Function at 0x1400a7ee0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x100
mov rax, qword [0x1401c61a8]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov r15, rdx
mov rsi, rcx
mov rax, qword [rdx]
lea rdx, [rsp + 0x30]
mov rcx, r15
call qword [rax + 0x90]
mov r12, qword [rax + 8]
xor ebx, ebx
mov edi, ebx
mov rcx, rsi
call fcn.1400935c0
cmp eax, 0xb
jne 0x1400a807d
mov rcx, rsi
call fcn.1400e09a0
test al, al
je 0x1400a807d
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009dfe0
mov r14, rax
mov rcx, rax
call fcn.1400e4ff0
test al, al
je 0x1400a807d
mov r8, rsi
mov rdx, r15
lea rcx, [rbp - 0x79]
call fcn.14009b170
nop
mov r8, rsi
mov rdx, r15
lea rcx, [rbp - 0x31]
call fcn.14009b170
nop
mov rcx, rsi
call fcn.1400e0a50
mov r15, qword [rax + 0x28]
mov rcx, rsi
call fcn.1400e0a50
mov rsi, qword [rax + 0x28]
mov rax, qword [r14]
lea rdx, [rbp - 0x79]
mov rcx, r14
call qword [rax + 0x30]
mov rax, qword [r14]
lea rdx, [rbp - 0x31]
mov rcx, r14
call qword [rax + 0x38]
mov rcx, qword [rbp - 0x71]
mov rax, qword [rcx]
lea r8, [rbp - 0x31]
lea rdx, [rbp - 0x79]
call qword [rax + 0x28]
test al, al
jne 0x1400a8035
lea rdx, [rbp - 0x69]
mov rcx, r15
call fcn.1400abac0
lea rbx, [rax + 2]
lea rdx, [rbp - 0x41]
lea rcx, [rsi + 0x98]
call fcn.1400abd60
add rbx, rax
mov ecx, ebx
or ecx, 1
bsr edx, ecx
lea edx, [rdx + rdx*8]
add edx, 0x49
shr rdx, 6
add rdx, rbx
add rdi, rdx
mov rcx, qword [rbp - 0x71]
mov rax, qword [rcx]
lea rdx, [rbp - 0x79]
call qword [rax + 0x98]
mov rcx, qword [rbp - 0x71]
mov rax, qword [rcx]
lea r8, [rbp - 0x31]
lea rdx, [rbp - 0x79]
call qword [rax + 0x28]
test al, al
je 0x1400a7fd3
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
lea rdx, [rbp - 0x31]
call qword [rax + 0x88]
cmp dword [rbp - 1], 9
jne 0x1400a8056
lea rcx, [rbp - 0x21]
call fcn.140005ba0
nop
mov rcx, qword [rbp - 0x71]
mov r8, qword [rcx]
lea rdx, [rbp - 0x79]
call qword [r8 + 0x88]
cmp dword [rbp - 0x49], 9
jne 0x1400a8078
lea rcx, [rbp - 0x69]
call fcn.140005ba0
nop
jmp case.default.0x1400a80f1
cmp dword [rsi + 0x3c], 3
jne 0x1400a8096
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009d260
mov r14d, eax
jmp 0x1400a80cb
mov rax, qword [rsi + 0x50]
mov rcx, qword [rax + 0x20]
cmp byte [rcx + 0x4b], bl
je 0x1400a80ab
mov r14d, 1
jmp 0x1400a80cb
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009f600
mov rcx, rbx
mov r14d, 1
test al, al
cmovne rcx, r14
mov r14, rcx
mov rcx, rsi
call fcn.1400935c0
dec eax
cmp eax, 0x11
ja case.default.0x1400a80f1
cdqe
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0xa85c4]
add rcx, rdx
jmp rcx
cmp dword [rsi + 0x3c], 3
jne 0x1400a813e
test r14, r14
je case.default.0x1400a80f1
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009e840
test eax, eax
jns 0x1400a811e
mov eax, 0xa
jmp 0x1400a812e
or eax, 1
bsr eax, eax
lea eax, [rax + rax*8]
add eax, 0x49
shr rax, 6
add rdi, rax
inc rbx
cmp rbx, r14
jb 0x1400a8102
jmp case.default.0x1400a80f1
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009dda0
test eax, eax
jns 0x1400a815a
mov edi, 0xa
jmp case.default.0x1400a80f1
or eax, 1
bsr eax, eax
jmp 0x1400a822a
cmp dword [rsi + 0x3c], 3
jne 0x1400a81a7
test r14, r14
je case.default.0x1400a80f1
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009e910
or rax, 1
bsr rcx, rax
lea ecx, [rcx + rcx*8]
add ecx, 0x49
shr rcx, 6
add rdi, rcx
inc rbx
cmp rbx, r14
jb 0x1400a8174
jmp case.default.0x1400a80f1
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009dec0
or rax, 1
bsr rcx, rax
lea edi, [rcx*8 + 0x49]
add edi, ecx
jmp 0x1400a8233
cmp dword [rsi + 0x3c], 3
jne 0x1400a820d
test r14, r14
je case.default.0x1400a80f1
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009e840
mov ecx, eax
sar ecx, 0x1f
add eax, eax
xor ecx, eax
or ecx, 1
bsr eax, ecx
lea ecx, [rax*8 + 0x49]
add ecx, eax
shr rcx, 6
add rdi, rcx
inc rbx
cmp rbx, r14
jb 0x1400a81d3
jmp case.default.0x1400a80f1
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009dda0
mov ecx, eax
sar ecx, 0x1f
add eax, eax
xor ecx, eax
or ecx, 1
bsr eax, ecx
lea edi, [rax*8 + 0x49]
add edi, eax
shr rdi, 6
mov rax, rdi
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140158360
mov rbx, qword [rsp + 0x150]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp dword [rsi + 0x3c], 3
jne 0x1400a82b0
test r14, r14
je case.default.0x1400a80f1
nop dword [rax]
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009e910
mov rcx, rax
sar rcx, 0x3f
add rax, rax
xor rcx, rax
or rcx, 1
bsr rax, rcx
lea ecx, [rax*8 + 0x49]
add ecx, eax
shr rcx, 6
add rdi, rcx
inc rbx
cmp rbx, r14
jb 0x1400a8270
jmp case.default.0x1400a80f1
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009dec0
mov rcx, rax
sar rcx, 0x3f
add rax, rax
xor rcx, rax
or rcx, 1
bsr rax, rcx
jmp 0x1400a822a
cmp dword [rsi + 0x3c], 3
jne 0x1400a8321
test r14, r14
je case.default.0x1400a80f1
nop word [rax + rax]
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009eca0
or eax, 1
bsr ecx, eax
lea ecx, [rcx + rcx*8]
add ecx, 0x49
shr rcx, 6
add rdi, rcx
inc rbx
cmp rbx, r14
jb 0x1400a82f0
jmp case.default.0x1400a80f1
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009f090
or eax, 1
bsr ecx, eax
lea edi, [rcx*8 + 0x49]
add edi, ecx
jmp 0x1400a8233
cmp dword [rsi + 0x3c], 3
jne 0x1400a8385
test r14, r14
je case.default.0x1400a80f1
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009ed70
or rax, 1
bsr rcx, rax
lea ecx, [rcx + rcx*8]
add ecx, 0x49
shr rcx, 6
add rdi, rcx
inc rbx
cmp rbx, r14
jb 0x1400a8352
jmp case.default.0x1400a80f1
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009f1b0
jmp 0x1400a81b5
lea rdi, [r14*4]
jmp case.default.0x1400a80f1
lea rdi, [r14*8]
jmp case.default.0x1400a80f1
mov rdi, r14
jmp case.default.0x1400a80f1
cmp dword [rsi + 0x3c], 3
jne 0x1400a83fa
test r14, r14
je case.default.0x1400a80f1
nop dword [rax]
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009e9e0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
add rdi, rax
inc rbx
cmp rbx, r14
jb 0x1400a83d0
jmp case.default.0x1400a80f1
xor r9d, r9d
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009e050
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rdi, rax
jmp case.default.0x1400a80f1
cmp dword [rsi + 0x3c], 3
jne 0x1400a846f
test r14, r14
je case.default.0x1400a80f1
nop dword [rax + rax]
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009e9e0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov ecx, eax
or ecx, 1
bsr edx, ecx
lea edx, [rdx + rdx*8]
add edx, 0x49
shr rdx, 6
add rdx, rax
add rdi, rdx
inc rbx
cmp rbx, r14
jb 0x1400a8430
jmp case.default.0x1400a80f1
xor r9d, r9d
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009e050
mov rcx, rax
call fcn.1400a37a0
mov rdi, rax
jmp case.default.0x1400a80f1
cmp dword [rsi + 0x3c], 3
jne 0x1400a84df
test r14, r14
je case.default.0x1400a80f1
nop
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009e5c0
mov ecx, dword [rax + 0x10]
test ecx, ecx
jns 0x1400a84bf
mov eax, 0xa
jmp 0x1400a84cf
or ecx, 1
bsr eax, ecx
lea eax, [rax + rax*8]
add eax, 0x49
shr rax, 6
add rdi, rax
inc rbx
cmp rbx, r14
jb 0x1400a84a0
jmp case.default.0x1400a80f1
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.14009d7e0
mov ecx, dword [rax + 0x10]
test ecx, ecx
js 0x1400a8150
jmp 0x1400a8224
mov r13, rbx
test r14, r14
je case.default.0x1400a80f1
nop dword [rax]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov r8, rsi
mov rdx, r15
mov rcx, r12
cmp dword [rsi + 0x3c], 3
jne 0x1400a854b
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, r13d
call fcn.14009ebd0
jmp 0x1400a8555
lea r9, [rsp + 0x40]
call fcn.14009ef70
mov rdx, qword [rax + 0x10]
mov eax, edx
or eax, 1
bsr ecx, eax
lea ecx, [rcx + rcx*8]
add ecx, 0x49
shr rcx, 6
add rcx, rdx
add rdi, rcx
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400a85aa
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a85a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a85bb
call fcn.1401582c0
inc r13
cmp r13, r14
jae case.default.0x1400a80f1
jmp 0x1400a8510
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3