Function at 0x1800285d0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x100
movaps xmmword [rax - 0x38], xmm6
lea r15d, [rcx + 0x3b8]
movaps xmmword [rax - 0x48], xmm7
mov r13, r8
xor r8d, r8d
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov r12, rdx
lea rdx, [0x180000000]
mov rsi, r9
mov r14d, ecx
mov edi, ecx
cmp ecx, r15d
jae 0x18002872a
movss xmm6, dword [0x180072a70]
mov r9d, 0x36b
movss xmm7, dword [0x180072ae0]
mov r10d, 0x61a8
movss xmm8, dword [0x180072a6c]
movss xmm9, dword [0x180072adc]
mov ebx, dword [rbp + 0x67]
mov ecx, 0x7fff
cmp edi, 0x179
ja 0x180028987
je 0x18002893f
lea eax, [rdi - 0xad]
cmp eax, 0xb2
ja case.0x180028698.180
movzx eax, byte [rdx + rax + 0x294b0]
mov ecx, dword [rdx + rax*4 + 0x29490]
add rcx, rdx
jmp rcx
mov eax, dword [r12]
mov dword [rsi + 0xd6b8], eax
cmp dword [r12], 0x1f40
jne 0x1800286b6
movaps xmm0, xmm6
movaps xmm1, xmm7
jmp 0x1800286be
movaps xmm0, xmm8
movaps xmm1, xmm9
movss dword [rsi + 0xd6c0], xmm1
xor r9d, r9d
movss dword [rsi + 0xd6c4], xmm0
xor edx, edx
mov rcx, qword [rsi + 0x18]
mov r8d, 0x98
call fcn.180016050
cmp eax, 0xffffffff
je 0x18002881d
mov rcx, qword [rsi + 0x20]
xor r9d, r9d
mov r8d, 0x98
xor edx, edx
call fcn.180016050
cmp eax, 0xffffffff
je 0x18002881d
mov r10d, 0x61a8
mov r9d, 0x36b
xor r8d, r8d
lea rdx, [0x180000000]
add edi, 0x44
cmp edi, r15d
jb 0x18002865e
mov ebx, dword [rbp + 0x67]
lea r15d, [r14 - 0xe]
cmp r14d, r15d
jbe case.0x180028756.0
add r14d, 0xffffff60
cmp r14d, 0xd
ja case.default.0x180028756
mov ecx, dword [rdx + r14*4 + 0x29564]
add rcx, rdx
jmp rcx
lea rax, [rbp + 0x67]
mov byte [rbp + 0x67], 1
lea r9, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x38]
mov byte [rsp + 0x30], 4
mov edx, 0xce
mov byte [rsp + 0x38], 2
xor ecx, ecx
call fcn.180026890
lea rax, [rsp + 0x40]
mov byte [rsp + 0x40], 1
lea r9, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x79]
mov byte [rsp + 0x48], 6
mov edx, 0xce
mov byte [rbp - 0x79], 2
xor ecx, ecx
call fcn.180026890
lea rax, [rbp - 0x71]
mov byte [rbp - 0x71], 0
lea r9, [rbp - 0x69]
mov byte [rbp - 0x69], 7
lea r8, [rbp - 0x61]
mov byte [rbp - 0x61], 2
mov edx, 0xce
mov qword [rsp + 0x20], rax
xor ecx, ecx
call fcn.180026890
jmp 0x180028708
mov rcx, qword [rsi + 0xd6a8]
xor r9d, r9d
xor edx, edx
mov r8d, 0x98
call fcn.180016050
cmp eax, 0xffffffff
je 0x18002881d
xor edx, edx
mov ecx, 0x9e
mov dword [rsi + 0xd6b0], edx
mov rdx, qword [rsi + 0xd910]
call fcn.180015560
test eax, eax
je 0x180028708
mov eax, 0xffffffff
jmp 0x18002945a
lea rax, [rbp - 0x59]
mov byte [rbp - 0x59], 1
lea r9, [rbp - 0x51]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x49]
mov byte [rbp - 0x51], 5
mov edx, 0xce
mov byte [rbp - 0x49], 2
xor ecx, ecx
call fcn.180026890
lea rax, [rbp - 0x41]
mov byte [rbp - 0x41], 0
lea r9, [rbp - 0x39]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x31]
mov byte [rbp - 0x39], 8
mov edx, 0xce
mov byte [rbp - 0x31], 2
xor ecx, ecx
call fcn.180026890
lea rax, [rbp - 0x29]
mov byte [rbp - 0x29], 1
lea r9, [rbp - 0x21]
mov byte [rbp - 0x21], 9
lea r8, [rbp - 0x19]
mov byte [rbp - 0x19], 2
jmp 0x1800287ca
mov rcx, qword [rsi + 0x28]
xor r9d, r9d
xor edx, edx
mov r8d, 0x98
call fcn.180016050
cmp eax, 0xffffffff
je 0x18002881d
mov rcx, qword [rsi + 0x30]
xor r9d, r9d
xor edx, edx
mov r8d, 0x98
call fcn.180016050
cmp eax, 0xffffffff
je 0x18002881d
mov rcx, qword [rsi + 0xd6a0]
jmp 0x1800286ef
movsx eax, word [rsi + 0x116]
imul ecx, eax, 0x7eb8
sar ecx, 0xf
mov word [rsi + 0x116], cx
jmp case.0x180028698.180
mov rcx, r13
mov edx, 0xa
mov eax, dword [rcx]
sar eax, 0x14
cmp ax, r9w
jle 0x180028912
add word [rsi + 0x116], ax
movzx eax, word [rsi + 0x116]
add rcx, 4
sub rdx, 1
jne 0x180028900
cmp ax, r10w
jle 0x180028717
mov byte [r12], 1
mov word [rsi + 0x116], r8w
jmp 0x180028717
mov rcx, qword [rsi + 0xd918]
xor r9d, r9d
mov dword [rsp + 0x28], 0xf3
xor edx, edx
mov qword [rsp + 0x20], r8
xor r8d, r8d
call fcn.180039930
test eax, eax
jne 0x18002881d
xor edx, edx
lea rcx, [rsi + 0xd7e0]
mov r8d, 0x12c
mov dword [rsi + 0xd90c], edx
call sub.VCRUNTIME140.dll_memset
jmp 0x180028708
cmp edi, 0x289
ja 0x180028b02
je 0x180028af9
mov eax, edi
sub eax, 0x1bd
je 0x180028adf
sub eax, 0x44
je 0x1800289f6
cmp eax, 0x44
jne case.0x180028698.180
mov eax, dword [rsi + 0xd6b8]
cmp eax, 0x7d00
jne 0x1800289d4
mov edx, 2
mov dword [rsi + 0xd6b4], edx
mov dword [rsi], r8d
jmp 0x180028717
movsx ecx, ax
mov eax, 0x10624dd3
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [rsi + 0xd6b4], edx
mov dword [rsi], r8d
jmp 0x180028717
mov eax, dword [rsi + 0xd928]
mov r8d, 0x111
mov r9, qword [rsi + 0xd918]
cdq
sub eax, edx
sar eax, 1
movsxd r11, eax
xor edx, edx
cmp r8d, 0x1b7
ja 0x180028ac2
je 0x180028a6e
mov ecx, r8d
sub ecx, 0xde
je 0x180028abe
sub ecx, 0x33
je 0x180028aaa
cmp ecx, 0x73
jne 0x180028a69
test r9, r9
je 0x180028a7e
test r11d, r11d
jle 0x180028a7e
xor eax, eax
mov ecx, eax
test r11d, r11d
jle 0x180028a67
nop
movsx eax, word [r9 + rcx*2]
cdq
xor eax, edx
sub eax, edx
cmp eax, ebx
cmovg ebx, eax
inc rcx
cmp rcx, r11
jl 0x180028a50
xor edx, edx
mov ecx, 0x7fff
add r8d, 0xa6
cmp r8d, 0x59b
jb 0x180028a13
mov rdx, qword [rsi + 0xd918]
lea rcx, [rbp - 0x11]
mov r8d, 0x3d
mov dword [rbp - 0x11], 1
call fcn.18000e8b0
mov dword [rsi + 0xd58c], 1
jmp 0x180028708
test r9, r9
je 0x180028a7e
test r11d, r11d
js 0x180028a7e
mov rax, qword [r9 + 0x10]
mov dword [rax + 0x30], r11d
jmp 0x180028a69
mov ebx, edx
jmp 0x180028a69
mov eax, r8d
sub eax, 0x22a
je 0x180028ad8
sub eax, 0x33
je 0x180028a7e
cmp eax, 0x73
je 0x180028a7e
jmp 0x180028a6e
cmp ebx, ecx
cmovg ebx, ecx
jmp 0x180028a6e
mov qword [rsi + 0xd920], 1
mov dword [rsi + 0xd928], 0xc
jmp case.0x180028698.180
mov dword [rsi + 4], r8d
jmp case.0x180028698.180
mov eax, edi
sub eax, 0x2cd
je 0x180028b21
cmp eax, 0x44
jne case.0x180028698.180
mov dword [rsi + 0x10], r8d
mov dword [rsi + 8], r8d
jmp case.0x180028698.180
mov dword [rsi + 0xc], r8d
jmp case.0x180028698.180
lea rcx, [rsi + 0x73c]
xor edx, edx
mov r8d, 0x104
call sub.VCRUNTIME140.dll_memset
xor r8d, r8d
jmp case.default.0x180028756
lea rcx, [rsi + 0xa50]
xor edx, edx
mov r8d, 0x8200
call sub.VCRUNTIME140.dll_memset
xor r8d, r8d
jmp case.default.0x180028756
mov dword [rsi + 0xd694], 0
mov word [rsi + 0xd698], r8w
mov dword [rsi + 0xd6bc], 0x309
jmp case.default.0x180028756
mov dword [rsi + 0xd6c8], r8d
mov dword [rsi + 0x840], 0x49742400
mov dword [rsi + 0x844], 0x49742400
mov dword [rsi + 0x848], 0x49742400
mov dword [rsi + 0x84c], 0x49742400
mov dword [rsi + 0x850], 0x49742400
mov dword [rsi + 0x854], 0x49742400
mov dword [rsi + 0x858], 0x49742400
mov dword [rsi + 0x85c], 0x49742400
mov dword [rsi + 0x860], 0x49742400
mov dword [rsi + 0x864], 0x49742400
mov dword [rsi + 0x868], 0x49742400
mov dword [rsi + 0x86c], 0x49742400
mov dword [rsi + 0x870], 0x49742400
mov dword [rsi + 0x874], 0x49742400
mov dword [rsi + 0x878], 0x49742400
mov dword [rsi + 0x87c], 0x49742400
mov dword [rsi + 0x880], 0x49742400
mov dword [rsi + 0x884], 0x49742400
mov dword [rsi + 0x888], 0x49742400
mov dword [rsi + 0x88c], 0x49742400
mov dword [rsi + 0x890], 0x49742400
mov dword [rsi + 0x894], 0x49742400
mov dword [rsi + 0x898], 0x49742400
mov dword [rsi + 0x89c], 0x49742400
mov dword [rsi + 0x8a0], 0x49742400
mov dword [rsi + 0x8a4], 0x49742400
mov dword [rsi + 0x8a8], 0x49742400
mov dword [rsi + 0x8ac], 0x49742400
mov dword [rsi + 0x8b0], 0x49742400
mov dword [rsi + 0x8b4], 0x49742400
mov dword [rsi + 0x8b8], 0x49742400
mov dword [rsi + 0x8bc], 0x49742400
mov dword [rsi + 0x8c0], 0x49742400
mov dword [rsi + 0x8c4], 0x49742400
mov dword [rsi + 0x8c8], 0x49742400
mov dword [rsi + 0x8cc], 0x49742400
mov dword [rsi + 0x8d0], 0x49742400
mov dword [rsi + 0x8d4], 0x49742400
mov dword [rsi + 0x8d8], 0x49742400
mov dword [rsi + 0x8dc], 0x49742400
mov dword [rsi + 0x8e0], 0x49742400
mov dword [rsi + 0x8e4], 0x49742400
mov dword [rsi + 0x8e8], 0x49742400
mov dword [rsi + 0x8ec], 0x49742400
mov dword [rsi + 0x8f0], 0x49742400
mov dword [rsi + 0x8f4], 0x49742400
mov dword [rsi + 0x8f8], 0x49742400
mov dword [rsi + 0x8fc], 0x49742400
mov dword [rsi + 0x900], 0x49742400
mov dword [rsi + 0x904], 0x49742400
mov dword [rsi + 0x908], 0x49742400
mov dword [rsi + 0x90c], 0x49742400
mov dword [rsi + 0x910], 0x49742400
mov dword [rsi + 0x914], 0x49742400
mov dword [rsi + 0x918], 0x49742400
mov dword [rsi + 0x91c], 0x49742400
mov dword [rsi + 0x920], 0x49742400
mov dword [rsi + 0x924], 0x49742400
mov dword [rsi + 0x928], 0x49742400
mov dword [rsi + 0x92c], 0x49742400
mov dword [rsi + 0x930], 0x49742400
mov dword [rsi + 0x934], 0x49742400
mov dword [rsi + 0x938], 0x49742400
mov dword [rsi + 0x93c], 0x49742400
mov dword [rsi + 0x940], 0x49742400
mov dword [rsi + 0xd69c], r8d
jmp case.default.0x180028756
mov dword [rsi + 0xd160], 0x3f800000
lea rcx, [rsi + 0xd46c]
mov dword [rsi + 0xd164], 0x3f800000
xor edx, edx
mov dword [rsi + 0xd168], 0x3f800000
mov r8d, 0x104
mov dword [rsi + 0xd16c], 0x3f800000
mov dword [rsi + 0xd170], 0x3f800000
mov dword [rsi + 0xd174], 0x3f800000
mov dword [rsi + 0xd178], 0x3f800000
mov dword [rsi + 0xd17c], 0x3f800000
mov dword [rsi + 0xd180], 0x3f800000
mov dword [rsi + 0xd184], 0x3f800000
mov dword [rsi + 0xd188], 0x3f800000
mov dword [rsi + 0xd18c], 0x3f800000
mov dword [rsi + 0xd190], 0x3f800000
mov dword [rsi + 0xd194], 0x3f800000
mov dword [rsi + 0xd198], 0x3f800000
mov dword [rsi + 0xd19c], 0x3f800000
mov dword [rsi + 0xd1a0], 0x3f800000
mov dword [rsi + 0xd1a4], 0x3f800000
mov dword [rsi + 0xd1a8], 0x3f800000
mov dword [rsi + 0xd1ac], 0x3f800000
mov dword [rsi + 0xd1b0], 0x3f800000
mov dword [rsi + 0xd1b4], 0x3f800000
mov dword [rsi + 0xd1b8], 0x3f800000
mov dword [rsi + 0xd1bc], 0x3f800000
mov dword [rsi + 0xd1c0], 0x3f800000
mov dword [rsi + 0xd1c4], 0x3f800000
mov dword [rsi + 0xd1c8], 0x3f800000
mov dword [rsi + 0xd1cc], 0x3f800000
mov dword [rsi + 0xd1d0], 0x3f800000
mov dword [rsi + 0xd1d4], 0x3f800000
mov dword [rsi + 0xd1d8], 0x3f800000
mov dword [rsi + 0xd1dc], 0x3f800000
mov dword [rsi + 0xd1e0], 0x3f800000
mov dword [rsi + 0xd1e4], 0x3f800000
mov dword [rsi + 0xd1e8], 0x3f800000
mov dword [rsi + 0xd1ec], 0x3f800000
mov dword [rsi + 0xd1f0], 0x3f800000
mov dword [rsi + 0xd1f4], 0x3f800000
mov dword [rsi + 0xd1f8], 0x3f800000
mov dword [rsi + 0xd1fc], 0x3f800000
mov dword [rsi + 0xd200], 0x3f800000
mov dword [rsi + 0xd204], 0x3f800000
mov dword [rsi + 0xd208], 0x3f800000
mov dword [rsi + 0xd20c], 0x3f800000
mov dword [rsi + 0xd210], 0x3f800000
mov dword [rsi + 0xd214], 0x3f800000
mov dword [rsi + 0xd218], 0x3f800000
mov dword [rsi + 0xd21c], 0x3f800000
mov dword [rsi + 0xd220], 0x3f800000
mov dword [rsi + 0xd224], 0x3f800000
mov dword [rsi + 0xd228], 0x3f800000
mov dword [rsi + 0xd22c], 0x3f800000
mov dword [rsi + 0xd230], 0x3f800000
mov dword [rsi + 0xd234], 0x3f800000
mov dword [rsi + 0xd238], 0x3f800000
mov dword [rsi + 0xd23c], 0x3f800000
mov dword [rsi + 0xd240], 0x3f800000
mov dword [rsi + 0xd244], 0x3f800000
mov dword [rsi + 0xd248], 0x3f800000
mov dword [rsi + 0xd24c], 0x3f800000
mov dword [rsi + 0xd250], 0x3f800000
mov dword [rsi + 0xd254], 0x3f800000
mov dword [rsi + 0xd258], 0x3f800000
mov dword [rsi + 0xd25c], 0x3f800000
mov dword [rsi + 0xd260], 0x3f800000
call sub.VCRUNTIME140.dll_memset
lea rcx, [rsi + 0xd590]
xor edx, edx
mov r8d, pe_nt_image_headers64
call sub.VCRUNTIME140.dll_memset
xor r8d, r8d
mov dword [rsi + 0xd570], 0x3f800000
jmp case.default.0x180028756
mov edx, 0x103
mov dword [rsi + 0x14], r8d
mov rcx, rsi
mov dword [rsi + 0xd73c], r8d
call fcn.18000b7d0
xor r8d, r8d
mov ebx, r8d
jmp case.default.0x180028756
mov dword [rsi + 0xd690], r8d
jmp case.default.0x180028756
lea rcx, [rsi + 0x8c50]
xor edx, edx
mov r8d, 0x4510
call sub.VCRUNTIME140.dll_memset
lea rcx, [rsi + 0xd368]
xor edx, edx
mov r8d, 0x104
call sub.VCRUNTIME140.dll_memset
xor r8d, r8d
jmp case.default.0x180028756
mov dword [rsi + 0xd264], 0x3f800000
mov dword [rsi + 0xd268], 0x3f800000
mov dword [rsi + 0xd26c], 0x3f800000
mov dword [rsi + 0xd270], 0x3f800000
mov dword [rsi + 0xd274], 0x3f800000
mov dword [rsi + 0xd278], 0x3f800000
mov dword [rsi + 0xd27c], 0x3f800000
mov dword [rsi + 0xd280], 0x3f800000
mov dword [rsi + 0xd284], 0x3f800000
mov dword [rsi + 0xd288], 0x3f800000
mov dword [rsi + 0xd28c], 0x3f800000
mov dword [rsi + 0xd290], 0x3f800000
mov dword [rsi + 0xd294], 0x3f800000
mov dword [rsi + 0xd298], 0x3f800000
mov dword [rsi + 0xd29c], 0x3f800000
mov dword [rsi + 0xd2a0], 0x3f800000
mov dword [rsi + 0xd2a4], 0x3f800000
mov dword [rsi + 0xd2a8], 0x3f800000
mov dword [rsi + 0xd2ac], 0x3f800000
mov dword [rsi + 0xd2b0], 0x3f800000
mov dword [rsi + 0xd2b4], 0x3f800000
mov dword [rsi + 0xd2b8], 0x3f800000
mov dword [rsi + 0xd2bc], 0x3f800000
mov dword [rsi + 0xd2c0], 0x3f800000
mov dword [rsi + 0xd2c4], 0x3f800000
mov dword [rsi + 0xd2c8], 0x3f800000
mov dword [rsi + 0xd2cc], 0x3f800000
mov dword [rsi + 0xd2d0], 0x3f800000
mov dword [rsi + 0xd2d4], 0x3f800000
mov dword [rsi + 0xd2d8], 0x3f800000
mov dword [rsi + 0xd2dc], 0x3f800000
mov dword [rsi + 0xd2e0], 0x3f800000
mov dword [rsi + 0xd2e4], 0x3f800000
mov dword [rsi + 0xd2e8], 0x3f800000
mov dword [rsi + 0xd2ec], 0x3f800000
mov dword [rsi + 0xd2f0], 0x3f800000
mov dword [rsi + 0xd2f4], 0x3f800000
mov dword [rsi + 0xd2f8], 0x3f800000
mov dword [rsi + 0xd2fc], 0x3f800000
mov dword [rsi + 0xd300], 0x3f800000
mov dword [rsi + 0xd304], 0x3f800000
mov dword [rsi + 0xd308], 0x3f800000
mov dword [rsi + 0xd30c], 0x3f800000
mov dword [rsi + 0xd310], 0x3f800000
mov dword [rsi + 0xd314], 0x3f800000
mov dword [rsi + 0xd318], 0x3f800000
mov dword [rsi + 0xd31c], 0x3f800000
mov dword [rsi + 0xd320], 0x3f800000
mov dword [rsi + 0xd324], 0x3f800000
mov dword [rsi + 0xd328], 0x3f800000
mov dword [rsi + 0xd32c], 0x3f800000
mov dword [rsi + 0xd330], 0x3f800000
mov dword [rsi + 0xd334], 0x3f800000
mov dword [rsi + 0xd338], 0x3f800000
mov dword [rsi + 0xd33c], 0x3f800000
mov dword [rsi + 0xd340], 0x3f800000
mov dword [rsi + 0xd344], 0x3f800000
mov dword [rsi + 0xd348], 0x3f800000
mov dword [rsi + 0xd34c], 0x3f800000
mov dword [rsi + 0xd350], 0x3f800000
mov dword [rsi + 0xd354], 0x3f800000
mov dword [rsi + 0xd358], 0x3f800000
mov dword [rsi + 0xd35c], 0x3f800000
mov dword [rsi + 0xd360], 0x3f800000
mov dword [rsi + 0xd364], 0x3f800000
jmp case.default.0x180028756
lea rdi, [rsi + 0x944]
xor edx, edx
mov rcx, rdi
mov r8d, 0x104
call sub.VCRUNTIME140.dll_memset
xor r8d, r8d
mov qword [rsi + 0xa48], rdi
jmp case.default.0x180028756
mov dword [rsi + 0xd574], 0x3f800000
mov dword [rsi + 0xd578], 0x3f800000
jmp case.default.0x180028756
lea rcx, [rsi + 0x38]
xor edx, edx
mov r8d, 0x704
call sub.VCRUNTIME140.dll_memset
xor r8d, r8d
jmp case.default.0x180028756
mov qword [rsi + 0xd57c], 0
mov dword [rsi + 0xd584], 0x40000000
mov dword [rsi + 0xd588], 0x40000000
dec r14d
lea eax, [r14 + 0xa0]
cmp eax, r15d
jbe case.0x180028756.0
lea rdx, [0x180000000]
jmp 0x180028741
mov eax, ebx
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret