Function at 0x1800b2ff4
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
mov rax, rsp
mov dword [rax + 8], ecx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x148]
sub rsp, 0x208
mov ebx, ecx
movaps xmmword [rax - 0x58], xmm6
lea rcx, [rbp]
movaps xmmword [rax - 0x68], xmm7
call fcn.1800f8d48
mov edx, ebx
mov rcx, rax
call fcn.1800f98f0
test al, al
je 0x1800b3049
lea rdx, [rbp + 0x150]
call fcn.1800f8c74
mov rax, qword [rax]
jmp 0x1800b3787
call fcn.1800b2f10
mov rcx, rax
mov r15, rax
call fcn.1800b2e08
xor edi, edi
mov qword [rbp + 0x160], rax
mov rcx, r15
mov dword [rbp + 0x158], edi
mov rbx, rax
call fcn.1800b2cfc
test rax, rax
je 0x1800b3785
movabs rsi, 0x90f0c0bd3a4df788
movabs r14, 0x2635a5d087acf76b
mov rax, qword [rbx]
xor r13d, r13d
mov r12, qword [rax]
mov rcx, r12
call fcn.1800b2af8
test rax, rax
je 0x1800b375e
xor ebx, ebx
lea edi, [rbx + 0xf]
mov rdx, qword [r12]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rbx
or r8, 0xffffffffffffffff
mov qword [rsp + 0x58], rbx
inc r8
cmp byte [rdx + r8], bl
jne 0x1800b30c9
lea rcx, [rsp + 0x40]
call fcn.1800aada0
movabs rax, 0x2635a5d0ebc09345
lea rdx, [rbp - 0x40]
mov qword [rbp + 0x168], rax
lea rcx, [rsp + 0x40]
mov rax, qword [rbp + 0x168]
mov qword [rbp - 0x40], rax
mov qword [rbp + 0x168], rsi
mov rax, qword [rbp + 0x168]
mov qword [rbp - 0x38], rax
mov qword [rbp + 0x168], r14
mov rax, qword [rbp + 0x168]
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x168], rsi
mov rax, qword [rbp + 0x168]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp + 0x58], rax
xorps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp - 0x40], xmm0
call fcn.1800f90dc
mov rbx, qword [rsp + 0x50]
cmp rbx, rax
jb 0x1800b381b
mov rcx, rbx
mov edx, 4
sub rcx, rax
cmp rcx, rdx
cmovb rdx, rcx
cmp qword [rsp + 0x58], rdi
lea rcx, [rsp + 0x40]
cmova rcx, qword [rsp + 0x40]
sub rbx, rdx
add rcx, rax
mov r8, rbx
sub r8, rax
add rdx, rcx
inc r8
call sub.VCRUNTIME140.dll_memmove
movsxd rdx, r13d
mov rcx, r12
mov qword [rsp + 0x50], rbx
call fcn.1800b2bf8
xor ebx, ebx
xorps xmm0, xmm0
mov r14, rax
mov qword [rbp - 0x10], rbx
movups xmmword [rbp - 0x20], xmm0
mov rsi, qword [rax + 0x10]
or r8, 0xffffffffffffffff
mov rdi, qword [rax + 0x18]
mov qword [rbp - 8], rbx
inc r8
cmp byte [rdi + r8], bl
jne 0x1800b31c1
mov rdx, rdi
lea rcx, [rbp - 0x20]
call fcn.1800aada0
cmp qword [rbp - 0x10], rbx
mov rdx, qword [rbp - 8]
sete bl
cmp rdx, 0xf
jbe 0x1800b3218
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b3213
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b3801
call fcn.18012d4cc
and qword [rbp - 0x10], 0
movabs rcx, 0x90f0c0bd3a4df788
mov qword [rbp - 8], 0xf
movabs rdx, 0x2635a5d087acf76b
mov byte [rbp - 0x20], 0
test bl, bl
je 0x1800b33c4
movabs rax, 0x2635a5d087accd51
mov qword [rbp + 0x168], rax
mov rax, qword [rbp + 0x168]
mov qword [rsp + 0x60], rax
mov qword [rbp + 0x168], rcx
mov rax, qword [rbp + 0x168]
mov qword [rsp + 0x68], rax
mov qword [rbp + 0x168], rdx
mov rax, qword [rbp + 0x168]
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x168], rcx
or rcx, 0xffffffffffffffff
mov rax, qword [rbp + 0x168]
xor ebx, ebx
movdqa xmm0, xmmword [rsp + 0x60]
mov qword [rbp + 0x68], rax
lea rax, [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
inc rcx
cmp byte [rax + rcx], bl
jne 0x1800b32b4
mov r8, qword [rsp + 0x50]
movabs rax, 0x7fffffffffffffff
sub rax, r8
cmp rax, rcx
jb 0x1800b3821
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x40]
mov edi, 0xf
mov qword [rsp + 0x20], r8
cmp qword [rsp + 0x58], rdi
lea rcx, [rbp + 0x10]
cmova r9, qword [rsp + 0x40]
call fcn.1800fbc70
mov rdx, rsi
lea rcx, [rbp + 0x10]
call fcn.1800f9198
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
mov byte [rax], bl
mov rdx, qword [rsp + 0x58]
movups xmmword [rbp + 0xa0], xmm6
movups xmmword [rbp + 0xb0], xmm7
cmp rdx, rdi
jbe 0x1800b3370
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b336b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b37a9
call fcn.18012d4cc
mov rdx, qword [rbp + 0x28]
movups xmmword [rsp + 0x40], xmm6
movups xmmword [rsp + 0x50], xmm7
cmp rdx, rdi
jbe 0x1800b33b4
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b33af
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b37a9
call fcn.18012d4cc
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], rdi
mov byte [rbp + 0x10], bl
jmp 0x1800b3686
movabs r8, 0x2635a5d087accd51
mov qword [rbp + 0x168], r8
mov rax, qword [rbp + 0x168]
mov qword [rbp - 0x30], rax
mov qword [rbp + 0x168], rcx
mov rax, qword [rbp + 0x168]
mov qword [rbp - 0x28], rax
mov qword [rbp + 0x168], rdx
mov rax, qword [rbp + 0x168]
mov qword [rbp + 0x168], rcx
mov qword [rbp + 0x70], rax
mov rax, qword [rbp + 0x168]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp + 0x78], rax
xorps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp - 0x30], xmm0
mov qword [rbp + 0x168], r8
mov rax, qword [rbp + 0x168]
mov qword [rsp + 0x70], rax
mov qword [rbp + 0x168], rcx
mov rax, qword [rbp + 0x168]
mov qword [rsp + 0x78], rax
mov qword [rbp + 0x168], rdx
mov rax, qword [rbp + 0x168]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x168], rcx
or rcx, 0xffffffffffffffff
mov rax, qword [rbp + 0x168]
xor ebx, ebx
movdqa xmm0, xmmword [rsp + 0x70]
mov qword [rbp + 0x88], rax
lea rax, [rsp + 0x70]
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rsp + 0x70], xmm0
inc rcx
cmp byte [rax + rcx], bl
jne 0x1800b3492
mov r8, qword [rsp + 0x50]
movabs rax, 0x7fffffffffffffff
sub rax, r8
cmp rax, rcx
jb 0x1800b3815
cmp qword [rsp + 0x58], 0xf
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], rcx
lea r9, [rsp + 0x40]
cmova r9, qword [rsp + 0x40]
lea rcx, [rbp + 0x30]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r8
call fcn.1800fbc70
mov rdx, rdi
lea rcx, [rbp + 0x30]
call fcn.1800f9198
mov qword [rbp - 0x50], rbx
lea rdx, [rbp - 0x30]
mov qword [rbp - 0x48], rbx
lea rcx, [rbp - 0x60]
xorps xmm0, xmm0
mov edi, 0xf
movups xmmword [rbp - 0x60], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
mov byte [rax], bl
call fcn.1800f9198
mov qword [rbp - 0x70], rbx
lea rcx, [rbp - 0x80]
mov qword [rbp - 0x68], rbx
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov rdx, rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
mov byte [rax], bl
call fcn.1800f9198
mov esi, 0x1000
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
mov byte [rax], bl
mov rdx, qword [rsp + 0x58]
movups xmmword [rbp + 0xc0], xmm6
movups xmmword [rbp + 0xd0], xmm7
cmp rdx, rdi
jbe 0x1800b35b9
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, rsi
jb 0x1800b35b4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b37b0
call fcn.18012d4cc
mov rdx, qword [rbp - 0x68]
movups xmmword [rsp + 0x40], xmm6
movups xmmword [rsp + 0x50], xmm7
cmp rdx, rdi
jbe 0x1800b35f9
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, rsi
jb 0x1800b35f4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b37b0
call fcn.18012d4cc
mov rdx, qword [rbp - 0x48]
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rdi
mov byte [rbp - 0x80], bl
cmp rdx, rdi
jbe 0x1800b363a
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, rsi
jb 0x1800b3635
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b37b0
call fcn.18012d4cc
mov rdx, qword [rbp + 0x48]
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], rdi
mov byte [rbp - 0x60], bl
cmp rdx, rdi
jbe 0x1800b367b
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, rsi
jb 0x1800b3676
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b37b0
call fcn.18012d4cc
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], rdi
mov byte [rbp + 0x30], bl
mov r10, qword [rsp + 0x58]
lea rcx, [rsp + 0x40]
mov r8, qword [rsp + 0x40]
cmp r10, rdi
cmova rcx, r8
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], bl
jne 0x1800b36a0
cmp r10, rdi
lea r9, [rsp + 0x40]
cmova r9, r8
or edx, 0xffffffff
test eax, eax
je 0x1800b36e0
mov r11d, eax
movsx ecx, byte [r9]
mov eax, edx
xor rcx, rax
shr edx, 8
movzx eax, cl
inc r9
lea rcx, [0x180096d80]
xor edx, dword [rcx + rax*4]
sub r11, 1
jne 0x1800b36be
mov eax, dword [rbp + 0x150]
not edx
cmp eax, edx
je 0x1800b37b7
cmp r10, rdi
jbe 0x1800b3726
lea rdx, [r10 + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x1800b371e
mov r8, qword [r8 - 8]
add rdx, 0x27
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b3801
mov rcx, r8
call fcn.18012d4cc
mov rcx, r12
inc r13d
call fcn.1800b2af8
movsxd rcx, r13d
movabs rsi, 0x90f0c0bd3a4df788
movabs r14, 0x2635a5d087acf76b
cmp rcx, rax
jb 0x1800b30af
mov rbx, qword [rbp + 0x160]
mov edi, dword [rbp + 0x158]
inc edi
add rbx, 8
mov rcx, r15
mov dword [rbp + 0x158], edi
mov qword [rbp + 0x160], rbx
call fcn.1800b2cfc
movsxd rcx, edi
cmp rcx, rax
jb 0x1800b3090
xor eax, eax
lea r11, [rsp + 0x208]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea r8, [rbp]
mov dword [rbp], eax
lea rdx, [rbp + 0x90]
mov qword [rbp + 8], r14
call fcn.1800f9a34
mov rdx, qword [rsp + 0x58]
cmp rdx, rdi
jbe 0x1800b380d
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b3808
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800b3808
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18012d4cc
mov rax, r14
jmp 0x1800b3787
call fcn.1800aaa74
int3
call fcn.1800aad54
int3
call fcn.1800aaa74
int3