Function at 0x14000d988
Capabilities:
Encode data using xor

Disassembly:
jmp 0x14000d988
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0x68]
sub rsp, 0x168
mov rax, qword [0x140028ec0]
xor rax, rsp
mov qword [rbp + 0x50], rax
mov esi, dword [rbp + 0xc0]
xor eax, eax
mov r10, r9
mov r9, qword [rbp + 0xb8]
mov rbx, rdx
mov rdx, qword [rbp + 0xc8]
mov qword [rbp - 0x70], rax
mov r11, r8
mov r8, qword [r10]
mov rdi, rcx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x60], rdx
test r8, r8
je 0x14000db61
movzx eax, byte [r8]
inc r8
mov qword [r10], r8
test eax, eax
je 0x14000db61
cmp eax, 1
jl 0x14000da17
cmp eax, 0x73
jle 0x14000db52
cmp eax, 0x74
je 0x14000dfb7
cmp eax, 0x75
jl 0x14000dbec
cmp eax, 0x8d
jge 0x14000dbf7
add eax, 0xffffff8b
mov ecx, eax
and ecx, 3
mov dword [rsp + 0x58], ecx
mov ecx, eax
sar ecx, 3
mov dword [rsp + 0x44], ecx
test al, 4
jne 0x14000da54
mov ecx, 3
jmp 0x14000da5f
movzx ecx, byte [r8]
lea rax, [r8 + 1]
mov qword [r10], rax
lea r8d, [rcx + 1]
mov ecx, dword [rsp + 0x58]
mov eax, esi
shl ecx, 2
shl r8d, cl
mov ecx, esi
sub eax, r8d
test esi, esi
cmovns ecx, eax
mov dword [rsp + 0x40], ecx
je 0x14000dbe0
test ecx, ecx
jg 0x14000da8f
cmp ecx, esi
jne 0x14000dbe0
test byte [rbp + 0xb0], 1
jne 0x14000dbd4
mov eax, dword [rbp + 0xb0]
mov esi, dword [rsp + 0x44]
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x30], r8d
or eax, 1
mov qword [rsp + 0x28], r9
mov rcx, rdi
mov rdx, rbx
mov r8, r11
mov dword [rsp + 0x20], eax
lea r9, [0x1400294d0]
cmp esi, 1
je 0x14000dad4
mov r9, r10
call fcn.14000110e
mov rcx, qword [rdi + 0x60]
call fcn.14000137a
test al, al
jne 0x14000e074
mov rcx, qword [rdi + 0x60]
xor r9d, r9d
mov r8b, 1
lea edx, [r9 + 0x68]
call fcn.140001488
mov rcx, rax
test rax, rax
je 0x14000e074
mov rax, qword [rdi + 0x60]
mov qword [rcx + 0x60], rax
jmp 0x14000db16
mov rdi, qword [rax]
lea rax, [rdi + 0x40]
cmp qword [rax], 0
jne 0x14000db13
mov rdx, qword [rsp + 0x60]
mov r9, qword [rsp + 0x50]
mov r11, qword [rsp + 0x48]
cmp esi, 2
mov esi, dword [rsp + 0x40]
mov qword [rdi + 0x40], rcx
jne 0x14000db48
lea r10, [0x1400294d0]
jmp 0x14000d9ca
mov r10, qword [rsp + 0x70]
jmp 0x14000d9ca
mov ecx, eax
call fcn.140001334
mov r9, rax
mov r11, qword [rsp + 0x48]
mov rax, qword [rbx]
and dword [rdi + 0x30], 0
and qword [rdi + 0x38], 0
mov rdx, r9
mov rcx, rdi
mov qword [rdi + 0x20], rax
mov qword [rdi + 0x28], r11
call fcn.1400012fd
mov rax, qword [rbp - 0x70]
test rax, rax
je 0x14000db98
cmp byte [rax + 0x17], 0
je 0x14000db98
mov rcx, rax
call qword [sym.imp.MSVCR100.dll_free]
mov rcx, qword [rsp + 0x60]
mov r9d, dword [rdi]
test rcx, rcx
jne 0x14000e00b
mov r8, qword [rsp + 0x48]
mov eax, r9d
sar r9d, 0x14
sar eax, 8
mov edx, esi
mov rcx, rbx
and eax, 0xfff
and r9d, 0xf
mov dword [rsp + 0x20], eax
call fcn.14000153c
jmp 0x14000e05c
lea rcx, str.illegal_nested_run_encoding
jmp 0x14000e000
lea rcx, str.illegal_run_encoding
jmp 0x14000e000
cmp eax, 0x8d
jl 0x14000dfaa
cmp eax, 0xbd
jge 0x14000dfaa
add eax, 0xffffff73
xor r10d, r10d
mov ecx, eax
mov r9d, eax
mov dword [rsp + 0x44], eax
sar ecx, 1
sar r9d, 2
mov eax, r10d
and ecx, 1
test r9d, r9d
lea r8d, [r10 + 2]
setg al
mov dword [rsp + 0x58], ecx
mov ecx, r9d
shl r8d, cl
mov dword [rsp + 0x40], eax
lea ecx, [r10 + 0xb]
sub ecx, r9d
lea edx, [r10 + 4]
shl edx, cl
mov ecx, 0x100
mov eax, ecx
sub eax, edx
cmp r9d, 6
cmovle eax, r8d
sub ecx, eax
mov dword [rsp + 0x60], ecx
test esi, esi
jg 0x14000dc6b
lea rcx, str.illegal_pop_encoding
jmp 0x14000e000
test byte [rbp + 0xb0], 2
je 0x14000dc80
lea rcx, str.illegal_nested_pop_encoding
jmp 0x14000e000
xor edx, edx
lea rcx, [rbp - 0x60]
mov qword [rbp - 0x78], r10
lea r8d, [rdx + 0x68]
mov qword [rsp + 0x78], r10
mov qword [rbp - 0x80], r10
call sub.MSVCR100.dll_memset
test byte [rsp + 0x44], 1
mov rax, qword [rdi + 0x60]
mov r8, qword [rsp + 0x48]
mov qword [rbp], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x50]
mov dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x28], rax
mov rdx, rbx
lea rcx, [rbp - 0x60]
mov dword [rsp + 0x20], 2
lea r9, [0x1400294d0]
jne 0x14000dce7
mov r9, qword [rsp + 0x70]
call fcn.14000110e
mov r9, qword [rbp - 0x80]
mov r8, qword [rsp + 0x78]
mov rcx, qword [rdi + 0x60]
lea rdx, [rbp - 0x70]
call fcn.14000114f
mov rax, qword [rbp - 0x70]
mov qword [rdi + 0x48], rax
mov rax, qword [rbp - 0x80]
shr rax, 2
cmp qword [rbp - 0x78], 0
mov dword [rdi + 0x50], eax
je 0x14000dd26
lea rcx, [rsp + 0x78]
call fcn.14000149c
mov rcx, qword [rdi + 0x60]
and qword [rbp - 0x78], 0
call fcn.14000137a
test al, al
jne 0x14000e074
cmp dword [rsp + 0x40], 0
je 0x14000def7
mov ecx, 0x110000
call fcn.140001069
mov edx, 2
mov rbx, rax
mov dword [rsp + 0x40], edx
mov ecx, dword [rbx + 0x10]
cmp dword [rdi + 0x50], ecx
jle 0x14000ddc3
cmp byte [rbx + 0x17], 0
je 0x14000dd78
mov rcx, rbx
call qword [sym.imp.MSVCR100.dll_free]
mov edx, dword [rsp + 0x40]
lea eax, [rdx - 1]
cmp eax, 4
ja 0x14000ddad
mov r8d, dword [rsp + 0x60]
lea eax, [r8 - 1]
cmp eax, 0xff
ja 0x14000e074
mov ecx, edx
shl ecx, 0xc
or ecx, r8d
shl ecx, 8
call fcn.140001069
mov edx, dword [rsp + 0x40]
mov rbx, rax
jmp 0x14000ddaf
xor ebx, ebx
test rbx, rbx
je 0x14000e074
inc edx
mov dword [rsp + 0x40], edx
cmp edx, 5
jle 0x14000dd5d
mov eax, dword [rbx + 0x10]
cmp dword [rdi + 0x50], eax
jle 0x14000ddd7
lea rcx, str.pop.L_value_too_small
jmp 0x14000e000
and qword [rsp + 0x38], 0
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x68]
mov dword [rsp + 0x30], esi
lea r9, [0x1400294d0]
mov rcx, rdi
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 2
call fcn.14000110e
cmp byte [rbx + 0x17], 0
je 0x14000de16
mov rcx, rbx
call qword [sym.imp.MSVCR100.dll_free]
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rdi + 0x60]
call fcn.14000137a
test al, al
jne 0x14000e074
xor eax, eax
lea rcx, [rbp + 0x10]
mov rdx, rdi
lea r8d, [rax + 0x40]
mov dword [rsp + 0x40], eax
call sub.MSVCR100.dll_memcpy
and dword [rsp + 0x44], 0
test esi, esi
jle 0x14000df39
lea rcx, [rbp + 0x10]
call fcn.14000139d
mov r11d, eax
test eax, eax
mov eax, dword [rsp + 0x40]
jne 0x14000de69
inc eax
mov dword [rsp + 0x40], eax
cmp r11d, dword [rdi + 0x50]
ja 0x14000df2d
mov ecx, dword [rsp + 0x44]
inc ecx
mov dword [rsp + 0x44], ecx
cmp ecx, esi
jl 0x14000de4f
test eax, eax
je 0x14000df39
mov rcx, qword [rdi + 0x60]
xor r9d, r9d
mov r8b, 1
lea edx, [r9 + 0x68]
call fcn.140001488
mov qword [rdi + 0x58], rax
test rax, rax
je 0x14000e074
and qword [rsp + 0x38], 0
cmp dword [rsp + 0x58], 0
mov rcx, qword [rdi + 0x60]
mov r8, qword [rsp + 0x48]
mov qword [rax + 0x60], rcx
mov eax, dword [rsp + 0x40]
mov rcx, qword [rdi + 0x58]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x28], rax
mov rdx, rbx
lea r9, [0x1400294d0]
mov dword [rsp + 0x20], 2
jne 0x14000def0
mov r9, qword [rsp + 0x70]
call fcn.14000110e
jmp 0x14000df66
and qword [rsp + 0x38], 0
mov rax, qword [rsp + 0x50]
mov r9, qword [rsp + 0x70]
mov r8, qword [rsp + 0x48]
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rax
mov rdx, rbx
mov rcx, rdi
mov dword [rsp + 0x20], 2
call fcn.14000110e
jmp 0x14000de1b
lea rcx, str.pop_token_out_of_range
jmp 0x14000e000
cmp dword [rsp + 0x58], 0
jne 0x14000df66
mov rdx, qword [rsp + 0x70]
mov rax, qword [rdx]
movzx ecx, byte [rax]
inc rax
mov qword [rdx], rax
cmp ecx, 0x73
jle 0x14000df66
mov rdx, qword [rdi + 0x60]
lea rcx, str.bad_meta_coding_for_empty_pop_U
call fcn.1400013e8
mov rcx, rdi
cmp dword [rcx + 0x18], 2
mov eax, 0xe
je 0x14000df81
cmp dword [rcx + 0x18], 7
jne 0x14000df86
mov eax, 0x10
jmp 0x14000df86
mov eax, 0xf
mov dword [rcx + 0x18], eax
cmp rcx, rdi
je 0x14000df9c
mov rax, qword [rdi + 0x48]
mov qword [rcx + 0x48], rax
mov eax, dword [rdi + 0x50]
mov dword [rcx + 0x50], eax
mov rcx, qword [rcx + 0x40]
test rcx, rcx
jne 0x14000df69
jmp 0x14000e074
mov rdx, qword [rcx + 0x60]
lea rcx, str.bad_meta_coding
jmp 0x14000e004
movzx ecx, byte [r8]
inc r8
mov qword [r10], r8
movzx edx, byte [r8]
lea rax, [r8 + 1]
mov r8d, ecx
mov r9d, ecx
sar ecx, 3
sar r8d, 1
inc edx
and r9d, 1
inc ecx
and r8d, 3
mov qword [r10], rax
call fcn.140001663
mov r9, rax
mov qword [rbp - 0x70], rax
test rax, rax
jne 0x14000db5c
lea rcx, str.illegal_arb._coding
mov rdx, qword [rdi + 0x60]
call fcn.1400013e8
jmp 0x14000e074
test esi, esi
js 0x14000e08c
lea rcx, [rbp + 0x10]
mov rdx, rdi
mov r8d, 0x40
call sub.MSVCR100.dll_memcpy
test esi, esi
jle 0x14000e055
mov edi, esi
mov rsi, qword [rsp + 0x60]
lea rcx, [rbp + 0x10]
call fcn.14000139d
mov edx, 4
mov rcx, rsi
mov ebx, eax
call fcn.14000137f
dec rdi
mov dword [rax], ebx
jne 0x14000e02c
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x68]
mov rax, qword [rbp + 0x30]
mov qword [rbx], rax
mov rcx, qword [rdi + 0x60]
call fcn.14000137a
test al, al
jne 0x14000e074
mov rax, qword [rbx]
mov qword [rdi + 0x38], rdi
mov qword [rdi + 0x28], rax
mov rcx, qword [rbp + 0x50]
xor rcx, rsp
call fcn.14001c6b0
add rsp, 0x168
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rax, qword [rcx + 8]
and dword [rsp + 0x40], 0
mov esi, 0x80000000
shr rax, 2
test eax, eax
jle 0x14000e0da
mov r8, qword [rcx]
mov r9d, eax
mov edi, dword [r8]
mov ecx, esi
sar ecx, 0x1f
lea eax, [rdi + rdi]
mov edx, edi
sar edx, 0x1f
mov dword [rsp + 0x40], edi
xor edx, eax
lea eax, [rsi + rsi]
xor ecx, eax
mov eax, edi
cmp ecx, edx
cmovb eax, esi
add r8, 4
dec r9
mov esi, eax
jne 0x14000e0a8
mov rdi, qword [rsp + 0x58]
lea rcx, [rbp + 0x10]
mov rdx, rdi
mov r8d, 0x40
call sub.MSVCR100.dll_memcpy
lea rcx, [rbp + 0x10]
call fcn.14000139d
mov ebx, eax
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax + 8]
shr rcx, 2
test ecx, ecx
jle 0x14000e11a
cmp ebx, dword [rsp + 0x40]
je 0x14000e050
cmp ebx, esi
je 0x14000e050
mov edx, 4
mov rcx, rax
call fcn.14000137f
mov dword [rax], ebx
mov rcx, qword [rdi + 0x60]
call fcn.14000137a
test al, al
jne 0x14000e074
lea eax, [rbx + rbx]
mov edx, ebx
mov ecx, esi
sar edx, 0x1f
sar ecx, 0x1f
mov dword [rsp + 0x40], ebx
xor edx, eax
lea eax, [rsi + rsi]
xor ecx, eax
cmp ecx, edx
cmovb ebx, esi
mov esi, ebx
jmp 0x14000e0ec