Function at 0x18004c810
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1d8
mov rax, qword [0x1800ec0f8]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
mov rax, qword [rcx + 0x38]
mov r10, rcx
mov r15, qword [rcx + 0x70]
mov esi, edx
mov qword [rsp + 0x60], rax
mov rbx, rdx
mov eax, dword [rcx + 0x34]
mov r14, r8
mov r12d, dword [r10 + 0x10c]
mov r11d, 1
mov dword [rsp + 0x44], eax
mov r13d, r11d
mov eax, dword [rcx + 0x18]
mov dword [rsp + 0x50], eax
mov qword [rsp + 0x68], r8
lea edi, [r11 + 2]
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x98], r9
mov r9, qword [rcx + 8]
mov ecx, dword [rcx + 0x100]
add rax, r9
mov qword [rsp + 0xb8], rax
sub esi, r9d
mov eax, edx
mov qword [rsp + 0x78], r15
sub eax, r9d
mov qword [rsp + 0x70], r9
mov dword [rsp + 0x34], eax
mov edx, r11d
mov r11, qword [rbx]
mov eax, esi
shl edx, cl
mov r8d, esi
mov ecx, dword [r10 + 0x1c]
sub r8d, edx
sub eax, ecx
mov dword [rsp + 0x30], esi
cmp eax, edx
mov rax, qword [r10 + 0x60]
mov qword [rsp + 0x48], rax
movabs rax, 0xcf1bbcdcbf9b0000
cmovbe r8d, ecx
cmp dword [r10 + 0x28], 0
cmovne r8d, ecx
mov ecx, 5
cmp r12d, ecx
mov dword [rsp + 0x80], r8d
mov r8, qword [r10 + 0xf8]
cmovb ecx, r12d
mov qword [rsp + 0x58], r8
shl r13d, cl
mov ecx, 0x42
imul r11, rax
sub ecx, dword [r8 + 0x108]
mov rdx, r11
mov dword [rsp + 0x38], r13d
shr rdx, cl
lea rax, [rdx*4]
lea rcx, [rax*4]
mov qword [rsp + 0xb0], rax
mov rax, qword [r8 + 0x70]
mov qword [rsp + 0x90], rcx
prefetcht0 byte [rcx + rax]
xor ebp, ebp
cmp r12d, 5
jbe 0x18004c96c
lea ecx, [r12 - 5]
mov eax, 1
shl eax, cl
mov dword [rsp + 0x3c], eax
jmp 0x18004c970
mov dword [rsp + 0x3c], ebp
mov dword [rsp + 0x54], 0x1f
cmp dword [r10 + 0x12c], ebp
jne 0x18004ccd2
mov r11d, dword [r10 + 0x2c]
mov r12, r15
mov eax, dword [rsp + 0x34]
mov rcx, r9
mov r15, qword [rsp + 0x60]
sub eax, r11d
mov r8d, dword [rsp + 0x44]
mov edx, 0x38
cmp eax, 0x180
jbe 0x18004cba0
lea ecx, [r11 + 0x60]
mov qword [rsp + 0xa8], r9
cmp r11d, ecx
jae 0x18004caa5
mov r13, qword [rsp + 0x78]
lea r12, [r9 + 8]
mov rdi, qword [rsp + 0x60]
mov r14d, edx
sub r14d, r8d
mov r15d, r11d
add r12, r11
mov esi, ecx
movabs rbx, 0xcf1bbcdcbf9b0000
nop dword [rax + rax]
mov rdx, qword [r12]
mov ecx, r14d
imul rdx, rbx
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 3
and eax, 0x1fffffe0
prefetcht0 byte [r13 + rax*4]
prefetcht0 byte [r13 + rax*4 + 0x40]
prefetcht0 byte [rdi + rax]
mov rax, r15
lea r12, [r12 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, ebp
shr r8, 3
and r8d, 0x1fffffe0
movzx ecx, byte [rdi + r8]
lea rdx, [rdi + r8]
dec ecx
and ecx, 0x1f
cmove eax, dword [rsp + 0x54]
inc r15
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r13 + rax*4], r11d
inc r11d
cmp r11d, esi
jb 0x18004c9f0
mov rax, qword [r10 + 8]
mov edi, 3
mov rbx, qword [rsp + 0x88]
mov r14, qword [rsp + 0x68]
mov r13d, dword [rsp + 0x38]
mov esi, dword [rsp + 0x30]
lea edx, [rdi + 0x35]
mov r9, qword [rsp + 0x70]
mov qword [rsp + 0xa8], rax
mov rcx, qword [r10 + 0x38]
lea rax, [rbx + 1]
mov r11d, dword [rsp + 0x34]
mov r12, qword [r10 + 0x70]
add r11d, 0xffffffe0
mov qword [rsp + 0xa0], rcx
mov ecx, dword [r10 + 0x34]
mov dword [rsp + 0x40], ecx
mov ecx, eax
sub ecx, r11d
mov r8d, r11d
sub ecx, r9d
lea r15, [r11 + r9]
inc ecx
cmp r15, rax
mov eax, 8
cmova ecx, ebp
cmp ecx, eax
cmova ecx, eax
lea eax, [r11 + rcx]
cmp r11d, eax
jae 0x18004cb87
mov rsi, qword [rsp + 0xa0]
mov r14d, edx
sub r14d, dword [rsp + 0x40]
movabs rbx, 0xcf1bbcdcbf9b0000
mov r13d, ecx
nop word [rax + rax]
mov rdx, qword [r15]
mov ecx, r14d
imul rdx, rbx
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 3
and eax, 0x1fffffe0
prefetcht0 byte [r12 + rax*4]
prefetcht0 byte [r12 + rax*4 + 0x40]
prefetcht0 byte [rsi + rax]
mov rax, r8
lea r15, [r15 + 1]
and eax, 7
inc r8
mov dword [r10 + rax*4 + 0x40], edx
sub r13, 1
jne 0x18004cb20
mov r12, qword [r10 + 0x70]
mov r15, qword [r10 + 0x38]
mov rcx, qword [r10 + 8]
mov rbx, qword [rsp + 0x88]
mov r14, qword [rsp + 0x68]
mov r13d, dword [rsp + 0x38]
mov esi, dword [rsp + 0x30]
jmp 0x18004cb97
mov r15, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xa8]
mov r8d, dword [r10 + 0x34]
mov edx, 0x38
mov eax, dword [rsp + 0x34]
cmp r11d, eax
jae 0x18004cc73
mov r13d, edx
mov esi, r11d
sub r13d, r8d
lea r14, [rcx + 8]
add r14, rsi
mov edi, eax
movabs rbx, 0xcf1bbcdcbf9b0000
nop dword [rax]
mov rdx, qword [r14]
mov ecx, r13d
imul rdx, rbx
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 3
and eax, 0x1fffffe0
prefetcht0 byte [r12 + rax*4]
prefetcht0 byte [r12 + rax*4 + 0x40]
prefetcht0 byte [rax + r15]
mov rax, rsi
lea r14, [r14 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, ebp
shr r8, 3
and r8d, 0x1fffffe0
movzx ecx, byte [r8 + r15]
lea rdx, [r8 + r15]
dec ecx
and ecx, 0x1f
cmove eax, dword [rsp + 0x54]
inc rsi
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r12 + rax*4], r11d
inc r11d
cmp r11d, edi
jb 0x18004cbd0
mov rbx, qword [rsp + 0x88]
mov edi, 3
mov r14, qword [rsp + 0x68]
mov r13d, dword [rsp + 0x38]
mov esi, dword [rsp + 0x30]
mov r9, qword [rsp + 0x70]
mov eax, dword [rsp + 0x34]
mov r15, qword [rsp + 0x78]
mov ecx, 0x38
sub ecx, dword [rsp + 0x44]
mov dword [r10 + 0x2c], eax
movabs rax, 0xcf1bbcdcbf9b0000
mov r8d, esi
mov rdx, qword [r8 + r9 + 8]
imul rdx, rax
xor rdx, qword [rsp + 0x48]
shr rdx, cl
mov eax, edx
shr rax, 3
and eax, 0x1fffffe0
prefetcht0 byte [r15 + rax*4]
prefetcht0 byte [r15 + rax*4 + 0x40]
mov rsi, qword [rsp + 0x60]
prefetcht0 byte [rax + rsi]
and r8d, 7
mov r11d, dword [r10 + r8*4 + 0x40]
mov dword [r10 + r8*4 + 0x40], edx
jmp 0x18004ccec
xor r11, qword [rsp + 0x48]
mov ecx, 0x38
sub ecx, dword [rsp + 0x44]
mov dword [r10 + 0x2c], esi
mov rsi, qword [rsp + 0x60]
shr r11, cl
add dword [r10 + 0x68], r11d
mov eax, r11d
shr rax, 3
and eax, 0x1fffffe0
movdqu xmm0, xmmword [rax + rsi]
lea rcx, [r15 + rax*4]
mov r15, rbp
mov qword [rsp + 0x48], rcx
lea rcx, [rax + rsi]
movzx eax, byte [rax + rsi]
mov rsi, rbp
mov r12d, eax
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x78], rcx
and r12d, 0x1f
movsx eax, r11b
movd xmm2, eax
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
pshufd xmm2, xmm2, 0
movdqa xmm1, xmm2
pcmpeqb xmm1, xmm0
movdqu xmm0, xmmword [rcx + 0x10]
mov ecx, r12d
neg ecx
pmovmskb eax, xmm1
and ecx, 0x1f
pcmpeqb xmm0, xmm2
pmovmskb edx, xmm0
shl edx, 0x10
or edx, eax
mov r8d, edx
mov eax, edx
mov rdx, qword [rsp + 0x48]
shl r8d, cl
mov ecx, r12d
shr rax, cl
or r8, rax
jbe 0x18004cdc2
mov r14d, dword [rsp + 0x80]
test r13d, r13d
je 0x18004cdb8
bsf rcx, r8
add ecx, r12d
and ecx, 0x1f
je 0x18004cdaf
mov ecx, dword [rdx + rcx*4]
cmp ecx, r14d
jb 0x18004cdb8
prefetcht0 byte [rcx + r9]
mov dword [rsp + r15*4 + 0xc0], ecx
inc r15
dec r13d
lea rax, [r8 - 1]
and r8, rax
ja 0x18004cd83
mov r14, qword [rsp + 0x68]
mov dword [rsp + 0x38], r13d
mov ecx, dword [rsp + 0x40]
mov eax, ebp
dec ecx
mov r8d, 0x1f
and ecx, 0x1f
cmove eax, r8d
add ecx, eax
mov rax, qword [rsp + 0x78]
mov byte [rax], cl
mov byte [rcx + rax], r11b
mov eax, dword [r10 + 0x2c]
mov dword [rdx + rcx*4], eax
inc dword [r10 + 0x2c]
test r15, r15
je 0x18004ce51
mov ebp, dword [rsp + 0x30]
mov r13, qword [rsp + 0x98]
mov r12d, dword [rsp + rsi*4 + 0xc0]
mov eax, dword [rdi + rbx - 3]
lea rdx, [r9 + r12]
cmp dword [rdx + rdi - 3], eax
jne 0x18004ce42
mov r8, r14
mov rcx, rbx
call fcn.180036af0
cmp rax, rdi
jbe 0x18004ce3d
mov ecx, ebp
mov rdi, rax
sub ecx, r12d
add rax, rbx
add ecx, 3
mov qword [r13], rcx
cmp rax, r14
je 0x18004ce4a
mov r9, qword [rsp + 0x70]
inc rsi
cmp rsi, r15
jb 0x18004ce00
mov r13d, dword [rsp + 0x38]
xor ebp, ebp
mov r8, qword [rsp + 0x58]
mov r12d, dword [rsp + 0x3c]
mov r11, qword [rsp + 0x90]
add r12d, r13d
mov r13d, 3
mov r10, qword [r8]
mov esi, r13d
mov r15, qword [r8 + 8]
mov rdx, qword [r8 + 0x70]
mov r9d, r15d
sub r9d, r10d
mov qword [rsp + 0x48], r10
add r9d, dword [rsp + 0x50]
cmp r12d, r13d
mov dword [rsp + 0x3c], r9d
lea rcx, [r11 + rdx]
cmovb esi, r12d
mov dword [rsp + 0x50], esi
nop
mov eax, dword [rcx]
prefetcht0 byte [rax + r15]
lea rcx, [rcx + 4]
sub r13, 1
jne 0x18004cea0
mov rax, qword [rsp + 0xb0]
mov ecx, dword [rdx + rax*4 + 0xc]
mov rax, qword [r8 + 0x80]
shr rcx, 8
prefetcht0 byte [rax + rcx*4]
mov r13d, ebp
test esi, esi
je 0x18004cf8a
nop word [rax + rax]
mov esi, dword [rdx + r11]
mov rcx, rbp
test esi, esi
je 0x18004d049
mov eax, dword [rbx]
cmp dword [rsi + r15], eax
jne 0x18004cf3b
mov rax, qword [rsp + 0xb8]
lea rdx, [r15 + 4]
add rdx, rsi
mov qword [rsp + 0x20], rax
lea rcx, [rbx + 4]
mov r9, r10
mov r8, r14
call fcn.180036b90
mov r8, qword [rsp + 0x58]
mov r9d, dword [rsp + 0x3c]
mov r10, qword [rsp + 0x48]
mov r11, qword [rsp + 0x90]
lea rcx, [rax + 4]
mov rdx, qword [r8 + 0x70]
jmp 0x18004cf40
mov r8, qword [rsp + 0x58]
cmp rcx, rdi
jbe 0x18004cf70
mov eax, dword [rsp + 0x30]
mov rdi, rcx
mov rdx, qword [rsp + 0x98]
sub eax, esi
sub eax, r9d
add eax, 3
mov qword [rdx], rax
lea rax, [rcx + rbx]
cmp rax, r14
je 0x18004d070
mov rdx, qword [r8 + 0x70]
add r11, 4
inc r13d
mov qword [rsp + 0x90], r11
cmp r13d, dword [rsp + 0x50]
jb 0x18004cee0
mov rax, qword [rsp + 0xb0]
sub r12d, r13d
mov eax, dword [rdx + rax*4 + 0xc]
mov esi, eax
shr esi, 8
mov edx, ebp
movzx ecx, al
cmp r12d, ecx
cmova r12d, ecx
test r12d, r12d
je 0x18004d049
mov r9, qword [r8 + 0x80]
nop word [rax + rax]
lea eax, [rdx + rsi]
mov eax, dword [r9 + rax*4]
prefetcht0 byte [rax + r15]
inc edx
cmp edx, r12d
jb 0x18004cfc0
mov rax, qword [r8 + 0x80]
mov r13d, dword [rax + rsi*4]
mov eax, dword [rbx]
lea rdx, [r15 + r13]
cmp dword [rdx], eax
jne 0x18004d03b
mov rax, qword [rsp + 0xb8]
lea rcx, [rbx + 4]
add rdx, 4
mov qword [rsp + 0x20], rax
mov r9, r10
mov r8, r14
call fcn.180036b90
add rax, 4
cmp rax, rdi
jbe 0x18004d036
mov ecx, dword [rsp + 0x30]
mov rdi, rax
mov rdx, qword [rsp + 0x98]
sub ecx, r13d
sub ecx, dword [rsp + 0x3c]
add ecx, 3
mov qword [rdx], rcx
lea rcx, [rax + rbx]
cmp rcx, r14
je 0x18004d049
mov r8, qword [rsp + 0x58]
mov r10, qword [rsp + 0x48]
inc esi
inc ebp
cmp ebp, r12d
jb 0x18004cfd3
mov rax, rdi
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.1800b1550
add rsp, 0x1d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rax, rcx
jmp 0x18004d04c