Function at 0x7ff698f6ecb0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x100
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x7ff69902b080]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov r12, rcx
mov qword [rbp - 0x19], rcx
mov qword [rbp - 1], rcx
xor edi, edi
lea rcx, [rbp + 7]
call qword [sym.imp.user32.dll_GetCursorPos]
mov eax, dword [0x7ff699014784]
mov dword [rsp + 0x20], eax
movzx ecx, word [0x7ff699014788]
mov word [rsp + 0x24], cx
movzx eax, byte [0x7ff69901478a]
mov byte [rsp + 0x20], 0x52
xor byte [rsp + 0x21], 0x3a
xor byte [rsp + 0x22], 0x3b
xor byte [rsp + 0x23], 0x3c
xor cl, 0x3d
mov byte [rsp + 0x24], cl
xor byte [rsp + 0x25], 0x3e
xor al, 0x3f
mov byte [rsp + 0x26], al
lea rdx, [rsp + 0x20]
xor ecx, ecx
call qword [sym.imp.user32.dll_FindWindowA]
mov rcx, rax
lea rdx, [rbp + 7]
call qword [sym.imp.user32.dll_ScreenToClient]
movss xmm7, dword [0x7ff699015824]
mov r13d, edi
mov r15, qword [r12]
mov rsi, qword [r12 + 8]
mov qword [rsp + 0x48], rsi
cmp r15, rsi
je 0x7ff698f6f358
mov rax, rsi
mov r12d, dword [0x7ff69902b0d0]
nop dword [rax]
mov rsi, qword [r15]
test rsi, rsi
je 0x7ff698f6f347
lea rdx, [rsi + 0x48]
call fcn.7ff698f80a30
lea rcx, [rbp - 0x79]
test rax, rax
je 0x7ff698f6edb8
mov rdx, rax
call fcn.7ff698f800a0
jmp 0x7ff698f6edd9
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x69], rdi
mov qword [rbp - 0x61], rdi
mov r8d, 4
lea rdx, [0x7ff698ffe330]
call fcn.7ff698f3fda0
lea rdi, [rbp - 0x79]
cmp qword [rbp - 0x61], 0xf
cmova rdi, qword [rbp - 0x79]
mov r14, qword [0x7ff699056390]
mov rbx, qword [0x7ff699056388]
cmp rbx, r14
je 0x7ff698f6ee3b
nop word [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], 0
jne 0x7ff698f6ee07
mov r8, qword [rbx + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x7ff698f6ee21
mov rcx, qword [rbx]
cmp r8, rax
jne 0x7ff698f6ee32
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x7ff698f6ee3b
add rbx, 0x20
cmp rbx, r14
jne 0x7ff698f6ee00
lea rcx, [rbp - 0x79]
call fcn.7ff698f3d390
cmp rbx, r14
jne 0x7ff698f6f340
movzx eax, byte [0x7ff699056284]
test al, al
jne 0x7ff698f6eee0
mov rdx, qword [0x7ff6990562e8]
test rdx, rdx
je 0x7ff698f6ee84
add rdx, 0xc8
call fcn.7ff698f80a30
cmp rsi, rax
je 0x7ff698f6f340
movzx eax, byte [0x7ff699056284]
test al, al
jne 0x7ff698f6eee0
cmp byte [0x7ff699056287], al
je 0x7ff698f6eee4
lea rdx, [rsi + 0x1d8]
call fcn.7ff698f80a30
mov rbx, rax
mov rdx, qword [0x7ff6990562e8]
test rdx, rdx
je 0x7ff698f6eecc
add rdx, 0xc8
call fcn.7ff698f80a30
test rax, rax
je 0x7ff698f6eecc
lea rdx, [rax + 0x1d8]
call fcn.7ff698f80a30
xor edi, edi
jmp 0x7ff698f6eed0
xor edi, edi
mov eax, edi
cmp rbx, rax
je 0x7ff698f6f342
movzx eax, byte [0x7ff699056284]
cmp al, 1
je 0x7ff698f6eefc
lea rdx, [rsi + 0x258]
call fcn.7ff698f80a30
mov rsi, rax
test rax, rax
je 0x7ff698f6f340
mov ecx, dword [0x7ff6990562a8]
test ecx, ecx
je 0x7ff698f6f220
sub ecx, 1
je 0x7ff698f6f192
sub ecx, 1
je 0x7ff698f6efc0
cmp ecx, 1
jne 0x7ff698f6f340
movsd xmm0, qword [0x7ff6990147e8]
movsd qword [rsp + 0x28], xmm0
movzx ecx, word [0x7ff6990147f0]
mov word [rsp + 0x30], cx
movzx eax, byte [0x7ff6990147f2]
mov byte [rsp + 0x28], 0x4c
xor byte [rsp + 0x29], 0x3a
xor byte [rsp + 0x2a], 0x3b
xor byte [rsp + 0x2b], 0x3c
xor byte [rsp + 0x2c], 0x3d
xor byte [rsp + 0x2d], 0x3e
xor byte [rsp + 0x2e], 0x3f
xor byte [rsp + 0x2f], 0x40
xor cl, 0x41
mov byte [rsp + 0x30], cl
xor byte [rsp + 0x31], 0x42
xor al, 0x43
mov byte [rsp + 0x32], al
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
xor edi, edi
mov qword [rbp - 0x69], rdi
mov qword [rbp - 0x61], rdi
lea rax, [rsp + 0x28]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], dil
jne 0x7ff698f6efa0
lea rdx, [rsp + 0x28]
lea rcx, [rbp - 0x79]
call fcn.7ff698f3fda0
lea r8, [rbp - 0x79]
jmp 0x7ff698f6f28b
movups xmm0, xmmword [0x7ff6990147d0]
movups xmmword [rbp - 0x79], xmm0
movzx eax, byte [0x7ff6990147e0]
mov byte [rbp - 0x69], al
xor edi, edi
mov r8d, edi
cmp r12d, 2
jl 0x7ff698f6f11d
movdqa xmm5, xmmword [0x7ff6990158f0]
movdqa xmm4, xmmword [0x7ff699015b80]
movdqa xmm6, xmmword [0x7ff699015930]
movdqa xmm0, xmmword [0x7ff699015a20]
movdqa xmmword [rbp - 0x39], xmm0
lea rcx, [rbp - 0x75]
mov edx, dword [rbp - 0x39]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x7ff698f6f010
cmp r8d, 0x11
jge 0x7ff698f6f163
movsxd rax, r8d
lea r9, [rbp - 0x79]
add r9, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x7ff698f6f130
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], rdi
mov qword [rbp - 0x41], rdi
lea rax, [rbp - 0x79]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], dil
jne 0x7ff698f6f180
lea rdx, [rbp - 0x79]
jmp 0x7ff698f6f27e
movsd xmm0, qword [0x7ff699014778]
movsd qword [rsp + 0x38], xmm0
movzx ecx, word [0x7ff699014780]
mov word [rsp + 0x40], cx
movzx eax, byte [0x7ff699014782]
mov byte [rsp + 0x38], 0x55
xor byte [rsp + 0x39], 0x3a
xor byte [rsp + 0x3a], 0x3b
xor byte [rsp + 0x3b], 0x3c
xor byte [rsp + 0x3c], 0x3d
xor byte [rsp + 0x3d], 0x3e
xor byte [rsp + 0x3e], 0x3f
xor byte [rsp + 0x3f], 0x40
xor cl, 0x41
mov byte [rsp + 0x40], cl
xor byte [rsp + 0x41], 0x42
xor al, 0x43
mov byte [rsp + 0x42], al
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xor edi, edi
mov qword [rbp - 0x49], rdi
mov qword [rbp - 0x41], rdi
lea rax, [rsp + 0x38]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], dil
jne 0x7ff698f6f210
lea rdx, [rsp + 0x38]
jmp 0x7ff698f6f27e
mov eax, dword [0x7ff69901478c]
mov dword [rsp + 0x20], eax
movzx eax, byte [0x7ff699014790]
mov byte [rsp + 0x20], 0x48
xor byte [rsp + 0x21], 0x3a
xor byte [rsp + 0x22], 0x3b
xor byte [rsp + 0x23], 0x3c
xor al, 0x3d
mov byte [rsp + 0x24], al
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xor edi, edi
mov qword [rbp - 0x49], rdi
mov qword [rbp - 0x41], rdi
lea rax, [rsp + 0x20]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], dil
jne 0x7ff698f6f270
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x59]
call fcn.7ff698f3fda0
lea r8, [rbp - 0x59]
mov rdx, rsi
call fcn.7ff698f801c0
mov rbx, rax
test rax, rax
je 0x7ff698f6f342
lea rdx, [rax + 0x158]
call fcn.7ff698f80a30
test rax, rax
je 0x7ff698f6f342
lea r8, [rax + 0x144]
lea rdx, [rbp - 0x11]
call fcn.7ff698f80ae0
lea r8, [rbp - 0x11]
lea rdx, [rbp - 0x29]
call fcn.7ff698f80740
cmp byte [rbp - 0x21], 0
je 0x7ff698f6f342
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [rbp + 7]
movss xmm2, dword [rbp - 0x29]
subss xmm2, xmm0
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [rbp + 0xb]
movss xmm3, dword [rbp - 0x25]
subss xmm3, xmm1
mulss xmm3, xmm3
mulss xmm2, xmm2
addss xmm3, xmm2
xorps xmm0, xmm0
ucomiss xmm0, xmm3
ja 0x7ff698f6f316
xorps xmm0, xmm0
sqrtss xmm0, xmm3
jmp 0x7ff698f6f31e
movaps xmm0, xmm3
call sub.ucrtbase.dll_sqrtf
movd xmm1, dword [0x7ff69902d300]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jb 0x7ff698f6f342
mov rax, qword [rsp + 0x48]
comiss xmm7, xmm0
jbe 0x7ff698f6f347
mov r13, rbx
movaps xmm7, xmm0
jmp 0x7ff698f6f347
xor edi, edi
mov rax, qword [rsp + 0x48]
add r15, 8
cmp r15, rax
jne 0x7ff698f6ed90
mov r12, qword [rbp - 0x19]
mov rcx, qword [r12]
test rcx, rcx
je 0x7ff698f6f3a1
mov rdx, qword [r12 + 0x10]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x7ff698f6f38e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x7ff698f6f3db
mov rcx, r8
call fcn.7ff698fe9f20
mov qword [r12], rdi
mov qword [r12 + 8], rdi
mov qword [r12 + 0x10], rdi
mov rax, r13
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.7ff698fe98c0
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3