Function at 0x14007267c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0xd5b0
call fcn.1400e6ce0
sub rsp, rax
mov rdi, rcx
lea rcx, [rsp + 0xd5f8]
call fcn.14004ea3c
mov rax, qword [rsp + 0xd5f8]
xor r13d, r13d
cmp word [rax], r13w
jne 0x1400726cb
xor eax, eax
jmp 0x1400732dc
lea rdx, [0x1400e94a4]
lea rcx, [rsp + 0x58]
call fcn.14006016c
lea rdx, [0x1400e94a4]
lea rcx, [rsp + 0x50]
call fcn.14006016c
mov r11, qword [rsp + 0xd5f8]
mov r12d, 0x20
lea esi, [r12 - 0x1f]
mov byte [rsp + 0x45], r13b
mov r14b, r12b
mov byte [rsp + 0xd608], r13b
mov dword [rsp + 0x40], 0xff000000
lea r15d, [r12 - 0x1e]
lea ebp, [rsi + 3]
cmp word [r11], r13w
je 0x140072928
lea ebx, [rsi + 8]
lea rdx, [rsp + 0xd5f8]
lea rcx, [0x1400ecd78]
mov r8d, r15d
call fcn.140058710
cmp al, r13b
je 0x140072753
mov byte [rsp + 0x45], sil
jmp 0x140072916
lea rdx, [rsp + 0xd5f8]
lea rcx, [0x1400eca28]
mov r8d, r15d
call fcn.140058710
cmp al, r13b
je 0x140072777
mov r14b, r15b
jmp 0x140072916
lea rdx, [rsp + 0xd5f8]
lea rcx, str._udm
mov r8d, ebp
call fcn.140058710
cmp al, r13b
je 0x14007279b
mov r14b, 0x40
jmp 0x140072916
lea rdx, [rsp + 0xd5f8]
lea rcx, [0x1400f3754]
mov r8d, r15d
call fcn.140058710
cmp al, r13b
je 0x1400727bf
mov r14b, sil
jmp 0x140072916
lea rdx, [rsp + 0xd5f8]
lea rcx, [0x1400ef704]
mov r8d, r15d
call fcn.140058710
cmp al, r13b
je 0x1400727e3
mov r14b, 0x10
jmp 0x140072916
lea rdx, [rsp + 0xd5f8]
lea rcx, str._bin
mov r8d, ebp
call fcn.140058710
cmp al, r13b
je 0x140072814
add qword [rsp + 0xd5f8], rbp
mov byte [rsp + 0xd608], sil
jmp 0x140072909
mov r11, qword [rsp + 0xd5f8]
lea rcx, str._src
mov r8d, ebp
mov rdx, r11
call fcn.14004fdfc
cmp al, r13b
je 0x14007289a
add r11, 8
mov qword [rsp + 0xd5f8], r11
cmp bx, word [r11]
ja 0x14007284c
cmp word [r11], 0xd
jbe 0x140072852
cmp r12w, word [r11]
jne 0x14007285f
mov dword [rsp + 0x40], 5
jmp 0x14007291e
mov eax, 0x3a
cmp ax, word [r11]
jne 0x14007291e
add r11, r15
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xd5f8]
mov dword [rsp + 0x40], r13d
mov qword [rsp + 0xd5f8], r11
call fcn.1400640cc
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x40], eax
jmp 0x140072916
lea rdx, [rsp + 0xd5f8]
lea rcx, [0x1400e9ebc]
mov r8d, r15d
call fcn.140058710
mov r11, qword [rsp + 0xd5f8]
cmp al, r13b
jne 0x140072928
lea rcx, [0x1400ea6f0]
mov r8d, esi
mov rdx, r11
call fcn.14004fda0
cmp al, r13b
jne 0x140072928
movzx eax, word [r11]
mov ecx, 0x2d
cmp cx, ax
jne 0x140072928
cmp bx, ax
ja 0x1400728ee
cmp ax, 0xd
jbe 0x140072909
cmp r12w, ax
je 0x140072909
add r11, r15
mov qword [rsp + 0xd5f8], r11
mov ax, word [r11]
cmp ax, r13w
jne 0x1400728e3
lea rcx, [rsp + 0xd5f8]
call fcn.14004ea3c
mov r11, qword [rsp + 0xd5f8]
cmp word [r11], r13w
jne 0x14007272d
mov eax, 0x22
mov qword [rsp + 0x120], r11
lea ebx, [rax + 0xa]
cmp ax, word [r11]
jne 0x140072984
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0xd5f8]
mov r9d, ebx
mov rcx, rdi
mov word [rsp + 0x20], r13w
call fcn.140048704
mov r12, qword [rsp + 0x58]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0xd5f8]
mov r9d, ebx
mov rcx, rdi
mov word [rsp + 0x20], r13w
call fcn.140048704
jmp 0x140072a3b
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0xd5f8]
mov r8d, ebx
call fcn.140059810
mov rax, qword [rsp + 0xd5f8]
mov r12, qword [rsp + 0x58]
cmp word [rax], bx
jne 0x1400729da
add rax, r15
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xd5f8]
mov r8d, ebx
mov qword [rsp + 0xd5f8], rax
call fcn.140059810
mov rcx, qword [rsp + 0x50]
call fcn.1400188a8
mov r15, rax
jmp 0x140072a40
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x120]
mov r8d, esi
mov qword [rsp + 0x68], r13
call fcn.1400236d0
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x120]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x60], rax
call fcn.140056234
mov r12, qword [rsp + 0x58]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x60]
xor r8d, r8d
call fcn.1400236d0
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.140056234
mov r15, qword [rsp + 0x50]
mov qword [rsp + 0x70], r15
cmp word [r15], r13w
je 0x1400732c1
cmp word [r12], r13w
je 0x1400732c1
lea rcx, [0x1400f3740]
mov rdx, r12
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
cmp eax, r13d
sete byte [rsp + 0x44]
mov edx, r13d
cmp r14b, 2
je 0x140072adc
xor ecx, ecx
call fcn.1400d15f4
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
add edi, eax
call fcn.1400512e8
mov ecx, dword [0x140107e3c]
add edi, eax
mov edx, ecx
shl edx, 4
add edx, edi
xor ecx, edx
mov eax, edx
mov dword [rsp + 0x48], edx
and eax, 3
mov dword [0x140107e3c], ecx
cmp al, 3
jne 0x140072a7b
mov al, byte [rsp + 0x49]
test al, 0xf0
je 0x140072a7b
test al, 0xf
je 0x140072a7b
mov al, byte [rsp + 0x4a]
test al, 0xf0
je 0x140072a7b
test al, 0xf
je 0x140072a7b
mov al, byte [rsp + 0x4b]
test al, 0xf
je 0x140072a7b
and al, 0x88
cmp al, 0x80
jne 0x140072a7b
cmp r14b, 0x10
je 0x14007304e
mov ebx, edx
and ebx, 0xfffffff
cmp edx, r13d
je 0x140072af9
xor edx, 0x5aa59669
mov dword [rsp + 0x48], edx
mov ax, r13w
cmp r14b, 0x20
jne 0x140072b0c
mov eax, 0x14
cmp r14b, 0x40
jne 0x140072b17
mov eax, 0x18
xor dx, ax
mov word [rsp + 0x48], dx
cmp ax, r13w
je 0x140072b2f
cmp dx, r13w
je 0x140072a72
lea rdi, [0x1400f26f0]
lea rcx, [rsp + 0x80]
xor edx, edx
mov qword [rsp + 0x78], rdi
call fcn.14005a3e0
lea rcx, [rsp + 0xb8]
xor edx, edx
mov dword [rsp + 0xa8], r13d
mov qword [rsp + 0xb0], rdi
call fcn.14005a3e0
mov eax, 0x26
mov ebp, r13d
cmp ax, word [r12]
mov dword [rsp + 0xe0], ebx
lea r13d, [rax - 0x1f]
sete r15b
xor edi, edi
cmp r15b, dil
je 0x140072c10
mov rcx, qword [rsp + 0xd5f0]
or r9d, 0xffffffff
xor r8d, r8d
mov rdx, r12
mov qword [rsp + 0x20], rdi
call fcn.140015a64
mov r12, rax
cmp rax, rdi
je 0x140072da7
mov rbp, qword [rax + 0x18]
lea rcx, [rsp + 0x88]
shr rbp, 1
lea eax, [rbp + 0xc]
lea ebx, [rbp + rbp]
movsxd rdx, eax
call fcn.1400560cc
mov rdi, qword [rsp + 0x88]
mov rdx, qword [r12 + 8]
movsxd rbx, ebx
mov rcx, rdi
mov r8, rbx
call fcn.14001a4c0
lea rcx, [rbx + rdi]
lea r8d, [r13 + 3]
xor edx, edx
call fcn.1400cc8d0
movsxd r11, ebp
add r11, r11
mov qword [rsp + 0x98], r11
jmp 0x140072c26
cmp byte [rsp + 0x44], dil
je 0x140072c2b
mov rax, qword [0x1401042e0]
mov qword [rsp + 0x80], rax
xor r12d, r12d
jmp 0x140072c9a
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], 0x80
lea rcx, [rsp + 0x80]
mov r9d, r13d
mov r8d, esi
mov rdx, r12
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rdi
call fcn.140003590
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r8, qword [rsp + 0x80]
lea rdx, str.infile0x_p_0x_p_bstin_d_r_n
lea rcx, [0x140106ec0]
xor r12d, r12d
mov r9, rax
mov dword [rsp + 0x20], r12d
call fcn.140015e80
cmp qword [rsp + 0x80], r12
je 0x140072dae
mov rdx, qword [rsp + 0x70]
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], 0x80
lea rcx, [rsp + 0xb8]
mov r9d, r13d
mov r8d, 0x40000001
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], r12
call fcn.140003590
cmp qword [rsp + 0xb8], r12
je 0x140072dae
lea rcx, [rsp + 0x160]
xor r8d, r8d
xor edx, edx
mov byte [rsp + 0xd8], sil
call fcn.14004f3f0
lea rax, [rsp + 0xb0]
lea rcx, [rsp + 0x78]
mov qword [rsp + 0xd5a0], rax
mov al, 0x53
mov qword [rsp + 0xd598], rcx
cmp r14b, 0x20
jne 0x140072d21
mov dil, 0x61
jmp 0x140072d30
movzx edi, al
cmp r14b, 0x40
mov eax, 0x4d
cmove edi, eax
lea rcx, [rsp + 0x60]
call fcn.140055fcc
mov ebx, dword [rsp + 0x40]
cmp ebx, r12d
jge 0x140072d4d
cmp dil, 0x53
je 0x140072e42
cmp byte [rsp + 0xd608], r12b
jne 0x140072e42
cmp r15b, r12b
jne 0x140072d98
mov rcx, qword [rsp + 0x80]
lea rdx, [rsp + 0x88]
call fcn.14005a594
mov rcx, qword [rsp + 0x80]
mov ebp, eax
cmp rcx, r12
je 0x140072d90
cmp rcx, 0xffffffffffffffff
je 0x140072d90
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x80], r12
cmp ebp, r12d
jg 0x140072ddc
lea rcx, [rsp + 0x60]
call fcn.14004ea6c
mov rsi, 0xffffffff80070057
lea rbx, [0x1400f26f0]
lea rcx, [rsp + 0xb8]
mov qword [rsp + 0xb0], rbx
call fcn.14005a43c
mov qword [rsp + 0x78], rbx
lea rcx, [rsp + 0x80]
jmp 0x1400731c8
cmp r15b, r12b
jne 0x140072e10
cmp ebp, esi
jle 0x140072e10
mov rcx, qword [rsp + 0x88]
lea rdx, [rcx + 2]
cmp word [rdx], 0x7f
ja 0x140072e18
cmp r14b, 0x20
je 0x140072e03
cmp r14b, 0x40
jne 0x140072e18
movsxd r8, ebp
add r8, r8
call fcn.14001a478
dec ebp
mov rcx, qword [rsp + 0x88]
cmp ebx, r12d
mov eax, 5
cmovl ebx, eax
cmp r15b, r12b
jne 0x140072e34
mov r8d, ebx
mov edx, ebp
call fcn.140064778
mov ebp, eax
movsxd rax, ebp
add rax, rax
mov qword [rsp + 0x98], rax
lea rbx, [0x1400f1350]
mov al, byte [rbx]
add dword [rsp + 0xe4], esi
lea rdx, [rsp + 0xd608]
lea rcx, [rsp + 0xb8]
mov r8d, esi
mov byte [rsp + 0xd608], al
call fcn.14005227c
add rbx, rsi
sub r13, rsi
jne 0x140072e49
add dword [rsp + 0xe4], esi
lea rdx, [rsp + 0xd608]
lea rcx, [rsp + 0xb8]
mov r8d, esi
mov byte [rsp + 0xd608], dil
call fcn.14005227c
lea ebp, [r13 + 4]
lea rbx, [rsp + 0x48]
lea ecx, [rbp + 4]
mov rdi, rbp
mov al, byte [rbx]
add ecx, esi
lea rdx, [rsp + 0xd608]
mov dword [rsp + 0xe4], ecx
lea rcx, [rsp + 0xb8]
mov r8d, esi
mov byte [rsp + 0xd608], al
call fcn.14005227c
add rbx, rsi
sub rdi, rsi
je 0x140072eea
mov ecx, dword [rsp + 0xe4]
jmp 0x140072eaf
mov dword [rsp + 0xe4], 0xc
mov byte [rsp + 0x115a], r12b
mov byte [rsp + 0x115b], r12b
mov byte [rsp + 0x115c], r12b
mov byte [rsp + 0x115d], r12b
movzx edi, r12w
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0xd608]
lea rcx, [rsp + 0x80]
mov r8d, esi
mov byte [rsp + 0xd608], r12b
mov dword [rsp + 0x40], r12d
call fcn.1400522d4
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp ebx, r12d
je 0x140072f60
cmp dword [rsp + 0x40], esi
jb 0x140072f60
movzx ecx, byte [rsp + 0xd608]
jmp 0x140072f63
or ecx, 0xffffffff
cmp ecx, 0xffffffff
je 0x140072f83
movsx rax, di
add di, si
mov byte [rsp + rax + 0x115a], cl
add byte [rsp + 0x117d], sil
cmp di, bp
jl 0x140072f19
mov dil, byte [rsp + 0x45]
lea rbx, [rsp + 0x115a]
cmp dil, r12b
je 0x140072fa0
mov al, byte [rbx]
mov byte [rsp + 0xd608], al
jmp 0x140072fa8
mov byte [rsp + 0xd608], r12b
add dword [rsp + 0xe4], esi
lea rdx, [rsp + 0xd608]
lea rcx, [rsp + 0xb8]
mov r8d, esi
call fcn.14005227c
add rbx, rsi
sub rbp, rsi
jne 0x140072f90
xor ecx, ecx
mov dword [rsp + 0xe4], 0x10
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rcx, [rsp + 0x160]
call fcn.14004f6e4
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov r11, qword [rsp + 0x80]
cmp byte [rsp + 0x44], r12b
cmovne r11, r12
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x80], r11
call fcn.14004ea6c
lea rbx, [0x1400f26f0]
lea rcx, [rsp + 0xb8]
mov qword [rsp + 0xb0], rbx
call fcn.14005a43c
mov qword [rsp + 0x78], rbx
lea rcx, [rsp + 0x80]
jmp 0x1400732a3
lea r14, [0x1400f2710]
lea rcx, [rsp + 0xf0]
xor edx, edx
mov qword [rsp + 0xe8], r14
mov dword [rsp + 0x48], r13d
call fcn.14005a3e0
lea rcx, [rsp + 0x130]
xor edx, edx
mov dword [rsp + 0x118], r13d
mov qword [rsp + 0x128], r14
call fcn.14005a3e0
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0x80
mov dword [rsp + 0x158], r13d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r13
mov r13d, 7
lea rcx, [rsp + 0xf0]
mov r8d, esi
mov rdx, r12
mov r9d, r13d
call fcn.140003590
xor edi, edi
cmp qword [rsp + 0xf0], rdi
je 0x1400731a3
lea ebx, [rdi + 8]
add dword [rsp + 0x11c], esi
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0xd608]
lea rcx, [rsp + 0xf0]
mov r8d, esi
call fcn.1400522d4
sub rbx, rsi
jne 0x1400730e1
mov rbx, rdi
add dword [rsp + 0x11c], esi
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0xd608]
lea rcx, [rsp + 0xf0]
mov r8d, esi
mov byte [rsp + 0xd608], dil
mov dword [rsp + 0x40], edi
call fcn.1400522d4
cmp eax, edi
je 0x140073151
cmp dword [rsp + 0x40], esi
jb 0x140073151
movzx eax, byte [rsp + 0xd608]
jmp 0x140073154
or eax, 0xffffffff
mov byte [rsp + rbx + 0x48], al
add rbx, rsi
cmp rbx, rbp
jl 0x14007310d
lea rcx, [rsp + 0x130]
cmp dword [rsp + 0x48], edi
jne 0x1400731ab
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], 0x80
mov r9d, r13d
mov r8d, 0x40000001
mov rdx, r15
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rdi
call fcn.140003590
cmp qword [rsp + 0x130], rdi
jne 0x1400731e9
lea rcx, [rsp + 0x130]
mov qword [rsp + 0x128], r14
call fcn.14005a43c
mov qword [rsp + 0xe8], r14
lea rcx, [rsp + 0xf0]
call fcn.14005a43c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
mov rax, rsi
jmp 0x1400732dc
lea rcx, [rsp + 0x160]
xor r8d, r8d
xor edx, edx
mov byte [rsp + 0x150], sil
call fcn.14004f3f0
lea rax, [rsp + 0x128]
mov qword [rsp + 0xd5a0], rax
mov eax, dword [rsp + 0x118]
lea rcx, [rsp + 0xe8]
mov qword [rsp + 0xd598], rcx
cmp eax, edi
je 0x14007323a
xor eax, 0x5aa59669
mov dword [rsp + 0x118], eax
add dword [rsp + 0x11c], esi
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0xd608]
lea rcx, [rsp + 0xf0]
mov r8d, esi
call fcn.1400522d4
sub rbp, rsi
jne 0x14007323a
lea rcx, [rsp + 0x160]
call fcn.14004fa10
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
lea rcx, [rsp + 0x130]
mov qword [rsp + 0x128], r14
call fcn.14005a43c
mov qword [rsp + 0xe8], r14
lea rcx, [rsp + 0xf0]
call fcn.14005a43c
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
jmp 0x1400726c4
lea rcx, [rsp + 0x50]
call fcn.14004ea6c
lea rcx, [rsp + 0x58]
call fcn.14004ea6c
mov rax, 0xffffffff80070057
mov rbx, qword [rsp + 0xd600]
add rsp, 0xd5b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret