Function at 0x18000b920
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x530
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x520], rax
mov rax, qword gs:[0x58]
xor r9d, r9d
mov ebp, dword [0x180014820]
mov r13d, r8d
mov r15d, 0x2ac
mov esi, edx
mov r14, rcx
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x80], 0x100001
mov r11, qword [rax + rbp*8]
mov r12d, 0x148
mov eax, dword [r15 + r11]
test al, 1
jne 0x18000b9f2
movups xmm0, xmmword [0x180012228]
or eax, 1
mov qword [r11 + r12], r9
lea r8, [r11 + r12]
mov dword [r15 + r11], eax
mov eax, dword [0x180012238]
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x30], eax
mov edx, r9d
xor eax, eax
mov dword [r8 + 8], r9d
mov byte [r8 + 0xc], r9b
mov dword [r8 + 0x10], eax
lea rax, [rsp + 0x30]
sub r8, rax
movaps xmmword [rsp + 0x20], xmm0
nop word [rax + rax]
mov eax, dword [rcx]
inc edx
mov dword [r8 + rcx + 0x10], eax
lea rcx, [rcx + 4]
cmp edx, 1
jb 0x18000b9e0
cmp byte [r11 + r12 + 0xc], r9b
jne 0x18000ba66
lea rcx, [r12 + 0x10]
mov r8d, r9d
add rcx, r11
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [r11 + r12 + 4]
mov edx, dword [r11 + r12]
lea r9d, [rax + 1]
cmp edx, r9d
je 0x18000ba4a
lea r9d, [rax + 2]
cmp edx, r9d
je 0x18000ba4a
cmp edx, eax
je 0x18000ba53
lea r9d, [rax + 4]
cmp edx, r9d
jne 0x18000ba43
add eax, 3
xor dword [rcx], eax
inc dword [r11 + r12]
jmp 0x18000ba10
add eax, 5
cmp edx, eax
jne 0x18000ba59
xor dword [rcx], r9d
inc dword [r11 + r12]
jmp 0x18000ba10
lea eax, [r8 + 0x33]
xor dword [rcx], eax
inc r8d
add rcx, 4
cmp r8d, 1
jb 0x18000ba10
mov eax, dword [r11 + r12 + 0x10]
mov byte [r11 + r12 + 0xc], 1
mov rcx, qword gs:[rax]
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000baf7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x18000baf7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xb77dff9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x18000baf2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x10dbd33
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x18000bad0
cmp r8d, 0x51bbc656
je 0x18000bafc
test r9d, r9d
jne 0x18000bab0
mov rax, qword [rax]
jmp 0x18000ba80
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rdx, [rsp + 0x50]
add rax, r10
mov rcx, r14
call rax
test eax, eax
je 0x18000be09
mov r9d, dword [0x1800148cc]
cmp esi, 0xffffffff
je 0x18000bb35
lea r9d, [rsi + 1]
xor ebx, ebx
cmp esi, 0xffffffff
mov r8d, ebx
cmovne r8d, esi
cmp r8d, r9d
jae 0x18000be09
mov rax, qword gs:[0x58]
mov r10, qword [rsp + 0x148]
mov edx, r8d
imul rsi, rdx, 0x38
mov rdi, qword [rax + rbp*8]
lea r14, [rax + rbp*8]
add rdi, r12
sub r9d, r8d
mov ebp, r9d
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [0x1800148c0]
mov eax, r13d
add rcx, rsi
test r13d, r13d
je 0x18000bbaa
cmp eax, 1
je 0x18000bba3
movzx edx, byte [rcx + 0x20]
shr edx, 2
and edx, 1
jmp 0x18000bbac
mov edx, 1
jmp 0x18000bbac
mov edx, ebx
movzx r8d, byte [rcx + 0x20]
mov eax, r8d
shr eax, 1
and eax, 1
cmp eax, edx
je 0x18000bdfb
test edx, edx
je 0x18000bc09
mov r9d, dword [rcx + 0x24]
mov edx, ebx
and r9d, 0xf
jbe 0x18000bdfb
mov r11, qword [rcx]
nop dword [rax + rax]
mov r8d, edx
movzx eax, byte [r8 + rcx + 0x28]
add rax, r11
cmp r10, rax
je 0x18000bbfd
inc edx
cmp edx, r9d
jb 0x18000bbe0
jmp 0x18000bdfb
movzx edx, byte [r8 + rcx + 0x30]
add rdx, qword [rcx + 0x10]
jmp 0x18000bc59
test r8b, 1
je 0x18000bc1b
mov rdx, qword [rcx]
lea rax, [rdx - 5]
cmp r10, rax
je 0x18000bc59
mov r9d, dword [rcx + 0x24]
mov edx, ebx
and r9d, 0xf
jbe 0x18000bc4c
mov r11, qword [rcx + 0x10]
nop dword [rax + rax]
mov r8d, edx
movzx eax, byte [r8 + rcx + 0x30]
add rax, r11
cmp r10, rax
je 0x18000bd0d
inc edx
cmp edx, r9d
jb 0x18000bc30
cmp r10, qword [rcx + 8]
jne 0x18000bdfb
mov rdx, qword [rcx]
test rdx, rdx
je 0x18000bdfb
mov rcx, qword [r14]
mov qword [rsp + 0x148], rdx
mov eax, dword [rcx + r15]
test al, 1
jne 0x18000bcd2
movups xmm0, xmmword [0x180012228]
lea r8, [rcx + r12]
or eax, 1
mov qword [r8], 0
mov edx, ebx
mov dword [rcx + r15], eax
lea rcx, [rsp + 0x30]
mov eax, dword [0x180012238]
mov dword [rsp + 0x30], eax
xor eax, eax
mov dword [r8 + 8], ebx
mov byte [r8 + 0xc], 0
mov dword [r8 + 0x10], eax
lea rax, [rsp + 0x30]
sub r8, rax
movaps xmmword [rsp + 0x20], xmm0
nop dword [rax + rax]
mov eax, dword [rcx]
inc edx
mov dword [r8 + rcx + 0x10], eax
lea rcx, [rcx + 4]
cmp edx, 1
jb 0x18000bcc0
cmp byte [rdi + 0xc], 0
jne 0x18000bd3c
lea rcx, [rdi + 0x10]
mov r9d, ebx
nop
mov eax, dword [rdi + 4]
mov edx, dword [rdi]
lea r8d, [rax + 1]
cmp edx, r8d
je 0x18000bd22
lea r8d, [rax + 2]
cmp edx, r8d
je 0x18000bd22
cmp edx, eax
je 0x18000bd29
lea r8d, [rax + 4]
cmp edx, r8d
jne 0x18000bd1b
add eax, 3
xor dword [rcx], eax
inc dword [rdi]
jmp 0x18000bce0
movzx edx, byte [r8 + rcx + 0x28]
add rdx, qword [rcx]
jmp 0x18000bc59
add eax, 5
cmp edx, eax
jne 0x18000bd2f
xor dword [rcx], r8d
inc dword [rdi]
jmp 0x18000bce0
lea eax, [r9 + 0x33]
xor dword [rcx], eax
inc r9d
add rcx, 4
cmp r9d, 1
jb 0x18000bce0
mov eax, dword [rdi + 0x10]
mov byte [rdi + 0xc], 1
mov rcx, qword gs:[rax]
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x18000bdc7
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x18000bdc7
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x94a13c47
lea rdx, [rbx + r9*4]
mov ecx, dword [rdx + r10]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x18000bdc2
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x10dbd33
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x18000bda0
cmp r8d, 0x48ac5220
je 0x18000bdcc
test r9d, r9d
jne 0x18000bd80
mov rax, qword [rax]
jmp 0x18000bd50
mov eax, dword [r11 + 0x24]
mov ecx, dword [r11 + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov eax, dword [rcx + rdx*4]
lea rdx, [rsp + 0x50]
mov rcx, qword [rsp + 0x40]
add rax, r10
call rax
mov r10, qword [rsp + 0x148]
xor ebx, ebx
add rsi, 0x38
sub rbp, 1
jne 0x18000bb80
mov rcx, qword [rsp + 0x520]
xor rcx, rsp
call fcn.180010210
lea r11, [rsp + 0x530]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret