Function at 0x1800099e0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x30
mov eax, dword [rsp + 0x88]
lea r14d, [r9 - 0x35df]
mov ebp, eax
lea r13d, [r9 - 0x761]
mov edi, edx
mov r12d, r9d
xor edi, 0x2e92
xor r12d, 0x1826
lea esi, [rax - 0x2df9]
xor ebp, 0x3c4
mov rbx, r8
lea eax, [rdi + 0x35a4]
cmp r14d, eax
je 0x180009c36
lea eax, [r13 - 0x85]
cmp r14d, eax
jge 0x180009c36
mov r9d, edi
lea eax, [rsi + 0x2e3d]
xor r9d, 0x3537
mov dword [rsp + 0x28], eax
mov r8d, r14d
mov dword [rsp + 0x20], r9d
mov r9, rbx
lea edx, [r13 + 0x749]
xor r8d, 0x2e1e
lea ecx, [rbp + 0x118c]
call sym.iixfgec031pc.dll_Uqvhv87i
mov ecx, dword [0x18005911c]
mov r12d, eax
cmp dword [rbx + 0x140], ecx
je 0x180009ab0
mov edx, dword [rbx + 0x148]
xor edx, dword [rbx + 0x120]
sub edx, 0xb64ec
mov dword [0x180059074], edx
jmp 0x180009ab6
mov edx, dword [0x180059074]
mov rax, qword [section..data]
mov eax, dword [rax + 0x84]
add eax, 0x3ce4ba9f
add eax, dword [rbx + 0x5c]
add eax, edx
mov dword [0x180059074], eax
xor r9d, r9d
lea rax, [0x18000d450]
mov qword [rbx + 0xa0], rax
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [rbx + 0xfc]
sub eax, 0x14
add dword [rbx + 0x134], eax
mov rcx, qword [section..data]
mov rax, qword [rcx + 0xa0]
mov r8d, dword [r9 + rax]
add r9, 4
mov eax, dword [0x1800590a0]
sub eax, dword [0x1800590d4]
add eax, 0xf3a5a7
xor dword [rcx + 0x6c], eax
mov rax, qword [section..data]
mov ecx, dword [rax + 0x90]
dec ecx
or dword [rbx + 0x2c], ecx
mov eax, dword [0x18005906c]
dec eax
add dword [rbx + 0x84], eax
mov eax, dword [0x180059158]
sub dword [0x18005903c], eax
mov ecx, dword [0x1800590cc]
sub ecx, dword [rbx + 0x100]
imul r8d, dword [0x180059074]
xor ecx, 0x1b8e3c
mov eax, dword [rbx + 0x58]
imul eax, ecx
mov edx, r8d
shr edx, 8
mov dword [rbx + 0x58], eax
mov rcx, qword [section..data]
mov eax, dword [rcx + 0xec]
sub eax, 0x1bd89d
add dword [rcx + 0x10], eax
movsxd rcx, dword [rbx + 0x68]
mov rax, qword [rbx + 0xa8]
mov byte [rcx + rax], dl
inc dword [rbx + 0x68]
movsxd rcx, dword [rbx + 0x68]
mov rax, qword [rbx + 0xa8]
mov byte [rcx + rax], r8b
inc dword [rbx + 0x68]
mov rcx, qword [section..data]
mov eax, dword [rcx + 0x90]
imul eax, dword [rcx + 0x5c]
mov dword [rcx + 0x90], eax
mov eax, dword [0x180059140]
add eax, 0xfff46035
xor dword [rbx + 0xc4], eax
mov rcx, qword [section..data]
mov eax, dword [rbx + 0x34]
xor eax, dword [rbx + 0x80]
sub eax, 0x1b787d
add dword [rcx + 0x1c], eax
mov eax, dword [rbx + 0xc4]
xor eax, dword [0x180059110]
sub eax, 0xf3a5a9
add dword [rbx + 0x1c], eax
mov rdx, qword [section..data]
mov ecx, dword [rdx + 0x130]
add ecx, dword [rbx + 0x2c]
mov eax, dword [rdx + 0x6c]
xor ecx, 0x33721
imul eax, ecx
mov dword [rdx + 0x6c], eax
cmp r9, 0xd200
jl 0x180009af0
lea eax, [r14 + 0x3f8c]
cmp edi, eax
je 0x180009ca0
lea eax, [rsi + 0x3bc2]
cmp ebp, eax
jg 0x180009c7e
mov rax, qword [section..data]
lea rcx, [0x180059010]
mov qword [rax + 0x118], rcx
mov eax, dword [rbx]
add eax, dword [0x180059014]
add eax, dword [0x180059100]
xor eax, 0x446efc8e
mov dword [rbx + 0x158], eax
jmp 0x180009cfb
mov eax, r12d
sub eax, dword [rbx + 0x134]
cmp dword [rbx + 0x130], eax
je 0x180009cfb
mov ecx, dword [0x180059114]
add ecx, r13d
sub dword [rbx + 0xd4], ecx
jmp 0x180009cfb
lea eax, [rdi - 0x3bc2]
cmp edi, eax
jge 0x180009cfb
mov rax, qword [section..data]
mov esi, dword [rax + 0x130]
mov eax, ebp
and eax, edi
cmp esi, eax
jl 0x180009cfb
mov qword [rsp + 0x60], r15
mov r15d, ebp
or r15d, 0x2e7e
nop
mov ecx, dword [rbx + 0x148]
mov eax, r14d
or rcx, rax
mov eax, r13d
or rcx, rax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
sub edi, r15d
mov eax, ebp
and eax, edi
add esi, 2
cmp esi, eax
jge 0x180009cd0
mov r15, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x68]
lea eax, [r12 + 0xa92]
mov rbp, qword [rsp + 0x70]
add rsp, 0x30
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret