Function at 0x140002c50
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmm0, xmmword [str.qw_r]
movzx eax, word [0x140276750]
xor ebx, ebx
movups xmm1, xmmword [0x140276740]
mov edi, dword [0x1402b8810]
mov ecx, ebx
movaps xmmword [rsp + 0x60], xmm6
movaps xmmword [rsp + 0x50], xmm7
mov word [rbp - 0x30], ax
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm1
cmp edi, 2
jl 0x140002dbc
movdqa xmm5, xmmword [0x1402767a0]
lea rdx, [rbp - 0x50]
movdqa xmm4, xmmword [0x1402767f0]
movdqa xmm6, xmmword [0x1402767c0]
movdqa xmm7, xmmword [0x1402767d0]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 0x10]
paddd xmm2, xmm5
add ecx, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [rdx - 0x10], xmm3
paddd xmm2, xmm5
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx - 8]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rdx - 8], xmm3
cmp ecx, 0x10
jl 0x140002cd0
cmp ecx, 0x11
jge 0x140002e00
movsxd rax, ecx
lea r8, [rbp - 0x50]
lea r8, [r8 + rax*2]
nop word [rax + rax]
mov eax, 0x94f2095
lea r8, [r8 + 2]
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul edx, eax, 0x37
movzx eax, cx
inc ecx
sub ax, dx
add ax, 0x34
xor word [r8 - 2], ax
cmp ecx, 0x11
jl 0x140002dd0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140003036
cmp word [0x14027671a], bx
movups xmm7, xmmword [str.yP_XJ_]
mov eax, dword [0x140276718]
movsd xmm0, qword [0x140276710]
movups xmmword [rbp - 0x50], xmm7
mov dword [rbp - 0x38], eax
movsd qword [rbp - 0x40], xmm0
je 0x140002f70
cmp edi, 2
jl 0x140002f32
movdqa xmm2, xmmword [0x1402767a0]
mov ebx, 8
movdqa xmm4, xmmword [0x1402767f0]
movdqa xmm1, xmm2
movdqa xmm6, xmmword [0x1402767d0]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1402767c0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm6
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm1, xmm7
paddw xmm3, xmm2
movdqa xmm2, xmmword [0x1402767b0]
xorps xmm3, xmm1
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
movdqa xmm1, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movq qword [rbp - 0x50], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1402767c0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm6
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rbp - 0x48]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rbp - 0x48], xmm3
movsxd rax, ebx
lea r8, [rbp - 0x50]
lea r8, [r8 + rax*2]
nop dword [rax]
mov eax, 0x94f2095
lea r8, [r8 + 2]
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x37
movzx eax, bx
inc ebx
sub ax, cx
add ax, 0x34
xor word [r8 - 2], ax
cmp ebx, 0xe
jl 0x140002f40
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140003036
mov ecx, dword [0x140276728]
lea rdx, [rbp - 0x50]
movzx eax, word [0x14027672c]
mov ebx, 0x78
movsd xmm0, qword [0x140276720]
xor ax, 0x3a
mov dword [rbp - 0x48], ecx
xor cx, 0x38
xor word [rbp - 0x46], 0x39
movsd qword [rbp - 0x50], xmm0
xor word [rbp - 0x4e], 0x35
xor word [rbp - 0x4c], 0x36
xor word [rbp - 0x4a], 0x37
mov word [rbp - 0x48], cx
xor ecx, ecx
mov word [rbp - 0x50], bx
mov word [rbp - 0x44], ax
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140003036
mov edx, dword [0x140276780]
xor ecx, ecx
movzx eax, word [0x140276784]
movsd xmm0, qword [0x140276778]
xor ax, 0x3a
mov dword [rbp - 0x48], edx
xor dx, 0x38
xor word [rbp - 0x46], 0x39
movsd qword [rbp - 0x50], xmm0
xor word [rbp - 0x4e], 0x35
xor word [rbp - 0x4c], 0x36
xor word [rbp - 0x4a], 0x37
mov word [rbp - 0x48], dx
lea rdx, [rbp - 0x50]
mov word [rbp - 0x50], bx
mov word [rbp - 0x44], ax
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140003042
mov ecx, 8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movaps xmm6, xmmword [rsp + 0x60]
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
movaps xmm7, xmmword [rsp + 0x50]
mov rsp, r11
pop rbp
ret