Function at 0x18002d280
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
movdqa xmm0, xmmword [0x18027af90]
xor r15d, r15d
movdqu xmmword [rbp - 0x73], xmm0
mov word [rbp - 0x63], 0xc2
mov rdi, rdx
mov qword [rbp + 0x1c0], r15
movabs r14, 0xaaaaaaaaaaaaaaab
mov rax, qword [rbp + 0x1c0]
nop dword [rax]
mov rcx, qword [rbp + 0x1c0]
mov rax, qword [rbp + 0x1c0]
movzx r8d, byte [rbp + rax - 0x72]
mov rax, r14
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rbp + 0x1c0]
shl dl, 3
sub cl, dl
mov edx, 0x5ec1c446
sar edx, cl
xor dl, r8b
mov byte [rbp + rax - 0x72], dl
mov rax, qword [rbp + 0x1c0]
inc rax
mov qword [rbp + 0x1c0], rax
mov rax, qword [rbp + 0x1c0]
cmp rax, 0x10
jb 0x18002d2d0
xor eax, eax
mov byte [rbp - 0x62], r15b
mov byte [rsp + 0x6f], al
mov dword [rsp + 0x63], 0x6f7d78c8
mov dword [rsp + 0x67], 0xb2326e69
mov dword [rsp + 0x6b], 0x84bcc46e
mov qword [rbp + 0x1c0], r15
mov rax, qword [rbp + 0x1c0]
nop dword [rax]
mov rcx, qword [rbp + 0x1c0]
mov rax, qword [rbp + 0x1c0]
movzx r8d, byte [rsp + rax + 0x64]
mov rax, r14
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rbp + 0x1c0]
shl dl, 3
sub cl, dl
mov edx, 0x688ba02b
sar edx, cl
xor dl, r8b
mov byte [rsp + rax + 0x64], dl
mov rax, qword [rbp + 0x1c0]
inc rax
mov qword [rbp + 0x1c0], rax
mov rax, qword [rbp + 0x1c0]
cmp rax, 0xb
jb 0x18002d360
mov rax, qword gs:[0x58]
mov ecx, dword [0x1802848b4]
mov edx, 4
mov byte [rsp + 0x6f], r15b
mov rsi, qword [rax + rcx*8]
add rsi, rdx
mov eax, dword [rsi]
cmp dword [0x180286968], eax
jle 0x18002d416
lea rcx, [0x180286968]
call fcn.180249e18
cmp dword [0x180286968], 0xffffffff
jne 0x18002d416
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x180286968]
mov qword [0x18028a9f8], rax
call fcn.180249db8
mov eax, dword [rsi]
cmp dword [0x18028a99c], eax
jle 0x18002d44f
lea rcx, [0x18028a99c]
call fcn.180249e18
cmp dword [0x18028a99c], 0xffffffff
jne 0x18002d44f
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x18028a99c]
mov qword [0x18028a9a0], rax
call fcn.180249db8
mov rax, qword [0x18028a9f8]
lea rcx, [rsp + 0x64]
call rax
mov r8, qword [0x18028a9a0]
lea rdx, [rbp - 0x72]
mov rcx, rax
call r8
test rax, rax
je 0x18002db43
xor r9d, r9d
lea rcx, [rbp + 0x80]
mov qword [rsp + 0x20], rcx
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 0x25]
call rax
test eax, eax
js 0x18002db43
mov qword [rsp + 0x70], 4
xor edx, edx
mov qword [rbp + 0x1c0], 0x14
mov rcx, qword [rbp + 0x1c0]
mov rax, qword [rsp + 0x70]
add rcx, rax
mov qword [rsp + 0x2c8], rbx
mov qword [rbp + 0x1c0], rcx
lea rcx, [rbp - 0x10]
mov r8, qword [rbp + 0x1c0]
call fcn.18024b360
mov qword [rsp + 0x70], 0x3d
xor edx, edx
mov qword [rbp + 0x1c0], 0x2b
mov rcx, qword [rbp + 0x1c0]
mov rax, qword [rsp + 0x70]
add rcx, rax
mov qword [rbp + 0x1c0], rcx
lea rcx, [rbp + 0x10]
mov r8, qword [rbp + 0x1c0]
call fcn.18024b360
mov qword [rsp + 0x70], 0x30
mov rbx, 0xffffffffffffffff
mov qword [rbp + 0x1c0], 0x38
mov r8, rbx
mov rcx, qword [rbp + 0x1c0]
mov rax, qword [rsp + 0x70]
add rcx, rax
mov qword [rbp + 0x1c0], rcx
mov rax, qword [rbp + 0x1c0]
mov dword [rbp + 0x10], eax
lea rax, [rbp + 0x80]
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], r15b
nop
inc r8
cmp byte [rax + r8], r15b
jne 0x18002d570
lea rdx, [rbp + 0x80]
lea rcx, [rbp - 0x30]
call fcn.18023c100
xor eax, eax
mov dword [rsp + 0x54], 0xa9cb2e3f
mov byte [rsp + 0x62], al
mov dword [rsp + 0x58], 0x81b7d300
mov dword [rsp + 0x5c], 0xdb53c9c5
mov word [rsp + 0x60], 0xca27
mov qword [rbp + 0x1c0], r15
mov rax, qword [rbp + 0x1c0]
nop dword [rax]
mov rcx, qword [rbp + 0x1c0]
mov rax, qword [rbp + 0x1c0]
movzx r8d, byte [rsp + rax + 0x55]
mov rax, r14
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rbp + 0x1c0]
shl dl, 3
sub cl, dl
mov edx, 0xc8afb72
sar edx, cl
xor dl, r8b
mov byte [rsp + rax + 0x55], dl
mov rax, qword [rbp + 0x1c0]
inc rax
mov qword [rbp + 0x1c0], rax
mov rax, qword [rbp + 0x1c0]
cmp rax, 0xd
jb 0x18002d5c0
mov byte [rsp + 0x62], r15b
lea rax, [rsp + 0x55]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], r15b
jne 0x18002d630
lea rdx, [rsp + 0x55]
lea rcx, [rbp - 0x30]
call fcn.18023c260
xor eax, eax
mov word [rbp + 0x1d0], 0xc964
mov byte [rbp + 0x1d2], al
mov qword [rbp + 0x1c0], r15
mov rax, qword [rbp + 0x1c0]
nop word [rax + rax]
mov rcx, qword [rbp + 0x1c0]
mov rax, qword [rbp + 0x1c0]
movzx r8d, byte [rbp + rax + 0x1d1]
mov rax, r14
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rbp + 0x1c0]
shl dl, 3
sub cl, dl
mov edx, 0x5b144aeb
sar edx, cl
xor dl, r8b
mov byte [rbp + rax + 0x1d1], dl
mov rax, qword [rbp + 0x1c0]
inc rax
mov qword [rbp + 0x1c0], rax
mov rax, qword [rbp + 0x1c0]
cmp rax, 1
jb 0x18002d670
mov byte [rbp + 0x1d2], r15b
lea rax, [rbp + 0x1d1]
mov qword [rbp - 0x50], r15
mov r8, rbx
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], r15b
inc r8
cmp byte [rax + r8], r15b
jne 0x18002d6f4
lea rdx, [rbp + 0x1d1]
lea rcx, [rbp - 0x60]
call fcn.18023c100
mov r8, rbx
inc r8
cmp byte [rdi + r8], r15b
jne 0x18002d710
mov rdx, rdi
lea rcx, [rbp - 0x60]
call fcn.18023c260
xor eax, eax
mov word [rbp + 0x1d8], 0xea5a
mov byte [rbp + 0x1da], al
mov qword [rbp + 0x1c0], r15
mov rax, qword [rbp + 0x1c0]
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x1c0]
mov rax, qword [rbp + 0x1c0]
movzx r8d, byte [rbp + rax + 0x1d9]
mov rax, r14
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rbp + 0x1c0]
shl dl, 3
sub cl, dl
mov edx, 0x29a0e9c8
sar edx, cl
xor dl, r8b
mov byte [rbp + rax + 0x1d9], dl
mov rax, qword [rbp + 0x1c0]
inc rax
mov qword [rbp + 0x1c0], rax
mov rax, qword [rbp + 0x1c0]
cmp rax, 1
jb 0x18002d750
mov byte [rbp + 0x1da], r15b
lea rax, [rbp + 0x1d9]
mov r8, rbx
inc r8
cmp byte [rax + r8], r15b
jne 0x18002d7c4
lea rdx, [rbp + 0x1d9]
lea rcx, [rbp - 0x60]
call fcn.18023c260
mov dword [rsp + 0x50], 0x6e1ad9
mov qword [rbp + 0x1c0], r15
mov rax, qword [rbp + 0x1c0]
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rbp + 0x1c0]
mov rax, qword [rbp + 0x1c0]
movzx r8d, byte [rsp + rax + 0x51]
mov rax, r14
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rbp + 0x1c0]
shl dl, 3
sub cl, dl
mov edx, 0x6b907a36
sar edx, cl
xor dl, r8b
mov byte [rsp + rax + 0x51], dl
mov rax, qword [rbp + 0x1c0]
inc rax
mov qword [rbp + 0x1c0], rax
mov rax, qword [rbp + 0x1c0]
cmp rax, 2
jb 0x18002d800
mov byte [rsp + 0x53], r15b
lea rax, [rsp + 0x51]
inc rbx
cmp byte [rax + rbx], r15b
jne 0x18002d867
mov r8, rbx
lea rdx, [rsp + 0x51]
lea rcx, [rbp - 0x60]
call fcn.18023c260
movdqa xmm0, xmmword [0x18027ac00]
movdqu xmmword [rbp - 0x40], xmm0
mov qword [rbp + 0x1c0], r15
mov rax, qword [rbp + 0x1c0]
nop dword [rax]
mov rcx, qword [rbp + 0x1c0]
mov rax, qword [rbp + 0x1c0]
movzx r8d, byte [rbp + rax - 0x3f]
mov rax, r14
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rbp + 0x1c0]
shl dl, 3
sub cl, dl
mov edx, 0x29352b91
sar edx, cl
xor dl, r8b
mov byte [rbp + rax - 0x3f], dl
mov rax, qword [rbp + 0x1c0]
inc rax
mov qword [rbp + 0x1c0], rax
mov rax, qword [rbp + 0x1c0]
cmp rax, 0xe
jb 0x18002d8a0
mov byte [rbp - 0x31], r15b
call fcn.1800015c0
mov ecx, dword [rsi]
mov rbx, rax
cmp dword [0x180286968], ecx
jle 0x18002d942
lea rcx, [0x180286968]
call fcn.180249e18
cmp dword [0x180286968], 0xffffffff
jne 0x18002d942
mov rcx, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x18028a9f8], rcx
lea rcx, [0x180286968]
call fcn.180249db8
mov eax, dword [rsi]
cmp dword [0x18028a99c], eax
jle 0x18002d97b
lea rcx, [0x18028a99c]
call fcn.180249e18
cmp dword [0x18028a99c], 0xffffffff
jne 0x18002d97b
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x18028a99c]
mov qword [0x18028a9a0], rax
call fcn.180249db8
mov rax, qword [0x18028a9f8]
mov rcx, rbx
call rax
mov r8, qword [0x18028a9a0]
lea rdx, [rbp - 0x3f]
mov rcx, rax
call r8
test rax, rax
je 0x18002db29
cmp qword [rbp - 0x48], 0x10
lea r8, [rbp - 0x10]
mov qword [rsp + 0x48], r8
lea rdx, [rbp - 0x60]
cmovae rdx, qword [rbp - 0x60]
lea r8, [rbp + 0x10]
cmp qword [rbp - 0x18], 0x10
lea rcx, [rbp - 0x30]
mov qword [rsp + 0x40], r8
cmovae rcx, qword [rbp - 0x30]
xor r9d, r9d
mov qword [rsp + 0x38], r15
xor r8d, r8d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
call rax
test eax, eax
je 0x18002db29
movdqa xmm0, xmmword [0x18027b130]
xor eax, eax
mov byte [rbp - 0x74], al
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x19b9d103
mov qword [rbp + 0x1c0], r15
mov rax, qword [rbp + 0x1c0]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x1c0]
mov rax, qword [rbp + 0x1c0]
movzx r8d, byte [rsp + rax + 0x79]
mov rax, r14
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rbp + 0x1c0]
shl dl, 3
sub cl, dl
mov edx, 0x39b4a297
sar edx, cl
xor dl, r8b
mov byte [rsp + rax + 0x79], dl
mov rax, qword [rbp + 0x1c0]
inc rax
mov qword [rbp + 0x1c0], rax
mov rax, qword [rbp + 0x1c0]
cmp rax, 0x13
jb 0x18002da20
mov byte [rbp - 0x74], r15b
call fcn.1800015c0
mov edx, dword [rsi]
mov rbx, rax
cmp dword [0x180286968], edx
jle 0x18002dac2
lea rcx, [0x180286968]
call fcn.180249e18
cmp dword [0x180286968], 0xffffffff
jne 0x18002dac2
mov rdx, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x180286968]
mov qword [0x18028a9f8], rdx
call fcn.180249db8
mov eax, dword [rsi]
cmp dword [0x18028a99c], eax
jle 0x18002dafb
lea rcx, [0x18028a99c]
call fcn.180249e18
cmp dword [0x18028a99c], 0xffffffff
jne 0x18002dafb
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x18028a99c]
mov qword [0x18028a9a0], rax
call fcn.180249db8
mov rax, qword [0x18028a9f8]
mov rcx, rbx
call rax
mov r8, qword [0x18028a9a0]
lea rdx, [rsp + 0x79]
mov rcx, rax
call r8
test rax, rax
je 0x18002db29
mov rcx, qword [rbp - 0x10]
mov edx, 0x1388
call rax
lea rcx, [rbp - 0x60]
call fcn.18023c0a0
lea rcx, [rbp - 0x30]
call fcn.18023c0a0
mov rbx, qword [rsp + 0x2c8]
add rsp, 0x290
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret