Function at 0x140013900
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov qword [rax + 8], rcx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
movaps xmmword [rax - 0x38], xmm6
lea rax, [rbp + 0x5f]
movabs r12, 0xff00ff00ff00ff00
mov qword [rbp - 1], r12
mov qword [rbp + 7], rax
mov r15, qword [rax]
xor r15, r12
mov qword [rbp - 9], r15
xor r13d, r13d
mov qword [rax], r13
mov eax, dword [str.elji_]
mov dword [rbp + 0x67], eax
movzx eax, byte [0x140094cc8]
mov byte [rbp + 0x67], 0x52
xor byte [rbp + 0x68], 0x38
xor byte [rbp + 0x69], 0x39
xor byte [rbp + 0x6a], 0x3a
xor al, 0x3b
mov byte [rbp + 0x6b], al
movups xmm0, xmmword [0x140094c98]
movups xmmword [rbp - 0x39], xmm0
movups xmm1, xmmword [0x140094ca8]
movups xmmword [rbp - 0x29], xmm1
movsd xmm0, qword [0x140094cb8]
movsd qword [rbp - 0x19], xmm0
movzx eax, word [0x140094cc0]
mov word [rbp - 0x11], ax
mov ecx, r13d
cmp dword [0x1400a3058], 2
jl 0x140013ad4
movdqa xmm4, xmmword [0x140096ba0]
movdqa xmm3, xmmword [0x140097110]
movdqa xmm5, xmmword [str.1111HKRC_NGO]
movdqa xmm0, xmmword [0x140096d00]
movdqa xmmword [rbp - 0x59], xmm0
lea rdx, [rbp - 0x35]
movdqa xmm6, xmmword [0x140096cc0]
mov r8d, dword [rbp - 0x59]
nop dword [rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x28
jl 0x1400139f0
cmp ecx, 0x2a
jge 0x140013b0c
movsxd rax, ecx
lea r8, [rbp - 0x39]
add r8, rax
nop
mov eax, 0x5397829d
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x31
movzx eax, cl
sub al, dl
add al, 0x37
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x2a
jl 0x140013ae0
lea rdi, [rbp + 0x5f]
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], rdi
mov rbx, qword [rdi]
mov rax, rbx
xor rax, r12
mov qword [rbp - 0x59], rax
mov rax, qword [0x1400d9250]
lea rdx, [rbp + 0x67]
lea rcx, [rbp - 0x39]
call rax
nop
mov qword [rbp - 0x59], rbx
mov qword [rdi], rbx
mov qword [0x1400d9608], rax
test rax, rax
jne 0x140013c5a
mov dword [rbp - 9], 0x6557aacd
mov byte [rbp - 5], 0xf0
xorps xmm0, xmm0
movups xmmword [rbp - 4], xmm0
mov dword [rbp + 0xc], eax
mov word [rbp + 0x10], ax
mov byte [rbp + 0x12], al
mov qword [rbp + 0x67], r13
mov rax, qword [rbp + 0x67]
mov rdx, qword [rbp + 0x67]
mov rax, qword [rbp + 0x67]
movzx r8d, byte [rbp + rax - 9]
sub dl, 2
movzx eax, dl
and al, r8b
mov ecx, 7
sub cl, al
add cl, cl
add cl, dl
add cl, r8b
mov rax, qword [rbp + 0x67]
mov byte [rbp + rax - 9], cl
mov rax, qword [rbp + 0x67]
inc rax
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
cmp rax, 0x1c
jb 0x140013b72
mov dword [rbp - 0x39], 0xccc0c3f5
mov dword [rbp - 0x35], 0xbf0615c6
mov dword [rbp - 0x31], 0x1421e9fa
mov dword [rbp - 0x2d], 0xef30283c
mov dword [rbp - 0x29], 0x10111512
mov word [rbp - 0x25], 0xc529
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x23], xmm0
mov word [rbp - 0x13], ax
mov qword [rbp + 0x67], r13
mov rax, qword [rbp + 0x67]
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [rbp + 0x67]
mov rax, qword [rbp + 0x67]
movzx ecx, byte [rbp + rax - 0x39]
add dl, 0x78
movzx eax, dl
and al, cl
add al, al
sub dl, al
sub dl, 0x48
add dl, cl
mov rax, qword [rbp + 0x67]
mov byte [rbp + rax - 0x39], dl
mov rax, qword [rbp + 0x67]
inc rax
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
cmp rax, 0x28
jb 0x140013c00
mov r9d, 0x40
lea r8, [rbp - 9]
lea rdx, [rbp - 0x39]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov r14d, eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov esi, eax
xor edx, edx
mov rcx, qword [0x1400d9608]
call qword [sym.imp.USER32.dll_SetMenu]
lea rax, [rbp + 0x5f]
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], rax
mov rdi, qword [rax]
mov rdx, rdi
xor rdx, r12
mov qword [rbp - 0x59], rdx
mov qword [rax], r13
mov rax, qword [0x1400d9088]
mov ecx, 1
call rax
mov ebx, eax
lea r12, [rbp + 0x5f]
movabs rax, 0xff00ff00ff00ff00
mov qword [rbp - 0x51], rax
mov qword [rbp - 0x49], r12
mov rcx, rdi
xor rcx, rax
mov qword [rbp - 0x59], rcx
mov qword [r12], r13
mov rdx, qword [0x1400d9088]
xor ecx, ecx
call rdx
nop
mov qword [r12], rdi
mov dword [rsp + 0x30], 0x40
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x1400d9608]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov edx, 5
mov rcx, qword [0x1400d9608]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rbp + 0x5f]
movabs r12, 0xff00ff00ff00ff00
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], rcx
mov rbx, qword [rcx]
mov rax, rbx
xor rax, r12
mov qword [rbp - 0x59], rax
mov qword [rcx], r13
mov edx, 0xffffffec
mov r8d, 0x800a0
mov rcx, qword [0x1400d9608]
call qword [0x1400d9160]
nop
lea rcx, [rbp + 0x5f]
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], rcx
mov rax, rbx
xor rax, r12
mov qword [rbp - 0x59], rax
mov qword [rcx], r13
mov edx, 0xfffffff0
mov r8d, 0x10000000
mov rcx, qword [0x1400d9608]
call qword [0x1400d9160]
nop
lea rcx, [rbp + 0x5f]
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], rcx
mov rax, rbx
xor rax, r12
mov qword [rbp - 0x59], rax
mov qword [rcx], r13
mov rax, qword [0x1400d9078]
mov edx, 0xffffffec
mov rcx, qword [0x1400d9608]
call rax
nop
or eax, 0x20
lea r8, [rbp + 0x5f]
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], r8
mov rcx, rbx
xor rcx, r12
mov qword [rbp - 0x59], rcx
mov qword [r8], r13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [0x1400d9608]
call qword [0x1400d9160]
nop
lea rdi, [rbp + 0x5f]
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], rdi
mov rax, rbx
xor rax, r12
mov qword [rbp - 0x59], rax
mov qword [rdi], r13
mov dword [rsp + 0x30], 0x40
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, qword [0x1400d9608]
call qword [0x1400d9230]
nop
mov qword [rdi], rbx
movdqa xmm0, xmmword [0x140097170]
movdqu xmmword [rbp + 0x17], xmm0
lea rcx, [rbp + 0x5f]
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], rcx
mov rbx, qword [rcx]
mov rax, rbx
xor rax, r12
mov qword [rbp - 0x59], rax
mov qword [rcx], r13
lea rdx, [rbp + 0x17]
mov rcx, qword [0x1400d9608]
call qword [0x1400d9238]
nop
lea rdi, [rbp + 0x5f]
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], rdi
mov rax, rbx
xor rax, r12
mov qword [rbp - 0x59], rax
mov qword [rdi], r13
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, qword [0x1400d9608]
call qword [0x1400d9248]
nop
mov qword [rdi], rbx
call fcn.1400082e0
lea rcx, [rbp + 0x5f]
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], rcx
mov rax, qword [rcx]
xor rax, r12
mov qword [rbp - 0x59], rax
mov qword [rcx], r13
mov rcx, qword [0x1400d9608]
call qword [0x1400d9058]
nop
xor r15, r12
lea rax, [rbp + 0x5f]
mov qword [rax], r15
mov al, 1
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret