Function at 0x1400fa270
Capabilities:
Encode data using xor

Disassembly:
push rbp
mov rbp, rsp
push r13
push r12
push rdi
push rsi
push rbx
and rsp, 0xfffffffffffffff0
sub rsp, 0x30
test rcx, rcx
je 0x1400fa844
mov rdi, rdx
test rdx, rdx
je 0x1400fa810
mov rbx, rcx
mov edx, 0x88
mov ecx, 1
call sub.msvcrt.dll_calloc
mov rsi, rax
test rax, rax
je 0x1400fa878
mov r8d, 0x3f
mov rdx, rbx
mov rcx, rax
call sub.msvcrt.dll_strncpy
movdqu xmm1, xmmword [rdi]
mov rcx, rsi
movups xmmword [rsi + 0x40], xmm1
call sub.msvcrt.dll_strlen
mov r8, rsi
mov r10, rax
cmp eax, 0xb
jbe 0x1400fa7f8
mov r9d, eax
mov edi, 0x9e3779b9
mov r11d, 0x9e3779b9
mov ecx, 0xfeedbeef
nop dword [rax]
movzx edx, byte [r8 + 5]
movzx eax, byte [r8 + 6]
shl edx, 8
shl eax, 0x10
add edx, eax
movzx eax, byte [r8 + 4]
add edx, eax
movzx eax, byte [r8 + 7]
shl eax, 0x18
add edx, eax
movzx eax, byte [r8 + 9]
add edx, edi
movzx edi, byte [r8 + 0xa]
shl eax, 8
shl edi, 0x10
add eax, edi
movzx edi, byte [r8 + 8]
add eax, edi
movzx edi, byte [r8 + 0xb]
shl edi, 0x18
add eax, edi
movzx edi, byte [r8 + 2]
add eax, ecx
movzx ecx, byte [r8 + 1]
shl edi, 0x10
shl ecx, 8
add ecx, edi
movzx edi, byte [r8]
add ecx, edi
movzx edi, byte [r8 + 3]
shl edi, 0x18
add ecx, edi
sub ecx, edx
sub edx, eax
sub ecx, eax
add ecx, r11d
mov r11d, eax
shr r11d, 0xd
xor ecx, r11d
sub edx, ecx
sub eax, ecx
mov r11d, edx
mov edx, ecx
shl edx, 8
xor edx, r11d
sub eax, edx
mov r11d, eax
mov eax, edx
shr eax, 0xd
xor eax, r11d
sub ecx, edx
sub r9d, 0xc
add r8, 0xc
sub ecx, eax
sub edx, eax
mov r11d, ecx
mov ecx, eax
shr ecx, 0xc
xor ecx, r11d
sub edx, ecx
sub eax, ecx
mov r11d, edx
mov edx, ecx
shl edx, 0x10
xor edx, r11d
sub eax, edx
sub ecx, edx
mov r11d, eax
mov eax, edx
shr eax, 5
xor eax, r11d
mov r11d, eax
sub ecx, eax
sub edx, eax
shr r11d, 3
xor r11d, ecx
mov edi, r11d
sub edx, r11d
sub eax, r11d
shl edi, 0xa
xor edi, edx
mov ecx, edi
sub eax, edi
shr ecx, 0xf
xor ecx, eax
cmp r9d, 0xb
ja 0x1400fa300
add ecx, r10d
cmp r9d, 0xb
ja case.0x1400fa418.0
lea rdx, [0x140277f1c]
movsxd rax, dword [rdx + r9*4]
add rax, rdx
jmp rax
movzx eax, byte [r8 + 0xa]
shl eax, 0x18
add ecx, eax
movzx eax, byte [r8 + 9]
shl eax, 0x10
add ecx, eax
movzx eax, byte [r8 + 8]
shl eax, 8
add ecx, eax
movzx eax, byte [r8 + 7]
shl eax, 0x18
add edi, eax
movzx eax, byte [r8 + 6]
shl eax, 0x10
add edi, eax
movzx eax, byte [r8 + 5]
shl eax, 8
add edi, eax
movzx eax, byte [r8 + 4]
add edi, eax
movzx eax, byte [r8 + 3]
shl eax, 0x18
add r11d, eax
movzx eax, byte [r8 + 2]
shl eax, 0x10
add r11d, eax
movzx eax, byte [r8 + 1]
shl eax, 8
add r11d, eax
movzx eax, byte [r8]
add r11d, eax
lea eax, [rcx + rdi]
mov r8d, ecx
sub edi, ecx
mov qword [rsi + 0x78], rsi
sub r11d, eax
shr r8d, 0xd
movd xmm0, r10d
xor r8d, r11d
mov edx, r8d
sub edi, r8d
sub ecx, r8d
shl edx, 8
xor edx, edi
mov eax, edx
sub ecx, edx
sub r8d, edx
shr eax, 0xd
xor eax, ecx
mov ecx, eax
sub r8d, eax
sub edx, eax
shr ecx, 0xc
xor ecx, r8d
sub edx, ecx
sub eax, ecx
mov r8d, edx
mov edx, ecx
shl edx, 0x10
xor edx, r8d
sub eax, edx
sub ecx, edx
mov r8d, eax
mov eax, edx
shr eax, 5
xor eax, r8d
mov r8d, eax
sub ecx, eax
sub edx, eax
shr r8d, 3
xor ecx, r8d
mov edi, ecx
sub edx, ecx
sub eax, ecx
shl edi, 0xa
xor edi, edx
sub eax, edi
shr edi, 0xf
xor edi, eax
mov rax, qword [0x1403eb048]
movd xmm2, edi
punpckldq xmm0, xmm2
movq qword [rsi + 0x80], xmm0
test rax, rax
je 0x1400fa760
mov rdx, qword [rax + 0x50]
mov qword [rsi + 0x60], 0
lea r13, [rsi + 0x50]
mov qword [rsi + 0x50], rdx
mov rcx, qword [rax + 0x50]
mov rdx, qword [rcx + 0x18]
sub rdx, qword [rcx + 0x20]
mov qword [rsi + 0x58], rdx
mov rdx, qword [rax + 0x50]
mov rdx, qword [rdx + 0x18]
mov qword [rdx + 0x10], rsi
mov rdx, qword [rax + 0x50]
mov qword [rdx + 0x18], r13
mov r12, qword [rax + 0x50]
mov edx, dword [r12 + 0x10]
add edx, 1
mov dword [r12 + 0x10], edx
mov rdx, qword [rax + 0x50]
mov eax, dword [rdx + 8]
sub eax, 1
and eax, edi
shl rax, 4
add rax, qword [rdx]
mov rdx, qword [rax]
add dword [rax + 8], 1
mov qword [rsi + 0x68], 0
mov qword [rsi + 0x70], rdx
mov rdx, qword [rax]
test rdx, rdx
je 0x1400fa5a0
mov qword [rdx + 0x18], r13
mov edx, dword [rax + 0xc]
mov qword [rax], r13
lea edx, [rdx + rdx*4 + 5]
add edx, edx
cmp dword [rax + 8], edx
jb 0x1400fa5bd
mov r13, qword [rsi + 0x50]
mov edi, dword [r13 + 0x34]
test edi, edi
je 0x1400fa5f8
lea rax, str.Plugin_type___s__added
mov qword [rsp + 0x28], rbx
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov r9d, 2
lea r8, str.dap_plugin
call fcn.14005a150
xor eax, eax
lea rsp, [rbp - 0x28]
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop rbp
ret
mov ecx, dword [r13 + 8]
mov edx, 1
shl rcx, 5
call sub.msvcrt.dll_calloc
mov r12, rax
test rax, rax
je 0x1400fa8ac
mov edx, dword [r13 + 8]
mov eax, dword [r13 + 0x10]
mov ecx, dword [r13 + 0xc]
lea edx, [rdx + rdx - 1]
test edx, eax
setne dl
add ecx, 1
shr eax, cl
movzx edx, dl
add edx, eax
mov dword [r13 + 0x28], edx
mov rax, qword [rsi + 0x50]
mov dword [rax + 0x2c], 0
mov r8, qword [rsi + 0x50]
mov eax, dword [r8 + 8]
test eax, eax
je 0x1400fa709
xor r10d, r10d
nop word [rax + rax]
mov edx, r10d
shl rdx, 4
add rdx, qword [r8]
mov rdx, qword [rdx]
test rdx, rdx
jne 0x1400fa697
jmp 0x1400fa6fc
mov qword [rcx + 0x18], rdx
mov r8, qword [rsi + 0x50]
mov qword [rax], rdx
test r9, r9
je 0x1400fa6f8
mov eax, dword [r8 + 8]
mov rdx, r9
lea eax, [rax + rax - 1]
and eax, dword [rdx + 0x34]
mov r9, qword [rdx + 0x20]
shl rax, 4
add rax, r12
mov ecx, dword [rax + 8]
add ecx, 1
mov dword [rax + 8], ecx
cmp ecx, dword [r8 + 0x28]
jbe 0x1400fa6d8
add dword [r8 + 0x2c], 1
mov r8, qword [rsi + 0x50]
mov ecx, dword [rax + 0xc]
mov r11d, dword [r8 + 0x28]
imul r11d, ecx
cmp dword [rax + 8], r11d
jbe 0x1400fa6d8
add ecx, 1
mov dword [rax + 0xc], ecx
mov qword [rdx + 0x18], 0
mov rcx, qword [rax]
mov qword [rdx + 0x20], rcx
test rcx, rcx
jne 0x1400fa680
mov qword [rax], rdx
mov r8, qword [rsi + 0x50]
test r9, r9
jne 0x1400fa690
mov eax, dword [r8 + 8]
add r10d, 1
cmp r10d, eax
jb 0x1400fa660
mov rcx, qword [r8]
call sub.msvcrt.dll_free
mov rax, qword [rsi + 0x50]
shl dword [rax + 8], 1
mov rax, qword [rsi + 0x50]
add dword [rax + 0xc], 1
mov rax, qword [rsi + 0x50]
mov qword [rax], r12
mov rax, qword [rsi + 0x50]
mov edx, dword [rax + 0x10]
shr edx, 1
cmp dword [rax + 0x2c], edx
jbe 0x1400fa73b
mov edi, dword [rax + 0x30]
add edi, 1
mov dword [rax + 0x30], edi
mov rax, qword [rsi + 0x50]
cmp dword [rax + 0x30], 1
jbe 0x1400fa5bd
mov dword [rax + 0x34], 1
jmp 0x1400fa5bd
pxor xmm0, xmm0
mov ecx, 0x40
movups xmmword [rsi + 0x58], xmm0
call sub.msvcrt.dll_malloc
mov qword [rsi + 0x50], rax
mov r12, rax
test rax, rax
je 0x1400fa8ac
lea r13, [rsi + 0x50]
mov qword [rax + 0x10], 0
mov edx, 1
mov ecx, 0x200
mov qword [rax + 0x28], 0
mov qword [rax + 0x30], 0
mov qword [rax + 0x38], 0
mov qword [rax + 0x18], r13
mov rax, qword [0x140277fa8]
mov qword [r12 + 0x20], 0x50
mov qword [r12 + 8], rax
call sub.msvcrt.dll_calloc
mov dword [r12 + 0x38], 0xa0111fe1
mov qword [r12], rax
test rax, rax
je 0x1400fa8ac
mov qword [0x1403eb048], rsi
mov rax, rsi
mov edx, 1
jmp 0x1400fa569
mov r9d, eax
mov edi, 0x9e3779b9
mov r11d, 0x9e3779b9
mov ecx, 0xfeedbeef
jmp 0x1400fa401
lea rax, str.Cant_create_plugin_type_without_callbacks_
mov r9d, 8
lea r8, str.dap_plugin
mov edx, 0x87
mov qword [rsp + 0x20], rax
lea rcx, str.dap_plugin_type_create
call fcn.14005a150
mov eax, 0xfffffffe
jmp 0x1400fa5e6
lea rax, str.Cant_create_plugin_type_without_name_
mov r9d, 8
lea r8, str.dap_plugin
mov edx, 0x83
mov qword [rsp + 0x20], rax
lea rcx, str.dap_plugin_type_create
call fcn.14005a150
mov eax, 0xffffffff
jmp 0x1400fa5e6
lea rax, str.OOM_on_new_type_create
mov r9d, 8
lea r8, str.dap_plugin
mov edx, 0x8c
mov qword [rsp + 0x20], rax
lea rcx, str.dap_plugin_type_create
call fcn.14005a150
mov eax, 0xfffffffd
jmp 0x1400fa5e6
or ecx, 0xffffffff
call sub.msvcrt.dll_exit
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push r15
push r14
push r13
push r12
push rbp
push rdi
mov rdi, rcx
push rsi
push rbx
sub rsp, 0x38
call sub.msvcrt.dll_strlen
mov rbx, qword [0x1403eb080]
test rbx, rbx
je 0x1400fac70
mov r8, rax
mov esi, eax
mov r9, rdi
cmp eax, 0xb
jbe 0x1400facd4
mov r10d, eax
mov r12d, 0x9e3779b9
mov r11d, 0x9e3779b9
mov ecx, 0xfeedbeef
nop dword [rax]
movzx edx, byte [r9 + 5]
movzx eax, byte [r9 + 6]
movzx ebp, byte [r9 + 0xa]
shl eax, 0x10
shl edx, 8
add edx, eax
movzx eax, byte [r9 + 4]
shl ebp, 0x10
add edx, eax
movzx eax, byte [r9 + 7]
shl eax, 0x18
add edx, eax
movzx eax, byte [r9 + 9]
add edx, r12d
shl eax, 8
add eax, ebp
movzx ebp, byte [r9 + 8]
add eax, ebp
movzx ebp, byte [r9 + 0xb]
shl ebp, 0x18
add eax, ebp
movzx ebp, byte [r9 + 2]
add eax, ecx
movzx ecx, byte [r9 + 1]
shl ebp, 0x10
shl ecx, 8
add ecx, ebp
movzx ebp, byte [r9]
add ecx, ebp
movzx ebp, byte [r9 + 3]
shl ebp, 0x18
add ecx, ebp
mov ebp, eax
sub ecx, edx
shr ebp, 0xd
sub edx, eax
sub ecx, eax
add ecx, r11d
xor ebp, ecx
mov r12d, ebp
sub edx, ebp
sub eax, ebp
shl r12d, 8
xor r12d, edx
mov r11d, r12d
sub eax, r12d
shr r11d, 0xd
xor r11d, eax
sub ebp, r12d
sub r10d, 0xc
add r9, 0xc
mov ecx, r11d
sub ebp, r11d
sub r12d, r11d
shr ecx, 0xc
xor ecx, ebp
mov edx, ecx
sub r12d, ecx
sub r11d, ecx
shl edx, 0x10
xor edx, r12d
mov eax, edx
sub r11d, edx
sub ecx, edx
shr eax, 5
xor eax, r11d
mov r11d, eax
sub ecx, eax
sub edx, eax
shr r11d, 3
xor r11d, ecx
mov r12d, r11d
sub edx, r11d
sub eax, r11d
shl r12d, 0xa
xor r12d, edx
mov ecx, r12d
sub eax, r12d
shr ecx, 0xf
xor ecx, eax
cmp r10d, 0xb
ja 0x1400fa910
add ecx, r8d
cmp r10d, 0xb
ja case.0x1400faa26.0
lea rdx, [0x1402786c4]
movsxd rax, dword [rdx + r10*4]
add rax, rdx
jmp rax
movzx eax, byte [r9 + 0xa]
shl eax, 0x18
add ecx, eax
movzx eax, byte [r9 + 9]
shl eax, 0x10
add ecx, eax
movzx eax, byte [r9 + 8]
shl eax, 8
add ecx, eax
movzx eax, byte [r9 + 7]
shl eax, 0x18
add r12d, eax
movzx eax, byte [r9 + 6]
shl eax, 0x10
add r12d, eax
movzx eax, byte [r9 + 5]
shl eax, 8
add r12d, eax
movzx eax, byte [r9 + 4]
add r12d, eax
movzx eax, byte [r9 + 3]
shl eax, 0x18
add r11d, eax
movzx eax, byte [r9 + 2]
shl eax, 0x10
add r11d, eax
movzx eax, byte [r9 + 1]
shl eax, 8
add r11d, eax
movzx eax, byte [r9]
add r11d, eax
lea eax, [rcx + r12]
mov edx, ecx
sub r12d, ecx
mov r13, qword [rbx + 0xa0]
sub r11d, eax
shr edx, 0xd
xor edx, r11d
mov eax, edx
sub r12d, edx
sub ecx, edx
shl eax, 8
xor eax, r12d
sub ecx, eax
sub edx, eax
mov r9d, ecx
mov ecx, eax
shr ecx, 0xd
xor ecx, r9d
mov r9d, ecx
sub edx, ecx
sub eax, ecx
shr r9d, 0xc
xor r9d, edx
mov edx, r9d
sub eax, r9d
sub ecx, r9d
shl edx, 0x10
xor edx, eax
mov eax, edx
sub ecx, edx
sub r9d, edx
shr eax, 5
xor eax, ecx
mov ecx, eax
sub r9d, eax
sub edx, eax
shr ecx, 3
xor ecx, r9d
mov r14d, ecx
sub edx, ecx
sub eax, ecx
shl r14d, 0xa
xor r14d, edx
mov rdx, qword [r13]
sub eax, r14d
shr r14d, 0xf
xor r14d, eax
mov eax, dword [r13 + 8]
mov qword [rsp + 0x28], rdx
sub eax, 1
and eax, r14d
shl rax, 4
mov r12, qword [rdx + rax]
xor eax, eax
test r12, r12
je 0x1400fac5e
mov rbp, qword [r13 + 0x20]
mov r8d, r8d
mov r15, rbp
sub r12, rbp
neg r15
jmp 0x1400fab6c
mov r12, qword [r12 + 0xc0]
test r12, r12
je 0x1400fac70
add r12, r15
cmp dword [r12 + 0xd4], r14d
jne 0x1400fab58
cmp dword [r12 + 0xd0], esi
jne 0x1400fab58
mov rcx, qword [r12 + 0xc8]
mov rdx, rdi
mov qword [rsp + 0x20], r8
call sub.msvcrt.dll_memcmp
mov r8, qword [rsp + 0x20]
test eax, eax
jne 0x1400fab58
mov rdx, qword [r12 + 0xa8]
lea rcx, [r12 + 0xa0]
test rdx, rdx
je 0x1400fac78
cmp qword [r13 + 0x18], rcx
je 0x1400facb0
mov rax, qword [r12 + 0xb0]
mov qword [rdx + rbp + 0x10], rax
test rax, rax
je 0x1400fabeb
mov rdx, qword [rbx + 0xa0]
mov r8, qword [r12 + 0xa8]
mov rdx, qword [rdx + 0x20]
mov qword [rax + rdx + 8], r8
mov rdx, qword [rbx + 0xa0]
mov eax, dword [rdx + 8]
sub eax, 1
and eax, dword [r12 + 0xd4]
shl rax, 4
add rax, qword [rdx]
sub dword [rax + 8], 1
cmp qword [rax], rcx
je 0x1400faca0
mov rax, qword [r12 + 0xb8]
test rax, rax
je 0x1400fac2d
mov rdx, qword [r12 + 0xc0]
mov qword [rax + 0x20], rdx
mov rax, qword [r12 + 0xc0]
test rax, rax
je 0x1400fac46
mov rdx, qword [r12 + 0xb8]
mov qword [rax + 0x18], rdx
mov rax, qword [rbx + 0xa0]
sub dword [rax + 0x10], 1
mov rcx, r12
call fcn.1401bb720
mov eax, 1
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
xor eax, eax
jmp 0x1400fac5e
mov rax, qword [r12 + 0xb0]
test rax, rax
je 0x1400facf7
cmp qword [r13 + 0x18], rcx
je 0x1400facb0
mov qword [0x1403eb080], rax
mov rbx, rax
jmp 0x1400fabce
mov rdx, qword [r12 + 0xc0]
mov qword [rax], rdx
jmp 0x1400fac14
add rdx, rbp
mov qword [r13 + 0x18], rdx
mov rdx, qword [r12 + 0xa8]
test rdx, rdx
je 0x1400faced
mov rax, qword [rbx + 0xa0]
mov rbp, qword [rax + 0x20]
jmp 0x1400fabc1
mov r10d, eax
mov r12d, 0x9e3779b9
mov r11d, 0x9e3779b9
mov ecx, 0xfeedbeef
jmp 0x1400faa0f
mov rax, qword [r12 + 0xb0]
jmp 0x1400fac8b
mov rcx, qword [rsp + 0x28]
call sub.msvcrt.dll_free
mov rcx, qword [rbx + 0xa0]
call sub.msvcrt.dll_free
mov qword [0x1403eb080], 0
jmp 0x1400fac51