Function at 0x180197940
Capabilities:
Encode data using xor
Hash data with crc32
Link many functions at runtime

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov rcx, qword [0x1802eb010]
lea rdx, [0x18017c2a0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov rcx, qword [0x1802eb010]
lea rdx, [0x18017c280]
xor r14d, r14d
mov qword [rbp + 0x38], rax
mov qword [rbp + 0x28], r14
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 0x28]
mov rcx, rbx
call rax
mov rcx, qword [0x1802eb010]
lea rdx, [0x18017c280]
mov rdi, rax
mov qword [rbp + 0x40], rax
mov esi, r14d
mov dword [rbp + 0xa8], r14d
mov qword [rbp + 0xb0], r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 0xb0]
mov rcx, rbx
call rax
cmp qword [rbp + 0xb0], rsi
jbe 0x18019850f
mov qword [rsp + 0x168], r12
mov ebx, r14d
mov qword [rsp + 0x160], r13
mov qword [rsp + 0x158], r15
movabs r15, 0x7fffffffffffffff
mov qword [rbp], rbx
mov rax, qword [rdi + rbx*8]
lea rdx, [0x18017c248]
mov rcx, qword [0x1802eb010]
mov dword [rbp + 0xa0], r14d
mov rdi, qword [rax]
mov qword [rbp + 0x30], rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rdi
call rax
test rax, rax
je 0x18019848f
mov rbx, r14
nop dword [rax]
mov rdx, qword [rdi]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r14
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x68], r14
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x180197a60
lea rcx, [rsp + 0x50]
call fcn.1801885e0
mov rcx, qword [0x1802eb010]
lea rdx, [0x18017c268]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdx, rbx
mov rcx, rdi
call rax
xorps xmm0, xmm0
mov qword [rbp - 8], rax
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r14
mov r8, 0xffffffffffffffff
mov rcx, qword [rax + 0x10]
mov rsi, qword [rax + 0x18]
mov qword [rbp + 0xb8], rcx
mov qword [rbp - 0x78], r14
nop word [rax + rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x180197ac0
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.1801885e0
cmp qword [rbp - 0x80], 0
mov rdx, qword [rbp - 0x78]
sete bl
cmp rdx, 0x10
jb 0x180197b1b
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180197b16
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801984f0
call fcn.18028b230
mov rax, r15
test bl, bl
je 0x180197d05
mov rsi, qword [rsp + 0x60]
sub rax, rsi
cmp rax, 2
jb 0x180198529
mov r13, qword [rsp + 0x68]
lea r12, [rsp + 0x50]
mov r15, qword [rsp + 0x50]
lea rdi, [rsp + 0x70]
cmp r13, 0x10
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], r14
mov ebx, 0xf
lea r14, [rsi + 2]
cmovae r12, r15
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
cmp r14, rbx
jbe 0x180197bfb
mov rbx, r14
movabs rax, 0x7fffffffffffffff
or rbx, 0xf
cmp rbx, rax
jbe 0x180197b9f
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x180197bc6
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180197be5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180198523
mov rcx, rax
call fcn.18028ae74
test rax, rax
je 0x1801984db
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180197bf6
test rcx, rcx
je 0x180197bf4
call fcn.18028ae74
mov rdi, rax
jmp 0x180197bf6
xor edi, edi
mov qword [rsp + 0x70], rdi
mov r8, rsi
mov qword [rbp - 0x80], r14
mov rdx, r12
mov qword [rbp - 0x78], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, 0x3a3a
mov r8, 0xffffffffffffffff
mov word [rdi + rsi], ax
mov rax, qword [rbp + 0xb8]
mov byte [rdi + r14], 0
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180197c30
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1801daaa0
xor r14d, r14d
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
movups xmmword [rbp + 8], xmm0
movups xmmword [rsp + 0x30], xmm1
cmp r13, 0x10
jb 0x180197ca9
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x180197c98
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801984db
mov rcx, r15
call fcn.18028b230
movups xmm0, xmmword [rbp + 8]
movups xmm1, xmmword [rsp + 0x30]
mov rdx, qword [rbp - 0x78]
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm1
cmp rdx, 0x10
jb 0x180197cef
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180197cea
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801984db
call fcn.18028b230
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], r14b
jmp 0x180198093
mov r14, qword [rsp + 0x60]
sub rax, r14
cmp rax, 2
jb 0x18019851d
cmp qword [rsp + 0x68], 0x10
lea r12, [rsp + 0x50]
mov r13, qword [rsp + 0x50]
lea r15, [r14 + 2]
mov ebx, 0xf
mov qword [rbp - 0x20], 0
cmovae r12, r13
mov qword [rbp - 0x18], 0
lea rdi, [rbp - 0x30]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
cmp r15, rbx
jbe 0x180197ddc
mov rbx, r15
movabs rax, 0x7fffffffffffffff
or rbx, 0xf
cmp rbx, rax
jbe 0x180197d81
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x180197da8
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180197dc7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18019852f
mov rcx, rax
call fcn.18028ae74
test rax, rax
je 0x1801984e2
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180197dd8
test rcx, rcx
je 0x180197dd6
call fcn.18028ae74
mov rdi, rax
jmp 0x180197dd8
xor edi, edi
mov qword [rbp - 0x30], rdi
mov r8, r14
mov qword [rbp - 0x20], r15
mov rdx, r12
mov qword [rbp - 0x18], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov ebx, 0x3a3a
mov r8, 0xffffffffffffffff
mov word [r14 + rdi], bx
mov byte [rdi + r15], 0
nop dword [rax + rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x180197e10
mov rdx, rsi
lea rcx, [rbp - 0x30]
call fcn.1801daaa0
xor r14d, r14d
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
mov rdx, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x40]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x180197e8e
lea rax, [rcx + 2]
cmp rdx, 0x10
mov qword [rbp - 0x40], rax
lea rax, [rbp - 0x50]
cmovae rax, qword [rbp - 0x50]
mov word [rax + rcx], bx
mov byte [rax + rcx + 2], r14b
lea rax, [rbp - 0x50]
jmp 0x180197eac
lea r9, [0x18017c2b4]
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rbp - 0x50]
call fcn.1801dce40
mov r9, qword [rbp + 0xb8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r14
mov rdi, 0xffffffffffffffff
mov qword [rbp - 0x58], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
inc rdi
cmp byte [r9 + rdi], r14b
jne 0x180197ee7
mov rdx, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x60]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x180197f33
cmp rdx, 0x10
lea rax, [rcx + rdi]
lea rbx, [rbp - 0x70]
mov qword [rbp - 0x60], rax
cmovae rbx, qword [rbp - 0x70]
mov r8, rdi
add rbx, rcx
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbp - 0x70]
mov byte [rdi + rbx], r14b
jmp 0x180197f44
mov rdx, rdi
mov qword [rsp + 0x20], rdi
lea rcx, [rbp - 0x70]
call fcn.1801dce40
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
mov rax, qword [rsp + 0x68]
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rbp + 8], xmm1
cmp rax, 0x10
jb 0x180197fa8
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x180197f97
mov r13, qword [r13 - 8]
add rdx, 0x27
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801984e2
mov rcx, r13
call fcn.18028b230
movups xmm0, xmmword [rsp + 0x30]
movups xmm1, xmmword [rbp + 8]
mov rdx, qword [rbp - 0x58]
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm1
cmp rdx, 0x10
jb 0x180197fed
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180197fe8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801984e2
call fcn.18028b230
mov rdx, qword [rbp - 0x38]
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], r14b
cmp rdx, 0x10
jb 0x180198038
mov rcx, qword [rbp - 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180198033
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801984e2
call fcn.18028b230
mov rdx, qword [rbp - 0x18]
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], r14b
cmp rdx, 0x10
jb 0x180198083
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18019807e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801984e2
call fcn.18028b230
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], r14b
mov rcx, qword [0x1802eb010]
lea rdx, [0x18017c230]
mov qword [rbp - 0x10], r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp - 8]
lea rdx, [rbp - 0x10]
call rax
mov rbx, qword [rsp + 0x50]
mov r12, rax
mov qword [rbp + 0xb8], rbx
test rax, rax
je 0x180198408
mov r13, qword [rsp + 0x60]
mov rcx, qword [0x1802eb010]
lea rdx, [0x18017c1e0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r12
call rax
mov rsi, rax
movabs rax, 0x7fffffffffffffff
mov rcx, rax
sub rcx, r13
cmp rcx, 2
jb 0x180198541
cmp qword [rsp + 0x68], 0x10
lea r15, [rsp + 0x50]
mov qword [rsp + 0x40], r14
lea rdi, [rsp + 0x30]
cmovae r15, rbx
mov qword [rsp + 0x48], r14
mov ebx, 0xf
lea r14, [r13 + 2]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
cmp r14, rbx
jbe 0x1801981b7
mov rbx, r14
or rbx, 0xf
cmp rbx, rax
jbe 0x18019815b
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x180198182
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1801981a1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180198535
mov rcx, rax
call fcn.18028ae74
test rax, rax
je 0x1801984e9
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1801981b2
test rcx, rcx
je 0x1801981b0
call fcn.18028ae74
mov rdi, rax
jmp 0x1801981b2
xor edi, edi
mov qword [rsp + 0x30], rdi
mov r8, r13
mov qword [rsp + 0x40], r14
mov rdx, r15
mov qword [rsp + 0x48], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, 0x3a3a
mov r8, 0xffffffffffffffff
mov word [rdi + r13], ax
mov byte [rdi + r14], 0
inc r8
cmp byte [rsi + r8], 0
jne 0x1801981e5
mov rdx, rsi
lea rcx, [rsp + 0x30]
call fcn.1801daaa0
xor ebx, ebx
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [rsp + 0x48]
movups xmmword [rbp + 8], xmm0
movups xmmword [rbp + 0x18], xmm1
cmp rdx, 0x10
jb 0x180198258
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180198253
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801984e9
call fcn.18028b230
mov rcx, qword [0x1802eb010]
lea rdx, [0x18017c1f8]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], bl
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r12
call rax
mov r14, qword [rbp + 0x20]
lea rdx, [rbp + 8]
mov rsi, qword [rbp + 8]
cmp r14, 0x10
mov r15d, eax
mov rcx, 0xffffffffffffffff
cmovae rdx, rsi
inc rcx
cmp byte [rdx + rcx], bl
jne 0x1801982a1
cmp r14, 0x10
lea rdx, [rbp + 8]
mov ebx, 0xffffffff
cmovae rdx, rsi
test ecx, ecx
je 0x1801982f2
mov r8d, ecx
lea r13, [0x180161190]
nop dword [rax + rax]
movsx ecx, byte [rdx]
lea rdx, [rdx + 1]
mov eax, ebx
shr ebx, 8
xor rcx, rax
movzx eax, cl
xor ebx, dword [r13 + rax*4]
sub r8, 1
jne 0x1801982d0
mov r13, qword [rsp + 0x60]
mov rdi, qword [0x1802eb040]
xor edx, edx
not ebx
mov dword [rsp + 0x38], edx
mov rcx, rdi
mov rax, qword [rdi + 8]
mov qword [rsp + 0x30], rax
cmp byte [rax + 0x19], dl
jne 0x180198339
mov qword [rsp + 0x30], rax
cmp dword [rax + 0x20], ebx
jae 0x180198326
mov rax, qword [rax + 0x10]
mov dword [rsp + 0x38], edx
jmp 0x180198334
mov rcx, rax
mov dword [rsp + 0x38], 1
mov rax, qword [rax]
cmp byte [rax + 0x19], dl
je 0x180198312
cmp byte [rcx + 0x19], dl
jne 0x180198343
cmp ebx, dword [rcx + 0x20]
jae 0x18019839a
movabs rax, 0x555555555555555
cmp qword [0x1802eb048], rax
je 0x18019853b
mov ecx, 0x30
call fcn.18028ae74
movups xmm0, xmmword [rsp + 0x30]
mov r8, rax
lea rdx, [rsp + 0x30]
lea rcx, [0x1802eb040]
mov dword [rax + 0x20], ebx
mov qword [rax + 0x28], r15
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
mov word [rax + 0x18], 0
movaps xmmword [rsp + 0x30], xmm0
call fcn.1801dd8b0
cmp r14, 0x10
jb 0x1801983d1
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1801983c9
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801984f0
mov rcx, rsi
call fcn.18028b230
mov rcx, qword [0x1802eb010]
lea rdx, [0x18017c230]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp - 8]
lea rdx, [rbp - 0x10]
call rax
mov rbx, qword [rbp + 0xb8]
mov r12, rax
mov r14d, 0
test rax, rax
jne 0x1801980d2
mov rax, qword [rsp + 0x68]
cmp rax, 0x10
jb 0x180198444
lea rdx, [rax + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x18019843c
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801984f0
mov rcx, rbx
call fcn.18028b230
mov esi, dword [rbp + 0xa0]
lea rdx, [0x18017c248]
mov rcx, qword [0x1802eb010]
inc esi
mov dword [rbp + 0xa0], esi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, qword [rbp + 0x30]
mov rcx, rdi
movsxd rbx, esi
call rax
movabs r15, 0x7fffffffffffffff
cmp rbx, rax
jb 0x180197a40
mov rbx, qword [rbp]
mov esi, dword [rbp + 0xa8]
mov rcx, qword [0x1802eb010]
lea rdx, [0x18017c280]
inc esi
mov qword [rbp + 0xb0], r14
inc rbx
mov dword [rbp + 0xa8], esi
mov qword [rbp], rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp + 0x38]
lea rdx, [rbp + 0xb0]
call rax
movsxd rax, esi
cmp rax, qword [rbp + 0xb0]
jae 0x1801984f7
mov rdi, qword [rbp + 0x40]
jmp 0x180197a02
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r13, qword [rsp + 0x160]
mov r12, qword [rsp + 0x168]
mov r15, qword [rsp + 0x158]
add rsp, 0x170
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.180188110
int3
call fcn.180188050
int3
call fcn.180188110
int3
call fcn.180188050
int3
call fcn.180188050
int3
call fcn.1801880f0
int3
call fcn.180188110
int3