Function at 0x18003dd40
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0x98
mov edx, dword [rbp + 0x5f]
mov eax, r8d
mov r11d, dword [rbp + 0x5f]
mov r8, rcx
mov edi, dword [rbp + 0x5f]
mov r14d, eax
mov r15d, dword [rbp - 0x29]
mov r12, qword [rbp - 9]
lea esi, [rax + 0x610]
mov ebx, dword [rbp + 0x5f]
mov dword [rbp - 0x21], esi
mov dword [rbp - 0x31], edx
mov dword [rbp - 0x2d], r11d
cmp eax, esi
jae 0x18003e27a
mov rcx, qword [rbp - 9]
mov r13, qword [rbp + 0x97]
mov qword [rbp - 9], rcx
mov r10, qword [rbp - 9]
mov qword [rbp - 0x11], r10
nop dword [rax]
cmp r14d, 0x177
ja 0x18003e015
je 0x18003e006
cmp r14d, 0xdd
ja 0x18003df19
je 0x18003e255
mov eax, r14d
sub eax, 0xc
je 0x18003e230
sub eax, 0x48
je 0x18003df04
sub eax, 0x28
je 0x18003decf
cmp eax, 0x39
jne 0x18003e20c
cmp qword [rbp + 0x7f], 0
jne 0x18003de70
xor ecx, ecx
lea rax, str.Src_i_j__
mov qword [rsp + 0x58], rcx
lea rdx, [0x180077149]
mov qword [rsp + 0x50], rcx
mov r9d, SHSetInstanceExplorer
mov qword [rsp + 0x48], rcx
xor r8d, r8d
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov dword [rbp - 0x29], ecx
call fcn.18002b8a0
mov r10, qword [rbp - 0x11]
mov r11d, dword [rbp - 0x2d]
mov r8, qword [rbp + 0x4f]
mov edx, dword [rbp - 0x31]
test r8, r8
jne 0x18003e20c
lea rax, str.OIebcdic_cp_fr
xor ecx, ecx
lea rdx, [0x180077149]
mov qword [rsp + 0x58], rcx
mov r9d, SHSetInstanceExplorer
mov qword [rsp + 0x50], rcx
xor r8d, r8d
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov dword [rbp - 0x29], ecx
call fcn.18002b8a0
mov r10, qword [rbp - 0x11]
jmp 0x18003e205
cmp r9, r13
je 0x18003def7
mov r8, r13
mov rdx, r9
mov ecx, 0x12b
call fcn.180063950
test eax, eax
jne 0x18003df90
mov r10, qword [rbp - 0x11]
mov r11d, dword [rbp - 0x2d]
mov edx, dword [rbp - 0x31]
mov dword [r13 + 8], 0
jmp 0x18003e20c
test r9, r9
jne 0x18003e20c
lea rax, str.Discrete_11
jmp 0x18003de80
mov eax, r14d
sub eax, 0xeb
je 0x18003df4f
sub eax, 0x2b
je 0x18003df38
cmp eax, 0x36
jne 0x18003e20c
xor edi, edi
jmp 0x18003e20c
cmp qword [rbp + 0x77], 0
jne 0x18003e20c
lea rax, str.ISA:_MIPS_d
jmp 0x18003de80
movsx ecx, byte [r9]
and ecx, 7
je 0x18003e270
sub ecx, 1
je 0x18003e260
sub ecx, 1
je 0x18003df79
sub ecx, 1
je 0x18003dfb5
cmp ecx, 1
je 0x18003dfda
jmp 0x18003e20c
mov eax, 0xd8
nop
cmp eax, 0xd8
je 0x18003dfa4
cmp eax, 0x36d8
jne 0x18003dfa9
mov eax, edi
add rsp, 0x98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov edi, 6
add eax, 0x3600
cmp eax, 0x6c00
jbe 0x18003df80
mov ecx, 0x4c
nop word [rax + rax]
mov eax, ecx
sub eax, 0x4c
je 0x18003dfce
cmp eax, 1
je case.0x18003e2c0.100
jmp 0x18003dfd3
mov edi, ILFindLastID
inc ecx
cmp ecx, 0x4e
jb 0x18003dfc0
mov eax, 0x80
nop
cmp eax, 0x80
je 0x18003dff0
cmp eax, 0x5f80
je case.0x18003e2c0.100
jmp 0x18003dff5
mov edi, 0x18
add eax, 0x5f00
cmp eax, 0xbe00
jbe 0x18003dfe0
jmp 0x18003e20c
mov rax, qword [rbp + 0x77]
mov dword [rax], 0
jmp 0x18003e20c
cmp r14d, 0x29a
ja 0x18003e10f
je 0x18003e0fb
mov eax, r14d
sub eax, 0x1ad
je case.0x18003e2c0.100
sub eax, 0x2b
je 0x18003e0a8
cmp eax, 0x61
jne 0x18003e20c
mov rax, qword [rbp + 0x8f]
lea ecx, [r11 + r11]
mov edx, 0
mov eax, dword [rax]
test al, 7
setne dl
shr eax, 3
add edx, eax
mov dword [rbp - 0x31], edx
lea eax, [rdx - 2]
cmp ecx, eax
jae 0x18003e074
cmp dword [r13], edx
je 0x18003e20c
mov ecx, 0xff
nop dword [rax]
mov eax, ecx
sub eax, 0xff
je 0x18003e094
cmp eax, 1
je case.0x18003e2c0.100
jmp 0x18003e099
mov edi, 0x16
inc ecx
cmp ecx, 0x101
jb 0x18003e080
jmp 0x18003e20c
mov rax, qword [rbp + 0x87]
lea r8, [rbp - 0x29]
xor r9d, r9d
xor ecx, ecx
mov eax, dword [rax]
lea edx, [r9 + 0x3a]
mov dword [rbp - 0x29], eax
call fcn.180022220
mov rbx, rax
test eax, eax
jne 0x18003df90
mov rax, qword [rbp + 0x87]
lea rcx, [0x180000000]
mov r10, qword [rbp - 0x11]
movsxd rax, dword [rax]
shl rax, 7
mov r11d, dword [rax + rcx + 0x8219c]
mov dword [rbp - 0x2d], r11d
jmp 0x18003e209
mov ecx, edx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r10, qword [rbp - 0x11]
mov r12, rax
jmp 0x18003e205
mov eax, r14d
sub eax, 0x2fb
je 0x18003e1e9
sub eax, 0x61
je 0x18003e134
cmp eax, 0x61
jne 0x18003e20c
lea r15d, [rax - 0x60]
jmp 0x18003e20c
test r12, r12
je 0x18003e143
test rcx, rcx
je 0x18003e143
test r10, r10
jne 0x18003e1bc
mov esi, 0xfb
cmp esi, 0xfb
je 0x18003e17b
cmp esi, 0x194
je 0x18003e166
cmp esi, 0x22d
je case.0x18003e2c0.100
jmp 0x18003e198
test r10, r10
je 0x18003e174
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edi, ILFindLastID
jmp 0x18003e198
test r12, r12
je 0x18003e18d
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 9]
test rcx, rcx
je 0x18003e198
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 9]
add esi, 0x99
mov r10, qword [rbp - 0x11]
cmp esi, 0x2c6
jb 0x18003e148
mov esi, dword [rbp - 0x21]
mov r11d, dword [rbp - 0x2d]
mov edx, dword [rbp - 0x31]
mov r9, qword [rbp + 0x67]
cmp byte [r9], 0
je 0x18003e20c
mov ecx, 0x51
mov eax, ecx
sub eax, 0x51
je 0x18003e1de
cmp eax, 1
jne 0x18003e1e0
mov r14d, 0x5e
jmp 0x18003e607
xor ebx, ebx
inc ecx
cmp ecx, 0x53
jb 0x18003e1c7
jmp 0x18003e20c
mov ecx, edx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, dword [rbp - 0x2d]
mov qword [rbp - 9], rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r10, rax
mov qword [rbp - 0x11], rax
mov r11d, dword [rbp - 0x2d]
mov edx, dword [rbp - 0x31]
mov r8, qword [rbp + 0x4f]
add r14d, 0x61
mov r9, qword [rbp + 0x67]
cmp r14d, esi
jae 0x18003e28c
mov rcx, qword [rbp - 9]
jmp 0x18003ddc0
mov qword [rsp + 0x20], r9
lea rdx, [rbp + 0x5f]
mov r9, r13
mov dword [rbp + 0x5f], 0
xor r8d, r8d
mov ecx, 0x9d
call fcn.180032d20
jmp 0x18003df90
xor eax, eax
jmp 0x18003df90
mov eax, 3
jmp 0x18003df90
mov eax, 1
jmp 0x18003df90
mov r13, qword [rbp - 9]
mov qword [rbp - 9], r13
mov r10, qword [rbp - 9]
mov qword [rbp - 0x11], r10
jmp 0x18003e293
mov r13, qword [rbp - 9]
mov eax, dword [rbp + 0x5f]
mov r14d, eax
add eax, 0x11
cmp r14d, eax
jae case.0x18003e2c0.100
lea eax, [r14 - 0x54]
cmp eax, 0x10
ja case.default.0x18003e2c0
lea rsi, [0x180000000]
mov ecx, dword [rsi + rax*4 + 0x3e804]
add rcx, rsi
jmp rcx
mov edx, r15d
mov rcx, r10
add rdx, r9
mov r8d, r11d
call sub.VCRUNTIME140.dll_memcpy
mov r11d, dword [rbp - 0x2d]
add r15d, r11d
jmp 0x18003e60b
mov r8d, r11d
mov rdx, r12
mov rcx, r10
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18003e316
mov eax, 0x62
cmp eax, 0x62
je 0x18003e308
cmp eax, 0xf2
je 0x18003e1d3
jmp 0x18003e30a
xor ebx, ebx
add eax, 0x90
cmp eax, 0x182
jb 0x18003e2f6
mov r11d, dword [rbp - 0x2d]
mov r15d, r11d
mov edx, dword [rbp - 0x31]
sub edx, r11d
dec edx
cmp r11d, edx
jae 0x18003e60b
mov ecx, r11d
mov eax, ecx
cmp byte [rax + r12], 0
jne 0x18003e60b
lea r15d, [rcx + 1]
mov ecx, r15d
cmp r15d, edx
jb 0x18003e331
jmp 0x18003e60b
mov rax, qword [rbp + 0x87]
lea r8, [rbp - 0x29]
mov esi, edx
mov qword [rsp + 0x28], r13
sub esi, r11d
mov dword [rbp - 0x29], r11d
dec esi
lea rdx, [rbp - 0x19]
mov eax, dword [rax]
mov r9, r10
mov dword [rbp - 0x21], eax
mov ecx, 0xe8
lea rax, [rbp - 0x21]
mov dword [rbp - 0x19], esi
mov qword [rsp + 0x20], rax
call fcn.180060610
mov ebx, eax
test eax, eax
jne 0x18003e1d3
xor edx, edx
test esi, esi
je 0x18003e607
cmp esi, 0x40
jb 0x18003e43f
lea eax, [rsi - 1]
lea r8, [rax + r12]
add rax, r13
cmp r12, rax
ja 0x18003e3c1
cmp r8, r13
jae 0x18003e43f
mov r9d, esi
and r9d, 0xffffffc0
mov r8d, 0x20
nop
movdqu xmm0, xmmword [rdx + r12]
lea eax, [r8 - 0x10]
movdqu xmm1, xmmword [rdx + r13]
pxor xmm1, xmm0
movdqu xmmword [rdx + r12], xmm1
add edx, 0x40
movdqu xmm0, xmmword [rax + r12]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r12], xmm1
mov eax, r8d
movdqu xmm0, xmmword [rax + r12]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r12], xmm1
lea eax, [r8 + 0x10]
add r8d, 0x40
movdqu xmm0, xmmword [rax + r12]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r12], xmm1
cmp edx, r9d
jb 0x18003e3d0
cmp edx, esi
jae 0x18003e607
mov ecx, edx
mov r8, r13
add rcx, r12
sub r8, r12
sub esi, edx
mov edx, esi
nop word [rax + rax]
movzx eax, byte [r8 + rcx]
xor byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x18003e460
jmp 0x18003e607
mov eax, edx
sub eax, r11d
dec eax
add r15d, eax
mov rax, qword [rbp + 0x77]
mov dword [rax], 1
jmp case.default.0x18003e2c0
mov eax, edx
mov qword [rsp + 0x28], r13
sub eax, r11d
mov dword [rbp - 0x29], r11d
dec eax
lea r8, [rbp - 0x21]
mov dword [rbp - 0x21], eax
lea rdx, [rbp - 0x29]
mov rax, qword [rbp + 0x87]
mov r9, r12
mov ecx, 0xe8
mov eax, dword [rax]
mov dword [rbp - 0x19], eax
lea rax, [rbp - 0x19]
mov qword [rsp + 0x20], rax
call fcn.180060610
mov ebx, eax
test eax, eax
jne 0x18003e1d3
mov r11d, dword [rbp - 0x2d]
xor esi, esi
mov edx, esi
test r11d, r11d
je 0x18003e60b
mov r10, qword [rbp - 0x11]
cmp r11d, 0x40
jb 0x18003e591
lea eax, [r11 - 1]
lea r8, [rax + r10]
add rax, r13
cmp r10, rax
ja 0x18003e50e
cmp r8, r13
jae 0x18003e591
mov r9d, r11d
and r9d, 0xffffffc0
mov r8d, 0x20
nop dword [rax + rax]
mov eax, edx
add edx, 0x40
movdqu xmm0, xmmword [rax + r10]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
lea eax, [r8 - 0x10]
movdqu xmm0, xmmword [rax + r10]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
mov eax, r8d
movdqu xmm0, xmmword [rax + r10]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
lea eax, [r8 + 0x10]
add r8d, 0x40
movdqu xmm0, xmmword [rax + r10]
movdqu xmm1, xmmword [rax + r13]
pxor xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
cmp edx, r9d
jb 0x18003e520
cmp edx, r11d
jae 0x18003e60f
mov ecx, edx
mov r8, r13
add rcx, r10
sub r8, r10
mov eax, r11d
sub eax, edx
mov edx, eax
nop dword [rax + rax]
movzx eax, byte [r8 + rcx]
xor byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x18003e5b0
jmp 0x18003e60f
mov eax, edx
xor ecx, ecx
mov qword [rsp + 0x48], rcx
xor r9d, r9d
mov qword [rsp + 0x40], r13
xor r8d, r8d
mov qword [rsp + 0x38], rcx
xor edx, edx
mov qword [rbp - 0x19], rax
lea rax, [rbp - 0x19]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x1e8
call fcn.180033a80
mov rcx, qword [rbp - 0x11]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r11d, dword [rbp - 0x2d]
mov r10, qword [rbp - 0x11]
mov edx, dword [rbp - 0x31]
mov r13, qword [rbp - 9]
inc r14d
mov r8, qword [rbp + 0x4f]
mov r9, qword [rbp + 0x67]
mov eax, dword [rbp + 0x5f]
jmp 0x18003e296
mov edi, ebx
jmp case.default.0x18003e2c0
mov rcx, qword [rbp + 0x6f]
mov r9, r10
mov dword [rbp - 0x29], edx
lea rdx, [rbp - 0x29]
mov dword [rsp + 0x28], 0x10d
test rcx, rcx
je 0x18003e682
mov rax, qword [rbp + 0x57]
mov r8, rcx
mov eax, dword [rax]
mov dword [rbp - 0x19], eax
mov rax, qword [rbp + 0x87]
lea rcx, [rbp - 0x21]
mov eax, dword [rax]
mov dword [rbp - 0x21], eax
lea rax, [rbp - 0x19]
mov qword [rsp + 0x20], rax
call fcn.180061fc0
mov r15d, dword [rbp - 0x29]
mov ebx, eax
test eax, eax
jne 0x18003e1d3
jmp 0x18003e607
mov dword [rbp - 0x19], 0
mov r8, r12
jmp 0x18003e654
mov eax, edx
xor esi, esi
mov qword [rsp + 0x48], rsi
xor r9d, r9d
mov qword [rsp + 0x40], r12
xor r8d, r8d
mov qword [rsp + 0x38], rsi
xor edx, edx
mov qword [rbp - 0x19], rax
xor ecx, ecx
lea rax, [rbp - 0x19]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x1e8
call fcn.180033a80
mov eax, dword [rbp - 0x2d]
xor r9d, r9d
mov qword [rsp + 0x48], rsi
xor r8d, r8d
mov qword [rbp - 0x19], rax
xor edx, edx
mov rax, qword [rbp - 0x11]
xor ecx, ecx
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x19]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x1e8
call fcn.180033a80
jmp 0x18003e607
sub edx, r11d
inc r15d
mov eax, edx
sub eax, r15d
dec eax
cmp eax, dword [r8]
jbe 0x18003e60f
mov ecx, reloc.SHELL32.dll_ILFindLastID
nop dword [rax]
mov eax, ecx
sub eax, 0xf
je 0x18003e1d3
cmp eax, 1
jne 0x18003e74f
mov eax, edx
mov ebx, 6
sub eax, r15d
dec eax
mov dword [r8], eax
dec ecx
cmp ecx, 0xe
ja 0x18003e730
jmp 0x18003e60f
mov rcx, r12
jmp 0x18003e601
mov esi, edx
mov rcx, r12
sub esi, r11d
mov edx, r15d
add rdx, r9
lea r8d, [rsi - 1]
call sub.VCRUNTIME140.dll_memcpy
dec r15d
add r15d, esi
jmp 0x18003e607
mov rcx, r13
jmp 0x18003e601
xor ebx, ebx
lea r14d, [rbx + 0x5e]
jmp 0x18003e607
mov eax, edx
sub eax, r11d
dec eax
cmp r15d, eax
je 0x18003e7b2
mov eax, r15d
cmp byte [rax + r12], 1
je case.default.0x18003e2c0
mov eax, 0x47
cmp eax, 0x47
je 0x18003e7c9
cmp eax, 0x22ab
je 0x18003e1d3
jmp 0x18003e7ce
mov ebx, 7
add eax, 0x2264
cmp eax, 0x44c8
jbe 0x18003e7b7
jmp case.default.0x18003e2c0
mov rcx, qword [rbp + 0x7f]
mov eax, edx
sub eax, r11d
mov edx, r15d
sub eax, r15d
add rdx, r12
dec eax
mov dword [r8], eax
mov r8d, eax
call sub.VCRUNTIME140.dll_memcpy
jmp 0x18003e607