Function at 0x1400a9394
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1080
call fcn.1400fc480
sub rsp, rax
mov rax, qword [0x140160370]
xor rax, rsp
mov qword [rsp + 0x1070], rax
xor r15d, r15d
mov sil, cl
cmp byte [0x1401a92a4], r15b
je 0x1400a93e2
test dl, dl
je 0x1400a9896
or rbp, 0xffffffffffffffff
mov r12d, 1
cmp dword [0x14015df94], r15d
je 0x1400a9443
mov rcx, r15
lea rbx, str.8g30w1_5r7_2ta
mov r9, r15
mov r8d, 0x480
xor byte [r9 + rbx], cl
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
add rcx, 3
add r9, r12
shr rdx, 1
add rcx, rdx
and ecx, 0xffffff
cmp r9, r8
jb 0x1400a9408
cmp dword [0x14015df94], r15d
je 0x1400a94d5
jmp 0x1400a94cb
mov ecx, 0x4fd
call fcn.1400901c8
mov rbx, rax
cmp word [rax], 0x23
jne 0x1400a9470
cmp word [rax + 2], 0x23
jne 0x1400a9470
mov rax, rbp
inc rax
cmp word [rbx + rax*2], r15w
jne 0x1400a9460
cmp rax, 0x64
jae 0x1400a9477
mov rbx, qword [str.0C69__3n:nlrhbngw.qgshf_clk._kckgvgfa:_Ipitvdg8RBTMEEiambhj_rdgf_gmuqqucswnmk_Peuamiwcbprp__G_1nlrhbngw.qgshf_clk._kckgvgfa:_Ipitvdg8RBTMEEiambhj_rdgf_gmuqqexvhvbfvftrmhl8_U_vdjltfeuqug8_B__QMoH0W5hwrq___kowogmbprbtmee_fon__hflbubad9_Nslssgb_WAQJ_Fndngoocwcbe_cxtnp_dpdvtkjn__Wfpfhjrdgswwe___O]
mov edi, 0x1000
lea rcx, [rsp + 0x70]
mov r8d, edi
xor edx, edx
call fcn.1400fd700
lea rcx, [rbx + 4]
mov r8d, edi
lea rdx, [rsp + 0x70]
call fcn.140099110
lea rax, [rsp + 0x70]
mov r8, rbp
inc r8
cmp byte [rax + r8], r15b
jne 0x1400a94a4
lea rbx, str.8g30w1_5r7_2ta
mov rcx, rbx
lea rdx, [rsp + 0x70]
call fcn.1400a8524
test al, al
jne 0x1400a94d5
mov r8d, 0x480
xor edx, edx
mov rcx, rbx
call fcn.1400fd700
call fcn.140062158
test al, al
jne 0x1400a94fe
mov al, sil
neg al
mov eax, dword [0x140167e44]
sbb ecx, ecx
and ecx, 0xffffffce
add ecx, 0x5a
cmp eax, ecx
jg 0x1400a94f9
test eax, eax
jns 0x1400a94fe
mov dil, r12b
jmp 0x1400a9501
mov dil, r15b
test sil, sil
je 0x1400a9861
call fcn.140072f20
cmp eax, 0x501
ja 0x1400a9526
test dword [0x14015df90], 0x200
je 0x1400a9896
cmp byte [0x14015e300], r15b
je 0x1400a9896
mov byte [0x14015e0ab], r15b
mov byte [0x14015e1af], r15b
mov byte [0x14015e3ff], r15b
test dil, dil
jne 0x1400a955f
mov al, byte [0x14015df90]
and al, 0x80
neg al
sbb eax, eax
and dword [0x14015df98], eax
cmp dword [0x14015dfa8], r15d
lea rbp, [0x14015e300]
mov bl, r15b
lea rsi, str.InterfaceMisc
mov r13d, 0x100
jbe 0x1400a95d1
call fcn.140062158
test al, al
jne 0x1400a95d1
xor r8d, r8d
lea rdx, str.RemShown
mov rcx, rsi
call fcn.1400a78ac
cmp eax, dword [0x14015dfa8]
jae 0x1400a95d1
lea r8d, [rax + 1]
mov rcx, rsi
lea rdx, str.RemShown
call fcn.1400a84e8
cmp byte [0x14015dfac], r15b
mov bl, r12b
je 0x1400a967e
lea rdx, [0x14015dfac]
jmp 0x1400a9673
cmp dword [0x14015e0ac], r15d
jbe 0x1400a9621
test dil, dil
je 0x1400a9621
xor r8d, r8d
lea rdx, str.ExpRemShown
mov rcx, rsi
call fcn.1400a78ac
cmp eax, dword [0x14015e0ac]
jae 0x1400a9621
lea r8d, [rax + 1]
mov rcx, rsi
lea rdx, str.ExpRemShown
call fcn.1400a84e8
cmp byte [0x14015e0b0], r15b
mov bl, r12b
je 0x1400a967e
lea rdx, [0x14015e0b0]
jmp 0x1400a9673
cmp dword [0x14015e1b0], r15d
jbe 0x1400a967e
call fcn.140062158
test al, al
je 0x1400a967e
xor r8d, r8d
lea rdx, str.RegRemShown
mov rcx, rsi
call fcn.1400a78ac
cmp eax, dword [0x14015e1b0]
jae 0x1400a967e
lea r8d, [rax + 1]
mov rcx, rsi
lea rdx, str.RegRemShown
call fcn.1400a84e8
cmp byte [0x14015e1b4], r15b
mov bl, r12b
je 0x1400a967e
lea rdx, [0x14015e1b4]
mov r8, r13
mov rcx, rbp
call fcn.1400961b0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0x10624dd3
mul ecx
mov esi, edx
shr esi, 6
call fcn.140062158
test al, al
je 0x1400a96b4
mov ecx, dword [0x14015dfa4]
test ecx, ecx
je 0x1400a96e8
xor edx, edx
mov eax, esi
div ecx
test edx, edx
jne 0x1400a96e8
mov bl, r12b
jmp 0x1400a96e8
test dil, dil
jne 0x1400a96cf
mov ecx, dword [0x14015df9c]
test ecx, ecx
je 0x1400a96e8
xor edx, edx
mov eax, esi
div ecx
test edx, edx
jne 0x1400a96e8
jmp 0x1400a96f0
mov ecx, dword [0x14015dfa0]
test ecx, ecx
je 0x1400a96e8
xor edx, edx
movzx ebx, bl
mov eax, esi
div ecx
test edx, edx
cmove ebx, r12d
test bl, bl
je 0x1400a9896
mov eax, dword [0x14015df90]
mov ebx, 0x80000000
mov ecx, eax
mov edi, ebx
shl ecx, 0x11
mov ebp, ebx
not ecx
mov r14d, ebx
and ecx, 0x40000
or ecx, 0x16c80000
mov esi, ecx
or esi, 0x30000
and al, 8
cmovne esi, ecx
mov ecx, dword [0x14015e2b8]
test ecx, ecx
je 0x1400a97cd
cmp dword [0x14015e2b4], r15d
je 0x1400a97cd
call fcn.1400cfbd0
mov ecx, 0x21
mov ebx, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 4
lea edi, [rbx + rax*2]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
add edi, eax
mov eax, dword [0x14015df90]
test al, 0x40
jne 0x1400a976e
test r13d, eax
jne 0x1400a9774
add edi, dword [0x1401a92a0]
mov ecx, dword [0x14015e2b4]
call fcn.1400cfb64
mov ecx, 0x20
mov ebx, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
xor edx, edx
lea r8, [rsp + 0x60]
xor r9d, r9d
lea ebx, [rbx + rax*2]
lea ecx, [rdx + 0x30]
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
mov eax, dword [rsp + 0x68]
cmp ebx, eax
mov ebp, eax
cmovl ebp, ebx
sub eax, ebp
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
mov eax, dword [rsp + 0x6c]
cmp edi, eax
mov r14d, eax
cmovl r14d, edi
sub eax, r14d
cdq
sub eax, edx
sar eax, 1
mov edi, eax
mov rdx, r13
lea rcx, [0x14015e300]
call fcn.1400a89ac
mov rcx, qword [0x14019bb58]
lea r8, [0x1401213e0]
mov qword [rsp + 0x58], r15
lea rdx, str.RarReminder
mov qword [rsp + 0x50], rcx
mov r9d, esi
mov qword [rsp + 0x48], r15
xor ecx, ecx
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_CreateWindowExW]
test byte [0x14015df90], r12b
je 0x1400a984f
mov dword [rsp + 0x30], 3
xor r9d, r9d
mov dword [rsp + 0x28], r15d
xor r8d, r8d
or rdx, 0xffffffffffffffff
mov dword [rsp + 0x20], r15d
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowPos]
cmp qword [0x140167d40], r15
je 0x1400a9896
mov byte [0x1401a92a4], r12b
jmp 0x1400a9896
test dil, dil
je 0x1400a9896
mov byte [0x1401a92a4], r12b
call qword [sym.imp.USER32.dll_GetFocus]
mov rcx, qword [0x14019bb50]
lea r9, [0x1400e2810]
mov r8, rax
mov qword [rsp + 0x20], r15
lea rdx, str.REMINDER
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov rcx, qword [rsp + 0x1070]
xor rcx, rsp
call fcn.1400fc4f0
lea r11, [rsp + 0x1080]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret