Function at 0x18004d9c0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x248]
sub rsp, 0x348
movdqa xmm0, xmmword [0x1800948f0]
lea r11, [0x180000000]
mov eax, dword [rbp + 0x2b8]
mov r10, r8
mov r9d, dword [rbp + 0x2b8]
mov r8, rcx
mov ebx, dword [rbp - 0x80]
movdqa xmm1, xmm0
mov r12, qword [rsp + 0x70]
mov r13, qword [rsp + 0x70]
lea edx, [rax + 0xc]
mov edi, dword [rbp + 0x2b8]
cmp eax, edx
mov r15d, dword [rbp + 0x2b8]
mov dword [rsp + 0x54], edx
mov rdx, qword [rsp + 0x70]
mov qword [rsp + 0x60], rdx
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
movdqu xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
movdqu xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x58], r9d
jae 0x18004e0b1
mov r14, qword [rsp + 0x70]
lea esi, [rax - 0xfe]
mov r11d, dword [rbp + 0x2b8]
mov ecx, dword [rsp + 0x54]
mov dword [rbp - 0x78], esi
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x40], r13
mov dword [rsp + 0x68], r11d
cmp esi, 0x15
ja case.default.0x18004dab3
lea rcx, [0x180000000]
mov ecx, dword [rcx + rsi*4 + 0x4e37c]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov ecx, r9d
call fcn.18006717c
mov qword [rbp - 0x70], rax
mov r14, rax
test r12, r12
je 0x18004dadd
test r13, r13
je 0x18004dadd
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x18004dadd
test rax, rax
jne 0x18004db55
mov esi, 0xa4
mov eax, esi
sub eax, 0xa1
je case.0x18004e05d.256
sub eax, 1
je 0x18004db3b
sub eax, 1
je 0x18004db0d
cmp eax, 1
jne 0x18004db43
test r12, r12
je 0x18004db43
mov rcx, r12
call fcn.180065650
jmp 0x18004db43
test r13, r13
je 0x18004db1a
mov rcx, r13
call fcn.180065650
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x18004db2c
mov rcx, rax
call fcn.180065650
test r14, r14
je 0x18004db43
mov rcx, r14
call fcn.180065650
jmp 0x18004db43
mov ebx, SafeArrayGetDim
mov dword [rbp - 0x80], ebx
dec esi
cmp esi, 0xa0
ja 0x18004dae2
mov rdx, qword [rsp + 0x60]
mov esi, dword [rbp - 0x78]
mov rax, qword [rbp + 0x298]
mov rcx, qword [rbp + 0x2c0]
mov eax, dword [rax]
dec eax
cmp byte [rax + rcx], 0xbc
jne 0x18004e0d6
jmp 0x18004dfef
mov eax, r9d
mov dword [rsp + 0x78], r11d
sub eax, r11d
lea rdx, [rsp + 0x78]
dec eax
mov r9, r14
mov dword [rbp - 0x60], eax
mov ecx, 0xf8
mov eax, dword [r8]
mov r8, r13
mov dword [rbp - 0x78], eax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
call fcn.18004b0a0
mov edi, eax
test eax, eax
jne case.0x18004e05d.261
jmp 0x18004dfea
mov rax, qword [rbp + 0x2b0]
mov qword [rsp + 0x70], rax
cmp qword [rax + 0x1a], 0
jne case.0x18004dab3.2
mov r14d, 0xc1
nop
mov eax, r14d
sub eax, 0xc1
je 0x18004dbff
cmp eax, 1
jne 0x18004dcb6
mov byte [rbp - 0x80], 0
mov ebx, dword [rbp - 0x80]
jmp case.0x18004e05d.256
mov esi, 0x39
lea r13d, [rsi + 0x3b]
cmp esi, 0x39
je 0x18004dc67
cmp esi, 0x1b9c
je 0x18004dc54
cmp esi, 0x36ff
je 0x18004dc3b
cmp esi, 0x5262
jne 0x18004dca0
mov r8, qword [sym.imp.WININET.dll_InternetSetCookieA]
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x40]
call fcn.180001170
jmp 0x18004dca0
movsd xmm0, qword [str.okie__p_n]
movzx eax, byte [0x1800931a8]
movsd qword [rbp - 0x4b], xmm0
mov byte [rbp - 0x43], al
jmp 0x18004dca0
lea rdx, [0x18008f13c]
lea rcx, [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x18004dca0
lea rdx, [0x180093188]
lea rcx, [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
movsd xmm0, qword [str.ternetSe]
lea rdx, reloc.OLEAUT32.dll_VarR4FromUI1
mov r8d, 1
movsd qword [rbp - 0x56], xmm0
lea rcx, [rbp - 0x58]
mov word [rbp - 0x4e], r13w
call fcn.1800666b0
add esi, 0x1b63
cmp esi, 0x6d8c
jbe 0x18004dc08
mov r13, qword [rbp - 0x40]
inc r14d
cmp r14d, 0xc3
jb 0x18004dbe0
mov r14, qword [rbp - 0x70]
mov esi, dword [rbp - 0x78]
jmp 0x18004dfea
mov rdx, qword [rbp + 0x2c0]
mov r15d, r9d
sub r15d, r11d
mov rcx, r12
dec r15d
mov r8d, r15d
call fcn.18005d880
mov r8d, dword [rsp + 0x68]
mov rcx, r14
mov edx, r15d
add rdx, qword [rbp + 0x2c0]
call fcn.18005d880
jmp 0x18004dfea
mov r10d, r9d
xor edx, edx
sub r10d, r11d
sub r10d, 1
je 0x18004ddf1
cmp r10d, 0x40
jb 0x18004ddc4
lea eax, [r10 - 1]
lea r8, [rax + r12]
add rax, r13
cmp r12, rax
ja 0x18004dd3e
cmp r8, r13
jae 0x18004ddc4
mov r9d, r10d
and r9d, 0xffffffc0
mov r8d, 0x20
nop dword [rax + rax]
movdqu xmm0, xmmword [rdx + r12]
lea eax, [r8 - 0x10]
movdqu xmm1, xmmword [rdx + r13]
pxor xmm1, xmm0
movdqu xmmword [rdx + r12], xmm1
add edx, 0x40
movdqu xmm0, xmmword [rax + r12]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r12], xmm1
mov eax, r8d
movdqu xmm0, xmmword [rax + r12]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r12], xmm1
lea eax, [r8 + 0x10]
add r8d, 0x40
movdqu xmm0, xmmword [rax + r12]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r12], xmm1
cmp edx, r9d
jb 0x18004dd50
mov r9d, dword [rsp + 0x58]
cmp edx, r10d
jae 0x18004ddf1
mov ecx, edx
mov r8, r13
add rcx, r12
sub r8, r12
sub r10d, edx
mov edx, r10d
nop word [rax + rax]
movzx eax, byte [r8 + rcx]
xor byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x18004dde0
mov r10, qword [rbp + 0x2a0]
lea ecx, [r9*8]
mov eax, 0xff
xor r15d, r15d
sub ecx, dword [r10]
inc ecx
sar eax, cl
mov ecx, r9d
and byte [r12], al
mov rax, qword [rbp + 0x2c8]
sub ecx, dword [rax]
sub ecx, r11d
sub ecx, 2
je 0x18004de44
mov rax, r12
nop word [rax + rax]
cmp byte [rax], 0
jne 0x18004e0d6
inc r15d
inc rax
cmp r15d, ecx
jb 0x18004de30
mov rdx, qword [rsp + 0x60]
mov r8, qword [rbp + 0x290]
jmp case.0x18004dab3.2
mov eax, dword [r10]
mov r9d, 0
test al, 7
setne r9b
shr eax, 3
add r9d, eax
mov rax, qword [rbp + 0x2c8]
mov dword [rsp + 0x58], r9d
mov eax, dword [rax]
cmp eax, r9d
ja 0x18004de98
add eax, 2
add eax, r11d
cmp r9d, eax
jb 0x18004de98
mov rax, qword [rbp + 0x298]
cmp dword [rax], r9d
je case.0x18004dab3.2
mov ebx, 0x16
mov edi, ebx
lea rcx, [rbp - 0x30]
call fcn.18000ac10
mov eax, edi
add rsp, 0x348
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, r9d
mov esi, r9d
call fcn.18006717c
mov ecx, esi
mov r12, rax
call fcn.18006717c
mov esi, dword [rbp - 0x78]
mov r13, rax
mov qword [rbp - 0x40], rax
jmp 0x18004dfea
mov ecx, r9d
call fcn.18006717c
mov rdx, rax
mov qword [rsp + 0x60], rax
jmp 0x18004dfef
mov rax, qword [rbp + 0x2c0]
lea ecx, [r9*8]
sub ecx, dword [r10]
mov edx, 0xff
inc ecx
add r15d, r11d
sar edx, cl
movzx eax, byte [rax]
not edx
test al, dl
jne 0x18004e0d6
mov rdx, qword [rsp + 0x60]
jmp case.0x18004dab3.2
mov eax, dword [r8]
lea r9, [rsp + 0x78]
xor r8d, r8d
mov dword [rsp + 0x78], eax
xor edx, edx
mov dword [rsp + 0x20], 0xc5
xor ecx, ecx
call fcn.18000efe0
mov edi, eax
test eax, eax
jne 0x18004de9f
mov r8, qword [rbp + 0x290]
lea rcx, [0x180000000]
mov rdx, qword [rsp + 0x60]
movsxd rax, dword [r8]
shl rax, 7
mov r11d, dword [rax + rcx + 0xa0ebc]
mov dword [rsp + 0x68], r11d
jmp 0x18004dffb
cmp qword [rbp + 0x2b0], 0
jne 0x18004dfaf
lea r9, [rsp + 0x78]
mov dword [rsp + 0x78], 0
mov r8d, 0x8c
lea rdx, [0x18008f048]
lea rcx, str.VPUNPCKLDQZrmbk
call fcn.1800064b0
mov rax, qword [rbp + 0x2a8]
test rax, rax
jne 0x18004dfe4
lea r9, [rsp + 0x78]
mov dword [rsp + 0x78], eax
mov r8d, 0x8c
lea rdx, [0x18008f048]
lea rcx, str._s__d___s_
call fcn.1800064b0
mov rax, qword [rbp + 0x2a8]
mov dword [rax], 0
mov rdx, qword [rsp + 0x60]
mov r8, qword [rbp + 0x290]
mov r11d, dword [rsp + 0x68]
mov r9d, dword [rsp + 0x58]
mov r10, qword [rbp + 0x2a0]
mov ecx, dword [rsp + 0x54]
mov eax, dword [rsp + 0x50]
inc eax
inc esi
mov dword [rsp + 0x50], eax
mov dword [rbp - 0x78], esi
cmp eax, ecx
jb 0x18004da92
mov rsi, qword [rbp - 0x70]
lea r11, [0x180000000]
mov eax, dword [rbp + 0x2b8]
mov r14d, eax
add eax, 0xfffffff5
cmp r14d, eax
jbe case.0x18004e05d.256
lea eax, [r14 - 0x100]
cmp eax, 0xa
ja case.default.0x18004e05d
mov ecx, dword [r11 + rax*4 + 0x4e3d4]
add rcx, r11
jmp rcx
mov rbx, qword [rsp + 0x70]
lea r8, [rbp - 0x30]
mov ecx, 0x24
lea rdx, [rbx + 0xa]
call fcn.180016120
movzx eax, word [rbx + 8]
lea r9, [rbp + 0x2b8]
mov r8, qword [rbp + 0x2d0]
lea rdx, [rbp - 0x30]
mov ecx, VarDecMul
mov word [rbp + 0x2b8], ax
mov qword [rsp + 0x20], 0
call fcn.180049f50
mov byte [rbp - 0x80], al
mov ebx, dword [rbp - 0x80]
jmp case.0x18004e05d.256
mov rsi, qword [rsp + 0x70]
mov ecx, dword [rbp + 0x2b8]
mov qword [rbp - 0x70], rsi
mov dword [rsp + 0x68], ecx
jmp 0x18004e033
mov eax, r15d
inc r15d
cmp byte [rax + r12], 1
je 0x18004e0e0
mov edi, 7
jmp case.0x18004e05d.261
movsxd rax, dword [r8]
lea rcx, [rbp - 0x68]
shl rax, 7
call qword [rax + r11 + 0xa0f08]
mov edi, eax
test eax, eax
jne case.0x18004e05d.261
jmp 0x18004e355
mov rcx, rsi
call fcn.180065650
mov rcx, qword [rsp + 0x60]
call fcn.180065650
mov rcx, r13
call fcn.180065650
mov rcx, r12
call fcn.180065650
jmp 0x18004e355
movsxd rax, dword [r8]
mov rcx, qword [rbp + 0x2c8]
shl rax, 7
mov edx, r15d
add rdx, r12
mov r8d, dword [rcx]
lea rcx, [rbp - 0x68]
call qword [rax + r11 + 0xa0f10]
mov edi, eax
test eax, eax
jne case.0x18004e05d.261
mov rax, qword [rbp + 0x290]
lea rcx, [rbp - 0x68]
mov rdx, r13
lea r8, [0x180000000]
movsxd rax, dword [rax]
shl rax, 7
call qword [rax + r8 + 0xa0f18]
mov edi, eax
test eax, eax
jne case.0x18004e05d.261
mov r8d, dword [rsp + 0x68]
mov rdx, rsi
mov rcx, r13
call fcn.18005e380
test eax, eax
jne 0x18004e1a5
mov rax, qword [rbp + 0x2a8]
mov dword [rax], 1
xor edi, edi
jmp 0x18004e355
movsxd rax, dword [r8]
mov rcx, qword [rbp + 0x2d0]
mov rdx, qword [rbp + 0x2b0]
shl rax, 7
mov r8d, dword [rcx]
lea rcx, [rbp - 0x68]
call qword [rax + r11 + 0xa0f10]
mov edi, eax
test eax, eax
jne case.0x18004e05d.261
jmp 0x18004e355
mov ebx, edi
jmp case.default.0x18004e05d
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], 0
mov r9d, 0x12
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov qword [rsp + 0x28], r13
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x70], 8
call fcn.180002540
jmp 0x18004e355
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], 0
xor r8d, r8d
mov qword [rsp + 0x30], rax
xor edx, edx
mov esi, r9d
xor ecx, ecx
mov qword [rsp + 0x28], r12
mov r9d, 0x12
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x70], rsi
call fcn.180002540
xor ecx, ecx
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x40], rcx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rcx
xor r8d, r8d
mov qword [rsp + 0x30], rax
xor edx, edx
mov qword [rsp + 0x28], r13
lea r9d, [rcx + 0x12]
mov qword [rsp + 0x20], rcx
call fcn.180002540
jmp 0x18004e351
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], 0
xor r8d, r8d
mov qword [rsp + 0x30], rax
xor ecx, ecx
mov qword [rsp + 0x28], rdx
xor edx, edx
mov esi, r9d
mov r9d, 0x12
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x20], 0
call fcn.180002540
xor ecx, ecx
mov qword [rsp + 0x70], rsi
mov rsi, qword [rbp - 0x70]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rcx
xor r8d, r8d
mov qword [rsp + 0x38], rcx
xor edx, edx
mov qword [rsp + 0x30], rax
lea r9d, [rcx + 0x12]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rcx
call fcn.180002540
jmp 0x18004e355
movsxd rax, dword [r8]
lea rcx, [rbp - 0x68]
shl rax, 7
mov r8d, 8
mov rdx, r13
call qword [rax + r11 + 0xa0f10]
mov edi, eax
test eax, eax
je 0x18004e355
mov r14d, 0x105
mov rsi, qword [rbp - 0x70]
mov rdx, qword [rsp + 0x60]
mov r9d, dword [rsp + 0x58]
lea r11, [0x180000000]
mov eax, dword [rbp + 0x2b8]
dec r14d
mov r8, qword [rbp + 0x290]
jmp 0x18004e036