Function at 0x140040480
Capabilities:
Encode data using xor

Disassembly:
movss xmm0, dword [0x1400420f0]
movsd xmm1, qword [0x1400420f8]
mov dword [rsp + 0x210], 0x2561a28c
movss xmm2, dword [rsp + 0x1b4]
mov al, byte [rsp + 0x127]
mov cl, byte [rsp + 0x127]
mul cl
mov byte [rsp + 0x227], al
cvtss2sd xmm2, xmm2
mov rdx, qword [rsp + 0x148]
imul r8, rdx, 0x31047129
addsd xmm2, xmm1
mov qword [rsp + 0x218], r8
cvtsd2ss xmm1, xmm2
movss dword [rsp + 0x17c], xmm1
ucomiss xmm0, xmm1
ja 0x140040263
jmp 0x14004038c
mov eax, 0xd7358f
mov ecx, eax
mov dl, 0x69
mov eax, 0x23615308
mov r8d, 0x23615cf7
mov r9w, word [rsp + 0x146]
or r9w, 0x6165
mov word [rsp + 0x216], r9w
mov r9w, word [rsp + 0x146]
xor r9w, 0xffff
mov word [rsp + 0x216], r9w
mov r10d, dword [rsp + 0x208]
mov r11d, dword [rsp + 0x208]
mov esi, dword [rsp + 0x208]
mov bl, byte [rsp + 0x127]
and bl, bl
sub r8d, r11d
mov byte [rsp + 0x227], bl
add esi, 0xdc9ec1dd
mov bl, byte [rsp + 0x127]
sub bl, bl
sub eax, r10d
mov byte [rsp + 0x227], bl
mov bl, byte [rsp + 0x20d]
mov byte [rsp + 0x227], 0x88
sub dl, bl
mov dword [rsp + 0x210], 0xc80345e5
mov rdi, qword [rsp + 0x180]
mov qword [rsp + 0x218], 0x211a23b2
mov r14, qword [sym.imp.KERNEL32.dll_DeleteTimerQueue]
mov r10d, 0xd7358f
mov r15d, r10d
mov qword [rsp + 0x110], rcx
mov rcx, r15
mov qword [rsp + 0x108], rdi
mov byte [rsp + 0x107], dl
mov dword [rsp + 0x100], esi
mov dword [rsp + 0xfc], r8d
mov dword [rsp + 0xf8], eax
call r14
mov r8d, 0x98a602
mov ecx, r8d
mov dl, 0xbb
mov bl, byte [rsp + 0x127]
mov dword [rsp + 0xf4], eax
mov al, bl
mul dl
mov byte [rsp + 0x227], al
mov rdi, qword [sym.imp.USER32.dll_WaitForInputIdle]
mov r8d, 0x98a602
mov r14d, r8d
mov qword [rsp + 0xe8], rcx
mov rcx, r14
mov edx, dword [rsp + 0xf8]
call rdi
lea rcx, [rsp + 0x15b]
mov edx, 0x23614f2c
mov r8d, 0x236158ec
sub r8d, dword [rsp + 0x208]
mov r10d, dword [rsp + 0x208]
mov r9w, word [rsp + 0x20e]
mov r11d, dword [rsp + 0x140]
sub r11d, r11d
mov dword [rsp + 0x210], r11d
xor r9w, 0xb628
sub edx, r10d
mov bp, word [rsp + 0x146]
or bp, 0xf251
mov rdi, qword [rsp + 0x200]
mov word [rsp + 0x216], bp
mov r10d, dword [rsp + 0x208]
add rdi, 0xffffffffdcf29449
add r10d, 0xdc9ebf0c
mov bl, byte [rsp + 0x107]
mov byte [rsp + 0x15b], bl
mov r14, rsp
mov dword [r14 + 0x20], r10d
mov r14, qword [sym.imp.USER32.dll_LookupIconIdFromDirectoryEx]
lea r15, [rsp + 0x15b]
mov qword [rsp + 0xe0], rcx
mov rcx, r15
mov r10d, dword [rsp + 0x100]
mov dword [rsp + 0xdc], r8d
mov r8d, r10d
mov r11d, dword [rsp + 0xfc]
mov word [rsp + 0xda], r9w
mov r9d, r11d
mov dword [rsp + 0xd4], eax
mov qword [rsp + 0xc8], rdi
call r14
mov edx, 0x3ed44b
mov ecx, edx
mov rdi, qword [sym.imp.KERNEL32.dll_TerminateJobObject]
mov edx, 0x3ed44b
mov r14d, edx
mov qword [rsp + 0xc0], rcx
mov rcx, r14
mov edx, dword [rsp + 0xdc]
mov dword [rsp + 0xbc], eax
call rdi
mov bp, word [rsp + 0xda]
mov dx, bp
mov rcx, qword [sym.imp.SHLWAPI.dll_ChrCmpIW]
mov qword [rsp + 0xb0], rcx
mov ecx, edx
mov rdi, qword [rsp + 0xb0]
mov dword [rsp + 0xac], eax
call rdi
lea rdi, [rsp + 0x190]
mov ecx, dword [rsp + 0x140]
xor ecx, 0xcf4d142
mov dword [rsp + 0x210], ecx
mov r14, qword [sym.imp.GDI32.dll_CreateBitmapIndirect]
lea rcx, [rsp + 0x190]
mov dword [rsp + 0xa8], eax
mov qword [rsp + 0xa0], rdi
call r14
mov edx, 0x230d7270
mov ecx, edx
mov bl, byte [rsp + 0x127]
sub bl, 0xb
mov byte [rsp + 0x227], bl
mov bp, word [rsp + 0x146]
imul bp, bp
mov rdi, qword [rsp + 0x200]
mov word [rsp + 0x216], bp
sub rcx, rdi
mov bp, word [rsp + 0x146]
add bp, 0x265d
mov word [rsp + 0x216], bp
mov rdi, qword [rsp + 0x108]
add rdi, rcx
mov edx, dword [rsp + 0x140]
imul r8d, edx, 0x3c4113ba
mov dword [rsp + 0x210], r8d
and edx, edx
mov dword [rsp + 0x210], edx
mov qword [rsp + 0x180], rdi
mov edx, dword [rsp + 0x140]
add edx, 0x45792d0f
mov dword [rsp + 0x210], edx
mov rcx, qword [rsp + 0xc8]
cmp rdi, rcx
mov qword [rsp + 0x98], rax
je 0x140040567
jmp 0x14003fef4
lea rax, [rsp + 0x1b0]
movss xmm0, dword [rsp + 0x17c]
movss dword [rsp + 0x1b4], xmm0
mov cx, word [rsp + 0x146]
mov word [rsp + 0x216], cx
mov rdx, qword [rsp + 0x200]
xor rdx, 0x19f9961f
mov byte [rsp + 0x227], 0x47
mov r8, qword [rsp + 0x200]
mov r9, qword [str.P__v_]
mov byte [rsp + 0x227], 0xbf
mov r10d, dword [rsp + 0x208]
add r8, 0x31fac089
mov word [rsp + 0x216], 0xe8ac
movss xmm0, dword [rsp + 0x1b4]
mov r11b, byte [rsp + 0x127]
xor r11b, r11b
add r10d, 0xdc9eb1ea
mov byte [rsp + 0x227], r11b
mov esi, dword [rsp + 0x208]
xor esi, 0x23614eb7
cvttss2si ecx, xmm0
mov qword [rsp + 0x1b8], rdx
mov edi, dword [rsp + 0x140]
and edi, 0xf5fe135
mov dword [rsp + 0x210], edi
mov rdx, qword [rsp + 0x1b8]
mov qword [rsp + 0x90], rdx
mov rdx, r9
mov qword [rsp + 0x88], r8
mov r8d, esi
mov r9d, r10d
mov qword [rsp + 0x20], rax
call fcn.1400406a0
mov dword [rsp + 0x84], eax
call fcn.14003b210
xorps xmm0, xmm0
movss dword [rsp + 0x17c], xmm0
mov rdx, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x88]
cmp rdx, rbx
mov dword [rsp + 0x80], eax
je 0x140040263
jmp 0x14003fe7f
mov eax, 0x230d726f
mov ecx, eax
lea rdx, [rsp + 0x190]
mov r8b, byte [rsp + 0x127]
add r8b, 0x1f
mov r9, qword [rsp + 0x200]
mov byte [rsp + 0x227], r8b
sub rcx, r9
mov qword [rsp + 0x160], rdx
mov qword [rsp + 0x180], rcx
jmp 0x14003fef4
mov eax, 0x2e9b73
mov ecx, eax
lea rdx, [rsp + 0x1c8]
mov r8b, byte [rsp + 0x127]
add r8b, 0x39
mov byte [rsp + 0x227], r8b
mov r9, qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov eax, 0x2e9b73
mov r10d, eax
lea r11, [rsp + 0x1c8]
add byte [rax - 0x77], cl
and al, 0x78
add byte [rax - 0x77], cl
and al, 0x78
mov rcx, r10
mov qword [rsp + 0x70], rdx
mov rdx, r11
call r9
mov si, word [rsp + 0x146]
and si, si
mov edi, dword [rsp + 0x208]
xor edi, 0x2361469b
mov word [rsp + 0x216], si
mov rcx, qword [sym.imp.KERNEL32.dll_GetThreadLocale]
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x68], edi
call rcx
mov edi, 0x6969ba
mov ecx, edi
mov edi, 0x23615a01
sub edi, dword [rsp + 0x208]
mov rdx, qword [rsp + 0x148]
mov qword [rsp + 0x218], rdx
sub rdx, rdx
mov ebx, dword [rsp + 0x208]
mov qword [rsp + 0x218], rdx
add byte [rax], al
xor ebx, 0x23614e7a
mov rdx, qword [sym.imp.KERNEL32.dll_GetConsoleFontSize]
mov ebp, 0x6969ba
mov r9d, ebp
mov qword [rsp + 0x60], rcx
mov rcx, r9
mov ebp, dword [rsp + 0x68]
mov qword [rsp + 0x58], rdx
mov edx, ebp
mov r9, qword [rsp + 0x58]
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x50], edi
mov dword [rsp + 0x4c], ebx
call r9
mov edx, 0x69568f
mov ecx, edx
lea r9, [rsp + 0x15c]
mov edx, dword [rsp + 0x50]
mov dword [rsp + 0x15c], edx
mov r10, qword [sym.imp.KERNEL32.dll_GetNamedPipeServerProcessId]
mov edx, 0x69568f
mov r11d, edx
lea rdx, [rsp + 0x15c]
mov qword [rsp + 0x40], rcx
mov rcx, r11
mov dword [rsp + 0x3c], eax
mov qword [rsp + 0x30], r9
call r10
mov edi, 0x23614e18
mov ebx, dword [rsp + 0x208]
mov si, word [rsp + 0x146]
mov word [rsp + 0x216], si
sub edi, ebx
mov qword [rsp + 0x218], 0x13cf79dc
mov r8b, 0xa4
mov r14b, byte [rsp + 0x127]
mov dword [rsp + 0x2c], eax
mov al, r14b
mul r8b
mov ebx, dword [rsp + 0x16c]
mov byte [rsp + 0x227], al
add ebx, edi
mov dword [rsp + 0x1c4], ebx
mov edi, dword [rsp + 0x4c]
cmp ebx, edi
je 0x140040633
jmp 0x1400405ad
mov byte [rsp + 0x227], 0xfc
mov eax, dword [rsp + 0x208]
mov cl, byte [rsp + 0x127]
xor cl, 0xff
mov byte [rsp + 0x227], cl
mov cl, byte [rsp + 0x127]
or cl, 0xb
xor eax, 0x23614e17
mov byte [rsp + 0x227], cl
add rsp, 0x228
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
mov eax, dword [rsp + 0x1c4]
mov word [rsp + 0x216], 0xc40a
mov dword [rsp + 0x16c], eax
mov rcx, qword [rsp + 0x148]
mov qword [rsp + 0x218], rcx
xor rcx, 0x755fb2f4
mov qword [rsp + 0x218], rcx
mov dx, word [rsp + 0x146]
xor dx, 0x3aff
mov r8w, word [rsp + 0x20e]
mov word [rsp + 0x216], dx
mov r9b, byte [rsp + 0x127]
or r9b, 0x56
xor r8w, 0x20ba
mov dx, word [rsp + 0x18e]
mov byte [rsp + 0x227], r9b
cmp r8w, dx
jae 0x14003fe7f
jmp 0x1400403cf
xorps xmm0, xmm0
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x170], rax
mov dword [rsp + 0x210], 0x229058c4
mov dword [rsp + 0x210], 0xc84c5cda
mov ecx, dword [rsp + 0x140]
xor ecx, 0x263e9b4f
mov edx, dword [rsp + 0x208]
mov dword [rsp + 0x210], ecx
xor edx, 0x23614e17
mov dword [rsp + 0x1b0], edx
movss dword [rsp + 0x17c], xmm0
jmp 0x140040263