Function at 0x14008d600
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb8]
sub rsp, 0x1b8
mov rax, qword [0x14057b900]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov byte [rsp + 0x61], r9b
mov rsi, rdx
mov r15, rcx
mov r12, qword [rbp + 0x120]
xor r13d, r13d
mov rax, qword [rcx]
lea r9d, [r13 + 4]
lea rdx, [rbp - 0x18]
call qword [rax + 0xa0]
nop
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x38], r13
lea rax, [0x1404fae38]
mov qword [rbp + 0x30], rax
lea rax, [rbp - 0x28]
mov qword [rbp + 0x38], rax
lea rax, [rbp - 0x30]
mov qword [rbp + 0x40], rax
lea rax, [rbp - 0x48]
mov qword [rbp + 0x48], rax
lea rax, [rbp - 0x38]
mov qword [rbp + 0x50], rax
lea rax, [rbp + 0x30]
mov qword [rbp + 0x68], rax
mov r14b, 1
mov byte [rsp + 0x60], r14b
mov rcx, qword [r15 + 0x30]
mov rax, qword [rcx]
lea rdx, [rbp - 0x18]
cmp qword [rbp], 7
cmova rdx, qword [rbp - 0x18]
lea r8, [rbp - 0x28]
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x38], r13
lea r8, [rbp - 0x40]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
mov r9d, 4
mov r8d, r9d
call qword [rax + 0x40]
mov edi, eax
test eax, eax
je 0x14008d7b3
mov rbx, qword [r15 + 0x28]
test rbx, rbx
je 0x14008dfce
mov rcx, qword [rbx]
mov rsi, qword [rcx + 0x20]
mov edx, eax
lea rcx, [rbp - 0x68]
call fcn.14008a120
nop
cmp qword [rax + 0x18], 7
jbe 0x14008d719
mov rax, qword [rax]
lea rdx, [rbp - 0x18]
cmp qword [rbp], 7
cmova rdx, qword [rbp - 0x18]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdx
lea rax, str.Error_getting_security_info_on__ls___ls
mov qword [rsp + 0x30], rax
lea rax, str.Permissions
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
mov r9d, 0x253
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
mov rcx, rbx
call rsi
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x14008dfce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008dfc9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e073
jmp 0x14008dfc9
mov dword [rbp - 0x20], r13d
mov rcx, qword [r15 + 0x30]
mov rax, qword [rcx]
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x20]
mov rdx, qword [rbp - 0x40]
call qword [rax + 8]
mov edi, eax
test eax, eax
je 0x14008d89b
mov rbx, qword [r15 + 0x28]
test rbx, rbx
je 0x14008dfce
mov rcx, qword [rbx]
mov rsi, qword [rcx + 0x20]
mov edx, eax
lea rcx, [rbp - 0x68]
call fcn.14008a120
nop
cmp qword [rax + 0x18], 7
jbe 0x14008d801
mov rax, qword [rax]
lea rdx, [rbp - 0x18]
cmp qword [rbp], 7
cmova rdx, qword [rbp - 0x18]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdx
lea rax, str.Error_getting_ACEs_from__ls___ls
mov qword [rsp + 0x30], rax
lea rax, str.Permissions
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
mov r9d, 0x25d
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
mov rcx, rbx
call rsi
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x14008dfce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008dfc9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e079
jmp 0x14008dfc9
mov ebx, r13d
mov dword [rsp + 0x64], ebx
lea r11, str.Permissions
cmp dword [rbp - 0x20], ebx
jbe 0x14008dc25
lea rdi, str.Removing_ACE_with_SID__ls_at_original_index__d__modified_index__d__for_object__ls
lea r9, str.Not_supporting_trustee_type__d__may_not_remove_all_ACEs_from_from__ls
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
xor edx, edx
mov qword [rbp + 0x18], rdx
mov qword [rbp + 0x20], 7
mov word [rbp + 8], dx
mov r14d, r13d
lea r8, [r14 + r14*2]
shl r8, 4
add r8, qword [rbp - 0x48]
cmp dword [r8 + 0x1c], edx
jne 0x14008d989
mov qword [rbp - 0x68], rdx
lea rdx, [rbp - 0x68]
mov rcx, qword [r8 + 0x28]
call qword [sym.imp.ADVAPI32.dll_ConvertSidToStringSidW]
mov r9, qword [rbp - 0x68]
test r9, r9
je 0x14008d9dd
mov rdx, 0xffffffffffffffff
nop dword [rax + rax]
inc rdx
cmp word [r9 + rdx*2], 0
jne 0x14008d920
mov rax, qword [rbp + 0x20]
cmp rdx, rax
ja 0x14008d974
lea rdi, [rbp + 8]
cmp rax, 7
cmova rdi, qword [rbp + 8]
mov qword [rbp + 0x18], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r9
mov rcx, rdi
call fcn.1403ebbf0
xor eax, eax
mov word [rdi + rbx], ax
mov ebx, dword [rsp + 0x64]
lea rdi, str.Removing_ACE_with_SID__ls_at_original_index__d__modified_index__d__for_object__ls
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x14008d9dd
lea rcx, [rbp + 8]
call fcn.140023ce0
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x14008d9dd
mov rcx, qword [r15 + 0x28]
test rcx, rcx
je 0x14008d9e4
mov rax, qword [rcx]
mov r10, qword [rax + 0x20]
lea rdx, [rbp - 0x18]
cmp qword [rbp], 7
cmova rdx, qword [rbp - 0x18]
mov eax, dword [r8 + 0x20]
mov qword [rsp + 0x40], rdx
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x28], r11
mov dword [rsp + 0x20], 2
mov r9d, 0x274
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
call r10
lea r11, str.Permissions
mov rcx, rsi
mov r9, qword [rsi + 0x18]
cmp r9, 7
jbe 0x14008d9f4
mov rcx, qword [rsi]
lea r8, [rbp + 8]
cmp qword [rbp + 0x20], 7
cmova r8, qword [rbp + 8]
mov rdx, qword [rbp + 0x18]
cmp rdx, qword [rsi + 0x10]
jne 0x14008dbc4
test rdx, rdx
je 0x14008da38
sub r8, rcx
nop dword [rax + rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x14008dbc4
add rcx, 2
sub rdx, 1
jne 0x14008da20
lea rcx, [r14 + r14*2]
add rcx, rcx
mov rax, qword [rbp - 0x48]
mov ecx, dword [rax + rcx*8 + 4]
sub ecx, 3
cmp ecx, 1
ja 0x14008dbc4
mov rcx, qword [r15 + 0x28]
test rcx, rcx
je 0x14008dab9
mov rax, qword [rcx]
mov r10, qword [rax + 0x20]
lea rax, [rbp - 0x18]
cmp qword [rbp], 7
cmova rax, qword [rbp - 0x18]
mov rdx, rsi
cmp r9, 7
jbe 0x14008da7d
mov rdx, qword [rsi]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], ebx
mov dword [rsp + 0x40], r13d
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], r11
mov dword [rsp + 0x20], 4
mov r9d, 0x27d
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
call r10
mov rcx, qword [r15 + 0x30]
mov rax, qword [rcx]
mov r8d, ebx
mov rdx, qword [rbp - 0x40]
call qword [rax + 0x30]
test eax, eax
jne 0x14008dbca
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rbx, qword [r15 + 0x28]
test rbx, rbx
je 0x14008dbb2
mov rcx, qword [rbx]
mov r14, qword [rcx + 0x20]
mov edx, eax
lea rcx, [rbp - 0x68]
call fcn.1400f4110
nop
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 7
cmova rcx, qword [rbp - 0x68]
lea rdx, [rbp - 0x18]
cmp qword [rbp], 7
cmova rdx, qword [rbp - 0x18]
mov rax, rsi
cmp qword [rsi + 0x18], 7
jbe 0x14008db23
mov rax, qword [rsi]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], r13d
lea rax, str.Error_removing_ACE_at_index__u_with_SID__ls_from__ls___ls
mov qword [rsp + 0x30], rax
lea rax, str.Permissions
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
mov r9d, 0x281
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
mov rcx, rbx
call r14
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x14008dbb2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008dbad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e085
call fcn.14014f510
test r12, r12
je 0x14008dbbb
mov dword [r12], edi
mov byte [rsp + 0x60], 0
mov ebx, dword [rsp + 0x64]
inc ebx
mov dword [rsp + 0x64], ebx
mov rdx, qword [rbp + 0x20]
cmp rdx, 7
jbe 0x14008dc0a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008dc05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e08b
call fcn.14014f510
inc r13d
cmp r13d, dword [rbp - 0x20]
jae 0x14008dc1f
lea r11, str.Permissions
jmp 0x14008d8b2
movzx r14d, byte [rsp + 0x60]
mov rcx, rsi
cmp qword [rsi + 0x18], 7
jbe 0x14008dc32
mov rcx, qword [rsi]
lea rdx, [rbp - 0x38]
call qword [sym.imp.ADVAPI32.dll_ConvertStringSidToSidW]
test eax, eax
jne 0x14008dd11
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rbx, qword [r15 + 0x28]
test rbx, rbx
je 0x14008dd09
mov rcx, qword [rbx]
mov r14, qword [rcx + 0x20]
mov edx, eax
lea rcx, [rbp - 0x68]
call fcn.1400f4110
nop
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 7
cmova rcx, qword [rbp - 0x68]
cmp qword [rsi + 0x18], 7
jbe 0x14008dc84
mov rsi, qword [rsi]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], rsi
lea rax, str.Error_converting_SID__ls_to_a_structure___ls
mov qword [rsp + 0x30], rax
lea rax, str.Permissions
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
mov r9d, 0x296
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
mov rcx, rbx
call r14
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x14008dd09
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008dd04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e091
call fcn.14014f510
xor r13d, r13d
jmp 0x14008dfce
neg byte [rsp + 0x61]
sbb ebx, ebx
and ebx, 3
mov r10, qword [rsi + 0x10]
mov rdx, rsi
cmp qword [rsi + 0x18], 7
jbe 0x14008dd2b
mov rdx, qword [rsi]
movabs r9, 0xcbf29ce484222325
xor r13d, r13d
mov ecx, r13d
add r10, r10
je 0x14008dd63
movabs r8, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r8
inc rcx
cmp rcx, r10
jb 0x14008dd50
mov r8, rsi
lea rdx, [rbp - 0x68]
lea rcx, [r15 + 0x40]
call fcn.14008f9b0
mov rcx, qword [rax + 8]
test rcx, rcx
jne 0x14008dd80
mov rcx, qword [r15 + 0x48]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x74], xmm0
mov dword [rbp - 0x74], r13d
mov dword [rsp + 0x68], 0x10000000
mov dword [rsp + 0x6c], 1
mov dword [rsp + 0x70], ebx
mov dword [rbp - 0x7c], r13d
mov eax, 5
cmp rcx, qword [r15 + 0x48]
cmove eax, r13d
mov dword [rbp - 0x78], eax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x70], rax
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [rbp + 0x80], xmm1
movups xmm0, xmmword [rbp - 0x78]
movups xmmword [rbp + 0x90], xmm0
mov rcx, qword [r15 + 0x30]
mov rax, qword [rcx]
lea rdx, [rbp - 0x30]
mov qword [rsp + 0x20], rdx
mov r9, qword [rbp - 0x40]
lea r8, [rbp + 0x70]
mov edx, 1
call qword [rax + 0x38]
mov edi, eax
test eax, eax
je 0x14008decb
mov rbx, qword [r15 + 0x28]
test rbx, rbx
je 0x14008dfce
mov rcx, qword [rbx]
mov rsi, qword [rcx + 0x20]
mov edx, eax
lea rcx, [rbp - 0x68]
call fcn.14008a120
nop
cmp qword [rax + 0x18], 7
jbe 0x14008de31
mov rax, qword [rax]
lea rdx, [rbp - 0x18]
cmp qword [rbp], 7
cmova rdx, qword [rbp - 0x18]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdx
lea rax, str.Error_setting_entries_in_ACL_for__ls___ls
mov qword [rsp + 0x30], rax
lea rax, str.Permissions
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 2
mov r9d, 0x2b2
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
mov rcx, rbx
call rsi
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x14008dfce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008dfc9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e07f
jmp 0x14008dfc9
mov rcx, qword [r15 + 0x30]
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
lea rdx, [rbp - 0x18]
cmp qword [rbp], 7
cmova rdx, qword [rbp - 0x18]
mov qword [rsp + 0x38], r13
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
mov r9d, 4
mov r8d, r9d
call r10
mov edi, eax
test eax, eax
je 0x14008dfda
mov rbx, qword [r15 + 0x28]
test rbx, rbx
je 0x14008dfce
mov rcx, qword [rbx]
mov rsi, qword [rcx + 0x20]
mov edx, eax
lea rcx, [rbp - 0x68]
call fcn.14008a120
nop
cmp qword [rax + 0x18], 7
jbe 0x14008df3c
mov rax, qword [rax]
lea rdx, [rbp - 0x18]
cmp qword [rbp], 7
cmova rdx, qword [rbp - 0x18]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdx
lea rax, str.Error_setting_the_DACL_on__ls___ls
mov qword [rsp + 0x30], rax
lea rax, str.Permissions
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
mov r9d, 0x2bc
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
mov rcx, rbx
call rsi
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x14008dfce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008dfc9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e097
call fcn.14014f510
test r12, r12
je 0x14008dfd7
mov dword [r12], edi
xor r14b, r14b
mov rcx, qword [rbp + 0x68]
test rcx, rcx
je 0x14008e09d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x68]
test rcx, rcx
je 0x14008e00a
mov rax, qword [rcx]
lea rdx, [rbp + 0x30]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov qword [rbp + 0x68], r13
mov rdx, qword [rbp]
cmp rdx, 7
jbe 0x14008e046
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008e041
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e06d
call fcn.14014f510
movzx eax, r14b
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.14014f4f0
add rsp, 0x1b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
int3
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
int3
call fcn.14015fa1c
int3
call fcn.14015fa1c
nop
call fcn.14012da9c
int3