Function at 0x140119470
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0xfc8]
mov eax, 0x10b0
call fcn.1401b0350
sub rsp, rax
mov rax, qword [0x140231ec8]
xor rax, rsp
mov qword [rbp + 0xfa0], rax
mov dil, cl
xor r12d, r12d
cmp byte [0x1402479c0], r12b
je 0x1401194c4
test dl, dl
je 0x140119f23
mov r15d, 0x80
or rsi, 0xffffffffffffffff
mov r14d, 0x1000
cmp dword [0x140230a44], r12d
je 0x14011958d
mov rcx, r12
mov r9, r12
lea rbx, str.8g30w1_5r7_2ta
mov r8d, 0x480
xor byte [r9 + rbx], cl
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 1
add rcx, 3
add rcx, rdx
and ecx, 0xffffff
inc r9
cmp r9, r8
jb 0x1401194f4
cmp dword [0x140230a44], r12d
je 0x14011966a
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.1401b2770
lea rax, [rbp - 0x60]
mov ecx, 9
movups xmm0, xmmword [rax]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rbx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rbx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rbx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rbx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rbx + 0x60], xmm0
add rbx, r15
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rbx - 0x10], xmm1
add rax, r15
sub rcx, 1
jne 0x14011953e
jmp 0x14011966a
mov ecx, 0x4fd
call fcn.1400f70b0
mov rbx, rax
cmp word [rax], 0x23
jne 0x1401195ba
cmp word [rax + 2], 0x23
jne 0x1401195ba
mov rax, rsi
inc rax
cmp word [rbx + rax*2], r12w
jne 0x1401195aa
cmp rax, 0x64
jae 0x1401195c1
mov rbx, qword [str.0C69__3V_hwrqw_nlrhbngw.qgshf_clk._kckgvgfa:_Ipitvdg8RBTMEEiambhj_rdgf_gmuqqucswnmk_Peuamiwcbprp__G5_9hwrqw_nlrhbngw.qgshf_clk._kckgvgfa:_Ipitvdg8RBTMEEiambhj_rdgf_gmuqqexvhvbfvftrmhl8_U_vdjltfeuqug8_B__QMoH0V5hwrqw_nlrhbngw.qgshf_clk._kckgvgfa:_Ipitvdg8RBTMEEiambhj_rdgf_dxwkwegwauqlom__Rcwckouadvprf__Ek9]
mov r8, r14
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.1401b2770
lea rcx, [rbx + 4]
mov r8, r14
lea rdx, [rbp - 0x60]
call fcn.1401058b4
lea rax, [rbp - 0x60]
mov r8, rsi
inc r8
cmp byte [rax + r8], r12b
jne 0x1401195e6
lea rdx, [rbp - 0x60]
lea rbx, str.8g30w1_5r7_2ta
mov rcx, rbx
call fcn.14011856c
test al, al
jne 0x14011966a
xor edx, edx
mov r8d, 0x480
lea rcx, [rbp - 0x60]
call fcn.1401b2770
lea rax, [rbp - 0x60]
mov ecx, 9
movups xmm0, xmmword [rax]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rbx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rbx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rbx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rbx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rbx + 0x60], xmm0
add rbx, r15
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rbx - 0x10], xmm1
add rax, r15
sub rcx, 1
jne 0x140119620
call fcn.1400b63a0
test al, al
jne 0x14011967f
cmp dword [0x140233aa0], 0x28
mov sil, 1
ja 0x140119682
mov sil, r12b
test dil, dil
je 0x140119eee
call fcn.1400d0c20
cmp eax, 0x501
ja 0x1401196a7
test dword [0x140230a40], 0x200
je 0x140119f23
cmp byte [0x140230db0], r12b
je 0x140119f23
mov byte [0x140230b5b], r12b
mov byte [0x140230c5f], r12b
mov byte [0x140230eaf], r12b
test sil, sil
jne 0x1401196e1
mov al, byte [0x140230a40]
and al, r15b
neg al
sbb eax, eax
and dword [0x140230a48], eax
mov dil, r12b
mov r15d, 0x27
cmp dword [0x140230a58], r12d
jbe 0x14011991c
call fcn.1400b63a0
test al, al
jne 0x14011991c
mov qword [rbp - 0x80], r12
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
lea r8d, [r15 - 0x1f]
lea rdx, str.RemShown
lea rcx, [rbp - 0x80]
call fcn.1400041b8
nop
mov qword [rsp + 0x60], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
lea r8d, [r15 - 0x19]
lea rdx, str.InterfaceMisc
lea rcx, [rsp + 0x60]
call fcn.1400041b8
nop
xor r8d, r8d
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.1401165ec
mov ebx, eax
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140119799
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r14
jb 0x140119794
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140119f59
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r12w
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1401197e8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, r14
jb 0x1401197e3
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140119f5f
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r12w
cmp ebx, dword [0x140230a58]
jae 0x14011991c
mov qword [rsp + 0x60], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov r8d, 8
lea rdx, str.RemShown
lea rcx, [rsp + 0x60]
call fcn.1400041b8
nop
mov qword [rbp - 0x80], r12
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov r8d, 0xe
lea rdx, str.InterfaceMisc
lea rcx, [rbp - 0x80]
call fcn.1400041b8
nop
lea r8d, [rbx + 1]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.140118304
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14011989d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, r14
jb 0x140119898
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140119f65
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r12w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x1401198ec
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r14
jb 0x1401198e7
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140119f6b
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r12w
mov dil, 1
cmp byte [0x140230a5c], r12b
je 0x140119d03
lea rdx, [0x140230a5c]
jmp 0x140119cf1
cmp dword [0x140230b5c], r12d
jbe 0x140119b4e
test sil, sil
je 0x140119b4e
mov qword [rsp + 0x60], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov r8d, 0xb
lea rdx, str.ExpRemShown
lea rcx, [rsp + 0x60]
call fcn.1400041b8
nop
mov qword [rbp - 0x80], r12
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov r8d, 0xe
lea rdx, str.InterfaceMisc
lea rcx, [rbp - 0x80]
call fcn.1400041b8
nop
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.1401165ec
mov ebx, eax
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1401199c9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, r14
jb 0x1401199c4
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140119f71
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r12w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140119a18
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r14
jb 0x140119a13
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140119f77
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r12w
cmp ebx, dword [0x140230b5c]
jae 0x140119b4e
mov qword [rsp + 0x60], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov r8d, 0xb
lea rdx, str.ExpRemShown
lea rcx, [rsp + 0x60]
call fcn.1400041b8
nop
mov qword [rbp - 0x80], r12
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov r8d, 0xe
lea rdx, str.InterfaceMisc
lea rcx, [rbp - 0x80]
call fcn.1400041b8
nop
lea r8d, [rbx + 1]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.140118304
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140119acf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, r14
jb 0x140119aca
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140119f7d
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r12w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140119b1e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r14
jb 0x140119b19
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140119f83
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r12w
mov dil, 1
cmp byte [0x140230b60], r12b
je 0x140119d03
lea rdx, [0x140230b60]
jmp 0x140119cf1
cmp dword [0x140230c60], r12d
jbe 0x140119d03
call fcn.1400b63a0
test al, al
je 0x140119d03
mov qword [rsp + 0x60], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov r8d, 0xb
lea rdx, str.RegRemShown
lea rcx, [rsp + 0x60]
call fcn.1400041b8
nop
mov qword [rbp - 0x80], r12
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov r8d, 0xe
lea rdx, str.InterfaceMisc
lea rcx, [rbp - 0x80]
call fcn.1400041b8
nop
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.1401165ec
mov ebx, eax
lea rcx, [rbp - 0x80]
call fcn.140006b94
nop
lea rcx, [rsp + 0x60]
call fcn.140006b94
cmp ebx, dword [0x140230c60]
jae 0x140119d03
mov qword [rsp + 0x60], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov r8d, 0xb
lea rdx, str.RegRemShown
lea rcx, [rsp + 0x60]
call fcn.1400041b8
nop
mov qword [rbp - 0x80], r12
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov r8d, 0xe
lea rdx, str.InterfaceMisc
lea rcx, [rbp - 0x80]
call fcn.1400041b8
nop
lea r8d, [rbx + 1]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.140118304
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140119c7b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, r14
jb 0x140119c76
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140119f89
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r12w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140119cca
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r14
jb 0x140119cc5
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140119f53
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r12w
mov dil, 1
cmp byte [0x140230c64], r12b
je 0x140119d03
lea rdx, [0x140230c64]
mov r8d, 0x100
lea rcx, [0x140230db0]
call fcn.1400fed5c
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0x10624dd3
mul ecx
mov ebx, edx
shr ebx, 6
call fcn.1400b63a0
test al, al
je 0x140119ec0
mov ecx, dword [0x140230a54]
test ecx, ecx
je 0x140119d3b
xor edx, edx
mov eax, ebx
div ecx
test edx, edx
jne 0x140119d3b
mov dil, 1
test dil, dil
je 0x140119f23
mov ecx, dword [0x140230a40]
shl ecx, 0x11
not ecx
and ecx, 0x40000
or ecx, 0x16c80000
mov esi, ecx
or esi, 0x30000
test byte [0x140230a40], 8
cmovne esi, ecx
mov ebx, 0x80000000
mov edi, ebx
mov r14d, ebx
mov r15d, ebx
mov ecx, dword [0x140230d68]
test ecx, ecx
je 0x140119e29
cmp dword [0x140230d64], r12d
je 0x140119e29
call fcn.140162f0c
mov ebx, eax
mov ecx, 0x21
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea edi, [rbx + rax*2]
mov ecx, 4
call qword [sym.imp.USER32.dll_GetSystemMetrics]
add edi, eax
mov eax, dword [0x140230a40]
test al, 0x40
jne 0x140119dc7
bt eax, 8
jb 0x140119dcd
add edi, dword [0x1402479bc]
mov ecx, dword [0x140230d64]
call fcn.140162ed4
mov ebx, eax
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea ebx, [rbx + rax*2]
xor r9d, r9d
lea r8, [rsp + 0x60]
xor edx, edx
lea ecx, [rdx + 0x30]
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
mov eax, dword [rsp + 0x68]
mov r14d, eax
cmp ebx, eax
cmovl r14d, ebx
sub eax, r14d
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
mov eax, dword [rsp + 0x6c]
mov r15d, eax
cmp edi, eax
cmovl r15d, edi
sub eax, r15d
cdq
sub eax, edx
sar eax, 1
mov edi, eax
mov edx, 0x100
lea rcx, [0x140230db0]
call fcn.1401189f0
mov qword [rsp + 0x58], r12
mov rcx, qword [0x14023fc58]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], ebx
mov r9d, esi
lea r8, [0x1401e0b40]
lea rdx, str.RarReminder
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
test byte [0x140230a40], 1
je 0x140119eae
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
or rdx, 0xffffffffffffffff
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowPos]
cmp qword [0x140233a68], r12
je 0x140119f23
mov byte [0x1402479c0], 1
jmp 0x140119f23
test sil, sil
jne 0x140119ee6
mov ecx, dword [0x140230a4c]
test ecx, ecx
je 0x140119d3b
mov eax, ebx
xor edx, edx
div ecx
test edx, edx
jne 0x140119d3b
jmp 0x140119d44
mov ecx, dword [0x140230a50]
jmp 0x140119ecb
test sil, sil
je 0x140119f23
mov byte [0x1402479c0], 1
call qword [sym.imp.USER32.dll_GetFocus]
mov qword [rsp + 0x20], r12
lea r9, [0x1401864f0]
mov r8, rax
lea rdx, str.REMINDER
mov rcx, qword [0x14023fc50]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov rcx, qword [rbp + 0xfa0]
xor rcx, rsp
call fcn.1401afad0
lea r11, [rsp + 0x10b0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
int3