Function at 0x1400057f0
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
push rbp
push r14
push r15
lea rbp, [r11 - 0x5f]
sub rsp, 0xc0
mov qword [rbp - 0x11], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
mov qword [r11 + 0x20], rdi
mov rax, qword [0x1402987c8]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov qword [0x1402aa078], rcx
xor r15d, r15d
mov qword [r11 - 0x80], r15
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], 0x80000000
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xcf0000
lea r8, [0x1402aa080]
lea rdx, [0x1402a9fb0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r14, rax
test rax, rax
je 0x140005abc
xor edx, edx
mov rcx, r14
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r14
call qword [sym.imp.USER32.dll_UpdateWindow]
xor r9d, r9d
mov edx, 0x3e9
mov r8d, 0x493e0
mov rcx, r14
call qword [sym.imp.USER32.dll_SetTimer]
xor r9d, r9d
mov edx, 0x3ea
lea r8d, [rdx - 2]
mov rcx, r14
call qword [sym.imp.USER32.dll_SetTimer]
mov word [rbp - 0x19], 0x5252
mov byte [rbp - 0x17], 0x52
xor eax, eax
mov qword [rbp - 1], rax
mov qword [rbp + 7], rax
mov qword [rbp + 0xf], rax
movdqa xmm0, xmmword [0x140258d00]
movdqu xmmword [rbp + 0x27], xmm0
mov byte [rbp + 0x17], al
mov r8d, 0x1824
lea rdx, str.2wIcFV9YSFhSUlJfGxoWAFJSUgBSUlIAWlRSUlKVftHJUlJSUyEAFRBS_JxOu1JSUlsiGgshUlJcllJSXJZTx3lcSVJSVnA7BgomCh8eaDE9P3wzNj0wN3wqPyJSUlJSUm4qaCo_Ij83JjNyKj8PCFoKm9wMzY9MDdoPCFoPzcmM31wcipoKj8iJjlvcAofAnIRPSA3cmd8ZnxicGxYcnJybiA2NGgAFhRyKj8PCFoIDY0b3A6JiYiaH19JSUlfCVhfD0gNX1ja2trfWJgfWBgfyA2NH8hKzwmMyp_PCFxcGxYcnJycnJybiA2NGgWNyExIDsiJjs9PHIgNjRoMzA9JyZvcHBYcnJycnJycnJycnJyKj8PCFoJjs0NG9wOiYmImh9fTwhfDM2PTA3fDE9P30mOzQ0fWN8Yn1wWHJycnJycnJycnJycio_PjwhaDcqOzRvcDomJiJofX08IXwzNj0wN3wxPT99Nyo7NH1jfGJ9cFhycnJycnJycnJycnIqPz48IWg2MW9wOiYmImh9fSInID58PSA1fTYxfTcNz83PCYhfWN8Y31wWHJycnJycnJycnJycio_PjwhaCo_Im9wOiYmImh9fTwhfDM2PTA3fDE9P30qMyJ9Y3xifXBsWHJycnJycnJycm4mOzQ0aAA3IT0JyY7PTwHPDsmbGBufSY7NDRoADchPT4nJjs9PAc8OyZsWHJycnJycnJycm4mOzQ0aBE9PyIgNyEhOz08bGdufSY7NDRoET0_IiA3ISE7PTxsWHJycnJycnJycm4mOzQ0aAoANyE9PicmOz08bGtkbn0mOzQ0aAoANyE9PicmOz08bFhycnJycnJycnJuJjs0NGgdIDs3PCYzJjs9PGxjbn0mOzQ0aB0gOzc8JjMmOz08bFhycnJycnJycnJuJjs0NGgLADchPT4nJjs9PGxrZG59Jjs0NGgLADchPT4nJjs9PGxYcnJycnJycnJybjcqOzRoAjsqNz4KFjs_NzwhOz08bGpgbn03Kjs0aAI7KjcChY7Pzc8ITs9PGxYcnJycnJycnJybjcqOzRoET0PSABIjMxN2xjbn03Kjs0aBE9Pj0gASIzMTdsWHJycnJycnJycm43Kjs0aAI7KjcCxY7Pzc8ITs9PGxqYG59Nyo7NGgCOyo3PgsWOz83PCE7PTxsWHJycnJycnJycm42MWghJzA4NzEmbFhycnJycnJycnJycnJuIDY0aBAzNX1sWHJycnJycnJycm59NjFoIScwODcxJmxYcnJycnJycnJybio_ImgfPTY7NCsWMyY3bGBiY2p_Ymd_Y2cGYmNoYmdoZmNufSo_ImgfPTY7NCsWMyY3bFhycnJycnJycnJuKj8iaBEgNzMmPSAGPT0bAI7KjcPzMmPSByYXxlbn0qPyJoESA3MyY9IAY9PT5sWHJycnJycm59IDY0aBY3ITEgOyImOz08bFhycnJufSA2NGgAFhRsWG59KmgqPyI_NyYzbFiXy8KnUlJfwhsWEwYqU7Jmf02B0eVozz8oBSMHVfIgl4XlFxOY3BkQQNVFJAWQK1SwHQDWzJwWy1SW3HwI1RBYt6qcUY1FPIboT5MX2byMmW_vSGKeB7vbGG7wcnR__toWpzgGpvuekJf3nnfu4vFFVhOR04nTidOJ04nTidOJ04nTidGJp09HhjeDqaZzMb2khblVdTG7p6tqU3W4hsrHVTI3hU0YZl4HlJz4SglgOjcyPPfIvwlAP2CfLlW3P5dW9h3TqXiVCTtQKIsyxVQgQSpJU1Cy5cjs75vjbFdIbvKcFvXxreYkqAptL8RYJ3ty6YBXXE6i0unyu5DmRRcIhea1FahGntBassWD7fF9CKn9vI5nL1iq4lLZnILX0I5WMpNRv8C6gPSZgMA5tiFyE89UW0bCzWUvxKQGpjuF6FRmR4bXUA9KmlTjnRILVEAyxRUFJCAckgxOU1twypRC9d5WUZaYltCqG_wvhiZgfy9OU17q3leGrw1_cGm1XOCJWfnWU1ZVvnwOfA58bmIY_KN29Tenq8RKzXgB4SBcsdeldBenLTUaLRuhamDKYspjO2Ya82mHSlW0Wyb8cukAVENaUhPoaFC8lPRJgFBYfpIHnODiTGyUUsMHFGjEBet01D63sHP0lNVsmmDCf9XRDKSU_8gzYk5wfK1ME8WMXgbN3iJUu57qAzBMTITxtcHlC9UBEQ85IKnZkyYZqWlSziOmCQsKW1ERwILOW3nF84cjiGbnuvSPkIfDER7H0I3TjplFeXmhOvbBES4CUuKkXnSh_SJltI2VwYJHSjLnV46nCw9QiFfwh_ivtOeadh2y2dqbTMEzxQA6JyUCr6u4TmmIgnwf5bow1S54GkGHzuTsvmvu9h6G8wbzaLC4lbAkQaVFAZvCccPfkXzGKRFyR7TMEmTa0GPc_lKjqBpLyWLTekH5xqdhC7JYMFzVW4uBzNkM2saSStyTh1pCq4LTjFRI3aoGzYWZE4HqNCOq5TWnzr9M1jePk3NNSNL8ulcjjNOFU4NU6DVC8IiYVJgl2QRMGCHQ3UAbsN4Hhg81Rv6vmYQsw6mVlrnDofVDaUzZzmpG6gbqRur657pNg_mD47oWtnP3jbuPbJsTisdn2tKafML4zj2do0rriLQB7wLBdEgAAYL1du6WF5ungVK2rqul5UW5OmwZLeOSYqpgSrFkkXFWCREAiP9RrKTRlYiVXYJzSQsKpE6AmxCvVcHI9GWJyDEL8ZL827eikm3xDfWdGRy0M0uZMK5u44_PpPu6InYcYwTuVOyh6m6xbshaHjKYW0uaovfW15KKdzV1cDkJU_YxmT6mEu2O9otnufxypgyekLzpKuA1QscOhteCowBKBWSNqklJ0JeYPSTL0hz3mn17gmRTS0sAn4F2SCfBMMK3WnhWRtkybNjeSkJ5wd5wNl9PVhYP6MthVctleyL9XGn2hVybSy6k1KAvNWzbRijXx9SY38XU4xFvIUiwvWCTlSEve4REubOWXoIxA10BLuAAFIRl8B0gLvgPSaSejmmoNy90wiOQVnZJP7oEBFR4OUJvIu7hK2hJSSaklmBzLLguW2rX0LHcWF5W5Z1HIe226wDJuCb69hTwRQL_4D6nLuGVTA9VlwaoNX50zwrC3YTNkgapF1Sqei3DZARfbCa5AEyfrNL2lXoItxt9Ui8fncjYxV7NXToJYEuRY0gzZTBgEevMv4bSt81ZyzNgfztKHbhLNiIvvpkvc48PfET5DPwOded8FTNwb2mEvdmk9FVh2yWBvOnnakwecrBgPSHDx2fFUDsMrw4g6OGfUIAYuF3En8gRy1rwr_QEY9XR78qyDfjBBzoJbn0k49J7vMjdb4HuuDM77FWVNrfcjk9U9wRAEgYjzXRseYMcyxN__DbGS7HSrCkYuDtGdhQa4u54VIMyTnA3KJ2LqZO_9y0vZedBwhfpK18e0VTqwQA2_xy_b0TscL9fPZZ3evgUdpCMGXMJ6tP0nfA14Njsc_7O5rMGzKw_sqXfXn1tXcjpmOtPx_1P___FNPdc95t0OwJ038Qd_Nb10iu22Ljf_lwVdE16WDV2DMwxrBSvHcmflDoiOJFaLj_Q9xSH6WpCfR4CgfmkPiWdeE0Ezsd2EhjYMzw7ubNrYoj77pXQfjUEs4PRtrnZUj1BL_XTs1ZBCOEjjj95gfD639mcf8O_0wVLwsp6NsCMfsqTuw_vVjyrQD21DwawTntyIpyWdxmQuTJgyLekqNTtw9vSA3bEf1KpcPUPy0BBsAoZkVCYlct8AeQV5ZytjYC1n_P_4Z1sEY9C5NmdaHJHMC45TtpXzCBHL9wFajFkez_qWyY7Au3AIUE4D8jqIf1_rRlb5WoLokkRMJSp1MaX3HwXkkKOgHla88Cc4FJiMZ38mYTVMRMgkOanaU_6gX2PbZrnvRS10NsB7jfHRrS1FQ0_zWqHPYEkRMJUZq9yyqdlwpNeW3rrS6DmIj2OVSOJ_1tDTMb57OPD8xE0hT4iCmF9z7zlvQizUgLXQ2wHuHq7H
lea rcx, [rbp + 0x17]
call fcn.140002ca0
nop
lea rdx, [rbp + 0x17]
lea rcx, [rbp - 1]
call fcn.140002720
nop
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0x10
jb 0x14000594c
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005947
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005ae5
call fcn.14000c9f4
xor eax, eax
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x27], rax
lea rdx, [rbp - 1]
lea rcx, [rbp + 0x17]
call fcn.140008180
nop
mov r10d, r15d
mov rbx, qword [rbp + 0x17]
mov r9, qword [rbp - 1]
cmp qword [rbp + 7], r9
je 0x1400059c7
mov r8, r15
mov rcx, r15
movabs r11, 0xaaaaaaaaaaaaaaab
nop dword [rax]
mov rax, r11
mul rcx
shr rdx, 1
lea rax, [rdx + rdx*2]
sub rcx, rax
movzx eax, byte [rbp + rcx - 0x19]
xor al, byte [r9 + r8]
mov byte [rbx + r8], al
inc r10d
lea r8, [r8 + 1]
mov rax, qword [rbp + 7]
mov r9, qword [rbp - 1]
sub rax, r9
movsxd rcx, r10d
cmp rcx, rax
jb 0x140005990
mov rdx, qword [rbp + 0x1f]
sub rdx, rbx
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], SafeArrayRedim
mov dword [rsp + SafeArrayRedim], 0x20
mov r9d, 0x30000
mov r8d, 1
mov rcx, rbx
call qword [sym.imp.USER32.dll_CreateIconFromResourceEx]
mov rsi, rax
mov ecx, 0x3d0
call fcn.14000c004
mov rdi, rax
test rax, rax
je 0x140005a4b
xor edx, edx
mov r8d, 0x3d0
mov rcx, rax
call fcn.1401b62f0
test rsi, rsi
je 0x140005a4b
mov qword [rdi + 0x20], rsi
mov qword [rdi + 8], r14
mov qword [rdi + 0x14], 7
mov dword [rdi + 0x10], 1
mov dword [rdi], 0x3d0
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
nop
test rbx, rbx
je 0x140005a81
mov rdx, qword [rbp + 0x27]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x140005a78
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005ae5
mov rcx, rbx
call fcn.14000c9f4
nop
mov rcx, qword [rbp - 1]
test rcx, rcx
je 0x140005ab7
mov rdx, qword [rbp + 0xf]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005ab2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005ae5
call fcn.14000c9f4
mov eax, 1
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.14018e750
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.1401b8a34
nop
int3