Function at 0x14006fd40
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
push rbp
lea rbp, [rax - 0x38]
sub rsp, 0x130
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x140110040]
xor rax, rsp
mov qword [rbp - 0x18], rax
movups xmm3, xmmword [str.tXSUFW_YTO_]
mov ebx, dword [0x140110090]
xor edi, edi
cmp word [0x140101b1e], di
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm0
movsd xmm0, qword [0x140101b18]
movsd qword [rsp + 0x70], xmm0
mov qword [rbp - 0x70], 0x50
movdqu xmmword [rbp - 0x50], xmm1
mov qword [rbp - 0x28], rdi
movups xmmword [rsp + 0x60], xmm3
je 0x14006fef8
mov r8d, edi
cmp ebx, 2
jl 0x14006feaf
movdqa xmm2, xmmword [0x140103fa0]
mov r8d, 8
movdqa xmm4, xmmword [0x140104360]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140103fc0]
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movq xmm1, xmm3
movdqa xmm3, xmmword [0x140103fb0]
paddw xmm2, xmmword [0x140103ff0]
movdqa xmm0, xmm3
xorps xmm2, xmm1
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movq qword [rsp + 0x60], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140103fc0]
psubd xmm3, xmm0
pshufhw xmm0, xmm3, 0xd8
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rsp + 0x68]
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmmword [0x140103ff0]
xorps xmm2, xmm0
movq qword [rsp + 0x68], xmm2
movsxd rax, r8d
lea r9, [rsp + 0x60]
lea r9, [r9 + rax*2]
nop dword [rax + rax]
mov eax, 0xa0a0a0a1
lea r9, [r9 + 2]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x33
movzx eax, r8w
inc r8d
sub ax, cx
add ax, 0x30
xor word [r9 - 2], ax
cmp r8d, 0xc
jl 0x14006fec0
lea rax, [rsp + 0x60]
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x70]
lea rax, [0x14006fc70]
mov qword [rbp - 0x68], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov rcx, qword [0x1413f5bb8]
test rcx, rcx
je 0x14007036d
movaps xmmword [rsp + 0x110], xmm7
lea rdx, [0x1413f5c08]
movaps xmmword [rsp + 0x100], xmm8
movaps xmmword [rsp + 0xf0], xmm9
call qword [sym.imp.USER32.dll_GetClientRect]
mov rcx, qword [0x1413f5bb8]
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x20], rdi
call qword [sym.imp.USER32.dll_ClientToScreen]
cmp word [0x140101b1e], di
mov eax, dword [rbp - 0x20]
movd xmm2, dword [0x1413f5c10]
movd xmm1, dword [0x1413f5c14]
movups xmm4, xmmword [str.tXSUFW_YTO_]
mov dword [0x1413f5c08], eax
movsd xmm0, qword [0x140101b18]
mov eax, dword [rbp - 0x1c]
movdqa xmm5, xmmword [0x140103fb0]
movdqa xmm6, xmmword [0x140103fa0]
movdqa xmm9, xmmword [0x140103ff0]
movdqa xmm8, xmmword [0x140103fc0]
movdqa xmm7, xmmword [0x140104360]
cvtdq2ps xmm2, xmm2
mov dword [0x1413f5c0c], eax
cvtdq2ps xmm1, xmm1
movss dword [0x1413f5c9c], xmm2
subss xmm2, dword [0x140103d34]
movss dword [0x1413f5c98], xmm1
subss xmm1, dword [0x140103d34]
movups xmmword [rsp + 0x60], xmm4
cvttss2si r11d, xmm2
cvttss2si r10d, xmm1
movsd qword [rsp + 0x70], xmm0
je 0x140070138
mov r8d, edi
cmp ebx, 2
jl 0x1400700e7
movdqa xmm2, xmm6
movdqa xmm0, xmm6
punpckldq xmm2, xmm6
mov r8d, 8
punpckhdq xmm0, xmm6
pmuldq xmm2, xmm7
pmuldq xmm0, xmm7
shufps xmm2, xmm0, 0xdd
movdqa xmm0, xmm6
paddd xmm2, xmm6
psrad xmm2, 5
movdqa xmm1, xmm2
psrld xmm1, 0x1f
paddd xmm1, xmm2
movq xmm2, xmm9
pmulld xmm1, xmm8
psubd xmm0, xmm1
pshufhw xmm0, xmm0, 0xd8
pshuflw xmm1, xmm0, 0xd8
movdqa xmm0, xmm5
pshufd xmm3, xmm1, 0xd8
movq xmm1, xmm4
paddw xmm3, xmm2
punpckhdq xmm0, xmm5
xorps xmm3, xmm1
pmuldq xmm0, xmm7
movq qword [rsp + 0x60], xmm3
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
pmuldq xmm2, xmm7
shufps xmm2, xmm0, 0xdd
movdqa xmm0, xmm5
paddd xmm2, xmm5
psrad xmm2, 5
movdqa xmm1, xmm2
psrld xmm1, 0x1f
paddd xmm1, xmm2
movq xmm2, xmm9
pmulld xmm1, xmm8
psubd xmm0, xmm1
pshufhw xmm0, xmm0, 0xd8
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rsp + 0x68]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rsp + 0x68], xmm3
movsxd rax, r8d
lea r9, [rsp + 0x60]
lea r9, [r9 + rax*2]
nop dword [rax]
nop word [rax + rax]
mov eax, 0xa0a0a0a1
lea r9, [r9 + 2]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x33
movzx eax, r8w
inc r8d
sub ax, cx
add ax, 0x30
xor word [r9 - 2], ax
cmp r8d, 0xc
jl 0x140070100
cmp word [0x140101b1e], di
movups xmm4, xmmword [str.tXSUFW_YTO_]
movsd xmm0, qword [0x140101b18]
movups xmmword [rsp + 0x78], xmm4
movsd qword [rbp - 0x78], xmm0
je 0x140070288
mov r8d, edi
cmp ebx, 2
jl 0x140070236
movdqa xmm1, xmm6
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
movq xmm2, xmm9
pmuldq xmm0, xmm7
mov r8d, 8
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm6, xmm0
pshufhw xmm0, xmm6, 0xd8
pshuflw xmm1, xmm0, 0xd8
movdqa xmm0, xmm5
pshufd xmm3, xmm1, 0xd8
movq xmm1, xmm4
punpckhdq xmm0, xmm5
paddw xmm3, xmm2
xorps xmm3, xmm1
pmuldq xmm0, xmm7
movq qword [rsp + 0x78], xmm3
movdqa xmm1, xmm5
punpckldq xmm1, xmm5
movq xmm2, xmm9
pmuldq xmm1, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm5
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm5, xmm0
pshufhw xmm0, xmm5, 0xd8
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rbp - 0x80]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rbp - 0x80], xmm3
movsxd rax, r8d
lea r9, [rsp + 0x78]
lea r9, [r9 + rax*2]
nop dword [rax]
nop word [rax + rax]
mov eax, 0xa0a0a0a1
lea r9, [r9 + 2]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x33
movzx eax, r8w
inc r8d
sub ax, cx
add ax, 0x30
xor word [r9 - 2], ax
cmp r8d, 0xc
jl 0x140070250
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x60]
mov qword [rsp + 0x50], rdi
lea rdx, [rsp + 0x78]
mov qword [rsp + 0x48], rdi
mov r9d, 0x90000000
mov qword [rsp + 0x40], rdi
xor ecx, ecx
mov dword [rsp + 0x38], r10d
mov dword [rsp + 0x30], r11d
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_CreateWindowExW]
movaps xmm9, xmmword [rsp + 0xf0]
movaps xmm8, xmmword [rsp + 0x100]
movaps xmm7, xmmword [rsp + 0x110]
mov qword [0x14142bca8], rax
test rax, rax
jne 0x140070300
mov ecx, 4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [0x140100de0]
mov rcx, rax
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x14142bca8]
mov edx, 0xffffffec
mov r8d, 0x800a0
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov rcx, qword [0x14142bca8]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14142bca8]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rcx, qword [rbp - 0x18]
xor rcx, rsp
call fcn.140090680
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3