Function at 0x180048d10
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0xc8
mov eax, dword [rbp + 0x8f]
mov r9, rcx
mov r11, qword [rbp + 0x9f]
mov r10, r8
mov edi, dword [rbp + 0x8f]
mov edx, eax
mov r12d, dword [rbp + 0x8f]
mov r15, qword [rbp - 0x31]
lea ecx, [rax - 0xf]
mov ebx, dword [rbp + 0x8f]
cmp eax, ecx
mov r13, qword [rbp - 0x31]
mov dword [rbp - 0x59], ecx
mov rcx, qword [rbp - 0x31]
mov qword [rbp - 0x51], rcx
mov dword [rbp - 0x45], eax
jbe 0x180049325
mov r8d, dword [rbp + 0x8f]
lea esi, [rax - 0x1e]
mov r14, qword [rbp - 0x31]
mov eax, dword [rbp - 0x59]
mov dword [rbp - 0x39], esi
mov dword [rbp - 0x21], r8d
nop dword [rax]
cmp esi, 0x2d
ja case.default.0x180048dc9
lea rcx, [0x180000000]
movzx eax, byte [rcx + rsi + 0x49928]
mov ecx, dword [rcx + rax*4 + 0x498e8]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov rax, qword [rbp + 0x6f]
mov r8, r10
mov r9, qword [rbp + 0x77]
mov rcx, r10
mov edx, dword [rbp - 0x1d]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
call qword [0x180070ad0]
mov edi, eax
jmp 0x18004927a
test r9, r9
jne case.0x180048dc9.1
lea rcx, str.Fallback_
lea r8, [rbp - 0x39]
mov dword [rbp - 0x39], 0
mov edx, 0xa8
lea r9, [0x180062423]
call fcn.1800175c0
jmp 0x18004927a
mov rax, qword [rbp + 0x97]
lea ecx, [r12 + r12]
mov edx, 0
mov eax, dword [rax]
test al, 7
setne dl
shr eax, 3
add edx, eax
mov dword [rbp - 0x21], edx
lea eax, [rdx - 2]
cmp ecx, eax
jae 0x1800492ae
mov rax, qword [rbp + 0x87]
cmp dword [rax], edx
jne 0x1800492ae
mov ecx, edx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
jmp 0x18004927a
cmp qword [rbp + 0x67], 0
jne 0x180048ea8
lea r9, [0x180062423]
mov dword [rbp - 0x39], 0
lea r8, [rbp - 0x39]
mov edx, 0xa8
lea rcx, str.Criar_parti
call fcn.1800175c0
mov edx, dword [rbp - 0x45]
mov r11, qword [rbp + 0x9f]
mov r9, qword [rbp + 0x4f]
cmp qword [rbp + 0xa7], 0
jne case.0x180048dc9.1
lea rcx, str.RestoreIfBlank
jmp 0x180048e06
mov rax, qword [rbp + 0x6f]
mov rcx, qword [rax + 0x18]
call qword [0x1800709e0]
mov rdx, qword [rbp + 0x77]
mov ecx, dword [rdx]
cmp eax, ecx
ja 0x1800492b8
mov rax, qword [rbp + 0x7f]
mov dword [rbp - 0x1d], ecx
mov rcx, qword [rbp + 0x5f]
cmp dword [rax], 2
jne 0x180048f86
mov rax, qword [rbp + 0x57]
lea r8, [rbp - 0x61]
mov r9, qword [rbp + 0x97]
mov rdx, qword [rbp + 0x67]
mov eax, dword [rax]
mov dword [rbp - 0x41], eax
mov rax, qword [rbp + 0xa7]
mov eax, dword [rax]
mov dword [rbp - 0x29], eax
mov eax, dword [rbp - 0x11]
mov dword [rbp - 0x61], eax
mov rax, qword [rbp + 0x9f]
mov eax, dword [rax]
mov dword [rbp - 0x19], eax
mov rax, qword [rbp + 0x87]
mov eax, dword [rax]
mov dword [rbp - 0x39], eax
mov rax, qword [rbp + 0x4f]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x1d]
mov qword [rsp + 0x48], rcx
mov ecx, 0x98
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x39]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x19]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x41]
mov qword [rsp + 0x20], rax
call fcn.1800088a0
test eax, eax
jne 0x1800498ca
jmp 0x18004927a
mov rax, qword [rbp + 0xa7]
lea r9, [rbp - 0x41]
lea r8, [rbp - 0x29]
mov dword [rbp - 0x19], 2
lea rdx, [rbp - 0x19]
mov eax, dword [rax]
mov dword [rbp - 0x41], eax
mov eax, dword [rbp - 0x11]
mov dword [rbp - 0x29], eax
mov rax, qword [rbp + 0x87]
mov eax, dword [rax]
mov dword [rbp - 0x61], eax
mov rax, qword [rbp + 0x4f]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x1d]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp + 0x67]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x61]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x11d
call fcn.180023b30
test eax, eax
jne 0x1800498ca
jmp 0x18004927a
mov rbx, qword [rbp + 0x57]
test rbx, rbx
jne 0x180049024
lea r9, [0x180062423]
mov dword [rbp - 0x61], ebx
lea r8, [rbp - 0x61]
mov edx, 0xa8
lea rcx, str.nvoglnt.dll
call fcn.1800175c0
mov r11, qword [rbp + 0x9f]
xor r8d, r8d
mov dword [rbx], 0
mov eax, dword [r11]
lea rcx, [rbp - 0x61]
mov dword [rbp - 0x61], eax
lea edx, [r8 + 0x68]
call fcn.1800401b0
mov ebx, eax
test eax, eax
jne 0x1800498ca
mov r11, qword [rbp + 0x9f]
lea rcx, [0x180000000]
movsxd rax, dword [r11]
shl rax, 7
mov r12d, dword [rax + rcx + 0x6f95c]
jmp 0x180049281
test r10, r10
jne 0x180049091
lea r9, [0x180062423]
mov dword [rbp - 0x61], r10d
lea r8, [rbp - 0x61]
mov edx, 0xa8
lea rcx, str.SetTexelMap
call fcn.1800175c0
cmp qword [rbp + 0x77], 0
jne 0x1800490bb
lea r9, [0x180062423]
mov dword [rbp - 0x61], 0
lea r8, [rbp - 0x61]
mov edx, 0xa8
lea rcx, str.FILES_MATCHING
call fcn.1800175c0
cmp qword [rbp + 0x6f], 0
jne 0x18004927a
mov dword [rbp - 0x61], 0
lea r8, [rbp - 0x61]
lea rcx, str.eBISECTING
jmp 0x180048e11
test r9, r9
jne case.0x180048dc9.1
mov dword [rbp - 0x61], r9d
lea r8, [rbp - 0x61]
lea rcx, str.requestQuit
jmp 0x180048e11
mov rax, qword [rbp + 0xa7]
lea rcx, [rbp - 0x61]
mov r9d, 0xd4
xor r8d, r8d
xor edx, edx
mov eax, dword [rax]
mov dword [rbp - 0x61], eax
call fcn.180015080
test eax, eax
jne 0x1800498ca
mov rax, qword [rbp + 0x7f]
cmp dword [rax], 2
jne 0x18004927a
mov rax, qword [rbp + 0x57]
lea rcx, [rbp - 0x61]
xor r8d, r8d
mov eax, dword [rax]
lea edx, [r8 + 0x68]
mov dword [rbp - 0x61], eax
call fcn.1800401b0
test eax, eax
jne 0x1800498ca
jmp 0x18004927a
mov rax, qword [rbp + 0x7f]
mov eax, dword [rax]
dec eax
cmp eax, 1
jbe case.0x180048dc9.1
mov eax, 0x18
jmp 0x1800498ca
mov ecx, dword [r9]
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x18004927a
mov ecx, r8d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, r12d
mov r13, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x51], rax
mov rcx, rax
test r15, r15
je 0x1800491a9
test r13, r13
je 0x1800491a9
test rax, rax
jne 0x18004921c
mov esi, 0xdc
nop
mov eax, esi
sub eax, 0xd8
je 0x1800498c8
sub eax, 1
je 0x18004920a
sub eax, 1
je 0x1800491f9
sub eax, 1
je 0x1800491e5
cmp eax, 1
jne 0x18004920f
test r15, r15
je 0x18004920f
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 0x51]
jmp 0x18004920f
test r13, r13
je 0x18004920f
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 0x51]
jmp 0x18004920f
test rcx, rcx
je 0x18004920f
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 0x51]
jmp 0x18004920f
mov edi, 0xd
dec esi
cmp esi, 0xd7
ja 0x1800491b0
mov esi, dword [rbp - 0x39]
mov r9, qword [rbp + 0x4f]
cmp byte [r9], 0
jne 0x1800492c4
mov edx, dword [rbp - 0x45]
mov r11, qword [rbp + 0x9f]
jmp 0x18004928c
mov rdx, qword [rbp + 0x87]
mov eax, dword [r9]
cmp eax, dword [rdx]
jg 0x18004931b
jl 0x180049311
dec eax
movsxd rcx, eax
mov rax, qword [r9 + 0x10]
lea r14, [rax + rcx*4]
mov rax, qword [rdx + 0x10]
lea rdx, [rax + rcx*4]
mov qword [rbp - 0x31], rdx
jmp 0x180049285
mov rax, qword [rbp + 0x6f]
mov rcx, qword [rax + 0x18]
call qword [0x1800709b8]
mov dword [rbp - 0x11], eax
mov r11, qword [rbp + 0x9f]
mov r9, qword [rbp + 0x4f]
mov edx, dword [rbp - 0x45]
mov rcx, qword [rbp - 0x51]
mov eax, dword [rbp - 0x59]
dec edx
dec esi
mov dword [rbp - 0x45], edx
mov dword [rbp - 0x39], esi
cmp edx, eax
jbe 0x180049332
mov r8d, dword [rbp - 0x21]
mov r10, qword [rbp + 0x5f]
jmp 0x180048da0
mov eax, 0x16
jmp 0x1800498ca
mov dword [rdx], eax
mov eax, 6
jmp 0x1800498ca
mov esi, dword [rbp - 0x49]
xor ebx, ebx
mov r14d, 0xa17c
jmp 0x180049398
mov r8d, dword [r9]
xor eax, eax
test r8d, r8d
jle 0x18004930a
mov rcx, qword [rbp - 0x31]
sub rcx, r14
mov qword [rbp - 0x31], rcx
nop dword [rax]
mov ecx, dword [rcx + r14]
cmp dword [r14], ecx
ja 0x18004931b
jb 0x180049311
mov rcx, qword [rbp - 0x31]
inc eax
sub r14, 4
cmp eax, r8d
jl 0x1800492f0
xor eax, eax
jmp 0x1800498ca
mov eax, 0xffffffff
jmp 0x1800498ca
mov eax, 1
jmp 0x1800498ca
mov r10d, dword [rbp + 0x8f]
mov dword [rbp - 0x21], r10d
jmp 0x18004933c
mov r10d, dword [rbp - 0x21]
mov eax, dword [rbp + 0x8f]
mov esi, dword [rbp - 0x49]
mov r14d, eax
imul eax, eax, 0x4b4
cmp r14d, eax
ja 0x1800498c8
cmp r14d, 0x792c
ja 0x1800497ec
je 0x1800497cd
cmp r14d, 0x288c
ja 0x1800493e0
je 0x1800493c7
cmp r14d, 0x2d
je 0x1800498c8
cmp r14d, 0x3c
je 0x1800493bd
cmp r14d, 0x1464
jne 0x18004939c
mov edx, esi
add rdx, r9
mov r8d, r12d
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [rbp - 0x49]
mov rcx, qword [rbp - 0x51]
imul eax, dword [rbp + 0x8f], 0x56
mov r10d, dword [rbp - 0x21]
mov r11, qword [rbp + 0x9f]
mov r9, qword [rbp + 0x4f]
add r14d, eax
mov eax, dword [rbp + 0x8f]
jmp 0x180049342
mov esi, 1
mov dword [rbp - 0x49], esi
jmp 0x18004939c
add esi, r12d
mov r8d, r10d
sub r8d, r12d
mov edx, esi
dec r8d
mov dword [rbp - 0x49], esi
add rdx, r9
mov rcx, r15
jmp 0x180049390
cmp r14d, 0x3cb4
je 0x18004960c
cmp r14d, 0x50dc
je 0x18004948b
cmp r14d, 0x6504
jne 0x18004939c
mov r8d, r10d
mov dword [rbp - 0x49], r12d
sub r8d, r12d
mov esi, r12d
dec r8d
mov edx, r12d
cmp r12d, r8d
jae 0x18004943a
mov ecx, r12d
nop
mov eax, ecx
mov edx, ecx
cmp byte [rax + r15], 0
jne 0x18004943a
lea esi, [rcx + 1]
mov dword [rbp - 0x49], esi
mov edx, esi
mov ecx, esi
cmp esi, r8d
jb 0x180049420
cmp edx, r8d
je 0x18004947b
mov eax, edx
cmp byte [rax + r15], 1
jne 0x18004947b
lea esi, [rdx + 1]
mov ecx, r10d
mov rdx, qword [rbp + 0xa7]
sub ecx, esi
sub ecx, r12d
mov dword [rbp - 0x49], esi
dec ecx
mov eax, dword [rdx]
mov dword [rdx], ecx
cmp ecx, eax
jbe 0x180049398
mov ebx, 6
mov r14d, 0xa17c
jmp 0x180049398
mov ebx, 7
mov r14d, 0xa17c
jmp 0x180049398
mov edx, r10d
xor r8d, r8d
sub edx, r12d
sub edx, 1
je 0x180049571
cmp edx, 0x40
jb 0x180049544
lea eax, [rdx - 1]
lea r9, [rax + r15]
add rax, r13
cmp r15, rax
ja 0x1800494be
cmp r9, r13
jae 0x180049544
mov r10d, edx
and r10d, 0xffffffc0
mov r9d, 0x20
nop dword [rax + rax]
movdqu xmm0, xmmword [r8 + r15]
lea eax, [r9 - 0x10]
movdqu xmm1, xmmword [r8 + r13]
pxor xmm1, xmm0
movdqu xmmword [r8 + r15], xmm1
add r8d, 0x40
movdqu xmm0, xmmword [rax + r15]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r15], xmm1
mov eax, r9d
movdqu xmm0, xmmword [rax + r15]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r15], xmm1
lea eax, [r9 + 0x10]
add r9d, 0x40
movdqu xmm0, xmmword [rax + r15]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r15], xmm1
cmp r8d, r10d
jb 0x1800494d0
mov r10d, dword [rbp - 0x21]
cmp r8d, edx
jae 0x180049571
mov eax, r8d
mov r9, r13
add rax, r15
sub r9, r15
sub edx, r8d
nop dword [rax + rax]
movzx ecx, byte [r9 + rax]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x180049560
mov rcx, qword [rbp + 0x5f]
lea r8, [rbp - 0x49]
mov rsi, qword [rbp - 0x51]
mov dword [rbp - 0x49], r10d
mov r9, rsi
test rcx, rcx
je 0x1800495ba
mov rax, qword [rbp + 0x77]
mov rdx, rcx
lea rcx, [rbp - 0x41]
mov eax, dword [rax]
mov dword [rbp - 0x41], eax
mov eax, dword [r11]
mov dword [rbp - 0x61], eax
lea rax, [rbp - 0x61]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x6a
call fcn.18004ec40
mov rbx, rax
jmp 0x1800495e6
mov eax, dword [r11]
lea rcx, [rbp - 0x41]
mov dword [rbp - 0x61], eax
mov rdx, r15
lea rax, [rbp - 0x61]
mov dword [rbp - 0x41], 0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x6a
call fcn.18004ec40
mov ebx, eax
test eax, eax
jne 0x1800497bf
mov r8d, r12d
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcmp
mov esi, dword [rbp - 0x49]
test eax, eax
jne 0x180049876
jmp 0x180049398
dec esi
mov dword [rbp - 0x61], r12d
mov eax, r10d
mov r9, r13
sub eax, r12d
xor r8d, r8d
add eax, esi
mov rdx, r15
mov dword [rbp - 0x49], eax
mov esi, r10d
mov eax, dword [r11]
sub esi, r12d
mov dword [rbp - 0x41], eax
dec esi
xor eax, eax
mov dword [rbp - 0x29], esi
mov qword [rsp + 0x40], rax
mov ecx, 0xaf
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x61]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x41]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x20], rax
call fcn.180047680
mov ebx, eax
test eax, eax
jne 0x1800497bf
xor edx, edx
test r12d, r12d
je 0x180049761
mov r10, qword [rbp - 0x51]
cmp r12d, 0x40
jb 0x18004972f
lea eax, [r12 - 1]
lea r8, [rax + r10]
add rax, r13
cmp r10, rax
ja 0x1800496a5
cmp r8, r13
jae 0x18004972f
mov r9d, r12d
and r9d, 0xffffffc0
mov r8d, 0x20
nop dword [rax]
nop word [rax + rax]
movdqu xmm0, xmmword [rdx + r10]
lea eax, [r8 - 0x10]
movdqu xmm1, xmmword [rdx + r13]
pxor xmm1, xmm0
movdqu xmmword [rdx + r10], xmm1
add edx, 0x40
movdqu xmm0, xmmword [rax + r10]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
mov eax, r8d
movdqu xmm0, xmmword [rax + r10]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
lea eax, [r8 + 0x10]
add r8d, 0x40
movdqu xmm0, xmmword [rax + r10]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
cmp edx, r9d
jb 0x1800496c0
cmp edx, r12d
jae 0x180049761
mov ecx, edx
mov r8, r13
add rcx, r10
sub r8, r10
mov eax, r12d
sub eax, edx
mov edx, eax
nop word [rax + rax]
movzx eax, byte [r8 + rcx]
xor byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x180049750
mov rax, qword [rbp + 0x9f]
mov r9, r13
mov rdx, qword [rbp - 0x51]
xor r8d, r8d
mov qword [rsp + 0x40], 0
mov ecx, 0xaf
mov qword [rsp + 0x38], 0
mov eax, dword [rax]
mov dword [rbp - 0x41], eax
lea rax, [rbp - 0x61]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x41]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x61], esi
mov dword [rbp - 0x29], r12d
call fcn.180047680
mov ebx, eax
test eax, eax
je 0x180049395
mov esi, dword [rbp - 0x49]
mov r14d, 0xa17c
jmp 0x180049398
mov rcx, qword [rbp + 0x67]
mov r8d, r10d
sub r8d, esi
mov edx, esi
sub r8d, r12d
add rdx, r15
dec r8d
call sub.VCRUNTIME140.dll_memcpy
jmp 0x180049398
cmp r14d, 0xc9cc
ja 0x1800498b2
je 0x180049895
cmp r14d, 0x8d54
je 0x180049883
cmp r14d, 0xa17c
je 0x18004986c
cmp r14d, 0xb5a4
jne 0x18004939c
mov esi, r10d
lea rdx, [rbp - 0x31]
mov r8d, 0x87
mov qword [rbp - 0x31], rsi
mov rcx, r15
call fcn.1800208b0
mov rcx, qword [rbp - 0x51]
lea rdx, [rbp - 0x31]
mov eax, r12d
mov r8d, 0x87
mov qword [rbp - 0x31], rax
call fcn.1800208b0
mov r8d, 0x87
mov qword [rbp - 0x31], rsi
lea rdx, [rbp - 0x31]
mov rcx, r13
call fcn.1800208b0
jmp 0x180049395
mov rax, qword [rbp + 0x57]
mov dword [rax], 1
xor ebx, ebx
mov r14d, 0xa17c
jmp 0x180049398
mov eax, r10d
dec esi
sub eax, r12d
add esi, eax
mov dword [rbp - 0x49], esi
jmp 0x18004939c
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x180049395
cmp r14d, 0xddf4
je 0x1800498de
cmp r14d, 0xf21c
jne 0x18004939c
mov eax, edi
add rsp, 0xc8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov edi, ebx
jmp 0x18004939c