Function at 0x140024aa0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x58
xor r10d, r10d
mov rsi, rcx
mov qword [rbp + 0x58], r10
mov r15d, r10d
mov dword [0x14004f720], r10d
mov dword [0x14004f724], r10d
test rcx, rcx
jne 0x140024adc
lea ebx, [rcx + 0x57]
jmp 0x140025304
mov rdi, qword [rcx + 0x10]
mov qword [rbp - 0x30], rdi
cmp dword [rdi], 0x66676572
jne 0x1400252ff
mov eax, dword [rdi + 8]
cmp dword [rdi + 4], eax
jne 0x1400252ff
mov r12d, 1
cmp dword [rdi + 0x14], r12d
jne 0x1400252ff
cmp dword [rdi + 0x18], 6
ja 0x1400252ff
cmp dword [rdi + 0x20], r12d
jne 0x1400252ff
mov eax, dword [rdi + 0x28]
add eax, 0x1000
cmp eax, dword [rcx + 0x30]
ja 0x1400252ff
mov eax, r10d
lea edx, [r12 + 0x7e]
mov rcx, rdi
xor eax, dword [rcx]
lea rcx, [rcx + 4]
sub rdx, r12
jne 0x140024b3c
cmp eax, 0xffffffff
mov ecx, 0xfffffffe
cmove eax, ecx
test eax, eax
cmove eax, r12d
cmp dword [rdi + 0x1fc], eax
jne 0x1400252ff
lea rcx, [rdi + 0x1000]
mov rdx, rsi
call fcn.140025a74
mov r11b, al
test al, al
je 0x1400252ff
mov r10d, dword [rcx + 8]
mov ebx, r12d
mov r14d, dword [rdi + 0x28]
mov edx, r10d
add r14, rdi
mov dword [0x14004f720], ebx
xor r8d, r8d
mov dword [0x14004f724], r10d
mov eax, edx
add rcx, rax
cmp rcx, r14
ja 0x140024bc4
mov rdx, rsi
call fcn.140025a74
mov edx, dword [rcx + 8]
add ebx, r12d
add r10d, edx
xor r8d, r8d
mov r11b, al
test al, al
jne 0x140024b9f
mov dword [0x14004f724], r10d
mov dword [0x14004f720], ebx
test r11b, r11b
je 0x1400252ff
mov ecx, dword [rdi + 0x24]
mov rdx, rdi
call fcn.1400256a0
mov rbx, rax
test rax, rax
je 0x1400252ff
cmp dword [rax], r8d
jg 0x1400252ff
xor edx, edx
mov rcx, rsi
call fcn.140022634
mov qword [rbp + 0x60], rax
mov r15, rax
test rax, rax
jne 0x140024c1a
mov ebx, 8
jmp 0x140025304
mov qword [rsi + 0x38], r15
lea r10, [rbx + 4]
mov rcx, rbx
mov qword [rax + 0x28], r10
call fcn.140025b84
test al, al
je 0x1400252ff
movzx eax, word [r10 + 2]
mov ecx, 0x380
and ax, cx
mov r13, r15
mov word [r15 + 0x22], ax
mov eax, dword [rbx + 0x38]
shr eax, 0x14
and ax, 0xe
mov word [r15 + 0x24], ax
mov eax, 0xfc7f
and word [rbx + 6], ax
mov rax, qword [r15 + 0x28]
and dword [rax + 0x34], 0xff1fffff
lea rax, [rbp - 0x18]
mov qword [r15], rax
lea rax, [rbp - 0x18]
mov qword [r15 + 8], rax
lea rax, [rbp - 0x18]
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], r15
cmp r15, rax
je 0x1400252dd
lea rax, [rbp - 0x18]
cmp qword [r13 + 8], rax
jne 0x1400252d6
mov rax, qword [r13]
cmp qword [rax + 8], r13
jne 0x1400252d6
mov qword [rbp - 0x18], rax
lea rcx, [rbp - 0x18]
mov qword [rax + 8], rcx
xor ebx, ebx
mov r14, qword [r13 + 0x28]
mov dword [r13 + 0x1c], 0x746e
mov qword [r13 + 0x10], rsi
mov qword [rbp - 0x20], r14
mov ecx, dword [r14 + 0x30]
cmp ecx, 0xffffffff
je 0x140024cfa
mov rdx, rdi
call fcn.1400256a0
test rax, rax
je 0x1400252c8
cmp dword [rax], ebx
jg 0x1400252c8
add rax, 4
mov qword [r13 + 0x78], rax
cmp r13, r15
jne 0x140024d16
mov rdx, r14
mov rcx, rsi
call fcn.140026100
mov ebx, eax
test eax, eax
jne 0x1400252e1
xor ebx, ebx
mov rdx, qword [rsi + 0x10]
mov ecx, dword [r14 + 0x2c]
call fcn.1400256a0
test rax, rax
je 0x140024d57
cmp dword [rax], ebx
jg 0x140024d57
lea r8, [rsi + 0x40]
lea rcx, [rax + 4]
mov rax, qword [r8]
jmp 0x140024d41
mov rax, qword [rax]
cmp rax, r8
je 0x140024d4a
mov rdx, rax
cmp rcx, qword [rax + 0x10]
jne 0x140024d39
cmp rcx, qword [rdx + 0x10]
mov rax, rbx
cmove rax, rdx
jmp 0x140024d5a
mov rax, rbx
mov qword [r13 + 0x60], rax
test rax, rax
je 0x1400252c8
mov eax, dword [r14 + 0x24]
lea r12, [r13 + 0x80]
mov qword [r12 + 8], r12
mov qword [r12], r12
mov dword [rbp + 0x50], eax
test eax, eax
je 0x140024fe6
mov ecx, dword [r14 + 0x28]
mov rdx, rdi
call fcn.1400256a0
test rax, rax
je 0x1400252c8
cmp dword [rax], ebx
jg 0x1400252c8
lea r15, [rax + 4]
mov dword [rbp + 0x48], ebx
mov qword [rbp - 0x38], r15
mov r14d, ebx
mov edx, 0x10
lea ecx, [rdx + 0x20]
call qword [sym.imp.msvcrt.dll__aligned_malloc]
nop dword [rax + rax]
mov rbx, rax
test rax, rax
je 0x1400252cf
mov ecx, dword [r15]
mov rdx, rdi
call fcn.1400256a0
xor edx, edx
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x20], rdx
mov r8, rax
mov qword [rbx + 0x28], rdx
lea rcx, [rax + 4]
mov qword [rbx + 0x18], rcx
test rax, rax
je 0x1400252b9
mov ecx, dword [rax]
test ecx, ecx
jg 0x1400252b9
movzx eax, word [rax + 6]
neg ecx
add eax, 0x14
cmp eax, ecx
ja 0x1400252b9
mov eax, 0x6b76
cmp word [r8 + 4], ax
jne 0x1400252b9
cmp dword [r8 + 8], edx
jne 0x140024e3a
cmp dword [r8 + 0xc], 0xffffffff
jne 0x1400252b9
mov rax, qword [r12 + 8]
cmp qword [rax], r12
jne 0x1400252d6
mov qword [rbx], r12
mov qword [rbx + 8], rax
mov qword [rax], rbx
mov qword [r12 + 8], rbx
mov rcx, qword [rbx + 0x18]
mov r8d, dword [rcx + 4]
test r8d, r8d
jne 0x140024e6d
mov qword [rbx + 0x28], rdx
jmp 0x140024fc5
cmp r8d, 0x80000000
jb 0x140024e7f
lea rax, [rcx + 8]
jmp 0x140024fc1
mov rax, qword [rsi + 0x10]
mov edx, dword [rax + 0x14]
mov eax, dword [rax + 0x18]
add eax, 0xfffff000
shl edx, 0xc
add edx, eax
cmp edx, 4
jb 0x140024f9f
cmp r8d, 0x3fd8
jbe 0x140024f9f
mov ecx, dword [rcx + 8]
mov rdx, rdi
call fcn.1400256a0
xor ecx, ecx
test rax, rax
je 0x1400252c8
cmp dword [rax], ecx
jg 0x1400252c8
lea r14, [rax + 4]
mov eax, 0x6264
cmp word [r14], ax
jne 0x1400252c8
cmp cx, word [r14 + 2]
je 0x1400252c8
cmp dword [r14 + 4], 0xffffffff
je 0x1400252c8
movzx eax, word [r14 + 2]
lea edx, [rcx + 0x10]
lea rax, [rax*8 + 8]
mov rcx, rax
mov qword [rbp - 0x28], rax
call qword [sym.imp.msvcrt.dll__aligned_malloc]
nop dword [rax + rax]
xor edx, edx
mov r15, rax
test rax, rax
je 0x1400252cf
mov r8, qword [rbp - 0x28]
mov rcx, rax
call sub.msvcrt.dll_memset
mov qword [r15], r14
mov rdx, rdi
mov ecx, dword [r14 + 4]
call fcn.1400256a0
xor ecx, ecx
mov r10, rax
test rax, rax
je 0x1400252c8
cmp dword [rax], ecx
jg 0x1400252c8
mov r8d, ecx
cmp cx, word [r14 + 2]
jae 0x140024f91
mov r9d, r8d
mov rdx, rdi
mov ecx, dword [r10 + r9*4 + 4]
call fcn.1400256a0
xor ecx, ecx
test rax, rax
je 0x1400252c8
cmp dword [rax], ecx
jg 0x1400252c8
mov qword [r15 + r9*8 + 8], rax
inc r8d
movzx eax, word [r14 + 2]
cmp r8d, eax
jb 0x140024f5c
mov r14d, dword [rbp + 0x48]
mov qword [rbx + 0x20], r15
mov r15, qword [rbp - 0x38]
jmp 0x140024fc5
mov ecx, dword [rcx + 8]
mov rdx, rdi
call fcn.1400256a0
xor ecx, ecx
test rax, rax
je 0x1400252c8
cmp dword [rax], ecx
jg 0x1400252c8
add rax, 4
mov qword [rbx + 0x28], rax
inc r14d
add r15, 4
mov dword [rbp + 0x48], r14d
mov qword [rbp - 0x38], r15
cmp r14d, dword [rbp + 0x50]
jb 0x140024db1
mov r14, qword [rbp - 0x20]
mov r15, qword [rbp + 0x60]
mov r12d, dword [r14 + 0x14]
test r12d, r12d
je 0x1400252a3
mov rax, qword [rbp + 0x58]
test rax, rax
je 0x140025007
mov rdx, rax
mov rcx, rsi
call fcn.14002547c
mov rbx, r12
mov edx, 0x10
shl rbx, 3
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__aligned_malloc]
nop dword [rax + rax]
xor edx, edx
mov qword [rbp + 0x58], rax
test rax, rax
je 0x140024c10
mov r8, rbx
mov rcx, rax
call sub.msvcrt.dll_memset
mov ecx, dword [r14 + 0x1c]
mov rdx, rdi
call fcn.1400256a0
xor ebx, ebx
mov r9, rax
test rax, rax
je 0x1400252c8
cmp dword [rax], ebx
jg 0x1400252c8
mov eax, 0x6972
cmp word [r9 + 4], ax
jne 0x140025140
xor eax, eax
mov r10d, ebx
cmp ax, word [r9 + 6]
jae 0x140025140
mov r15, qword [rbp + 0x58]
mov eax, ebx
mov rdx, rdi
mov ecx, dword [r9 + rax*4 + 8]
call fcn.1400256a0
xor ecx, ecx
mov r8, rax
test rax, rax
je 0x1400252c8
cmp dword [rax], ecx
jg 0x1400252c8
movzx eax, word [rax + 4]
mov edx, 0x696c
cmp ax, dx
jne 0x1400250ec
mov r11d, ecx
mov r14, qword [rsi + 0x10]
cmp cx, word [r8 + 6]
jae 0x14002512f
mov eax, r11d
mov rdx, r14
mov ecx, dword [r8 + rax*4 + 8]
call fcn.1400256a0
mov ecx, r10d
inc r11d
inc r10d
mov qword [r15 + rcx*8], rax
movzx eax, word [r8 + 6]
cmp r11d, eax
jb 0x1400250c3
jmp 0x14002512f
mov edx, 0x666c
sub ax, dx
mov edx, 0xfdff
test dx, ax
jne 0x14002512f
movzx r11d, word [r8 + 6]
mov r14, qword [rsi + 0x10]
test r11, r11
je 0x14002512f
add r8, 8
mov ecx, dword [r8]
mov rdx, r14
call fcn.1400256a0
mov ecx, r10d
lea r8, [r8 + 8]
inc r10d
mov qword [r15 + rcx*8], rax
sub r11, 1
jne 0x140025110
movzx eax, word [r9 + 6]
inc ebx
cmp ebx, eax
jb 0x140025082
xor ebx, ebx
movzx eax, word [r9 + 4]
mov ecx, 0x666c
sub ax, cx
mov ecx, 0xfdff
test cx, ax
je 0x140025198
mov eax, 0x696c
cmp word [r9 + 4], ax
jne 0x1400251d4
mov r10d, ebx
mov r11, qword [rsi + 0x10]
cmp bx, word [r9 + 6]
jae 0x1400251d4
mov rdi, qword [rbp + 0x58]
mov r8d, r10d
mov rdx, r11
mov ecx, dword [r9 + r8*4 + 8]
call fcn.1400256a0
mov qword [rdi + r8*8], rax
inc r10d
movzx eax, word [r9 + 6]
cmp r10d, eax
jb 0x140025175
jmp 0x1400251d0
movzx r8d, word [r9 + 6]
mov r10d, ebx
mov r11, qword [rsi + 0x10]
test r8, r8
je 0x1400251d4
mov rdi, qword [rbp + 0x58]
add r9, 8
mov ecx, dword [r9]
mov rdx, r11
call fcn.1400256a0
mov ecx, r10d
lea r9, [r9 + 8]
inc r10d
mov qword [rdi + rcx*8], rax
sub r8, 1
jne 0x1400251b1
mov rdi, qword [rbp - 0x30]
mov r15d, ebx
test r12d, r12d
je 0x1400252a3
mov r14, qword [rbp + 0x58]
jmp 0x1400251e8
xor ebx, ebx
mov rcx, qword [r14]
test rcx, rcx
je 0x1400252c8
cmp dword [rcx], ebx
jg 0x1400252c8
call fcn.140025b84
test al, al
je 0x1400252c8
mov rdx, r13
mov rcx, rsi
call fcn.140022634
mov rbx, rax
test rax, rax
je 0x1400252cf
mov rcx, qword [r14]
mov qword [rax + 0xa0], rcx
mov r8, qword [r14]
lea rcx, [r8 + 4]
mov qword [rax + 0x28], rcx
mov eax, 0x380
movzx edx, word [rcx + 2]
mov rcx, r13
and dx, ax
mov word [rbx + 0x22], dx
mov rdx, rbx
mov eax, dword [r8 + 0x38]
shr eax, 0x14
and ax, 0xe
mov word [rbx + 0x24], ax
mov eax, 0xfc7f
and word [r8 + 6], ax
mov rax, qword [rbx + 0x28]
and dword [rax + 0x34], 0xff1fffff
call fcn.140024920
mov rax, qword [rbp - 0x10]
lea rcx, [rbp - 0x18]
cmp qword [rax], rcx
jne 0x1400252d6
mov qword [rbx + 8], rax
lea rcx, [rbp - 0x18]
mov qword [rbx], rcx
inc r15d
add r14, 8
mov qword [rax], rbx
mov qword [rbp - 0x10], rbx
cmp r15d, r12d
jb 0x1400251e6
mov r13, qword [rbp - 0x18]
lea rax, [rbp - 0x18]
cmp r13, rax
je 0x1400252dd
mov r15, qword [rbp + 0x60]
jmp 0x140024c92
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__aligned_free]
nop dword [rax + rax]
mov ebx, 0x3f9
jmp 0x1400252e1
mov ebx, 8
jmp 0x1400252e1
mov ecx, 3
int 0x29
xor ecx, ecx
mov ebx, ecx
mov rcx, qword [rbp + 0x58]
test rcx, rcx
je 0x1400252f5
mov rdx, rcx
mov rcx, rsi
call fcn.14002547c
test ebx, ebx
je 0x14002531a
mov r15, qword [rbp + 0x60]
jmp 0x140025304
mov ebx, 0x3f9
mov rcx, r15
call fcn.140025334
xor eax, eax
mov rcx, rsi
mov qword [rsi + 0x38], rax
call fcn.1400262b0
mov eax, ebx
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret