b64f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
movdqa xmm0, xmmword [0x14008c690]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], Ordinal_50
mov byte [rbp - 0x3e], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x11
jb 0x14000b680
mov byte [rbp - 0x3e], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3f]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140012e80
nop
lea rcx, [rbp - 0x20]
call fcn.14000a870
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000b6f4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b6ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b6ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140078dbc
test rdi, rdi
jne 0x14000b8b5
movdqa xmm0, xmmword [0x14008c680]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x100
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x10
jb 0x14000b720
mov byte [rbp - 0x3f], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b8b5
mov dword [rbp - 0x50], 0x272a2308
mov dword [rbp - 0x4c], 0x1a6b333b
mov dword [rbp - 0x48], 0x35382b24
mov word [rbp - 0x44], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14000b770
mov byte [rbp - 0x42], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b8b5
mov dword [rbp - 0x50], 0x2b283415
mov dword [rbp - 0x4c], 0x6c38392c
mov dword [rbp - 0x48], 0x243c2701
mov word [rbp - 0x44], 0x100
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x14000b7c0
mov byte [rbp - 0x43], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b8b5
mov dword [rbp - 0x50], 0x3d03350e
mov dword [rbp - 0x4c], 0x3e2e3a24
mov word [rbp - 0x48], 0x100
mov rcx, rbx
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 8
jb 0x14000b800
mov byte [rbp - 0x47], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b8b5
mov dword [rbp - 0x50], 0x1813120d
mov dword [rbp - 0x4c], 0x2e2e0e69
mov dword [rbp - 0x48], 0x35282938
mov word [rbp - 0x44], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14000b850
mov byte [rbp - 0x42], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000b8b5
mov dword [rbp - 0x50], 0x312b2a0a
mov dword [rbp - 0x4c], 0x2c280d
mov byte [rbp - 0x48], 1
nop word [rax + rax]
lea eax, [rbx + 0x45]
xor byte [rbp + rbx - 0x50], al
inc rbx
cmp rbx, 7
jb 0x14000b890
mov byte [rbp - 0x48], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14000b8ba
call fcn.1400062f0
mov qword [rbp + 0x10], 0x7d0
lea rcx, [rbp + 0x10]
call fcn.140012780
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret