Function at 0x14000a410
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xa0
mov rbx, rcx
lea rcx, [rbp + 0x6f]
call fcn.14000a138
mov rdx, rax
mov rcx, rbx
call fcn.140001970
lea rdx, str.___:___
mov rcx, rbx
call fcn.140001970
xor r12d, r12d
lea r9, [rbp - 0x31]
xor r8d, r8d
mov qword [rbp - 0x31], r12
xor edx, edx
xor ecx, ecx
call sub.WinSCard.dll_SCardEstablishContext
mov edi, eax
test eax, eax
jne 0x14000a9ae
mov rcx, qword [rbp - 0x31]
lea r9, [rbp + 0x77]
or dword [rbp + 0x77], 0xffffffff
lea r8, [rbp - 0x21]
xor edx, edx
mov qword [rbp - 0x21], r12
call sub.WinSCard.dll_SCardListReadersW
lea esi, [r12 + 0x13]
mov edi, eax
lea rcx, [rbp + 0x6f]
test eax, eax
jne 0x14000a81d
call fcn.140009f60
mov rdx, rax
mov rcx, rbx
call fcn.140001970
mov r14, qword [rbp - 0x21]
mov r15d, r12d
jmp 0x14000a802
test r15d, r15d
je 0x14000a4cc
lea rdx, [0x140014430]
mov rcx, rbx
call fcn.140001970
lea rdx, [0x140014424]
mov rcx, rbx
call fcn.140001970
lea rdx, str._name_:__
mov rcx, rbx
call fcn.140001970
mov rdx, r14
mov rcx, rbx
call fcn.1400019c4
lea rdx, [0x140014698]
mov rcx, rbx
call fcn.140001970
xor edx, edx
lea rcx, [rbp - 0x19]
lea r8d, [rdx + 0x40]
call fcn.140002420
mov rcx, qword [rbp - 0x31]
lea r8, [rbp - 0x19]
mov r9d, 1
mov qword [rbp - 0x19], r14
xor edx, edx
call sub.WinSCard.dll_SCardGetStatusChangeW
mov edi, eax
test eax, eax
jne 0x14000a7ad
mov r8d, dword [rbp - 5]
lea rdx, str.__state_:__d
mov rcx, rbx
call fcn.140001a50
lea ecx, [rdi + 0x14]
mov dword [rbp - 0x49], 0x31003f
mov dword [rbp - 0x45], 0x470052
mov dword [rbp - 0x41], 0x310041
mov dword [rbp - 0x3d], 0x330029
mov dword [rbp - 0x39], 0x130031
call fcn.14000257c
lea r9, [rbp - 0x49]
mov rdx, rax
sub r9, rax
lea r8d, [rdi + 0xa]
movzx ecx, word [r9 + rdx]
xor cx, si
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x14000a582
mov rdx, rax
mov rcx, rbx
call fcn.140001970
mov esi, r12d
cmp dword [rbp - 1], r12d
jbe 0x14000a5cc
lea rdi, [rbp + 3]
movzx r8d, byte [rdi]
lea rdx, str._02X
mov rcx, rbx
call fcn.140001a50
inc esi
inc rdi
cmp esi, dword [rbp - 1]
jb 0x14000a5af
lea rdx, [0x140014698]
mov rcx, rbx
call fcn.140001970
cmp dword [rbp - 1], r12d
je 0x14000a737
mov rcx, qword [rbp - 0x31]
lea rax, [rbp + 0x7f]
or dword [rbp + 0x7f], 0xffffffff
lea rdx, [rbp + 3]
mov qword [rsp + 0x28], rax
xor r9d, r9d
lea rax, [rbp - 0x29]
mov qword [rbp - 0x29], r12
xor r8d, r8d
mov qword [rsp + 0x20], rax
call sub.WinSCard.dll_SCardListCardsW
mov edi, eax
test eax, eax
jne 0x14000a700
lea ecx, [rax + 0x18]
mov dword [rbp - 0x49], 0x31003f
mov dword [rbp - 0x45], 0x720070
lea edi, [rax + 0x13]
mov dword [rbp - 0x41], 0x770061
mov dword [rbp - 0x3d], 0x310060
mov dword [rbp - 0x39], 0x330029
mov dword [rbp - 0x35], 0x130048
call fcn.14000257c
lea r9, [rbp - 0x49]
mov rdx, rax
sub r9, rax
lea r8d, [rdi - 7]
movzx ecx, word [r9 + rdx]
xor cx, di
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x14000a65f
mov rdx, rax
mov rcx, rbx
call fcn.140001970
mov rdi, qword [rbp - 0x29]
mov esi, r12d
jmp 0x14000a6d4
test esi, esi
je 0x14000a69b
lea rdx, [0x140014430]
mov rcx, rbx
call fcn.140001970
lea rdx, [0x140014698]
mov rcx, rbx
call fcn.140001970
mov rdx, rdi
mov rcx, rbx
call fcn.1400019c4
lea rdx, [0x140014698]
mov rcx, rbx
call fcn.140001970
mov rcx, rdi
call fcn.140007a2c
inc eax
inc esi
lea rdi, [rdi + rax*2]
cmp word [rdi], r12w
jne 0x14000a688
lea rdx, [0x1400146b0]
mov rcx, rbx
call fcn.140001970
mov rdx, qword [rbp - 0x29]
mov rcx, qword [rbp - 0x31]
call sub.WinSCard.dll_SCardFreeMemory
mov esi, SafeArrayUnaccessData
jmp 0x14000a7e2
lea rcx, [rbp + 0x6f]
call fcn.14000a088
mov rdx, rax
mov rcx, rbx
call fcn.140001970
lea rdx, str.__error_:
mov rcx, rbx
call fcn.140001970
mov r8d, edi
lea rdx, [0x140014de0]
mov rcx, rbx
call fcn.140001a50
jmp 0x14000a6f6
mov esi, SafeArrayUnaccessData
mov dword [rbp - 0x49], 0x31003f
mov dword [rbp - 0x45], 0x720070
mov dword [rbp - 0x41], 0x770061
mov dword [rbp - 0x3d], 0x310060
lea ecx, [rsi + 5]
mov dword [rbp - 0x39], 0x330029
mov dword [rbp - 0x35], 0x130048
call fcn.14000257c
lea r9, [rbp - 0x49]
mov rdx, rax
sub r9, rax
lea r8d, [rsi - 7]
movzx ecx, word [r9 + rdx]
xor cx, si
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x14000a77c
mov rdx, rax
mov rcx, rbx
call fcn.140001970
lea rdx, [0x1400146b0]
mov rcx, rbx
call fcn.140001970
jmp 0x14000a7e2
lea rcx, [rbp + 0x6f]
call fcn.14000a288
mov rdx, rax
mov rcx, rbx
call fcn.140001970
lea rdx, str.__error_:
mov rcx, rbx
call fcn.140001970
mov r8d, edi
lea rdx, [0x140014de0]
mov rcx, rbx
call fcn.140001a50
lea rdx, [0x140014434]
mov rcx, rbx
call fcn.140001970
mov rcx, r14
call fcn.140007a2c
inc eax
inc r15d
lea r14, [r14 + rax*2]
cmp word [r14], r12w
jne 0x14000a4b8
lea rdx, [0x1400146b0]
mov rcx, rbx
call fcn.140001970
jmp 0x14000a84e
call fcn.14000a358
mov rdx, rax
mov rcx, rbx
call fcn.140001970
lea rdx, str.__error_:
mov rcx, rbx
call fcn.140001970
mov r8d, edi
lea rdx, [0x140014de0]
mov rcx, rbx
call fcn.140001a50
lea rdx, str.__introduced_:
mov rcx, rbx
call fcn.140001970
mov rcx, qword [rbp - 0x31]
lea rax, [rbp + 0x7f]
or dword [rbp + 0x7f], 0xffffffff
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
lea rax, [rbp - 0x29]
mov qword [rbp - 0x29], r12
xor edx, edx
mov qword [rsp + 0x20], rax
call sub.WinSCard.dll_SCardListCardsW
mov edi, eax
test eax, eax
jne 0x14000a968
lea ecx, [rax + 0x16]
mov dword [rbp - 0x49], 0x700031
mov dword [rbp - 0x45], 0x610072
mov dword [rbp - 0x41], 0x600077
mov dword [rbp - 0x3d], 0x290031
mov dword [rbp - 0x39], 0x480033
mov word [rbp - 0x35], si
call fcn.14000257c
lea r9, [rbp - 0x49]
mov rdx, rax
sub r9, rax
lea r8d, [rdi + 0xb]
movzx ecx, word [r9 + rdx]
xor cx, si
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x14000a8cf
mov rdx, rax
mov rcx, rbx
call fcn.140001970
mov rdi, qword [rbp - 0x29]
mov esi, r12d
jmp 0x14000a944
test esi, esi
je 0x14000a90b
lea rdx, [0x140014430]
mov rcx, rbx
call fcn.140001970
lea rdx, [0x140014698]
mov rcx, rbx
call fcn.140001970
mov rdx, rdi
mov rcx, rbx
call fcn.1400019c4
lea rdx, [0x140014698]
mov rcx, rbx
call fcn.140001970
mov rcx, rdi
call fcn.140007a2c
inc eax
inc esi
lea rdi, [rdi + rax*2]
cmp word [rdi], r12w
jne 0x14000a8f8
lea rdx, [0x1400146b0]
mov rcx, rbx
call fcn.140001970
mov rdx, qword [rbp - 0x29]
mov rcx, qword [rbp - 0x31]
call sub.WinSCard.dll_SCardFreeMemory
jmp 0x14000a99d
lea rcx, [rbp + 0x6f]
call fcn.140009fdc
mov rdx, rax
mov rcx, rbx
call fcn.140001970
lea rdx, str.__error_:
mov rcx, rbx
call fcn.140001970
mov r8d, edi
lea rdx, [0x140014de0]
mov rcx, rbx
call fcn.140001a50
lea rdx, [0x140014434]
mov rcx, rbx
call fcn.140001970
jmp 0x14000a9e3
lea rcx, [rbp + 0x6f]
call fcn.14000a1b8
mov rdx, rax
mov rcx, rbx
call fcn.140001970
lea rdx, str.__error_:
mov rcx, rbx
call fcn.140001970
mov r8d, edi
lea rdx, [0x140014de0]
mov rcx, rbx
call fcn.140001a50
lea rdx, [0x140014434]
mov rcx, rbx
call fcn.140001970
add rsp, 0xa0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret