Function at 0x140003268
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x17b4f2e0
mov ecx, eax
mov byte [rsp + 0xdb], 0x29
mov dx, word [rsp + 0x52]
sub dx, 0xba11
mov r8w, word [rsp + 0xd6]
mov word [rsp + 0xd8], dx
mov r9, qword [rsp + 0xc0]
xor r8w, 0xa34f
mov eax, dword [rsp + 0x54]
or eax, eax
mov r10, qword [rsp + 0x58]
mov dx, word [r10 + r9*2]
mov dword [rsp + 0xdc], eax
mov r9, qword [rsp + 0x48]
sub rcx, r9
mov qword [rsp + 0xe0], rcx
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0xc8], rcx
mov r11w, word [rsp + 0x52]
xor r11w, 0x933e
mov word [rsp + 0xd8], r11w
cmp dx, r8w
je 0x1400030d4
mov eax, dword [rsp + 0x54]
add eax, eax
mov dword [rsp + 0xdc], eax
mov eax, dword [rsp + 0x54]
imul ecx, eax, 0x3a743d44
mov rdx, qword [rsp + 0x90]
mov dword [rsp + 0xdc], ecx
mov rdx, qword [rdx]
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0xc8], 0
mov r8, qword [rsp + 0x30]
cmp rdx, r8
je 0x1400030d4
jmp 0x140002f1a
mov rax, qword [rsp + 0x48]
xor rax, 0x7404791c
mov ecx, dword [rsp + 0xb0]
mov edx, dword [rsp + 0x7c]
mov r8d, dword [rsp + 0x7c]
mov r9, qword [rsp + 0x70]
mov qword [rsp + 0xe0], rax
mov dword [rsp + 0xb8], r8d
add byte [rcx + rcx*4 - 0x74], cl
and al, 0xc8
add byte [rax], al
add byte [rcx], bh
retf 0x820f
invalid
add eax, dword [rax]
invalid
jmp 0x1400030d4
mov eax, 0x4821884b
mov rcx, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x48]
xor rdx, 0x631fb5aa
mov qword [rsp + 0xe0], rdx
mov qword [rsp + 0x90], rcx
mov rcx, qword [rsp + 0x90]
mov rcx, qword [rcx + 0x20]
mov r8d, dword [rsp + 0xd0]
mov r9d, dword [rsp + 0xd0]
mov ecx, dword [rsp + 0xd0]
add r9d, 0xff811473
sub eax, r8d
mov r10w, word [rsp + 0x52]
or r10w, r10w
mov word [rsp + 0xd8], r10w
mov qword [rsp + 0x70], rcx
mov r10w, word [rsp + 0x52]
mov word [rsp + 0xd8], r10w
mov al, byte [rsp + 0x3f]
add al, 0x88
mov byte [rsp + 0xdb], al
mov rax, qword [rsp + 0xc8]
add rsp, 0xf0
pop rdi
pop rbx
pop rsi
ret
mov eax, 0xfb6c3ca
mov rcx, qword [rsp + 0x48]
and rcx, 0x7c9ac9f4
mov qword [rsp + 0xe0], rcx
mov dx, word [rsp + 0xae]
mov r8w, word [rsp + 0x6e]
mov r8d, dword [rsp + 0x6e]
mov rcx, qword [rsp + 0x48]
sub rcx, 0x732b9cb
mov qword [rsp + 0xe0], rcx
mov r9d, dword [rsp + 0xd0]
mov qword [rsp + 0xe0], 0x6fb172d8
sub eax, r9d
mov byte [rsp + 0xdb], 0xf5
mov r10w, word [rsp + 0x52]
and r10w, 0xcee8
add eax, dword [rsp + 0xa8]
mov word [rsp + 0xd8], r10w
mov dword [rsp + 0x7c], eax
cmp r8w, dx
je 0x140002ed5
jmp 0x140002e88
mov al, byte [rsp + 0x3f]
mov byte [rsp + 0xdb], al
mov cx, word [rsp + 0x52]
xor cx, 0x3aee
movzx edx, word [rsp + 0x9e]
mov word [rsp + 0x24], cx
mov ecx, edx
call sym.TAPI32.dll_lineGetProviderListA
mov r8w, word [rsp + 0x24]
mov word [rsp + 0xd8], r8w
mov word [rsp + 0xae], ax
mov r9, qword [rsp + 0x80]
mov r10, qword [rsp + 0xc0]
mov r11, qword [rsp + 0xe8]
mov dword [rsp + 0xdc], 0x73ccf073
mov rsi, qword [rsp + 0x58]
mov ax, word [rsi + r10*2]
add r11, 0x42d0d7e6
mov word [rsp + 0x6e], ax
mov dword [rsp + 0x6e], eax
mov dword [rsp + 0x6e], eax
cmp r11, r9
jbe 0x1400031b7
jmp 0x14000312e
mov eax, dword [rsp + 0xb8]
mov dword [rsp + 0xa8], eax
mov cx, word [rsp + 0x52]
imul cx, cx
mov eax, dword [rsp + 0xa8]
mov edx, eax
mov r8w, word [rsp + 0xd6]
add r8w, 0x5cb1
pop rsp
mov word [rsp + 0xd8], cx
mov qword [rsp + 0xc0], rdx
mov cx, word [rsp + 0x52]
and cx, cx
mov rdx, qword [rsp + 0xa0]
mov word [rsp + 0xd8], cx
and al, 0xd8
add byte [rax], al
add byte [rbx + rcx*4 - 0x74], cl
and al, 0xc0
add byte [rax], al
add byte [rdx + rcx*4 + 0x54], al
and al, 0x3f
or r10b, 0xc5
mov byte [rsp + 0xdb], r10b
mov r11, qword [rsp + 0x48]
pop rsp
and al, 0x48
mov qword [rsp + 0xe0], r11
mov cx, word [rsp + 0x52]
and cx, 0x389d
mov si, word [rdx + r9*2]
mov word [rsp + 0xd8], cx
mov word [rsp + 0x9e], si
mov cx, word [rsp + 0x9e]
mov r10b, byte [rsp + 0x3f]
mov byte [rsp + 0xdb], r10b
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0xdc], eax
cmp cx, r8w
je 0x140002dfd
jmp 0x1400031b7