Function at 0x18003d8f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
mov rbp, rsp
sub rsp, 0x60
movaps xmmword [rsp + 0x50], xmm6
mov rax, qword [0x180201ac0]
xor rax, rsp
mov qword [rbp - 0x20], rax
call sym.netshield.dll_create_log_producer_config
mov ecx, dword [0x1804a2b54]
mov qword [0x1804a4160], rax
mov rax, qword gs:[0x58]
mov edx, 0x76c8
mov rdi, qword [rax + rcx*8]
add rdi, rdx
mov eax, dword [rdi]
cmp dword [0x1804a3e84], eax
jle 0x18003d997
lea rcx, [0x1804a3e84]
call fcn.1801337d8
cmp dword [0x1804a3e84], 0xffffffff
jne 0x18003d997
lea rcx, [0x18016a230]
mov word [0x1804a3eb9], 0x11f
mov dword [0x1804a3eb0], 0xd0097abd
mov dword [0x1804a3eb4], 0x912a98d5
mov byte [0x1804a3eb8], 0xb7
call fcn.180133c8c
lea rcx, [0x1804a3e84]
call fcn.180133778
cmp byte [0x1804a3eba], 0
je 0x18003d9ed
xor byte [0x1804a3eb0], 0xd3
xor byte [0x1804a3eb1], 0x1f
xor byte [0x1804a3eb2], 0x7d
xor byte [0x1804a3eb3], 0xa3
xor byte [0x1804a3eb4], 0xbd
xor byte [0x1804a3eb5], 0xf1
xor byte [0x1804a3eb6], 0x4f
xor byte [0x1804a3eb7], 0xfd
xor byte [0x1804a3eb8], 0xd3
xor byte [0x1804a3eb9], 0x1f
mov byte [0x1804a3eba], 0
mov rcx, qword [0x1804a4160]
lea rdx, [0x1804a3eb0]
call sym.netshield.dll_log_producer_config_set_project
mov eax, dword [rdi]
cmp dword [0x1804a3e48], eax
movdqa xmm6, xmmword [0x1801dfe30]
jle 0x18003da4d
lea rcx, [0x1804a3e48]
call fcn.1801337d8
cmp dword [0x1804a3e48], 0xffffffff
jne 0x18003da4d
lea rcx, [0x18016a220]
mov byte [0x1804a3e80], 1
movups xmmword [0x1804a3e70], xmm6
call fcn.180133c8c
lea rcx, [0x1804a3e48]
call fcn.180133778
xor ebx, ebx
lea rdx, [0x1804a3e70]
cmp byte [0x1804a3e80], bl
je 0x18003da93
mov r8d, ebx
movabs r9, 0x3b7577db115f355b
nop dword [rax + rax]
movzx ecx, r8b
mov rax, r9
and cl, 7
shl cl, 3
shr rax, cl
xor byte [r8 + rdx], al
inc r8
cmp r8, 0x10
jb 0x18003da70
mov byte [0x1804a3e80], bl
mov rcx, qword [0x1804a4160]
call sym.netshield.dll_log_producer_config_set_logstore
mov eax, dword [rdi]
cmp dword [0x1804a3e88], eax
movdqa xmm6, xmmword [0x1801dfd80]
mov dword [rbp - 0x30], 0xfe226952
mov dword [rbp - 0x2c], 0x42646754
mov dword [rbp - 0x28], 0xea24661d
jle 0x18003db19
lea rcx, [0x1804a3e88]
call fcn.1801337d8
cmp dword [0x1804a3e88], 0xffffffff
jne 0x18003db19
movsd xmm0, qword [rbp - 0x30]
lea rcx, [0x18016a200]
mov eax, dword [rbp - 0x28]
movsd qword [0x1804a3e60], xmm0
mov word [0x1804a3e6c], 0x121
movups xmmword [0x1804a3e50], xmm6
mov dword [0x1804a3e68], eax
call fcn.180133c8c
lea rcx, [0x1804a3e88]
call fcn.180133778
cmp byte [0x1804a3e6d], bl
lea rdx, [0x1804a3e50]
je 0x18003db63
mov r8, rbx
movabs r9, 0x31070921874b0533
nop word [rax + rax]
movzx ecx, r8b
mov rax, r9
and cl, 7
shl cl, 3
shr rax, cl
xor byte [r8 + rdx], al
inc r8
cmp r8, 0x1d
jb 0x18003db40
mov byte [0x1804a3e6d], bl
mov rcx, qword [0x1804a4160]
call sym.netshield.dll_log_producer_config_set_endpoint
mov eax, dword [rdi]
cmp dword [0x1804a3e24], eax
movdqa xmm6, xmmword [0x1801dff30]
mov dword [rbp - 0x30], 0x911330ba
mov dword [rbp - 0x2c], 0x9484c958
jle 0x18003dbd9
lea rcx, [0x1804a3e24]
call fcn.1801337d8
cmp dword [0x1804a3e24], 0xffffffff
jne 0x18003dbd9
movsd xmm0, qword [rbp - 0x30]
lea rcx, [0x18016a1e0]
movsd qword [0x1804a3ea0], xmm0
mov word [0x1804a3ea8], 0x18f
movups xmmword [0x1804a3e90], xmm6
call fcn.180133c8c
lea rcx, [0x1804a3e24]
call fcn.180133778
cmp byte [0x1804a3ea9], bl
lea rdx, [0x1804a3e90]
je 0x18003dc23
mov r8, rbx
movabs r9, 0xedbd9b35dd55518f
nop word [rax + rax]
movzx ecx, r8b
mov rax, r9
and cl, 7
shl cl, 3
shr rax, cl
xor byte [r8 + rdx], al
inc r8
cmp r8, 0x19
jb 0x18003dc00
mov byte [0x1804a3ea9], bl
mov rcx, qword [0x1804a4160]
call sym.netshield.dll_log_producer_config_set_access_id
mov eax, dword [rdi]
cmp dword [0x1804a3e20], eax
movdqa xmm6, xmmword [0x1801dffc0]
mov dword [rbp - 0x30], 0x67498fe4
mov dword [rbp - 0x2c], 0x8de7e8a8
mov dword [rbp - 0x28], 0x3f7b88e8
mov word [rbp - 0x24], 0xa9b9
jle 0x18003dcba
lea rcx, [0x1804a3e20]
call fcn.1801337d8
cmp dword [0x1804a3e20], 0xffffffff
jne 0x18003dcba
mov eax, dword [rbp - 0x28]
lea rcx, [0x18016a1b0]
movsd xmm0, qword [rbp - 0x30]
mov dword [0x1804a3e40], eax
movzx eax, word [rbp - 0x24]
mov word [0x1804a3e44], ax
mov word [0x1804a3e46], 0x1d3
movups xmmword [0x1804a3e28], xmm6
movsd qword [0x1804a3e38], xmm0
call fcn.180133c8c
lea rcx, [0x1804a3e20]
call fcn.180133778
cmp byte [0x1804a3e47], bl
lea rdx, [0x1804a3e28]
je 0x18003dd02
movabs r8, 0xc7d3dbfd570fc78f
nop dword [rax]
nop word [rax + rax]
movzx ecx, bl
mov rax, r8
and cl, 7
shl cl, 3
shr rax, cl
xor byte [rbx + rdx], al
inc rbx
cmp rbx, 0x1f
jb 0x18003dce0
mov byte [0x1804a3e47], 0
mov rcx, qword [0x1804a4160]
call sym.netshield.dll_log_producer_config_set_access_key
mov rcx, qword [0x1804a4160]
mov edx, 0x400000
call sym.netshield.dll_log_producer_config_set_packet_log_bytes
mov rcx, qword [0x1804a4160]
mov edx, 0x1000
call sym.netshield.dll_log_producer_config_set_packet_log_count
mov rcx, qword [0x1804a4160]
mov edx, 0xbb8
call sym.netshield.dll_log_producer_config_set_packet_timeout
mov rcx, qword [0x1804a4160]
mov edx, 0x4000000
call sym.netshield.dll_log_producer_config_set_max_buffer_limit
mov rcx, qword [0x1804a4160]
mov edx, 1
call sym.netshield.dll_log_producer_config_set_send_thread_count
mov rcx, qword [0x1804a4160]
mov edx, 1
call sym.netshield.dll_log_producer_config_set_compress_type
mov rcx, qword [0x1804a4160]
mov edx, 0xa
call sym.netshield.dll_log_producer_config_set_connect_timeout_sec
mov rcx, qword [0x1804a4160]
mov edx, reloc.WS2_32.dll_ntohs
call sym.netshield.dll_log_producer_config_set_send_timeout_sec
mov rcx, qword [0x1804a4160]
mov edx, 1
call sym.netshield.dll_log_producer_config_set_destroy_flusher_wait_sec
mov rcx, qword [0x1804a4160]
mov edx, 1
call sym.netshield.dll_log_producer_config_set_destroy_sender_wait_sec
mov rcx, qword [0x1804a4160]
xor edx, edx
call sym.netshield.dll_log_producer_config_set_net_interface
mov rcx, qword [0x1804a4160]
call sym.netshield.dll_log_producer_config_is_valid
neg eax
sbb eax, eax
neg eax
dec eax
mov rcx, qword [rbp - 0x20]
xor rcx, rsp
call fcn.180133630
mov rbx, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
movaps xmm6, xmmword [rsp + 0x50]
add rsp, 0x60
pop rbp
ret