Function at 0x14000a540
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xa0
mov rbx, rcx
lea rcx, [rbp + 0x6f]
call fcn.14000a260
mov rdx, rax
mov rcx, rbx
call fcn.140001930
lea rdx, str.___:___
mov rcx, rbx
call fcn.140001930
xor r12d, r12d
lea r9, [rbp - 0x31]
xor r8d, r8d
mov qword [rbp - 0x31], r12
xor edx, edx
xor ecx, ecx
call sub.WinSCard.dll_SCardEstablishContext
mov edi, eax
test eax, eax
jne 0x14000aaea
mov rcx, qword [rbp - 0x31]
lea r9, [rbp + 0x77]
or dword [rbp + 0x77], 0xffffffff
lea r8, [rbp - 0x21]
xor edx, edx
mov qword [rbp - 0x21], r12
call sub.WinSCard.dll_SCardListReadersW
lea esi, [r12 + 0x12]
mov edi, eax
lea rcx, [rbp + 0x6f]
test eax, eax
jne 0x14000a959
call fcn.14000a088
mov rdx, rax
mov rcx, rbx
call fcn.140001930
mov r14, qword [rbp - 0x21]
mov r15d, r12d
cmp word [r14], r12w
je 0x14000a948
lea edi, [rsi + 0x2e]
test r15d, r15d
je 0x14000a604
lea rdx, [0x14001b470]
mov rcx, rbx
call fcn.140001930
lea rdx, [0x14001b464]
mov rcx, rbx
call fcn.140001930
lea rdx, str._name_:__
mov rcx, rbx
call fcn.140001930
mov rdx, r14
mov rcx, rbx
call fcn.140001984
lea rdx, [0x14001b6d8]
mov rcx, rbx
call fcn.140001930
mov r8, rdi
lea rcx, [rbp - 0x19]
xor edx, edx
call fcn.1400023d8
mov rcx, qword [rbp - 0x31]
lea r8, [rbp - 0x19]
mov r9d, 1
mov qword [rbp - 0x19], r14
xor edx, edx
call sub.WinSCard.dll_SCardGetStatusChangeW
mov edi, eax
test eax, eax
jne 0x14000a8e4
mov r8d, dword [rbp - 5]
lea rdx, str.__state_:__d
mov rcx, rbx
call fcn.140001a10
lea ecx, [rdi + 0x14]
mov dword [rbp - 0x49], 0x30003e
mov dword [rbp - 0x45], 0x460053
mov dword [rbp - 0x41], 0x300040
mov dword [rbp - 0x3d], 0x320028
mov dword [rbp - 0x39], 0x120030
call fcn.140002534
lea r9, [rbp - 0x49]
mov rdx, rax
sub r9, rax
lea r8d, [rdi + 0xa]
movzx ecx, word [r9 + rdx]
xor cx, si
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x14000a6b9
mov rdx, rax
mov rcx, rbx
call fcn.140001930
mov esi, r12d
cmp dword [rbp - 1], r12d
jbe 0x14000a703
lea rdi, [rbp + 3]
movzx r8d, byte [rdi]
lea rdx, str._02X
mov rcx, rbx
call fcn.140001a10
inc esi
inc rdi
cmp esi, dword [rbp - 1]
jb 0x14000a6e6
lea rdx, [0x14001b6d8]
mov rcx, rbx
call fcn.140001930
cmp dword [rbp - 1], r12d
je 0x14000a86e
mov rcx, qword [rbp - 0x31]
lea rax, [rbp + 0x7f]
or dword [rbp + 0x7f], 0xffffffff
lea rdx, [rbp + 3]
mov qword [rsp + 0x28], rax
xor r9d, r9d
lea rax, [rbp - 0x29]
mov qword [rbp - 0x29], r12
xor r8d, r8d
mov qword [rsp + 0x20], rax
call sub.WinSCard.dll_SCardListCardsW
mov edi, eax
test eax, eax
jne 0x14000a837
lea ecx, [rax + 0x18]
mov dword [rbp - 0x49], 0x30003e
mov dword [rbp - 0x45], 0x730071
lea edi, [rax + 0x12]
mov dword [rbp - 0x41], 0x760060
mov dword [rbp - 0x3d], 0x300061
mov dword [rbp - 0x39], 0x320028
mov dword [rbp - 0x35], 0x120049
call fcn.140002534
lea r9, [rbp - 0x49]
mov rdx, rax
sub r9, rax
lea r8d, [rdi - 6]
movzx ecx, word [r9 + rdx]
xor cx, di
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x14000a796
mov rdx, rax
mov rcx, rbx
call fcn.140001930
mov rdi, qword [rbp - 0x29]
mov esi, r12d
jmp 0x14000a80b
test esi, esi
je 0x14000a7d2
lea rdx, [0x14001b470]
mov rcx, rbx
call fcn.140001930
lea rdx, [0x14001b6d8]
mov rcx, rbx
call fcn.140001930
mov rdx, rdi
mov rcx, rbx
call fcn.140001984
lea rdx, [0x14001b6d8]
mov rcx, rbx
call fcn.140001930
mov rcx, rdi
call fcn.140007b54
inc eax
inc esi
lea rdi, [rdi + rax*2]
cmp word [rdi], r12w
jne 0x14000a7bf
lea rdx, [0x14001b6f0]
mov rcx, rbx
call fcn.140001930
mov rdx, qword [rbp - 0x29]
mov rcx, qword [rbp - 0x31]
call sub.WinSCard.dll_SCardFreeMemory
mov esi, 0x12
jmp 0x14000a919
lea rcx, [rbp + 0x6f]
call fcn.14000a1b0
mov rdx, rax
mov rcx, rbx
call fcn.140001930
lea rdx, str.__error_:
mov rcx, rbx
call fcn.140001930
mov r8d, edi
lea rdx, [0x14001be20]
mov rcx, rbx
call fcn.140001a10
jmp 0x14000a82d
mov esi, 0x12
mov dword [rbp - 0x49], 0x30003e
mov dword [rbp - 0x45], 0x730071
mov dword [rbp - 0x41], 0x760060
mov dword [rbp - 0x3d], 0x300061
lea ecx, [rsi + 6]
mov dword [rbp - 0x39], 0x320028
mov dword [rbp - 0x35], 0x120049
call fcn.140002534
lea r9, [rbp - 0x49]
mov rdx, rax
sub r9, rax
lea r8d, [rsi - 6]
movzx ecx, word [r9 + rdx]
xor cx, si
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x14000a8b3
mov rdx, rax
mov rcx, rbx
call fcn.140001930
lea rdx, [0x14001b6f0]
mov rcx, rbx
call fcn.140001930
jmp 0x14000a919
lea rcx, [rbp + 0x6f]
call fcn.14000a3b0
mov rdx, rax
mov rcx, rbx
call fcn.140001930
lea rdx, str.__error_:
mov rcx, rbx
call fcn.140001930
mov r8d, edi
lea rdx, [0x14001be20]
mov rcx, rbx
call fcn.140001a10
lea rdx, [0x14001b474]
mov rcx, rbx
call fcn.140001930
mov rcx, r14
call fcn.140007b54
inc eax
inc r15d
mov edi, 0x40
lea r14, [r14 + rax*2]
cmp word [r14], r12w
jne 0x14000a5f0
lea rdx, [0x14001b6f0]
mov rcx, rbx
call fcn.140001930
jmp 0x14000a98a
call fcn.14000a480
mov rdx, rax
mov rcx, rbx
call fcn.140001930
lea rdx, str.__error_:
mov rcx, rbx
call fcn.140001930
mov r8d, edi
lea rdx, [0x14001be20]
mov rcx, rbx
call fcn.140001a10
lea rdx, str.__introduced_:
mov rcx, rbx
call fcn.140001930
mov rcx, qword [rbp - 0x31]
lea rax, [rbp + 0x7f]
or dword [rbp + 0x7f], 0xffffffff
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
lea rax, [rbp - 0x29]
mov qword [rbp - 0x29], r12
xor edx, edx
mov qword [rsp + 0x20], rax
call sub.WinSCard.dll_SCardListCardsW
mov edi, eax
test eax, eax
jne 0x14000aaa4
lea ecx, [rax + 0x16]
mov dword [rbp - 0x49], 0x710030
mov dword [rbp - 0x45], 0x600073
mov dword [rbp - 0x41], 0x610076
mov dword [rbp - 0x3d], 0x280030
mov dword [rbp - 0x39], 0x490032
mov word [rbp - 0x35], si
call fcn.140002534
lea r9, [rbp - 0x49]
mov rdx, rax
sub r9, rax
lea r8d, [rdi + 0xb]
movzx ecx, word [r9 + rdx]
xor cx, si
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r8, 1
jne 0x14000aa0b
mov rdx, rax
mov rcx, rbx
call fcn.140001930
mov rdi, qword [rbp - 0x29]
mov esi, r12d
jmp 0x14000aa80
test esi, esi
je 0x14000aa47
lea rdx, [0x14001b470]
mov rcx, rbx
call fcn.140001930
lea rdx, [0x14001b6d8]
mov rcx, rbx
call fcn.140001930
mov rdx, rdi
mov rcx, rbx
call fcn.140001984
lea rdx, [0x14001b6d8]
mov rcx, rbx
call fcn.140001930
mov rcx, rdi
call fcn.140007b54
inc eax
inc esi
lea rdi, [rdi + rax*2]
cmp word [rdi], r12w
jne 0x14000aa34
lea rdx, [0x14001b6f0]
mov rcx, rbx
call fcn.140001930
mov rdx, qword [rbp - 0x29]
mov rcx, qword [rbp - 0x31]
call sub.WinSCard.dll_SCardFreeMemory
jmp 0x14000aad9
lea rcx, [rbp + 0x6f]
call fcn.14000a104
mov rdx, rax
mov rcx, rbx
call fcn.140001930
lea rdx, str.__error_:
mov rcx, rbx
call fcn.140001930
mov r8d, edi
lea rdx, [0x14001be20]
mov rcx, rbx
call fcn.140001a10
lea rdx, [0x14001b474]
mov rcx, rbx
call fcn.140001930
jmp 0x14000ab1f
lea rcx, [rbp + 0x6f]
call fcn.14000a2e0
mov rdx, rax
mov rcx, rbx
call fcn.140001930
lea rdx, str.__error_:
mov rcx, rbx
call fcn.140001930
mov r8d, edi
lea rdx, [0x14001be20]
mov rcx, rbx
call fcn.140001a10
lea rdx, [0x14001b474]
mov rcx, rbx
call fcn.140001930
add rsp, 0xa0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret