Function at 0x140082850
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x1e8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x160], 0xfffffffffffffffe
mov r14d, r9d
mov ebx, r8d
mov r13d, edx
mov rsi, rcx
mov dword [rbp + 0xe0], edx
movzx eax, byte [0x1401ed1c1]
mov ecx, 0x18
mov edx, 8
call fcn.140011190
test rax, rax
je 0x14008315c
mov rdi, rax
mov qword [rax], 0
mov qword [rax + 8], 4
mov qword [rax + 0x10], 0
call fcn.14000ea90
lea r8, [0x140082690]
mov rcx, rax
xor edx, edx
mov r9, rdi
call qword [sym.imp.user32.dll_EnumDisplayMonitors]
test eax, eax
je 0x140083121
mov dword [rbp + 0x130], r14d
mov dword [rbp + 0x140], ebx
mov qword [rbp + 0xf8], rsi
mov rax, qword [rdi + 8]
mov qword [rbp + 0x150], rdi
imul r15, qword [rdi + 0x10], 0x68
add r15, rax
lea rdi, [rbp + 0x100]
jmp 0x14008292d
lea rax, [r14 + 0x68]
cmp esi, r13d
je 0x140082c79
cmp rax, r15
je 0x140082bd8
mov r14, rax
mov rax, qword [rax + 0x60]
mov qword [rbp + 0x50], rax
movups xmm0, xmmword [r14 + 0x50]
movaps xmmword [rbp + 0x40], xmm0
movups xmm0, xmmword [r14 + 0x40]
movaps xmmword [rbp + 0x30], xmm0
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmm2, xmmword [r14 + 0x20]
movups xmm3, xmmword [r14 + 0x30]
movaps xmmword [rbp + 0x20], xmm3
movaps xmmword [rbp + 0x10], xmm2
movaps xmmword [rbp], xmm1
movaps xmmword [rbp - 0x10], xmm0
lea rcx, [rbp + 0x18]
call fcn.140087c50
mov rbx, rax
mov r12, rdx
test rdx, rdx
je 0x1400829c0
mov rax, r12
shr rax, 0x3e
jne 0x140083146
lea rsi, [r12 + r12]
movzx eax, byte [0x1401ed1c1]
mov edx, 2
mov rcx, rsi
call fcn.140011190
test rax, rax
je 0x14008314d
mov rdi, rax
jmp 0x1400829c7
mov edi, 2
xor esi, esi
mov rcx, rdi
mov rdx, rbx
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x100], r12
mov qword [rbp + 0x108], rdi
mov qword [rbp + 0x110], r12
lea rdi, [rbp + 0x100]
mov rcx, rdi
call fcn.140081ba0
mov rcx, rdx
mov qword [rbp + 0x158], rdx
sub rcx, 1
mov qword [rbp + 0x148], rax
jb 0x140083136
lea rcx, [rax + rcx*2]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x108], rcx
mov word [rbp + 0x110], 0
lea rcx, [rbp + 0x60]
mov rdx, rdi
call fcn.140081620
mov rax, qword [rbp + 0x158]
lea rdx, [rax + rax]
mov r8d, 2
mov rcx, qword [rbp + 0x148]
call fcn.1400111a0
mov rcx, qword [rbp + 0x68]
mov rax, qword [rbp + 0x70]
imul edx, eax, 0x27220a95
mov r8, rax
rol edx, 5
shr r8, 0x20
xor edx, r8d
imul esi, edx, 0x27220a95
cmp rax, 4
jb 0x140082ad0
lea r8, [rax - 4]
mov edx, r8d
shr edx, 2
inc edx
and edx, 3
je 0x140082ad5
shl rdx, 2
xor r9d, r9d
nop word [rax + rax]
rol esi, 5
xor esi, dword [rcx + r9]
imul esi, esi, 0x27220a95
add r9, 4
cmp rdx, r9
jne 0x140082aa0
lea rdx, [rcx + r9]
sub rax, r9
cmp r8, 0xc
jae 0x140082ae0
jmp 0x140082b27
mov rdx, rcx
jmp 0x140082b27
mov rdx, rcx
cmp r8, 0xc
jb 0x140082b27
nop
rol esi, 5
xor esi, dword [rdx]
imul r8d, esi, 0x27220a95
rol r8d, 5
xor r8d, dword [rdx + 4]
imul r8d, r8d, 0x27220a95
rol r8d, 5
xor r8d, dword [rdx + 8]
imul r8d, r8d, 0x27220a95
rol r8d, 5
xor r8d, dword [rdx + 0xc]
imul esi, r8d, 0x27220a95
add rdx, 0x10
add rax, 0xfffffffffffffff0
cmp rax, 3
ja 0x140082ae0
test rax, rax
je 0x140082bbb
mov r9, rax
mov r8, rdx
and r9, 3
je 0x140082b58
nop dword [rax]
movzx r10d, byte [r8]
rol esi, 5
inc r8
xor esi, r10d
imul esi, esi, 0x27220a95
dec r9
jne 0x140082b40
cmp rax, 4
jb 0x140082bbb
add rdx, rax
nop word cs:[rax + rax]
rol esi, 5
movzx eax, byte [r8]
xor esi, eax
imul eax, esi, 0x27220a95
movzx r9d, byte [r8 + 1]
rol eax, 5
xor eax, r9d
imul eax, eax, 0x27220a95
movzx r9d, byte [r8 + 2]
rol eax, 5
xor eax, r9d
imul eax, eax, 0x27220a95
movzx r9d, byte [r8 + 3]
rol eax, 5
xor eax, r9d
imul esi, eax, 0x27220a95
add r8, 4
cmp r8, rdx
jne 0x140082b70
mov rdx, qword [rbp + 0x60]
test rdx, rdx
je 0x140082920
mov r8d, 1
call fcn.1400111a0
jmp 0x140082920
lea rax, [rbp + 0xe0]
mov qword [rbp + 0x100], rax
lea rax, [0x14013ca70]
mov qword [rbp + 0x108], rax
lea rax, str.Cant_find_a_display_by_id
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], 1
mov qword [rbp + 0x10], 0
mov qword [rbp], rdi
mov qword [rbp + 8], 1
lea rcx, [rbp - 0x10]
call fcn.140142450
mov rdi, rax
mov rsi, qword [rbp + 0x150]
mov rax, qword [rsi]
test rax, rax
je 0x140082c49
mov rcx, qword [rsi + 8]
imul rdx, rax, 0x68
mov r8d, 4
call fcn.1400111a0
mov edx, 0x18
mov r8d, 8
mov rcx, rsi
call fcn.1400111a0
mov rsi, qword [rbp + 0xf8]
mov qword [rsi + 8], rdi
movabs rax, 0x8000000000000000
mov qword [rsi], rax
jmp 0x14008310c
movups xmm0, xmmword [r14 + 0x58]
movups xmmword [rbp + 0xcc], xmm0
movups xmm0, xmmword [r14 + 0x4c]
movaps xmmword [rbp + 0xc0], xmm0
movups xmm0, xmmword [r14 + 0xc]
movups xmm1, xmmword [r14 + 0x1c]
movups xmm2, xmmword [r14 + 0x2c]
movups xmm3, xmmword [r14 + 0x3c]
movaps xmmword [rbp + 0xb0], xmm3
movaps xmmword [rbp + 0xa0], xmm2
movaps xmmword [rbp + 0x90], xmm1
movaps xmmword [rbp + 0x80], xmm0
mov rsi, qword [rbp + 0x150]
mov rax, qword [rsi]
test rax, rax
je 0x140082ce3
mov rcx, qword [rsi + 8]
imul rdx, rax, 0x68
mov r8d, 4
call fcn.1400111a0
mov edx, 0x18
mov r8d, 8
mov rcx, rsi
call fcn.1400111a0
movups xmm0, xmmword [rbp + 0x9c]
movups xmm1, xmmword [rbp + 0xac]
movups xmm2, xmmword [rbp + 0xbc]
movups xmm3, xmmword [rbp + 0xcc]
movaps xmmword [rbp + 0x20], xmm3
movaps xmmword [rbp + 0x10], xmm2
movaps xmmword [rbp], xmm1
movaps xmmword [rbp - 0x10], xmm0
lea rcx, [rbp - 0x10]
mov rdx, rcx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.gdi32.dll_CreateDCW]
mov qword [rbp + 0x158], rax
mov rcx, rax
call qword [sym.imp.gdi32.dll_CreateCompatibleDC]
mov qword [rbp + 0x148], rax
mov r15, qword [rbp + 0xf8]
mov esi, dword [rbp + 0x1d0]
mov edi, dword [rbp + 0x1d8]
mov rcx, qword [rbp + 0x158]
mov edx, esi
mov r8d, edi
call qword [sym.imp.gdi32.dll_CreateCompatibleBitmap]
mov rcx, qword [rbp + 0x148]
mov qword [rbp + 0x150], rax
mov rdx, rax
call qword [sym.imp.gdi32.dll_SelectObject]
mov rcx, qword [rbp + 0x158]
mov edx, 4
call qword [sym.imp.gdi32.dll_SetStretchBltMode]
mov dword [rsp + 0x48], edi
mov dword [rsp + 0x40], esi
mov eax, dword [rbp + 0x130]
mov dword [rsp + 0x38], eax
mov eax, dword [rbp + 0x140]
mov dword [rsp + 0x30], eax
mov rax, qword [rbp + 0x158]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
mov dword [rsp + 0x50], 0xcc0020
mov rcx, qword [rbp + 0x148]
xor edx, edx
xor r8d, r8d
mov r9d, esi
call qword [sym.imp.gdi32.dll_StretchBlt]
test eax, eax
je 0x140082e7a
call fcn.14000ea90
mov dword [rbp + 0x100], 0x28
mov dword [rbp + 0x104], esi
mov dword [rbp + 0x108], edi
mov dword [rbp + 0x10c], 0x200001
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], 0
mov dword [rbp + 0x128], eax
mov edx, edi
imul edx, esi
movsxd rax, edx
lea rcx, [rax*4]
test eax, eax
mov qword [rbp + 0x140], rcx
mov dword [rbp + 0x13c], edx
je 0x140082e9d
js 0x14008316b
mov edx, 1
call fcn.1400111c0
mov rcx, rax
test rax, rax
jne 0x140082ea2
mov ecx, 1
mov rdx, qword [rbp + 0x140]
call fcn.140148da0
jmp 0x1400831b6
call fcn.140084000
mov rcx, rax
call fcn.140142340
mov qword [r15 + 8], rax
movabs rax, 0x8000000000000000
mov qword [r15], rax
jmp 0x1400830e5
mov ecx, 1
lea rax, [rbp + 0x100]
mov qword [rsp + 0x28], rax
mov qword [rbp + 0x130], rcx
mov qword [rsp + 0x20], rcx
mov dword [rsp + 0x30], 0
mov rcx, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x150]
xor r8d, r8d
mov r9d, edi
call qword [sym.imp.gdi32.dll_GetDIBits]
test eax, eax
je 0x140083075
lea rcx, [rbp + 0x60]
call fcn.140083c80
lea r8, [rbp + 0x60]
mov rcx, qword [rbp + 0x150]
mov edx, 0x20
call qword [sym.imp.gdi32.dll_GetObjectW]
test esi, esi
je 0x140083172
movsxd rax, esi
shl rax, 2
mov rcx, qword [rbp + 0x130]
mov qword [rbp - 0x28], rcx
mov rcx, qword [rbp + 0x140]
mov qword [rbp - 0x20], rcx
mov qword [rbp - 0x18], rax
lea rcx, [rbp + 0xe0]
lea rdx, [rbp - 0x28]
call fcn.140083a40
mov rdi, qword [rbp + 0xe8]
mov rbx, qword [rbp + 0xf0]
cmp rbx, 2
jb 0x140082fb5
mov rax, rbx
shr rax, 1
lea rcx, [rbx + rbx*2]
lea rcx, [rdi + rcx*8]
add rcx, 0xffffffffffffffe8
mov rdx, rdi
nop word cs:[rax + rax]
mov r8, qword [rdx + 0x10]
mov qword [rbp + 0x90], r8
movups xmm0, xmmword [rdx]
movaps xmmword [rbp + 0x80], xmm0
mov r8, qword [rcx + 0x10]
mov qword [rdx + 0x10], r8
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
mov r8, qword [rbp + 0x90]
mov qword [rcx + 0x10], r8
movaps xmm0, xmmword [rbp + 0x80]
movups xmmword [rcx], xmm0
add rdx, 0x18
add rcx, 0xffffffffffffffe8
dec rax
jne 0x140082f70
mov esi, dword [rbp + 0x64]
mov r14d, dword [rbp + 0x68]
lea rcx, [rbp + 0x80]
mov rdx, rdi
mov r8, rbx
call fcn.140083500
lea r9, [rbp + 0x80]
mov rcx, r15
mov edx, esi
mov r8d, r14d
call fcn.1400821c0
test rbx, rbx
je 0x140083012
lea rsi, [rdi + 8]
jmp 0x140082ff9
add rsi, 0x18
dec rbx
je 0x140083012
mov rdx, qword [rsi - 8]
test rdx, rdx
je 0x140082ff0
mov rcx, qword [rsi]
mov r8d, 1
call fcn.1400111a0
jmp 0x140082ff0
mov rax, qword [rbp + 0xe0]
test rax, rax
je 0x140083034
shl rax, 3
lea rdx, [rax + rax*2]
mov r8d, 8
mov rcx, rdi
call fcn.1400111a0
cmp dword [rbp + 0x13c], 0
je 0x140083056
mov r8d, 1
mov rcx, qword [rbp + 0x130]
mov rdx, qword [rbp + 0x140]
call fcn.1400111a0
mov rcx, qword [rbp + 0x150]
call qword [sym.imp.gdi32.dll_DeleteObject]
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.gdi32.dll_DeleteDC]
jmp 0x1400830ff
lea rax, str.Get_RGBA_data_failed
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], 1
lea rax, [0x140174b68]
mov qword [rbp + 0x90], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
lea rcx, [rbp + 0x80]
call fcn.140142450
mov qword [r15 + 8], rax
movabs rax, 0x8000000000000000
mov qword [r15], rax
cmp dword [rbp + 0x13c], 0
je 0x1400830e5
mov r8d, 1
mov rcx, qword [rbp + 0x130]
mov rdx, qword [rbp + 0x140]
call fcn.1400111a0
mov rcx, qword [rbp + 0x150]
call qword [sym.imp.gdi32.dll_DeleteObject]
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.gdi32.dll_DeleteDC]
mov rcx, qword [rbp + 0x158]
call qword [sym.imp.gdi32.dll_DeleteDC]
nop
add rsp, 0x1e8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.140084000
mov rcx, rax
call fcn.140142340
mov rdi, rax
jmp 0x140082c63
lea r8, [0x140174b50]
xor edx, edx
call fcn.1401494f0
jmp 0x1400831b6
call fcn.14012fc90
jmp 0x1400831b6
mov ecx, 2
mov rdx, rsi
call fcn.140148da0
jmp 0x1400831b6
mov ecx, 8
mov edx, 0x18
call fcn.140148da0
call fcn.14012fc90
jmp 0x1400831b6
lea rax, [0x140174b88]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], 1
lea rax, [0x140174b68]
mov qword [rbp + 0x90], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
lea rdx, str.C:Users10549.cargo_registry_srcindex.crates.io_6f17d22bba15001f_screenshots_0.8.10_srcwin32.rs
lea rcx, [rbp + 0x80]
call fcn.140148ef0
ud2