Function at 0x1800024f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r13d, r13d
nop dword [rax]
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r13w
mov r8d, 0xe
lea rdx, [0x18001f368]
lea rcx, [rbp - 0x60]
call fcn.180001dc0
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x40]
call fcn.180001460
cmp qword [rax + 0x18], 8
jb 0x18000255e
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r15, rax
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x1800025aa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800025a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002cda
call fcn.1800037b0
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r13w
test r15, r15
je 0x180002520
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r13w
mov r8d, 0xf
lea rdx, [0x18001f4d0]
lea rcx, [rbp - 0x20]
call fcn.180001dc0
lea rdx, [rbp - 0x20]
lea rcx, [rbp]
call fcn.1800011d0
cmp qword [rax + 0x18], 0x10
jb 0x180002602
mov rax, qword [rax]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x18000264c
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002647
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002cd4
call fcn.1800037b0
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], 0xf
mov byte [rbp], r13b
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r13w
mov r8d, 0xe
lea rdx, [0x18001f4f0]
lea rcx, [rbp + 0x20]
call fcn.180001dc0
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x40]
call fcn.1800011d0
cmp qword [rax + 0x18], 0x10
jb 0x18000269a
mov rax, qword [rax]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x1800026e4
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800026df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002ce0
call fcn.1800037b0
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], r13b
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x78], 7
mov word [rbp + 0x60], r13w
mov r8d, 0xe
lea rdx, [0x18001f510]
lea rcx, [rbp + 0x60]
call fcn.180001dc0
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x80]
call fcn.1800011d0
cmp qword [rax + 0x18], 0x10
jb 0x180002735
mov rax, qword [rax]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x180002785
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002780
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002ce6
call fcn.1800037b0
mov qword [rbp + 0x90], r13
mov qword [rbp + 0x98], 0xf
mov byte [rbp + 0x80], r13b
mov qword [rbp + 0xb0], r13
mov qword [rbp + 0xb8], 7
mov word [rbp + 0xa0], r13w
mov r8d, 0x10
lea rdx, [0x18001f530]
lea rcx, [rbp + 0xa0]
call fcn.180001dc0
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xc0]
call fcn.1800011d0
cmp qword [rax + 0x18], 0x10
jb 0x1800027ee
mov rax, qword [rax]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x18000283e
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002839
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002cec
call fcn.1800037b0
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], 0xf
mov byte [rbp + 0xc0], r13b
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r13w
mov r8d, 5
lea rdx, [0x18001f558]
lea rcx, [rbp - 0x80]
call fcn.180001dc0
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.180001460
mov rbx, rax
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], r13w
mov r8d, 0xc
lea rdx, [0x18001f568]
lea rcx, [rsp + 0x20]
call fcn.180001dc0
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x40]
call fcn.180001460
nop
cmp qword [rbx + 0x18], 8
jb 0x1800028d4
mov rbx, qword [rbx]
cmp qword [rax + 0x18], 8
jb 0x1800028de
mov rax, qword [rax]
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x180023d20]
call r14
mov rbx, rax
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x180002933
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000292e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002cf2
call fcn.1800037b0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r13w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x180002989
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002984
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002cf8
call fcn.1800037b0
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r13w
test rbx, rbx
je 0x180002c7c
mov rdx, rbx
mov rcx, qword [0x180023d20]
call r12
test rax, rax
je 0x180002c7c
mov rcx, rax
call rsi
mov r14, rax
test rax, rax
je 0x180002c7c
mov rdx, rbx
mov rcx, qword [0x180023d20]
call rdi
mov ebx, eax
mov ecx, eax
call fcn.1800037e4
mov rdi, rax
mov qword [rbp + 0x120], rax
test ebx, ebx
je 0x180002a15
test rax, rax
jne 0x180002a07
call fcn.18000a718
mov dword [rax], 0x16
call fcn.18000a374
jmp 0x180002a15
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call fcn.180007a10
mov edx, r13d
test ebx, ebx
je 0x180002aad
cmp ebx, 0x40
jb 0x180002a95
mov eax, ebx
and eax, 0x3f
mov r8d, ebx
sub r8d, eax
movdqa xmm1, xmmword [0x18001f620]
mov r9d, 0x20
nop
mov eax, edx
movdqu xmm0, xmmword [rdi + rax]
pxor xmm0, xmm1
movdqu xmmword [rdi + rax], xmm0
lea eax, [r9 - 0x10]
movdqu xmm0, xmmword [rax + rdi]
pxor xmm0, xmm1
movdqu xmmword [rax + rdi], xmm0
mov eax, r9d
movdqu xmm0, xmmword [rax + rdi]
pxor xmm0, xmm1
movdqu xmmword [rax + rdi], xmm0
lea eax, [r9 + 0x10]
movdqu xmm0, xmmword [rax + rdi]
pxor xmm0, xmm1
movdqu xmmword [rax + rdi], xmm0
add edx, 0x40
add r9d, 0x40
cmp edx, r8d
jb 0x180002a40
cmp edx, ebx
jae 0x180002aad
mov ecx, edx
add rcx, rdi
sub ebx, edx
mov eax, ebx
nop
xor byte [rcx], 0xae
lea rcx, [rcx + 1]
sub rax, 1
jne 0x180002aa0
mov rcx, rdi
call fcn.1800031c0
mov rsi, rax
mov qword [rbp + 0x128], rax
test rax, rax
je 0x180002c63
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r13w
mov r8d, 0xc
lea rdx, [0x18001f588]
lea rcx, [rsp + 0x60]
call fcn.180001dc0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.1800011d0
mov r13, rax
cmp qword [rax + 0x18], 0x10
jb 0x180002b0f
mov r13, qword [rax]
mov r12, qword [rsi + 8]
mov rax, qword [rsi]
cmp dword [rax + 0x8c], 0
je 0x180002b82
mov edi, dword [rax + 0x88]
add rdi, r12
mov eax, dword [rdi + 0x18]
test eax, eax
je 0x180002b7b
cmp dword [rdi + 0x14], 0
je 0x180002b7b
mov ebx, dword [rdi + 0x20]
add rbx, r12
mov r14d, dword [rdi + 0x24]
add r14, r12
xor esi, esi
test eax, eax
je 0x180002b74
nop dword [rax + rax]
mov edx, dword [rbx]
add rdx, r12
mov rcx, r13
call fcn.18000a77c
test eax, eax
je 0x180002c97
inc esi
add rbx, 4
add r14, 2
cmp esi, dword [rdi + 0x18]
jb 0x180002b50
mov rsi, qword [rbp + 0x128]
mov rdi, qword [rbp + 0x120]
xor r14d, r14d
mov ebx, r14d
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x180002bc5
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002bc0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002cfe
call fcn.1800037b0
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], r14w
mov r8d, 0xd
lea rdx, [0x18001f5a8]
lea rcx, [rsp + 0x20]
call fcn.180001dc0
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x80]
call fcn.180001460
nop
cmp qword [rax + 0x18], 8
jb 0x180002c1c
mov rax, qword [rax]
mov rdx, rax
mov ecx, 1
call rbx
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x180002c63
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002c5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002cce
call fcn.1800037b0
mov rcx, rdi
call fcn.1800037b0
mov rcx, rsi
call fcn.180003580
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rbx, qword [rsp + 0x238]
add rsp, 0x1e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movzx eax, word [r14]
mov rsi, qword [rbp + 0x128]
cmp eax, dword [rdi + 0x14]
ja 0x180002b7b
mov edx, dword [rdi + 0x1c]
lea ecx, [rax*4]
lea rax, [r12 + rdx]
mov ebx, dword [rcx + rax]
add rbx, r12
mov rdi, qword [rbp + 0x120]
xor r14d, r14d
jmp 0x180002b88
call fcn.18000a394
int3
call fcn.18000a394
int3
call fcn.18000a394
int3
call fcn.18000a394
int3
call fcn.18000a394
int3
call fcn.18000a394
nop
call fcn.18000a394
nop
call fcn.18000a394
int3
call fcn.18000a394
int3