Function at 0x140071330
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0xd590
call fcn.1400d37c0
sub rsp, rax
mov rdi, rcx
lea rcx, [rsp + 0xd5d8]
call fcn.140044ef4
mov rax, qword [rsp + 0xd5d8]
xor ebp, ebp
cmp word [rax], bp
jne 0x140071378
xor eax, eax
jmp 0x140071ea9
lea rdx, [0x1400d63f4]
lea rcx, [rsp + 0x50]
call fcn.140058920
lea rdx, [0x1400d63f4]
lea rcx, [rsp + 0x58]
call fcn.140058920
mov r11, qword [rsp + 0xd5d8]
mov r12d, 0x20
mov byte [rsp + 0x45], bpl
mov r13b, r12b
mov byte [rsp + 0xd5e8], bpl
mov dword [rsp + 0x40], 0xff000000
lea esi, [r12 - 0x1f]
lea r15d, [r12 - 0x1e]
lea r14d, [r12 - 0x1c]
cmp word [r11], bp
je 0x1400715d5
lea ebx, [rsi + 8]
lea rdx, [rsp + 0xd5d8]
lea rcx, [0x1400d9400]
mov r8d, r15d
call fcn.14004e558
cmp al, bpl
je 0x140071402
mov byte [rsp + 0x45], sil
jmp 0x1400715c3
lea rdx, [rsp + 0xd5d8]
lea rcx, [0x1400d9174]
mov r8d, r15d
call fcn.14004e558
cmp al, bpl
je 0x140071426
mov r13b, r15b
jmp 0x1400715c3
lea rdx, [rsp + 0xd5d8]
lea rcx, str._udm
mov r8d, r14d
call fcn.14004e558
cmp al, bpl
je 0x14007144a
mov r13b, 0x40
jmp 0x1400715c3
lea rdx, [rsp + 0xd5d8]
lea rcx, [0x1400df6a8]
mov r8d, r15d
call fcn.14004e558
cmp al, bpl
je 0x14007146e
mov r13b, sil
jmp 0x1400715c3
lea rdx, [rsp + 0xd5d8]
lea rcx, [0x1400df6a4]
mov r8d, r15d
call fcn.14004e558
cmp al, bpl
je 0x140071492
mov r13b, 0x10
jmp 0x1400715c3
lea rdx, [rsp + 0xd5d8]
lea rcx, str._bin
mov r8d, r14d
call fcn.14004e558
cmp al, bpl
je 0x1400714c3
add qword [rsp + 0xd5d8], r14
mov byte [rsp + 0xd5e8], sil
jmp 0x1400715b6
mov r11, qword [rsp + 0xd5d8]
lea rcx, str._src
mov r8d, r14d
mov rdx, r11
call fcn.140045fc8
cmp al, bpl
je 0x140071548
add r11, 8
mov qword [rsp + 0xd5d8], r11
cmp bx, word [r11]
ja 0x1400714fb
cmp word [r11], 0xd
jbe 0x140071501
cmp r12w, word [r11]
jne 0x14007150e
mov dword [rsp + 0x40], 5
jmp 0x1400715cb
mov eax, 0x3a
cmp ax, word [r11]
jne 0x1400715cb
add r11, r15
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xd5d8]
mov dword [rsp + 0x40], ebp
mov qword [rsp + 0xd5d8], r11
call fcn.14004fc04
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x40], eax
jmp 0x1400715c3
lea rdx, [rsp + 0xd5d8]
lea rcx, [0x1400d6b40]
mov r8d, r15d
call fcn.14004e558
mov r11, qword [rsp + 0xd5d8]
cmp al, bpl
jne 0x1400715d5
lea rcx, [0x1400d7440]
mov r8d, esi
mov rdx, r11
call fcn.140045f78
cmp al, bpl
jne 0x1400715d5
movzx eax, word [r11]
mov ecx, 0x2d
cmp cx, ax
jne 0x1400715d5
cmp bx, ax
ja 0x14007159c
cmp ax, 0xd
jbe 0x1400715b6
cmp r12w, ax
je 0x1400715b6
add r11, r15
mov qword [rsp + 0xd5d8], r11
mov ax, word [r11]
cmp ax, bp
jne 0x140071591
lea rcx, [rsp + 0xd5d8]
call fcn.140044ef4
mov r11, qword [rsp + 0xd5d8]
cmp word [r11], bp
jne 0x1400713dc
mov eax, 0x22
mov qword [rsp + 0x100], r11
lea ebx, [rax + 0xa]
cmp ax, word [r11]
jne 0x14007162f
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0xd5d8]
mov r9d, ebx
mov rcx, rdi
mov word [rsp + 0x20], bp
call fcn.14003f478
mov r12, qword [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0xd5d8]
mov r9d, ebx
mov rcx, rdi
mov word [rsp + 0x20], bp
call fcn.14003f478
jmp 0x1400716e5
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xd5d8]
mov r8d, ebx
call fcn.14004f5d4
mov rax, qword [rsp + 0xd5d8]
mov r12, qword [rsp + 0x50]
cmp word [rax], bx
jne 0x140071685
add rax, r15
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0xd5d8]
mov r8d, ebx
mov qword [rsp + 0xd5d8], rax
call fcn.14004f5d4
mov rcx, qword [rsp + 0x58]
call fcn.140015cb4
mov r15, rax
jmp 0x1400716ea
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x100]
mov r8d, esi
mov dword [rsp + 0x60], ebp
call fcn.140020840
mov r8d, dword [rsp + 0x60]
mov rdx, qword [rsp + 0x100]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x68], rax
call fcn.14004c0cc
mov r12, qword [rsp + 0x50]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x68]
xor r8d, r8d
call fcn.140020840
mov r8d, dword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x58]
call fcn.14004c0cc
mov r15, qword [rsp + 0x58]
cmp word [r15], bp
je 0x140071e90
cmp word [r12], bp
je 0x140071e90
lea rcx, [0x1400df698]
mov rdx, r12
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
cmp eax, ebp
sete byte [rsp + 0x44]
mov edx, ebp
cmp r13b, 2
je 0x14007177f
xor ecx, ecx
call fcn.1400be1b0
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
add edi, eax
call fcn.1400475f0
mov ecx, dword [0x1400f2cac]
add edi, eax
mov edx, ecx
shl edx, 4
add edx, edi
xor ecx, edx
mov eax, edx
mov dword [rsp + 0x48], edx
and eax, 3
mov dword [0x1400f2cac], ecx
cmp al, 3
jne 0x14007171e
mov al, byte [rsp + 0x49]
test al, 0xf0
je 0x14007171e
test al, 0xf
je 0x14007171e
mov al, byte [rsp + 0x4a]
test al, 0xf0
je 0x14007171e
test al, 0xf
je 0x14007171e
mov al, byte [rsp + 0x4b]
test al, 0xf
je 0x14007171e
and al, 0x88
cmp al, 0x80
jne 0x14007171e
cmp r13b, 0x10
je 0x140071c3d
mov ebx, edx
and ebx, 0xfffffff
cmp edx, ebp
je 0x14007179b
xor edx, 0x5aa59669
mov dword [rsp + 0x48], edx
mov ax, bp
cmp r13b, 0x20
jne 0x1400717ad
mov eax, 0x14
cmp r13b, 0x40
jne 0x1400717b8
mov eax, 0x18
xor dx, ax
mov word [rsp + 0x48], dx
cmp ax, bp
je 0x1400717ce
cmp dx, bp
je 0x140071716
lea rdi, [0x1400de080]
lea rcx, [rsp + 0xd8]
xor edx, edx
mov qword [rsp + 0xd0], rdi
call fcn.140050128
lea rcx, [rsp + 0x78]
xor edx, edx
mov dword [rsp + 0xf8], ebp
mov qword [rsp + 0x70], rdi
call fcn.140050128
mov dword [rsp + 0x98], ebx
mov bl, byte [rsp + 0x44]
mov ebp, 7
test bl, bl
je 0x140071829
mov rax, qword [0x1400ef2c0]
mov qword [rsp + 0xd8], rax
jmp 0x14007185b
and qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x80
lea rcx, [rsp + 0xd8]
mov r9d, ebp
mov r8d, esi
mov rdx, r12
mov dword [rsp + 0x28], 3
and qword [rsp + 0x20], 0
call fcn.1400034e0
mov ecx, 0xfffffff6
movzx ebx, bl
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r8, qword [rsp + 0xd8]
lea rdx, str.infile0x_p_0x_p_bstin_d_r_n
lea rcx, [0x1400f1e30]
mov r9, rax
mov dword [rsp + 0x20], ebx
call fcn.140012fac
xor r12d, r12d
lea rcx, [rsp + 0x78]
cmp qword [rsp + 0xd8], r12
jne 0x1400718d7
mov qword [rsp + 0x70], rdi
call fcn.140050184
lea rcx, [rsp + 0xd8]
mov qword [rsp + 0xd0], rdi
call fcn.140050184
lea rcx, [rsp + 0x58]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
mov eax, esi
jmp 0x140071ea9
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], 0x80
mov r9d, ebp
mov r8d, 0x40000001
mov rdx, r15
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], r12
call fcn.1400034e0
cmp qword [rsp + 0x78], r12
je 0x1400719e7
lea rcx, [rsp + 0x140]
xor r8d, r8d
xor edx, edx
mov byte [rsp + 0x90], sil
call fcn.1400455ac
lea rcx, [rsp + 0xd0]
lea rax, [rsp + 0x70]
mov qword [rsp + 0xd578], rcx
mov bl, 0x53
mov qword [rsp + 0xd580], rax
cmp r13b, 0x20
jne 0x140071951
mov dil, 0x61
jmp 0x140071960
movzx edi, bl
mov eax, 0x4d
cmp r13b, 0x40
cmove edi, eax
lea rcx, [rsp + 0x68]
call fcn.14004be6c
mov r15d, dword [rsp + 0x40]
cmp r15d, r12d
jge 0x14007197d
cmp dil, bl
je 0x140071a46
cmp byte [rsp + 0xd5e8], r12b
jne 0x140071a46
mov rcx, qword [rsp + 0xd8]
lea rdx, [rsp + 0xe0]
call fcn.1400502d8
mov rcx, qword [rsp + 0xd8]
mov r12, qword [rsp + 0xe0]
movsxd rbx, eax
test rcx, rcx
je 0x1400719c4
cmp rcx, 0xffffffffffffffff
je 0x1400719c4
call qword [sym.imp.KERNEL32.dll_CloseHandle]
and qword [rsp + 0xd8], 0
test ebx, ebx
jg 0x1400719f1
lea rcx, [rsp + 0x68]
call fcn.140044f24
mov esi, 0x80070057
lea rdi, [0x1400de080]
lea rcx, [rsp + 0x78]
jmp 0x14007189d
cmp ebx, esi
jle 0x140071a1c
lea rdx, [r12 + 2]
cmp word [rdx], 0x7f
ja 0x140071a1c
cmp r13b, 0x20
je 0x140071a0c
cmp r13b, 0x40
jne 0x140071a1c
mov r8, rbx
mov rcx, r12
add r8, r8
call fcn.1400177b0
sub ebx, esi
mov rcx, qword [rsp + 0xe0]
xor r12d, r12d
mov edx, ebx
lea eax, [r12 + 5]
cmp r15d, r12d
cmovl r15d, eax
mov r8d, r15d
call fcn.14005e5a8
add eax, eax
mov dword [rsp + 0xec], eax
lea rbx, [0x1400dcd40]
mov al, byte [rbx]
add dword [rsp + 0x9c], esi
lea rdx, [rsp + 0xd5e8]
lea rcx, [rsp + 0x78]
mov r8d, esi
mov byte [rsp + 0xd5e8], al
call fcn.140048448
add rbx, rsi
sub rbp, rsi
jne 0x140071a4d
add dword [rsp + 0x9c], esi
lea rdx, [rsp + 0xd5e8]
lea rcx, [rsp + 0x78]
mov r8d, esi
mov byte [rsp + 0xd5e8], dil
call fcn.140048448
lea rbx, [rsp + 0x48]
mov rdi, r14
lea ecx, [rbp + 8]
mov al, byte [rbx]
add ecx, esi
lea rdx, [rsp + 0xd5e8]
mov dword [rsp + 0x9c], ecx
lea rcx, [rsp + 0x78]
mov r8d, esi
mov byte [rsp + 0xd5e8], al
call fcn.140048448
add rbx, rsi
sub rdi, rsi
je 0x140071ae1
mov ecx, dword [rsp + 0x9c]
jmp 0x140071aa9
mov dword [rsp + 0x9c], 0xc
mov byte [rsp + 0x113a], r12b
mov byte [rsp + 0x113b], r12b
mov byte [rsp + 0x113c], r12b
mov byte [rsp + 0x113d], r12b
movzx edi, r12w
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0xd5e8]
lea rcx, [rsp + 0xd8]
mov r8d, esi
mov byte [rsp + 0xd5e8], r12b
mov dword [rsp + 0x40], r12d
call fcn.1400484a0
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp ebx, r12d
je 0x140071b57
cmp dword [rsp + 0x40], esi
jb 0x140071b57
movzx ecx, byte [rsp + 0xd5e8]
jmp 0x140071b5a
or ecx, 0xffffffff
cmp ecx, 0xffffffff
je 0x140071b7b
movsx rax, di
add di, si
mov byte [rsp + rax + 0x113a], cl
add byte [rsp + 0x115d], sil
cmp di, r14w
jl 0x140071b10
mov dil, byte [rsp + 0x45]
lea rbx, [rsp + 0x113a]
cmp dil, r12b
je 0x140071b98
mov al, byte [rbx]
mov byte [rsp + 0xd5e8], al
jmp 0x140071ba0
mov byte [rsp + 0xd5e8], r12b
add dword [rsp + 0x9c], esi
lea rdx, [rsp + 0xd5e8]
lea rcx, [rsp + 0x78]
mov r8d, esi
call fcn.140048448
add rbx, rsi
sub r14, rsi
jne 0x140071b88
xor ecx, ecx
mov dword [rsp + 0x9c], 0x10
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rcx, [rsp + 0x140]
call fcn.1400458a0
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov r11, qword [rsp + 0xd8]
cmp byte [rsp + 0x44], r12b
cmovne r11, r12
lea rcx, [rsp + 0x68]
mov qword [rsp + 0xd8], r11
call fcn.140044f24
lea rbx, [0x1400de080]
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x70], rbx
call fcn.140050184
mov qword [rsp + 0xd0], rbx
lea rcx, [rsp + 0xd8]
jmp 0x140071e72
lea r13, [0x1400de0a0]
lea rcx, [rsp + 0xa8]
xor edx, edx
mov qword [rsp + 0xa0], r13
mov dword [rsp + 0x48], ebp
call fcn.140050128
lea rcx, [rsp + 0x110]
xor edx, edx
mov dword [rsp + 0xc8], ebp
mov qword [rsp + 0x108], r13
call fcn.140050128
mov qword [rsp + 0x38], rbp
mov dword [rsp + 0x30], 0x80
mov dword [rsp + 0x130], ebp
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbp
mov ebp, 7
lea rcx, [rsp + 0xa8]
mov r8d, esi
mov rdx, r12
mov r9d, ebp
call fcn.1400034e0
xor edi, edi
cmp qword [rsp + 0xa8], rdi
je 0x140071d8e
lea ebx, [rbp + 1]
add dword [rsp + 0xcc], esi
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0xd5e8]
lea rcx, [rsp + 0xa8]
mov r8d, esi
call fcn.1400484a0
sub rbx, rsi
jne 0x140071ccc
mov rbx, rdi
add dword [rsp + 0xcc], esi
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0xd5e8]
lea rcx, [rsp + 0xa8]
mov r8d, esi
mov byte [rsp + 0xd5e8], dil
mov dword [rsp + 0x40], edi
call fcn.1400484a0
cmp eax, edi
je 0x140071d3c
cmp dword [rsp + 0x40], esi
jb 0x140071d3c
movzx eax, byte [rsp + 0xd5e8]
jmp 0x140071d3f
or eax, 0xffffffff
mov byte [rsp + rbx + 0x48], al
add rbx, rsi
cmp rbx, r14
jl 0x140071cf8
lea rcx, [rsp + 0x110]
cmp dword [rsp + 0x48], edi
jne 0x140071d96
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], 0x80
mov r9d, ebp
mov r8d, 0x40000001
mov rdx, r15
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rdi
call fcn.1400034e0
cmp qword [rsp + 0x110], rdi
jne 0x140071db8
lea rcx, [rsp + 0x110]
mov qword [rsp + 0x108], r13
call fcn.140050184
mov qword [rsp + 0xa0], r13
lea rcx, [rsp + 0xa8]
jmp 0x1400718b7
lea rcx, [rsp + 0x140]
xor r8d, r8d
xor edx, edx
mov byte [rsp + 0x128], sil
call fcn.1400455ac
lea rax, [rsp + 0x108]
mov qword [rsp + 0xd580], rax
mov eax, dword [rsp + 0xc8]
lea rcx, [rsp + 0xa0]
mov qword [rsp + 0xd578], rcx
cmp eax, edi
je 0x140071e09
xor eax, 0x5aa59669
mov dword [rsp + 0xc8], eax
add dword [rsp + 0xcc], esi
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0xd5e8]
lea rcx, [rsp + 0xa8]
mov r8d, esi
call fcn.1400484a0
sub r14, rsi
jne 0x140071e09
lea rcx, [rsp + 0x140]
call fcn.140045bcc
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
lea rcx, [rsp + 0x110]
mov qword [rsp + 0x108], r13
call fcn.140050184
mov qword [rsp + 0xa0], r13
lea rcx, [rsp + 0xa8]
call fcn.140050184
lea rcx, [rsp + 0x58]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
jmp 0x140071371
lea rcx, [rsp + 0x58]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
mov eax, 0x80070057
mov rbx, qword [rsp + 0xd5d0]
add rsp, 0xd590
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret