Function at 0x180049404
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov eax, dword [rsp + 0xa0]
lea esi, [r8 + 0xaed]
mov rbx, qword [rsp + 0x98]
mov r15d, edx
mov ebp, ecx
mov r12d, 0x585
xor r15d, 0x5d0
xor ebp, r12d
lea edi, [rax - 0x591]
lea edx, [rdi + 0x6cc]
lea r14d, [rax - 0x1df]
lea r13d, [rax - 0x29b]
cmp ebp, edx
jl 0x1800494cd
mov ecx, ebp
mov qword [r11 - 0x40], rbx
xor ecx, 0xd72
mov dword [rsp + 0x20], edi
lea r9d, [rsi - 0xaac]
call sym.xellxsz554sa6.dll_FoOixh
xor esi, 0x7b7a
sub ebp, 0x31a
xor r14d, 0x6f9
mov r9, rbx
xor r15d, 0x474
lea eax, [rbp - 0x4f7]
lea r8d, [rsi - 0x13b]
mov dword [rsp + 0x20], eax
lea edx, [r14 + 0x756]
lea ecx, [rsi + 0x293]
call fcn.180042488
mov edi, eax
xor esi, 0xb45
cmp r13d, r14d
jl 0x180049592
mov edx, dword [rbx + 0x34]
jmp 0x18004950f
mov rax, qword [section..data]
mov ecx, dword [rax + 0x10]
sub ecx, dword [rax + 0x5c]
mov eax, edx
imul eax, edx
inc ecx
or dword [rbx + 0x10], ecx
add dword [rbx + 0xec], eax
mov eax, 0xf
and dword [rbx + 0x134], 0
sub eax, dword [0x18018d10c]
add dword [rbx + 0x2c], eax
inc edx
cmp edx, dword [rbx + 0x50]
jbe 0x1800494db
lea ecx, [r15 + 0xa08]
sub edi, 0x18
xor ecx, 0x7369
lea edx, [r14 + 0x891]
lea r9d, [r13 - 0x4bb]
xor edx, r12d
lea r8d, [rsi + 0x629]
add edx, 0x45e
lea eax, [rdi + 0xd0d]
xor r8d, 0x6f9
mov dword [rsp + 0x30], eax
lea r10d, [rcx - 0x132]
mov dword [rsp + 0x28], r9d
xor ecx, 0x356
mov r9, qword [section..data]
mov dword [rsp + 0x20], r10d
call fcn.180041098
cmp dword [0x18018d0b4], 0xd0a1
je 0x180049699
mov dword [rbx + 0x28], 0xd119f
jmp 0x180049699
mov r9, qword [section..data]
or ebp, 0x3245
cmp dword [r9 + 0x94], ebp
jbe 0x1800495ff
mov eax, dword [rbx + 0x13c]
mov ebp, esi
xor eax, dword [rbx + 0xa0]
cmp esi, eax
ja 0x1800495ff
lea r12d, [r15 + r15]
mov ecx, dword [rbx + 0x6c]
sub ecx, edi
xor ecx, dword [rbx + 4]
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov eax, dword [rbx + 0x6c]
add ebp, 4
or dword [rbx + 0x134], r12d
add eax, r15d
or eax, dword [rbx + 0xc4]
mov dword [rbx + 0xdc], eax
mov eax, dword [rbx + 0x13c]
xor eax, dword [rbx + 0xa0]
cmp ebp, eax
jbe 0x1800495be
mov r9, qword [section..data]
mov eax, dword [r9 + 0x9c]
or eax, 0x38e9
xor eax, 0x31c5
cmp esi, eax
je 0x18004963e
imul eax, edi, 0x373c
cmp esi, eax
jl 0x180049699
mov eax, dword [rbx + 0x30]
imul eax, esi
imul eax, eax, 0x388d
xor edi, eax
mov eax, dword [r9 + 0x10c]
add eax, 0x363f
xor dword [r9 + 0x24], eax
jmp 0x180049699
mov r11d, dword [rbx + 0xf4]
or r14d, 0x322b
sub r11d, dword [r9 + 0x98]
mov edx, r14d
mov r10d, dword [r9 + 0x14c]
or r11d, edi
mov ecx, dword [rbx + 0x38]
sub r10d, 0x3724
mov eax, dword [r9 + 0x2c]
mov r8d, dword [r9 + 0x74]
xor eax, 0x3a56
or ecx, dword [0x18018d0e4]
and r8d, 0x3680
mov dword [rsp + 0x30], r11d
sub ecx, edi
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], eax
call fcn.18004a7b0
lea r11, [rsp + 0x40]
xor edi, 0x7315
mov rbx, qword [r11 + 0x30]
mov eax, edi
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret