Function at 0x18004b580
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1c8
mov rax, qword [0x1800ee0f8]
xor rax, rsp
mov qword [rsp + 0x1b0], rax
mov eax, dword [rcx + 0x34]
mov r10, rcx
mov r15, qword [rcx + 0x70]
mov esi, edx
mov r12, qword [rcx + 0x38]
mov rbx, rdx
mov dword [rsp + 0x50], eax
mov r14, r8
mov eax, dword [rcx + 0x18]
mov edi, 1
mov r11d, dword [r10 + 0x10c]
mov r13d, edi
mov dword [rsp + 0x54], eax
mov qword [rsp + 0x80], r8
mov qword [rsp + 0x90], r9
mov r9, qword [rcx + 8]
mov ecx, dword [rcx + 0x100]
add rax, r9
mov qword [rsp + 0xa8], rax
sub esi, r9d
mov eax, edx
mov qword [rsp + 0x98], r15
sub eax, r9d
mov qword [rsp + 0x70], r12
mov dword [rsp + 0x30], eax
mov edx, edi
shl edx, cl
mov eax, esi
mov ecx, dword [r10 + 0x1c]
mov r8d, esi
sub eax, ecx
mov qword [rsp + 0x58], r9
sub r8d, edx
mov dword [rsp + 0x38], esi
cmp eax, edx
mov edi, 3
mov rax, qword [r10 + 0x60]
cmovbe r8d, ecx
mov qword [rsp + 0x48], rax
cmp dword [r10 + 0x28], 0
cmovne r8d, ecx
mov ecx, 5
cmp r11d, ecx
mov dword [rsp + 0x78], r8d
mov r8, qword [r10 + 0xf8]
cmovb ecx, r11d
mov qword [rsp + 0x68], r8
imul eax, dword [rbx], 0x9e3779b1
shl r13d, cl
mov ecx, 0x22
sub ecx, dword [r8 + 0x108]
mov dword [rsp + 0x34], r13d
mov edx, eax
shr rdx, cl
mov dword [rsp + 0x40], eax
lea rax, [rdx*4]
lea rcx, [rax*4]
mov qword [rsp + 0xa0], rax
mov rax, qword [r8 + 0x70]
mov qword [rsp + 0x88], rcx
prefetcht0 byte [rcx + rax]
xor ebp, ebp
cmp r11d, 5
jbe 0x18004b6cd
lea ecx, [r11 - 5]
mov eax, 1
shl eax, cl
mov dword [rsp + 0x3c], eax
jmp 0x18004b6d1
mov dword [rsp + 0x3c], ebp
mov dword [rsp + 0x60], 0x1f
cmp dword [r10 + 0x12c], ebp
jne 0x18004b9c2
mov r11d, dword [r10 + 0x2c]
mov rdx, r9
mov eax, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x50]
sub eax, r11d
mov ecx, r8d
cmp eax, 0x180
jbe 0x18004b8a0
lea eax, [r11 + 0x60]
cmp r11d, eax
jae 0x18004b7e8
mov r13, qword [rsp + 0x98]
lea r12, [r9 + 8]
mov rdi, qword [rsp + 0x70]
mov esi, 0x18
sub esi, r8d
mov r15d, r11d
add r12, r11
mov r14d, eax
nop word [rax + rax]
mov eax, dword [r10 + 0x60]
mov rcx, rsi
imul edx, dword [r12], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 3
and eax, 0x1fffffe0
prefetcht0 byte [r13 + rax*4]
prefetcht0 byte [r13 + rax*4 + 0x40]
prefetcht0 byte [rdi + rax]
mov rax, r15
lea r12, [r12 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, ebp
shr r8, 3
and r8d, 0x1fffffe0
movzx ecx, byte [rdi + r8]
lea rdx, [rdi + r8]
dec ecx
and ecx, 0x1f
cmove eax, dword [rsp + 0x60]
inc r15
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r13 + rax*4], r11d
inc r11d
cmp r11d, r14d
jb 0x18004b740
mov rdx, qword [r10 + 8]
mov edi, 3
mov r14, qword [rsp + 0x80]
mov r13d, dword [rsp + 0x34]
mov r9, qword [rsp + 0x58]
mov esi, dword [rsp + 0x38]
mov ecx, dword [r10 + 0x34]
lea rax, [rbx + 1]
mov r11d, dword [rsp + 0x30]
mov r15, qword [r10 + 0x70]
add r11d, 0xffffffe0
mov r12, qword [r10 + 0x38]
mov dword [rsp + 0x40], ecx
mov ecx, eax
sub ecx, r11d
mov r8d, r11d
sub ecx, dword [rsp + 0x58]
add r9, r8
inc ecx
cmp r9, rax
mov eax, 8
cmova ecx, ebp
cmp ecx, eax
cmova ecx, eax
lea eax, [r11 + rcx]
cmp r11d, eax
jae 0x18004b897
mov eax, 0x18
mov r13d, ecx
sub eax, dword [rsp + 0x40]
mov qword [rsp + 0x40], rax
mov ecx, eax
mov eax, dword [r10 + 0x60]
imul edx, dword [r9], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 3
and eax, 0x1fffffe0
prefetcht0 byte [r15 + rax*4]
prefetcht0 byte [r15 + rax*4 + 0x40]
prefetcht0 byte [r12 + rax]
mov rax, r8
lea r9, [r9 + 1]
and eax, 7
inc r8
mov dword [r10 + rax*4 + 0x40], edx
sub r13, 1
jne 0x18004b842
mov r15, qword [r10 + 0x70]
mov r12, qword [r10 + 0x38]
mov rdx, qword [r10 + 8]
mov r13d, dword [rsp + 0x34]
mov ecx, dword [r10 + 0x34]
mov r9, qword [rsp + 0x58]
mov eax, dword [rsp + 0x30]
cmp r11d, eax
jae 0x18004b967
mov r13d, 0x18
mov esi, r11d
sub r13d, ecx
lea r14, [rdx + 8]
add r14, rsi
mov edi, eax
mov eax, dword [r10 + 0x60]
mov rcx, r13
imul edx, dword [r14], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 3
and eax, 0x1fffffe0
prefetcht0 byte [r15 + rax*4]
prefetcht0 byte [r15 + rax*4 + 0x40]
prefetcht0 byte [r12 + rax]
mov rax, rsi
lea r14, [r14 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, ebp
shr r8, 3
and r8d, 0x1fffffe0
movzx ecx, byte [r12 + r8]
lea rdx, [r12 + r8]
dec ecx
and ecx, 0x1f
cmove eax, dword [rsp + 0x60]
inc rsi
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r15 + rax*4], r11d
inc r11d
cmp r11d, edi
jb 0x18004b8c2
mov r14, qword [rsp + 0x80]
mov edi, 3
mov r13d, dword [rsp + 0x34]
mov r9, qword [rsp + 0x58]
mov esi, dword [rsp + 0x38]
mov eax, dword [rsp + 0x30]
mov r15, qword [rsp + 0x98]
mov ecx, 0x18
sub ecx, dword [rsp + 0x50]
mov dword [r10 + 0x2c], eax
mov eax, dword [rsp + 0x48]
mov r8d, esi
imul edx, dword [r8 + r9 + 8], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 3
and eax, 0x1fffffe0
prefetcht0 byte [r15 + rax*4]
prefetcht0 byte [r15 + rax*4 + 0x40]
mov r12, qword [rsp + 0x70]
prefetcht0 byte [rax + r12]
and r8d, 7
mov r11d, dword [r10 + r8*4 + 0x40]
mov dword [r10 + r8*4 + 0x40], edx
jmp 0x18004b9de
mov r11d, dword [rsp + 0x40]
mov ecx, 0x18
mov eax, dword [rsp + 0x48]
sub ecx, dword [rsp + 0x50]
xor r11, rax
shr r11, cl
mov dword [r10 + 0x2c], esi
add dword [r10 + 0x68], r11d
mov eax, r11d
shr rax, 3
mov rsi, rbp
and eax, 0x1fffffe0
movdqu xmm0, xmmword [rax + r12]
lea rcx, [r15 + rax*4]
mov r15, rbp
mov qword [rsp + 0x48], rcx
lea rcx, [rax + r12]
movzx eax, byte [rax + r12]
mov r12d, eax
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x70], rcx
and r12d, 0x1f
movsx eax, r11b
movd xmm2, eax
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
pshufd xmm2, xmm2, 0
movdqa xmm1, xmm2
pcmpeqb xmm1, xmm0
movdqu xmm0, xmmword [rcx + 0x10]
mov ecx, r12d
neg ecx
pmovmskb eax, xmm1
and ecx, 0x1f
pcmpeqb xmm0, xmm2
pmovmskb edx, xmm0
shl edx, 0x10
or edx, eax
mov r8d, edx
mov eax, edx
mov rdx, qword [rsp + 0x48]
shl r8d, cl
mov ecx, r12d
shr rax, cl
or r8, rax
jbe 0x18004bab6
mov r14d, dword [rsp + 0x78]
test r13d, r13d
je 0x18004baa9
bsf rcx, r8
add ecx, r12d
and ecx, 0x1f
je 0x18004baa0
mov ecx, dword [rdx + rcx*4]
cmp ecx, r14d
jb 0x18004baa9
prefetcht0 byte [rcx + r9]
mov dword [rsp + r15*4 + 0xb0], ecx
inc r15
dec r13d
lea rax, [r8 - 1]
and r8, rax
ja 0x18004ba74
mov r14, qword [rsp + 0x80]
mov dword [rsp + 0x34], r13d
mov ecx, dword [rsp + 0x40]
mov eax, ebp
dec ecx
mov r8d, 0x1f
and ecx, 0x1f
cmove eax, r8d
add ecx, eax
mov rax, qword [rsp + 0x70]
mov byte [rax], cl
mov byte [rcx + rax], r11b
mov eax, dword [r10 + 0x2c]
mov dword [rdx + rcx*4], eax
inc dword [r10 + 0x2c]
test r15, r15
je 0x18004bb51
mov ebp, dword [rsp + 0x38]
mov r13, qword [rsp + 0x90]
nop dword [rax]
nop dword [rax + rax]
mov r12d, dword [rsp + rsi*4 + 0xb0]
mov eax, dword [rdi + rbx - 3]
lea rdx, [r9 + r12]
cmp dword [rdx + rdi - 3], eax
jne 0x18004bb42
mov r8, r14
mov rcx, rbx
call fcn.180038ab0
cmp rax, rdi
jbe 0x18004bb3d
mov ecx, ebp
mov rdi, rax
sub ecx, r12d
add rax, rbx
add ecx, 3
mov qword [r13], rcx
cmp rax, r14
je 0x18004bb4a
mov r9, qword [rsp + 0x58]
inc rsi
cmp rsi, r15
jb 0x18004bb00
mov r13d, dword [rsp + 0x34]
xor ebp, ebp
mov r8, qword [rsp + 0x68]
mov r12d, dword [rsp + 0x3c]
mov r11, qword [rsp + 0x88]
add r12d, r13d
mov r13d, 3
mov r10, qword [r8]
mov esi, r13d
mov r15, qword [r8 + 8]
mov rdx, qword [r8 + 0x70]
mov r9d, r15d
sub r9d, r10d
mov qword [rsp + 0x48], r10
add r9d, dword [rsp + 0x54]
cmp r12d, r13d
mov dword [rsp + 0x3c], r9d
lea rcx, [r11 + rdx]
cmovb esi, r12d
mov dword [rsp + 0x54], esi
nop
mov eax, dword [rcx]
prefetcht0 byte [rax + r15]
lea rcx, [rcx + 4]
sub r13, 1
jne 0x18004bba0
mov rax, qword [rsp + 0xa0]
mov ecx, dword [rdx + rax*4 + 0xc]
mov rax, qword [r8 + 0x80]
shr rcx, 8
prefetcht0 byte [rax + rcx*4]
mov r13d, ebp
test esi, esi
je 0x18004bc8a
nop word [rax + rax]
mov esi, dword [rdx + r11]
mov rcx, rbp
test esi, esi
je 0x18004bd49
mov eax, dword [rbx]
cmp dword [rsi + r15], eax
jne 0x18004bc3b
mov rax, qword [rsp + 0xa8]
lea rdx, [r15 + 4]
add rdx, rsi
mov qword [rsp + 0x20], rax
lea rcx, [rbx + 4]
mov r9, r10
mov r8, r14
call fcn.180038b50
mov r8, qword [rsp + 0x68]
mov r9d, dword [rsp + 0x3c]
mov r10, qword [rsp + 0x48]
mov r11, qword [rsp + 0x88]
lea rcx, [rax + 4]
mov rdx, qword [r8 + 0x70]
jmp 0x18004bc40
mov r8, qword [rsp + 0x68]
cmp rcx, rdi
jbe 0x18004bc70
mov eax, dword [rsp + 0x38]
mov rdi, rcx
mov rdx, qword [rsp + 0x90]
sub eax, esi
sub eax, r9d
add eax, 3
mov qword [rdx], rax
lea rax, [rcx + rbx]
cmp rax, r14
je 0x18004bd70
mov rdx, qword [r8 + 0x70]
add r11, 4
inc r13d
mov qword [rsp + 0x88], r11
cmp r13d, dword [rsp + 0x54]
jb 0x18004bbe0
mov rax, qword [rsp + 0xa0]
sub r12d, r13d
mov eax, dword [rdx + rax*4 + 0xc]
mov esi, eax
shr esi, 8
mov edx, ebp
movzx ecx, al
cmp r12d, ecx
cmova r12d, ecx
test r12d, r12d
je 0x18004bd49
mov r9, qword [r8 + 0x80]
nop word [rax + rax]
lea eax, [rdx + rsi]
mov eax, dword [r9 + rax*4]
prefetcht0 byte [rax + r15]
inc edx
cmp edx, r12d
jb 0x18004bcc0
mov rax, qword [r8 + 0x80]
mov r13d, dword [rax + rsi*4]
mov eax, dword [rbx]
lea rdx, [r15 + r13]
cmp dword [rdx], eax
jne 0x18004bd3b
mov rax, qword [rsp + 0xa8]
lea rcx, [rbx + 4]
add rdx, 4
mov qword [rsp + 0x20], rax
mov r9, r10
mov r8, r14
call fcn.180038b50
add rax, 4
cmp rax, rdi
jbe 0x18004bd36
mov ecx, dword [rsp + 0x38]
mov rdi, rax
mov rdx, qword [rsp + 0x90]
sub ecx, r13d
sub ecx, dword [rsp + 0x3c]
add ecx, 3
mov qword [rdx], rcx
lea rcx, [rax + rbx]
cmp rcx, r14
je 0x18004bd49
mov r8, qword [rsp + 0x68]
mov r10, qword [rsp + 0x48]
inc esi
inc ebp
cmp ebp, r12d
jb 0x18004bcd3
mov rax, rdi
mov rcx, qword [rsp + 0x1b0]
xor rcx, rsp
call fcn.1800b2e20
add rsp, 0x1c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rax, rcx
jmp 0x18004bd4c