Function at 0x1800c9b20
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov qword [rax + 8], rcx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2b8]
sub rsp, 0x390
movaps xmmword [rax - 0x38], xmm6
movzx r13d, r9b
movaps xmm6, xmm2
mov r12, rdx
mov r14, rcx
mov r10, rcx
cmp qword [rcx + 0x18], 0xf
jbe 0x1800c9b68
mov r10, qword [rcx]
xor ebx, ebx
mov r11d, ebx
mov r9, 0xffffffffffffffff
inc r9
cmp byte [r10 + r9], bl
jne 0x1800c9b74
add r9, r10
cmp r10, r9
je 0x1800c9bc6
nop word [rax + rax]
movzx r8d, byte [r10]
lea edx, [r8 - 0x41]
movzx eax, r8b
or al, 0x20
movzx ecx, al
cmp dl, 0x19
cmova ecx, r8d
movsx eax, cl
add eax, r11d
imul r11d, eax, 0x401
mov eax, r11d
shr eax, 6
xor r11d, eax
inc r10
cmp r10, r9
jne 0x1800c9b90
lea ecx, [r11 + r11*8]
mov eax, ecx
shr eax, 0xb
xor ecx, eax
imul r15d, ecx, 0x8001
lea rax, [rbp + 0x70]
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0xc0]
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], ebx
mov dword [rbp + 0xc0], r15d
mov dword [rbp - 0x68], 1
lea rsi, [0x180000000]
cmp byte [0x1801fb2d0], bl
jne 0x1800c9c40
mov edi, ebx
nop dword [rax]
mov rax, qword [0x1801ec548]
mov rcx, qword [rbx + rsi + 0x1821a0]
call rax
mov qword [rbx + rsi + 0x1ed400], rax
inc edi
lea rbx, [rbx + 8]
cmp edi, 0x1bda
jb 0x1800c9c10
mov byte [0x1801fb2d0], 1
xor ebx, ebx
lea rcx, [rbp - 0x70]
call qword [0x1801f7e00]
mov rax, qword [rbp - 0x70]
cmp dword [rax], 0
je 0x1800ca2fc
lea rax, [rbp + 0x70]
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0xc0]
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], ebx
mov dword [rbp + 0xc0], r15d
mov dword [rbp - 0x68], 1
cmp byte [0x1801fb2d0], 0
jne 0x1800c9cc0
mov edi, ebx
nop word [rax + rax]
mov rax, qword [0x1801ec548]
mov rcx, qword [rbx + rsi + 0x1821a0]
call rax
mov qword [rbx + rsi + 0x1ed400], rax
inc edi
lea rbx, [rbx + 8]
cmp edi, 0x1bda
jb 0x1800c9c90
mov byte [0x1801fb2d0], 1
xor ebx, ebx
lea rcx, [rbp - 0x70]
call qword [0x1801f7e08]
mov rax, qword [rbp - 0x70]
cmp dword [rax], 0
je 0x1800ca2fc
mov esi, ebx
lea r14, [0x180000000]
lea rax, [rbp + 0x70]
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0xc0]
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], ebx
mov dword [rbp + 0xc0], r15d
mov dword [rbp - 0x68], 1
cmp byte [0x1801fb2d0], 0
jne 0x1800c9d40
mov edi, ebx
nop
mov rax, qword [0x1801ec548]
mov rcx, qword [rbx + r14 + 0x1821a0]
call rax
mov qword [rbx + r14 + 0x1ed400], rax
inc edi
lea rbx, [rbx + 8]
cmp edi, 0x1bda
jb 0x1800c9d10
mov byte [0x1801fb2d0], 1
xor ebx, ebx
lea rcx, [rbp - 0x70]
call qword [0x1801f7df0]
mov rax, qword [rbp - 0x70]
cmp dword [rax], 0
jne 0x1800c9df3
lea rax, [rbp + 0x70]
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0xc0]
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], ebx
mov dword [rbp + 0xc0], r15d
mov dword [rbp + 0xc8], ebx
mov dword [rbp - 0x68], 2
cmp byte [0x1801fb2d0], 0
jne 0x1800c9dc0
mov edi, ebx
nop dword [rax]
mov rax, qword [0x1801ec548]
mov rcx, qword [rbx + r14 + 0x1821a0]
call rax
mov qword [rbx + r14 + 0x1ed400], rax
inc edi
lea rbx, [rbx + 8]
cmp edi, 0x1bda
jb 0x1800c9d90
mov byte [0x1801fb2d0], 1
xor ebx, ebx
lea rcx, [rbp - 0x70]
call qword [0x1801f7de8]
mov byte [rsp + 0x68], 0
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x200], xmm0
lea rcx, [rbp + 0x200]
call fcn.18006ae10
inc esi
cmp esi, 0x1e
jl 0x1800c9ce0
movss xmm2, dword [r12 + 0x10]
movss xmm1, dword [r12 + 8]
movss xmm0, dword [r12]
lea rax, [rbp + 0x70]
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0xc0]
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], ebx
mov dword [rbp + 0xc0], r15d
movss dword [rbp + 0xc8], xmm0
movss dword [rbp + 0xd0], xmm1
movss dword [rbp + 0xd8], xmm2
movss dword [rbp + 0xe0], xmm6
mov dword [rbp + 0xe8], 1
mov dword [rbp + 0xf0], ebx
mov dword [rbp + 0xf8], ebx
mov dword [rbp + 0x100], ebx
mov dword [rbp - 0x68], 9
cmp byte [0x1801fb2d0], 0
mov r14, qword [rbp + 0x2c0]
lea r12, [0x180000000]
jne 0x1800c9eb0
mov edi, ebx
mov rax, qword [0x1801ec548]
mov rcx, qword [rbx + r12 + 0x1821a0]
call rax
mov qword [rbx + r12 + 0x1ed400], rax
inc edi
lea rbx, [rbx + 8]
cmp edi, 0x1bda
jb 0x1800c9e80
mov byte [0x1801fb2d0], 1
xor ebx, ebx
lea rcx, [rbp - 0x70]
call qword [0x1801f4228]
mov rax, qword [rbp - 0x70]
mov esi, dword [rax]
lea rax, [rbp + 0x70]
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0xc0]
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], ebx
mov dword [rbp + 0xc0], esi
mov dword [rbp + 0xc8], 1
mov dword [rbp - 0x68], 2
cmp byte [0x1801fb2d0], 0
jne 0x1800c9f30
mov edi, ebx
nop dword [rax + rax]
mov rax, qword [0x1801ec548]
mov rcx, qword [rbx + r12 + 0x1821a0]
call rax
mov qword [rbx + r12 + 0x1ed400], rax
inc edi
lea rbx, [rbx + 8]
cmp edi, 0x1bda
jb 0x1800c9f00
mov byte [0x1801fb2d0], 1
xor ebx, ebx
lea rcx, [rbp - 0x70]
call qword [0x1801f5ca8]
lea rax, [rbp + 0x70]
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0xc0]
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], ebx
mov dword [rbp + 0xc0], esi
mov dword [rbp + 0xc8], 1
mov dword [rbp - 0x68], 2
cmp byte [0x1801fb2d0], 0
jne 0x1800c9fb0
mov edi, ebx
nop dword [rax]
nop word [rax + rax]
mov rax, qword [0x1801ec548]
mov rcx, qword [rbx + r12 + 0x1821a0]
call rax
mov qword [rbx + r12 + 0x1ed400], rax
inc edi
lea rbx, [rbx + 8]
cmp edi, 0x1bda
jb 0x1800c9f80
mov byte [0x1801fb2d0], 1
xor ebx, ebx
lea rcx, [rbp - 0x70]
call qword [0x1801ef4c8]
lea rcx, [rbp + 0x70]
mov qword [rbp - 0x70], rcx
lea rcx, [rbp + 0xc0]
mov qword [rbp - 0x60], rcx
mov dword [rbp - 0x58], ebx
mov dword [rbp + 0xc0], esi
mov dword [rbp + 0xc8], r13d
mov dword [rbp - 0x68], 2
cmp byte [0x1801fb2d0], 0
jne 0x1800ca020
mov edi, ebx
nop
mov rax, qword [0x1801ec548]
mov rcx, qword [rbx + r12 + 0x1821a0]
call rax
mov qword [rbx + r12 + 0x1ed400], rax
inc edi
lea rbx, [rbx + 8]
cmp edi, 0x1bda
jb 0x1800c9ff0
mov byte [0x1801fb2d0], 1
xor ebx, ebx
lea rcx, [rbp - 0x70]
call qword [0x1801ef7e8]
movzx eax, byte [rbp + 0x2e8]
lea rcx, [rbp + 0x70]
mov qword [rbp - 0x70], rcx
lea rcx, [rbp + 0xc0]
mov qword [rbp - 0x60], rcx
mov dword [rbp - 0x58], ebx
mov dword [rbp + 0xc0], esi
mov dword [rbp + 0xc8], eax
mov dword [rbp - 0x68], 2
cmp byte [0x1801fb2d0], 0
jne 0x1800ca0a0
mov edi, ebx
nop word [rax + rax]
mov rax, qword [0x1801ec548]
mov rcx, qword [rbx + r12 + 0x1821a0]
call rax
mov qword [rbx + r12 + 0x1ed400], rax
inc edi
lea rbx, [rbx + 8]
cmp edi, 0x1bda
jb 0x1800ca070
mov byte [0x1801fb2d0], 1
xor ebx, ebx
lea rcx, [rbp - 0x70]
call qword [0x1801ef8c8]
movzx eax, byte [rbp + 0x2f0]
xor eax, 1
lea rcx, [rbp + 0x70]
mov qword [rbp - 0x70], rcx
lea rcx, [rbp + 0xc0]
mov qword [rbp - 0x60], rcx
mov dword [rbp - 0x58], ebx
mov dword [rbp + 0xc0], esi
mov dword [rbp + 0xc8], eax
mov dword [rbp - 0x68], 2
cmp byte [0x1801fb2d0], 0
jne 0x1800ca120
mov edi, ebx
nop dword [rax + rax]
mov rax, qword [0x1801ec548]
mov rcx, qword [rbx + r12 + 0x1821a0]
call rax
mov qword [rbx + r12 + 0x1ed400], rax
inc edi
lea rbx, [rbx + 8]
cmp edi, 0x1bda
jb 0x1800ca0f0
mov byte [0x1801fb2d0], 1
xor ebx, ebx
lea rcx, [rbp - 0x70]
call qword [0x1801ef958]
movd xmm0, dword [rbp + 0x2f8]
cvtdq2ps xmm0, xmm0
lea rax, [rbp + 0x70]
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0xc0]
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], ebx
mov dword [rbp + 0xc0], esi
movss dword [rbp + 0xc8], xmm0
mov dword [rbp - 0x68], 2
cmp byte [0x1801fb2d0], 0
jne 0x1800ca1a0
mov edi, ebx
nop dword [rax + rax]
mov rax, qword [0x1801ec548]
mov rcx, qword [rbx + r12 + 0x1821a0]
call rax
mov qword [rbx + r12 + 0x1ed400], rax
inc edi
lea rbx, [rbx + 8]
cmp edi, 0x1bda
jb 0x1800ca170
mov byte [0x1801fb2d0], 1
xor ebx, ebx
lea rcx, [rbp - 0x70]
call qword [0x1801f4eb8]
cmp byte [rbp + 0x2e0], 0
je 0x1800ca24a
lea rax, [rbp + 0x70]
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0xc0]
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], ebx
mov dword [rbp + 0xc0], esi
mov dword [rbp + 0xc8], 0x7fffffff
mov dword [rbp + 0xd0], 1
mov dword [rbp + 0xd8], ebx
mov eax, dword [0x1801fb3f0]
mov dword [rbp + 0xe0], eax
mov dword [rbp - 0x68], 5
cmp byte [0x1801fb2d0], 0
jne 0x1800ca240
mov edi, ebx
nop dword [rax + rax]
mov rax, qword [0x1801ec548]
mov rcx, qword [rbx + r12 + 0x1821a0]
call rax
mov qword [rbx + r12 + 0x1ed400], rax
inc edi
lea rbx, [rbx + 8]
cmp edi, 0x1bda
jb 0x1800ca210
mov byte [0x1801fb2d0], 1
xor ebx, ebx
lea rcx, [rbp - 0x70]
call qword [0x1801f4c28]
lea rax, [rbp + 0x70]
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0xc0]
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], ebx
mov dword [rbp + 0xc0], r15d
mov dword [rbp - 0x68], 1
cmp byte [0x1801fb2d0], 0
jne 0x1800ca2b0
mov edi, ebx
nop dword [rax]
mov rax, qword [0x1801ec548]
mov rcx, qword [rbx + r12 + 0x1821a0]
call rax
mov qword [rbx + r12 + 0x1ed400], rax
inc edi
lea rbx, [rbx + 8]
cmp edi, 0x1bda
jb 0x1800ca280
mov byte [0x1801fb2d0], 1
xor ebx, ebx
lea rcx, [rbp - 0x70]
call qword [0x1801f7df8]
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x1800ca2f5
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x1800ca2f0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800ca477
mov rcx, r8
call fcn.180111228
mov eax, esi
jmp 0x1800ca441
lea rax, [rbp + 0x210]
mov qword [rbp + 0x230], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], rbx
mov qword [rbp + 0x228], 0xf
mov byte [rbp + 0x210], 0
lea rax, [rbp + 0x238]
mov qword [rbp + 0x200], rax
mov qword [rbp + 0x270], rbx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x60], rax
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rbx
mov ecx, 0x20
call fcn.180111264
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], 0x11
mov qword [rbp - 0x78], 0x1f
movups xmm0, xmmword [str.Invalid_ped_model]
movups xmmword [rax], xmm0
movzx ecx, byte [0x180190190]
mov byte [rax + 0x10], cl
mov byte [rax + 0x11], 0
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [str.Spawner]
mov dword [rsp + 0x40], eax
movzx eax, word [0x18019019c]
mov word [rsp + 0x44], ax
movzx eax, byte [0x18019019e]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], 0
lea rax, [rbp + 0x210]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x238]
mov qword [rsp + 0x28], rax
mov r9d, 3
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.18006c920
lea rcx, [rbp - 0x70]
call fcn.180026a00
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x1800ca43f
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x1800ca43a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800ca477
mov rcx, r8
call fcn.180111228
xor eax, eax
mov byte [r14], 0
mov qword [r14 + 0x18], 0xf
mov qword [r14 + 0x10], rbx
lea r11, [rsp + 0x390]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3