Function at 0x140006130
Capabilities:
Encode data using xor
Hash data using sha256
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x358]
sub rsp, 0x418
movaps xmmword [rax - 0x58], xmm6
mov rax, qword [0x140052040]
xor rax, rsp
mov qword [rbp + 0x2f0], rax
xor r14d, r14d
mov edi, r9d
mov rsi, r8
mov r13, rdx
mov r15, rcx
mov r9, rcx
lea rcx, [rsp + 0x20]
mov r12d, r14d
lea edx, [r14 + 1]
lea r8d, [r14 + 5]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp eax, 5
jne 0x1400069a2
cmp byte [rsp + 0x20], 0x53
jne 0x1400069a2
cmp byte [rsp + 0x21], 0x45
jne 0x1400069a2
cmp byte [rsp + 0x22], 0x58
jne 0x1400069a2
mov al, byte [rsp + 0x23]
test al, al
jne 0x14000664b
and byte [rsp + 0x24], 0xf
mov edx, 1
lea rcx, [rbp + 0x1b0]
mov r9, r15
lea r8d, [rdx + 0xf]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp eax, 0x10
jne 0x1400069a2
xorps xmm0, xmm0
add edi, edi
movdqu xmmword [rbp + 0x1d0], xmm0
mov ebx, 0x2000
movups xmm0, xmmword [rbp + 0x1b0]
movdqu xmmword [rbp + 0x1c0], xmm0
mov r8d, 0x20
mov qword [rbp - 0x70], r14
lea rdx, [rbp + 0x1c0]
mov qword [rbp - 0x68], r14
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x30], 0x6a09e667
mov dword [rsp + 0x34], 0xbb67ae85
mov dword [rsp + 0x38], 0x3c6ef372
mov dword [rsp + 0x3c], 0xa54ff53a
mov dword [rsp + 0x40], 0x510e527f
mov dword [rsp + 0x44], 0x9b05688c
mov dword [rsp + 0x48], 0x1f83d9ab
mov dword [rsp + 0x4c], 0x5be0cd19
call fcn.140004eb0
mov r8, rdi
lea rcx, [rsp + 0x30]
mov rdx, rsi
call fcn.140004eb0
lea rdx, [rbp + 0x1c0]
lea rcx, [rsp + 0x30]
call fcn.140004f2c
sub rbx, 1
jne 0x140006208
mov r8d, 0x100
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp - 0x60]
call fcn.1400012e0
mov ebx, 0x40
lea rcx, [rbp + 0x270]
mov r8d, ebx
lea edx, [rbx - 0xa]
call sub.VCRUNTIME140.dll_memset
mov r8d, ebx
lea edx, [rbx + 0x1c]
lea rcx, [rbp + 0x2b0]
call sub.VCRUNTIME140.dll_memset
mov rax, r14
lea esi, [rbx - 0x30]
movdqu xmm0, xmmword [rbp + rax + 0x270]
movdqu xmm2, xmmword [rbp + rax + 0x1c0]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmm0, xmmword [rbp + rax + 0x2b0]
movdqu xmmword [rbp + rax + 0x270], xmm1
xorps xmm2, xmm0
movdqu xmmword [rbp + rax + 0x2b0], xmm2
add rax, rsi
cmp rax, 0x20
jl 0x1400062d7
mov r8, rbx
mov qword [rbp - 0x70], r14
lea rdx, [rbp + 0x270]
mov qword [rbp - 0x68], r14
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x30], 0x6a09e667
mov dword [rsp + 0x34], 0xbb67ae85
mov dword [rsp + 0x38], 0x3c6ef372
mov dword [rsp + 0x3c], 0xa54ff53a
mov dword [rsp + 0x40], 0x510e527f
mov dword [rsp + 0x44], 0x9b05688c
mov dword [rsp + 0x48], 0x1f83d9ab
mov dword [rsp + 0x4c], 0x5be0cd19
call fcn.140004eb0
mov edi, 1
cmp byte [rsp + 0x23], dil
jb 0x1400065e4
mov rbx, r14
mov r9, r15
lea rcx, [rbp + 0x1e0]
mov r8, rsi
mov rdx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp eax, esi
jne 0x1400069a2
movups xmm6, xmmword [rbp + 0x1e0]
lea rdx, [rbp + 0x1e0]
mov r8, rsi
lea rcx, [rsp + 0x30]
movups xmmword [rbp + 0x220], xmm6
call fcn.140004eb0
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp - 0x60]
call fcn.140002604
movdqu xmm0, xmmword [rbp + 0x1b0]
movdqu xmm1, xmmword [rbp + 0x1e0]
xorps xmm1, xmm0
movdqu xmmword [rbp + rbx + 0x240], xmm1
add rbx, rsi
movdqu xmmword [rbp + 0x1b0], xmm6
cmp rbx, 0x30
jl 0x140006386
lea rdx, [rbp + 0x1c0]
lea rcx, [rsp + 0x30]
call fcn.140004f2c
mov r8d, 0x40
mov qword [rbp - 0x70], r14
lea rdx, [rbp + 0x2b0]
mov qword [rbp - 0x68], r14
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x30], 0x6a09e667
mov dword [rsp + 0x34], 0xbb67ae85
mov dword [rsp + 0x38], 0x3c6ef372
mov dword [rsp + 0x3c], 0xa54ff53a
mov dword [rsp + 0x40], 0x510e527f
mov dword [rsp + 0x44], 0x9b05688c
mov dword [rsp + 0x48], 0x1f83d9ab
mov dword [rsp + 0x4c], 0x5be0cd19
call fcn.140004eb0
mov ebx, 0x20
lea rdx, [rbp + 0x1c0]
mov r8d, ebx
lea rcx, [rsp + 0x30]
call fcn.140004eb0
lea rdx, [rbp + 0x1c0]
lea rcx, [rsp + 0x30]
call fcn.140004f2c
mov r9, r15
lea rcx, [rbp + 0x1e0]
mov r8d, ebx
mov rdx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp eax, ebx
jne 0x1400069a2
mov r8d, ebx
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x1c0]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400069a2
movups xmm0, xmmword [rbp + 0x240]
mov r8d, 0x100
lea rdx, [rbp + 0x250]
lea rcx, [rbp - 0x60]
movdqu xmmword [rbp + 0x1b0], xmm0
call fcn.1400012e0
lea edx, [rbx + 0x16]
lea r8d, [rbx + 0x20]
lea rcx, [rbp + 0x270]
call sub.VCRUNTIME140.dll_memset
lea edx, [rbx + 0x3c]
lea r8d, [rbx + 0x20]
lea rcx, [rbp + 0x2b0]
call sub.VCRUNTIME140.dll_memset
mov rax, r14
movdqu xmm1, xmmword [rbp + rax + 0x250]
movdqu xmm0, xmmword [rbp + rax + 0x270]
xorps xmm0, xmm1
movdqu xmmword [rbp + rax + 0x270], xmm0
movdqu xmm0, xmmword [rbp + rax + 0x2b0]
xorps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x2b0], xmm1
add rax, rsi
cmp rax, rbx
jl 0x140006532
xorps xmm0, xmm0
mov qword [rbp - 0x70], r14
mov r8d, 0x40
mov qword [rbp - 0x68], r14
lea rdx, [rbp + 0x270]
mov dword [rsp + 0x30], 0x6a09e667
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x34], 0xbb67ae85
movups xmmword [rbp + 0x240], xmm0
mov dword [rsp + 0x38], 0x3c6ef372
movups xmmword [rbp + 0x250], xmm0
mov dword [rsp + 0x3c], 0xa54ff53a
movups xmmword [rbp + 0x260], xmm0
mov dword [rsp + 0x40], 0x510e527f
mov dword [rsp + 0x44], 0x9b05688c
mov dword [rsp + 0x48], 0x1f83d9ab
mov dword [rsp + 0x4c], 0x5be0cd19
call fcn.140004eb0
mov r9, r15
lea rcx, [rbp + 0x1e0]
mov r8d, 0x30
mov rdx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov rbx, rax
cmp eax, 0x30
jge 0x1400066ce
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
je 0x1400069a2
mov al, byte [rsp + 0x23]
test al, al
jne 0x14000662b
cmp ebx, 0x20
jne 0x1400069a2
cmp al, dil
jb 0x1400066bf
cmp ebx, 0x21
jne 0x1400069a2
mov al, byte [rbp + 0x1e0]
and al, 0xf
mov byte [rsp + 0x24], al
jmp 0x1400066c3
cmp al, 2
ja 0x1400069a2
jb 0x1400061c5
mov edx, 1
lea rcx, [rbp + 0x1e0]
mov r9, r15
lea r8d, [rdx + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp eax, 2
jne 0x1400069a2
movzx ebx, byte [rbp + 0x1e0]
movzx eax, byte [rbp + 0x1e1]
shl ebx, 8
or ebx, eax
je 0x1400061c5
mov eax, 1
lea rcx, [rbp + 0x1e0]
mov r8d, eax
mov edx, eax
mov r9, r15
sub ebx, eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp eax, 1
jne 0x1400069a2
test ebx, ebx
jne 0x140006694
jmp 0x140006659
mov al, byte [rsp + 0x24]
test al, al
jne 0x1400069a2
mov r12d, edi
lea rdx, [0x14004a174]
mov rcx, r13
lea r14, [rbp + 0x210]
lea rbx, [rbp + 0x1e0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rsi, rax
xor r13d, r13d
jmp 0x140006839
lea rax, [rbp + 0x220]
mov r9, r15
cmp r14, rax
lea rcx, [rbp + 0x1e0]
mov r8d, 0x10
mov rdx, rdi
cmovne rcx, r14
mov r14, rcx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov rdi, rax
cmp eax, 0x10
jge 0x140006780
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
je 0x140006999
mov cl, byte [rsp + 0x23]
test cl, cl
jne 0x14000674a
test edi, edi
jg 0x140006999
cmp cl, 1
jb 0x140006778
cmp edi, 1
jne 0x140006999
lea rax, [rbx + 0x10]
lea rdx, [rbp + 0x220]
cmp rax, rdx
jae 0x14000676c
mov al, byte [rax]
jmp 0x140006772
mov al, byte [rbp + 0x1e0]
and al, 0xf
mov byte [rsp + 0x24], al
mov r12d, 1
jmp 0x140006784
mov cl, byte [rsp + 0x23]
test edi, edi
jg 0x140006790
test cl, cl
jne 0x140006834
movups xmm6, xmmword [rbx]
lea rax, [r14 + 0x10]
test edi, edi
lea rcx, [rsp + 0x30]
mov edi, 0x10
mov rdx, rbx
cmovle rax, r14
mov r8d, edi
mov r14, rax
movups xmmword [rbp + 0x220], xmm6
call fcn.140004eb0
mov r8, rbx
lea rcx, [rbp - 0x60]
mov rdx, rbx
call fcn.140002604
lea r8, [rbp + 0x1b0]
mov rcx, rbx
sub r8, rbx
mov edx, edi
mov al, byte [r8 + rcx]
xor byte [rcx], al
inc rcx
sub rdx, 1
jne 0x1400067da
movdqu xmmword [rbp + 0x1b0], xmm6
test r12d, r12d
je 0x140006801
movzx eax, byte [rsp + 0x24]
test al, al
je 0x140006801
mov edi, eax
mov r8d, edi
mov r9, rsi
mov edx, 1
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp eax, edi
jne 0x140006999
add rbx, 0x10
lea rax, [rbp + 0x220]
cmp rbx, rax
jne 0x140006834
lea rbx, [rbp + 0x1e0]
mov edi, 1
test r12d, r12d
je 0x1400066f7
lea rdx, [rbp + 0x1c0]
lea rcx, [rsp + 0x30]
call fcn.140004f2c
mov r8d, 0x40
mov qword [rbp - 0x70], r13
lea rdx, [rbp + 0x2b0]
mov qword [rbp - 0x68], r13
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x30], 0x6a09e667
mov dword [rsp + 0x34], 0xbb67ae85
mov dword [rsp + 0x38], 0x3c6ef372
mov dword [rsp + 0x3c], 0xa54ff53a
mov dword [rsp + 0x40], 0x510e527f
mov dword [rsp + 0x44], 0x9b05688c
mov dword [rsp + 0x48], 0x1f83d9ab
mov dword [rsp + 0x4c], 0x5be0cd19
call fcn.140004eb0
mov edi, 0x20
lea rdx, [rbp + 0x1c0]
mov r8d, edi
lea rcx, [rsp + 0x30]
call fcn.140004eb0
lea rdx, [rbp + 0x1c0]
lea rcx, [rsp + 0x30]
call fcn.140004f2c
lea rdx, [rbx + 0x10]
cmp byte [rsp + 0x23], r13b
jne 0x140006914
movups xmm0, xmmword [rbx]
lea rcx, [rbp + 0x220]
cmp rdx, rcx
lea rax, [rbp + 0x1e0]
movdqu xmmword [rbp + 0x220], xmm0
cmovne rax, rdx
movups xmm0, xmmword [rax]
movdqu xmmword [rbp + 0x230], xmm0
jmp 0x14000697f
mov eax, dword [rbx + 9]
lea rcx, [rbp + 0x1e0]
movsd xmm0, qword [rbx + 1]
mov dword [rbp + 0x228], eax
movzx eax, word [rbx + 0xd]
mov word [rbp + 0x22c], ax
mov al, byte [rbx + 0xf]
mov byte [rbp + 0x22e], al
lea rax, [rbp + 0x220]
cmp rdx, rax
movsd qword [rbp + 0x220], xmm0
lea rax, [rbp + 0x1e0]
cmovne rcx, rdx
lea rdx, [rbp + 0x220]
movups xmm0, xmmword [rcx]
add rcx, 0x10
cmp rcx, rdx
movdqu xmmword [rbp + 0x22f], xmm0
cmovne rax, rcx
mov al, byte [rax]
mov byte [rbp + 0x23f], al
mov r8, rdi
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x1c0]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400069d0
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
or eax, 0xffffffff
mov rcx, qword [rbp + 0x2f0]
xor rcx, rsp
call fcn.140040cd0
movaps xmm6, xmmword [rsp + 0x400]
add rsp, 0x418
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
test eax, eax
jne 0x1400069a2
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
xor eax, eax
jmp 0x1400069a5