Function at 0x140043ee0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd8]
sub rsp, 0x1d8
mov rax, qword [0x14024e280]
xor rax, rsp
mov qword [rbp + 0xc0], rax
movzx ebx, r9b
mov byte [rsp + 0x61], bl
mov r14, rdx
mov r12, rcx
mov r15, qword [rbp + 0x140]
mov qword [rbp - 0x70], r15
xor esi, esi
mov rax, qword [rcx]
lea r9d, [rsi + 4]
lea rdx, [rbp + 8]
call qword [rax + 0xa0]
nop
mov qword [rbp - 0x10], rsi
mov qword [rbp - 0x28], rsi
mov qword [rbp - 8], rsi
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x18], rsi
lea rax, [0x1402251f8]
mov qword [rbp + 0x50], rax
lea rax, [rbp - 8]
mov qword [rbp + 0x58], rax
lea rax, [rbp - 0x10]
mov qword [rbp + 0x60], rax
lea rax, [rbp - 0x30]
mov qword [rbp + 0x68], rax
lea rax, [rbp - 0x18]
mov qword [rbp + 0x70], rax
lea rax, [rbp + 0x50]
mov qword [rbp + 0x88], rax
mov r13b, 1
mov byte [rsp + 0x60], r13b
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 7
cmova rdx, qword [rbp + 8]
lea r8, [rbp - 8]
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x38], rsi
lea r8, [rbp - 0x28]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
mov r9d, 4
mov r8d, r9d
call qword [rax + 0x40]
mov edi, eax
test eax, eax
je 0x1400440a0
mov rbx, qword [r12 + 0x28]
test rbx, rbx
je 0x1400448a6
mov rcx, qword [rbx]
mov rsi, qword [rcx + 0x20]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.140015c00
nop
cmp qword [rax + 0x18], 7
jbe 0x140044005
mov rax, qword [rax]
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 7
cmova rdx, qword [rbp + 8]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdx
lea rax, str.Error_getting_security_info_on__ls___ls
mov qword [rsp + 0x30], rax
lea rax, str.Permissions
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
mov r9d, 0x253
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
mov rcx, rbx
call rsi
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x1400448a6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400448a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044955
jmp 0x1400448a1
mov dword [rbp], esi
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
lea r9, [rbp - 0x30]
lea r8, [rbp]
mov rdx, qword [rbp - 0x28]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edi, eax
test eax, eax
je 0x14004418b
mov rbx, qword [r12 + 0x28]
test rbx, rbx
je 0x1400448a6
mov rcx, qword [rbx]
mov rsi, qword [rcx + 0x20]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.140015c00
nop
cmp qword [rax + 0x18], 7
jbe 0x1400440f0
mov rax, qword [rax]
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 7
cmova rdx, qword [rbp + 8]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdx
lea rax, str.Error_getting_ACEs_from__ls___ls
mov qword [rsp + 0x30], rax
lea rax, str.Permissions
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
mov r9d, 0x25d
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
mov rcx, rbx
call rsi
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x1400448a6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400448a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004495b
jmp 0x1400448a1
xor edx, edx
mov r9d, edx
mov dword [rsp + 0x64], edx
mov esi, edx
mov dword [rsp + 0x68], edx
lea r11, str.Permissions
cmp dword [rbp], edx
jbe 0x1400444f3
lea r15, str.Not_supporting_trustee_type__d__may_not_remove_all_ACEs_from_from__ls
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov rbx, rdx
mov qword [rbp + 0x38], rdx
mov r13d, 7
mov qword [rbp + 0x40], r13
mov word [rbp + 0x28], dx
mov edi, esi
lea r8, [rdi + rdi*2]
shl r8, 4
add r8, qword [rbp - 0x30]
cmp dword [r8 + 0x1c], 0
jne 0x140044238
mov qword [rbp - 0x20], rdx
lea rdx, [rbp - 0x20]
mov rcx, qword [r8 + 0x28]
call qword [sym.imp.ADVAPI32.dll_ConvertSidToStringSidW]
mov rdx, qword [rbp - 0x20]
test rdx, rdx
je 0x14004428d
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140044210
lea rcx, [rbp + 0x28]
call fcn.140009480
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov r13, qword [rbp + 0x40]
mov rbx, qword [rbp + 0x38]
jmp 0x14004428d
mov rcx, qword [r12 + 0x28]
test rcx, rcx
je 0x140044299
mov rax, qword [rcx]
mov r10, qword [rax + 0x20]
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 7
cmova rdx, qword [rbp + 8]
mov eax, dword [r8 + 0x20]
mov qword [rsp + 0x40], rdx
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r11
mov dword [rsp + 0x20], 2
mov r9d, 0x274
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
call r10
mov r9d, dword [rsp + 0x64]
lea r11, str.Permissions
mov rcx, r14
mov r8, qword [r14 + 0x18]
cmp r8, 7
jbe 0x1400442a9
mov rcx, qword [r14]
lea rdx, [rbp + 0x28]
mov r15, qword [rbp + 0x28]
cmp r13, 7
cmova rdx, r15
cmp rbx, qword [r14 + 0x10]
jne 0x140044487
test rbx, rbx
je 0x1400442e7
sub rdx, rcx
nop dword [rax + rax]
movzx eax, word [rcx + rdx]
cmp ax, word [rcx]
jne 0x140044487
add rcx, 2
sub rbx, 1
jne 0x1400442d0
lea rcx, [rdi + rdi*2]
add rcx, rcx
mov rax, qword [rbp - 0x30]
mov ecx, dword [rax + rcx*8 + 4]
sub ecx, 3
cmp ecx, 1
ja 0x140044487
mov rcx, qword [r12 + 0x28]
test rcx, rcx
je 0x140044370
mov rax, qword [rcx]
mov r10, qword [rax + 0x20]
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 7
cmova rdx, qword [rbp + 8]
mov rax, r14
cmp r8, 7
jbe 0x14004432d
mov rax, qword [r14]
mov qword [rsp + 0x50], rdx
mov dword [rsp + 0x48], r9d
mov dword [rsp + 0x40], esi
mov qword [rsp + 0x38], rax
lea rax, str.Removing_ACE_with_SID__ls_at_original_index__d__modified_index__d__for_object__ls
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r11
mov dword [rsp + 0x20], 4
mov r9d, 0x27d
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
call r10
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
mov r8d, dword [rsp + 0x64]
mov rdx, qword [rbp - 0x28]
call qword [rax + 0x30]
test eax, eax
jne 0x14004448b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rbx, qword [r12 + 0x28]
test rbx, rbx
je 0x140044477
mov rcx, qword [rbx]
mov rsi, qword [rcx + 0x20]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.14003dc70
nop
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 7
cmova rcx, qword [rsp + 0x70]
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 7
cmova rdx, qword [rbp + 8]
mov rax, r14
cmp qword [r14 + 0x18], 7
jbe 0x1400443e1
mov rax, qword [r14]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x40], rax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x38], eax
lea rax, str.Error_removing_ACE_at_index__u_with_SID__ls_from__ls___ls
mov qword [rsp + 0x30], rax
lea rax, str.Permissions
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
mov r9d, 0x281
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
mov rcx, rbx
call rsi
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x140044473
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004446e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004496d
call fcn.14013c1c0
mov esi, dword [rsp + 0x68]
mov rax, qword [rbp - 0x70]
test rax, rax
je 0x140044482
mov dword [rax], edi
mov byte [rsp + 0x60], 0
inc dword [rsp + 0x64]
cmp r13, 7
jbe 0x1400444c6
lea rdx, [r13*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x1400444be
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044973
mov rcx, r15
call fcn.14013c1c0
inc esi
mov dword [rsp + 0x68], esi
cmp esi, dword [rbp]
jae 0x1400444e4
mov r9d, dword [rsp + 0x64]
lea r11, str.Permissions
xor edx, edx
jmp 0x1400441aa
mov r15, qword [rbp - 0x70]
movzx r13d, byte [rsp + 0x60]
movzx ebx, byte [rsp + 0x61]
mov rcx, r14
cmp qword [r14 + 0x18], 7
jbe 0x140044500
mov rcx, qword [r14]
lea rdx, [rbp - 0x18]
call qword [sym.imp.ADVAPI32.dll_ConvertStringSidToSidW]
test eax, eax
jne 0x1400445e3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rbx, qword [r12 + 0x28]
test rbx, rbx
je 0x1400448a6
mov rcx, qword [rbx]
mov rsi, qword [rcx + 0x20]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.14003dc70
nop
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 7
cmova rcx, qword [rsp + 0x70]
cmp qword [r14 + 0x18], 7
jbe 0x140044556
mov r14, qword [r14]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], r14
lea rax, str.Error_converting_SID__ls_to_a_structure___ls
mov qword [rsp + 0x30], rax
lea rax, str.Permissions
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
mov r9d, 0x296
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
mov rcx, rbx
call rsi
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x1400448a6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400448a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044961
jmp 0x1400448a1
neg bl
sbb ebx, ebx
and ebx, 3
mov r10, qword [r14 + 0x10]
mov rdx, r14
cmp qword [r14 + 0x18], 7
jbe 0x1400445fb
mov rdx, qword [r14]
xor esi, esi
movabs r9, 0xcbf29ce484222325
mov ecx, esi
add r10, r10
je 0x140044633
movabs r8, 0x100000001b3
nop dword [rax + rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r8
inc rcx
cmp rcx, r10
jb 0x140044620
mov r8, r14
lea rdx, [rbp - 0x70]
lea rcx, [r12 + 0x40]
call fcn.1400460b0
mov rcx, qword [rax + 8]
test rcx, rcx
jne 0x140044652
mov rcx, qword [r12 + 0x48]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x54], xmm0
mov dword [rbp - 0x3c], esi
mov dword [rbp - 0x60], 0x10000000
mov dword [rbp - 0x5c], 1
mov dword [rbp - 0x58], ebx
mov dword [rbp - 0x44], esi
mov eax, 5
cmp rcx, qword [r12 + 0x48]
cmove eax, esi
mov dword [rbp - 0x40], eax
mov rax, qword [rbp - 0x18]
mov qword [rbp - 0x38], rax
movups xmm0, xmmword [rbp - 0x60]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rbp - 0x50]
movups xmmword [rbp + 0xa0], xmm1
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rbp + 0xb0], xmm0
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x20], rdx
mov r9, qword [rbp - 0x28]
lea r8, [rbp + 0x90]
mov edx, 1
call qword [rax + 0x38]
mov edi, eax
test eax, eax
je 0x14004479f
mov rbx, qword [r12 + 0x28]
test rbx, rbx
je 0x1400448a6
mov rcx, qword [rbx]
mov rsi, qword [rcx + 0x20]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.140015c00
nop
cmp qword [rax + 0x18], 7
jbe 0x140044704
mov rax, qword [rax]
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 7
cmova rdx, qword [rbp + 8]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdx
lea rax, str.Error_setting_entries_in_ACL_for__ls___ls
mov qword [rsp + 0x30], rax
lea rax, str.Permissions
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 2
mov r9d, 0x2b2
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
mov rcx, rbx
call rsi
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x1400448a6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400448a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044967
jmp 0x1400448a1
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 7
cmova rdx, qword [rbp + 8]
mov qword [rsp + 0x38], rsi
mov rax, qword [rbp - 0x10]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
mov r9d, 4
mov r8d, r9d
call r10
mov edi, eax
test eax, eax
je 0x1400448b3
mov rbx, qword [r12 + 0x28]
test rbx, rbx
je 0x1400448a6
mov rcx, qword [rbx]
mov rsi, qword [rcx + 0x20]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.140015c00
nop
cmp qword [rax + 0x18], 7
jbe 0x140044813
mov rax, qword [rax]
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 7
cmova rdx, qword [rbp + 8]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdx
lea rax, str.Error_setting_the_DACL_on__ls___ls
mov qword [rsp + 0x30], rax
lea rax, str.Permissions
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
mov r9d, 0x2bc
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonPermissions.cpp
lea rdx, str.mb::common::system::Permissions::ResetRegKeyDACLForSID
mov rcx, rbx
call rsi
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x1400448a6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400448a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044979
call fcn.14013c1c0
test r15, r15
je 0x1400448ae
mov dword [r15], edi
xor r13b, r13b
xor esi, esi
mov rcx, qword [rbp + 0x88]
test rcx, rcx
je 0x14004497f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x88]
test rcx, rcx
je 0x1400448ec
mov rax, qword [rcx]
lea rdx, [rbp + 0x50]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov qword [rbp + 0x88], rsi
mov rdx, qword [rbp + 0x20]
cmp rdx, 7
jbe 0x140044928
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140044923
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004494f
call fcn.14013c1c0
movzx eax, r13b
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.14013c1a0
add rsp, 0x1d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14014b94c
nop
call fcn.14014b94c
nop
call fcn.14014b94c
int3
call fcn.14014b94c
int3
call fcn.14014b94c
nop
call fcn.14014b94c
nop
call fcn.14014b94c
int3
call fcn.14014b94c
nop
call fcn.14013ad88
int3