Function at 0x1400017b0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x118
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xe0], xmm8
movaps xmmword [rsp + 0xf0], xmm9
movaps xmmword [rsp + 0x100], xmm10
movdqa xmm6, xmmword [str.WN_PQ]
mov edx, 0x39
movd xmm7, dword [0x1400260c0]
lea rbx, [rsp + 0x90]
mov rsi, rcx
movaps xmmword [rsp + 0x90], xmm6
movd dword [rsp + 0xa0], xmm7
mov rax, rbx
lea rcx, [rsp + 0xa4]
nop word [rax + rax]
xor word [rax], dx
add rax, 2
add edx, 1
cmp rcx, rax
jne 0x140001830
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
mov r15, rax
je 0x140001a31
mov rax, qword [0x1400260e0]
mov edx, 0x5222
mov ecx, 0x39
movdqa xmm0, xmmword [str.wNjIXLF_t___6_3__e___]
mov word [rsp + 0xa8], dx
lea r8, [rsp + 0xaa]
sub ecx, ebx
movaps xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], rax
mov rax, rbx
nop word [rax + rax]
lea edx, [rcx + rax]
xor byte [rax], dl
add rax, 1
cmp r8, rax
jne 0x140001898
mov rdx, rbx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
mov r12, rax
je 0x140001a31
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdi, rbx
mov ecx, 6
xor edx, edx
mov r10, rax
xor eax, eax
mov r9d, 0x30
rep stosq qword [rdi], rax
mov r8, rbx
mov rcx, r10
mov qword [rsp + 0x20], 0
call r12
test eax, eax
jne 0x140001a31
mov rax, qword [rsp + 0x98]
lea r12, [rsp + 0x80]
lea r10, [rsp + 0x50]
lea rbp, [rsp + 0x70]
lea rbx, [rsp + 0x64]
mov rax, qword [rax + 0x18]
mov r14, qword [rax + 0x20]
lea r8, [rax + 0x20]
cmp r8, r14
je 0x140001a27
mov qword [rsp + 0x48], r15
mov r15, rbx
mov rbx, r8
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x38], r10
mov qword [rsp + 0x40], rbp
nop word [rax + rax]
movzx eax, word [r14 + 0x38]
mov qword [rsp + 0x70], r12
mov rbp, qword [r14 + 0x40]
shr rax, 1
test rbp, rbp
jne 0x14000196f
test rax, rax
jne 0x140001c65
lea rsi, [rax + rax]
cmp rax, 7
mov qword [rsp + 0x50], rax
ja 0x140001a90
cmp rsi, 2
jne 0x140001a70
movzx edx, word [rbp]
mov word [rsp + 0x80], dx
mov rdi, qword [rsp + 0x38]
mov rdx, r12
mov r13, qword [rsp + 0x40]
mov qword [rsp + 0x78], rax
xor eax, eax
mov word [rdx + rsi], ax
mov rax, rdi
mov edx, 0x39
movaps xmmword [rsp + 0x50], xmm6
movd dword [rsp + 0x60], xmm7
nop dword [rax + rax]
xor word [rax], dx
add rax, 2
add edx, 1
cmp rax, r15
jne 0x1400019c8
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
xor r8d, r8d
mov rdx, rdi
mov rcx, r13
mov r9, rax
call fcn.140016de0
cmp rax, 0xffffffffffffffff
jne 0x140001adb
mov rcx, qword [rsp + 0x70]
cmp rcx, r12
je 0x140001a16
mov rax, qword [rsp + 0x80]
lea rdx, [rax + rax + 2]
call fcn.140023c10
mov r14, qword [r14]
cmp rbx, r14
jne 0x140001950
mov r15, qword [rsp + 0x48]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
movaps xmm6, xmmword [rsp + 0xc0]
movaps xmm7, xmmword [rsp + 0xd0]
movaps xmm8, xmmword [rsp + 0xe0]
movaps xmm9, xmmword [rsp + 0xf0]
movaps xmm10, xmmword [rsp + 0x100]
add rsp, 0x118
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
test rsi, rsi
je 0x140001998
lea rdi, [rsp + 0x50]
mov rcx, r12
lea r13, [rsp + 0x70]
jmp 0x140001abd
mov rcx, qword [rsp + 0x40]
xor r8d, r8d
mov rdx, qword [rsp + 0x38]
mov r13, rcx
mov rdi, rdx
call fcn.140021870
mov rcx, rax
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x80], rax
mov r8, rsi
mov rdx, rbp
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x70]
lea rsi, [rax + rax]
jmp 0x1400019a5
mov rax, qword [0x140026100]
lea rdx, [rsp + 0x68]
mov rbx, r15
mov rsi, qword [rsp + 0x160]
mov r15, qword [rsp + 0x48]
movdqa xmm0, xmmword [str.wNzPQQ_5]
movq xmm3, qword [0x1400260a8]
movq xmm10, qword [0x140026108]
movq xmm9, qword [0x140026110]
movq xmm8, qword [0x140026118]
movq xmm7, qword [0x140026120]
movq xmm4, qword [0x140026128]
movq xmm6, qword [str.99999999]
mov r14, qword [r14 + 0x20]
mov qword [rsp + 0x60], rax
mov rax, rdi
movaps xmmword [rsp + 0x50], xmm0
movdqa xmm2, xmm3
paddd xmm3, xmm10
add rax, 8
movdqa xmm1, xmm2
movdqa xmm5, xmm2
movdqa xmm0, xmm2
paddd xmm1, xmm9
punpcklwd xmm5, xmm1
punpcklwd xmm0, xmm1
movdqa xmm1, xmm2
paddd xmm2, xmm7
paddd xmm1, xmm8
pshufd xmm5, xmm5, 0x4e
punpcklwd xmm0, xmm5
pand xmm0, xmm4
movdqa xmm5, xmm1
punpcklwd xmm1, xmm2
punpcklwd xmm5, xmm2
pshufd xmm5, xmm5, 0x4e
punpcklwd xmm1, xmm5
pand xmm1, xmm4
packuswb xmm0, xmm1
pshufd xmm0, xmm0, 8
paddb xmm0, xmm6
movq xmm1, qword [rax - 8]
pxor xmm1, xmm0
movq qword [rax - 8], xmm1
cmp rdx, rax
jne 0x140001b4b
mov rdx, rdi
mov rcx, r14
call fcn.140001650
movdqa xmm0, xmmword [str.wNNX_i_366___v__h]
mov ecx, 0x39
mov qword [rsi], rax
mov rax, rdi
mov dword [rsp + 0x60], 0x4c323826
sub ecx, edi
movaps xmmword [rsp + 0x50], xmm0
nop dword [rax]
lea edx, [rcx + rax]
xor byte [rax], dl
add rax, 1
cmp rbx, rax
jne 0x140001bf8
mov rdx, rdi
mov rcx, r14
call fcn.140001650
cmp qword [rsi], 0
mov qword [rsi + 8], rax
mov rcx, qword [rsp + 0x70]
je 0x140001c45
test rax, rax
je 0x140001c45
cmp rcx, r12
je 0x140001a27
mov rax, qword [rsp + 0x80]
lea rdx, [rax + rax + 2]
call fcn.140023c10
jmp 0x140001a27
cmp rcx, r12
je 0x140001a31
mov rax, qword [rsp + 0x80]
lea rdx, [rax + rax + 2]
call fcn.140023c10
jmp 0x140001a31
lea rcx, [0x140026070]
call fcn.1400244c0
mov rbx, rax
mov rcx, r13
call fcn.14001f750
mov rcx, rbx
call fcn.14000cd80
nop
nop
nop word cs:[rax + rax]