Function at 0x180002a70
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x40
mov r11d, dword [rsp + 0x88]
lea r15d, [r8 - 0x4355]
mov rsi, qword [rsp + 0x80]
lea eax, [r15 + 0x40a0]
xor r12d, r12d
lea edi, [r8 - 0x2fb]
mov r14d, r9d
mov ecx, r8d
mov ebp, r8d
xor ecx, 0x7a66
xor ebp, 0x7d83
xor r14d, 0x7dbc
add r11d, 0xffffbcab
lea ebx, [r12 + 1]
cmp ebp, eax
jg 0x180002e08
lea eax, [r15 + 0x421e]
cmp edi, eax
jg 0x180002c99
mov eax, r11d
lea r8, [0x18017e010]
xor ecx, 0x7b2d
mov r9d, r11d
xor eax, 0x3d63
mov edx, ebp
mov dword [rsp + 0x28], eax
xor r11d, 0x43ad
mov dword [rsp + 0x20], ecx
xor r9d, 0x441b
mov ecx, r11d
xor edx, 0x7df5
call fcn.180005a58
mov rcx, qword [section..data]
mov eax, dword [rcx + 0x94]
cmp dword [0x18017e0ec], eax
je 0x180002b55
mov rax, qword [rcx + 0xf8]
mov qword [rsi + 0xd0], rax
lea rax, [0x180016890]
mov dword [rsi + 0x98], 0x6e68575b
mov qword [0x18017e0d8], rax
add edi, 0x46
mov r9, r12
mov rcx, qword [section..data]
mov eax, dword [rcx + 0xdc]
add eax, dword [rsi + 0x11c]
xor eax, 0x279b49
sub dword [rcx + 0x54], eax
mov rdx, qword [section..data]
mov ecx, dword [0x18017e0bc]
mov eax, dword [rdx + 0xe0]
add eax, ebx
imul ecx, eax
mov dword [0x18017e0bc], ecx
mov rax, qword [rsi + 0xc8]
mov r8d, dword [r9 + rax]
add r9, 4
imul r8d, dword [rdx + 0x98]
mov eax, dword [rdx + 0x54]
or dword [rsi + 0xdc], eax
mov rax, qword [section..data]
mov edx, r8d
shr edx, 0x10
movsxd rcx, dword [rax + 0x9c]
mov rax, qword [rsi + 0xd0]
mov byte [rcx + rax], dl
mov rax, qword [section..data]
add dword [rax + 0x9c], ebx
mov rdx, qword [section..data]
mov eax, dword [0x18017e024]
add eax, 0xc8b27
mov ecx, dword [rdx + 0x138]
add ecx, eax
xor dword [rdx + 0x14], ecx
mov edx, r8d
mov rax, qword [rsi + 0xd0]
movsxd rcx, dword [0x18017e0ac]
shr edx, 8
mov byte [rcx + rax], dl
add dword [0x18017e0ac], ebx
mov rax, qword [section..data]
movsxd rcx, dword [rax + 0x9c]
mov rax, qword [rsi + 0xd0]
mov byte [rcx + rax], r8b
mov rax, qword [section..data]
add dword [rax + 0x9c], ebx
mov eax, dword [rsi + 0x54]
add dword [0x18017e0e8], eax
mov eax, dword [rsi + 0xc0]
sub eax, dword [rsi + 0xe0]
xor eax, ebx
or dword [0x18017e0bc], eax
cmp r9, 0x15bfd0
jl 0x180002b73
mov rax, qword [section..data]
mov ecx, dword [rsi + 0x138]
mov dword [rax + 0x98], ecx
jmp 0x180002e08
mov eax, dword [0x18017e054]
add eax, 0xffffbfa6
cmp dword [0x18017e0a4], eax
jbe 0x180002da5
mov rcx, qword [section..data]
mov r9d, r14d
mov edx, dword [rsi + 0x34]
mov r10d, dword [rsi + 0x54]
add r10d, dword [0x18017e0e8]
imul eax, dword [rcx + 0xd8], 0x3b35
mov r8d, dword [rcx + 0x1c]
mov ebx, dword [rcx + 0x40]
xor r8d, dword [0x18017e064]
add ebx, dword [rsi + 0x50]
sub r8d, r11d
mov r11d, dword [0x18017e0d0]
and eax, 0x4182
sub r9d, dword [rcx + 0x74]
or edi, eax
mov dword [rsp + 0x30], r10d
lea rax, [0x18017e010]
add r11d, r14d
imul edx, edi
or r11d, 0x3e9f
mov ecx, ebx
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x20], rax
call fcn.18000298c
mov ecx, dword [rsi + 0xdc]
mov edx, eax
mov r8d, dword [0x18017e0f0]
and eax, 0x3d63
imul eax, edi
mov r10d, ecx
and r10d, edx
or r8d, 0x4573
mov edx, ebp
sub r10d, r15d
sub r8d, 0x3e9f
mov dword [rsp + 0x20], r10d
or edx, 0x3933
or edi, eax
mov rax, qword [section..data]
mov r9d, dword [rax + 0x34]
mov eax, dword [rsi + 0x2c]
or r9d, ecx
xor r9d, dword [0x18017e098]
lea ecx, [rax + rax]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov eax, dword [rsi + 0xf0]
mov ebx, 1
and eax, dword [0x18017e11c]
mov rcx, qword [section..data]
or eax, 0x3bbb
sub dword [rcx + 0x80], eax
jmp 0x180002e08
mov r10, qword [section..data]
mov eax, dword [r10 + 0x24]
xor eax, edi
cmp dword [0x18017e050], eax
jne 0x180002e0f
mov r9d, dword [r10 + 0xa4]
lea rax, [0x18017e010]
mov r8d, dword [r10 + 0xd8]
sub r9d, ecx
mov ecx, dword [r10 + 0x44]
and r11d, 0x3a1e
mov edx, dword [0x18017e064]
or ecx, ebp
or r11d, dword [r10 + 0x94]
add r9d, edi
mov qword [rsp + 0x28], rax
sub r8d, 0x44c9
sub edx, r14d
mov dword [rsp + 0x20], r11d
call sym.rjtm209qe25.dll_PkU848
mov r10, qword [section..data]
xor edi, 0x7e3f
cmp r14d, edi
je 0x180002e2f
lea rax, [0x180197130]
mov qword [r10 + 0xc8], rax
mov r10, qword [section..data]
mov edx, dword [rsi + 0x7c]
mov eax, dword [0x18017e068]
add edx, 0xfd70a9fc
add edx, dword [r10 + 0x88]
imul eax, edx
mov dword [0x18017e068], eax
mov eax, dword [r10]
xor eax, dword [0x18017e0f0]
sub eax, 0x3565d7
add dword [r10 + 0x3c], eax
mov rax, qword [rsi + 0xc8]
movsxd rdx, dword [0x18017e0ac]
mov r9d, dword [r12 + rax]
add r12, 4
mov eax, dword [0x18017e08c]
xor eax, 0x73a01
or dword [0x18017e0e8], eax
imul r9d, dword [rsi + 0x98]
mov rax, qword [section..data]
mov rcx, qword [rax + 0xd0]
mov r8d, r9d
shr r8d, 0x18
mov byte [rdx + rcx], r8b
mov edx, r9d
add dword [0x18017e0ac], ebx
mov r8d, r9d
mov rcx, qword [section..data]
shr edx, 0x10
shr r8d, 8
mov eax, dword [rcx + 0xc0]
xor eax, dword [rcx + 0x88]
xor eax, ebx
mov dword [rcx + 0x88], eax
mov rcx, qword [section..data]
mov eax, dword [rcx + 0xd8]
sub eax, ebx
xor dword [0x18017e150], eax
movsxd rcx, dword [rcx + 0x9c]
mov rax, qword [rsi + 0xd0]
mov byte [rcx + rax], dl
mov rax, qword [section..data]
add dword [rax + 0x9c], ebx
mov rcx, qword [section..data]
mov eax, dword [rcx + 0xe0]
xor eax, dword [rcx + 0xd8]
sub eax, ebx
xor dword [rcx + 0x6c], eax
mov rax, qword [section..data]
movsxd rdx, dword [rsi + 0x9c]
mov rcx, qword [rax + 0xd0]
mov byte [rdx + rcx], r8b
add dword [rsi + 0x9c], ebx
mov ecx, dword [rsi + 0x88]
mov eax, dword [rsi + 0x40]
add eax, 0xfd77e3e3
add ecx, eax
add dword [rsi + 0x54], ecx
mov rdx, qword [section..data]
mov ecx, dword [rdx + 0x88]
mov eax, dword [rdx + 0xac]
xor ecx, 0x2881c05
imul eax, ecx
mov dword [rdx + 0xac], eax
movsxd rcx, dword [0x18017e0ac]
mov rax, qword [0x18017e0e0]
mov byte [rcx + rax], r9b
mov eax, dword [0x18017e0e8]
mov ecx, dword [0x18017e02c]
add eax, 0xfff0e5d1
sub ecx, dword [0x18017e04c]
add dword [0x18017e0ac], ebx
add ecx, eax
mov dword [0x18017e0e8], ecx
cmp r12, 0x104fdc
jl 0x180002e28
mov ecx, dword [0x18017e068]
mov rbx, qword [rsp + 0x60]
add ecx, 0xfff05f9e
mov rsi, qword [rsp + 0x70]
xor ebp, 0x8fc
mov rdi, qword [rsp + 0x78]
mov eax, ebp
mov rbp, qword [rsp + 0x68]
mov dword [0x18017e0a8], ecx
add rsp, 0x40
pop r15
pop r14
pop r12
ret