Function at 0x140004390
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
cmp byte [0x140706618], 0
jne 0x140004724
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbp
movabs rbp, 0x101010101010101
mov qword [rsp + 0x30], rsi
xor esi, esi
mov qword [rsp + 0x28], rdi
mov edi, esi
mov qword [rsp + 0x20], r14
lea r14, [0x140000000]
mov byte [0x140706618], 1
lea rcx, [rsp + 0x50]
call fcn.1400020f0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov rax, qword [rsp + 0x50]
cqo
idiv rcx
lea rcx, [rsp + 0x58]
mov rax, rdx
cqo
and edx, 0xf
add rax, rdx
and eax, 0xf
sub rax, rdx
inc rax
xor rax, 0x10
shl rax, 0xa
or rax, rbp
mov qword [rdi + r14 + 0x706f30], rax
call fcn.1400020f0
mov rbx, qword [rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov rax, rbx
cqo
idiv rcx
lea rcx, [rsp + 0x60]
mov rax, rdx
cqo
and edx, 0x1f
add rax, rdx
and eax, 0x1f
sub rax, rdx
inc rax
xor rax, 0x20
shl rax, 0xb
or rax, rbp
mov qword [rdi + r14 + 0x706e20], rax
call fcn.1400020f0
mov rbx, qword [rax]
mov qword [rsp + 0x50], rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov rax, rbx
cqo
idiv rcx
mov rax, rdx
cqo
and edx, 0x3f
add rax, rdx
and eax, 0x3f
sub rax, rdx
inc rax
xor rax, 0x40
shl rax, 0xc
or rax, rbp
mov qword [rdi + r14 + 0x706ea0], rax
add rdi, 8
cmp rdi, 0x80
jl 0x1400043d6
mov r14, qword [rsp + 0x20]
lea rcx, [rsp + 0x50]
call fcn.1400020f0
mov rbx, qword [rsp + 0x50]
lea rdi, [0x140706e19]
mov ebp, esi
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x1400044eb
dec eax
or eax, 0xfffffff0
inc eax
inc al
movsx rcx, al
mov rax, rbx
cqo
idiv rcx
mov byte [rdi - 1], dl
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x140004510
dec eax
or eax, 0xfffffff0
inc eax
inc al
movsx rcx, al
mov rax, rbx
cqo
idiv rcx
mov byte [rdi], dl
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x140004534
dec eax
or eax, 0xfffffff0
inc eax
inc al
movsx rcx, al
mov rax, rbx
cqo
idiv rcx
mov byte [rdi + 1], dl
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x140004559
dec eax
or eax, 0xfffffff0
inc eax
inc al
add ebp, 4
movsx rcx, al
mov rax, rbx
cqo
idiv rcx
mov byte [rdi + 2], dl
add rdi, 4
cmp ebp, 4
jb 0x1400044d7
lea rcx, [rsp + 0x50]
call fcn.1400020f0
mov ebp, esi
lea rdi, [0x140706fb1]
mov rbx, qword [rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x1400045a4
dec eax
or eax, 0xfffffff0
inc eax
inc al
movsx rcx, al
mov rax, rbx
cqo
idiv rcx
mov byte [rdi - 1], dl
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x1400045c9
dec eax
or eax, 0xfffffff0
inc eax
inc al
movsx rcx, al
mov rax, rbx
cqo
idiv rcx
mov byte [rdi], dl
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x1400045ed
dec eax
or eax, 0xfffffff0
inc eax
inc al
movsx rcx, al
mov rax, rbx
cqo
idiv rcx
mov byte [rdi + 1], dl
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x140004612
dec eax
or eax, 0xfffffff0
inc eax
inc al
movsx rcx, al
mov rax, rbx
cqo
idiv rcx
mov byte [rdi + 2], dl
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x140004637
dec eax
or eax, 0xfffffff0
inc eax
inc al
movsx rcx, al
mov rax, rbx
cqo
idiv rcx
mov byte [rdi + 3], dl
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000465c
dec eax
or eax, 0xfffffff0
inc eax
inc al
movsx rcx, al
mov rax, rbx
cqo
idiv rcx
mov byte [rdi + 4], dl
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x140004681
dec eax
or eax, 0xfffffff0
inc eax
inc al
movsx rcx, al
mov rax, rbx
cqo
idiv rcx
mov byte [rdi + 5], dl
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x1400046a6
dec eax
or eax, 0xfffffff0
inc eax
inc al
add ebp, 8
movsx rcx, al
mov rax, rbx
cqo
idiv rcx
mov byte [rdi + 6], dl
add rdi, 8
cmp ebp, 8
jb 0x140004590
mov rbp, qword [rsp + 0x38]
lea rcx, [rsp + 0x50]
call fcn.1400020f0
lea rdi, [0x140706f20]
mov rbx, qword [rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x1400046f4
dec eax
or eax, 0xfffffff0
inc eax
inc al
inc esi
movsx rcx, al
mov rax, rbx
cqo
idiv rcx
mov byte [rdi], dl
inc rdi
cmp esi, 0xc
jb 0x1400046e0
mov rdi, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x40]
mov byte [0x1407065a7], 1
add rsp, 0x48
ret