Function at 0x140064ab0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
mov rax, qword [0x140170e40]
xor rax, rsp
mov qword [rbp + 0x3f], rax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x2f]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rbp + 0x37]
lea r8, [rbp - 9]
sub eax, dword [0x140170d38]
lea rcx, [rbp - 1]
mov edx, 2
mov qword [rbp - 9], 0
movd xmm0, eax
mov eax, dword [rbp + 0x3b]
sub eax, dword [0x140170d3c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0x1400ebf70]
movss dword [rbp - 1], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0x1400ebf6c]
movss dword [rbp + 3], xmm0
call fcn.140028af0
movss xmm0, dword [0x1401a70fc]
lea rcx, [rbp - 1]
movss xmm1, dword [0x1401a70f8]
xor edx, edx
movss dword [rbp - 1], xmm0
movss dword [rbp + 3], xmm1
call fcn.140028b40
xor edi, edi
mov dword [rbp - 9], 0x524e5676
mov ecx, edi
mov dword [rbp - 5], 0x100585f
nop
lea eax, [rcx + 0x38]
xor byte [rbp + rcx - 9], al
inc rcx
cmp rcx, 6
jb 0x140064b70
xor edx, edx
mov byte [rbp - 2], dil
mov r8d, 0x168
lea rcx, [rbp - 9]
call fcn.14000c160
cmp byte [0x1401a7a77], dil
je 0x140064cf3
mov qword [rsp + 0xa0], rbx
lea rdx, [rbp - 1]
xor r9d, r9d
movaps xmmword [rsp + 0x80], xmm6
mov r8b, 1
mov dword [0x1401a70fc], 0x43888000
lea rcx, [0x1400ec0a0]
mov dword [0x1401a70f8], 0x42f40000
mov dword [rbp - 1], 0x437c0000
mov dword [rbp + 3], 0x42480000
call fcn.14000eda0
call fcn.1400514b0
call fcn.1400514b0
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
lea rbx, [0x140170d98]
movss xmm0, dword [0x1400ebfd0]
lea rcx, [rbp - 1]
mov rdx, rbx
movss dword [rsp + 0x20], xmm0
cmova rdx, qword [0x140170d98]
xor r9d, r9d
xor r8d, r8d
call fcn.140010720
lea rcx, [rbp - 1]
movss xmm6, dword [rax]
call fcn.14001c040
movss xmm0, dword [rax]
subss xmm0, xmm6
cvtps2pd xmm1, xmm0
mulsd xmm1, qword [0x140114898]
cvtpd2ps xmm0, xmm1
call fcn.140028650
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rbx, qword [0x140170d98]
mov rcx, rbx
call fcn.140054480
call fcn.140019ce0
call fcn.140050530
call fcn.1400514b0
lea rcx, [rbp - 1]
mov dword [rbp - 1], 0x42a00000
mov dword [rbp + 3], 0x42b40000
call fcn.1400285d0
movaps xmm6, xmmword [rsp + 0x80]
mov rcx, rdi
mov rbx, qword [rsp + 0xa0]
mov dword [rbp - 1], 0x42c80000
mov dword [rbp + 3], 0x41d00000
mov dword [rbp - 9], 0x1005277
nop word [rax + rax]
lea eax, [rcx + 0x38]
xor byte [rbp + rcx - 9], al
inc rcx
cmp rcx, 2
jb 0x140064cc0
lea rdx, [rbp - 1]
mov byte [rbp - 6], dil
lea rcx, [rbp - 9]
call fcn.14004a510
test al, al
je 0x140064cf3
mov byte [0x1401a7a77], dil
mov byte [0x1401a7a76], dil
cmp byte [0x1401a7a7c], dil
je 0x140064e3c
xor r9d, r9d
mov dword [0x1401a70fc], 0x43880000
mov r8b, 1
mov dword [0x1401a70f8], 0x42f40000
lea rdx, [rbp - 1]
mov dword [rbp - 1], 0x437f0000
lea rcx, [0x1400ec0a0]
mov dword [rbp + 3], 0x42480000
call fcn.14000eda0
movdqa xmm0, xmmword [0x140116cc0]
mov rcx, rdi
movdqa xmm1, xmmword [0x140116cf0]
movdqu xmmword [rbp + 7], xmm0
mov word [rbp + 0x27], 0x100
movdqu xmmword [rbp + 0x17], xmm1
nop dword [rax + rax]
lea eax, [rcx + 0x38]
xor byte [rbp + rcx + 7], al
inc rcx
cmp rcx, 0x20
jb 0x140064d60
lea rcx, [rbp + 7]
mov byte [rbp + 0x28], dil
call fcn.140054480
movdqa xmm0, xmmword [0x1401166d0]
mov rcx, rdi
movdqa xmm1, xmmword [0x140116e20]
movdqu xmmword [rbp + 7], xmm0
mov dword [rbp + 0x27], 0x382e301a
movdqu xmmword [rbp + 0x17], xmm1
mov word [rbp + 0x2b], gethostname
mov byte [rbp + 0x2d], 1
nop dword [rax + rax]
lea eax, [rcx + 0x38]
xor byte [rbp + rcx + 7], al
inc rcx
cmp rcx, 0x25
jb 0x140064db0
lea rcx, [rbp + 7]
mov byte [rbp + 0x2d], dil
call fcn.140054480
call fcn.140019ce0
call fcn.140050530
call fcn.1400514b0
lea rcx, [rbp - 1]
mov dword [rbp - 1], 0x42a00000
mov dword [rbp + 3], 0x42b40000
call fcn.1400285d0
mov dword [rbp - 1], 0x42c80000
mov dword [rbp + 3], 0x41d00000
mov dword [rbp - 9], 0x1005277
nop dword [rax + rax]
lea eax, [rdi + 0x38]
xor byte [rbp + rdi - 9], al
inc rdi
cmp rdi, 2
jb 0x140064e10
lea rdx, [rbp - 1]
mov byte [rbp - 6], 0
lea rcx, [rbp - 9]
call fcn.14004a510
test al, al
je 0x140064e3c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
call fcn.1400199e0
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.1400e4810
mov rdi, qword [rsp + 0xa8]
add rsp, 0x90
pop rbp
ret