Function at 0x18004c930
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
test r8, r8
je 0x18004d33a
mov qword [rsp + 8], rcx
push rbx
push rsi
mov eax, 0x68
call fcn.1800156e0
sub rsp, rax
mov r11d, dword [rcx + 4]
mov r10d, dword [rcx + 8]
mov r9d, dword [rcx + 0xc]
mov ebx, dword [rcx]
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x1c], r11d
mov dword [rsp + 0x20], r10d
mov dword [rsp + 0x18], r9d
mov rax, r8
mov rsi, rdx
mov qword [rsp + 0x38], r15
nop
dec rax
movzx ecx, byte [rsi]
movzx edx, byte [rsi + 4]
mov qword [rsp + 0x90], rax
movzx eax, byte [rsi + 1]
movzx r8d, byte [rsi + 8]
shl eax, 8
or ecx, eax
movzx eax, byte [rsi + 2]
shl eax, 0x10
or ecx, eax
movzx eax, byte [rsi + 3]
shl eax, 0x18
or ecx, eax
movzx eax, byte [rsi + 5]
shl eax, 8
mov dword [rsp + 0x88], ecx
or edx, eax
movzx eax, byte [rsi + 6]
shl eax, 0x10
or edx, eax
movzx eax, byte [rsi + 7]
shl eax, 0x18
or edx, eax
mov eax, r9d
xor eax, r10d
mov dword [rsp + 4], edx
and eax, r11d
xor eax, r9d
add eax, ecx
lea ecx, [rax + rbx - 0x28955b88]
movzx eax, byte [rsi + 9]
shl eax, 8
rol ecx, 7
or r8d, eax
movzx eax, byte [rsi + 0xa]
add ecx, r11d
shl eax, 0x10
or r8d, eax
movzx eax, byte [rsi + 0xb]
shl eax, 0x18
or r8d, eax
mov eax, r10d
xor eax, r11d
mov dword [rsp + 8], r8d
and eax, ecx
xor eax, r10d
add eax, edx
lea edx, [rax + r9 - 0x173848aa]
movzx eax, byte [rsi + 0xd]
movzx r9d, byte [rsi + 0xc]
shl eax, 8
rol edx, 0xc
or r9d, eax
movzx eax, byte [rsi + 0xe]
add edx, ecx
shl eax, 0x10
or r9d, eax
movzx eax, byte [rsi + 0xf]
shl eax, 0x18
or r9d, eax
mov eax, r11d
xor eax, ecx
mov dword [rsp + 0x98], r9d
and eax, edx
xor eax, r11d
add eax, r8d
lea r8d, [rax + r10 + 0x242070db]
movzx eax, byte [rsi + 0x11]
movzx r10d, byte [rsi + 0x10]
shl eax, 8
rol r8d, 0x11
or r10d, eax
movzx eax, byte [rsi + 0x12]
add r8d, edx
shl eax, 0x10
or r10d, eax
movzx eax, byte [rsi + 0x13]
shl eax, 0x18
or r10d, eax
mov dword [rsp], r10d
movzx ebx, byte [rsi + 0x18]
movzx r14d, byte [rsi + 0x1c]
mov eax, edx
xor eax, ecx
and eax, r8d
xor eax, ecx
add eax, r9d
lea r9d, [rax + r11 - 0x3e423112]
movzx eax, byte [rsi + 0x15]
movzx r11d, byte [rsi + 0x14]
shl eax, 8
rol r9d, 0x16
or r11d, eax
movzx eax, byte [rsi + 0x16]
add r9d, r8d
shl eax, 0x10
or r11d, eax
movzx eax, byte [rsi + 0x17]
shl eax, 0x18
or r11d, eax
mov eax, edx
xor eax, r8d
mov dword [rsp + 0x14], r11d
and eax, r9d
xor eax, edx
add eax, r10d
lea r10d, [rax + rcx - 0xa83f051]
movzx eax, byte [rsi + 0x19]
shl eax, 8
rol r10d, 7
or ebx, eax
movzx eax, byte [rsi + 0x1a]
add r10d, r9d
shl eax, 0x10
or ebx, eax
movzx eax, byte [rsi + 0x1b]
shl eax, 0x18
or ebx, eax
mov eax, r8d
xor eax, r9d
mov dword [rsp + 0xc], ebx
and eax, r10d
xor eax, r8d
add eax, r11d
lea ecx, [rax + rdx + 0x4787c62a]
movzx eax, byte [rsi + 0x1d]
shl eax, 8
rol ecx, 0xc
or r14d, eax
movzx eax, byte [rsi + 0x1e]
add ecx, r10d
shl eax, 0x10
or r14d, eax
movzx eax, byte [rsi + 0x1f]
shl eax, 0x18
or r14d, eax
mov eax, r9d
xor eax, r10d
and eax, ecx
xor eax, r9d
add eax, ebx
movzx ebx, byte [rsi + 0x20]
lea edx, [rax + r8 - 0x57cfb9ed]
movzx eax, byte [rsi + 0x21]
shl eax, 8
rol edx, 0x11
or ebx, eax
movzx eax, byte [rsi + 0x22]
add edx, ecx
shl eax, 0x10
or ebx, eax
movzx eax, byte [rsi + 0x23]
shl eax, 0x18
or ebx, eax
mov eax, ecx
xor eax, r10d
mov dword [rsp + 0x24], ebx
and eax, edx
xor eax, r10d
add eax, r14d
lea r8d, [rax + r9 - 0x2b96aff]
movzx eax, byte [rsi + 0x25]
movzx edi, byte [rsi + 0x24]
movzx r13d, byte [rsi + 0x28]
shl eax, 8
movzx r15d, byte [rsi + 0x2c]
movzx ebp, byte [rsi + 0x30]
or edi, eax
movzx eax, byte [rsi + 0x26]
movzx r12d, byte [rsi + 0x34]
shl eax, 0x10
rol r8d, 0x16
or edi, eax
movzx eax, byte [rsi + 0x27]
add r8d, edx
shl eax, 0x18
or edi, eax
mov eax, ecx
xor eax, edx
mov dword [rsp + 0x10], edi
and eax, r8d
xor eax, ecx
add eax, ebx
lea r9d, [rax + r10 + 0x698098d8]
movzx eax, byte [rsi + 0x29]
shl eax, 8
rol r9d, 7
or r13d, eax
movzx eax, byte [rsi + 0x2a]
add r9d, r8d
shl eax, 0x10
or r13d, eax
movzx eax, byte [rsi + 0x2b]
shl eax, 0x18
or r13d, eax
mov eax, edx
xor eax, r8d
and eax, r9d
xor eax, edx
add eax, edi
lea r10d, [rax + rcx - 0x74bb0851]
movzx eax, byte [rsi + 0x2d]
shl eax, 8
rol r10d, 0xc
or r15d, eax
movzx eax, byte [rsi + 0x2e]
add r10d, r9d
shl eax, 0x10
or r15d, eax
movzx eax, byte [rsi + 0x2f]
shl eax, 0x18
or r15d, eax
mov eax, r8d
xor eax, r9d
and eax, r10d
xor eax, r8d
add eax, r13d
lea ecx, [rax + rdx - 0xa44f]
movzx eax, byte [rsi + 0x31]
shl eax, 8
rol ecx, 0x11
or ebp, eax
movzx eax, byte [rsi + 0x32]
add ecx, r10d
shl eax, 0x10
or ebp, eax
movzx eax, byte [rsi + 0x33]
shl eax, 0x18
or ebp, eax
mov eax, r10d
xor eax, r9d
and eax, ecx
xor eax, r9d
add eax, r15d
lea edx, [rax + r8 - 0x76a32842]
movzx eax, byte [rsi + 0x35]
shl eax, 8
rol edx, 0x16
or r12d, eax
movzx eax, byte [rsi + 0x36]
add edx, ecx
shl eax, 0x10
or r12d, eax
movzx eax, byte [rsi + 0x37]
movzx edi, byte [rsi + 0x38]
shl eax, 0x18
add rsi, 0x3c
or r12d, eax
mov qword [rsp + 0x28], rsi
mov eax, r10d
xor eax, ecx
and eax, edx
xor eax, r10d
add eax, ebp
lea r8d, [rax + r9 + 0x6b901122]
movzx eax, byte [rsi - 3]
shl eax, 8
rol r8d, 7
or edi, eax
movzx eax, byte [rsi - 2]
add r8d, edx
shl eax, 0x10
or edi, eax
movzx eax, byte [rsi - 1]
movzx esi, byte [rsi]
shl eax, 0x18
or edi, eax
mov eax, ecx
xor eax, edx
and eax, r8d
xor eax, ecx
add eax, r12d
lea r9d, [rax + r10 - 0x2678e6d]
mov r10, qword [rsp + 0x28]
movzx eax, byte [r10 + 1]
rol r9d, 0xc
add r10, 4
shl eax, 8
add r9d, r8d
mov qword [rsp + 0x28], r10
or esi, eax
movzx eax, byte [r10 - 2]
shl eax, 0x10
or esi, eax
movzx eax, byte [r10 - 1]
shl eax, 0x18
or esi, eax
mov eax, edx
xor eax, r8d
and eax, r9d
xor eax, edx
add eax, edi
lea ecx, [rax + rcx - 0x5986bc72]
mov eax, r9d
xor eax, r8d
rol ecx, 0x11
add ecx, r9d
and eax, ecx
xor eax, r8d
add eax, esi
lea edx, [rax + rdx + 0x49b40821]
mov eax, ecx
rol edx, 0x16
add edx, ecx
xor eax, edx
and eax, r9d
xor eax, ecx
add eax, dword [rsp + 4]
lea r8d, [rax + r8 - 0x9e1da9e]
mov eax, edx
rol r8d, 5
add r8d, edx
xor eax, r8d
and eax, ecx
xor eax, edx
add eax, dword [rsp + 0xc]
lea r9d, [rax + r9 - 0x3fbf4cc0]
rol r9d, 9
add r9d, r8d
mov eax, r9d
xor eax, r8d
and eax, edx
xor eax, r8d
add eax, r15d
lea r10d, [rax + rcx + 0x265e5a51]
mov eax, r9d
rol r10d, 0xe
add r10d, r9d
xor eax, r10d
and eax, r8d
xor eax, r9d
add eax, dword [rsp + 0x88]
lea ecx, [rax + rdx - 0x16493856]
mov eax, r10d
rol ecx, 0x14
add ecx, r10d
xor eax, ecx
and eax, r9d
xor eax, r10d
add eax, r11d
lea edx, [rax + r8 - 0x29d0efa3]
mov eax, ecx
rol edx, 5
add edx, ecx
xor eax, edx
and eax, r10d
xor eax, ecx
add eax, r13d
lea r8d, [rax + r9 + 0x2441453]
rol r8d, 9
add r8d, edx
mov eax, r8d
xor eax, edx
and eax, ecx
xor eax, edx
add eax, esi
lea r9d, [rax + r10 - 0x275e197f]
mov eax, r8d
rol r9d, 0xe
add r9d, r8d
xor eax, r9d
and eax, edx
xor eax, r8d
add eax, dword [rsp]
lea r10d, [rax + rcx - 0x182c0438]
mov eax, r9d
rol r10d, 0x14
add r10d, r9d
xor eax, r10d
and eax, r8d
xor eax, r9d
add eax, dword [rsp + 0x10]
lea ecx, [rax + rdx + 0x21e1cde6]
mov eax, r10d
rol ecx, 5
add ecx, r10d
xor eax, ecx
and eax, r9d
xor eax, r10d
add eax, edi
lea edx, [rax + r8 - 0x3cc8f82a]
rol edx, 9
add edx, ecx
mov eax, edx
xor eax, ecx
and eax, r10d
xor eax, ecx
add eax, dword [rsp + 0x98]
lea r11d, [rax + r9 - 0xb2af279]
mov eax, edx
rol r11d, 0xe
add r11d, edx
xor eax, r11d
and eax, ecx
xor eax, edx
add eax, ebx
lea ebx, [rax + r10 + 0x455a14ed]
mov eax, r11d
rol ebx, 0x14
add ebx, r11d
xor eax, ebx
and eax, edx
xor eax, r11d
add eax, r12d
lea r8d, [rax + rcx - 0x561c16fb]
mov eax, ebx
rol r8d, 5
add r8d, ebx
xor eax, r8d
and eax, r11d
xor eax, ebx
add eax, dword [rsp + 8]
lea r9d, [rax + rdx - 0x3105c08]
rol r9d, 9
add r9d, r8d
mov eax, r9d
mov ecx, r9d
xor eax, r8d
and eax, ebx
xor eax, r8d
add eax, r14d
lea r10d, [rax + r11 + 0x676f02d9]
rol r10d, 0xe
add r10d, r9d
xor ecx, r10d
mov eax, ecx
and eax, r8d
xor eax, r9d
add eax, ebp
lea edx, [rax + rbx - 0x72d5b376]
mov ebx, dword [rsp + 0x24]
mov eax, r10d
rol edx, 0x14
add edx, r10d
xor eax, edx
xor ecx, edx
add ecx, dword [rsp + 0x14]
lea r8d, [rcx + r8 - 0x5c6be]
rol r8d, 4
add r8d, edx
xor eax, r8d
add eax, ebx
lea r9d, [rax + r9 - 0x788e097f]
rol r9d, 0xb
add r9d, r8d
mov eax, r9d
mov ecx, r9d
xor eax, edx
xor eax, r8d
add eax, r15d
lea r10d, [rax + r10 + 0x6d9d6122]
rol r10d, 0x10
add r10d, r9d
xor ecx, r10d
mov eax, ecx
xor eax, r8d
add eax, edi
lea r11d, [rax + rdx - 0x21ac7f4]
mov eax, r10d
rol r11d, 0x17
add r11d, r10d
xor eax, r11d
xor ecx, r11d
add ecx, dword [rsp + 4]
lea edx, [rcx + r8 - 0x5b4115bc]
rol edx, 4
add edx, r11d
xor eax, edx
add eax, dword [rsp]
lea r8d, [rax + r9 + 0x4bdecfa9]
rol r8d, 0xb
add r8d, edx
mov eax, r8d
mov ecx, r8d
xor eax, r11d
xor eax, edx
add eax, r14d
lea r9d, [rax + r10 - 0x944b4a0]
rol r9d, 0x10
add r9d, r8d
xor ecx, r9d
mov eax, ecx
xor eax, edx
add eax, r13d
lea r10d, [rax + r11 - 0x41404390]
rol r10d, 0x17
mov eax, r9d
add r10d, r9d
xor eax, r10d
xor ecx, r10d
add ecx, r12d
lea r11d, [rcx + rdx + 0x289b7ec6]
rol r11d, 4
add r11d, r10d
xor eax, r11d
add eax, dword [rsp + 0x88]
lea r8d, [rax + r8 - 0x155ed806]
rol r8d, 0xb
add r8d, r11d
mov eax, r8d
mov ecx, r8d
xor eax, r10d
xor eax, r11d
add eax, dword [rsp + 0x98]
lea r9d, [rax + r9 - 0x2b10cf7b]
rol r9d, 0x10
add r9d, r8d
xor ecx, r9d
mov eax, ecx
xor eax, r11d
add eax, dword [rsp + 0xc]
lea edx, [rax + r10 + 0x4881d05]
mov eax, r9d
rol edx, 0x17
add edx, r9d
xor eax, edx
xor ecx, edx
add ecx, dword [rsp + 0x10]
lea r10d, [rcx + r11 - 0x262b2fc7]
rol r10d, 4
add r10d, edx
xor eax, r10d
add eax, ebp
lea ecx, [rax + r8 - 0x1924661b]
rol ecx, 0xb
add ecx, r10d
mov eax, ecx
xor eax, edx
xor eax, r10d
add eax, esi
lea r8d, [rax + r9 + 0x1fa27cf8]
mov eax, ecx
rol r8d, 0x10
add r8d, ecx
xor eax, r8d
xor eax, r10d
add eax, dword [rsp + 8]
lea r9d, [rax + rdx - 0x3b53a99b]
mov eax, ecx
not eax
rol r9d, 0x17
add r9d, r8d
or eax, r9d
xor eax, r8d
add eax, dword [rsp + 0x88]
lea edx, [rax + r10 - 0xbd6ddbc]
mov eax, r8d
not eax
rol edx, 6
add edx, r9d
or eax, edx
xor eax, r9d
add eax, r14d
lea r10d, [rax + rcx + 0x432aff97]
mov eax, r9d
not eax
rol r10d, 0xa
add r10d, edx
or eax, r10d
xor eax, edx
add eax, edi
lea ecx, [rax + r8 - 0x546bdc59]
mov eax, edx
rol ecx, 0xf
not eax
add ecx, r10d
or eax, ecx
xor eax, r10d
add eax, dword [rsp + 0x14]
lea r8d, [rax + r9 - 0x36c5fc7]
mov eax, r10d
not eax
rol r8d, 0x15
add r8d, ecx
or eax, r8d
xor eax, ecx
add eax, ebp
lea r9d, [rax + rdx + 0x655b59c3]
mov eax, ecx
not eax
rol r9d, 6
add r9d, r8d
or eax, r9d
xor eax, r8d
add eax, dword [rsp + 0x98]
lea edx, [rax + r10 - 0x70f3336e]
mov eax, r8d
not eax
rol edx, 0xa
add edx, r9d
or eax, edx
xor eax, r9d
add eax, r13d
lea r10d, [rax + rcx - 0x100b83]
mov eax, r9d
not eax
rol r10d, 0xf
add r10d, edx
or eax, r10d
xor eax, edx
add eax, dword [rsp + 4]
lea ecx, [rax + r8 - 0x7a7ba22f]
mov eax, edx
not eax
rol ecx, 0x15
add ecx, r10d
or eax, ecx
xor eax, r10d
add eax, ebx
lea r8d, [rax + r9 + 0x6fa87e4f]
mov eax, r10d
not eax
rol r8d, 6
add r8d, ecx
or eax, r8d
xor eax, ecx
add eax, esi
lea r11d, [rax + rdx - 0x1d31920]
mov eax, ecx
not eax
rol r11d, 0xa
add r11d, r8d
or eax, r11d
xor eax, r8d
add eax, dword [rsp + 0xc]
lea edx, [rax + r10 - 0x5cfebcec]
mov eax, r8d
not eax
rol edx, 0xf
add edx, r11d
or eax, edx
xor eax, r11d
add eax, r12d
lea r10d, [rax + rcx + 0x4e0811a1]
mov eax, r11d
not eax
rol r10d, 0x15
add r10d, edx
or eax, r10d
xor eax, edx
add eax, dword [rsp]
lea r9d, [rax + r8 - 0x8ac817e]
mov eax, edx
rol r9d, 6
not eax
add r9d, r10d
or eax, r9d
mov rsi, qword [rsp + 0x28]
xor eax, r10d
add eax, r15d
lea r8d, [rax + r11 - 0x42c50dcb]
mov eax, r10d
not eax
rol r8d, 0xa
add r8d, r9d
or eax, r8d
xor eax, r9d
add eax, dword [rsp + 8]
lea edx, [rax + rdx + 0x2ad7d2bb]
mov eax, r9d
not eax
rol edx, 0xf
add edx, r8d
or eax, edx
xor eax, r8d
add eax, dword [rsp + 0x10]
lea ecx, [rax + r10 - 0x14792c6f]
mov rax, qword [rsp + 0x80]
add dword [rax], r9d
mov r9d, dword [rsp + 0x1c]
mov ebx, dword [rax]
rol ecx, 0x15
add ecx, edx
add r9d, ecx
mov ecx, dword [rsp + 0x20]
add ecx, edx
mov dword [rax + 4], r9d
mov dword [rsp + 0x1c], r9d
mov dword [rax + 8], ecx
mov dword [rsp + 0x20], ecx
mov r10d, ecx
mov ecx, dword [rsp + 0x18]
mov r11d, r9d
add ecx, r8d
mov dword [rax + 0xc], ecx
mov rax, qword [rsp + 0x90]
mov dword [rsp + 0x18], ecx
mov r9d, ecx
test rax, rax
jne 0x18004c990
mov r15, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
mov r13, qword [rsp + 0x48]
mov r12, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
pop rsi
pop rbx
repz ret