Function at 0x18002bec0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x78
lea rbp, [rsp + 0x70]
mov qword [rbp], 0xfffffffffffffffe
mov rbx, rdx
mov rsi, rcx
mov rdx, qword [rdx + 8]
lea rdi, [rbp - 0x40]
mov rcx, rdi
call fcn.180027570
mov rdx, qword [rbx + 0x10]
inc rdx
lea rcx, [rbp - 0x20]
call fcn.180027570
mov rdx, qword [0x180046ce0]
cmp byte [0x180048a6a], 0
jne 0x18002bfc3
movabs rax, 0xa8eac3ea2caadc94
add rax, rdx
movabs rcx, 0xa8eac3ea2caadcaa
add rcx, rdx
xor r8d, r8d
lea r9, [0x180048a60]
nop dword [rax + rax]
movzx ebx, byte [rcx + r8]
movzx r11d, byte [rax + r8]
mov r10d, ebx
and r10b, 0xc0
mov r14d, ebx
and r14b, 0x28
mov r15d, ebx
and r15b, 0x17
or r14b, 0x55
xor r14b, r15b
or r10b, 0x24
xor r10b, r14b
mov r14d, ebx
xor r14b, 0x3f
xor bl, 0xc0
or bl, r14b
xor r10b, 0x4e
mov r14d, r10d
xor r14b, bl
or r10b, bl
not r10b
or r10b, r14b
mov ebx, r11d
xor bl, 0xc0
mov r14d, r11d
and r14b, 0xb5
xor r11b, 0x75
and r11b, bl
xor r14b, 0x35
or r14b, r11b
xor r14b, r10b
xor r14b, 0xb5
mov byte [r8 + r9], r14b
inc r8
cmp r8, 0xa
jne 0x18002bf40
mov byte [0x180048a6a], 1
cmp byte [0x180048a5f], 0
jne 0x18002c0fb
movabs rax, 0xa8eac3ea2caadc4f
add rax, rdx
movabs rcx, 0xa8eac3ea2caadc6d
add rcx, rdx
xor edx, edx
lea r8, [0x180048a55]
nop word cs:[rax + rax]
movzx r9d, byte [rcx + rdx]
mov r14d, r9d
not r14b
movzx r10d, byte [rax + rdx]
mov ebx, r10d
not bl
mov r15d, r9d
xor r15b, 0x14
and r15b, r9b
mov r11d, ebx
and r11b, 0xa9
mov r12d, r9d
and r12b, 0xa9
mov r13d, r9d
or r13b, 0x52
xor r12b, 0x99
and r12b, r13b
and r14b, 0x89
or r14b, r12b
mov r12d, r9d
and r12b, 0x14
mov r13d, r15d
and r13b, 0x56
xor r13b, r12b
and r15b, 0x14
xor r13b, 0x34
or r13b, r15b
or r14b, 4
xor r14b, r13b
mov r15d, r9d
xor r15b, 0x56
xor r9b, 0xa9
or r9b, r15b
not r9b
or r9b, r14b
mov r14d, r10d
and r14b, 0x56
mov r15d, ebx
and r15b, 0x81
mov r12d, r10d
and r12b, 0x7e
or r12b, r15b
xor r12b, 0x28
and bl, 8
and r10b, 0xa1
or r10b, bl
or r10b, 6
or r11b, r14b
xor r10b, r14b
xor r10b, 0x58
and r10b, r11b
or r10b, r12b
mov r11d, r9d
and r11b, 0xa8
or r11b, 0x10
and r9b, 0x57
xor r9b, r11b
mov r11d, r9d
xor r11b, 0xb8
mov ebx, r10d
xor bl, 0xa8
xor r9b, 0x47
and r9b, bl
xor r10b, 0x57
and r10b, r11b
or r10b, r9b
mov byte [rdx + r8], r10b
inc rdx
cmp rdx, 0xa
jne 0x18002c000
mov byte [0x180048a5f], 1
movabs r9, 0xa8eac3ea2caab0b1
mov rdx, qword [0x180046ce8]
add rdx, r9
add r9, qword [0x180046cf0]
mov qword [rsp + 0x20], rdi
lea r8, [rbp - 0x20]
mov rcx, rsi
call fcn.18002c4e0
mov rax, qword [rbp - 8]
cmp rax, 0x10
jb 0x18002c162
mov rcx, qword [rbp - 0x20]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x18002c15d
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x18002c1b1
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.180035d00
mov rax, qword [rbp - 0x28]
cmp rax, 0x10
jb 0x18002c19d
mov rcx, qword [rbp - 0x40]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x18002c198
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x18002c1b1
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.180035d00
mov rax, rsi
add rsp, 0x78
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3