Function at 0x1800088a0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov rax, qword [0x18006e218]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x90]
mov r10, r9
mov r11, qword [rbp + 0xb8]
mov r13d, dword [rsp + 0x50]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp + 0x98]
mov qword [rbp - 0x70], rax
mov rax, qword [rbp + 0xa8]
mov rsi, qword [rbp - 0x70]
mov r12, qword [rbp - 0x70]
mov r15, qword [rbp - 0x70]
mov qword [rbp - 0x60], r9
mov r9d, ecx
mov qword [rbp - 0x48], rax
mov ebx, r9d
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x30], rdx
mov rdx, qword [rbp + 0xa0]
lea edi, [r9 + 0x16c]
mov dword [rsp + 0x68], ecx
cmp r9d, edi
mov rcx, qword [rbp + 0xb0]
mov dword [rsp + 0x58], edi
mov edi, dword [rsp + 0x50]
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x80], r8
mov qword [rbp - 0x78], rdx
mov qword [rsp + 0x78], rcx
mov qword [rbp - 0x40], r11
mov dword [rsp + 0x70], ebx
mov qword [rbp - 0x58], rsi
jae 0x180008e3d
mov eax, dword [rsp + 0x58]
lea r14d, [r9 - 0x3b]
mov r9d, dword [rsp + 0x50]
mov dword [rsp + 0x64], r9d
nop dword [rax]
nop dword [rax + rax]
cmp r14d, 0xe9
ja case.default.0x1800089ae
lea rcx, [0x180000000]
movzx eax, byte [rcx + r14 + 0x9348]
mov ecx, dword [rcx + rax*4 + 0x9310]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
lea r8, [rsp + 0x60]
mov r9, r12
test r10, r10
je 0x1800089f1
mov eax, dword [rdx]
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x50], eax
mov rdx, r10
mov rax, qword [rbp - 0x50]
mov eax, dword [rax]
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x6a
call fcn.18004ec40
mov rdi, rax
jmp 0x180008a22
xor eax, eax
lea rcx, [rsp + 0x70]
mov dword [rsp + 0x70], eax
mov rdx, r12
mov rax, qword [rbp - 0x50]
mov eax, dword [rax]
mov dword [rsp + 0x50], eax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x6a
call fcn.18004ec40
mov edi, eax
test eax, eax
jne 0x180008dd8
mov dword [rsp + 0x60], r13d
mov r10, qword [rbp - 0x60]
mov r8, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x78]
mov r9d, dword [rsp + 0x64]
mov rcx, qword [rsp + 0x78]
mov eax, dword [rsp + 0x58]
mov r11, qword [rbp - 0x40]
add ebx, 0x1c
add r14d, 0x1c
mov dword [rsp + 0x70], ebx
cmp ebx, eax
jb 0x180008980
mov edx, dword [rsp + 0x64]
mov r9d, dword [rsp + 0x68]
mov rax, qword [rbp - 0x70]
mov r14d, r9d
mov rbx, qword [rbp - 0x70]
mov qword [rbp - 0x78], rax
imul eax, r9d, 0x3fc
cmp r14d, eax
ja 0x180008adf
cmp r14d, 0xca78
ja 0x18000922f
je 0x180009214
cmp r14d, 0x3310
ja 0x180008f22
je 0x180008efc
mov eax, r14d
sub eax, 0x3b
je 0x180008e8c
sub eax, 0x5d
je 0x180008e4a
cmp eax, 0x133a
jne 0x1800092ea
mov rax, qword [rbp - 0x78]
lea rcx, [rbp - 0x28]
call rax
test eax, eax
jne 0x180009303
mov byte [rbp - 0x68], al
mov eax, dword [rbp - 0x68]
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.18005b930
mov rbx, qword [rsp + 0x170]
add rsp, 0x130
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movzx eax, word [0x180062a68]
movsd xmm0, qword [0x180062a60]
mov word [rbp + 8], ax
mov eax, 0x6c
mov word [rbp + 0xa], ax
mov byte [rbp - 4], 0
movsd qword [rbp], xmm0
jmp case.0x1800089ae.1
xor eax, eax
lea rdx, [0x180062a82]
lea rcx, [rbp + 0xc]
mov word [rbp + 0xc], ax
lea r8d, [rax + 1]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov eax, dword [0x180062ac0]
mov dword [rbp + 0xe], eax
movzx eax, word [0x180062ac4]
mov word [rbp + 0x12], ax
jmp 0x180008a2f
mov r13, qword [rbp - 0x50]
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov eax, dword [r13]
lea edx, [r8 + 0x68]
mov dword [rsp + 0x50], eax
call fcn.1800401b0
test eax, eax
jne 0x180008ae2
mov rax, qword [rbp - 0x70]
lea rcx, [rsp + 0x50]
mov r9d, 0xd4
xor r8d, r8d
xor edx, edx
mov eax, dword [rax]
mov dword [rsp + 0x50], eax
call fcn.180015080
mov edi, eax
test eax, eax
jne 0x180008ae2
movsxd rax, dword [r13]
lea rcx, [0x180000000]
shl rax, 7
mov r13d, dword [rax + rcx + 0x6f95c]
jmp 0x180008a2f
cmp qword [rbp - 0x38], 0
jne 0x180008bff
xor eax, eax
lea r9, [0x180062423]
lea r8, [rsp + 0x50]
mov dword [rsp + 0x50], eax
mov edx, 0xa8
lea rcx, str.Odia_syfers
call fcn.1800175c0
mov r11, qword [rbp - 0x40]
test r11, r11
jne 0x180008c27
xor eax, eax
lea r9, [0x180062423]
lea r8, [rsp + 0x50]
mov dword [rsp + 0x50], eax
mov edx, 0xa8
lea rcx, str.kfreduction
call fcn.1800175c0
mov rcx, qword [rsp + 0x78]
test rcx, rcx
jne 0x180008dc2
xor eax, eax
lea r9, [0x180062423]
lea r8, [rsp + 0x50]
mov dword [rsp + 0x50], eax
mov edx, 0xa8
lea rcx, str.Andere_machine
call fcn.1800175c0
jmp 0x180008a2f
mov dword [rbp - 0x15], 0x74737953
mov byte [rbp - 0x11], 0
jmp case.0x1800089ae.1
mov dword [rsp + 0x60], r9d
jmp case.0x1800089ae.1
mov dword [rbp - 0x11], 0x6f506d65
jmp case.0x1800089ae.1
mov ecx, r9d
mov ebx, r9d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, ebx
mov r12, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, r13d
mov r15, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x58], rax
mov rsi, rax
test r12, r12
je 0x180008cbc
test r15, r15
je 0x180008cbc
test rax, rax
jne 0x180008d11
mov ebx, 0x128
mov eax, ebx
sub eax, 0x128
je 0x180008cd5
cmp eax, 0x6d
je 0x180008adf
jmp 0x180008d06
test r12, r12
je 0x180008ce3
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test r15, r15
je 0x180008cf1
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test rsi, rsi
je 0x180008cff
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov dword [rbp - 0x68], 0xd
add ebx, 0x6d
cmp ebx, 0x202
jb 0x180008cc1
mov ebx, dword [rsp + 0x70]
jmp 0x180008a2f
mov eax, dword [r8]
lea ecx, [r13*2]
test al, 7
mov r9d, 0
setne r9b
shr eax, 3
add r9d, eax
mov dword [rsp + 0x64], r9d
lea eax, [r9 - 2]
cmp ecx, eax
jae 0x180008d58
mov eax, r9d
sub eax, ecx
mov rcx, qword [rbp - 0x48]
sub eax, 2
cmp dword [rcx], eax
jbe case.0x1800089ae.1
mov eax, 0x16
jmp 0x180008ae2
mov r8d, 4
mov word [rbp - 0xd], 0x77
lea rdx, [0x180062bb7]
lea rcx, [rbp - 0xc]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x180008a2f
movzx eax, word [0x180062c79]
mov word [rbp - 0x18], ax
movzx eax, byte [0x180062c7b]
mov byte [rbp - 0x16], al
mov byte [rbp - 0x15], 0
jmp case.0x1800089ae.1
mov r8d, 4
mov byte [rbp - 8], 0
lea rdx, [0x180062cd2]
lea rcx, [rbp - 8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x180008a2f
mov r10, qword [rbp - 0x60]
mov r8, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x78]
mov r9d, dword [rsp + 0x64]
jmp 0x180008a45
mov rax, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x70]
mov qword [rbp - 0x78], rax
mov esi, dword [rsp + 0x64]
lea rdx, [rbp - 0x80]
mov r8d, 0x87
mov qword [rbp - 0x80], rsi
mov rcx, r12
mov r14d, 0x161e0
call fcn.1800208b0
mov rcx, qword [rbp - 0x58]
lea rdx, [rbp - 0x80]
mov eax, r13d
mov r8d, 0x87
mov qword [rbp - 0x80], rax
call fcn.1800208b0
mov r8d, 0x87
mov qword [rbp - 0x80], rsi
lea rdx, [rbp - 0x80]
mov rcx, r15
call fcn.1800208b0
mov rsi, qword [rbp - 0x58]
jmp 0x1800092e5
mov edx, dword [rsp + 0x50]
mov dword [rsp + 0x64], edx
jmp 0x180008a69
mov ecx, dword [rsp + 0x60]
lea eax, [r13*2]
mov esi, edx
add rcx, r12
sub esi, eax
xor edx, edx
mov rax, qword [rbp - 0x48]
sub esi, dword [rax]
sub esi, 2
mov r8d, esi
call sub.VCRUNTIME140.dll_memset
mov eax, dword [rsp + 0x60]
add eax, esi
mov rsi, qword [rbp - 0x58]
mov dword [rsp + 0x60], eax
mov byte [rax + r12], 1
inc dword [rsp + 0x60]
jmp 0x1800092e5
xor eax, eax
mov dword [rbp + 0x14], 0x6c006c
mov word [rbp + 0x18], ax
mov esi, 0x11
nop
mov eax, esi
sub eax, 0xe
je 0x180008ed2
sub eax, 2
je 0x180008eef
cmp eax, 1
jne 0x180008ee8
xor r8d, r8d
lea rcx, [rbp]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rcx, rax
lea rdx, [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
jmp 0x180008ee8
cmp byte [0x180071521], 0
je 0x180008ee8
call qword [0x180071518]
mov byte [0x180071521], 0
dec esi
cmp esi, 0xe
ja 0x180008ea0
mov rsi, qword [rbp - 0x58]
mov qword [rbp - 0x78], rbx
jmp 0x1800092e5
mov rax, qword [rbp - 0x48]
mov ecx, dword [rsp + 0x60]
mov rdx, qword [rbp - 0x38]
add rcx, r12
mov r8d, dword [rax]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [rbp - 0x48]
mov eax, dword [rcx]
add dword [rsp + 0x60], eax
jmp 0x1800092e5
cmp r14d, 0x6588
je 0x180009176
cmp r14d, 0x9800
jne 0x1800092ea
mov r9d, edx
xor r10d, r10d
sub r9d, r13d
mov edx, r10d
sub r9d, 1
je 0x180009031
cmp r9d, 0x40
jb 0x180009002
lea eax, [r9 - 1]
lea r8, [rax + r12]
add rax, r15
cmp r12, rax
ja 0x180008f75
cmp r8, r15
jae 0x180009002
mov r8d, r9d
and r8d, 0xffffffc0
mov r10d, 0x20
nop dword [rax]
nop word [rax + rax]
movdqu xmm0, xmmword [rdx + r12]
lea eax, [r10 - 0x10]
movdqu xmm1, xmmword [rdx + r15]
pxor xmm1, xmm0
movdqu xmmword [rdx + r12], xmm1
add edx, 0x40
movdqu xmm0, xmmword [rax + r12]
movdqu xmm1, xmmword [rax + r15]
pxor xmm1, xmm0
movdqu xmmword [rax + r12], xmm1
mov eax, r10d
movdqu xmm0, xmmword [rax + r12]
movdqu xmm1, xmmword [rax + r15]
pxor xmm1, xmm0
movdqu xmmword [rax + r12], xmm1
lea eax, [r10 + 0x10]
add r10d, 0x40
movdqu xmm0, xmmword [rax + r12]
movdqu xmm1, xmmword [rax + r15]
pxor xmm1, xmm0
movdqu xmmword [rax + r12], xmm1
cmp edx, r8d
jb 0x180008f90
xor r10d, r10d
cmp edx, r9d
jae 0x180009031
mov ecx, edx
mov r8, r15
add rcx, r12
sub r8, r12
mov eax, r9d
sub eax, edx
mov edx, eax
nop dword [rax]
movzx eax, byte [r8 + rcx]
xor byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x180009020
mov rax, qword [rbp - 0x50]
xor r8d, r8d
mov qword [rsp + 0x40], r10
mov rdx, r12
mov qword [rsp + 0x38], r10
mov ecx, 0xaf
mov dword [rsp + 0x58], r9d
mov r9, r15
mov eax, dword [rax]
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x50], r13d
call fcn.180047680
mov edi, eax
test eax, eax
jne 0x180008de4
xor eax, eax
mov edx, eax
test r13d, r13d
je 0x1800092e5
cmp r13d, 0x40
jb 0x180009137
lea eax, [r13 - 1]
lea r8, [rsi + rax]
add rax, r15
cmp rsi, rax
ja 0x1800090ba
cmp r8, r15
jae 0x180009137
mov r8d, r13d
and r8d, 0xffffffc0
mov r9d, 0x20
nop word [rax + rax]
movdqu xmm0, xmmword [rdx + rsi]
lea eax, [r9 - 0x10]
movdqu xmm1, xmmword [rdx + r15]
pxor xmm1, xmm0
movdqu xmmword [rdx + rsi], xmm1
add edx, 0x40
movdqu xmm0, xmmword [rax + rsi]
movdqu xmm1, xmmword [rax + r15]
pxor xmm1, xmm0
movdqu xmmword [rax + rsi], xmm1
mov eax, r9d
movdqu xmm0, xmmword [rax + rsi]
movdqu xmm1, xmmword [rax + r15]
pxor xmm1, xmm0
movdqu xmmword [rax + rsi], xmm1
lea eax, [r9 + 0x10]
add r9d, 0x40
movdqu xmm0, xmmword [rax + rsi]
movdqu xmm1, xmmword [rax + r15]
pxor xmm1, xmm0
movdqu xmmword [rax + rsi], xmm1
cmp edx, r8d
jb 0x1800090d0
cmp edx, r13d
jae 0x1800092e5
mov ecx, edx
mov r8, r15
add rcx, rsi
sub r8, rsi
mov eax, r13d
sub eax, edx
mov edx, eax
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rcx]
xor byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x180009160
jmp 0x1800092e5
mov rax, qword [rbp - 0x70]
mov edx, r13d
mov r8, qword [rbp - 0x30]
mov rcx, rsi
movsxd rax, dword [rax]
lea r9, [rax + rax*4]
add r9, r9
lea rax, [0x180000000]
call qword [rax + r9*8 + 0x70b18]
cmp eax, r13d
je 0x1800091ac
mov edi, 9
jmp 0x180008de4
mov eax, dword [rsp + 0x64]
mov r9, r15
sub eax, r13d
mov dword [rsp + 0x58], r13d
dec eax
xor r8d, r8d
mov dword [rsp + 0x50], eax
mov rdx, rsi
mov rax, qword [rbp - 0x50]
mov ecx, 0xaf
mov eax, dword [rax]
mov dword [rsp + 0x70], eax
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
call fcn.180047680
mov edi, eax
test eax, eax
jne 0x180008de4
jmp 0x1800092e5
cmp dword [rcx], edx
jae 0x180009224
mov dword [rcx], edx
mov edi, 6
jmp 0x180008de4
xor eax, eax
mov dword [rsp + 0x60], eax
jmp 0x1800092ea
cmp r14d, 0xfcf0
je 0x1800092bd
cmp r14d, 0x12f68
je 0x18000928c
cmp r14d, 0x161e0
je 0x180008de4
cmp r14d, 0x19458
je 0x180009278
cmp r14d, 0x1c6d0
jne 0x1800092ea
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, edi
jmp 0x180008ae2
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x1800092e5
mov ecx, dword [rsp + 0x60]
mov edi, edx
sub edi, r13d
add rcx, r11
mov rdx, r12
lea r8d, [rdi - 1]
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [rsp + 0x60]
mov rax, qword [rsp + 0x78]
dec ecx
add ecx, edi
mov dword [rsp + 0x60], ecx
mov dword [rax], ecx
xor eax, eax
mov edi, eax
jmp 0x1800092e5
mov eax, dword [rsp + 0x60]
mov rdx, rsi
mov r8d, r13d
mov byte [rax + r11], 0
mov eax, dword [rsp + 0x60]
inc eax
mov ecx, eax
add rcx, r11
mov dword [rsp + 0x60], eax
call sub.VCRUNTIME140.dll_memcpy
add dword [rsp + 0x60], r13d
mov r9d, dword [rsp + 0x68]
mov edx, dword [rsp + 0x64]
mov rcx, qword [rsp + 0x78]
mov r11, qword [rbp - 0x40]
imul eax, r9d, 0x55
add r14d, eax
jmp 0x180008a78
cmp byte [rbp - 0x28], 1
sete byte [rbp - 0x68]
jmp 0x180008adf