Function at 0x140049fc0
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x100
mov rax, qword [0x14006b060]
xor rax, rsp
mov qword [rsp + 0xa8], rax
xor ebx, ebx
lea edi, [rbx + 4]
nop dword [rax]
vpxor xmm0, xmm0, xmm0
vmovups ymmword [rsp + 0x78], ymm0
vmovups xmmword [rsp + 0x98], xmm0
mov dword [rsp + 0x20], 1
lea rcx, [rsp + 0x78]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
vzeroupper
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14004a03b
lea rcx, [rsp + 0x78]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x78]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor edx, edx
mov qword [0x1401a3ec8], rbx
lea rcx, str.UnityWndClass
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [0x1401a3ec8], rax
test rax, rax
je 0x14004a186
lea rdx, [rsp + 0x58]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x1401a3ec8]
lea rdx, [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetClientRect]
cmp dword [0x140fb4098], ebx
mov eax, dword [rsp + 0x70]
mov dword [0x14006bcb4], eax
mov eax, dword [rsp + 0x74]
mov dword [0x14006bcb0], eax
jne 0x14004a0ae
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x140fb4098], eax
cmp dword [0x140fb40ac], ebx
jne 0x14004a0c4
mov ecx, edi
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x140fb40ac], eax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [0x1401a3eb8]
mov qword [0x140fb4ae8], rax
cmp rax, rcx
jne 0x14004a10f
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1401a3eb8]
xor r9d, r9d
mov dword [rsp + 0x30], 0x40
xor r8d, r8d
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
lea rdx, [r9 - 1]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, qword [0x1401a3ec8]
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongA]
test eax, 0xc00000
je 0x14004a14d
mov eax, dword [0x140fb4098]
test eax, eax
jns 0x14004a134
inc eax
mov r8d, dword [0x140fb40ac]
mov edx, dword [rsp + 0x58]
sar eax, 1
add r8d, eax
add r8d, dword [rsp + 0x5c]
add edx, eax
jmp 0x14004a156
mov r8d, dword [rsp + 0x5c]
mov edx, dword [rsp + 0x58]
mov eax, dword [0x14006bcb0]
mov r9d, dword [0x14006bcb4]
mov rcx, qword [0x1401a3eb8]
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_MoveWindow]
call fcn.14004ea20
jmp 0x140049ff0
lea rdx, [rsp + 0x40]
call fcn.140049f50
mov r10, rax
movzx eax, byte [rax + 6]
test al, al
je 0x14004a1be
xor byte [r10], 0x30
xor byte [r10 + 1], 0x31
xor byte [r10 + 2], 0x32
xor byte [r10 + 3], 0x33
xor byte [r10 + 4], 0x34
xor byte [r10 + 5], 0x35
xor al, 0x36
mov byte [r10 + 6], al
vmovaps xmmword [rsp + 0xf0], xmm6
lea rdx, [rsp + 0x48]
vmovaps xmmword [rsp + 0xe0], xmm7
vmovaps xmmword [rsp + 0xd0], xmm8
vmovaps xmmword [rsp + 0xc0], xmm9
vmovaps xmmword [rsp + 0xb0], xmm10
call fcn.140049f80
mov esi, 0x1f
mov r11, rax
cmp byte [rax + 0xe], 0
lea ebx, [rsi - 0x17]
je 0x14004a2fa
vmovdqu xmm5, xmmword [0x140061ed0]
vmovdqu xmm8, xmmword [0x140062020]
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm8
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm8
vshufps xmm0, xmm3, xmm2, 0xdd
vmovd xmm7, edi
vpsrad xmm4, xmm0, xmm7
vmovd xmm6, esi
vpsrld xmm1, xmm4, xmm6
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmmword [0x140061f20]
vpsubd xmm3, xmm5, xmm2
vpshufb xmm0, xmm3, xmmword [0x140061e90]
vpaddb xmm2, xmm0, xmmword [0x140061fe0]
vmovd xmm0, dword [rax]
vmovdqu xmm5, xmmword [0x140061ee0]
vpxor xmm1, xmm2, xmm0
vmovd dword [rax], xmm1
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm8
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm8
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm7
vpsrld xmm0, xmm4, xmm6
vpaddd xmm1, xmm0, xmm4
vpmulld xmm2, xmm1, xmmword [0x140061f20]
vmovd xmm0, dword [rax + 4]
vpsubd xmm3, xmm5, xmm2
vpshufb xmm1, xmm3, xmmword [0x140061e90]
vpaddb xmm2, xmm1, xmmword [0x140061fe0]
vpxor xmm1, xmm2, xmm0
vmovd dword [rax + 4], xmm1
mov r8d, ebx
lea r9, [rax + 8]
nop dword [rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0xf
jl 0x14004a2d0
xor r9d, r9d
mov r8, r10
mov rdx, r11
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rdx, [rsp + 0x48]
call fcn.140049f10
mov r9, rax
cmp byte [rax + 0xe], 0
je 0x14004a416
vmovdqu xmm5, xmmword [0x140061ed0]
vmovdqu xmm9, xmmword [0x140062020]
mov ecx, dword [0x140061fe0]
lea r8, [rax + 8]
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm9
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm9
vshufps xmm0, xmm3, xmm2, 0xdd
vmovd xmm8, edi
vpsrad xmm4, xmm0, xmm8
vmovd xmm7, esi
vpsrld xmm1, xmm4, xmm7
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmmword [0x140061f20]
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x140061e90]
vmovdqu xmm5, xmmword [0x140061ee0]
vmovd xmm0, ecx
vpaddb xmm1, xmm4, xmm0
vmovd xmm0, dword [rax]
vpxor xmm1, xmm1, xmm0
vmovd dword [rax], xmm1
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm9
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm9
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm8
vpsrld xmm0, xmm4, xmm7
vpaddd xmm1, xmm0, xmm4
vpmulld xmm2, xmm1, xmmword [0x140061f20]
vmovd xmm0, dword [rax + 4]
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x140061e90]
vmovd xmm1, ecx
vpaddb xmm2, xmm4, xmm1
vpxor xmm1, xmm2, xmm0
vmovd dword [rax + 4], xmm1
nop word [rax + rax]
mov eax, 0x5397829d
lea r8, [r8 + 1]
mul ebx
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, bl
inc ebx
sub al, cl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0xf
jl 0x14004a3f0
mov rdx, r9
lea rcx, [0x1401a2680]
call fcn.140002730
mov rcx, rax
call fcn.140002370
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]