Function at 0x140005f60
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
push rbp
push r14
push r15
lea rbp, [r11 - 0x5f]
sub rsp, 0xc0
mov qword [rbp - 0x11], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
mov qword [r11 + 0x20], rdi
mov rax, qword [0x1402537d8]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov qword [0x140263c08], rcx
xor r15d, r15d
mov qword [r11 - 0x80], r15
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], 0x80000000
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xcf0000
lea r8, [0x140263c10]
lea rdx, [0x140263b40]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r14, rax
test rax, rax
je 0x14000622c
xor edx, edx
mov rcx, r14
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r14
call qword [sym.imp.USER32.dll_UpdateWindow]
xor r9d, r9d
mov edx, 0x3e9
mov r8d, 0x493e0
mov rcx, r14
call qword [sym.imp.USER32.dll_SetTimer]
xor r9d, r9d
mov edx, 0x3ea
lea r8d, [rdx - 2]
mov rcx, r14
call qword [sym.imp.USER32.dll_SetTimer]
mov word [rbp - 0x19], 0x5252
mov byte [rbp - 0x17], 0x52
xor eax, eax
mov qword [rbp - 1], rax
mov qword [rbp + 7], rax
mov qword [rbp + 0xf], rax
movdqa xmm0, xmmword [0x14021b660]
movdqu xmmword [rbp + 0x27], xmm0
mov byte [rbp + 0x17], al
mov r8d, 0x1824
lea rdx, str.2wIcFV9YSFhSUlJfGxoWAFJSUgBSUlIAWlRSUlKVftHJUlJSUyEAFRBS_JxOu1JSUlsiGgshUlJcllJSXJZTx3lcSVJSVnA7BgomCh8eaDE9P3wzNj0wN3wqPyJSUlJSUm4qaCo_Ij83JjNyKj8PCFoKm9wMzY9MDdoPCFoPzcmM31wcipoKj8iJjlvcAofAnIRPSA3cmd8ZnxicGxYcnJybiA2NGgAFhRyKj8PCFoIDY0b3A6JiYiaH19JSUlfCVhfD0gNX1ja2trfWJgfWBgfyA2NH8hKzwmMyp_PCFxcGxYcnJycnJybiA2NGgWNyExIDsiJjs9PHIgNjRoMzA9JyZvcHBYcnJycnJycnJycnJyKj8PCFoJjs0NG9wOiYmImh9fTwhfDM2PTA3fDE9P30mOzQ0fWN8Yn1wWHJycnJycnJycnJycio_PjwhaDcqOzRvcDomJiJofX08IXwzNj0wN3wxPT99Nyo7NH1jfGJ9cFhycnJycnJycnJycnIqPz48IWg2MW9wOiYmImh9fSInID58PSA1fTYxfTcNz83PCYhfWN8Y31wWHJycnJycnJycnJycio_PjwhaCo_Im9wOiYmImh9fTwhfDM2PTA3fDE9P30qMyJ9Y3xifXBsWHJycnJycnJycm4mOzQ0aAA3IT0JyY7PTwHPDsmbGBufSY7NDRoADchPT4nJjs9PAc8OyZsWHJycnJycnJycm4mOzQ0aBE9PyIgNyEhOz08bGdufSY7NDRoET0_IiA3ISE7PTxsWHJycnJycnJycm4mOzQ0aAoANyE9PicmOz08bGtkbn0mOzQ0aAoANyE9PicmOz08bFhycnJycnJycnJuJjs0NGgdIDs3PCYzJjs9PGxjbn0mOzQ0aB0gOzc8JjMmOz08bFhycnJycnJycnJuJjs0NGgLADchPT4nJjs9PGxrZG59Jjs0NGgLADchPT4nJjs9PGxYcnJycnJycnJybjcqOzRoAjsqNz4KFjs_NzwhOz08bGpgbn03Kjs0aAI7KjcChY7Pzc8ITs9PGxYcnJycnJycnJybjcqOzRoET0PSABIjMxN2xjbn03Kjs0aBE9Pj0gASIzMTdsWHJycnJycnJycm43Kjs0aAI7KjcCxY7Pzc8ITs9PGxqYG59Nyo7NGgCOyo3PgsWOz83PCE7PTxsWHJycnJycnJycm42MWghJzA4NzEmbFhycnJycnJycnJycnJuIDY0aBAzNX1sWHJycnJycnJycm59NjFoIScwODcxJmxYcnJycnJycnJybio_ImgfPTY7NCsWMyY3bGBiY2p_Ymd_Y2cGYmNoYmdoZmNufSo_ImgfPTY7NCsWMyY3bFhycnJycnJycnJuKj8iaBEgNzMmPSAGPT0bAI7KjcPzMmPSByYXxlbn0qPyJoESA3MyY9IAY9PT5sWHJycnJycm59IDY0aBY3ITEgOyImOz08bFhycnJufSA2NGgAFhRsWG59KmgqPyI_NyYzbFiXy8KnUlJfwhsWEwYqU7Jmf02B0eVozz8oBSMHVfIgl4XlFxOY3BkQQNVFJAWQK1SwHQDWzJwWy1SW3HwI1RBYt6qcUY1FPIboT5MX2byMmW_vSGKeB7vbGG7wcnR__toWpzgGpvuekJf3nnfu4vFFVhOR04nTidOJ04nTidOJ04nTidGJp09HhjeDqaZzMb2khblVdTG7p6tqU3W4hsrHVTI3hU0YZl4HlJz4SglgOjcyPPfIvwlAP2CfLlW3P5dW9h3TqXiVCTtQKIsyxVQgQSpJU1Cy5cjs75vjbFdIbvKcFvXxreYkqAptL8RYJ3ty6YBXXE6i0unyu5DmRRcIhea1FahGntBassWD7fF9CKn9vI5nL1iq4lLZnILX0I5WMpNRv8C6gPSZgMA5tiFyE89UW0bCzWUvxKQGpjuF6FRmR4bXUA9KmlTjnRILVEAyxRUFJCAckgxOU1twypRC9d5WUZaYltCqG_wvhiZgfy9OU17q3leGrw1_cGm1XOCJWfnWU1ZVvnwOfA58bmIY_KN29Tenq8RKzXgB4SBcsdeldBenLTUaLRuhamDKYspjO2Ya82mHSlW0Wyb8cukAVENaUhPoaFC8lPRJgFBYfpIHnODiTGyUUsMHFGjEBet01D63sHP0lNVsmmDCf9XRDKSU_8gzYk5wfK1ME8WMXgbN3iJUu57qAzBMTITxtcHlC9UBEQ85IKnZkyYZqWlSziOmCQsKW1ERwILOW3nF84cjiGbnuvSPkIfDER7H0I3TjplFeXmhOvbBES4CUuKkXnSh_SJltI2VwYJHSjLnV46nCw9QiFfwh_ivtOeadh2y2dqbTMEzxQA6JyUCr6u4TmmIgnwf5bow1S54GkGHzuTsvmvu9h6G8wbzaLC4lbAkQaVFAZvCccPfkXzGKRFyR7TMEmTa0GPc_lKjqBpLyWLTekH5xqdhC7JYMFzVW4uBzNkM2saSStyTh1pCq4LTjFRI3aoGzYWZE4HqNCOq5TWnzr9M1jePk3NNSNL8ulcjjNOFU4NU6DVC8IiYVJgl2QRMGCHQ3UAbsN4Hhg81Rv6vmYQsw6mVlrnDofVDaUzZzmpG6gbqRur657pNg_mD47oWtnP3jbuPbJsTisdn2tKafML4zj2do0rriLQB7wLBdEgAAYL1du6WF5ungVK2rqul5UW5OmwZLeOSYqpgSrFkkXFWCREAiP9RrKTRlYiVXYJzSQsKpE6AmxCvVcHI9GWJyDEL8ZL827eikm3xDfWdGRy0M0uZMK5u44_PpPu6InYcYwTuVOyh6m6xbshaHjKYW0uaovfW15KKdzV1cDkJU_YxmT6mEu2O9otnufxypgyekLzpKuA1QscOhteCowBKBWSNqklJ0JeYPSTL0hz3mn17gmRTS0sAn4F2SCfBMMK3WnhWRtkybNjeSkJ5wd5wNl9PVhYP6MthVctleyL9XGn2hVybSy6k1KAvNWzbRijXx9SY38XU4xFvIUiwvWCTlSEve4REubOWXoIxA10BLuAAFIRl8B0gLvgPSaSejmmoNy90wiOQVnZJP7oEBFR4OUJvIu7hK2hJSSaklmBzLLguW2rX0LHcWF5W5Z1HIe226wDJuCb69hTwRQL_4D6nLuGVTA9VlwaoNX50zwrC3YTNkgapF1Sqei3DZARfbCa5AEyfrNL2lXoItxt9Ui8fncjYxV7NXToJYEuRY0gzZTBgEevMv4bSt81ZyzNgfztKHbhLNiIvvpkvc48PfET5DPwOded8FTNwb2mEvdmk9FVh2yWBvOnnakwecrBgPSHDx2fFUDsMrw4g6OGfUIAYuF3En8gRy1rwr_QEY9XR78qyDfjBBzoJbn0k49J7vMjdb4HuuDM77FWVNrfcjk9U9wRAEgYjzXRseYMcyxN__DbGS7HSrCkYuDtGdhQa4u54VIMyTnA3KJ2LqZO_9y0vZedBwhfpK18e0VTqwQA2_xy_b0TscL9fPZZ3evgUdpCMGXMJ6tP0nfA14Njsc_7O5rMGzKw_sqXfXn1tXcjpmOtPx_1P___FNPdc95t0OwJ038Qd_Nb10iu22Ljf_lwVdE16WDV2DMwxrBSvHcmflDoiOJFaLj_Q9xSH6WpCfR4CgfmkPiWdeE0Ezsd2EhjYMzw7ubNrYoj77pXQfjUEs4PRtrnZUj1BL_XTs1ZBCOEjjj95gfD639mcf8O_0wVLwsp6NsCMfsqTuw_vVjyrQD21DwawTntyIpyWdxmQuTJgyLekqNTtw9vSA3bEf1KpcPUPy0BBsAoZkVCYlct8AeQV5ZytjYC1n_P_4Z1sEY9C5NmdaHJHMC45TtpXzCBHL9wFajFkez_qWyY7Au3AIUE4D8jqIf1_rRlb5WoLokkRMJSp1MaX3HwXkkKOgHla88Cc4FJiMZ38mYTVMRMgkOanaU_6gX2PbZrnvRS10NsB7jfHRrS1FQ0_zWqHPYEkRMJUZq9yyqdlwpNeW3rrS6DmIj2OVSOJ_1tDTMb57OPD8xE0hT4iCmF9z7zlvQizUgLXQ2wHuHq7H
lea rcx, [rbp + 0x17]
call fcn.140002c20
nop
lea rdx, [rbp + 0x17]
lea rcx, [rbp - 1]
call fcn.1400026c0
nop
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0x10
jb 0x1400060bc
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400060b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006255
call fcn.14000b054
xor eax, eax
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x27], rax
lea rdx, [rbp - 1]
lea rcx, [rbp + 0x17]
call fcn.140008300
nop
mov r10d, r15d
mov rbx, qword [rbp + 0x17]
mov r9, qword [rbp - 1]
cmp qword [rbp + 7], r9
je 0x140006137
mov r8, r15
mov rcx, r15
movabs r11, 0xaaaaaaaaaaaaaaab
nop dword [rax]
mov rax, r11
mul rcx
shr rdx, 1
lea rax, [rdx + rdx*2]
sub rcx, rax
movzx eax, byte [rbp + rcx - 0x19]
xor al, byte [r9 + r8]
mov byte [rbx + r8], al
inc r10d
lea r8, [r8 + 1]
mov rax, qword [rbp + 7]
mov r9, qword [rbp - 1]
sub rax, r9
movsxd rcx, r10d
cmp rcx, rax
jb 0x140006100
mov rdx, qword [rbp + 0x1f]
sub rdx, rbx
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0x20
mov r9d, 0x30000
mov r8d, 1
mov rcx, rbx
call qword [sym.imp.USER32.dll_CreateIconFromResourceEx]
mov rsi, rax
mov ecx, 0x3d0
call fcn.14000aeb4
mov rdi, rax
test rax, rax
je 0x1400061bb
xor edx, edx
mov r8d, 0x3d0
mov rcx, rax
call fcn.14018f820
test rsi, rsi
je 0x1400061bb
mov qword [rdi + 0x20], rsi
mov qword [rdi + 8], r14
mov qword [rdi + 0x14], 7
mov dword [rdi + 0x10], 1
mov dword [rdi], 0x3d0
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
nop
test rbx, rbx
je 0x1400061f1
mov rdx, qword [rbp + 0x27]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400061e8
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006255
mov rcx, rbx
call fcn.14000b054
nop
mov rcx, qword [rbp - 1]
test rcx, rcx
je 0x140006227
mov rdx, qword [rbp + 0xf]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006222
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006255
call fcn.14000b054
mov eax, 1
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.14018d9a0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140191fc4
nop
int3