Function at 0x180001b5c
Capabilities:
Check for peb beingdebugged flag
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x40
mov dword [rbp - 0x20], 0x7b
mov r14d, 1
mov eax, dword [rbp - 0x20]
xor eax, 0x4b
mov byte [rbp - 0x1c], al
mov eax, dword [rbp - 0x20]
lea edi, [r14 + 1]
add al, r14b
mov byte [rbp - 0x1b], al
mov eax, dword [rbp - 0x20]
add al, dil
xor eax, 0x65
mov byte [rbp - 0x1a], al
mov eax, dword [rbp - 0x20]
add al, 3
mov byte [rbp - 0x19], al
mov eax, dword [rbp - 0x20]
add al, 4
xor eax, 0x72
mov byte [rbp - 0x18], al
mov eax, dword [rbp - 0x20]
add al, 5
mov byte [rbp - 0x17], al
mov eax, dword [rbp - 0x20]
add al, 6
xor eax, 0x6e
mov byte [rbp - 0x16], al
mov eax, dword [rbp - 0x20]
add al, 7
mov byte [rbp - 0x15], al
mov eax, dword [rbp - 0x20]
add al, 8
xor eax, 0x65
mov byte [rbp - 0x14], al
mov eax, dword [rbp - 0x20]
add al, 9
mov byte [rbp - 0x13], al
mov eax, dword [rbp - 0x20]
add al, 0xa
xor eax, 0x6c
mov byte [rbp - 0x12], al
mov eax, dword [rbp - 0x20]
add al, 0xb
mov byte [rbp - 0x11], al
mov eax, dword [rbp - 0x20]
add al, 0xc
xor eax, 0x33
mov byte [rbp - 0x10], al
mov eax, dword [rbp - 0x20]
add al, 0xd
mov byte [rbp - 0xf], al
mov eax, dword [rbp - 0x20]
add al, 0xe
xor eax, 0x32
mov byte [rbp - 0xe], al
mov eax, dword [rbp - 0x20]
add al, 0xf
mov byte [rbp - 0xd], al
mov eax, dword [rbp - 0x20]
add al, 0x10
xor eax, 0x2e
mov byte [rbp - 0xc], al
mov eax, dword [rbp - 0x20]
add al, 0x11
mov byte [rbp - 0xb], al
mov eax, dword [rbp - 0x20]
add al, 0x12
xor eax, 0x64
mov byte [rbp - 0xa], al
mov eax, dword [rbp - 0x20]
add al, 0x13
mov byte [rbp - 9], al
mov eax, dword [rbp - 0x20]
add al, 0x14
xor eax, 0x6c
mov byte [rbp - 8], al
mov eax, dword [rbp - 0x20]
add al, 0x15
mov byte [rbp - 7], al
mov eax, dword [rbp - 0x20]
add al, 0x16
xor eax, 0x6c
mov byte [rbp - 6], al
mov eax, dword [rbp - 0x20]
add al, 0x17
mov byte [rbp - 5], al
mov eax, dword [rbp - 0x20]
add al, 0x18
mov byte [rbp - 4], al
xor eax, eax
mov byte [rbp - 3], al
xor edx, edx
mov al, byte [rbp - 0x1c]
movsx eax, byte [rbp + rdx - 0x1c]
mov ecx, dword [rbp - 0x20]
add cl, dl
xor ecx, eax
mov byte [rbp + rdx - 0x1c], cl
add rdx, r14
cmp rdx, 0x19
jb 0x180001c82
mov byte [rbp - 3], 0
mov ebx, 0x179804
mov rax, qword gs:[0x60]
mov r15d, 0x55555556
mov r9d, 0x80000003
mov r12d, 0xfffffffc
mov r11d, 0x66666667
mov r8, qword [rax + 0x18]
mov eax, r15d
mov dword [rbp + 0x30], ebx
lea r10d, [r9 - 2]
mov ecx, dword [rbp + 0x30]
lea r13d, [r12 + 2]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001d18
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, r8d
mov dword [rbp + 0x30], ecx
jmp 0x180001d01
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r9d
jge 0x180001d12
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x180001cf8
jmp 0x180001d81
mov eax, dword [rbp + 0x30]
mov eax, dword [rbp + 0x30]
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x180001d81
mov eax, dword [rbp + 0x30]
lea ecx, [r8 + 0x17]
add eax, 0xb
cdq
idiv ecx
jmp 0x180001d68
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180001d65
add eax, r14d
jmp 0x180001d68
sub eax, r14d
mov dword [rbp + 0x30], eax
mov eax, r15d
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001d45
mov rsi, qword [r8 + 0x18]
mov eax, r15d
mov dword [rbp + 0x30], ebx
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001dca
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, esi
mov dword [rbp + 0x30], ecx
jmp 0x180001db3
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r9d
jge 0x180001dc4
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x180001daa
jmp 0x180001e32
mov eax, dword [rbp + 0x30]
mov eax, dword [rbp + 0x30]
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x180001e32
mov eax, dword [rbp + 0x30]
lea ecx, [rsi + 0x17]
add eax, 0xb
cdq
idiv ecx
jmp 0x180001e19
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180001e16
add eax, r14d
jmp 0x180001e19
sub eax, r14d
mov dword [rbp + 0x30], eax
mov eax, r15d
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001df6
mov r8, qword [rsi + 0x10]
mov eax, r15d
mov dword [rbp + 0x30], ebx
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001e7c
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, r8d
mov dword [rbp + 0x30], ecx
jmp 0x180001e65
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r9d
jge 0x180001e76
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x180001e5c
jmp 0x180001ee5
mov eax, dword [rbp + 0x30]
mov eax, dword [rbp + 0x30]
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x180001ee5
mov eax, dword [rbp + 0x30]
lea ecx, [r8 + 0x17]
add eax, 0xb
cdq
idiv ecx
jmp 0x180001ecc
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180001ec9
add eax, r14d
jmp 0x180001ecc
sub eax, r14d
mov dword [rbp + 0x30], eax
mov eax, r15d
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001ea9
mov rbx, rsi
mov rbx, qword [rbx]
mov eax, r15d
mov dword [rbp + 0x30], 0x179804
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001f37
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, ebx
mov dword [rbp + 0x30], ecx
jmp 0x180001f1d
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r9d
jge 0x180001f2e
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x180001f14
jmp 0x18000203c
mov eax, dword [rbp + 0x30]
and eax, r10d
jge 0x180001f48
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
mov eax, dword [rbp + 0x30]
je 0x180001f7e
mov ecx, edi
sub ecx, ebx
add ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x180001f63
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov ecx, dword [rbp + 0x30]
mov eax, r15d
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001f5a
jmp 0x18000203c
and eax, r9d
jge 0x180001f8c
sub eax, r14d
or eax, r12d
add eax, r14d
mov ecx, dword [rbp + 0x30]
test eax, eax
je 0x180001fdd
add ecx, edi
lea eax, [rbx + 3]
imul ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x180001fc6
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180001fc0
sub eax, r14d
jmp 0x180001fc3
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r10d
jge 0x180001fd7
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
je 0x180001fa0
jmp 0x18000203c
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x18000203c
mov eax, dword [rbp + 0x30]
lea ecx, [rbx + 0x17]
add eax, 0xb
cdq
idiv ecx
jmp 0x180002023
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180002020
add eax, r14d
jmp 0x180002023
sub eax, r14d
mov dword [rbp + 0x30], eax
mov eax, r15d
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180002000
mov r8, qword [rbx + 0x30]
test r8, r8
je 0x1800021bd
mov dword [rbp + 0x30], 0x179804
mov eax, r15d
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180002096
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, r8d
mov dword [rbp + 0x30], ecx
jmp 0x18000207c
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r9d
jge 0x18000208d
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x180002073
jmp 0x18000219e
mov eax, dword [rbp + 0x30]
and eax, r10d
jge 0x1800020a7
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
mov eax, dword [rbp + 0x30]
je 0x1800020de
mov ecx, edi
sub ecx, r8d
add ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x1800020c3
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov ecx, dword [rbp + 0x30]
mov eax, r15d
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x1800020ba
jmp 0x18000219e
and eax, r9d
jge 0x1800020ec
sub eax, r14d
or eax, r12d
add eax, r14d
mov ecx, dword [rbp + 0x30]
test eax, eax
je 0x18000213e
add ecx, edi
lea eax, [r8 + 3]
imul ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x180002127
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180002121
sub eax, r14d
jmp 0x180002124
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r10d
jge 0x180002138
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
je 0x180002101
jmp 0x18000219e
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x18000219e
mov eax, dword [rbp + 0x30]
lea ecx, [r8 + 0x17]
add eax, 0xb
cdq
idiv ecx
jmp 0x180002185
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180002182
add eax, r14d
jmp 0x180002185
sub eax, r14d
mov dword [rbp + 0x30], eax
mov eax, r15d
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180002162
mov rcx, rbx
call fcn.180001910
cmp eax, 0xd4a34b99
je 0x1800021c6
mov r9d, 0x80000003
mov r11d, 0x66666667
lea r10d, [r9 - 2]
cmp rsi, rbx
jne 0x180001ee8
mov r9, qword [rbx + 0x30]
mov eax, r15d
mov dword [rbp + 0x30], 0x179804
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x18000221b
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, r9d
mov dword [rbp + 0x30], ecx
mov ecx, 0x80000003
jmp 0x180002202
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, ecx
jge 0x180002212
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x1800021f9
jmp 0x1800022a2
mov eax, dword [rbp + 0x30]
mov eax, dword [rbp + 0x30]
mov ecx, dword [rbp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x1800022a2
mov eax, dword [rbp + 0x30]
lea ecx, [r9 + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [rbp + 0x30], eax
mov eax, r15d
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x1800022a2
mov ecx, dword [rbp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180002283
add eax, r14d
jmp 0x180002286
sub eax, r14d
mov dword [rbp + 0x30], eax
mov eax, r15d
mov r8d, dword [rbp + 0x30]
imul r8d
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*2]
cmp r8d, ecx
je 0x180002261
lea r11, [rsp + 0x40]
mov rax, r9
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret