Function at 0x18004b940
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1d8
mov rax, qword [0x1800ed0f8]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
mov r11, qword [rcx + 8]
mov r10, rcx
mov rax, qword [rcx + 0x38]
mov esi, edx
mov qword [rsp + 0x70], rax
sub esi, r11d
mov eax, dword [rcx + 0x34]
mov rbx, rdx
mov r15d, dword [r10 + 0x10c]
mov r14, r8
mov dword [rsp + 0x44], eax
mov edi, 1
mov eax, dword [rcx + 0x18]
mov r13d, edi
mov r12, qword [rbx]
mov dword [rsp + 0x5c], eax
add rax, r11
mov qword [rsp + 0xb8], rax
mov eax, edx
sub eax, r11d
mov qword [rsp + 0x78], r8
mov dword [rsp + 0x38], eax
mov r8d, esi
mov qword [rsp + 0xa8], rdx
mov eax, esi
mov edx, edi
mov qword [rsp + 0x98], r9
mov r9, qword [rcx + 0x70]
mov edi, 3
mov ecx, dword [rcx + 0x100]
shl edx, cl
mov ecx, dword [r10 + 0x1c]
sub r8d, edx
sub eax, ecx
mov qword [rsp + 0x80], r9
cmp eax, edx
mov qword [rsp + 0x60], r11
mov rax, qword [r10 + 0x60]
cmovbe r8d, ecx
mov qword [rsp + 0x50], rax
cmp dword [r10 + 0x28], 0
movabs rax, 0xcf1bbcdcbb000000
mov dword [rsp + 0x34], esi
cmovne r8d, ecx
mov ecx, 4
cmp r15d, ecx
mov dword [rsp + 0x88], r8d
mov r8, qword [r10 + 0xf8]
cmovb ecx, r15d
mov qword [rsp + 0x68], r8
shl r13d, cl
mov ecx, 0x42
imul r12, rax
sub ecx, dword [r8 + 0x108]
mov rdx, r12
mov dword [rsp + 0x3c], r13d
shr rdx, cl
lea rax, [rdx*4]
lea rcx, [rax*4]
mov qword [rsp + 0xb0], rax
mov rax, qword [r8 + 0x70]
mov qword [rsp + 0x90], rcx
prefetcht0 byte [rcx + rax]
xor ebp, ebp
cmp r15d, 4
jbe 0x18004ba9d
lea ecx, [r15 - 4]
mov eax, 1
shl eax, cl
mov dword [rsp + 0x40], eax
jmp 0x18004baa1
mov dword [rsp + 0x40], ebp
mov dword [rsp + 0x48], 0xf
cmp dword [r10 + 0x12c], ebp
jne 0x18004bdd9
mov r11d, dword [r10 + 0x2c]
mov r15, r9
mov eax, dword [rsp + 0x38]
mov edx, 0x38
mov rcx, qword [rsp + 0x60]
sub eax, r11d
mov r12, qword [rsp + 0x70]
mov r8, rcx
mov r9d, dword [rsp + 0x44]
cmp eax, 0x180
jbe 0x18004bcac
lea r8d, [r11 + 0x60]
mov qword [rsp + 0xa0], rcx
cmp r11d, r8d
jae 0x18004bbdb
mov r13, qword [rsp + 0x80]
lea r12, [rcx + 8]
mov rdi, qword [rsp + 0x70]
mov r14d, edx
sub r14d, r9d
mov r15d, r11d
add r12, r11
mov esi, r8d
movabs rbx, 0xcf1bbcdcbb000000
nop word [rax + rax]
mov rdx, qword [r12]
mov ecx, r14d
imul rdx, rbx
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [r13 + rax*4]
prefetcht0 byte [rdi + rax]
mov rax, r15
lea r12, [r12 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, ebp
shr r8, 4
and r8d, 0xffffff0
movzx ecx, byte [r8 + rdi]
lea rdx, [r8 + rdi]
dec ecx
and ecx, 0xf
cmove eax, dword [rsp + 0x48]
inc r15
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r13 + rax*4], r11d
inc r11d
cmp r11d, esi
jb 0x18004bb30
mov rax, qword [r10 + 8]
mov edi, 3
mov rbx, qword [rsp + 0xa8]
mov r14, qword [rsp + 0x78]
mov r13d, dword [rsp + 0x3c]
mov esi, dword [rsp + 0x34]
lea edx, [rdi + 0x35]
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0xa0], rax
mov r11d, dword [rsp + 0x38]
lea rax, [rbx + 1]
mov r8d, dword [r10 + 0x34]
add r11d, 0xffffffe0
mov r15, qword [r10 + 0x70]
mov r12, qword [r10 + 0x38]
mov dword [rsp + 0x30], eax
sub dword [rsp + 0x30], r11d
lea r9, [r11 + rcx]
sub dword [rsp + 0x30], ecx
mov ecx, dword [rsp + 0x30]
inc ecx
mov dword [rsp + 0x58], r8d
cmp r9, rax
mov r8d, r11d
mov eax, 8
cmova ecx, ebp
cmp ecx, eax
cmova ecx, eax
lea eax, [r11 + rcx]
cmp r11d, eax
jae 0x18004bc9b
mov r13d, edx
mov r14d, ecx
sub r13d, dword [rsp + 0x58]
movabs rsi, 0xcf1bbcdcbb000000
mov rdx, qword [r9]
mov ecx, r13d
imul rdx, rsi
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [r15 + rax*4]
prefetcht0 byte [r12 + rax]
mov rax, r8
lea r9, [r9 + 1]
and eax, 7
inc r8
mov dword [r10 + rax*4 + 0x40], edx
sub r14, 1
jne 0x18004bc41
mov r15, qword [r10 + 0x70]
mov r12, qword [r10 + 0x38]
mov r8, qword [r10 + 8]
mov r14, qword [rsp + 0x78]
mov r13d, dword [rsp + 0x3c]
mov esi, dword [rsp + 0x34]
jmp 0x18004bca3
mov r8, qword [rsp + 0xa0]
mov r9d, dword [r10 + 0x34]
mov edx, 0x38
mov eax, dword [rsp + 0x38]
cmp r11d, eax
jae 0x18004bd78
mov r13d, edx
mov esi, r11d
sub r13d, r9d
lea r14, [r8 + 8]
add r14, rsi
mov edi, eax
movabs rbx, 0xcf1bbcdcbb000000
nop word [rax + rax]
mov rdx, qword [r14]
mov ecx, r13d
imul rdx, rbx
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [r15 + rax*4]
prefetcht0 byte [rax + r12]
mov rax, rsi
lea r14, [r14 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, ebp
shr r8, 4
and r8d, 0xffffff0
movzx ecx, byte [r8 + r12]
lea rdx, [r8 + r12]
dec ecx
and ecx, 0xf
cmove eax, dword [rsp + 0x48]
inc rsi
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r15 + rax*4], r11d
inc r11d
cmp r11d, edi
jb 0x18004bce0
mov rbx, qword [rsp + 0xa8]
mov edi, 3
mov r14, qword [rsp + 0x78]
mov r13d, dword [rsp + 0x3c]
mov esi, dword [rsp + 0x34]
mov eax, dword [rsp + 0x38]
mov r11, qword [rsp + 0x60]
mov ecx, 0x38
sub ecx, dword [rsp + 0x44]
mov r9, qword [rsp + 0x80]
mov dword [r10 + 0x2c], eax
movabs rax, 0xcf1bbcdcbb000000
mov r8d, esi
mov rdx, qword [r8 + r11 + 8]
imul rdx, rax
xor rdx, qword [rsp + 0x50]
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [r9 + rax*4]
mov rsi, qword [rsp + 0x70]
prefetcht0 byte [rax + rsi]
and r8d, 7
mov r12d, dword [r10 + r8*4 + 0x40]
mov dword [r10 + r8*4 + 0x40], edx
jmp 0x18004bdf3
xor r12, qword [rsp + 0x50]
mov ecx, 0x38
sub ecx, dword [rsp + 0x44]
mov dword [r10 + 0x2c], esi
mov rsi, qword [rsp + 0x70]
shr r12, cl
add dword [r10 + 0x68], r12d
mov eax, r12d
shr rax, 4
mov r15, rbp
and eax, 0xffffff0
movdqu xmm0, xmmword [rax + rsi]
lea rcx, [r9 + rax*4]
mov qword [rsp + 0x50], rcx
lea rcx, [rax + rsi]
movzx eax, byte [rax + rsi]
mov rsi, rbp
mov dword [rsp + 0x48], eax
and eax, 0xf
mov r8d, eax
mov qword [rsp + 0x80], rcx
movsx eax, r12b
mov ecx, r8d
neg ecx
and ecx, 0xf
movd xmm1, eax
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
pcmpeqb xmm1, xmm0
pmovmskb edx, xmm1
movzx eax, dx
shl ax, cl
movzx ecx, r8b
movzx r9d, ax
movzx eax, dx
shr rax, cl
or r9, rax
jbe 0x18004bec1
mov r14d, dword [rsp + 0x88]
mov edx, r8d
mov r8, qword [rsp + 0x50]
nop
test r13d, r13d
je 0x18004beb5
bsf rcx, r9
add ecx, edx
and ecx, 0xf
je 0x18004beac
mov ecx, dword [r8 + rcx*4]
cmp ecx, r14d
jb 0x18004beb5
prefetcht0 byte [rcx + r11]
mov dword [rsp + r15*4 + 0xc0], ecx
inc r15
dec r13d
lea rax, [r9 - 1]
and r9, rax
ja 0x18004be80
mov r14, qword [rsp + 0x78]
mov dword [rsp + 0x3c], r13d
jmp 0x18004bec6
mov r8, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x48]
mov eax, ebp
dec ecx
mov edx, 0xf
and ecx, 0xf
cmove eax, edx
add ecx, eax
mov rax, qword [rsp + 0x80]
mov byte [rax], cl
mov byte [rcx + rax], r12b
mov eax, dword [r10 + 0x2c]
mov dword [r8 + rcx*4], eax
inc dword [r10 + 0x2c]
test r15, r15
je 0x18004bf61
mov ebp, dword [rsp + 0x34]
mov r13, qword [rsp + 0x98]
nop word [rax + rax]
mov r12d, dword [rsp + rsi*4 + 0xc0]
mov eax, dword [rdi + rbx - 3]
lea rdx, [r11 + r12]
cmp dword [rdx + rdi - 3], eax
jne 0x18004bf52
mov r8, r14
mov rcx, rbx
call fcn.180037e00
cmp rax, rdi
jbe 0x18004bf4d
mov ecx, ebp
mov rdi, rax
sub ecx, r12d
add rax, rbx
add ecx, 3
mov qword [r13], rcx
cmp rax, r14
je 0x18004bf5a
mov r11, qword [rsp + 0x60]
inc rsi
cmp rsi, r15
jb 0x18004bf10
mov r13d, dword [rsp + 0x3c]
xor ebp, ebp
mov r8, qword [rsp + 0x68]
mov r12d, dword [rsp + 0x40]
mov r11, qword [rsp + 0x90]
add r12d, r13d
mov r13d, 3
mov r10, qword [r8]
mov esi, r13d
mov r15, qword [r8 + 8]
mov rdx, qword [r8 + 0x70]
mov r9d, r15d
sub r9d, r10d
mov qword [rsp + 0x50], r10
add r9d, dword [rsp + 0x5c]
cmp r12d, r13d
mov dword [rsp + 0x40], r9d
lea rcx, [r11 + rdx]
cmovb esi, r12d
mov dword [rsp + 0x5c], esi
nop
mov eax, dword [rcx]
prefetcht0 byte [rax + r15]
lea rcx, [rcx + 4]
sub r13, 1
jne 0x18004bfb0
mov rax, qword [rsp + 0xb0]
mov ecx, dword [rdx + rax*4 + 0xc]
mov rax, qword [r8 + 0x80]
shr rcx, 8
prefetcht0 byte [rax + rcx*4]
mov r13d, ebp
test esi, esi
je 0x18004c09a
nop word [rax + rax]
mov esi, dword [r11 + rdx]
mov rcx, rbp
test esi, esi
je 0x18004c159
mov eax, dword [rbx]
cmp dword [rsi + r15], eax
jne 0x18004c04b
mov rax, qword [rsp + 0xb8]
lea rdx, [r15 + 4]
add rdx, rsi
mov qword [rsp + 0x20], rax
lea rcx, [rbx + 4]
mov r9, r10
mov r8, r14
call fcn.180037ea0
mov r8, qword [rsp + 0x68]
mov r9d, dword [rsp + 0x40]
mov r10, qword [rsp + 0x50]
mov r11, qword [rsp + 0x90]
lea rcx, [rax + 4]
mov rdx, qword [r8 + 0x70]
jmp 0x18004c050
mov r8, qword [rsp + 0x68]
cmp rcx, rdi
jbe 0x18004c080
mov eax, dword [rsp + 0x34]
mov rdi, rcx
mov rdx, qword [rsp + 0x98]
sub eax, esi
sub eax, r9d
add eax, 3
mov qword [rdx], rax
lea rax, [rcx + rbx]
cmp rax, r14
je 0x18004c180
mov rdx, qword [r8 + 0x70]
add r11, 4
inc r13d
mov qword [rsp + 0x90], r11
cmp r13d, dword [rsp + 0x5c]
jb 0x18004bff0
mov rax, qword [rsp + 0xb0]
sub r12d, r13d
mov eax, dword [rdx + rax*4 + 0xc]
mov esi, eax
shr esi, 8
mov edx, ebp
movzx ecx, al
cmp r12d, ecx
cmova r12d, ecx
test r12d, r12d
je 0x18004c159
mov r9, qword [r8 + 0x80]
nop word [rax + rax]
lea eax, [rdx + rsi]
mov eax, dword [r9 + rax*4]
prefetcht0 byte [rax + r15]
inc edx
cmp edx, r12d
jb 0x18004c0d0
mov rax, qword [r8 + 0x80]
mov r13d, dword [rax + rsi*4]
mov eax, dword [rbx]
lea rdx, [r15 + r13]
cmp dword [rdx], eax
jne 0x18004c14b
mov rax, qword [rsp + 0xb8]
lea rcx, [rbx + 4]
add rdx, 4
mov qword [rsp + 0x20], rax
mov r9, r10
mov r8, r14
call fcn.180037ea0
add rax, 4
cmp rax, rdi
jbe 0x18004c146
mov ecx, dword [rsp + 0x34]
mov rdi, rax
mov rdx, qword [rsp + 0x98]
sub ecx, r13d
sub ecx, dword [rsp + 0x40]
add ecx, 3
mov qword [rdx], rcx
lea rcx, [rax + rbx]
cmp rcx, r14
je 0x18004c159
mov r8, qword [rsp + 0x68]
mov r10, qword [rsp + 0x50]
inc esi
inc ebp
cmp ebp, r12d
jb 0x18004c0e3
mov rax, rdi
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.1800b2170
add rsp, 0x1d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rax, rcx
jmp 0x18004c15c