Function at 0x1400b570c
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
movzx r13d, word [rcx + 0x48]
xor r15d, r15d
mov r12b, dl
and r12b, 1
mov rdi, rdx
xor r13w, 0x7b
and rdi, 0xfffffffffffffffe
mov rbx, rcx
mov qword [rax + 0x18], r15
mov byte [rsp + 0x90], r12b
cmp r12b, r15b
jne 0x1400b5790
movzx edx, word [rcx + 0x48]
bts edx, 0x10
call fcn.14005f26c
mov word [rbx + 0xc8], r15w
movzx eax, word [rdi]
cmp word [rbx + 0x92], ax
je 0x1400b578a
cmp word [rbx + 0x94], ax
je 0x1400b578a
cmp word [rbx + 0x8a], ax
je 0x1400b578a
cmp word [rbx + 0x90], ax
jne 0x1400b5790
add rdi, 2
jmp 0x1400b5763
test byte [rbx + 0x10], 0x80
mov ebp, r15d
mov qword [rsp + 0x98], rdi
mov qword [rsp + 0x30], r15
je 0x1400b57b4
lea r14, [rsp + 0x30]
cmp qword [0x140133050], r15
jne 0x1400b57b9
lea r14, [rsp + 0x38]
movzx eax, word [rbx + 0x88]
cmp word [rdi], ax
je 0x1400b5da4
mov r12d, 9
test byte [rbx + 0x11], 1
je 0x1400b57e2
mov rcx, qword [rsp + 0xa0]
call fcn.140059008
test byte [rbx + 0xc8], 0x42
jne 0x1400b5d9c
movzx esi, word [rbx + 0x88]
mov rcx, rdi
mov qword [rsp + 0x98], rdi
call fcn.14001bcc8
cmp word [rax], si
je 0x1400b5d9c
cmp ebp, r15d
jg 0x1400b5b83
movzx edx, word [rbx + 0x96]
movzx eax, word [rdi]
cmp dx, ax
jne 0x1400b590c
add rdi, 2
mov r9, rdi
mov qword [rsp + 0x98], rdi
movzx eax, word [rdi]
cmp word [rbx + 0x92], ax
je 0x1400b5861
cmp word [rbx + 0x94], ax
je 0x1400b5861
cmp word [rbx + 0x8a], ax
je 0x1400b5861
cmp word [rbx + 0x90], ax
jne 0x1400b5867
add rdi, 2
jmp 0x1400b5832
cmp word [rdi], si
je 0x1400b57cf
lea rdx, [rbx + 0xaa]
mov rcx, rdi
call fcn.14005f23c
cmp eax, r15d
je 0x1400b57cf
lea rdx, [rbx + 0x9a]
mov rcx, rdi
call fcn.14005f23c
cmp eax, r15d
je 0x1400b57cf
mov rdx, qword [rbx + 0x40]
lea rax, [0x140113598]
mov qword [rsp + 0x98], r9
lea r8, [rsp + 0x98]
xor r9d, r9d
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.1400aae00
mov rdi, qword [rsp + 0x98]
movzx eax, word [rdi]
cmp word [rbx + 0x92], ax
je 0x1400b58fe
cmp word [rbx + 0x94], ax
je 0x1400b58fe
cmp word [rbx + 0x8a], ax
je 0x1400b58fe
cmp word [rbx + 0x90], ax
jne 0x1400b57cf
add rdi, 2
mov qword [rsp + 0x98], rdi
jmp 0x1400b58d3
cmp ax, word [rbx + 0xba]
jne 0x1400b5b83
movzx eax, word [rbx + 0xbc]
cmp word [rdi + 2], ax
jne 0x1400b5b83
movzx r9d, word [rbx + 0x92]
lea rax, [rdi + 4]
mov qword [rsp + 0x98], rax
movzx ecx, word [rax]
cmp r9w, cx
je 0x1400b5962
cmp word [rbx + 0x94], cx
je 0x1400b5962
cmp word [rbx + 0x8a], cx
je 0x1400b5962
cmp word [rbx + 0x90], cx
jne 0x1400b5968
add rax, 2
jmp 0x1400b5936
movzx ecx, word [rax]
cmp cx, si
je 0x1400b599f
cmp cx, word [rbx + 0x8a]
je 0x1400b599f
cmp cx, word [rbx + 0x90]
je 0x1400b599f
cmp dx, cx
je 0x1400b599f
add rax, 2
mov qword [rsp + 0x98], rax
mov cx, word [rax]
cmp cx, word [rbx + 0x88]
jne 0x1400b5970
movzx ecx, word [rbx + 0x94]
movzx edx, word [rbx + 0x8a]
movzx r8d, word [rbx + 0x90]
mov rsi, rax
cmp r9w, word [rsi]
je 0x1400b59ce
cmp cx, word [rsi]
je 0x1400b59ce
cmp dx, word [rsi]
je 0x1400b59ce
cmp r8w, word [rsi]
jne 0x1400b59d4
add rsi, 2
jmp 0x1400b59b8
cmp r13w, word [rsi]
jne 0x1400b5af4
sub rax, rdi
lea rcx, [rsp + 0xa8]
mov rdx, rdi
sar rax, 1
mov r8, rax
call fcn.14006d624
mov r11, qword [rsp + 0x98]
mov r9, qword [rsp + 0xa8]
sub r11, rdi
sar r11, 1
dec r11d
movsxd rcx, r11d
cmp rcx, r15
jl 0x1400b5a27
movzx eax, word [rbx + 0x48]
xor word [r9 + rcx*2], ax
sub rcx, 1
jns 0x1400b5a18
add rsi, 2
mov r10, rsi
mov qword [rsp + 0x98], rsi
movzx eax, word [r10]
cmp word [rbx + 0x92], ax
je 0x1400b5a5e
cmp word [rbx + 0x94], ax
je 0x1400b5a5e
cmp word [rbx + 0x8a], ax
je 0x1400b5a5e
cmp word [rbx + 0x90], ax
jne 0x1400b5a6c
add r10, 2
mov qword [rsp + 0x98], r10
jmp 0x1400b5a36
movzx eax, word [rbx + 0x88]
cmp word [r10], ax
je 0x1400b5adf
lea rdx, [rbx + 0xaa]
mov rcx, r10
call fcn.14005f23c
cmp eax, r15d
je 0x1400b5adf
lea rdx, [rbx + 0x9a]
mov rcx, r10
call fcn.14005f23c
cmp eax, r15d
je 0x1400b5adf
mov rdx, qword [rbx + 0x40]
mov qword [rsp + 0x20], r9
lea r8, [rsp + 0x98]
xor r9d, r9d
mov rcx, rbx
mov qword [rsp + 0x98], rsi
call fcn.1400aae00
mov rdi, qword [rsp + 0x98]
lea rcx, [rsp + 0xa8]
call fcn.1400590a4
jmp 0x1400b57cf
lea rcx, [rsp + 0xa8]
call fcn.1400590a4
mov rax, qword [rsp + 0x98]
movzx ecx, word [rax]
movzx edx, word [rbx + 0x92]
cmp cx, dx
je 0x1400b5b41
cmp cx, word [rbx + 0x94]
je 0x1400b5b41
cmp cx, word [rbx + 0x8a]
je 0x1400b5b41
cmp cx, word [rbx + 0x90]
jne 0x1400b5b4a
jmp 0x1400b5b41
cmp word [rbx + 0x8a], cx
je 0x1400b5b4a
cmp word [rbx + 0x90], cx
je 0x1400b5b4a
add rax, 2
mov qword [rsp + 0x98], rax
mov cx, word [rax]
cmp word [rbx + 0x88], cx
jne 0x1400b5b20
movzx ecx, word [rax]
cmp dx, cx
je 0x1400b5b6d
cmp word [rbx + 0x94], cx
je 0x1400b5b6d
cmp word [rbx + 0x8a], cx
je 0x1400b5b6d
cmp word [rbx + 0x90], cx
jne 0x1400b5b7b
add rax, 2
mov qword [rsp + 0x98], rax
jmp 0x1400b5b4a
mov rdi, rax
jmp 0x1400b57cf
lea r9, [rsp + 0x98]
lea rdx, [rsp + 0xa0]
mov r8, rdi
mov rcx, rbx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x98], r15
mov byte [rsp + 0x20], r15b
call fcn.14001aaa8
cmp word [rax], r15w
je 0x1400b5d61
cmp word [rax], 0x2f
je 0x1400b5d61
cmp word [rax], 0x3b
je 0x1400b5d61
cmp word [rax], 0x60
je 0x1400b5d61
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0x98]
mov r9, rax
mov rcx, rbx
call fcn.14006bdbc
lea rdx, str._SUB
mov r8d, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, r15d
jne 0x1400b5c38
movzx eax, word [rdi + 8]
cmp r12w, ax
ja 0x1400b5c21
cmp ax, 0xd
jbe 0x1400b5c31
mov esi, 0x20
cmp si, ax
je 0x1400b5c31
cmp ax, r15w
jne 0x1400b5c3d
inc ebp
jmp 0x1400b5d61
mov esi, 0x20
lea rdx, str._END
mov r8d, 4
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, r15d
jne 0x1400b5c83
movzx eax, word [rdi + 8]
cmp r12w, ax
ja 0x1400b5c68
cmp ax, 0xd
jbe 0x1400b5c73
cmp si, ax
je 0x1400b5c73
cmp ax, r15w
jne 0x1400b5c83
cmp ebp, r15d
jle 0x1400b5d61
dec ebp
jmp 0x1400b5d61
cmp ebp, r15d
jg 0x1400b5d61
cmp byte [0x14013302f], 3
jne 0x1400b5d43
lea rcx, str.REGI
mov r8d, 4
mov rdx, rdi
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, r15d
jne 0x1400b5ccf
movzx eax, word [rdi + 8]
cmp r12w, ax
ja 0x1400b5cc4
cmp ax, 0xd
jbe 0x1400b5d43
cmp si, ax
je 0x1400b5d43
cmp ax, r15w
je 0x1400b5d43
lea rcx, str.ENVI
mov r8d, 4
mov rdx, rdi
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, r15d
jne 0x1400b5d05
movzx eax, word [rdi + 8]
cmp r12w, ax
ja 0x1400b5cfa
cmp ax, 0xd
jbe 0x1400b5d43
cmp si, ax
je 0x1400b5d43
cmp ax, r15w
je 0x1400b5d43
lea rcx, [0x140120710]
mov r8d, 3
mov rdx, rdi
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, r15d
jne 0x1400b5d3b
movzx eax, word [rdi + 6]
cmp r12w, ax
ja 0x1400b5d30
cmp ax, 0xd
jbe 0x1400b5d43
cmp si, ax
je 0x1400b5d43
cmp ax, r15w
je 0x1400b5d43
mov rcx, rbx
call fcn.140024f00
mov rax, qword [r14]
lea r9, [rsp + 0x98]
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14004aa88
mov rdi, qword [rsp + 0x98]
movzx eax, word [rdi]
cmp ax, word [rbx + 0x8a]
je 0x1400b5d7e
cmp ax, word [rbx + 0x90]
jne 0x1400b5d8c
add rdi, 2
mov qword [rsp + 0x98], rdi
jmp 0x1400b5d69
movzx eax, word [rbx + 0x88]
cmp word [rdi], ax
jne 0x1400b57cf
mov r12b, byte [rsp + 0x90]
cmp r12b, r15b
jne 0x1400b5db1
mov word [rbx + 0xc8], r15w
lea rcx, [rsp + 0xa0]
call fcn.1400590a4
xor eax, eax
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret