Function at 0x18004e390
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1e8
mov rax, qword [0x1800ed0f8]
xor rax, rsp
mov qword [rsp + 0x1d0], rax
mov r12, qword [rcx + 8]
mov r10, rcx
mov rax, qword [rcx + 0x38]
mov esi, edx
mov r15, qword [rcx + 0x70]
sub esi, r12d
mov qword [rsp + 0x70], rax
mov rbx, rdx
mov eax, dword [rcx + 0x34]
mov r14, r8
mov dword [rsp + 0x30], eax
mov r11d, 1
mov eax, dword [rcx + 0x18]
mov r13d, r11d
mov ecx, dword [rcx + 0x100]
mov dword [rsp + 0x54], eax
add rax, r12
mov qword [rsp + 0xc0], rax
lea edi, [r11 + 2]
mov qword [rsp + 0x78], r8
mov eax, esi
mov qword [rsp + 0xb0], rdx
mov r8d, esi
mov qword [rsp + 0xa0], r9
mov r9d, edx
sub r9d, r12d
mov qword [rsp + 0x88], r15
mov edx, r11d
mov qword [rsp + 0x80], r12
mov r11, qword [rbx]
shl edx, cl
mov ecx, dword [r10 + 0x1c]
sub r8d, edx
sub eax, ecx
mov dword [rsp + 0x40], r9d
cmp eax, edx
mov dword [rsp + 0x34], esi
mov eax, dword [r10 + 0x10c]
cmovbe r8d, ecx
cmp dword [r10 + 0x28], 0
cmovne r8d, ecx
mov ecx, 6
cmp eax, ecx
mov dword [rsp + 0x90], r8d
mov r8, qword [r10 + 0xf8]
cmovb ecx, eax
mov qword [rsp + 0x60], r8
mov rax, qword [r10 + 0x60]
shl r13d, cl
mov ecx, 0x42
sub ecx, dword [r8 + 0x108]
mov qword [rsp + 0x48], rax
movabs rax, 0xcf1bbcdcbf9b0000
imul r11, rax
mov dword [rsp + 0x38], r13d
mov rdx, r11
shr rdx, cl
lea rax, [rdx*4]
lea rcx, [rax*4]
mov qword [rsp + 0xb8], rax
mov rax, qword [r8 + 0x70]
mov qword [rsp + 0x98], rcx
prefetcht0 byte [rcx + rax]
mov ecx, dword [r10 + 0x10c]
xor ebp, ebp
cmp ecx, 6
jbe 0x18004e4f6
add ecx, 0xfffffffa
mov eax, 1
shl eax, cl
mov dword [rsp + 0x3c], eax
jmp 0x18004e4fa
mov dword [rsp + 0x3c], ebp
mov dword [rsp + 0x58], 0x3f
cmp dword [r10 + 0x12c], ebp
jne 0x18004e878
mov rcx, qword [rsp + 0x70]
mov eax, r9d
mov r11d, dword [r10 + 0x2c]
mov edx, 0x38
mov r8d, dword [rsp + 0x30]
sub eax, r11d
mov qword [rsp + 0x68], rcx
mov rcx, r12
cmp eax, 0x180
jbe 0x18004e729
lea ecx, [r11 + 0x60]
mov qword [rsp + 0xa8], r12
cmp r11d, ecx
jae 0x18004e63d
mov rdi, qword [rsp + 0x70]
lea r14, [r12 + 8]
mov r12, qword [rsp + 0x88]
mov esi, edx
sub esi, r8d
mov r15d, r11d
add r14, r11
mov r13d, ecx
movabs rbx, 0xcf1bbcdcbf9b0000
nop word [rax + rax]
mov rdx, qword [r14]
mov ecx, esi
imul rdx, rbx
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [r12 + rax*4]
prefetcht0 byte [r12 + rax*4 + 0x40]
prefetcht0 byte [rdi + rax]
prefetcht0 byte [rdi + rax + 0x20]
mov rax, r15
lea r14, [r14 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, ebp
shr r8, 2
and r8d, 0x3fffffc0
movzx ecx, byte [rdi + r8]
lea rdx, [rdi + r8]
dec ecx
and ecx, 0x3f
cmove eax, dword [rsp + 0x58]
inc r15
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r12 + rax*4], r11d
inc r11d
cmp r11d, r13d
jb 0x18004e580
mov rax, qword [r10 + 8]
mov edi, 3
mov rbx, qword [rsp + 0xb0]
mov r14, qword [rsp + 0x78]
mov r13d, dword [rsp + 0x38]
mov esi, dword [rsp + 0x34]
lea edx, [rdi + 0x35]
mov r12, qword [rsp + 0x80]
mov r9d, dword [rsp + 0x40]
mov qword [rsp + 0xa8], rax
mov rcx, qword [r10 + 0x38]
lea r11d, [r9 - 0x20]
mov r15, qword [r10 + 0x70]
lea rax, [rbx + 1]
mov qword [rsp + 0x68], rcx
lea r9, [r11 + r12]
mov ecx, dword [r10 + 0x34]
mov dword [rsp + 0x50], ecx
mov ecx, eax
sub ecx, r11d
mov r8d, r11d
sub ecx, r12d
inc ecx
cmp r9, rax
mov eax, 8
cmova ecx, ebp
cmp ecx, eax
cmova ecx, eax
lea eax, [r11 + rcx]
cmp r11d, eax
jae 0x18004e713
mov rsi, qword [rsp + 0x68]
mov r12d, edx
sub r12d, dword [rsp + 0x50]
movabs r14, 0xcf1bbcdcbf9b0000
mov r13d, ecx
mov rdx, qword [r9]
mov ecx, r12d
imul rdx, r14
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [r15 + rax*4]
prefetcht0 byte [r15 + rax*4 + 0x40]
prefetcht0 byte [rsi + rax]
prefetcht0 byte [rsi + rax + 0x20]
mov rax, r8
lea r9, [r9 + 1]
and eax, 7
inc r8
mov dword [r10 + rax*4 + 0x40], edx
sub r13, 1
jne 0x18004e6a2
mov rcx, qword [r10 + 0x38]
mov r15, qword [r10 + 0x70]
mov r14, qword [rsp + 0x78]
mov r13d, dword [rsp + 0x38]
mov esi, dword [rsp + 0x34]
mov r12, qword [rsp + 0x80]
mov qword [rsp + 0x68], rcx
mov rcx, qword [r10 + 8]
jmp 0x18004e71b
mov rcx, qword [rsp + 0xa8]
mov r8d, dword [r10 + 0x34]
mov edx, 0x38
mov r9d, dword [rsp + 0x40]
cmp r11d, r9d
jae 0x18004e811
mov r13, qword [rsp + 0x68]
lea rsi, [rcx + 8]
mov edi, dword [rsp + 0x40]
mov r14d, edx
sub r14d, r8d
mov r12d, r11d
add rsi, r12
movabs rbx, 0xcf1bbcdcbf9b0000
nop word [rax + rax]
mov rdx, qword [rsi]
mov ecx, r14d
imul rdx, rbx
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [r15 + rax*4]
prefetcht0 byte [r15 + rax*4 + 0x40]
prefetcht0 byte [rax + r13]
prefetcht0 byte [rax + r13 + 0x20]
mov rax, r12
lea rsi, [rsi + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, ebp
shr r8, 2
and r8d, 0x3fffffc0
movzx ecx, byte [r8 + r13]
lea rdx, [r8 + r13]
dec ecx
and ecx, 0x3f
cmove eax, dword [rsp + 0x58]
inc r12
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r15 + rax*4], r11d
inc r11d
cmp r11d, edi
jb 0x18004e760
mov rbx, qword [rsp + 0xb0]
mov edi, 3
mov r14, qword [rsp + 0x78]
mov r13d, dword [rsp + 0x38]
mov esi, dword [rsp + 0x34]
mov r12, qword [rsp + 0x80]
mov r9d, dword [rsp + 0x40]
mov r15, qword [rsp + 0x88]
movabs rax, 0xcf1bbcdcbf9b0000
mov r8d, esi
mov ecx, 0x38
sub ecx, dword [rsp + 0x30]
mov dword [r10 + 0x2c], r9d
mov rdx, qword [r8 + r12 + 8]
imul rdx, rax
xor rdx, qword [rsp + 0x48]
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [r15 + rax*4]
prefetcht0 byte [r15 + rax*4 + 0x40]
mov rcx, qword [rsp + 0x70]
prefetcht0 byte [rax + rcx]
prefetcht0 byte [rax + rcx + 0x20]
and r8d, 7
mov r11d, dword [r10 + r8*4 + 0x40]
mov dword [r10 + r8*4 + 0x40], edx
jmp 0x18004e88d
xor r11, qword [rsp + 0x48]
mov ecx, 0x38
sub ecx, dword [rsp + 0x30]
shr r11, cl
mov dword [r10 + 0x2c], esi
add dword [r10 + 0x68], r11d
mov eax, r11d
mov r9, qword [rsp + 0x70]
mov rsi, rbp
shr rax, 2
and eax, 0x3fffffc0
add r9, rax
mov qword [rsp + 0x88], r9
lea rcx, [r15 + rax*4]
mov r15, rbp
movzx eax, byte [r9]
movdqu xmm0, xmmword [r9]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x48], rcx
movsx eax, r11b
movd xmm2, eax
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
pshufd xmm2, xmm2, 0
movdqa xmm1, xmm2
pcmpeqb xmm1, xmm0
movdqu xmm0, xmmword [r9 + 0x10]
pmovmskb r8d, xmm1
movdqu xmm1, xmmword [r9 + 0x20]
pcmpeqb xmm0, xmm2
pmovmskb edx, xmm0
pcmpeqb xmm1, xmm2
movdqu xmm0, xmmword [r9 + 0x30]
pmovmskb eax, xmm1
pcmpeqb xmm0, xmm2
pmovmskb r9d, xmm0
shl r9, 0x10
or r9, rax
movsxd rax, edx
mov edx, dword [rsp + 0x30]
shl r9, 0x10
and edx, 0x3f
or r9, rax
mov ecx, edx
shl r9, 0x10
neg ecx
movsxd rax, r8d
and ecx, 0x3f
or r9, rax
mov r8, r9
shl r8, cl
mov ecx, edx
shr r9, cl
or r8, r9
mov r9, qword [rsp + 0x48]
jbe 0x18004e99f
mov edx, dword [rsp + 0x30]
mov r14d, dword [rsp + 0x90]
test r13d, r13d
je 0x18004e995
bsf rcx, r8
add ecx, edx
and ecx, 0x3f
je 0x18004e98c
mov ecx, dword [r9 + rcx*4]
cmp ecx, r14d
jb 0x18004e995
prefetcht0 byte [rcx + r12]
mov dword [rsp + r15*4 + 0xd0], ecx
inc r15
dec r13d
lea rax, [r8 - 1]
and r8, rax
ja 0x18004e960
mov r14, qword [rsp + 0x78]
mov dword [rsp + 0x38], r13d
mov ecx, dword [rsp + 0x30]
mov eax, ebp
dec ecx
mov edx, 0x3f
and ecx, 0x3f
cmove eax, edx
add ecx, eax
mov rax, qword [rsp + 0x88]
mov byte [rax], cl
mov byte [rcx + rax], r11b
mov eax, dword [r10 + 0x2c]
mov dword [r9 + rcx*4], eax
inc dword [r10 + 0x2c]
test r15, r15
je 0x18004ea33
mov ebp, dword [rsp + 0x34]
mov r13, qword [rsp + 0x80]
nop
mov r12d, dword [rsp + rsi*4 + 0xd0]
mov eax, dword [rdi + rbx - 3]
lea rdx, [r12 + r13]
cmp dword [rdx + rdi - 3], eax
jne 0x18004ea24
mov r8, r14
mov rcx, rbx
call fcn.180037e00
cmp rax, rdi
jbe 0x18004ea24
mov rdx, qword [rsp + 0xa0]
mov ecx, ebp
sub ecx, r12d
mov rdi, rax
add ecx, 3
add rax, rbx
mov qword [rdx], rcx
cmp rax, r14
je 0x18004ea2c
inc rsi
cmp rsi, r15
jb 0x18004e9e0
mov r13d, dword [rsp + 0x38]
xor ebp, ebp
mov r8, qword [rsp + 0x60]
mov r12d, dword [rsp + 0x3c]
mov r11, qword [rsp + 0x98]
add r12d, r13d
mov r13d, 3
mov r10, qword [r8]
mov esi, r13d
mov r15, qword [r8 + 8]
mov rdx, qword [r8 + 0x70]
mov r9d, r15d
sub r9d, r10d
mov qword [rsp + 0x48], r10
add r9d, dword [rsp + 0x54]
cmp r12d, r13d
mov dword [rsp + 0x3c], r9d
lea rcx, [rdx + r11]
cmovb esi, r12d
mov dword [rsp + 0x54], esi
mov eax, dword [rcx]
prefetcht0 byte [rax + r15]
lea rcx, [rcx + 4]
sub r13, 1
jne 0x18004ea80
mov rax, qword [rsp + 0xb8]
mov ecx, dword [rdx + rax*4 + 0xc]
mov rax, qword [r8 + 0x80]
shr rcx, 8
prefetcht0 byte [rax + rcx*4]
mov r13d, ebp
test esi, esi
je 0x18004eb6a
nop word [rax + rax]
mov esi, dword [rdx + r11]
mov rcx, rbp
test esi, esi
je 0x18004ec29
mov eax, dword [rbx]
cmp dword [rsi + r15], eax
jne 0x18004eb1b
mov rax, qword [rsp + 0xc0]
lea rdx, [r15 + 4]
add rdx, rsi
mov qword [rsp + 0x20], rax
lea rcx, [rbx + 4]
mov r9, r10
mov r8, r14
call fcn.180037ea0
mov r8, qword [rsp + 0x60]
mov r9d, dword [rsp + 0x3c]
mov r10, qword [rsp + 0x48]
mov r11, qword [rsp + 0x98]
lea rcx, [rax + 4]
mov rdx, qword [r8 + 0x70]
jmp 0x18004eb20
mov r8, qword [rsp + 0x60]
cmp rcx, rdi
jbe 0x18004eb50
mov eax, dword [rsp + 0x34]
mov rdi, rcx
mov rdx, qword [rsp + 0xa0]
sub eax, esi
sub eax, r9d
add eax, 3
mov qword [rdx], rax
lea rax, [rcx + rbx]
cmp rax, r14
je 0x18004ec50
mov rdx, qword [r8 + 0x70]
add r11, 4
inc r13d
mov qword [rsp + 0x98], r11
cmp r13d, dword [rsp + 0x54]
jb 0x18004eac0
mov rax, qword [rsp + 0xb8]
sub r12d, r13d
mov eax, dword [rdx + rax*4 + 0xc]
mov esi, eax
shr esi, 8
mov edx, ebp
movzx ecx, al
cmp r12d, ecx
cmova r12d, ecx
test r12d, r12d
je 0x18004ec29
mov r9, qword [r8 + 0x80]
nop word [rax + rax]
lea eax, [rdx + rsi]
mov eax, dword [r9 + rax*4]
prefetcht0 byte [rax + r15]
inc edx
cmp edx, r12d
jb 0x18004eba0
mov rax, qword [r8 + 0x80]
mov r13d, dword [rax + rsi*4]
mov eax, dword [rbx]
lea rdx, [r15 + r13]
cmp dword [rdx], eax
jne 0x18004ec1b
mov rax, qword [rsp + 0xc0]
lea rcx, [rbx + 4]
add rdx, 4
mov qword [rsp + 0x20], rax
mov r9, r10
mov r8, r14
call fcn.180037ea0
add rax, 4
cmp rax, rdi
jbe 0x18004ec16
mov ecx, dword [rsp + 0x34]
mov rdi, rax
mov rdx, qword [rsp + 0xa0]
sub ecx, r13d
sub ecx, dword [rsp + 0x3c]
add ecx, 3
mov qword [rdx], rcx
lea rcx, [rax + rbx]
cmp rcx, r14
je 0x18004ec29
mov r8, qword [rsp + 0x60]
mov r10, qword [rsp + 0x48]
inc esi
inc ebp
cmp ebp, r12d
jb 0x18004ebb3
mov rax, rdi
mov rcx, qword [rsp + 0x1d0]
xor rcx, rsp
call fcn.1800b2170
add rsp, 0x1e8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rax, rcx
jmp 0x18004ec2c