Function at 0x1400068f0
Capabilities:
Encode data using xor
Terminate process

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x28
lea rbp, [rsp + 0x20]
movups xmmword [rbp - 0x10], xmm6
mov qword [rbp - 0x18], 0xfffffffffffffffe
mov rsi, rcx
mov eax, dword [0x1401d6298]
mov ecx, dword [0x1401d629c]
shrd ecx, eax, 0xa
xor ecx, 0x3d740e2f
mov eax, ecx
shl rax, 4
lea rax, [rax + rax*2]
call fcn.140035520
sub rsp, rax
mov r14, rsp
imul eax, dword [0x1401d62a0], 0x1b20b652
imul ecx, dword [0x1401d62a4], 0x3ed45726
add eax, ecx
add eax, 0x5625aaa7
shl rax, 4
lea rax, [rax + rax*2]
call fcn.140035520
sub rsp, rax
mov rdi, rsp
mov eax, dword [0x1401d62a8]
mov ecx, dword [0x1401d62ac]
shrd ecx, eax, 0x1c
xor ecx, 0xab47c9d
mov eax, ecx
lea rax, [rax + rax*2]
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140035520
sub rsp, rax
mov r15, rsp
imul eax, dword [0x1401d62b0], 0x92a5a057
imul ecx, dword [0x1401d62b4], 0x7ee27043
add eax, ecx
add eax, 0x5506ce59
imul rax, rax, 0x1388
add rax, 0xf
and rax, 0xfffffffffffffff0
call fcn.140035520
sub rsp, rax
mov r13, rsp
mov ebx, dword [0x1401eafb8]
sub rsp, 0x20
call fcn.140020f80
add rsp, 0x20
mov eax, dword [0x1401d62b8]
mov ecx, dword [0x1401d62bc]
shrd ecx, eax, 0x1e
xor ecx, 0x36b17abf
cmp qword [0x1401eaf98], 0
sete al
movzx edx, byte [0x1401eb301]
add dl, byte [0x1401d62c0]
inc dl
cmp ebx, ecx
mov ecx, 0
mov cl, al
movzx eax, dl
cmovne eax, ecx
test al, 1
je 0x140006fbe
xorps xmm0, xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x10], xmm0
mov rax, qword [0x1401d62c8]
mov rcx, qword [0x1401d62d0]
shrd rcx, rax, 0x1b
movups xmmword [rdi], xmm0
movabs r8, 0x42cf528bf88a3f11
xor r8, rcx
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
call qword [0x1401eb038]
add rsp, 0x20
mov ebx, eax
sub rsp, 0x20
call fcn.140020ff0
add rsp, 0x20
imul eax, dword [0x1401d62d8], 0xb07cf815
imul ecx, dword [0x1401d62dc], 0xeabb6853
mov r12, r15
mov r15, r14
lea r14d, [rax + rcx]
add r14d, 0xabee8d5b
mov eax, dword [rdi + 0x28]
mov dword [rbp - 0x20], eax
sub rsp, 0x20
call fcn.140021070
add rsp, 0x20
cmp ebx, r14d
je 0x140006fbe
cdqe
lea rcx, [0x140045b28]
mov edx, dword [rbp - 0x20]
cmp edx, dword [rcx + rax*4]
jne 0x140006fbe
mov r14, r15
mov r15, r12
mov edi, dword [rdi + 0x24]
sub rsp, 0x20
call fcn.1400210e0
add rsp, 0x20
cdqe
lea rcx, [0x140045b34]
mov ebx, dword [rcx + rax*4]
and ebx, edi
sub rsp, 0x20
call fcn.140021170
add rsp, 0x20
mov eax, dword [0x1401d62e0]
mov ecx, dword [0x1401d62e4]
shrd ecx, eax, 0x1f
xor ecx, 0xb8a37a
cmp ebx, ecx
jne 0x140006bb5
mov ebx, dword [0x1401eafb8]
sub rsp, 0x20
call fcn.1400211e0
add rsp, 0x20
cdqe
imul ecx, dword [0x1401d62e8], 0xe920e900
lea rdx, [0x140045b40]
imul r8d, dword [0x1401d62ec], 0x9e0eebd8
mov r9d, dword [0x1401d62f0]
mov r10d, dword [0x1401d62f4]
shrd r10d, r9d, 0xd
xor r10d, 0xc6301ab2
cmp ebx, dword [rdx + rax*4]
mov eax, r8d
lea eax, [rcx + rax + 0x4e562b94]
cmovne eax, r10d
mov ebx, eax
and ebx, edi
sub rsp, 0x20
call fcn.140021260
add rsp, 0x20
imul eax, dword [0x1401d62f8], 0xe6a33115
imul ecx, dword [0x1401d62fc], 0xcc61b2e4
add eax, ecx
add eax, 0x386d896c
cmp ebx, eax
je 0x140006fbe
mov rbx, r14
mov rdi, r13
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
add rsp, 0x20
mov r14, rax
xorps xmm6, xmm6
movups xmmword [r15], xmm6
mov qword [rbp - 0x20], r15
mov qword [r15 + 0x10], 0
movabs r13, 0xf129f5e0297c05ce
xor r15d, r15d
jmp 0x140006c2d
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movups xmm2, xmmword [rbx + 0x20]
movups xmmword [rdx + 0x20], xmm2
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
add rdx, 0x30
mov qword [rcx + 8], rdx
nop dword [rax]
mov rax, r15
add rax, qword [rbx + 0x18]
mov r15, rax
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
jae 0x140006d71
movups xmmword [rbx + 0x20], xmm6
movups xmmword [rbx + 0x10], xmm6
movups xmmword [rbx], xmm6
mov rax, qword [0x1401d6300]
movabs rcx, 0x6c11cd5bf7b2b07e
imul rax, rcx
mov rcx, qword [0x1401d6308]
movabs rdx, 0x15cb648261f322b5
imul rcx, rdx
add rcx, rax
mov r9, rcx
movabs rax, 0x152fda4a204a68a1
add r9, rax
nop
sub rsp, 0x20
mov rcx, r14
mov rdx, r15
mov r8, rbx
call qword [0x1401eb040]
add rsp, 0x20
nop
mov r12, rax
sub rsp, 0x20
call fcn.1400212f0
add rsp, 0x20
mov rax, qword [0x1401d6310]
movabs rcx, 0x59d72b5696126438
imul rax, rcx
mov rcx, qword [0x1401d6318]
movabs rdx, 0xd24894bf18b72692
imul rcx, rdx
add rcx, rax
add rcx, r13
cmp r12, rcx
je 0x140006d71
mov eax, dword [rbx + 0x24]
cmp eax, 0x20
jge 0x140006cf0
cmp eax, 4
jne 0x140006c10
jmp 0x140006cfe
cmp eax, 0x40
jge 0x140006cf8
cmp eax, 0x20
jne 0x140006c10
mov r12d, dword [rbx + 0x28]
sub rsp, 0x20
call fcn.140021380
add rsp, 0x20
cdqe
lea rcx, [0x140045b4c]
and r12d, dword [rcx + rax*4]
sub rsp, 0x20
call fcn.1400213f0
add rsp, 0x20
mov eax, dword [0x1401d6320]
mov ecx, dword [0x1401d6324]
shrd ecx, eax, 0xe
xor ecx, 0xdd97069c
cmp r12d, ecx
je 0x140006c10
mov rcx, qword [rbp - 0x20]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
jne 0x140006bee
nop
sub rsp, 0x20
mov r8, rbx
call fcn.14000f0e0
add rsp, 0x20
nop
jmp 0x140006c10
mov rax, qword [rbp - 0x20]
mov rcx, qword [rax]
mov rax, qword [rax + 8]
cmp rcx, rax
jne 0x140006dbf
imul eax, dword [0x1401d632c], 0x8f519074
imul ecx, dword [0x1401d6330], 0x5bb202fe
add ecx, eax
add ecx, 0x178a11c8
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rdx, rcx
add rdx, 0x30
mov rcx, rdx
cmp rdx, rax
je 0x140006d81
mov rdx, qword [rcx]
cmp rdx, rsi
jae 0x140006db0
mov r8, qword [rcx + 0x18]
lea r9, [r8 + rdx]
cmp r9, rsi
jbe 0x140006db0
mov qword [0x1401eaf98], rdx
mov qword [0x1401eafa0], r8
sub rsp, 0x20
call fcn.140021470
add rsp, 0x20
movzx eax, byte [0x1401d6328]
movzx ecx, byte [0x1401d6329]
shr cl, 3
shl al, 5
or al, cl
xor al, 0xaa
mov byte [0x1401eafa8], al
nop
sub rsp, 0x20
call fcn.1400357b0
add rsp, 0x20
nop
mov r13d, eax
sub rsp, 0x20
call fcn.1400214f0
add rsp, 0x20
cdqe
lea rcx, [0x140045b58]
mov eax, dword [rcx + rax*4]
mov dword [rdi + 0x1384], eax
mov dword [rdi + 4], r13d
lea rbx, [0x140045b70]
lea r14, [0x140045b80]
lea r15, [0x140045ba0]
mov r12d, 1
mov eax, r13d
mov rsi, rdi
nop word cs:[rax + rax]
mov r13d, eax
sub rsp, 0x20
call fcn.140021570
add rsp, 0x20
cdqe
lea rcx, [0x140045b64]
movzx ecx, byte [rcx + rax*4]
mov edi, r13d
shr edi, cl
xor edi, r13d
sub rsp, 0x20
call fcn.1400215e0
add rsp, 0x20
cdqe
imul edi, dword [rbx + rax*4]
mov eax, r12d
mov ecx, edi
lea edi, [rax + rcx]
mov dword [rsi + r12*4 + 4], edi
sub rsp, 0x20
call fcn.140021660
add rsp, 0x20
cdqe
mov r13, r12
add r13, qword [r14 + rax*8]
sub rsp, 0x20
call fcn.1400216e0
add rsp, 0x20
movsxd rcx, eax
mov r12, r13
mov eax, edi
cmp r13, qword [r15 + rcx*8]
jne 0x140006e70
sub rsp, 0x20
call fcn.140021770
add rsp, 0x20
cdqe
lea rcx, [0x140045bb8]
mov eax, dword [rcx + rax*4]
mov dword [rsi], eax
nop
sub rsp, 0x20
mov rcx, rsi
call fcn.14000f410
add rsp, 0x20
nop
mov dword [0x1401eafac], eax
mov rax, qword [rbp - 0x20]
mov rbx, qword [rax]
test rbx, rbx
je 0x140006fbe
mov rsi, qword [rax + 0x10]
sub rsi, rbx
sub rsp, 0x20
call fcn.1400217d0
add rsp, 0x20
cdqe
lea rcx, [0x140045bd0]
cmp rsi, qword [rcx + rax*8]
jbe 0x140006fab
mov rdi, qword [rbx - 8]
sub rsp, 0x20
call fcn.140021850
add rsp, 0x20
cdqe
lea rcx, [0x140045bf0]
add rbx, qword [rcx + rax*8]
sub rbx, rdi
sub rsp, 0x20
call fcn.1400218e0
add rsp, 0x20
cdqe
lea rcx, [0x140045c10]
cmp rbx, qword [rcx + rax*8]
jae 0x140006fd3
sub rsp, 0x20
call fcn.140021960
add rsp, 0x20
cdqe
lea rcx, [0x140045c30]
add rsi, qword [rcx + rax*8]
mov rdx, rsi
mov rcx, rdi
jmp 0x140006fb1
mov rdx, rsi
mov rcx, rbx
sub rsp, 0x20
call fcn.1400354d0
add rsp, 0x20
movups xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
sub rsp, 0x20
call fcn.1400380f8
int3