Function at 0x18004a0f0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1c8
mov rax, qword [0x1800ed0f8]
xor rax, rsp
mov qword [rsp + 0x1b0], rax
mov r12, qword [rcx + 8]
mov r10, rcx
mov eax, dword [rcx + 0x34]
mov rbx, rdx
mov rsi, qword [rcx + 0x70]
mov r14, r8
mov r15, qword [rcx + 0x38]
mov edi, 1
mov r11d, dword [r10 + 0x10c]
mov r13d, edi
mov dword [rsp + 0x58], eax
mov eax, dword [rcx + 0x18]
mov ecx, dword [rcx + 0x100]
mov dword [rsp + 0x5c], eax
add rax, r12
mov qword [rsp + 0xa8], rax
mov eax, edx
sub eax, r12d
mov qword [rsp + 0x78], r8
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x90], r9
mov r9d, edx
sub r9d, r12d
mov qword [rsp + 0x98], rsi
mov edx, edi
mov qword [rsp + 0x68], r15
shl edx, cl
mov eax, r9d
mov ecx, dword [r10 + 0x1c]
mov r8d, r9d
sub eax, ecx
mov qword [rsp + 0x80], r12
sub r8d, edx
mov dword [rsp + 0x3c], r9d
cmp eax, edx
mov edi, 3
mov rax, qword [r10 + 0x60]
cmovbe r8d, ecx
mov qword [rsp + 0x50], rax
cmp dword [r10 + 0x28], 0
cmovne r8d, ecx
mov ecx, 4
cmp r11d, ecx
mov dword [rsp + 0x70], r8d
mov r8, qword [r10 + 0xf8]
cmovb ecx, r11d
mov qword [rsp + 0x60], r8
imul eax, dword [rbx], 0x9e3779b1
shl r13d, cl
mov ecx, 0x22
sub ecx, dword [r8 + 0x108]
mov dword [rsp + 0x34], r13d
mov edx, eax
shr rdx, cl
mov dword [rsp + 0x48], eax
lea rax, [rdx*4]
lea rcx, [rax*4]
mov qword [rsp + 0xa0], rax
mov rax, qword [r8 + 0x70]
mov qword [rsp + 0x88], rcx
prefetcht0 byte [rcx + rax]
xor ebp, ebp
cmp r11d, 4
jbe 0x18004a240
lea ecx, [r11 - 4]
mov eax, 1
shl eax, cl
mov dword [rsp + 0x38], eax
jmp 0x18004a244
mov dword [rsp + 0x38], ebp
mov dword [rsp + 0x40], 0xf
cmp dword [r10 + 0x12c], ebp
jne 0x18004a51e
mov r11d, dword [r10 + 0x2c]
mov rdx, r12
mov eax, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x58]
sub eax, r11d
mov ecx, r8d
cmp eax, 0x180
jbe 0x18004a402
lea eax, [r11 + 0x60]
cmp r11d, eax
jae 0x18004a349
mov r13, qword [rsp + 0x98]
lea r15, [r12 + 8]
mov r12, qword [rsp + 0x68]
mov edi, 0x18
sub edi, r8d
mov esi, r11d
add r15, r11
mov r14d, eax
nop word [rax + rax]
mov eax, dword [r10 + 0x60]
mov rcx, rdi
imul edx, dword [r15], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [r13 + rax*4]
prefetcht0 byte [r12 + rax]
mov rax, rsi
lea r15, [r15 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, ebp
shr r8, 4
and r8d, 0xffffff0
movzx ecx, byte [r8 + r12]
lea rdx, [r8 + r12]
dec ecx
and ecx, 0xf
cmove eax, dword [rsp + 0x40]
inc rsi
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r13 + rax*4], r11d
inc r11d
cmp r11d, r14d
jb 0x18004a2b0
mov rdx, qword [r10 + 8]
mov edi, 3
mov r14, qword [rsp + 0x78]
mov r13d, dword [rsp + 0x34]
mov r12, qword [rsp + 0x80]
mov r11d, dword [rsp + 0x30]
lea rax, [rbx + 1]
mov ecx, dword [r10 + 0x34]
add r11d, 0xffffffe0
mov rsi, qword [r10 + 0x70]
mov r15, qword [r10 + 0x38]
mov dword [rsp + 0x48], ecx
mov ecx, eax
sub ecx, r11d
mov r8d, r11d
sub ecx, r12d
lea r9, [r11 + r12]
inc ecx
cmp r9, rax
mov eax, 8
cmova ecx, ebp
cmp ecx, eax
cmova ecx, eax
lea eax, [r11 + rcx]
cmp r11d, eax
jae 0x18004a3fe
mov eax, 0x18
mov r13d, ecx
sub eax, dword [rsp + 0x48]
mov qword [rsp + 0x48], rax
mov ecx, eax
nop dword [rax]
nop word [rax + rax]
mov eax, dword [r10 + 0x60]
imul edx, dword [r9], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [rsi + rax*4]
prefetcht0 byte [r15 + rax]
mov rax, r8
lea r9, [r9 + 1]
and eax, 7
inc r8
mov dword [r10 + rax*4 + 0x40], edx
sub r13, 1
jne 0x18004a3b0
mov rsi, qword [r10 + 0x70]
mov r15, qword [r10 + 0x38]
mov rdx, qword [r10 + 8]
mov r13d, dword [rsp + 0x34]
mov ecx, dword [r10 + 0x34]
mov eax, dword [rsp + 0x30]
cmp r11d, eax
jae 0x18004a4c8
mov r14d, 0x18
mov r13d, r11d
sub r14d, ecx
lea r12, [r11 + 8]
add r12, rdx
mov edi, eax
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [r10 + 0x60]
mov rcx, r14
imul edx, dword [r12], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [rsi + rax*4]
prefetcht0 byte [rax + r15]
mov rax, r13
lea r12, [r12 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, ebp
shr r8, 4
and r8d, 0xffffff0
movzx ecx, byte [r8 + r15]
lea rdx, [r8 + r15]
dec ecx
and ecx, 0xf
cmove eax, dword [rsp + 0x40]
inc r13
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [rsi + rax*4], r11d
inc r11d
cmp r11d, edi
jb 0x18004a430
mov r14, qword [rsp + 0x78]
mov edi, 3
mov r13d, dword [rsp + 0x34]
mov r12, qword [rsp + 0x80]
mov eax, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x3c]
mov ecx, 0x18
sub ecx, dword [rsp + 0x58]
mov rsi, qword [rsp + 0x98]
mov dword [r10 + 0x2c], eax
mov eax, dword [rsp + 0x50]
imul edx, dword [r8 + r12 + 8], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [rsi + rax*4]
mov r15, qword [rsp + 0x68]
prefetcht0 byte [rax + r15]
and r8d, 7
mov r11d, dword [r10 + r8*4 + 0x40]
mov dword [r10 + r8*4 + 0x40], edx
jmp 0x18004a53a
mov r11d, dword [rsp + 0x48]
mov ecx, 0x18
mov eax, dword [rsp + 0x50]
sub ecx, dword [rsp + 0x58]
xor r11, rax
shr r11, cl
mov dword [r10 + 0x2c], r9d
add dword [r10 + 0x68], r11d
mov eax, r11d
shr rax, 4
and eax, 0xffffff0
movdqu xmm0, xmmword [rax + r15]
lea rcx, [rsi + rax*4]
mov rsi, rbp
mov qword [rsp + 0x50], rcx
lea rcx, [rax + r15]
movzx eax, byte [rax + r15]
mov r15, rbp
mov dword [rsp + 0x40], eax
and eax, 0xf
mov r8d, eax
mov qword [rsp + 0x68], rcx
movsx eax, r11b
mov ecx, r8d
neg ecx
and ecx, 0xf
movd xmm1, eax
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
pcmpeqb xmm1, xmm0
pmovmskb edx, xmm1
movzx eax, dx
shl ax, cl
movzx ecx, r8b
movzx r9d, ax
movzx eax, dx
shr rax, cl
or r9, rax
jbe 0x18004a603
mov r14d, dword [rsp + 0x70]
mov edx, r8d
mov r8, qword [rsp + 0x50]
test r13d, r13d
je 0x18004a5f7
bsf rcx, r9
add ecx, edx
and ecx, 0xf
je 0x18004a5ee
mov ecx, dword [r8 + rcx*4]
cmp ecx, r14d
jb 0x18004a5f7
prefetcht0 byte [rcx + r12]
mov dword [rsp + r15*4 + 0xb0], ecx
inc r15
dec r13d
lea rax, [r9 - 1]
and r9, rax
ja 0x18004a5c2
mov r14, qword [rsp + 0x78]
mov dword [rsp + 0x34], r13d
jmp 0x18004a608
mov r8, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x40]
mov eax, ebp
dec ecx
mov edx, 0xf
and ecx, 0xf
cmove eax, edx
add ecx, eax
mov rax, qword [rsp + 0x68]
mov byte [rax], cl
mov byte [rcx + rax], r11b
mov eax, dword [r10 + 0x2c]
mov dword [r8 + rcx*4], eax
inc dword [r10 + 0x2c]
test r15, r15
je 0x18004a6a4
mov rbp, qword [rsp + 0x80]
mov r13d, dword [rsp + 0x3c]
nop word [rax + rax]
mov r12d, dword [rsp + rsi*4 + 0xb0]
mov eax, dword [rdi + rbx - 3]
lea rdx, [r12 + rbp]
cmp dword [rdx + rdi - 3], eax
jne 0x18004a695
mov r8, r14
mov rcx, rbx
call fcn.180037e00
cmp rax, rdi
jbe 0x18004a695
mov rdx, qword [rsp + 0x90]
mov ecx, r13d
sub ecx, r12d
mov rdi, rax
add ecx, 3
add rax, rbx
mov qword [rdx], rcx
cmp rax, r14
je 0x18004a69d
inc rsi
cmp rsi, r15
jb 0x18004a650
mov r13d, dword [rsp + 0x34]
xor ebp, ebp
mov r8, qword [rsp + 0x60]
mov r12d, dword [rsp + 0x38]
mov r11, qword [rsp + 0x88]
add r12d, r13d
mov r13d, 3
mov r10, qword [r8]
mov esi, r13d
mov r15, qword [r8 + 8]
mov rdx, qword [r8 + 0x70]
mov r9d, r15d
sub r9d, r10d
mov qword [rsp + 0x50], r10
add r9d, dword [rsp + 0x5c]
cmp r12d, r13d
mov dword [rsp + 0x38], r9d
lea rcx, [r11 + rdx]
cmovb esi, r12d
mov dword [rsp + 0x5c], esi
mov eax, dword [rcx]
prefetcht0 byte [rax + r15]
lea rcx, [rcx + 4]
sub r13, 1
jne 0x18004a6f1
mov rax, qword [rsp + 0xa0]
mov ecx, dword [rdx + rax*4 + 0xc]
mov rax, qword [r8 + 0x80]
shr rcx, 8
prefetcht0 byte [rax + rcx*4]
mov r13d, ebp
test esi, esi
je 0x18004a7da
nop dword [rax + rax]
mov esi, dword [rdx + r11]
mov rcx, rbp
test esi, esi
je 0x18004a899
mov eax, dword [rbx]
cmp dword [rsi + r15], eax
jne 0x18004a78b
mov rax, qword [rsp + 0xa8]
lea rdx, [r15 + 4]
add rdx, rsi
mov qword [rsp + 0x20], rax
lea rcx, [rbx + 4]
mov r9, r10
mov r8, r14
call fcn.180037ea0
mov r8, qword [rsp + 0x60]
mov r9d, dword [rsp + 0x38]
mov r10, qword [rsp + 0x50]
mov r11, qword [rsp + 0x88]
lea rcx, [rax + 4]
mov rdx, qword [r8 + 0x70]
jmp 0x18004a790
mov r8, qword [rsp + 0x60]
cmp rcx, rdi
jbe 0x18004a7c0
mov eax, dword [rsp + 0x3c]
mov rdi, rcx
mov rdx, qword [rsp + 0x90]
sub eax, esi
sub eax, r9d
add eax, 3
mov qword [rdx], rax
lea rax, [rcx + rbx]
cmp rax, r14
je 0x18004a8c0
mov rdx, qword [r8 + 0x70]
add r11, 4
inc r13d
mov qword [rsp + 0x88], r11
cmp r13d, dword [rsp + 0x5c]
jb 0x18004a730
mov rax, qword [rsp + 0xa0]
sub r12d, r13d
mov eax, dword [rdx + rax*4 + 0xc]
mov esi, eax
shr esi, 8
mov edx, ebp
movzx ecx, al
cmp r12d, ecx
cmova r12d, ecx
test r12d, r12d
je 0x18004a899
mov r9, qword [r8 + 0x80]
nop word [rax + rax]
lea eax, [rdx + rsi]
mov eax, dword [r9 + rax*4]
prefetcht0 byte [rax + r15]
inc edx
cmp edx, r12d
jb 0x18004a810
mov rax, qword [r8 + 0x80]
mov r13d, dword [rax + rsi*4]
mov eax, dword [rbx]
lea rdx, [r15 + r13]
cmp dword [rdx], eax
jne 0x18004a88b
mov rax, qword [rsp + 0xa8]
lea rcx, [rbx + 4]
add rdx, 4
mov qword [rsp + 0x20], rax
mov r9, r10
mov r8, r14
call fcn.180037ea0
add rax, 4
cmp rax, rdi
jbe 0x18004a886
mov ecx, dword [rsp + 0x3c]
mov rdi, rax
mov rdx, qword [rsp + 0x90]
sub ecx, r13d
sub ecx, dword [rsp + 0x38]
add ecx, 3
mov qword [rdx], rcx
lea rcx, [rax + rbx]
cmp rcx, r14
je 0x18004a899
mov r8, qword [rsp + 0x60]
mov r10, qword [rsp + 0x50]
inc esi
inc ebp
cmp ebp, r12d
jb 0x18004a823
mov rax, rdi
mov rcx, qword [rsp + 0x1b0]
xor rcx, rsp
call fcn.1800b2170
add rsp, 0x1c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rax, rcx
jmp 0x18004a89c