Function at 0x180185390
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1b8
mov rax, qword [0x1802edb40]
xor rax, rsp
mov qword [rsp + 0x1a0], rax
mov rbp, qword [rcx + 0x38]
mov r10, rcx
mov r14d, dword [rcx + 0x34]
mov rbx, rdx
mov qword [rsp + 0x48], rdx
mov edi, 1
mov rsi, r8
mov qword [rsp + 0x50], r8
mov r8, qword [rcx + 8]
mov r13d, ebx
mov eax, dword [r10 + 0x18]
sub r13d, r8d
mov dword [rsp + 0x24], eax
mov r11d, r13d
mov qword [rsp + 0x90], r9
mov r12d, 3
mov r9, qword [rcx + 0x70]
mov rcx, qword [rcx + 0x10]
lea rdx, [rax + r8]
add rax, rcx
mov qword [rsp + 0x78], rcx
mov ecx, dword [r10 + 0x100]
mov qword [rsp + 0x80], rax
mov eax, r13d
mov qword [rsp + 0x88], rdx
mov edx, edi
shl edx, cl
mov ecx, dword [r10 + 0x1c]
sub r11d, edx
sub eax, ecx
mov qword [rsp + 0x60], r9
cmp eax, edx
mov qword [rsp + 0x68], rbp
mov eax, dword [r10 + 0x10c]
cmovbe r11d, ecx
mov dword [rsp + 0x3c], r14d
cmp dword [r10 + 0x28], 0
mov qword [rsp + 0x40], r8
cmovne r11d, ecx
mov dword [rsp + 0x20], r13d
mov ecx, 6
mov dword [rsp + 0x58], r11d
cmp eax, ecx
mov dword [rsp + 0x38], 0x3f
cmovb ecx, eax
mov rax, qword [r10 + 0x60]
shl edi, cl
xor r15d, r15d
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x28], edi
cmp dword [r10 + 0x12c], r15d
jne 0x18018577f
mov r11d, dword [r10 + 0x2c]
mov eax, r13d
mov ecx, dword [rsp + 0x3c]
sub eax, r11d
mov qword [rsp + 0x30], rbp
mov r14, r9
mov edx, ecx
mov ebp, gethostname
movabs r13, 0xcf1bbcdcbf9b0000
cmp eax, 0x180
jbe 0x18018565a
lea eax, [r11 + 0x60]
cmp r11d, eax
jae 0x18018558e
mov esi, ebp
lea rdi, [r8 + 8]
mov rbp, qword [rsp + 0x68]
sub esi, ecx
add rdi, r11
mov r14d, r11d
mov ebx, eax
mov r12, r9
mov rdx, qword [rdi]
mov ecx, esi
imul rdx, r13
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr eax, 2
and eax, 0x3fffffc0
prefetcht0 byte [r12 + rax*4]
prefetcht0 byte [r12 + rax*4 + 0x40]
prefetcht0 byte [rax + rbp]
prefetcht0 byte [rax + rbp + 0x20]
mov rax, r14
lea rdi, [rdi + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov dword [r10 + rax*4 + 0x40], edx
mov eax, r9d
shr eax, 2
and eax, 0x3fffffc0
movzx ecx, byte [rax + rbp]
lea rdx, [rax + rbp]
dec ecx
mov r8d, eax
and ecx, 0x3f
mov eax, r15d
cmove eax, dword [rsp + 0x38]
inc r14
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rcx + rdx], r9b
mov dword [r12 + rax*4], r11d
inc r11d
cmp r11d, ebx
jb 0x1801854f0
mov rbx, qword [rsp + 0x48]
mov r12d, 3
mov rsi, qword [rsp + 0x50]
mov ebp, gethostname
mov edi, dword [rsp + 0x28]
mov rcx, qword [r10 + 0x38]
lea rax, [rbx + 1]
mov r11d, dword [rsp + 0x20]
mov r9, qword [rsp + 0x40]
add r11d, 0xffffffe0
mov r14, qword [r10 + 0x70]
mov edx, dword [r10 + 0x34]
mov qword [rsp + 0x30], rcx
mov ecx, eax
sub ecx, dword [rsp + 0x40]
sub ecx, r11d
mov r8d, r11d
inc ecx
add r9, r8
cmp r9, rax
mov eax, 8
cmova ecx, r15d
cmp ecx, eax
cmova ecx, eax
lea eax, [r11 + rcx]
cmp r11d, eax
jae 0x180185655
mov rsi, qword [rsp + 0x30]
mov ebx, ebp
sub ebx, edx
mov edi, ecx
nop dword [rax + rax]
mov rdx, qword [r9]
mov ecx, ebx
imul rdx, r13
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr eax, 2
and eax, 0x3fffffc0
prefetcht0 byte [r14 + rax*4]
prefetcht0 byte [r14 + rax*4 + 0x40]
prefetcht0 byte [rsi + rax]
prefetcht0 byte [rsi + rax + 0x20]
mov rax, r8
lea r9, [r9 + 1]
and eax, 7
inc r8
mov dword [r10 + rax*4 + 0x40], edx
sub rdi, 1
jne 0x1801855f0
mov rcx, qword [r10 + 0x38]
mov r14, qword [r10 + 0x70]
mov edx, dword [r10 + 0x34]
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov edi, dword [rsp + 0x28]
mov qword [rsp + 0x30], rcx
mov r9, qword [rsp + 0x60]
mov rax, qword [r10 + 8]
cmp r11d, dword [rsp + 0x20]
jae 0x180185723
mov rsi, qword [rsp + 0x30]
lea rdi, [rax + 8]
mov ebx, ebp
mov r12d, r11d
mov ebp, dword [rsp + 0x20]
sub ebx, edx
add rdi, r12
mov rdx, qword [rdi]
mov ecx, ebx
imul rdx, r13
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr eax, 2
and eax, 0x3fffffc0
prefetcht0 byte [r14 + rax*4]
prefetcht0 byte [r14 + rax*4 + 0x40]
prefetcht0 byte [rsi + rax]
prefetcht0 byte [rsi + rax + 0x20]
mov rax, r12
lea rdi, [rdi + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov dword [r10 + rax*4 + 0x40], edx
mov eax, r9d
shr eax, 2
and eax, 0x3fffffc0
movzx ecx, byte [rsi + rax]
lea rdx, [rsi + rax]
dec ecx
mov r8d, eax
and ecx, 0x3f
mov eax, r15d
cmove eax, dword [rsp + 0x38]
inc r12
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r14 + rax*4], r11d
inc r11d
cmp r11d, ebp
jb 0x180185680
mov rbx, qword [rsp + 0x48]
mov r12d, 3
mov rsi, qword [rsp + 0x50]
mov ebp, gethostname
mov edi, dword [rsp + 0x28]
mov r9, qword [rsp + 0x60]
mov eax, dword [rsp + 0x20]
sub ebp, dword [rsp + 0x3c]
mov r8d, eax
mov dword [r10 + 0x2c], eax
movzx ecx, bpl
mov rax, qword [rsp + 0x40]
mov rdx, qword [r8 + rax + 8]
imul rdx, r13
xor rdx, qword [rsp + 0x70]
shr rdx, cl
mov eax, edx
shr eax, 2
and eax, 0x3fffffc0
prefetcht0 byte [r9 + rax*4]
prefetcht0 byte [r9 + rax*4 + 0x40]
mov rbp, qword [rsp + 0x68]
prefetcht0 byte [rax + rbp]
prefetcht0 byte [rax + rbp + 0x20]
and r8d, 7
mov r11d, dword [r10 + r8*4 + 0x40]
mov dword [r10 + r8*4 + 0x40], edx
jmp 0x1801857a6
mov r11, qword [rbx]
movabs r13, 0xcf1bbcdcbf9b0000
imul r11, r13
mov ecx, gethostname
xor r11, rax
sub ecx, r14d
mov eax, dword [rsp + 0x20]
shr r11, cl
mov dword [r10 + 0x2c], eax
add dword [r10 + 0x68], r11d
mov eax, r11d
shr eax, 2
mov r13, r15
and eax, 0x3fffffc0
movdqu xmm0, xmmword [rax + rbp]
lea r14, [r9 + rax*4]
lea r9, [rax + rbp]
movsx eax, r11b
movzx ebp, byte [r9]
mov qword [rsp + 0x70], r9
movzx ecx, bpl
and cl, 0x3f
movd xmm2, eax
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
pshufd xmm2, xmm2, 0
movdqa xmm1, xmm2
pcmpeqb xmm1, xmm0
movdqu xmm0, xmmword [r9 + 0x10]
pmovmskb r8d, xmm1
movdqu xmm1, xmmword [r9 + 0x20]
pcmpeqb xmm0, xmm2
pmovmskb edx, xmm0
pcmpeqb xmm1, xmm2
movdqu xmm0, xmmword [r9 + 0x30]
pmovmskb eax, xmm1
pcmpeqb xmm0, xmm2
pmovmskb r9d, xmm0
shl r9, 0x10
or r9, rax
movsxd rax, edx
shl r9, 0x10
or r9, rax
movsxd rax, r8d
shl r9, 0x10
or r9, rax
ror r9, cl
test r9, r9
je 0x18018589e
mov rsi, qword [rsp + 0x40]
mov edx, dword [rsp + 0x58]
mov r8d, dword [rsp + 0x24]
mov rbx, qword [rsp + 0x78]
test edi, edi
je 0x180185894
bsf rcx, r9
add ecx, ebp
and ecx, 0x3f
mov ecx, dword [r14 + rcx*4]
je 0x18018588b
cmp ecx, edx
jb 0x180185894
cmp ecx, r8d
jb 0x18018587a
prefetcht0 byte [rcx + rsi]
jmp 0x18018587e
prefetcht0 byte [rcx + rbx]
mov dword [rsp + r13*4 + 0xa0], ecx
inc r13
dec edi
lea rax, [r9 - 1]
and r9, rax
ja 0x180185858
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
lea ecx, [rbp - 1]
mov eax, r15d
and ecx, 0x3f
mov edx, 0x3f
cmove eax, edx
add ecx, eax
mov rax, qword [rsp + 0x70]
mov byte [rax], cl
mov byte [rcx + rax], r11b
mov eax, dword [r10 + 0x2c]
mov dword [r14 + rcx*4], eax
inc dword [r10 + 0x2c]
test r13, r13
je 0x180185a4e
mov ecx, dword [rsp + 0x24]
nop word [rax + rax]
mov r14d, dword [rsp + r15*4 + 0xa0]
mov eax, r14d
cmp r14d, ecx
jb 0x1801859ac
mov rdx, qword [rsp + 0x40]
add rdx, rax
mov eax, dword [r12 + rbx - 3]
cmp dword [rdx + r12 - 3], eax
jne 0x180185a3e
lea r8, [rsi - 7]
mov rax, rbx
cmp rbx, r8
jae 0x180185955
mov rcx, qword [rdx]
xor rcx, qword [rbx]
je 0x18018592d
bsf rcx, rcx
shr rcx, 3
jmp 0x180185a18
add rax, 8
add rdx, 8
cmp rax, r8
jae 0x180185955
nop word [rax + rax]
mov rcx, qword [rax]
xor rcx, qword [rdx]
jne 0x18018599c
add rax, 8
add rdx, 8
cmp rax, r8
jb 0x180185940
lea rcx, [rsi - 3]
cmp rax, rcx
jae 0x18018596c
mov ecx, dword [rax]
cmp dword [rdx], ecx
jne 0x18018596c
add rax, 4
add rdx, 4
lea rcx, [rsi - 1]
cmp rax, rcx
jae 0x180185985
movzx ecx, word [rax]
cmp word [rdx], cx
jne 0x180185985
add rax, 2
add rdx, 2
cmp rax, rsi
jae 0x180185994
movzx ecx, byte [rax]
cmp byte [rdx], cl
jne 0x180185994
inc rax
mov rcx, rax
sub rcx, rbx
jmp 0x180185a18
bsf rcx, rcx
shr rcx, 3
sub rcx, rbx
add rcx, rax
jmp 0x180185a18
mov r11, qword [rsp + 0x78]
add r11, rax
mov eax, dword [rbx]
cmp dword [r11], eax
jne 0x180185a42
mov rcx, qword [rsp + 0x80]
lea rbp, [rbx + 4]
add r11, 4
mov rax, rbp
sub rax, r11
mov r8, rsi
add rcx, rax
mov rdx, r11
cmp rcx, rsi
cmovb r8, rcx
mov rcx, rbp
call fcn.18016c740
mov rdi, rax
add rax, r11
cmp rax, qword [rsp + 0x80]
jne 0x180185a14
mov rdx, qword [rsp + 0x88]
lea rcx, [rdi + rbp]
mov r8, rsi
call fcn.18016c740
add rdi, rax
lea rcx, [rdi + 4]
cmp rcx, r12
jbe 0x180185a3e
mov eax, dword [rsp + 0x20]
mov r12, rcx
mov rdx, qword [rsp + 0x90]
sub eax, r14d
add eax, 3
mov qword [rdx], rax
lea rax, [rcx + rbx]
cmp rax, rsi
je 0x180185a4e
mov ecx, dword [rsp + 0x24]
inc r15
cmp r15, r13
jb 0x1801858e0
mov rax, r12
mov rcx, qword [rsp + 0x1a0]
xor rcx, rsp
call fcn.1801cf080
add rsp, 0x1b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret