Function at 0x1400b37ac
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
movzx r13d, word [rcx + 0x48]
xor r15d, r15d
mov r12b, dl
and r12b, 1
mov rdi, rdx
xor r13w, 0x7b
and rdi, 0xfffffffffffffffe
mov rbx, rcx
mov qword [rax + 0x18], r15
mov byte [rsp + 0x90], r12b
cmp r12b, r15b
jne 0x1400b3830
movzx edx, word [rcx + 0x48]
bts edx, 0x10
call fcn.14005f000
mov word [rbx + 0xc8], r15w
movzx eax, word [rdi]
cmp word [rbx + 0x92], ax
je 0x1400b382a
cmp word [rbx + 0x94], ax
je 0x1400b382a
cmp word [rbx + 0x8a], ax
je 0x1400b382a
cmp word [rbx + 0x90], ax
jne 0x1400b3830
add rdi, 2
jmp 0x1400b3803
test byte [rbx + 0x10], 0x80
mov ebp, r15d
mov qword [rsp + 0x98], rdi
mov qword [rsp + 0x30], r15
je 0x1400b3854
lea r14, [rsp + 0x30]
cmp qword [0x140131050], r15
jne 0x1400b3859
lea r14, [rsp + 0x38]
movzx eax, word [rbx + 0x88]
cmp word [rdi], ax
je 0x1400b3e44
mov r12d, 9
test byte [rbx + 0x11], 1
je 0x1400b3882
mov rcx, qword [rsp + 0xa0]
call fcn.140058cec
test byte [rbx + 0xc8], 0x42
jne 0x1400b3e3c
movzx esi, word [rbx + 0x88]
mov rcx, rdi
mov qword [rsp + 0x98], rdi
call fcn.140060ed0
cmp word [rax], si
je 0x1400b3e3c
cmp ebp, r15d
jg 0x1400b3c23
movzx edx, word [rbx + 0x96]
movzx eax, word [rdi]
cmp dx, ax
jne 0x1400b39ac
add rdi, 2
mov r9, rdi
mov qword [rsp + 0x98], rdi
movzx eax, word [rdi]
cmp word [rbx + 0x92], ax
je 0x1400b3901
cmp word [rbx + 0x94], ax
je 0x1400b3901
cmp word [rbx + 0x8a], ax
je 0x1400b3901
cmp word [rbx + 0x90], ax
jne 0x1400b3907
add rdi, 2
jmp 0x1400b38d2
cmp word [rdi], si
je 0x1400b386f
lea rdx, [rbx + 0xaa]
mov rcx, rdi
call fcn.14005efd0
cmp eax, r15d
je 0x1400b386f
lea rdx, [rbx + 0x9a]
mov rcx, rdi
call fcn.14005efd0
cmp eax, r15d
je 0x1400b386f
mov rdx, qword [rbx + 0x40]
lea rax, [0x140111598]
mov qword [rsp + 0x98], r9
lea r8, [rsp + 0x98]
xor r9d, r9d
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.1400a8fec
mov rdi, qword [rsp + 0x98]
movzx eax, word [rdi]
cmp word [rbx + 0x92], ax
je 0x1400b399e
cmp word [rbx + 0x94], ax
je 0x1400b399e
cmp word [rbx + 0x8a], ax
je 0x1400b399e
cmp word [rbx + 0x90], ax
jne 0x1400b386f
add rdi, 2
mov qword [rsp + 0x98], rdi
jmp 0x1400b3973
cmp ax, word [rbx + 0xba]
jne 0x1400b3c23
movzx eax, word [rbx + 0xbc]
cmp word [rdi + 2], ax
jne 0x1400b3c23
movzx r9d, word [rbx + 0x92]
lea rax, [rdi + 4]
mov qword [rsp + 0x98], rax
movzx ecx, word [rax]
cmp r9w, cx
je 0x1400b3a02
cmp word [rbx + 0x94], cx
je 0x1400b3a02
cmp word [rbx + 0x8a], cx
je 0x1400b3a02
cmp word [rbx + 0x90], cx
jne 0x1400b3a08
add rax, 2
jmp 0x1400b39d6
movzx ecx, word [rax]
cmp cx, si
je 0x1400b3a3f
cmp cx, word [rbx + 0x8a]
je 0x1400b3a3f
cmp cx, word [rbx + 0x90]
je 0x1400b3a3f
cmp dx, cx
je 0x1400b3a3f
add rax, 2
mov qword [rsp + 0x98], rax
mov cx, word [rax]
cmp cx, word [rbx + 0x88]
jne 0x1400b3a10
movzx ecx, word [rbx + 0x94]
movzx edx, word [rbx + 0x8a]
movzx r8d, word [rbx + 0x90]
mov rsi, rax
cmp r9w, word [rsi]
je 0x1400b3a6e
cmp cx, word [rsi]
je 0x1400b3a6e
cmp dx, word [rsi]
je 0x1400b3a6e
cmp r8w, word [rsi]
jne 0x1400b3a74
add rsi, 2
jmp 0x1400b3a58
cmp r13w, word [rsi]
jne 0x1400b3b94
sub rax, rdi
lea rcx, [rsp + 0xa8]
mov rdx, rdi
sar rax, 1
mov r8, rax
call fcn.14006cf2c
mov r11, qword [rsp + 0x98]
mov r9, qword [rsp + 0xa8]
sub r11, rdi
sar r11, 1
dec r11d
movsxd rcx, r11d
cmp rcx, r15
jl 0x1400b3ac7
movzx eax, word [rbx + 0x48]
xor word [r9 + rcx*2], ax
sub rcx, 1
jns 0x1400b3ab8
add rsi, 2
mov r10, rsi
mov qword [rsp + 0x98], rsi
movzx eax, word [r10]
cmp word [rbx + 0x92], ax
je 0x1400b3afe
cmp word [rbx + 0x94], ax
je 0x1400b3afe
cmp word [rbx + 0x8a], ax
je 0x1400b3afe
cmp word [rbx + 0x90], ax
jne 0x1400b3b0c
add r10, 2
mov qword [rsp + 0x98], r10
jmp 0x1400b3ad6
movzx eax, word [rbx + 0x88]
cmp word [r10], ax
je 0x1400b3b7f
lea rdx, [rbx + 0xaa]
mov rcx, r10
call fcn.14005efd0
cmp eax, r15d
je 0x1400b3b7f
lea rdx, [rbx + 0x9a]
mov rcx, r10
call fcn.14005efd0
cmp eax, r15d
je 0x1400b3b7f
mov rdx, qword [rbx + 0x40]
mov qword [rsp + 0x20], r9
lea r8, [rsp + 0x98]
xor r9d, r9d
mov rcx, rbx
mov qword [rsp + 0x98], rsi
call fcn.1400a8fec
mov rdi, qword [rsp + 0x98]
lea rcx, [rsp + 0xa8]
call fcn.140058d88
jmp 0x1400b386f
lea rcx, [rsp + 0xa8]
call fcn.140058d88
mov rax, qword [rsp + 0x98]
movzx ecx, word [rax]
movzx edx, word [rbx + 0x92]
cmp cx, dx
je 0x1400b3be1
cmp cx, word [rbx + 0x94]
je 0x1400b3be1
cmp cx, word [rbx + 0x8a]
je 0x1400b3be1
cmp cx, word [rbx + 0x90]
jne 0x1400b3bea
jmp 0x1400b3be1
cmp word [rbx + 0x8a], cx
je 0x1400b3bea
cmp word [rbx + 0x90], cx
je 0x1400b3bea
add rax, 2
mov qword [rsp + 0x98], rax
mov cx, word [rax]
cmp word [rbx + 0x88], cx
jne 0x1400b3bc0
movzx ecx, word [rax]
cmp dx, cx
je 0x1400b3c0d
cmp word [rbx + 0x94], cx
je 0x1400b3c0d
cmp word [rbx + 0x8a], cx
je 0x1400b3c0d
cmp word [rbx + 0x90], cx
jne 0x1400b3c1b
add rax, 2
mov qword [rsp + 0x98], rax
jmp 0x1400b3bea
mov rdi, rax
jmp 0x1400b386f
lea r9, [rsp + 0x98]
lea rdx, [rsp + 0xa0]
mov r8, rdi
mov rcx, rbx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x98], r15
mov byte [rsp + 0x20], r15b
call fcn.14001a850
cmp word [rax], r15w
je 0x1400b3e01
cmp word [rax], 0x2f
je 0x1400b3e01
cmp word [rax], 0x3b
je 0x1400b3e01
cmp word [rax], 0x60
je 0x1400b3e01
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0x98]
mov r9, rax
mov rcx, rbx
call fcn.14006b6f4
lea rdx, str._SUB
mov r8d, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, r15d
jne 0x1400b3cd8
movzx eax, word [rdi + 8]
cmp r12w, ax
ja 0x1400b3cc1
cmp ax, 0xd
jbe 0x1400b3cd1
mov esi, 0x20
cmp si, ax
je 0x1400b3cd1
cmp ax, r15w
jne 0x1400b3cdd
inc ebp
jmp 0x1400b3e01
mov esi, 0x20
lea rdx, str._END
mov r8d, 4
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, r15d
jne 0x1400b3d23
movzx eax, word [rdi + 8]
cmp r12w, ax
ja 0x1400b3d08
cmp ax, 0xd
jbe 0x1400b3d13
cmp si, ax
je 0x1400b3d13
cmp ax, r15w
jne 0x1400b3d23
cmp ebp, r15d
jle 0x1400b3e01
dec ebp
jmp 0x1400b3e01
cmp ebp, r15d
jg 0x1400b3e01
cmp byte [0x14013102f], 3
jne 0x1400b3de3
lea rcx, str.REGI
mov r8d, 4
mov rdx, rdi
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, r15d
jne 0x1400b3d6f
movzx eax, word [rdi + 8]
cmp r12w, ax
ja 0x1400b3d64
cmp ax, 0xd
jbe 0x1400b3de3
cmp si, ax
je 0x1400b3de3
cmp ax, r15w
je 0x1400b3de3
lea rcx, str.ENVI
mov r8d, 4
mov rdx, rdi
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, r15d
jne 0x1400b3da5
movzx eax, word [rdi + 8]
cmp r12w, ax
ja 0x1400b3d9a
cmp ax, 0xd
jbe 0x1400b3de3
cmp si, ax
je 0x1400b3de3
cmp ax, r15w
je 0x1400b3de3
lea rcx, [0x14011e598]
mov r8d, 3
mov rdx, rdi
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, r15d
jne 0x1400b3ddb
movzx eax, word [rdi + 6]
cmp r12w, ax
ja 0x1400b3dd0
cmp ax, 0xd
jbe 0x1400b3de3
cmp si, ax
je 0x1400b3de3
cmp ax, r15w
je 0x1400b3de3
mov rcx, rbx
call fcn.140024be0
mov rax, qword [r14]
lea r9, [rsp + 0x98]
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14004a798
mov rdi, qword [rsp + 0x98]
movzx eax, word [rdi]
cmp ax, word [rbx + 0x8a]
je 0x1400b3e1e
cmp ax, word [rbx + 0x90]
jne 0x1400b3e2c
add rdi, 2
mov qword [rsp + 0x98], rdi
jmp 0x1400b3e09
movzx eax, word [rbx + 0x88]
cmp word [rdi], ax
jne 0x1400b386f
mov r12b, byte [rsp + 0x90]
cmp r12b, r15b
jne 0x1400b3e51
mov word [rbx + 0xc8], r15w
lea rcx, [rsp + 0xa0]
call fcn.140058d88
xor eax, eax
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret