Function at 0x140076aa0
Capabilities:
Encode data using xor

Disassembly:
test rcx, rcx
je 0x140076e88
push r15
push r14
push r13
push r12
mov r12, rcx
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x48
mov rbx, qword [0x1403f59f8]
test rbx, rbx
je 0x140076e19
lea rdi, [rcx + 8]
mov rcx, rdi
call sub.msvcrt.dll_strlen
mov r9, rdi
mov r8, rax
mov esi, eax
cmp eax, 0xb
jbe 0x140076ebc
mov r10d, eax
mov r13d, 0x9e3779b9
mov r11d, 0x9e3779b9
mov ecx, 0xfeedbeef
nop dword [rax]
movzx edx, byte [r9 + 5]
movzx eax, byte [r9 + 6]
movzx ebp, byte [r9 + 0xa]
shl eax, 0x10
shl edx, 8
add edx, eax
movzx eax, byte [r9 + 4]
shl ebp, 0x10
add edx, eax
movzx eax, byte [r9 + 7]
shl eax, 0x18
add edx, eax
movzx eax, byte [r9 + 9]
add edx, r13d
shl eax, 8
add eax, ebp
movzx ebp, byte [r9 + 8]
add eax, ebp
movzx ebp, byte [r9 + 0xb]
shl ebp, 0x18
add eax, ebp
movzx ebp, byte [r9 + 2]
add eax, ecx
movzx ecx, byte [r9 + 1]
shl ebp, 0x10
shl ecx, 8
add ecx, ebp
movzx ebp, byte [r9]
add ecx, ebp
movzx ebp, byte [r9 + 3]
shl ebp, 0x18
add ecx, ebp
sub ecx, edx
sub edx, eax
sub ecx, eax
add ecx, r11d
mov r11d, eax
shr r11d, 0xd
xor ecx, r11d
sub edx, ecx
sub eax, ecx
mov r11d, edx
mov edx, ecx
shl edx, 8
xor edx, r11d
sub eax, edx
mov r11d, eax
mov eax, edx
shr eax, 0xd
xor eax, r11d
sub ecx, edx
sub r10d, 0xc
add r9, 0xc
sub ecx, eax
sub edx, eax
mov r11d, ecx
mov ecx, eax
shr ecx, 0xc
xor ecx, r11d
sub edx, ecx
sub eax, ecx
mov r11d, edx
mov edx, ecx
shl edx, 0x10
xor edx, r11d
sub eax, edx
sub ecx, edx
mov r11d, eax
mov eax, edx
shr eax, 5
xor eax, r11d
mov r11d, eax
sub ecx, eax
sub edx, eax
shr r11d, 3
xor r11d, ecx
mov r13d, r11d
sub edx, r11d
sub eax, r11d
shl r13d, 0xa
xor r13d, edx
mov ecx, r13d
sub eax, r13d
shr ecx, 0xf
xor ecx, eax
cmp r10d, 0xb
ja 0x140076b00
add ecx, r8d
cmp r10d, 0xb
ja case.0x140076c1d.0
lea rdx, [0x1402cb9f4]
movsxd rax, dword [rdx + r10*4]
add rax, rdx
jmp rax
movzx eax, byte [r9 + 0xa]
shl eax, 0x18
add ecx, eax
movzx eax, byte [r9 + 9]
shl eax, 0x10
add ecx, eax
movzx eax, byte [r9 + 8]
shl eax, 8
add ecx, eax
movzx eax, byte [r9 + 7]
shl eax, 0x18
add r13d, eax
movzx eax, byte [r9 + 6]
shl eax, 0x10
add r13d, eax
movzx eax, byte [r9 + 5]
shl eax, 8
add r13d, eax
movzx eax, byte [r9 + 4]
add r13d, eax
movzx eax, byte [r9 + 3]
shl eax, 0x18
add r11d, eax
movzx eax, byte [r9 + 2]
shl eax, 0x10
add r11d, eax
movzx eax, byte [r9 + 1]
shl eax, 8
add r11d, eax
movzx eax, byte [r9]
add r11d, eax
lea eax, [rcx + r13]
mov edx, ecx
sub r13d, ecx
mov r14, qword [rbx + 0x30]
sub r11d, eax
shr edx, 0xd
xor edx, r11d
mov eax, edx
sub r13d, edx
sub ecx, edx
shl eax, 8
xor eax, r13d
sub ecx, eax
sub edx, eax
mov r9d, ecx
mov ecx, eax
shr ecx, 0xd
xor ecx, r9d
mov r9d, ecx
sub edx, ecx
sub eax, ecx
shr r9d, 0xc
xor r9d, edx
mov edx, r9d
sub eax, r9d
sub ecx, r9d
shl edx, 0x10
xor edx, eax
mov eax, edx
sub ecx, edx
sub r9d, edx
shr eax, 5
xor eax, ecx
mov ecx, eax
sub r9d, eax
sub edx, eax
shr ecx, 3
xor ecx, r9d
mov r15d, ecx
sub edx, ecx
sub eax, ecx
shl r15d, 0xa
xor r15d, edx
mov rdx, qword [r14]
sub eax, r15d
shr r15d, 0xf
xor r15d, eax
mov eax, dword [r14 + 8]
mov qword [rsp + 0x38], rdx
sub eax, 1
and eax, r15d
shl rax, 4
mov r13, qword [rdx + rax]
test r13, r13
je 0x140076e19
mov rax, qword [r14 + 0x20]
mov r8d, r8d
mov rbp, rax
mov qword [rsp + 0x30], rax
sub r13, rax
neg rbp
jmp 0x140076d60
mov r13, qword [r13 + 0x50]
test r13, r13
je 0x140076e19
add r13, rbp
cmp dword [r13 + 0x64], r15d
jne 0x140076d50
cmp dword [r13 + 0x60], esi
jne 0x140076d50
mov rcx, qword [r13 + 0x58]
mov rdx, rdi
mov qword [rsp + 0x28], r8
call sub.msvcrt.dll_memcmp
mov r8, qword [rsp + 0x28]
test eax, eax
jne 0x140076d50
mov rdx, qword [r13 + 0x38]
lea rcx, [r13 + 0x30]
test rdx, rdx
je 0x140076e90
cmp qword [r14 + 0x18], rcx
je 0x140076e60
mov rax, qword [r13 + 0x40]
mov rdi, qword [rsp + 0x30]
mov qword [rdx + rdi + 0x10], rax
test rax, rax
je 0x140076dc5
mov rdx, qword [rbx + 0x30]
mov r8, qword [r13 + 0x38]
mov rdx, qword [rdx + 0x20]
mov qword [rax + rdx + 8], r8
mov rdx, qword [rbx + 0x30]
mov eax, dword [rdx + 8]
sub eax, 1
and eax, dword [r13 + 0x64]
shl rax, 4
add rax, qword [rdx]
sub dword [rax + 8], 1
cmp qword [rax], rcx
je 0x140076eb0
mov rax, qword [r13 + 0x48]
test rax, rax
je 0x140076df8
mov rdx, qword [r13 + 0x50]
mov qword [rax + 0x20], rdx
mov rax, qword [r13 + 0x50]
test rax, rax
je 0x140076e09
mov rdx, qword [r13 + 0x48]
mov qword [rax + 0x18], rdx
mov rax, qword [rbx + 0x30]
sub dword [rax + 0x10], 1
mov rcx, r13
call sub.msvcrt.dll_free
mov rcx, qword [r12]
test rcx, rcx
je 0x140076e27
call fcn.1400cdff0
mov rcx, qword [r12 + 0x38]
test rcx, rcx
je 0x140076e36
call fcn.140075020
mov rcx, qword [r12 + 0x30]
test rcx, rcx
je 0x140076e45
call sub.msvcrt.dll_free
add rsp, 0x48
mov rcx, r12
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp sub.msvcrt.dll_free
add rdx, qword [rsp + 0x30]
mov qword [r14 + 0x18], rdx
mov rdx, qword [r13 + 0x38]
test rdx, rdx
je 0x140076ed5
mov rax, qword [rbx + 0x30]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x30], rax
jmp 0x140076da1
ret
mov rax, qword [r13 + 0x40]
test rax, rax
je 0x140076edb
cmp qword [r14 + 0x18], rcx
je 0x140076e60
mov qword [0x1403f59f8], rax
mov rbx, rax
jmp 0x140076daf
mov rdx, qword [r13 + 0x50]
mov qword [rax], rdx
jmp 0x140076de7
mov r10d, eax
mov r13d, 0x9e3779b9
mov r11d, 0x9e3779b9
mov ecx, 0xfeedbeef
jmp 0x140076c06
mov rax, qword [r13 + 0x40]
jmp 0x140076e9f
mov rcx, qword [rsp + 0x38]
call sub.msvcrt.dll_free
mov rcx, qword [rbx + 0x30]
call sub.msvcrt.dll_free
mov qword [0x1403f59f8], 0
jmp 0x140076e11