Function at 0x1800031c0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xa0
mov rdi, rdx
mov rbx, rcx
mov qword [rbp + 0x17], rcx
xor r15d, r15d
mov esi, r15d
mov dword [rbp - 0x49], r15d
mov ecx, dword [0x18019b24c]
mov rax, qword gs:[0x58]
mov edx, 4
mov rax, qword [rax + rcx*8]
mov eax, dword [rdx + rax]
cmp dword [0x18019b290], eax
jle 0x1800032b6
lea rcx, [0x18019b290]
call fcn.18000af78
cmp dword [0x18019b290], 0xffffffff
jne 0x1800032b6
movdqa xmm0, xmmword [0x180018ad0]
movdqa xmmword [rbp - 0x39], xmm0
movdqa xmm1, xmmword [0x180018af0]
movdqa xmmword [rbp - 0x29], xmm1
movdqa xmm0, xmmword [0x180018ae0]
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm1, xmmword [0x180018b80]
movdqa xmmword [rbp - 9], xmm1
mov word [rbp + 7], pe_nt_image_headers64
mov edx, r15d
nop dword [rax]
lea eax, [rdx - 0x7d]
xor byte [rbp + rdx - 0x39], al
inc rdx
cmp rdx, 0x40
jb 0x180003270
mov byte [rbp + 8], 0
lea r8, [rbp + 7]
lea rdx, [rbp - 0x39]
lea rcx, [0x18019b2a0]
call fcn.1800089e0
mov esi, 6
lea rcx, [0x18000c870]
call fcn.18000b620
nop
lea rcx, [0x18019b290]
call fcn.18000af0c
mov eax, dword [rdi + 0x10]
mov r12d, r15d
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r12b
or esi, 1
mov dword [rbp - 0x49], esi
test eax, eax
je 0x180003752
mov r14, r15
mov rsi, r15
movzx r13d, byte [rbp - 0x58]
nop word [rax + rax]
dec eax
mov dword [rbp - 0x51], eax
mov rax, rdi
mov rcx, qword [rdi + 0x18]
cmp rcx, 0xf
jbe 0x180003305
mov rax, qword [rdi]
cmp byte [r14 + rax], 0x3d
je 0x18000358f
mov rax, rdi
cmp rcx, 0xf
jbe 0x18000331c
mov rax, qword [rdi]
movsx ecx, byte [r14 + rax]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isalnum]
test eax, eax
jne 0x180003359
mov rax, rdi
mov rcx, qword [rdi + 0x18]
cmp rcx, 0xf
jbe 0x18000333b
mov rax, qword [rdi]
cmp byte [rax + r14], 0x2b
je 0x180003359
mov rax, rdi
cmp rcx, 0xf
jbe 0x18000334e
mov rax, qword [rdi]
cmp byte [rax + r14], 0x2f
jne 0x18000358f
mov rax, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x180003366
mov rax, qword [rdi]
movzx eax, byte [rax + r14]
mov byte [rbp + rsi - 0x59], al
inc r12d
inc rsi
inc r14
mov qword [rbp - 0x41], r14
cmp rsi, 4
jne 0x18000357f
lea r14, [0x18019b2a0]
mov r12, qword [0x18019b2a0]
mov r13, qword [0x18019b2b8]
cmp r13, 0xf
cmova r14, r12
mov rsi, qword [0x18019b2b0]
test rsi, rsi
je 0x1800033c8
movsx edx, byte [rbp - 0x59]
mov r8, rsi
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1800033c8
sub rax, r14
jmp 0x1800033cf
mov rax, 0xffffffffffffffff
mov byte [rbp - 0x59], al
lea r14, [0x18019b2a0]
cmp r13, 0xf
cmova r14, r12
test rsi, rsi
je 0x180003402
movsx edx, byte [rbp - 0x58]
mov r8, rsi
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
mov r13, rax
test rax, rax
je 0x180003402
sub r13, r14
jmp 0x180003409
mov r13, 0xffffffffffffffff
mov byte [rbp - 0x58], r13b
lea r12, [0x18019b2a0]
cmp qword [0x18019b2b8], 0xf
cmova r12, qword [0x18019b2a0]
test rsi, rsi
je 0x180003445
movsx edx, byte [rbp - 0x57]
mov r8, rsi
mov rcx, r12
call sub.VCRUNTIME140.dll_memchr
mov r14, rax
test rax, rax
je 0x180003445
sub r14, r12
jmp 0x18000344c
mov r14, 0xffffffffffffffff
mov byte [rbp - 0x57], r14b
lea r12, [0x18019b2a0]
cmp qword [0x18019b2b8], 0xf
cmova r12, qword [0x18019b2a0]
test rsi, rsi
je 0x180003488
movsx edx, byte [rbp - 0x56]
mov r8, rsi
mov rcx, r12
call sub.VCRUNTIME140.dll_memchr
mov rcx, rax
test rax, rax
je 0x180003488
sub rcx, r12
jmp 0x18000348f
mov rcx, 0xffffffffffffffff
mov byte [rbp - 0x56], cl
movzx r9d, r13b
shr r9b, 4
and r9b, 3
movzx eax, byte [rbp - 0x59]
shl al, 2
add r9b, al
movzx esi, byte [rbp - 0x57]
shr sil, 2
and sil, 0xf
movzx eax, r13b
shl al, 4
add sil, al
shl r14b, 6
add r14b, cl
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x1800034f1
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0xf
jbe 0x1800034e6
mov rax, qword [rbx]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1800034f9
mov rcx, rbx
call fcn.180009680
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x180003525
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0xf
jbe 0x18000351a
mov rax, qword [rbx]
mov byte [rax + rcx], sil
mov byte [rax + rcx + 1], 0
jmp 0x180003531
movzx r9d, sil
mov rcx, rbx
call fcn.180009680
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x180003567
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0xf
jbe 0x180003552
mov rax, qword [rbx]
mov byte [rax + rcx], r14b
mov byte [rax + rcx + 1], 0
mov r12d, r15d
mov rsi, r15
mov r14, qword [rbp - 0x41]
jmp 0x180003584
movzx r9d, r14b
mov rcx, rbx
call fcn.180009680
mov r12d, r15d
mov rsi, r15
mov r14, qword [rbp - 0x41]
jmp 0x180003584
movzx r13d, byte [rbp - 0x58]
mov eax, dword [rbp - 0x51]
test eax, eax
jne 0x1800032f0
test r12d, r12d
je 0x180003752
movsxd rax, r12d
cmp rax, 4
jge 0x1800035c0
jae 0x180003770
mov byte [rbp + rax - 0x59], 0
inc rax
cmp rax, 4
jl 0x1800035a1
movzx r13d, byte [rbp - 0x58]
nop word [rax + rax]
lea rdi, [0x18019b2a0]
mov r14, qword [0x18019b2a0]
cmp qword [0x18019b2b8], 0xf
cmova rdi, r14
mov rsi, qword [0x18019b2b0]
test rsi, rsi
je 0x180003603
movsx edx, byte [rbp - 0x59]
mov r8, rsi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x180003603
sub rax, rdi
mov qword [rbp - 0x51], rax
jmp 0x18000360b
mov qword [rbp - 0x51], 0xffffffffffffffff
lea rdi, [0x18019b2a0]
cmp qword [0x18019b2b8], 0xf
cmova rdi, r14
test rsi, rsi
je 0x18000363f
movsx edx, r13b
mov r8, rsi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov r14, rax
test rax, rax
je 0x18000363f
sub r14, rdi
jmp 0x180003646
mov r14, 0xffffffffffffffff
lea r13, [0x18019b2a0]
cmp qword [0x18019b2b8], 0xf
cmova r13, qword [0x18019b2a0]
test rsi, rsi
je 0x18000367e
movsx edx, byte [rbp - 0x57]
mov r8, rsi
mov rcx, r13
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x18000367e
sub rdi, r13
jmp 0x180003685
mov rdi, 0xffffffffffffffff
cmp qword [0x18019b2b8], 0xf
lea r13, [0x18019b2a0]
cmova r13, qword [0x18019b2a0]
test rsi, rsi
je 0x1800036bd
movsx edx, byte [rbp - 0x56]
mov r8, rsi
mov rcx, r13
call sub.VCRUNTIME140.dll_memchr
mov rdx, rax
test rax, rax
je 0x1800036bd
sub rdx, r13
jmp 0x1800036c4
mov rdx, 0xffffffffffffffff
movzx eax, r14b
shr al, 4
and al, 3
mov rcx, qword [rbp - 0x51]
shl cl, 2
add al, cl
mov byte [rbp - 0x59], al
movzx eax, dil
shr al, 2
and al, 0xf
shl r14b, 4
add al, r14b
mov byte [rbp - 0x58], al
shl dil, 6
add dil, dl
mov byte [rbp - 0x57], dil
lea eax, [r12 - 1]
movsxd rdi, eax
test eax, eax
jle 0x180003752
nop dword [rax]
nop word [rax + rax]
movzx r9d, byte [rbp + r15 - 0x59]
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x180003742
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0xf
jbe 0x180003737
mov rax, qword [rbx]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x18000374a
mov rcx, rbx
call fcn.180009680
inc r15
cmp r15, rdi
jl 0x180003710
mov rax, rbx
mov rbx, qword [rsp + 0xf0]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18000b0f8
int3