Function at 0x180001000
Capabilities:
Encode data using xor
Encrypt data using aes
Reference aes constants
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
push r15
mov dword [rcx], 0xe
lea r8, [rcx + 0x10]
mov qword [rcx + 8], r8
lea r14, [rcx + 0x20]
movzx eax, byte [rdx + 2]
mov r15, rcx
movzx ebx, byte [rdx + 3]
shl ebx, 8
or ebx, eax
movzx eax, byte [rdx + 1]
shl ebx, 8
or ebx, eax
movzx eax, byte [rdx]
shl ebx, 8
or ebx, eax
mov dword [r8], ebx
movzx eax, byte [rdx + 6]
movzx r9d, byte [rdx + 7]
shl r9d, 8
or r9d, eax
movzx eax, byte [rdx + 5]
shl r9d, 8
or r9d, eax
movzx eax, byte [rdx + 4]
shl r9d, 8
or r9d, eax
mov dword [rcx + 0x14], r9d
movzx eax, byte [rdx + 0xa]
movzx r11d, byte [rdx + 0xb]
shl r11d, 8
or r11d, eax
movzx eax, byte [rdx + 9]
shl r11d, 8
or r11d, eax
movzx eax, byte [rdx + 8]
shl r11d, 8
or r11d, eax
mov dword [rcx + 0x18], r11d
movzx eax, byte [rdx + 0xe]
movzx esi, byte [rdx + 0xf]
shl esi, 8
or esi, eax
movzx eax, byte [rdx + 0xd]
shl esi, 8
or esi, eax
movzx eax, byte [rdx + 0xc]
shl esi, 8
or esi, eax
mov dword [rcx + 0x1c], esi
movzx eax, byte [rdx + 0x12]
movzx ebp, byte [rdx + 0x13]
shl ebp, 8
or ebp, eax
movzx eax, byte [rdx + 0x11]
shl ebp, 8
or ebp, eax
movzx eax, byte [rdx + 0x10]
shl ebp, 8
or ebp, eax
mov dword [r14], ebp
movzx eax, byte [rdx + 0x16]
movzx r8d, byte [rdx + 0x17]
shl r8d, 8
or r8d, eax
movzx eax, byte [rdx + 0x15]
shl r8d, 8
or r8d, eax
movzx eax, byte [rdx + 0x14]
shl r8d, 8
or r8d, eax
mov dword [rcx + 0x24], r8d
movzx eax, byte [rdx + 0x1a]
movzx ecx, byte [rdx + 0x1b]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdx + 0x19]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdx + 0x18]
shl ecx, 8
or ecx, eax
mov dword [r15 + 0x28], ecx
movzx eax, byte [rdx + 0x1e]
movzx ecx, byte [rdx + 0x1f]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdx + 0x1d]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdx + 0x1c]
shl ecx, 8
or ecx, eax
mov dword [r15 + 0x2c], ecx
mov eax, dword [r15]
cmp eax, 0xa
je 0x18000168a
cmp eax, 0xc
je 0x180001280
cmp eax, 0xe
jne 0x1800018af
lea esi, [rax - 7]
lea rax, str.cw
lea r11, [r15 + 0x30]
lea rdi, [0x180019610]
nop dword [rax]
mov r10d, dword [r11 - 4]
lea r11, [r11 + 0x20]
movzx ecx, r10b
lea rdi, [rdi + 4]
movzx r8d, byte [rcx + rax]
mov ecx, r10d
shr rcx, 0x18
shl r8d, 8
movzx ecx, byte [rcx + rax]
xor r8d, ecx
mov ecx, r10d
shr ecx, 0x10
movzx edx, cl
shl r8d, 8
movzx ecx, byte [rdx + rax]
xor r8d, ecx
mov ecx, r10d
shr ecx, 8
movzx edx, cl
shl r8d, 8
movzx ecx, byte [rdx + rax]
xor r8d, ecx
xor r8d, dword [rdi - 4]
xor r8d, ebx
mov ecx, r8d
mov ebx, r8d
xor ecx, dword [r11 - 0x3c]
mov dword [r11 - 0x1c], ecx
xor ecx, dword [r11 - 0x38]
mov dword [r11 - 0x18], ecx
xor ecx, dword [r11 - 0x34]
mov r8d, ecx
shr rcx, 0x18
mov dword [r11 - 0x20], ebx
mov dword [r11 - 0x14], r8d
movzx r9d, byte [rcx + rax]
mov ecx, r8d
shl r9d, 8
shr ecx, 0x10
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor r9d, ecx
mov ecx, r8d
shl r9d, 8
shr ecx, 8
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor r9d, ecx
movzx ecx, r8b
shl r9d, 8
movzx edx, byte [rcx + rax]
xor r9d, edx
xor r9d, dword [r11 - 0x30]
mov dword [r11 - 0x10], r9d
xor r9d, dword [r11 - 0x2c]
mov dword [r11 - 0xc], r9d
xor r9d, dword [r11 - 0x28]
xor r10d, r9d
mov dword [r11 - 8], r9d
mov dword [r11 - 4], r10d
sub rsi, 1
jne 0x180001190
jmp 0x1800018af
lea rax, str.cw
movzx ecx, r8b
movzx edi, byte [rcx + rax]
shl edi, 8
mov ecx, r8d
shr rcx, 0x18
movzx ecx, byte [rcx + rax]
xor edi, ecx
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
shl edi, 8
movzx ecx, byte [rdx + rax]
xor edi, ecx
mov ecx, r8d
shr ecx, 8
movzx edx, cl
shl edi, 8
movzx ecx, byte [rdx + rax]
xor edi, ecx
xor edi, ebx
xor edi, 1
mov r14d, edi
mov dword [r15 + 0x28], edi
xor r14d, r9d
mov r10d, r14d
mov dword [r15 + 0x2c], r14d
xor r10d, r11d
mov r11d, r10d
mov dword [r15 + 0x30], r10d
xor r11d, esi
mov ebx, r11d
mov dword [r15 + 0x34], r11d
xor ebx, ebp
mov ecx, ebx
mov dword [r15 + 0x38], ebx
xor ecx, r8d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r15 + 0x3c], r9d
movzx esi, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl esi, 8
movzx ecx, byte [rcx + rax]
xor esi, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl esi, 8
movzx ecx, byte [rdx + rax]
xor esi, ecx
movzx ecx, r8b
shl esi, 8
movzx edx, byte [rcx + rax]
xor esi, edx
xor esi, edi
xor esi, 2
xor r14d, esi
mov dword [r15 + 0x40], esi
mov edi, r14d
mov dword [r15 + 0x44], r14d
xor edi, r10d
mov r10d, edi
mov dword [r15 + 0x48], edi
xor r10d, r11d
mov r11d, r10d
mov dword [r15 + 0x4c], r10d
xor r11d, ebx
mov ecx, r11d
mov dword [r15 + 0x50], r11d
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
mov dword [r15 + 0x54], r9d
movzx ebp, byte [rcx + rax]
mov ecx, r9d
shl ebp, 8
shr rcx, 0x18
shr r8d, 8
movzx ecx, byte [rcx + rax]
xor ebp, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl ebp, 8
movzx ecx, byte [rdx + rax]
xor ebp, ecx
movzx ecx, r8b
shl ebp, 8
movzx edx, byte [rcx + rax]
xor ebp, edx
xor ebp, esi
xor ebp, 4
xor r14d, ebp
mov dword [r15 + 0x58], ebp
mov ebx, r14d
mov dword [r15 + 0x5c], r14d
xor ebx, edi
mov edi, ebx
mov dword [r15 + 0x60], ebx
xor edi, r10d
mov r10d, edi
mov dword [r15 + 0x64], edi
xor r10d, r11d
mov ecx, r10d
mov dword [r15 + 0x68], r10d
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r15 + 0x6c], r9d
movzx esi, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl esi, 8
movzx ecx, byte [rcx + rax]
xor esi, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl esi, 8
movzx ecx, byte [rdx + rax]
xor esi, ecx
movzx ecx, r8b
shl esi, 8
movzx edx, byte [rcx + rax]
xor esi, edx
xor esi, ebp
xor esi, 8
xor r14d, esi
mov dword [r15 + 0x70], esi
mov r11d, r14d
mov dword [r15 + 0x74], r14d
xor r11d, ebx
mov ebx, r11d
mov dword [r15 + 0x78], r11d
xor ebx, edi
mov edi, ebx
mov dword [r15 + 0x7c], ebx
xor edi, r10d
mov ecx, edi
mov dword [r15 + 0x80], edi
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
mov dword [r15 + 0x84], r9d
movzx ebp, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl ebp, 8
movzx ecx, byte [rcx + rax]
xor ebp, ecx
mov ecx, r9d
shl ebp, 8
shr ecx, 0x10
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor ebp, ecx
shr r8d, 8
shl ebp, 8
movzx ecx, r8b
movzx edx, byte [rcx + rax]
xor ebp, edx
xor ebp, esi
xor ebp, 0x10
xor r14d, ebp
mov dword [r15 + 0x88], ebp
mov r10d, r14d
mov dword [r15 + 0x8c], r14d
xor r10d, r11d
mov r11d, r10d
mov dword [r15 + 0x90], r10d
xor r11d, ebx
mov ebx, r11d
mov dword [r15 + 0x94], r11d
xor ebx, edi
mov ecx, ebx
mov dword [r15 + 0x98], ebx
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r15 + 0x9c], r9d
movzx esi, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl esi, 8
movzx ecx, byte [rcx + rax]
xor esi, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl esi, 8
movzx ecx, byte [rdx + rax]
xor esi, ecx
movzx ecx, r8b
shl esi, 8
movzx edx, byte [rcx + rax]
xor esi, edx
xor esi, ebp
xor esi, 0x20
xor r14d, esi
mov dword [r15 + 0xa0], esi
mov edi, r14d
mov dword [r15 + 0xa4], r14d
xor edi, r10d
mov r10d, edi
mov dword [r15 + 0xa8], edi
xor r10d, r11d
mov r11d, r10d
mov dword [r15 + 0xac], r10d
xor r11d, ebx
mov ecx, r11d
mov dword [r15 + 0xb0], r11d
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r15 + 0xb4], r9d
movzx ebp, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl ebp, 8
movzx ecx, byte [rcx + rax]
xor ebp, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl ebp, 8
movzx ecx, byte [rdx + rax]
xor ebp, ecx
movzx ecx, r8b
shl ebp, 8
movzx edx, byte [rcx + rax]
xor ebp, edx
xor ebp, esi
xor ebp, 0x40
xor r14d, ebp
mov dword [r15 + 0xb8], ebp
mov ebx, r14d
mov dword [r15 + 0xbc], r14d
xor ebx, edi
mov edi, ebx
mov dword [r15 + 0xc0], ebx
xor edi, r10d
mov esi, edi
mov dword [r15 + 0xc4], edi
xor esi, r11d
mov ecx, esi
mov dword [r15 + 0xc8], esi
xor ecx, r9d
mov r10d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r15 + 0xcc], r10d
movzx r9d, byte [rcx + rax]
mov ecx, r10d
shl r9d, 8
shr rcx, 0x18
movzx ecx, byte [rcx + rax]
xor r9d, ecx
mov ecx, r10d
shl r9d, 8
shr ecx, 0x10
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor r9d, ecx
movzx ecx, r8b
shl r9d, 8
movzx edx, byte [rcx + rax]
xor r9d, edx
xor r9d, ebp
btc r9d, 7
xor r14d, r9d
mov dword [r15 + 0xd0], r9d
mov dword [r15 + 0xd4], r14d
xor r14d, ebx
mov dword [r15 + 0xd8], r14d
xor r14d, edi
mov dword [r15 + 0xdc], r14d
xor r14d, esi
mov dword [r15 + 0xe0], r14d
xor r14d, r10d
mov dword [r15 + 0xe4], r14d
jmp 0x1800018af
lea rbp, [0x180019618]
mov r15d, 2
lea rax, str.cw
nop
mov r8d, dword [r14 - 4]
movzx ecx, r8b
movzx r11d, byte [rcx + rax]
mov ecx, r8d
shr rcx, 0x18
shl r11d, 8
movzx ecx, byte [rcx + rax]
xor r11d, ecx
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
shl r11d, 8
movzx ecx, byte [rdx + rax]
xor r11d, ecx
mov ecx, r8d
shr ecx, 8
movzx edx, cl
shl r11d, 8
movzx ecx, byte [rdx + rax]
xor r11d, ecx
xor r11d, dword [rbp - 8]
xor r11d, ebx
mov esi, r11d
mov dword [r14], r11d
xor esi, dword [r14 - 0xc]
mov r10d, esi
mov dword [r14 + 4], esi
xor r10d, dword [r14 - 8]
xor r8d, r10d
mov dword [r14 + 8], r10d
mov r9d, r8d
movzx ecx, r8b
mov dword [r14 + 0xc], r9d
movzx ebx, byte [rcx + rax]
shl ebx, 8
mov ecx, r8d
shr rcx, 0x18
movzx ecx, byte [rcx + rax]
xor ebx, ecx
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
shl ebx, 8
shr r8d, 8
movzx ecx, byte [rdx + rax]
xor ebx, ecx
movzx ecx, r8b
shl ebx, 8
movzx edx, byte [rcx + rax]
xor ebx, edx
xor ebx, dword [rbp - 4]
xor ebx, r11d
xor esi, ebx
mov dword [r14 + 0x10], ebx
mov r11d, esi
mov dword [r14 + 0x14], esi
xor r11d, r10d
mov ecx, r11d
mov dword [r14 + 0x18], r11d
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r14 + 0x1c], r9d
movzx edi, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl edi, 8
movzx ecx, byte [rcx + rax]
xor edi, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl edi, 8
movzx ecx, byte [rdx + rax]
xor edi, ecx
movzx ecx, r8b
shl edi, 8
movzx edx, byte [rcx + rax]
xor edi, edx
xor edi, ebx
lea r14, [r14 + 0x50]
xor edi, dword [rbp]
lea rbp, [rbp + 0x14]
mov r10d, edi
mov dword [r14 - 0x30], edi
xor r10d, esi
mov ebx, r10d
mov dword [r14 - 0x2c], r10d
xor ebx, r11d
mov ecx, ebx
mov dword [r14 - 0x28], ebx
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r14 - 0x24], r9d
movzx esi, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl esi, 8
movzx ecx, byte [rcx + rax]
xor esi, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl esi, 8
movzx ecx, byte [rdx + rax]
xor esi, ecx
movzx ecx, r8b
shl esi, 8
movzx edx, byte [rcx + rax]
xor esi, edx
xor esi, dword [rbp - 0x10]
xor esi, edi
mov r11d, esi
mov dword [r14 - 0x20], esi
xor r11d, r10d
mov r10d, r11d
mov dword [r14 - 0x1c], r11d
xor r10d, ebx
mov ecx, r10d
mov dword [r14 - 0x18], r10d
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r14 - 0x14], r9d
movzx ebx, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl ebx, 8
movzx ecx, byte [rcx + rax]
xor ebx, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl ebx, 8
movzx ecx, byte [rdx + rax]
xor ebx, ecx
movzx ecx, r8b
shl ebx, 8
movzx edx, byte [rcx + rax]
xor ebx, edx
xor ebx, dword [rbp - 0xc]
xor ebx, esi
mov ecx, ebx
mov dword [r14 - 0x10], ebx
xor ecx, r11d
mov dword [r14 - 0xc], ecx
xor ecx, r10d
mov dword [r14 - 8], ecx
xor ecx, r9d
mov dword [r14 - 4], ecx
sub r15, 1
jne 0x1800016a0
mov rbx, qword [rsp + 0x18]
xor eax, eax
mov rbp, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x30]
pop r15
pop r14
ret