Function at 0x1800f08d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xf0
mov rax, qword [0x1802242b8]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov r14, rcx
xor edi, edi
mov dword [rbp - 0x79], edi
mov r15, rdx
cmp qword [rdx + 0x18], 8
jb 0x1800f0918
mov r15, qword [rdx]
mov rsi, qword [rdx + 0x10]
call fcn.180152fbc
mov r12d, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
movdqa xmm1, xmmword [0x180162c70]
movdqu xmmword [rbp - 9], xmm1
mov byte [rbp - 0x19], 0
mov dword [rbp - 0x79], 8
test rsi, rsi
je 0x1800f09b6
cmp rsi, 0x7fffffff
ja 0x1800f0cd7
mov dword [rsp + 0x20], edi
xor r9d, r9d
mov r8d, esi
mov rdx, r15
mov ecx, eax
call fcn.18015302c
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x1800f0ce2
movsxd rdx, ebx
xor r8d, r8d
lea rcx, [rbp - 0x19]
call fcn.180044ce0
lea r9, [rbp - 0x19]
cmp qword [rbp - 1], 0x10
cmovae r9, qword [rbp - 0x19]
mov dword [rsp + 0x20], ebx
mov r8d, esi
mov rdx, r15
mov ecx, r12d
call fcn.18015302c
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x1800f0ccd
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x59]
call fcn.18000de40
lea rbx, [rbp - 0x59]
mov rcx, qword [rbp - 0x59]
mov rdx, qword [rbp - 0x41]
cmp rdx, 0x10
cmovae rbx, rcx
lea rsi, [rbp - 0x59]
cmovae rsi, rcx
mov r8, qword [rbp - 0x49]
add rsi, r8
cmp rbx, rsi
je 0x1800f0a0f
nop dword [rax + rax]
movsx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rbx], al
inc rbx
cmp rbx, rsi
jne 0x1800f09f0
mov rdx, qword [rbp - 0x41]
mov r8, qword [rbp - 0x49]
mov rcx, qword [rbp - 0x59]
lea rax, [rbp - 0x59]
cmp rdx, 0x10
cmovae rax, rcx
mov qword [rbp - 0x79], rax
mov qword [rbp - 0x71], r8
xor r8d, r8d
lea rdx, [rbp - 0x79]
lea rcx, [rbp + 0x17]
call fcn.180020820
mov r15d, Ordinal_60
mov rdx, qword [rbp - 0x41]
cmp rdx, 0x10
jb 0x1800f0a77
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800f0a72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800f0a72
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180153a5c
movdqa xmm0, xmmword [0x180162c70]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x1800f0ac6
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800f0ac1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800f0ac1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180153a5c
movdqa xmm0, xmmword [0x180162c70]
movdqu xmmword [rbp - 9], xmm0
mov byte [rbp - 0x19], 0
mov rcx, qword [r14 + 0x78]
mov rax, qword [r14 + 0x80]
cmp rcx, rax
je 0x1800f0c92
sub rax, rcx
sar rax, 5
movsxd r8, dword [r14 + 0x90]
mov rdx, r8
cmp r8, rax
jae 0x1800f0c92
cmp byte [r14 + 0x94], 0
je 0x1800f0bca
test r8d, r8d
jne 0x1800f0bca
mov esi, 1
cmp rax, rsi
jbe 0x1800f0bc3
mov edi, reloc.WLDAP32.dll_Ordinal_32
nop
lea rax, [rdi + rcx]
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x1800f0b42
mov rax, qword [rax]
mov qword [rbp + 7], rax
mov qword [rbp + 0xf], rcx
xor r8d, r8d
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x39]
call fcn.180020820
or r15d, 0x40
lea rax, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rax, qword [rbp - 0x39]
mov qword [rbp - 0x69], rax
mov rax, qword [rbp - 0x29]
mov qword [rbp - 0x61], rax
movaps xmm0, xmmword [rbp - 0x69]
movdqa xmmword [rbp - 0x79], xmm0
lea rdx, [rbp - 0x79]
lea rcx, [rbp + 0x17]
call fcn.1800fa900
mov ebx, eax
lea rcx, [rbp - 0x39]
call fcn.18000dad0
test ebx, ebx
je 0x1800f0c92
inc rsi
add rdi, 0x20
mov rcx, qword [r14 + 0x78]
mov rax, qword [r14 + 0x80]
sub rax, rcx
sar rax, 5
cmp rsi, rax
jb 0x1800f0b30
xor bl, bl
jmp 0x1800f0c94
shl rdx, 5
lea rbx, [rdx + rcx]
mov rdx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x1800f0bdf
mov rdx, qword [rbx]
mov rcx, qword [rbx + 0x10]
mov dword [rbp - 0x79], 0x100080f
nop word [rax + rax]
lea eax, [rdi + 0x21]
xor byte [rbp + rdi - 0x79], al
inc rdi
cmp rdi, 2
jb 0x1800f0bf0
mov byte [rbp - 0x76], 0
lea rax, [rbp - 0x79]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1800f0c10
cmp r8, rcx
jne 0x1800f0c2c
lea rcx, [rbp - 0x79]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1800f0c92
mov rax, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x1800f0c3a
mov rbx, qword [rbx]
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], rax
xor r8d, r8d
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x39]
call fcn.180020820
lea rax, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rax, qword [rbp - 0x39]
mov qword [rbp - 0x69], rax
mov rax, qword [rbp - 0x29]
mov qword [rbp - 0x61], rax
movaps xmm0, xmmword [rbp - 0x69]
movdqa xmmword [rbp - 0x69], xmm0
lea rdx, [rbp - 0x69]
lea rcx, [rbp + 0x17]
call fcn.1800fa900
test eax, eax
sete bl
lea rcx, [rbp - 0x39]
call fcn.18000dad0
jmp 0x1800f0c94
mov bl, 1
lea rcx, [rbp + 0x17]
call fcn.18000dad0
movzx eax, bl
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.180153af0
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
shr rcx, 0x20
call fcn.18003f200
int3
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.18003f1c0
int3
shr rbx, 0x20
mov ecx, ebx
call fcn.18003f200
int3