Function at 0x1800bd850
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xf0
mov rax, qword [0x180231100]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov r14, rcx
xor edi, edi
mov dword [rbp - 0x79], edi
mov r15, rdx
cmp qword [rdx + 0x18], 7
jbe 0x1800bd898
mov r15, qword [rdx]
mov rsi, qword [rdx + 0x10]
call fcn.1800d1110
mov r12d, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
movdqa xmm1, xmmword [0x180213750]
movdqu xmmword [rbp - 9], xmm1
mov byte [rbp - 0x19], 0
mov dword [rbp - 0x79], 8
test rsi, rsi
je 0x1800bd936
cmp rsi, 0x7fffffff
ja 0x1800bdc57
mov dword [rsp + 0x20], edi
xor r9d, r9d
mov r8d, esi
mov rdx, r15
mov ecx, eax
call fcn.1800d1180
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x1800bdc62
movsxd rdx, ebx
xor r8d, r8d
lea rcx, [rbp - 0x19]
call fcn.18000ba00
lea r9, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova r9, qword [rbp - 0x19]
mov dword [rsp + 0x20], ebx
mov r8d, esi
mov rdx, r15
mov ecx, r12d
call fcn.1800d1180
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x1800bdc4d
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x59]
call fcn.18000a2f0
lea rbx, [rbp - 0x59]
mov rcx, qword [rbp - 0x59]
mov rdx, qword [rbp - 0x41]
cmp rdx, 0xf
cmova rbx, rcx
lea rsi, [rbp - 0x59]
cmova rsi, rcx
mov r8, qword [rbp - 0x49]
add rsi, r8
cmp rbx, rsi
je 0x1800bd98f
nop dword [rax + rax]
movsx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rbx], al
inc rbx
cmp rbx, rsi
jne 0x1800bd970
mov rdx, qword [rbp - 0x41]
mov r8, qword [rbp - 0x49]
mov rcx, qword [rbp - 0x59]
lea rax, [rbp - 0x59]
cmp rdx, 0xf
cmova rax, rcx
mov qword [rbp - 0x79], rax
mov qword [rbp - 0x71], r8
xor r8d, r8d
lea rdx, [rbp - 0x79]
lea rcx, [rbp + 0x17]
call fcn.18001edb0
mov r15d, gethostname
mov rdx, qword [rbp - 0x41]
cmp rdx, 0xf
jbe 0x1800bd9f7
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800bd9f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800bd9f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800d1d5c
movdqa xmm0, xmmword [0x180213750]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x1800bda46
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800bda41
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800bda41
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800d1d5c
movdqa xmm0, xmmword [0x180213750]
movdqu xmmword [rbp - 9], xmm0
mov byte [rbp - 0x19], 0
mov rcx, qword [r14 + 0x78]
mov rax, qword [r14 + 0x80]
cmp rcx, rax
je 0x1800bdc12
sub rax, rcx
sar rax, 5
movsxd r8, dword [r14 + 0x90]
mov rdx, r8
cmp r8, rax
jae 0x1800bdc12
cmp byte [r14 + 0x94], 0
je 0x1800bdb4a
test r8d, r8d
jne 0x1800bdb4a
mov esi, 1
cmp rax, rsi
jbe 0x1800bdb43
mov edi, reloc.WLDAP32.dll_Ordinal_32
nop
lea rax, [rdi + rcx]
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x1800bdac2
mov rax, qword [rax]
mov qword [rbp + 7], rax
mov qword [rbp + 0xf], rcx
xor r8d, r8d
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x39]
call fcn.18001edb0
or r15d, 0x40
lea rax, [rbp - 0x39]
cmp qword [rbp - 0x21], 7
cmova rax, qword [rbp - 0x39]
mov qword [rbp - 0x69], rax
mov rax, qword [rbp - 0x29]
mov qword [rbp - 0x61], rax
movaps xmm0, xmmword [rbp - 0x69]
movdqa xmmword [rbp - 0x79], xmm0
lea rdx, [rbp - 0x79]
lea rcx, [rbp + 0x17]
call fcn.1800c78a0
mov ebx, eax
lea rcx, [rbp - 0x39]
call fcn.18001c180
test ebx, ebx
je 0x1800bdc12
inc rsi
add rdi, 0x20
mov rcx, qword [r14 + 0x78]
mov rax, qword [r14 + 0x80]
sub rax, rcx
sar rax, 5
cmp rsi, rax
jb 0x1800bdab0
xor bl, bl
jmp 0x1800bdc14
shl rdx, 5
lea rbx, [rdx + rcx]
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1800bdb5f
mov rdx, qword [rbx]
mov rcx, qword [rbx + 0x10]
mov dword [rbp - 0x79], 0x1004a71
nop word [rax + rax]
lea eax, [rdi + 0x5f]
xor byte [rbp + rdi - 0x79], al
inc rdi
cmp rdi, 2
jb 0x1800bdb70
mov byte [rbp - 0x76], 0
lea rax, [rbp - 0x79]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1800bdb90
cmp r8, rcx
jne 0x1800bdbac
lea rcx, [rbp - 0x79]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1800bdc12
mov rax, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x1800bdbba
mov rbx, qword [rbx]
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], rax
xor r8d, r8d
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x39]
call fcn.18001edb0
lea rax, [rbp - 0x39]
cmp qword [rbp - 0x21], 7
cmova rax, qword [rbp - 0x39]
mov qword [rbp - 0x69], rax
mov rax, qword [rbp - 0x29]
mov qword [rbp - 0x61], rax
movaps xmm0, xmmword [rbp - 0x69]
movdqa xmmword [rbp - 0x69], xmm0
lea rdx, [rbp - 0x69]
lea rcx, [rbp + 0x17]
call fcn.1800c78a0
test eax, eax
sete bl
lea rcx, [rbp - 0x39]
call fcn.18001c180
jmp 0x1800bdc14
mov bl, 1
lea rcx, [rbp + 0x17]
call fcn.18001c180
movzx eax, bl
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1800d1df0
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
shr rcx, 0x20
call fcn.180032150
int3
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.180032110
int3
shr rbx, 0x20
mov ecx, ebx
call fcn.180032150
int3