Function at 0x140006620
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x50
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rbp, r9
mov r14, r8
mov r15, rdx
mov rbx, rcx
mov qword [rsp + 0x40], r8
mov qword [rcx + 8], rdx
mov rax, qword [rdx]
xor r8d, r8d
mov edx, dword [rcx + 0xa4adc]
mov rcx, r15
call qword [rax + 0x30]
mov qword [rbx + 0x10], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
xor r12d, r12d
mov qword [rsp + 0x30], r12
mov rdx, qword [r14 + 8]
sub rdx, qword [r14]
sar rdx, 3
test rdx, rdx
je 0x1400066ce
movabs rax, 0x1fffffffffffffff
cmp rdx, rax
ja 0x140006e8d
lea rcx, [rsp + 0x20]
call fcn.140001720
mov rsi, qword [rsp + 0x20]
mov rdi, qword [r14 + 8]
mov rdx, qword [r14]
sub rdi, rdx
mov r8, rdi
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
sar rdi, 3
lea rax, [rsi + rdi*8]
mov qword [rsp + 0x28], rax
mov r9, rbp
lea r8, [rsp + 0x20]
mov rdx, r15
mov rcx, rbx
call fcn.1400023d0
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1400066f0
mov rax, qword [rcx]
call qword [rax + 0x20]
lea rcx, [rbx + 0x16d0]
xor edx, edx
mov r8d, 0xc0
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbx + 0xe20]
xor edx, edx
mov r8d, 0x780
call sub.VCRUNTIME140.dll_memset
mov qword [rbx + 0x15a0], r12
mov qword [rbx + 0x15a8], r12
mov qword [rbx + 0x15b0], r12
mov qword [rbx + 0x15b8], r12
mov qword [rbx + 0x15c0], r12
mov qword [rbx + 0x15c8], r12
mov qword [rbx + 0x15d0], r12
mov qword [rbx + 0x15d8], r12
mov qword [rbx + 0x15e0], r12
mov qword [rbx + 0x15e8], r12
mov qword [rbx + 0x15f0], r12
mov qword [rbx + 0x15f8], r12
mov qword [rbx + 0x1600], r12
mov qword [rbx + 0x1608], r12
mov qword [rbx + 0x1610], r12
mov qword [rbx + 0x1618], r12
mov qword [rbx + 0x1620], r12
mov qword [rbx + 0x1628], r12
mov qword [rbx + 0x1630], r12
mov qword [rbx + 0x1638], r12
mov qword [rbx + 0x1640], r12
mov qword [rbx + 0x1648], r12
mov qword [rbx + 0x1650], r12
mov qword [rbx + 0x1658], r12
mov qword [rbx + 0x1660], r12
mov qword [rbx + 0x1668], r12
mov qword [rbx + 0x1670], r12
mov qword [rbx + 0x1678], r12
mov qword [rbx + 0x1680], r12
mov qword [rbx + 0x1688], r12
mov qword [rbx + 0x1690], r12
mov qword [rbx + 0x1698], r12
mov qword [rbx + 0x16a0], r12
mov qword [rbx + 0x16a8], r12
mov qword [rbx + 0x16b0], r12
mov qword [rbx + 0x16b8], r12
mov dword [rbx + 0xe48], 0x14
mov dword [rbx + 0xe98], 0x14
mov dword [rbx + 0xee8], 0x14
mov dword [rbx + 0xf38], 0x14
mov dword [rbx + 0xf88], 0x14
mov dword [rbx + 0xfd8], 0x14
mov dword [rbx + 0x1028], 0x14
mov dword [rbx + 0x1078], 0x14
mov dword [rbx + 0x10c8], 0x14
mov dword [rbx + 0x1118], 0x14
mov dword [rbx + 0x1168], 0x14
mov dword [rbx + 0x11b8], 0x14
mov dword [rbx + 0x1208], 0x14
mov dword [rbx + 0x1258], 0x14
mov dword [rbx + 0x12a8], 0x14
mov dword [rbx + 0x12f8], 0x14
mov dword [rbx + 0x1348], 0x14
mov dword [rbx + 0x1398], 0x14
mov dword [rbx + 0x13e8], 0x14
mov dword [rbx + 0x1438], 0x14
mov dword [rbx + 0x1488], 0x14
mov dword [rbx + 0x14d8], 0x14
mov dword [rbx + 0x1528], 0x14
mov dword [rbx + 0x1578], 0x14
mov dword [rbx + 0xca0], 0x7f
mov dword [rbx + 0xd00], 0x7f
mov dword [rbx + 0xd60], 0x7f
mov qword [rbx + 0xdc0], r12
mov dword [rbx + 0x17f0], 0xac44
mov dword [rbx + 0xca4], 0x7f
mov dword [rbx + 0xd04], 0x7f
mov dword [rbx + 0xd64], 0x7f
mov dword [rbx + 0x17f4], 0xac44
mov dword [rbx + 0xca8], 0x7f
mov dword [rbx + 0xd08], 0x7f
mov dword [rbx + 0xd68], 0x7f
mov qword [rbx + 0xdc8], r12
mov dword [rbx + 0x17f8], 0xac44
mov dword [rbx + 0xcac], 0x7f
mov dword [rbx + 0xd0c], 0x7f
mov dword [rbx + 0xd6c], 0x7f
mov dword [rbx + 0x17fc], 0xac44
mov dword [rbx + 0xcb0], 0x7f
mov dword [rbx + 0xd10], 0x7f
mov dword [rbx + 0xd70], 0x7f
mov qword [rbx + 0xdd0], r12
mov dword [rbx + 0x1800], 0xac44
mov dword [rbx + 0xcb4], 0x7f
mov dword [rbx + 0xd14], 0x7f
mov dword [rbx + 0xd74], 0x7f
mov dword [rbx + 0x1804], 0xac44
mov dword [rbx + 0xcb8], 0x7f
mov dword [rbx + 0xd18], 0x7f
mov dword [rbx + 0xd78], 0x7f
mov qword [rbx + 0xdd8], r12
mov dword [rbx + 0x1808], 0xac44
mov dword [rbx + 0xcbc], 0x7f
mov dword [rbx + 0xd1c], 0x7f
mov dword [rbx + 0xd7c], 0x7f
mov dword [rbx + 0x180c], 0xac44
mov dword [rbx + 0xcc0], 0x7f
mov dword [rbx + 0xd20], 0x7f
mov dword [rbx + 0xd80], 0x7f
mov qword [rbx + 0xde0], r12
mov dword [rbx + 0x1810], 0xac44
mov dword [rbx + 0xcc4], 0x7f
mov dword [rbx + 0xd24], 0x7f
mov dword [rbx + 0xd84], 0x7f
mov dword [rbx + 0x1814], 0xac44
mov dword [rbx + 0xcc8], 0x7f
mov dword [rbx + 0xd28], 0x7f
mov dword [rbx + 0xd88], 0x7f
mov qword [rbx + 0xde8], r12
mov dword [rbx + 0x1818], 0xac44
mov dword [rbx + 0xccc], 0x7f
mov dword [rbx + 0xd2c], 0x7f
mov dword [rbx + 0xd8c], 0x7f
mov dword [rbx + 0x181c], 0xac44
mov dword [rbx + 0xcd0], 0x7f
mov dword [rbx + 0xd30], 0x7f
mov dword [rbx + 0xd90], 0x7f
mov qword [rbx + 0xdf0], r12
mov dword [rbx + 0x1820], 0xac44
mov dword [rbx + 0xcd4], 0x7f
mov dword [rbx + 0xd34], 0x7f
mov dword [rbx + 0xd94], 0x7f
mov dword [rbx + 0x1824], 0xac44
mov dword [rbx + 0xcd8], 0x7f
mov dword [rbx + 0xd38], 0x7f
mov dword [rbx + 0xd98], 0x7f
mov qword [rbx + 0xdf8], r12
mov dword [rbx + 0x1828], 0xac44
mov dword [rbx + 0xcdc], 0x7f
mov dword [rbx + 0xd3c], 0x7f
mov dword [rbx + 0xd9c], 0x7f
mov dword [rbx + 0x182c], 0xac44
mov dword [rbx + 0xce0], 0x7f
mov dword [rbx + 0xd40], 0x7f
mov dword [rbx + 0xda0], 0x7f
mov qword [rbx + 0xe00], r12
mov dword [rbx + 0x1830], 0xac44
mov dword [rbx + 0xce4], 0x7f
mov dword [rbx + 0xd44], 0x7f
mov dword [rbx + 0xda4], 0x7f
mov dword [rbx + 0x1834], 0xac44
mov dword [rbx + 0xce8], 0x7f
mov dword [rbx + 0xd48], 0x7f
mov dword [rbx + 0xda8], 0x7f
mov qword [rbx + 0xe08], r12
mov dword [rbx + 0x1838], 0xac44
mov dword [rbx + 0xcec], 0x7f
mov dword [rbx + 0xd4c], 0x7f
mov dword [rbx + 0xdac], 0x7f
mov dword [rbx + 0x183c], 0xac44
mov dword [rbx + 0xcf0], 0x7f
mov dword [rbx + 0xd50], 0x7f
mov dword [rbx + 0xdb0], 0x7f
mov qword [rbx + 0xe10], r12
mov dword [rbx + 0x1840], 0xac44
mov dword [rbx + 0xcf4], 0x7f
mov dword [rbx + 0xd54], 0x7f
mov dword [rbx + 0xdb4], 0x7f
mov dword [rbx + 0x1844], 0xac44
mov dword [rbx + 0xcf8], 0x7f
mov dword [rbx + 0xd58], 0x7f
mov dword [rbx + 0xdb8], 0x7f
mov qword [rbx + 0xe18], r12
mov dword [rbx + 0x1848], 0xac44
mov dword [rbx + 0xcfc], 0x7f
mov dword [rbx + 0xd5c], 0x7f
mov dword [rbx + 0xdbc], 0x7f
mov dword [rbx + 0x184c], 0xac44
mov ecx, 0x5555
lea rdx, [rbx + 0x4970]
mov r8d, 0x1ffff
nop word [rax + rax]
lea eax, [rcx + rcx]
mov ecx, eax
shr ecx, 3
not ecx
xor ecx, eax
sar ecx, 0xd
and ecx, 1
or ecx, eax
and ecx, 0x1ffff
mov eax, ecx
shr eax, 1
mov word [rdx + 2], ax
mov word [rdx], ax
lea rdx, [rdx + 4]
sub r8, 1
jne 0x140006d30
mov ecx, 0x8000
mov edx, ecx
lea r8, [rbx + 0x8496c]
lea r9d, [rcx - 1]
sar edx, 1
lea eax, [rdx + rdx]
xor eax, edx
and eax, 2
shl eax, 0xe
or edx, eax
movzx eax, dx
shl ax, 0xf
mov word [r8 + 2], ax
mov word [r8], ax
lea r8, [r8 + 4]
sub r9, 1
jne 0x140006d71
lea rdx, [rbx + 0xa4972]
lea r8d, [r9 + 0x1f]
nop word [rax + rax]
sar ecx, 1
mov eax, ecx
shl eax, 6
xor eax, ecx
and eax, 0x40
shl eax, 9
or ecx, eax
movzx eax, cx
shl ax, 0xf
mov word [rdx - 8], ax
mov word [rdx - 0xa], ax
sar ecx, 1
mov eax, ecx
shl eax, 6
xor eax, ecx
and eax, 0x40
shl eax, 9
or ecx, eax
movzx eax, cx
shl ax, 0xf
mov word [rdx - 4], ax
mov word [rdx - 6], ax
sar ecx, 1
mov eax, ecx
shl eax, 6
xor eax, ecx
and eax, 0x40
shl eax, 9
or ecx, eax
movzx eax, cx
shl ax, 0xf
mov word [rdx], ax
mov word [rdx - 2], ax
lea rdx, [rdx + 0xc]
sub r8, 1
jne 0x140006db0
mov edi, r12d
cmp qword [rbx + 0x10], rdi
setne dil
mov rcx, qword [r14]
test rcx, rcx
je 0x140006e68
mov rdx, qword [r14 + 0x10]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x140006e58
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140006e86
mov rcx, r8
call fcn.14002ea1c
mov qword [r14], r12
mov qword [r14 + 8], r12
mov qword [r14 + 0x10], r12
mov eax, edi
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.14002e9c0
add rsp, 0x50
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140001700
nop
int3