Function at 0x18004ed80
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0xf8
mov esi, dword [rbp + 0x87]
mov r12, r9
mov r9d, dword [rbp + 0x87]
mov r11, r8
imul eax, r9d, 0xdc
mov ecx, r9d
mov r13, rdx
mov dword [rsp + 0x50], ecx
cmp r9d, eax
mov dword [rsp + 0x68], eax
mov r9, qword [rbp - 0x59]
mov eax, dword [rbp + 0x87]
mov qword [rsp + 0x70], r9
ja 0x18004f4b4
mov r8, qword [rbp - 0x59]
mov rbx, qword [rbp - 0x59]
mov r10d, dword [rbp + 0x87]
mov edx, dword [rbp + 0x87]
mov r14, qword [rbp - 0x59]
mov rdi, qword [rbp - 0x59]
mov r15d, dword [rbp + 0x87]
mov dword [rsp + 0x44], eax
mov eax, dword [rbp + 0x87]
mov qword [rbp - 0x49], r8
mov qword [rbp - 0x69], rbx
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x58], r10d
mov dword [rsp + 0x40], edx
nop
cmp ecx, 0x174c
ja 0x18004f23a
je 0x18004f203
mov eax, ecx
sub eax, 0x3b
je 0x18004eefd
sub eax, 0xe1
je 0x18004f134
sub eax, 5
je 0x18004ef99
sub eax, 0x3b6
je 0x18004ef35
cmp eax, 0x49c
jne 0x18004f3fe
mov ebx, 0x2d
nop dword [rax]
mov eax, ebx
sub eax, 0x2c
je 0x18004f42e
cmp eax, 1
jne 0x18004eef2
mov r9d, dword [r12]
mov eax, 0x92492493
imul r9d
add edx, r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov rax, qword [r11 + 0x10]
movsxd rcx, edx
lea r8, [rax + rcx*4]
mov eax, 0x24924925
mul r9d
mov eax, r9d
sub eax, edx
shr eax, 1
add eax, edx
mov rdx, r11
shr eax, 4
imul eax, eax, 0x1c
sub r9d, eax
mov eax, 1
movzx ecx, r9b
shl eax, cl
mov ecx, 0xb6
dec eax
and dword [r8], eax
xor r8d, r8d
call fcn.18003df30
mov r11, qword [rbp + 0x5f]
dec ebx
cmp ebx, 0x2b
ja 0x18004ee80
mov rbx, qword [rbp - 0x69]
mov ecx, dword [r12]
test ecx, ecx
jle 0x18004f441
imul eax, dword [r13], 0x1c
mov r9, r13
mov r8, r11
mov edx, 0x10e
cmp ecx, eax
jge 0x18004f435
xor ecx, ecx
call fcn.18004bef0
test eax, eax
jne 0x180050039
jmp 0x18004f3f0
mov ecx, dword [r12]
mov eax, 0x92492493
imul ecx
mov r8d, 0
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x1c
sub ecx, eax
mov ecx, r8d
setne cl
add ecx, edx
cmp ecx, dword [r11]
jge 0x18004f3fa
movsxd rax, ecx
lea rdx, [rax*4]
nop dword [rax]
nop word [rax + rax]
mov rax, qword [r11 + 0x10]
lea rdx, [rdx + 4]
inc ecx
mov dword [rdx + rax - 4], r8d
cmp ecx, dword [r11]
jl 0x18004ef80
jmp 0x18004f3fa
mov ebx, dword [r13]
lea r9, [rsp + 0x60]
xor r8d, r8d
mov qword [rsp + 0x20], 0
lea rdx, [rbp - 0x19]
mov ecx, 0x107
lea r12d, [rbx*2 + 1]
mov dword [rsp + 0x60], r12d
call fcn.18004c7a0
test eax, eax
jne 0x180050039
mov dword [rbp - 0x19], r12d
xor r12d, r12d
movsxd r10, ebx
test ebx, ebx
jle 0x18004f127
mov ecx, 4
mov qword [rbp - 0x61], rcx
nop dword [rax]
mov r11d, 0x105
nop word [rax + rax]
mov eax, r11d
sub eax, 0x105
je 0x18004f0d2
sub eax, 0x2f
je 0x18004f058
cmp eax, 0x2f
jne 0x18004f101
test r15d, r15d
je 0x18004f101
nop word [rax + rax]
mov edi, dword [r14]
mov eax, r15d
add rdi, rax
mov eax, edi
mov r15, rdi
and eax, 0xfffffff
shr r15, 0x1c
mov dword [r14], eax
add r14, 4
test r15d, r15d
jne 0x18004f030
jmp 0x18004f101
mov rax, qword [r13 + 0x10]
lea r8, [r12 + 1]
mov r14, qword [rbp - 9]
add r14, rcx
mov r9d, dword [rax + r12*4]
cmp r8, r10
jge 0x18004f101
nop word [rax + rax]
mov edx, 0x24
mov eax, edx
sub eax, 0x24
je 0x18004f0a8
cmp eax, 1
jne 0x18004f0c1
mov eax, edi
mov r15, rdi
and eax, 0xfffffff
mov dword [r14], eax
add r14, 4
shr r15, 0x1c
jmp 0x18004f0c1
mov rax, qword [r13 + 0x10]
mov ecx, dword [rax + r8*4]
mov eax, dword [r14]
imul rcx, r9
lea rdi, [rax + rcx*2]
mov eax, r15d
add rdi, rax
inc edx
cmp edx, 0x26
jb 0x18004f085
inc r8
cmp r8, r10
jl 0x18004f080
jmp 0x18004f0fd
mov rax, qword [r13 + 0x10]
mov edi, dword [rax + r12*4]
mov rax, qword [rbp - 9]
imul rdi, rdi
lea rcx, [rax + r12*8]
mov eax, dword [rax + r12*8]
add rdi, rax
mov eax, edi
mov r15, rdi
and eax, 0xfffffff
mov dword [rcx], eax
shr r15, 0x1c
mov rcx, qword [rbp - 0x61]
add r11d, 0x2f
cmp r11d, 0x192
jb 0x18004f000
add rcx, 8
inc r12
mov qword [rbp - 0x61], rcx
sub rbx, 1
jne 0x18004eff0
mov r12, qword [rbp + 0x67]
mov rbx, qword [rbp - 0x69]
jmp 0x18004f3f0
test r13, r13
jne 0x18004f161
lea rax, str.NKtvs
mov dword [rsp + 0x60], r13d
lea r9, [rsp + 0x60]
mov qword [rsp + 0x20], rax
xor edx, edx
lea r8d, [r13 + 0x33]
lea rcx, [0x18006d014]
call fcn.18002d470
cmp qword [rbp + 0x4f], 0
jne 0x18004f193
xor edx, edx
mov dword [rsp + 0x60], 0
lea rax, str.Sweep_Index
lea r9, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea rcx, [0x18006d014]
lea r8d, [rdx + 0x33]
call fcn.18002d470
cmp qword [rbp + 0x8f], 0
jne 0x18004f1c8
xor edx, edx
mov dword [rsp + 0x60], 0
lea rax, str.RoundSensitive
lea r9, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea rcx, [0x18006d014]
lea r8d, [rdx + 0x33]
call fcn.18002d470
cmp qword [rbp + 0x6f], 0
jne 0x18004f3f0
xor edx, edx
mov dword [rsp + 0x60], 0
lea rax, str.__stepState
lea r9, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea rcx, [0x18006d014]
lea r8d, [rdx + 0x33]
call fcn.18002d470
jmp 0x18004f3f0
mov rax, qword [rbp + 0x6f]
lea rdx, [rsp + 0x60]
mov r8d, 0x6b
xor ecx, ecx
mov dword [rax], 0
mov rax, qword [rbp + 0x7f]
mov eax, dword [rax]
mov dword [rsp + 0x60], eax
call fcn.180056ff0
mov dword [rsp + 0x48], eax
test eax, eax
jne 0x180050039
jmp 0x18004f3f0
cmp ecx, 0x17b5
je 0x18004f3ac
cmp ecx, 0x2d7c
je 0x18004f350
cmp ecx, 0x2e49
je 0x180050037
cmp ecx, 0x43ac
je 0x18004f31a
cmp ecx, 0x59dc
jne 0x18004f3fe
test r8, r8
je 0x18004f285
test rbx, rbx
je 0x18004f285
test r9, r9
jne 0x18004f2fc
mov ebx, 0xb9
nop word [rax + rax]
mov eax, ebx
sub eax, 0xb9
je 0x18004f2cd
cmp eax, 0x44
jne 0x18004f2df
mov rax, qword [rbp - 0x69]
test rax, rax
je 0x18004f2b0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r9, qword [rsp + 0x70]
test r9, r9
je 0x18004f2c3
mov rcx, r9
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, 0xd
jmp 0x180050039
test r8, r8
je 0x18004f2df
mov rcx, r8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [rbp - 0x49]
add ebx, 0x44
cmp ebx, 0x141
jb 0x18004f290
mov ecx, dword [rsp + 0x50]
mov r9, qword [rsp + 0x70]
mov rbx, qword [rbp - 0x69]
mov r10d, dword [rsp + 0x58]
cmp byte [r13], 0
mov r8d, dword [rsp + 0x44]
jne 0x18004f470
mov edx, 1
mov dword [rsp + 0x40], edx
jmp 0x18004f407
mov ecx, r10d
mov ebx, r10d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, ebx
mov qword [rbp - 0x49], rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, dword [rsp + 0x44]
mov rbx, rax
mov qword [rbp - 0x69], rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r9, rax
mov qword [rsp + 0x70], rax
jmp 0x18004f3f5
mov rax, qword [rbp + 0x7f]
lea rcx, [0x18007a8e0]
mov r10d, 0
movsxd rax, dword [rax]
shl rax, 7
mov r8d, dword [rax + rcx + 0xc]
mov rax, qword [rbp + 0x97]
mov dword [rsp + 0x44], r8d
mov eax, dword [rax]
test al, 7
setne r10b
shr eax, 3
add r10d, eax
lea eax, [r8 + r8]
mov dword [rsp + 0x58], r10d
lea ecx, [r10 - 2]
cmp eax, ecx
jae 0x18004f4aa
cmp dword [r12], r10d
jne 0x18004f4aa
mov ecx, dword [rsp + 0x50]
jmp 0x18004f403
xor r8d, r8d
lea rdx, [rbp - 0x19]
mov ecx, 0xb6
call fcn.18003df30
mov r9, r12
mov qword [rsp + 0x28], 0
xor r8d, r8d
mov dword [rsp + 0x20], 0x68
xor edx, edx
lea rcx, [rbp - 0x19]
call fcn.18004aff0
xor edx, edx
lea rcx, [rbp - 0x19]
lea r8d, [rdx + 0x3e]
call fcn.180048840
xor esi, esi
mov r9, qword [rsp + 0x70]
mov r10d, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x50]
mov r8d, dword [rsp + 0x44]
mov edx, dword [rsp + 0x40]
mov eax, dword [rbp + 0x87]
lea eax, [rax + rax*4]
lea ecx, [rcx + rax*4]
mov dword [rsp + 0x50], ecx
cmp ecx, dword [rsp + 0x68]
ja 0x18004f4ea
mov r8, qword [rbp - 0x49]
mov r11, qword [rbp + 0x5f]
jmp 0x18004ee30
xor eax, eax
jmp 0x180050039
xor ecx, ecx
call fcn.18004bef0
jmp 0x180050039
xor ebx, ebx
xor r9d, r9d
mov qword [rsp + 0x38], rbx
xor r8d, r8d
mov qword [rsp + 0x30], r11
mov edx, 0xad
mov qword [rsp + 0x28], rbx
xor ecx, ecx
mov qword [rsp + 0x20], rbx
call fcn.180065760
mov eax, ebx
jmp 0x180050039
mov rax, qword [rbp - 0x59]
xor ecx, ecx
mov edi, dword [rbp - 0x79]
mov r13d, dword [rbp + 0x87]
mov ebx, dword [rsp + 0x68]
mov r12d, dword [rbp + 0x87]
mov edx, dword [rsp + 0x40]
mov qword [rbp - 0x61], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp - 0x59], rax
mov dword [rsp + 0x48], ecx
mov r14d, 0x3c644
jmp 0x18004fefb
mov eax, 0x16
jmp 0x180050039
mov r8d, dword [rbp + 0x87]
mov r11, qword [rbp - 0x59]
mov edx, dword [rbp + 0x87]
mov ecx, dword [rbp + 0x87]
mov dword [rsp + 0x58], eax
mov rax, qword [rbp - 0x59]
mov qword [rbp - 0x69], rax
mov dword [rsp + 0x44], r8d
mov qword [rbp - 0x49], r11
mov dword [rsp + 0x48], ecx
mov dword [rsp + 0x40], edx
jmp 0x18004f4f2
mov ecx, dword [rsp + 0x48]
mov r11, qword [rbp - 0x49]
mov r10, qword [rbp - 0x59]
mov r15, qword [rbp - 0x59]
mov eax, dword [rbp + 0x87]
mov r14d, eax
mov edi, dword [rbp - 0x79]
mov r13d, dword [rbp + 0x87]
mov ebx, dword [rsp + 0x68]
mov r12d, dword [rbp + 0x87]
mov qword [rbp - 0x61], r10
mov qword [rbp - 0x59], r15
imul eax, eax, 0x63b
mov dword [rsp + 0x60], r14d
cmp r14d, eax
ja 0x180050037
cmp r14d, 0x32568
ja 0x18004ff61
je 0x18004ff24
cmp r14d, 0x11c
je 0x18004feaa
cmp r14d, 0xa1f8
je 0x18004fe4f
cmp r14d, 0x142d4
je 0x18004fd00
cmp r14d, 0x1e3b0
je 0x18004f635
cmp r14d, 0x2848c
jne 0x18004fefb
mov r15d, dword [rsp + 0x44]
mov edx, r15d
mov ecx, dword [rsp + 0x58]
mov r8d, ecx
sub r8d, r15d
mov dword [rsp + 0x40], r15d
dec r8d
cmp r15d, r8d
jae 0x18004f5d3
mov ecx, r15d
nop word [rax + rax]
mov eax, ecx
mov edx, ecx
cmp byte [rax + r11], 0
jne 0x18004f5cf
lea r9d, [rcx + 1]
mov dword [rsp + 0x40], r9d
mov edx, r9d
mov ecx, r9d
cmp r9d, r8d
jb 0x18004f5b0
mov ecx, dword [rsp + 0x58]
cmp edx, r8d
je 0x18004f61a
mov eax, edx
cmp byte [rax + r11], 1
jne 0x18004f61a
mov r8, qword [rbp + 0x8f]
inc edx
sub ecx, edx
mov dword [rsp + 0x40], edx
sub ecx, r15d
dec ecx
mov eax, dword [r8]
mov dword [r8], ecx
mov r8d, r15d
cmp ecx, eax
jbe 0x18004fef7
mov ecx, 6
mov r14d, 0x3c644
mov dword [rsp + 0x48], ecx
jmp 0x18004fefb
mov edx, dword [rsp + 0x40]
mov ecx, 7
mov dword [rsp + 0x48], ecx
mov r14d, 0x3c644
mov r8d, r15d
jmp 0x18004fefb
mov r9d, dword [rsp + 0x58]
xor edx, edx
sub r9d, r8d
sub r9d, 1
je 0x18004f721
mov r14, qword [rbp - 0x69]
cmp r9d, 0x40
jb 0x18004f6f3
lea eax, [r9 - 1]
lea r8, [rax + r11]
add rax, r14
cmp r11, rax
ja 0x18004f670
cmp r8, r14
jae 0x18004f6f3
mov r10d, r9d
and r10d, 0xffffffc0
mov r8d, 0x20
nop dword [rax]
movdqu xmm0, xmmword [rdx + r11]
lea eax, [r8 - 0x10]
movdqu xmm1, xmmword [rdx + r14]
pxor xmm1, xmm0
movdqu xmmword [rdx + r11], xmm1
add edx, 0x40
movdqu xmm0, xmmword [rax + r11]
movdqu xmm1, xmmword [rax + r14]
pxor xmm1, xmm0
movdqu xmmword [rax + r11], xmm1
mov eax, r8d
movdqu xmm0, xmmword [rax + r11]
movdqu xmm1, xmmword [rax + r14]
pxor xmm1, xmm0
movdqu xmmword [rax + r11], xmm1
lea eax, [r8 + 0x10]
add r8d, 0x40
movdqu xmm0, xmmword [rax + r11]
movdqu xmm1, xmmword [rax + r14]
pxor xmm1, xmm0
movdqu xmmword [rax + r11], xmm1
cmp edx, r10d
jb 0x18004f680
mov r10, qword [rbp - 0x61]
cmp edx, r9d
jae 0x18004f721
mov ecx, edx
mov r8, r14
add rcx, r11
sub r8, r11
sub r9d, edx
mov edx, r9d
nop dword [rax]
movzx eax, byte [r8 + rcx]
xor byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x18004f710
cmp qword [rbp + 0x5f], 0
mov r14d, 0x97
mov ecx, dword [rsp + 0x58]
mov dword [rsp + 0x40], ecx
je 0x18004fa08
mov rax, qword [rbp + 0x77]
mov r15d, dword [rax]
mov rax, qword [rbp + 0x7f]
mov eax, dword [rax]
mov dword [rsp + 0x50], eax
nop dword [rax + rax]
cmp r14d, 0x8d2a
ja 0x18004f817
je 0x18004f9ac
mov eax, r14d
sub eax, 0x41
je 0x18004f972
sub eax, 0x31
je 0x18004f943
sub eax, 0x25
je 0x18004f943
sub eax, 0x4637
je 0x18004f7f0
cmp eax, 0x16fb
jne 0x18004f943
cmp qword [rsp + 0x70], 0
jne 0x18004f7c4
xor edx, edx
mov dword [rbp - 0x41], 0
lea rax, str.XML_Doc_Tag
lea r9, [rbp - 0x41]
mov qword [rsp + 0x20], rax
lea rcx, [0x18006d014]
lea r8d, [rdx + 0x33]
call fcn.18002d470
mov eax, dword [rsp + 0x50]
lea rdx, [rbp - 0x39]
mov r8d, 0x6b
mov dword [rbp - 0x39], eax
xor ecx, ecx
call fcn.180056ff0
mov r13d, eax
test eax, eax
jne 0x18004f962
mov r10, qword [rbp - 0x61]
jmp 0x18004f93f
xor r9d, r9d
mov dword [rsp + 0x20], 0x2d
lea r8, [rsp + 0x50]
xor edx, edx
xor ecx, ecx
call fcn.180049030
mov r10, qword [rbp - 0x61]
mov edi, eax
mov dword [rbp - 0x79], eax
jmp 0x18004f93f
cmp r14d, 0xbafb
je 0x18004f90a
cmp r14d, 0x1182d
je 0x18004f84c
cmp r14d, 0x1755f
je 0x18004f8d0
cmp r14d, 0x1d291
je 0x18004f9ac
jmp 0x18004f943
movsxd rax, dword [rsp + 0x50]
lea rdx, [0x18007a8e0]
shl rax, 7
mov rcx, r10
call qword [rax + rdx + 0x58]
mov r13d, eax
test eax, eax
jne 0x18004f8d0
movsxd rax, dword [rsp + 0x50]
lea r9, [0x18007a8e0]
mov rdx, qword [rbp + 0x5f]
mov r8d, r15d
mov rcx, qword [rbp - 0x61]
shl rax, 7
call qword [rax + r9 + 0x60]
mov r13d, eax
test eax, eax
jne 0x18004f8d0
movsxd rax, dword [rsp + 0x50]
lea r8, [0x18007a8e0]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rbp - 0x61]
shl rax, 7
call qword [rax + r8 + 0x68]
mov r10, qword [rbp - 0x61]
lea rcx, [0x18007a8e0]
mov r13d, eax
movsxd rax, dword [rsp + 0x50]
shl rax, 7
mov ecx, dword [rax + rcx + 0xc]
mov dword [rsp + 0x40], ecx
jmp 0x18004f943
mov r8, qword [rbp - 0x61]
lea rdx, [rbp - 0x51]
mov r9d, 0x99
mov qword [rbp - 0x51], 8
xor ecx, ecx
mov r14d, 0x1755f
call fcn.180015650
mov rcx, qword [rbp - 0x61]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r10, qword [rbp - 0x61]
mov edi, r13d
mov dword [rbp - 0x79], r13d
jmp 0x18004f93f
movsxd rax, dword [rsp + 0x50]
lea rdx, [0x18007a8e0]
shl rax, 7
cmp ecx, dword [rax + rdx + 0xc]
jb 0x18004f9e8
mov ecx, 8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x61], rax
mov r10, rax
test rax, rax
je 0x18004f9d5
mov ecx, dword [rsp + 0x40]
add r14d, 0x5d32
cmp r14d, 0x3a3f4
jbe 0x18004f750
mov edx, dword [rsp + 0x40]
mov ecx, edi
jmp 0x18004fcbf
mov edx, dword [rsp + 0x40]
mov edi, eax
mov dword [rbp - 0x79], eax
mov ecx, eax
jmp 0x18004fcbf
xor r15d, r15d
xor r9d, r9d
mov qword [rsp + 0x28], r15
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], r15
lea edx, [r15 + 0x72]
call fcn.1800064a0
xor r8d, r8d
lea rdx, [rsp + 0x50]
test al, al
jne 0x18004f9b7
mov ecx, 0x86
call fcn.18003df30
mov byte [rbp - 0x79], al
mov edi, dword [rbp - 0x79]
mov edx, dword [rsp + 0x40]
mov ecx, edi
jmp 0x18004fcbf
mov r9d, 0x9e
xor ecx, ecx
call fcn.18001aec0
mov edx, dword [rsp + 0x40]
mov byte [rbp - 0x79], al
mov edi, dword [rbp - 0x79]
mov ecx, edi
jmp 0x18004fcbf
mov edx, dword [rsp + 0x40]
mov edi, 0xd
mov dword [rbp - 0x79], edi
mov ecx, edi
jmp 0x18004fcbf
movsxd rax, dword [rsp + 0x50]
mov edi, 6
shl rax, 7
mov ecx, edi
mov dword [rbp - 0x79], edi
mov edx, dword [rax + rdx + 0xc]
mov dword [rsp + 0x40], edx
jmp 0x18004fcbf
mov rax, qword [rbp + 0x7f]
mov eax, dword [rax]
mov dword [rbp - 0x71], eax
cmp r14d, 0x8d2a
ja 0x18004fb0f
je 0x18004fc78
mov eax, r14d
sub eax, 0x41
je 0x18004fc3f
sub eax, 0x31
je 0x18004fc26
sub eax, 0x25
je 0x18004fadb
sub eax, 0x4637
je 0x18004fab8
cmp eax, 0x16fb
jne 0x18004fc26
cmp qword [rsp + 0x70], 0
jne 0x18004fa85
xor edx, edx
mov dword [rbp - 0x31], 0
lea rax, str.XML_Doc_Tag
lea r9, [rbp - 0x31]
mov qword [rsp + 0x20], rax
lea rcx, [0x18006d014]
lea r8d, [rdx + 0x33]
call fcn.18002d470
mov eax, dword [rbp - 0x71]
lea rdx, [rbp - 0x29]
mov r8d, 0x6b
mov dword [rbp - 0x29], eax
xor ecx, ecx
call fcn.180056ff0
mov r12d, eax
test eax, eax
je 0x18004fc22
mov edx, dword [rsp + 0x40]
mov ebx, eax
mov dword [rsp + 0x68], eax
mov ecx, eax
jmp 0x18004fcbf
xor r9d, r9d
mov dword [rsp + 0x20], 0x2d
lea r8, [rbp - 0x71]
xor edx, edx
xor ecx, ecx
call fcn.180049030
mov ebx, eax
mov dword [rsp + 0x68], eax
jmp 0x18004fc22
test r11, r11
jne 0x18004fc26
lea rax, str.o__j0jj
mov dword [rbp - 0x21], r11d
lea r9, [rbp - 0x21]
mov qword [rsp + 0x20], rax
xor edx, edx
lea r8d, [r11 + 0x33]
lea rcx, [0x18006d014]
call fcn.18002d470
jmp 0x18004fc22
cmp r14d, 0xbafb
je 0x18004fbf2
cmp r14d, 0x1182d
je 0x18004fb44
cmp r14d, 0x1755f
je 0x18004fbbe
cmp r14d, 0x1d291
je 0x18004fc78
jmp 0x18004fc26
movsxd rax, dword [rbp - 0x71]
lea rdx, [0x18007a8e0]
shl rax, 7
mov rcx, r15
call qword [rax + rdx + 0x58]
mov r12d, eax
test eax, eax
jne 0x18004fbbe
movsxd rax, dword [rbp - 0x71]
lea r9, [0x18007a8e0]
mov rdx, qword [rbp - 0x49]
xor r8d, r8d
shl rax, 7
mov rcx, r15
call qword [rax + r9 + 0x60]
mov r12d, eax
test eax, eax
jne 0x18004fbbe
movsxd rax, dword [rbp - 0x71]
lea r8, [0x18007a8e0]
mov rdx, qword [rsp + 0x70]
mov rcx, r15
shl rax, 7
call qword [rax + r8 + 0x68]
mov r12d, eax
lea rcx, [0x18007a8e0]
movsxd rax, dword [rbp - 0x71]
shl rax, 7
mov ecx, dword [rax + rcx + 0xc]
mov dword [rsp + 0x40], ecx
jmp 0x18004fc26
mov r9d, 0x99
mov qword [rbp - 0x51], 8
mov r8, r15
lea rdx, [rbp - 0x51]
xor ecx, ecx
mov r14d, 0x1755f
call fcn.180015650
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ebx, r12d
mov dword [rsp + 0x68], ebx
jmp 0x18004fc22
movsxd rax, dword [rbp - 0x71]
lea rdx, [0x18007a8e0]
shl rax, 7
cmp ecx, dword [rax + rdx + 0xc]
jb 0x18004fca4
mov ecx, 8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x59], rax
mov r15, rax
test rax, rax
je 0x18004fc99
mov ecx, dword [rsp + 0x40]
add r14d, 0x5d32
cmp r14d, 0x3a3f4
ja 0x18004fc78
mov r11, qword [rbp - 0x49]
jmp 0x18004fa11
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea edx, [rax + 0x72]
call fcn.1800064a0
xor r8d, r8d
lea rdx, [rbp - 0x71]
test al, al
jne 0x18004fc7e
mov ecx, 0x86
call fcn.18003df30
mov byte [rsp + 0x68], al
mov ebx, dword [rsp + 0x68]
mov edx, dword [rsp + 0x40]
jmp 0x18004fcbd
mov r9d, 0x9e
xor ecx, ecx
call fcn.18001aec0
mov edx, dword [rsp + 0x40]
mov byte [rsp + 0x68], al
mov ebx, dword [rsp + 0x68]
jmp 0x18004fcbd
mov edx, dword [rsp + 0x40]
mov ebx, 0xd
jmp 0x18004fcb9
movsxd rax, dword [rbp - 0x71]
mov ebx, 6
shl rax, 7
mov edx, dword [rax + rdx + 0xc]
mov dword [rsp + 0x40], edx
mov dword [rsp + 0x68], ebx
mov ecx, ebx
mov r8d, dword [rsp + 0x44]
mov dword [rsp + 0x48], ecx
test ecx, ecx
jne 0x18004f49f
mov rdx, qword [rbp - 0x49]
mov rcx, qword [rsp + 0x70]
call sub.VCRUNTIME140.dll_memcmp
mov edx, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x44]
test eax, eax
je 0x18004fef2
xor ecx, ecx
mov r14d, 0x3c644
mov dword [rsp + 0x48], ecx
jmp 0x18004fefb
mov r15d, dword [rsp + 0x44]
xor edx, edx
test r15d, r15d
je 0x18004fdf6
mov r10, qword [rsp + 0x70]
mov r11, qword [rbp - 0x69]
cmp r15d, 0x40
jb 0x18004fdbf
lea eax, [r15 - 1]
lea r8, [rax + r10]
add rax, r11
cmp r10, rax
ja 0x18004fd3c
cmp r8, r11
jae 0x18004fdbf
mov r9d, r15d
and r9d, 0xffffffc0
mov r8d, 0x20
nop dword [rax]
movdqu xmm0, xmmword [rdx + r10]
lea eax, [r8 - 0x10]
movdqu xmm1, xmmword [rdx + r11]
pxor xmm1, xmm0
movdqu xmmword [rdx + r10], xmm1
add edx, 0x40
movdqu xmm0, xmmword [rax + r10]
movdqu xmm1, xmmword [rax + r11]
pxor xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
mov eax, r8d
movdqu xmm0, xmmword [rax + r10]
movdqu xmm1, xmmword [rax + r11]
pxor xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
lea eax, [r8 + 0x10]
add r8d, 0x40
movdqu xmm0, xmmword [rax + r10]
movdqu xmm1, xmmword [rax + r11]
pxor xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
cmp edx, r9d
jb 0x18004fd50
cmp edx, r15d
jae 0x18004fdf1
mov ecx, edx
mov r8, r11
add rcx, r10
sub r8, r10
mov eax, r15d
sub eax, edx
mov edx, eax
nop word [rax + rax]
movzx eax, byte [r8 + rcx]
xor byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x18004fde0
mov r9, qword [rsp + 0x70]
mov eax, dword [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov r8, qword [rbp - 0x69]
lea rcx, [rbp - 0x51]
sub eax, r15d
mov dword [rsp + 0x60], r15d
dec eax
mov dword [rsp + 0x48], eax
mov rax, qword [rbp + 0x7f]
mov eax, dword [rax]
mov dword [rbp - 0x51], eax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x42
call fcn.18004aff0
mov edx, dword [rsp + 0x40]
mov ecx, eax
mov dword [rsp + 0x48], eax
mov r8d, r15d
test eax, eax
jne 0x18004f49f
jmp 0x18004fefb
mov eax, dword [rsp + 0x58]
lea rdx, [rsp + 0x60]
sub eax, r8d
mov dword [rsp + 0x60], r8d
mov r8, qword [rbp - 0x69]
lea rcx, [rsp + 0x48]
dec eax
mov r9, r11
mov dword [rbp - 0x51], eax
mov rax, qword [rbp + 0x7f]
mov eax, dword [rax]
mov dword [rsp + 0x48], eax
lea rax, [rbp - 0x51]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x42
call fcn.18004aff0
mov edx, dword [rsp + 0x40]
mov ecx, eax
mov r8d, dword [rsp + 0x44]
mov dword [rsp + 0x48], eax
test eax, eax
jne 0x18004f49f
jmp 0x18004fefb
add rdx, qword [rbp + 0x57]
mov rcx, r9
call sub.VCRUNTIME140.dll_memcpy
mov r8d, dword [rsp + 0x58]
sub r8d, dword [rsp + 0x44]
mov r14d, dword [rsp + 0x40]
add r14d, dword [rsp + 0x44]
mov rcx, qword [rbp - 0x49]
dec r8d
mov edx, r14d
add rdx, qword [rbp + 0x57]
call sub.VCRUNTIME140.dll_memcpy
mov r8d, dword [rsp + 0x44]
mov edx, dword [rsp + 0x58]
sub r14d, r8d
dec edx
add edx, r14d
mov dword [rsp + 0x40], edx
mov r14d, dword [rsp + 0x60]
mov ecx, dword [rsp + 0x48]
imul eax, dword [rbp + 0x87], 0x91
mov r15, qword [rbp - 0x59]
mov r10, qword [rbp - 0x61]
mov r11, qword [rbp - 0x49]
mov r9, qword [rsp + 0x70]
add r14d, eax
mov eax, dword [rbp + 0x87]
jmp 0x18004f520
mov eax, dword [rsp + 0x58]
mov rcx, qword [rbp + 0x4f]
sub eax, edx
sub eax, r8d
add rdx, r11
lea r8d, [rax - 1]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rsp + 0x58]
mov edx, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x44]
dec edx
sub eax, r8d
add edx, eax
mov rax, qword [rbp + 0x6f]
mov dword [rsp + 0x40], edx
mov dword [rax], 1
jmp 0x18004fef7
cmp r14d, 0x3c644
je 0x18004fcef
cmp r14d, 0x46720
je 0x18004ffd5
cmp r14d, 0x507fc
je 0x18004ffb4
cmp r14d, 0x5a8d8
je 0x18004ff9d
cmp r14d, 0x649b4
jne 0x18004fefb
mov eax, ecx
jmp 0x180050039
mov rcx, r11
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edx, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x44]
jmp 0x18004fef7
mov rcx, r9
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 0x69]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edx, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x44]
jmp 0x18004fef7
mov r14d, dword [rsp + 0x58]
lea rdx, [rbp - 0x51]
mov r9d, 0x99
mov qword [rbp - 0x51], r14
mov r8, r11
xor ecx, ecx
call fcn.180015650
mov eax, dword [rsp + 0x44]
lea rdx, [rbp - 0x51]
mov r8, qword [rsp + 0x70]
mov r9d, 0x99
xor ecx, ecx
mov qword [rbp - 0x51], rax
call fcn.180015650
mov r8, qword [rbp - 0x69]
lea rdx, [rbp - 0x51]
mov r9d, 0x99
mov qword [rbp - 0x51], r14
xor ecx, ecx
call fcn.180015650
mov edx, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x44]
jmp 0x18004fef2
mov eax, esi
add rsp, 0xf8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret