Function at 0x18004df80
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1d8
mov rax, qword [0x1800ee0f8]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
mov r11, qword [rcx + 8]
mov r10, rcx
mov rax, qword [rcx + 0x38]
mov esi, edx
mov qword [rsp + 0x70], rax
sub esi, r11d
mov eax, dword [rcx + 0x34]
mov rbx, rdx
mov r15d, dword [r10 + 0x10c]
mov r14, r8
mov dword [rsp + 0x44], eax
mov edi, 1
mov eax, dword [rcx + 0x18]
mov r13d, edi
mov r12, qword [rbx]
mov dword [rsp + 0x5c], eax
add rax, r11
mov qword [rsp + 0xb8], rax
mov eax, edx
sub eax, r11d
mov qword [rsp + 0x78], r8
mov dword [rsp + 0x38], eax
mov r8d, esi
mov qword [rsp + 0xa8], rdx
mov eax, esi
mov edx, edi
mov qword [rsp + 0x98], r9
mov r9, qword [rcx + 0x70]
mov edi, 3
mov ecx, dword [rcx + 0x100]
shl edx, cl
mov ecx, dword [r10 + 0x1c]
sub r8d, edx
sub eax, ecx
mov qword [rsp + 0x80], r9
cmp eax, edx
mov qword [rsp + 0x60], r11
mov rax, qword [r10 + 0x60]
cmovbe r8d, ecx
mov qword [rsp + 0x50], rax
cmp dword [r10 + 0x28], 0
movabs rax, 0xcf1bbcdcbf9b0000
mov dword [rsp + 0x34], esi
cmovne r8d, ecx
mov ecx, 4
cmp r15d, ecx
mov dword [rsp + 0x88], r8d
mov r8, qword [r10 + 0xf8]
cmovb ecx, r15d
mov qword [rsp + 0x68], r8
shl r13d, cl
mov ecx, 0x42
imul r12, rax
sub ecx, dword [r8 + 0x108]
mov rdx, r12
mov dword [rsp + 0x3c], r13d
shr rdx, cl
lea rax, [rdx*4]
lea rcx, [rax*4]
mov qword [rsp + 0xb0], rax
mov rax, qword [r8 + 0x70]
mov qword [rsp + 0x90], rcx
prefetcht0 byte [rcx + rax]
xor ebp, ebp
cmp r15d, 4
jbe 0x18004e0dd
lea ecx, [r15 - 4]
mov eax, 1
shl eax, cl
mov dword [rsp + 0x40], eax
jmp 0x18004e0e1
mov dword [rsp + 0x40], ebp
mov dword [rsp + 0x48], 0xf
cmp dword [r10 + 0x12c], ebp
jne 0x18004e419
mov r11d, dword [r10 + 0x2c]
mov r15, r9
mov eax, dword [rsp + 0x38]
mov edx, 0x38
mov rcx, qword [rsp + 0x60]
sub eax, r11d
mov r12, qword [rsp + 0x70]
mov r8, rcx
mov r9d, dword [rsp + 0x44]
cmp eax, 0x180
jbe 0x18004e2ec
lea r8d, [r11 + 0x60]
mov qword [rsp + 0xa0], rcx
cmp r11d, r8d
jae 0x18004e21b
mov r13, qword [rsp + 0x80]
lea r12, [rcx + 8]
mov rdi, qword [rsp + 0x70]
mov r14d, edx
sub r14d, r9d
mov r15d, r11d
add r12, r11
mov esi, r8d
movabs rbx, 0xcf1bbcdcbf9b0000
nop word [rax + rax]
mov rdx, qword [r12]
mov ecx, r14d
imul rdx, rbx
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [r13 + rax*4]
prefetcht0 byte [rdi + rax]
mov rax, r15
lea r12, [r12 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, ebp
shr r8, 4
and r8d, 0xffffff0
movzx ecx, byte [r8 + rdi]
lea rdx, [r8 + rdi]
dec ecx
and ecx, 0xf
cmove eax, dword [rsp + 0x48]
inc r15
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r13 + rax*4], r11d
inc r11d
cmp r11d, esi
jb 0x18004e170
mov rax, qword [r10 + 8]
mov edi, 3
mov rbx, qword [rsp + 0xa8]
mov r14, qword [rsp + 0x78]
mov r13d, dword [rsp + 0x3c]
mov esi, dword [rsp + 0x34]
lea edx, [rdi + 0x35]
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0xa0], rax
mov r11d, dword [rsp + 0x38]
lea rax, [rbx + 1]
mov r8d, dword [r10 + 0x34]
add r11d, 0xffffffe0
mov r15, qword [r10 + 0x70]
mov r12, qword [r10 + 0x38]
mov dword [rsp + 0x30], eax
sub dword [rsp + 0x30], r11d
lea r9, [r11 + rcx]
sub dword [rsp + 0x30], ecx
mov ecx, dword [rsp + 0x30]
inc ecx
mov dword [rsp + 0x58], r8d
cmp r9, rax
mov r8d, r11d
mov eax, 8
cmova ecx, ebp
cmp ecx, eax
cmova ecx, eax
lea eax, [r11 + rcx]
cmp r11d, eax
jae 0x18004e2db
mov r13d, edx
mov r14d, ecx
sub r13d, dword [rsp + 0x58]
movabs rsi, 0xcf1bbcdcbf9b0000
mov rdx, qword [r9]
mov ecx, r13d
imul rdx, rsi
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [r15 + rax*4]
prefetcht0 byte [r12 + rax]
mov rax, r8
lea r9, [r9 + 1]
and eax, 7
inc r8
mov dword [r10 + rax*4 + 0x40], edx
sub r14, 1
jne 0x18004e281
mov r15, qword [r10 + 0x70]
mov r12, qword [r10 + 0x38]
mov r8, qword [r10 + 8]
mov r14, qword [rsp + 0x78]
mov r13d, dword [rsp + 0x3c]
mov esi, dword [rsp + 0x34]
jmp 0x18004e2e3
mov r8, qword [rsp + 0xa0]
mov r9d, dword [r10 + 0x34]
mov edx, 0x38
mov eax, dword [rsp + 0x38]
cmp r11d, eax
jae 0x18004e3b8
mov r13d, edx
mov esi, r11d
sub r13d, r9d
lea r14, [r8 + 8]
add r14, rsi
mov edi, eax
movabs rbx, 0xcf1bbcdcbf9b0000
nop word [rax + rax]
mov rdx, qword [r14]
mov ecx, r13d
imul rdx, rbx
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [r15 + rax*4]
prefetcht0 byte [rax + r12]
mov rax, rsi
lea r14, [r14 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, ebp
shr r8, 4
and r8d, 0xffffff0
movzx ecx, byte [r8 + r12]
lea rdx, [r8 + r12]
dec ecx
and ecx, 0xf
cmove eax, dword [rsp + 0x48]
inc rsi
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r15 + rax*4], r11d
inc r11d
cmp r11d, edi
jb 0x18004e320
mov rbx, qword [rsp + 0xa8]
mov edi, 3
mov r14, qword [rsp + 0x78]
mov r13d, dword [rsp + 0x3c]
mov esi, dword [rsp + 0x34]
mov eax, dword [rsp + 0x38]
mov r11, qword [rsp + 0x60]
mov ecx, 0x38
sub ecx, dword [rsp + 0x44]
mov r9, qword [rsp + 0x80]
mov dword [r10 + 0x2c], eax
movabs rax, 0xcf1bbcdcbf9b0000
mov r8d, esi
mov rdx, qword [r8 + r11 + 8]
imul rdx, rax
xor rdx, qword [rsp + 0x50]
shr rdx, cl
mov eax, edx
shr rax, 4
and eax, 0xffffff0
prefetcht0 byte [r9 + rax*4]
mov rsi, qword [rsp + 0x70]
prefetcht0 byte [rax + rsi]
and r8d, 7
mov r12d, dword [r10 + r8*4 + 0x40]
mov dword [r10 + r8*4 + 0x40], edx
jmp 0x18004e433
xor r12, qword [rsp + 0x50]
mov ecx, 0x38
sub ecx, dword [rsp + 0x44]
mov dword [r10 + 0x2c], esi
mov rsi, qword [rsp + 0x70]
shr r12, cl
add dword [r10 + 0x68], r12d
mov eax, r12d
shr rax, 4
mov r15, rbp
and eax, 0xffffff0
movdqu xmm0, xmmword [rax + rsi]
lea rcx, [r9 + rax*4]
mov qword [rsp + 0x50], rcx
lea rcx, [rax + rsi]
movzx eax, byte [rax + rsi]
mov rsi, rbp
mov dword [rsp + 0x48], eax
and eax, 0xf
mov r8d, eax
mov qword [rsp + 0x80], rcx
movsx eax, r12b
mov ecx, r8d
neg ecx
and ecx, 0xf
movd xmm1, eax
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
pcmpeqb xmm1, xmm0
pmovmskb edx, xmm1
movzx eax, dx
shl ax, cl
movzx ecx, r8b
movzx r9d, ax
movzx eax, dx
shr rax, cl
or r9, rax
jbe 0x18004e501
mov r14d, dword [rsp + 0x88]
mov edx, r8d
mov r8, qword [rsp + 0x50]
nop
test r13d, r13d
je 0x18004e4f5
bsf rcx, r9
add ecx, edx
and ecx, 0xf
je 0x18004e4ec
mov ecx, dword [r8 + rcx*4]
cmp ecx, r14d
jb 0x18004e4f5
prefetcht0 byte [rcx + r11]
mov dword [rsp + r15*4 + 0xc0], ecx
inc r15
dec r13d
lea rax, [r9 - 1]
and r9, rax
ja 0x18004e4c0
mov r14, qword [rsp + 0x78]
mov dword [rsp + 0x3c], r13d
jmp 0x18004e506
mov r8, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x48]
mov eax, ebp
dec ecx
mov edx, 0xf
and ecx, 0xf
cmove eax, edx
add ecx, eax
mov rax, qword [rsp + 0x80]
mov byte [rax], cl
mov byte [rcx + rax], r12b
mov eax, dword [r10 + 0x2c]
mov dword [r8 + rcx*4], eax
inc dword [r10 + 0x2c]
test r15, r15
je 0x18004e5a1
mov ebp, dword [rsp + 0x34]
mov r13, qword [rsp + 0x98]
nop word [rax + rax]
mov r12d, dword [rsp + rsi*4 + 0xc0]
mov eax, dword [rdi + rbx - 3]
lea rdx, [r11 + r12]
cmp dword [rdx + rdi - 3], eax
jne 0x18004e592
mov r8, r14
mov rcx, rbx
call fcn.180038ab0
cmp rax, rdi
jbe 0x18004e58d
mov ecx, ebp
mov rdi, rax
sub ecx, r12d
add rax, rbx
add ecx, 3
mov qword [r13], rcx
cmp rax, r14
je 0x18004e59a
mov r11, qword [rsp + 0x60]
inc rsi
cmp rsi, r15
jb 0x18004e550
mov r13d, dword [rsp + 0x3c]
xor ebp, ebp
mov r8, qword [rsp + 0x68]
mov r12d, dword [rsp + 0x40]
mov r11, qword [rsp + 0x90]
add r12d, r13d
mov r13d, 3
mov r10, qword [r8]
mov esi, r13d
mov r15, qword [r8 + 8]
mov rdx, qword [r8 + 0x70]
mov r9d, r15d
sub r9d, r10d
mov qword [rsp + 0x50], r10
add r9d, dword [rsp + 0x5c]
cmp r12d, r13d
mov dword [rsp + 0x40], r9d
lea rcx, [r11 + rdx]
cmovb esi, r12d
mov dword [rsp + 0x5c], esi
nop
mov eax, dword [rcx]
prefetcht0 byte [rax + r15]
lea rcx, [rcx + 4]
sub r13, 1
jne 0x18004e5f0
mov rax, qword [rsp + 0xb0]
mov ecx, dword [rdx + rax*4 + 0xc]
mov rax, qword [r8 + 0x80]
shr rcx, 8
prefetcht0 byte [rax + rcx*4]
mov r13d, ebp
test esi, esi
je 0x18004e6da
nop word [rax + rax]
mov esi, dword [r11 + rdx]
mov rcx, rbp
test esi, esi
je 0x18004e799
mov eax, dword [rbx]
cmp dword [rsi + r15], eax
jne 0x18004e68b
mov rax, qword [rsp + 0xb8]
lea rdx, [r15 + 4]
add rdx, rsi
mov qword [rsp + 0x20], rax
lea rcx, [rbx + 4]
mov r9, r10
mov r8, r14
call fcn.180038b50
mov r8, qword [rsp + 0x68]
mov r9d, dword [rsp + 0x40]
mov r10, qword [rsp + 0x50]
mov r11, qword [rsp + 0x90]
lea rcx, [rax + 4]
mov rdx, qword [r8 + 0x70]
jmp 0x18004e690
mov r8, qword [rsp + 0x68]
cmp rcx, rdi
jbe 0x18004e6c0
mov eax, dword [rsp + 0x34]
mov rdi, rcx
mov rdx, qword [rsp + 0x98]
sub eax, esi
sub eax, r9d
add eax, 3
mov qword [rdx], rax
lea rax, [rcx + rbx]
cmp rax, r14
je 0x18004e7c0
mov rdx, qword [r8 + 0x70]
add r11, 4
inc r13d
mov qword [rsp + 0x90], r11
cmp r13d, dword [rsp + 0x5c]
jb 0x18004e630
mov rax, qword [rsp + 0xb0]
sub r12d, r13d
mov eax, dword [rdx + rax*4 + 0xc]
mov esi, eax
shr esi, 8
mov edx, ebp
movzx ecx, al
cmp r12d, ecx
cmova r12d, ecx
test r12d, r12d
je 0x18004e799
mov r9, qword [r8 + 0x80]
nop word [rax + rax]
lea eax, [rdx + rsi]
mov eax, dword [r9 + rax*4]
prefetcht0 byte [rax + r15]
inc edx
cmp edx, r12d
jb 0x18004e710
mov rax, qword [r8 + 0x80]
mov r13d, dword [rax + rsi*4]
mov eax, dword [rbx]
lea rdx, [r15 + r13]
cmp dword [rdx], eax
jne 0x18004e78b
mov rax, qword [rsp + 0xb8]
lea rcx, [rbx + 4]
add rdx, 4
mov qword [rsp + 0x20], rax
mov r9, r10
mov r8, r14
call fcn.180038b50
add rax, 4
cmp rax, rdi
jbe 0x18004e786
mov ecx, dword [rsp + 0x34]
mov rdi, rax
mov rdx, qword [rsp + 0x98]
sub ecx, r13d
sub ecx, dword [rsp + 0x40]
add ecx, 3
mov qword [rdx], rcx
lea rcx, [rax + rbx]
cmp rcx, r14
je 0x18004e799
mov r8, qword [rsp + 0x68]
mov r10, qword [rsp + 0x50]
inc esi
inc ebp
cmp ebp, r12d
jb 0x18004e723
mov rax, rdi
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.1800b2e20
add rsp, 0x1d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rax, rcx
jmp 0x18004e79c