Function at 0x1801f41a0
Capabilities:
Encode data using xor
Encrypt data using blowfish

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xa0
mov qword [rbp - 0x59], 0xfffffffffffffffe
mov qword [rsp + 0xe8], rbx
mov rax, qword [0x18036d060]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov r13, r9
mov r15, r8
mov rbx, rcx
mov rdx, qword [rbp + 0x7f]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x51], xmm0
mov qword [rbp - 0x41], rax
lea r8, str.initCrypt_blowfish
lea rcx, [rbp - 0x51]
call fcn.180105b50
nop
mov eax, dword [r15 + 0x10]
cdq
and edx, 7
lea r14d, [rdx + rax]
sar r14d, 3
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
movups xmmword [rbp - 0x21], xmm0
movups xmmword [rbp - 0x11], xmm0
movups xmmword [rbp - 1], xmm0
lea rcx, [r15 + 0x18]
call fcn.1800be430
lea rcx, [r15 + 0x18]
cmp eax, 0x40
jbe 0x1801f4251
call fcn.1800bdfb0
test rax, rax
je 0x1801f427e
lea rcx, [r15 + 0x18]
call fcn.1800bdfb0
mov r8d, 0x40
jmp 0x1801f4272
call fcn.1800bdfb0
test rax, rax
je 0x1801f427e
lea rcx, [r15 + 0x18]
call fcn.1800be430
mov edi, eax
lea rcx, [r15 + 0x18]
call fcn.1800bdfb0
mov r8d, edi
mov rdx, rax
lea rcx, [rbp - 0x31]
call fcn.1800da940
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f30]
mov dword [rcx], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f34]
mov dword [rcx + 4], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f38]
mov dword [rcx + 8], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f3c]
mov dword [rcx + 0xc], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f40]
mov dword [rcx + 0x10], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f44]
mov dword [rcx + 0x14], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f48]
mov dword [rcx + 0x18], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f4c]
mov dword [rcx + 0x1c], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f50]
mov dword [rcx + 0x20], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f54]
mov dword [rcx + 0x24], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f58]
mov dword [rcx + 0x28], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f5c]
mov dword [rcx + 0x2c], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f60]
mov dword [rcx + 0x30], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f64]
mov dword [rcx + 0x34], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f68]
mov dword [rcx + 0x38], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f6c]
mov dword [rcx + 0x3c], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f70]
mov dword [rcx + 0x40], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [0x180379f74]
mov dword [rcx + 0x44], eax
lea r12, [0x180379f84]
mov esi, 8
sub rsi, r12
xor edi, edi
mov r9d, edi
lea r10, [r9 + 0xc]
mov r11d, 0x40
nop dword [rax + rax]
lea r8, [r9 + r12]
mov rcx, qword [rbx + 0xb8]
mov eax, dword [r8 - 4]
mov dword [r9 + rcx], eax
mov rcx, qword [rbx + 0xb8]
mov eax, dword [r8]
mov dword [r9 + rcx + 4], eax
lea rdx, [rsi + r8]
mov rcx, qword [rbx + 0xb8]
mov eax, dword [r8 + 4]
mov dword [rdx + rcx], eax
mov rcx, qword [rbx + 0xb8]
mov eax, dword [r8 + 8]
mov dword [r10 + rcx], eax
add r9, 0x10
lea r10, [r10 + 0x10]
sub r11, 1
jne 0x1801f43c0
cmp r9, 0x1000
jl 0x1801f43b1
mov r10d, edi
mov r11d, reloc.WS2_32.dll_inet_ntoa
cmp byte [rbx + 0xc0], dil
je 0x1801f47c0
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movsxd rax, r10d
movzx ecx, byte [rbp + rax - 0x31]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 3]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11 - 0xc], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r10, edx
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r10 - 0x31]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 3]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11 - 8], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r10, edx
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r10 - 0x31]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 3]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11 - 4], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r10, edx
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r10 - 0x31]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 3]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r10, edx
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r10 - 0x31]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 3]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11 + 4], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r10, edx
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r10 - 0x31]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 3]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11 + 8], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r10, edx
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r10 - 0x31]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 3]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11 + 0xc], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r10, edx
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r10 - 0x31]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 3]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11 + 0x10], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r9, edx
lea eax, [r9 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r9 - 0x31]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r9 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
lea eax, [r9 + 3]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
mov rax, qword [rbx + 0xb0]
xor dword [r11 + rax + 0x14], r8d
lea eax, [r9 + 4]
cdq
idiv r14d
mov r10d, edx
add r11, 0x24
cmp r11, 0x54
jl 0x1801f4430
jmp 0x1801f4b38
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movsxd rax, r10d
movzx ecx, byte [rbp + rax - 0x2e]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
mov eax, r10d
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11 - 0xc], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r10, edx
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r10 - 0x2e]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
mov eax, r10d
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11 - 8], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r10, edx
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r10 - 0x2e]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
mov eax, r10d
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11 - 4], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r10, edx
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r10 - 0x2e]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
mov eax, r10d
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r10, edx
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r10 - 0x2e]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
mov eax, r10d
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11 + 4], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r10, edx
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r10 - 0x2e]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
mov eax, r10d
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11 + 8], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r10, edx
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r10 - 0x2e]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
mov eax, r10d
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11 + 0xc], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r10, edx
mov r9, qword [rbx + 0xb0]
lea eax, [r10 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r10 - 0x2e]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r10 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
mov eax, r10d
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
xor dword [r9 + r11 + 0x10], r8d
lea eax, [r10 + 4]
cdq
idiv r14d
movsxd r9, edx
lea eax, [r9 + 2]
cdq
idiv r14d
movsxd rax, edx
movzx r8d, byte [rbp + rax - 0x31]
movzx ecx, byte [rbp + r9 - 0x2e]
shl ecx, 8
or r8d, ecx
shl r8d, 8
lea eax, [r9 + 1]
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
shl r8d, 8
mov eax, r9d
cdq
idiv r14d
movsxd rax, edx
movzx ecx, byte [rbp + rax - 0x31]
or r8d, ecx
mov rax, qword [rbx + 0xb0]
xor dword [rax + r11 + 0x14], r8d
lea eax, [r9 + 4]
cdq
idiv r14d
mov r10d, edx
add r11, 0x24
cmp r11, 0x54
jl 0x1801f47c0
mov dword [rbp - 0x61], edi
mov dword [rbp - 0x5d], edi
mov rsi, rdi
cmp byte [rbx + 0xc0], dil
je 0x1801f4bf0
nop
lea r8, [rbp - 0x5d]
lea rdx, [rbp - 0x61]
mov rcx, rbx
call fcn.1801f38f0
mov rcx, qword [rbx + 0xb0]
mov eax, dword [rbp - 0x61]
mov dword [rsi + rcx], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [rbp - 0x5d]
mov dword [rsi + rcx + 4], eax
add rsi, 8
cmp rsi, 0x48
jl 0x1801f4b50
nop word [rax + rax]
mov esi, pe_nt_image_headers64
nop word [rax + rax]
lea r8, [rbp - 0x5d]
lea rdx, [rbp - 0x61]
mov rcx, rbx
call fcn.1801f38f0
mov rcx, qword [rbx + 0xb8]
mov eax, dword [rbp - 0x61]
mov dword [rdi + rcx], eax
mov rcx, qword [rbx + 0xb8]
mov eax, dword [rbp - 0x5d]
mov dword [rdi + rcx + 4], eax
add rdi, 8
sub rsi, 1
jne 0x1801f4ba0
cmp rdi, 0x1000
jl 0x1801f4b90
jmp 0x1801f4c7e
lea r8, [rbp - 0x5d]
lea rdx, [rbp - 0x61]
mov rcx, rbx
call fcn.1801f3d40
mov rcx, qword [rbx + 0xb0]
mov eax, dword [rbp - 0x61]
mov dword [rsi + rcx], eax
mov rcx, qword [rbx + 0xb0]
mov eax, dword [rbp - 0x5d]
mov dword [rsi + rcx + 4], eax
add rsi, 8
cmp rsi, 0x48
jl 0x1801f4bf0
nop word [rax + rax]
mov esi, pe_nt_image_headers64
nop word [rax + rax]
lea r8, [rbp - 0x5d]
lea rdx, [rbp - 0x61]
mov rcx, rbx
call fcn.1801f3d40
mov rcx, qword [rbx + 0xb8]
mov eax, dword [rbp - 0x61]
mov dword [rdi + rcx], eax
mov rcx, qword [rbx + 0xb8]
mov eax, dword [rbp - 0x5d]
mov dword [rdi + rcx + 4], eax
add rdi, 8
sub rsi, 1
jne 0x1801f4c40
cmp rdi, 0x1000
jl 0x1801f4c30
test r13, r13
je 0x1801f4cbd
mov eax, dword [r15 + 8]
sub eax, 3
cmp eax, 1
ja 0x1801f4cbd
lea rcx, [r15 + 0x50]
call fcn.1800be430
mov esi, eax
lea rcx, [r15 + 0x50]
call fcn.1800bdfb0
mov rdx, rax
lea rcx, [r13 + 0x4a0]
mov r9d, dword [rbx + 0xa8]
mov r8d, esi
call fcn.1801c8d90
nop
lea rcx, [rbp - 0x51]
call fcn.180105c80
mov al, 1
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.18007b140
mov rbx, qword [rsp + 0xe8]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret