Function at 0x180035edc
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xf0
mov qword [rsp + 0xa0], 0xfffffffffffffffe
mov qword [r11 + 0x18], rbx
mov rax, qword [0x1800a1658]
xor rax, rsp
mov qword [rsp + 0xe8], rax
mov r14, r9
mov qword [rsp + 0x80], r9
mov qword [rsp + 0x98], r8
mov rbx, rdx
mov r13, rcx
mov rsi, qword [rsp + 0x150]
mov qword [r11 - 0x48], rsi
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x90], rax
xor edx, edx
mov r8d, 0x1000
call fcn.18005a150
movabs r11, 0x706c646f70bfbbef
mov qword [r13], r11
mov dword [r13 + 8], 3
lea rcx, [r13 + 0xc]
mov r8d, 0x80
lea rdx, str._r_nWARNING__This_file_has_been_encrypted__DO_NOT_edit_or_save_this_file__otherwise_the_content_of_this_file_will_be_damaged_
call qword [sym.imp.KERNEL32.dll_lstrcpynA]
lea rcx, [r13 + 0x8c]
mov r8d, 0x80
lea rdx, str._r_n_r_n_r_n
call qword [sym.imp.KERNEL32.dll_lstrcpynA]
lea rcx, [r13 + 0x10c]
mov r8d, 0x64
lea rdx, str._r_nN_A_r_n
call qword [sym.imp.KERNEL32.dll_lstrcpynA]
call fcn.1800344b8
mov dword [r13 + 0x184], eax
mov dword [rsp + 0x20], 6
lea r9, str.prehdr
mov r8d, 0x188
mov rdx, r13
lea rcx, [rsp + 0x38]
call fcn.18003a41c
cmp qword [rax + 0x20], 0x10
jb 0x180035ff1
mov rax, qword [rax + 8]
jmp 0x180035ff5
add rax, 8
mov eax, dword [rax]
mov dword [r13 + 0x188], eax
cmp qword [rsp + 0x58], 0x10
jb 0x180036010
mov rcx, qword [rsp + 0x40]
call fcn.180058ed8
lea r15, [r13 + 0x190]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
mov rcx, qword [rbx + 0x20]
sub rcx, qword [rbx + 0x18]
movabs r8, 0x2aaaaaaaaaaaaaab
mov rax, r8
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov dword [r15 + 0x10], edx
xor r12d, r12d
mov rcx, qword [rbx + 0x20]
sub rcx, qword [rbx + 0x18]
mov rax, r8
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
test edx, edx
jle 0x1800360fc
lea rdi, [r15 + 0x14]
mov r15, r8
movsxd rbp, r12d
cmp rbp, rdx
jb 0x180036085
call fcn.1800592a8
lea rcx, [rbp + rbp*2]
shl rcx, 4
add rcx, qword [rbx + 0x18]
lea rdx, [rsp + 0x38]
call fcn.18003b144
cmp qword [rax + 0x20], 0x10
jb 0x1800360a9
mov rcx, qword [rax + 8]
jmp 0x1800360ad
lea rcx, [rax + 8]
mov rax, qword [rcx]
mov qword [rdi], rax
movzx eax, word [rcx + 8]
mov word [rdi + 8], ax
cmp qword [rsp + 0x58], 0x10
jb 0x1800360cd
mov rcx, qword [rsp + 0x40]
call fcn.180058ed8
inc r12d
add rdi, 0xa
mov rcx, qword [rbx + 0x20]
sub rcx, qword [rbx + 0x18]
mov rax, r15
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r12d, edx
jl 0x180036078
lea r15, [r13 + 0x190]
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1800381a4
nop
xor r12d, r12d
mov byte [rsp + 0x30], r12b
mov rdi, qword [rsp + 0x58]
mov rax, rdi
mov rbx, qword [rsp + 0x50]
sub rax, rbx
cmp rax, 0x40
jae 0x18003618c
mov rbp, rdi
cmp rbx, rdi
jbe 0x18003613f
call fcn.1800592a8
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], rbp
movaps xmm0, xmmword [rsp + 0x80]
movdqa xmmword [rsp + 0x70], xmm0
sub rbx, rdi
lea r9, [rsp + 0x30]
lea r8, [rbx + 0x40]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x38]
call fcn.180038894
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
jmp 0x18003628c
cmp rax, 0x40
jbe 0x18003628c
mov rbp, rdi
cmp rbx, rdi
jbe 0x1800361ad
call fcn.1800592a8
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
cmp rbx, rdi
jbe 0x1800361b7
call fcn.1800592a8
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
mov r8d, 0x40
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x70]
call fcn.18003872c
movdqu xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x70], xmm0
mov rbx, qword [rsp + 0x50]
mov r12, qword [rsp + 0x78]
cmp rbx, r12
ja 0x180036201
mov rdi, qword [rsp + 0x58]
cmp r12, rdi
jbe 0x180036210
call fcn.1800592a8
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov r14, qword [rsp + 0x38]
cmp rbx, rbp
ja 0x18003621f
cmp rbp, rdi
jbe 0x18003622e
call fcn.1800592a8
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
test r14, r14
je 0x18003623a
cmp r14, qword [rsp + 0x38]
je 0x180036249
call fcn.1800592a8
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
cmp r12, rbp
je 0x180036281
sub rdi, rbp
mov rdx, rdi
add rdi, r12
test rdx, rdx
jle 0x18003626f
mov r9, rdx
mov r8, rbp
mov rcx, r12
call fcn.180058f78
mov rbx, qword [rsp + 0x50]
mov qword [rsp + 0x58], rdi
mov r14, qword [rsp + 0x80]
xor r12d, r12d
jmp 0x18003628c
mov r14, qword [rsp + 0x80]
xor r12d, r12d
mov rbp, rbx
cmp rbx, rdi
jbe 0x18003629e
call fcn.1800592a8
mov rbx, qword [rsp + 0x50]
cmp qword [rsp + 0x38], r12
jne 0x1800362b4
call fcn.1800592a8
mov r11, r12
mov rbx, qword [rsp + 0x50]
jmp 0x1800362bc
mov rax, qword [rsp + 0x38]
mov r11, qword [rax]
cmp rbp, qword [r11 + 0x20]
jb 0x1800362cc
call fcn.1800592a8
mov rbx, qword [rsp + 0x50]
lea rcx, [r15 + 0x72c]
mov rdx, rbp
mov r8d, 0x40
call fcn.180059bc0
mov dword [r15 + 0x728], 0x63636573
cmp rbx, r12
je 0x1800362f9
mov rcx, rbx
call fcn.180058ed8
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
mov rcx, qword [rsp + 0x38]
call fcn.180058ed8
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0xb8]
call fcn.18003450c
nop
mov ebp, 0x80
mov r8, rbp
xor edx, edx
lea rcx, [r15 + 0x294]
call fcn.18005a150
mov r8, qword [rsp + 0xd0]
lea eax, [rbp - 1]
cmp r8, rax
cmova r8, rax
lea rdx, [rsp + 0xc0]
lea edi, [rbp - 0x70]
cmp qword [rsp + 0xd8], rdi
cmovae rdx, qword [rsp + 0xc0]
lea rcx, [r15 + 0x294]
call fcn.180059bc0
mov r11, qword [rsp + 0x98]
mov qword [r15 + 0x318], r11
mov qword [r15 + 0x320], r14
lea rcx, [r15 + 0x328]
mov r8d, ebp
lea rdx, [0x1800a71e0]
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
lea rcx, [r15 + 0x428]
mov r8d, ebp
lea rdx, [0x1800a72e0]
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
lea rcx, [r15 + 0x528]
mov r8d, ebp
lea rdx, [0x1800a73e0]
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
lea rcx, [r15 + 0x628]
lea r8d, [rbp - 0x6c]
lea rdx, [0x1800a74e0]
call qword [sym.imp.KERNEL32.dll_lstrcpynA]
cmp qword [rsi + 0x18], rdi
jae 0x180036409
mov r8, rdi
lea rdx, [0x180084468]
mov rcx, rsi
call fcn.18001f8f4
cmp qword [rsi + 0x18], rdi
jb 0x1800363f1
cmp qword [rsi + 0x20], rdi
jb 0x180036418
lea rbx, [rsi + 8]
mov rax, qword [rbx]
jmp 0x18003641f
lea rbx, [rsi + 8]
mov rax, rbx
movdqu xmm0, xmmword [rax]
movdqu xmmword [r15 + 0x63c], xmm0
call fcn.1800344b8
mov dword [r13 + 0x18c], eax
mov edx, 0x190
imul eax, eax, 0x343fd
add eax, 0x269ec3
mov ecx, eax
shr ecx, 0x10
xor byte [rdx + r13], cl
inc rdx
cmp rdx, 0x1000
jl 0x18003643d
cmp qword [rsp + 0xd8], rdi
jb 0x180036474
mov rcx, qword [rsp + 0xc0]
call fcn.180058ed8
mov ebp, 0xf
mov qword [rsp + 0xd8], rbp
mov qword [rsp + 0xd0], r12
mov byte [rsp + 0xc0], r12b
cmp qword [rsi + 0x20], rdi
jb 0x18003649f
mov rcx, qword [rbx]
call fcn.180058ed8
mov qword [rsi + 0x20], rbp
mov qword [rsi + 0x18], r12
mov byte [rbx], r12b
mov rcx, qword [rsp + 0xe8]
xor rcx, rsp
call fcn.180059b00
mov rbx, qword [rsp + 0x140]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret