Function at 0x180043390
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1b8
mov rax, qword [0x1800ee0f8]
xor rax, rsp
mov qword [rsp + 0x1a0], rax
mov r13, qword [rcx + 8]
mov r10, rcx
mov r12, qword [rcx + 0x38]
mov rdi, rdx
mov r14d, dword [rcx + 0x34]
mov esi, 1
mov r15, r8
mov qword [rsp + 0x58], r8
mov eax, dword [r10 + 0x18]
mov r11d, edi
sub r11d, r13d
mov dword [rsp + 0x34], eax
mov dword [rsp + 0x3c], r11d
mov r8d, edi
sub r8d, r13d
mov qword [rsp + 0x98], r9
mov r9, qword [rcx + 0x70]
lea rdx, [rax + r13]
mov rcx, qword [rcx + 0x10]
mov ebp, 3
add rax, rcx
mov qword [rsp + 0x80], rcx
mov ecx, dword [r10 + 0x100]
mov qword [rsp + 0x88], rdx
mov edx, esi
shl edx, cl
mov ecx, dword [r10 + 0x1c]
mov qword [rsp + 0x90], rax
mov eax, r11d
sub eax, ecx
mov qword [rsp + 0x68], r9
sub r11d, edx
mov qword [rsp + 0x50], r12
cmp eax, edx
mov dword [rsp + 0x38], r14d
mov eax, dword [r10 + 0x10c]
mov rdx, qword [r10 + 0x60]
cmovbe r11d, ecx
cmp dword [r10 + 0x28], 0
mov qword [rsp + 0x78], r13
cmovne r11d, ecx
mov dword [rsp + 0x30], r8d
mov ecx, 4
mov dword [rsp + 0x60], r11d
cmp eax, ecx
mov qword [rsp + 0x70], rdx
mov dword [rsp + 0x48], 0xf
cmovb ecx, eax
xor ebx, ebx
shl esi, cl
mov dword [rsp + 0x4c], esi
cmp dword [r10 + 0x12c], ebx
jne 0x180043748
mov r11d, dword [r10 + 0x2c]
mov eax, r8d
mov ecx, dword [rsp + 0x38]
sub eax, r11d
mov r14, r9
mov rdx, r13
cmp eax, 0x180
jbe 0x18004363d
lea eax, [r11 + 0x60]
cmp r11d, eax
jae 0x180043589
lea r12, [r13 + 8]
mov ebp, 0x18
mov r13, qword [rsp + 0x50]
sub ebp, ecx
add r12, r11
mov r14d, r11d
mov r15d, eax
mov rsi, r9
nop word [rax + rax]
mov eax, dword [r10 + 0x60]
mov rcx, rbp
imul edx, dword [r12], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [rsi + rax*4]
prefetcht0 byte [rax + r13]
mov rax, r14
lea r12, [r12 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, ebx
shr r8, 4
and r8d, 0xffffff0
movzx ecx, byte [r8 + r13]
lea rdx, [r8 + r13]
dec ecx
and ecx, 0xf
cmove eax, dword [rsp + 0x48]
inc r14
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [rsi + rax*4], r11d
inc r11d
cmp r11d, r15d
jb 0x1800434f0
mov rdx, qword [r10 + 8]
mov ebp, 3
mov esi, dword [rsp + 0x4c]
mov r15, qword [rsp + 0x58]
mov r13, qword [rsp + 0x78]
mov r8d, dword [rsp + 0x30]
mov ecx, dword [r10 + 0x34]
lea r11d, [r8 - 0x20]
mov r14, qword [r10 + 0x70]
lea rax, [rdi + 1]
mov r12, qword [r10 + 0x38]
lea r9, [r11 + r13]
mov dword [rsp + 0x40], ecx
mov ecx, eax
sub ecx, r11d
mov r8d, r11d
sub ecx, r13d
inc ecx
cmp r9, rax
mov eax, 8
cmova ecx, ebx
cmp ecx, eax
cmova ecx, eax
lea eax, [r11 + rcx]
cmp r11d, eax
jae 0x18004362f
mov eax, 0x18
mov r15d, ecx
sub eax, dword [rsp + 0x40]
mov qword [rsp + 0x40], rax
mov ecx, eax
nop
mov eax, dword [r10 + 0x60]
imul edx, dword [r9], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [r14 + rax*4]
prefetcht0 byte [r12 + rax]
mov rax, r8
lea r9, [r9 + 1]
and eax, 7
inc r8
mov dword [r10 + rax*4 + 0x40], edx
sub r15, 1
jne 0x1800435e0
mov r14, qword [r10 + 0x70]
mov r12, qword [r10 + 0x38]
mov rdx, qword [r10 + 8]
mov r15, qword [rsp + 0x58]
mov ecx, dword [r10 + 0x34]
mov r8d, dword [rsp + 0x30]
mov r9, qword [rsp + 0x68]
cmp r11d, r8d
jae 0x1800436f9
mov esi, dword [rsp + 0x30]
lea r15, [r11 + 8]
mov ebp, 0x18
mov r13d, r11d
sub ebp, ecx
add r15, rdx
nop dword [rax + rax]
mov eax, dword [r10 + 0x60]
mov rcx, rbp
imul edx, dword [r15], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [r14 + rax*4]
prefetcht0 byte [r12 + rax]
mov rax, r13
lea r15, [r15 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, ebx
shr r8, 4
and r8d, 0xffffff0
movzx ecx, byte [r8 + r12]
lea rdx, [r8 + r12]
dec ecx
and ecx, 0xf
cmove eax, dword [rsp + 0x48]
inc r13
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r14 + rax*4], r11d
inc r11d
cmp r11d, esi
jb 0x180043660
mov esi, dword [rsp + 0x4c]
mov ebp, 3
mov r15, qword [rsp + 0x58]
mov r13, qword [rsp + 0x78]
mov r8d, dword [rsp + 0x30]
mov r9, qword [rsp + 0x68]
mov eax, dword [rsp + 0x70]
mov ecx, 0x18
sub ecx, dword [rsp + 0x38]
mov dword [r10 + 0x2c], r8d
mov r8d, dword [rsp + 0x3c]
imul edx, dword [r8 + r13 + 8], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [r9 + rax*4]
mov r12, qword [rsp + 0x50]
prefetcht0 byte [rax + r12]
and r8d, 7
mov r11d, dword [r10 + r8*4 + 0x40]
mov dword [r10 + r8*4 + 0x40], edx
jmp 0x180043767
imul r11d, dword [rdi], 0x9e3779b1
mov ecx, 0x18
mov eax, edx
sub ecx, r14d
xor r11, rax
mov eax, dword [rsp + 0x3c]
shr r11, cl
mov dword [r10 + 0x2c], eax
add dword [r10 + 0x68], r11d
mov eax, r11d
shr rax, 4
mov r14, rbx
and eax, 0xffffff0
movdqu xmm0, xmmword [rax + r12]
lea rcx, [r9 + rax*4]
mov qword [rsp + 0x50], rcx
lea rcx, [rax + r12]
movzx eax, byte [rax + r12]
mov r12d, eax
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x70], rcx
and r12d, 0xf
movsx eax, r11b
mov ecx, r12d
neg ecx
and ecx, 0xf
movd xmm1, eax
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
pcmpeqb xmm1, xmm0
pmovmskb edx, xmm1
movzx eax, dx
shl ax, cl
movzx ecx, r12b
movzx r9d, ax
movzx eax, dx
mov rdx, qword [rsp + 0x50]
shr rax, cl
or r9, rax
jbe 0x18004383e
mov r8d, dword [rsp + 0x34]
mov r15, qword [rsp + 0x80]
mov ebp, dword [rsp + 0x60]
test esi, esi
je 0x180043834
bsf rcx, r9
add ecx, r12d
and ecx, 0xf
mov ecx, dword [rdx + rcx*4]
je 0x18004382b
cmp ecx, ebp
jb 0x180043834
cmp ecx, r8d
jb 0x180043819
prefetcht0 byte [rcx + r13]
jmp 0x18004381e
prefetcht0 byte [rcx + r15]
mov dword [rsp + r14*4 + 0xa0], ecx
inc r14
dec esi
lea rax, [r9 - 1]
and r9, rax
ja 0x1800437f6
mov r15, qword [rsp + 0x58]
mov ebp, 3
mov ecx, dword [rsp + 0x40]
mov eax, ebx
dec ecx
mov r8d, 0xf
and ecx, 0xf
cmove eax, r8d
add ecx, eax
mov rax, qword [rsp + 0x70]
mov byte [rax], cl
mov byte [rcx + rax], r11b
mov eax, dword [r10 + 0x2c]
mov dword [rdx + rcx*4], eax
inc dword [r10 + 0x2c]
test r14, r14
je 0x180043914
mov ecx, dword [rsp + 0x34]
mov r12d, dword [rsp + 0x3c]
nop dword [rax]
mov esi, dword [rsp + rbx*4 + 0xa0]
cmp esi, ecx
jb 0x1800438a6
mov eax, dword [rdi + rbp - 3]
lea rdx, [rsi + r13]
cmp dword [rdx + rbp - 3], eax
jne 0x180043908
mov r8, r15
mov rcx, rdi
call fcn.180038ab0
jmp 0x1800438e0
mov rdx, qword [rsp + 0x80]
mov eax, dword [rdi]
add rdx, rsi
cmp dword [rdx], eax
jne 0x180043908
mov rax, qword [rsp + 0x88]
lea rcx, [rdi + 4]
mov r9, qword [rsp + 0x90]
add rdx, 4
mov r8, r15
mov qword [rsp + 0x20], rax
call fcn.180038b50
add rax, 4
cmp rax, rbp
jbe 0x180043904
mov rdx, qword [rsp + 0x98]
mov ecx, r12d
sub ecx, esi
mov rbp, rax
add ecx, 3
mov qword [rdx], rcx
lea rcx, [rax + rdi]
cmp rcx, r15
je 0x180043917
mov ecx, dword [rsp + 0x34]
inc rbx
cmp rbx, r14
jb 0x180043880
mov rax, rbp
mov rcx, qword [rsp + 0x1a0]
xor rcx, rsp
call fcn.1800b2e20
add rsp, 0x1b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret