Function at 0x14006b480
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x100
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14019a900]
xor rax, rsp
mov qword [rbp + 7], rax
mov rsi, rdx
mov ebx, ecx
lea rcx, [0x14007e850]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
movsd xmm0, qword [str.RGSR8]
movsd qword [rbp - 0x79], xmm0
movzx eax, word [0x1401642e8]
mov ecx, 0x66
mov word [rbp - 0x79], cx
xor word [rbp - 0x77], 0x35
xor word [rbp - 0x75], 0x36
xor word [rbp - 0x73], 0x37
xor ax, 0x38
mov word [rbp - 0x71], ax
lea r8, [rbp - 0x79]
mov rdx, rsi
mov ecx, ebx
call fcn.14008bcc0
test eax, eax
setg r15b
mov rax, qword [str.YQZ7__RgY_H_]
mov qword [rbp - 0x79], rax
xor r12d, r12d
mov r14d, dword [reloc.WS2_32.dll_accept]
cmp word [0x1401642f6], r12w
je 0x14006b5e1
cmp r14d, 2
jl 0x14006b5aa
movdqa xmm3, xmmword [0x140125450]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1401680f0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1401680f0]
shufps xmm2, xmm0, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x140167fa0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmmword [str.44444444]
movq xmm0, qword [rbp - 0x79]
xorps xmm2, xmm0
movq qword [rbp - 0x79], xmm2
jmp 0x14006b5e1
lea r8, [rbp - 0x79]
mov edi, r12d
mov eax, 0x51eb851f
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x32
movzx eax, di
sub ax, cx
add ax, 0x34
xor word [r8], ax
inc edi
lea r8, [r8 + 2]
cmp edi, 4
jl 0x14006b5b1
lea r8, [rbp - 0x79]
mov rdx, rsi
mov ecx, ebx
call fcn.14008bcc0
movups xmm0, xmmword [0x1401642f8]
movups xmmword [rbp - 0x79], xmm0
movzx eax, word [reloc.WLDAP32.dll_Ordinal_60]
mov ecx, 0x69
mov word [rbp - 0x79], cx
xor word [rbp - 0x77], 0x35
xor word [rbp - 0x75], 0x36
xor word [rbp - 0x73], 0x37
xor word [rbp - 0x71], 0x38
xor word [rbp - 0x6f], 0x39
xor word [rbp - 0x6d], 0x3a
xor word [rbp - 0x6b], 0x3b
xor ax, 0x3c
mov word [rbp - 0x69], ax
lea r8, [rbp - 0x79]
mov rdx, rsi
mov ecx, ebx
call fcn.14008bcc0
movups xmm0, xmmword [str.dTEDyUVT_JV__]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [0x140164320]
movups xmmword [rbp - 0x51], xmm1
mov eax, dword [0x140164330]
mov dword [rbp - 0x41], eax
mov ecx, r12d
cmp r14d, 2
jl 0x14006b77d
movdqa xmm5, xmmword [0x140125450]
movdqa xmm4, xmmword [0x1401680f0]
movdqa xmm6, xmmword [0x140167fa0]
movdqa xmm7, xmmword [str.44444444]
lea rdx, [rbp - 0x61]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rdx]
xorps xmm3, xmm0
movq qword [rdx], xmm3
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rdx + 8]
xorps xmm3, xmm0
movq qword [rdx + 8], xmm3
add ecx, 8
lea rdx, [rdx + 0x10]
cmp ecx, 0x10
jl 0x14006b693
cmp ecx, 0x12
jge 0x14006b7c0
movsxd rax, ecx
lea r8, [rbp - 0x61]
lea r8, [r8 + rax*2]
nop dword [rax + rax]
mov eax, 0x51eb851f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul eax, eax, 0x32
movzx edi, cx
sub di, ax
add di, 0x34
xor word [r8], di
inc ecx
lea r8, [r8 + 2]
cmp ecx, 0x12
jl 0x14006b790
lea r8, [rbp - 0x61]
mov rdx, rsi
mov ecx, ebx
call fcn.14008bcc0
test eax, eax
setg dil
call fcn.1400a6990
mov qword [0x14019ba50], rax
mov eax, dword [0x140164334]
mov dword [rbp - 0x79], eax
movzx ecx, word [0x140164338]
mov word [rbp - 0x75], cx
movzx eax, byte [0x14016433a]
mov byte [rbp - 0x79], 0x34
xor byte [rbp - 0x78], 0x35
xor byte [rbp - 0x77], 0x36
xor byte [rbp - 0x76], 0x37
xor cl, 0x38
mov byte [rbp - 0x75], cl
xor byte [rbp - 0x74], 0x39
xor al, 0x3a
mov byte [rbp - 0x73], al
xorps xmm0, xmm0
movups xmmword [rbp - 0x21], xmm0
mov qword [rbp - 0x11], r12
mov qword [rbp - 9], r12
lea rax, [rbp - 0x79]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r12b
jne 0x14006b834
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x21]
call fcn.140056420
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], rax
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 0x61]
call fcn.1400629c0
mov r8, rax
lea rdx, [rbp - 0x39]
lea rcx, [0x14019bb00]
call fcn.1400b78d0
nop
mov dword [rbp - 1], r12d
lea rax, [rbp - 1]
mov qword [rsp + 0x48], rax
lea rax, [0x140082600]
mov qword [rsp + 0x40], rax
mov byte [rsp + 0x38], dil
mov dword [rsp + 0x30], r12d
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], r15b
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbp - 0x39]
mov rcx, qword [0x14019ba50]
call fcn.1400a8d70
test rax, rax
jne 0x14006b8cd
mov rcx, qword [0x14019ba50]
call fcn.1400a7b80
mov rcx, qword [0x14019ba50]
call fcn.1400a7b80
mov rax, qword [rbp - 0x39]
cmp rax, qword [rbp - 0x31]
je 0x14006b8e7
mov qword [rbp - 0x31], rax
lea rax, [rbp - 0x21]
cmp qword [rbp - 9], 0xf
cmova rax, qword [rbp - 0x21]
mov qword [rbp - 0x11], r12
mov byte [rax], 0
mov rsi, qword [rbp - 0x31]
movabs r14, 0x7fffffffffffffff
mov rcx, qword [rbp - 0x39]
sub rsi, rcx
mov rbx, r12
mov r8, r12
mov rax, r12
je 0x14006b984
cmp rsi, r14
ja 0x14006bbe6
cmp rsi, 0x1000
jb 0x14006b957
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x14006bbe0
call fcn.14011292c
test rax, rax
je 0x14006bb55
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14006b962
mov rcx, rsi
call fcn.14011292c
mov rbx, rax
mov rdi, qword [rbp - 0x31]
mov rdx, qword [rbp - 0x39]
sub rdi, rdx
mov r8, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea r8, [rbx + rdi]
lea rax, [rbx + rsi]
mov rcx, qword [rbp - 0x39]
mov qword [rbp - 0x39], rbx
mov qword [rbp - 0x31], r8
mov rdx, qword [rbp - 0x29]
mov qword [rbp - 0x29], rax
test rcx, rcx
je 0x14006b9ce
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14006b9c1
add rdx, 0x27
mov rdi, qword [rcx - 8]
sub rcx, rdi
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14006bb55
mov rcx, rdi
call fcn.14011228c
mov r8, qword [rbp - 0x31]
mov rbx, qword [rbp - 0x39]
sub r8, rbx
xor edx, edx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp - 0x21]
cmp qword [rbp - 9], 0xf
cmova rcx, qword [rbp - 0x21]
mov r8, qword [rbp - 0x11]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rbp - 0x31]
mov rdi, qword [rbp - 0x39]
sub rcx, rdi
xor eax, eax
rep stosb byte [rdi], al
lea rdi, [rbp - 0x21]
cmp qword [rbp - 9], 0xf
cmova rdi, qword [rbp - 0x21]
mov rcx, qword [rbp - 0x11]
rep stosb byte [rdi], al
mov r8, qword [rbp - 0x31]
mov rcx, qword [rbp - 0x39]
sub r8, rcx
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rsi, qword [rbp - 0x31]
mov rcx, qword [rbp - 0x39]
cmp rsi, rcx
je 0x14006ba3d
mov rsi, rcx
mov qword [rbp - 0x31], rcx
sub rsi, rcx
mov rdi, r12
mov rbx, r12
mov rax, r12
je 0x14006bab2
cmp rsi, r14
ja 0x14006bbe6
cmp rsi, 0x1000
jb 0x14006ba86
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x14006bbe0
call fcn.14011292c
test rax, rax
je 0x14006bb55
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14006ba91
mov rcx, rsi
call fcn.14011292c
mov rdi, rax
mov rbx, qword [rbp - 0x31]
mov rdx, qword [rbp - 0x39]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
add rbx, rdi
lea rax, [rdi + rsi]
mov rcx, qword [rbp - 0x39]
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], rbx
mov rdx, qword [rbp - 0x29]
mov qword [rbp - 0x29], rax
test rcx, rcx
je 0x14006baf8
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14006baeb
add rdx, 0x27
mov rdi, qword [rcx - 8]
sub rcx, rdi
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14006bb55
mov rcx, rdi
call fcn.14011228c
mov rbx, qword [rbp - 0x31]
mov rdi, qword [rbp - 0x39]
cmp rbx, rdi
je 0x14006bb21
nop dword [rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov byte [rdi], al
inc rdi
cmp rdi, rbx
jne 0x14006bb00
mov rbx, qword [rbp - 0x31]
mov rdi, qword [rbp - 0x39]
cmp rbx, rdi
je 0x14006bb21
mov qword [rbp - 0x31], rdi
test rdi, rdi
je 0x14006bb70
mov rdx, qword [rbp - 0x29]
sub rdx, rdi
mov rax, rdi
cmp rdx, 0x1000
jb 0x14006bb5c
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006bb5c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rdi
call fcn.14011228c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], r12
mov rdx, qword [rbp - 9]
cmp rdx, 0xf
jbe 0x14006bbae
inc rdx
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006bba9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006bba9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011228c
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.140112700
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140080190
nop
call fcn.140080720
int3