Function at 0x18006a7b0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
movdqa xmmword [rsp + 0x50], xmm6
mov rbp, qword [rcx + 0x18]
cmp rbp, 0xffffffffffffffff
je 0x18006b215
mov r9, rcx
mov r15, qword [rcx + 8]
lea rbx, [r15 + 1]
mov rax, rbx
shr rax, 3
mov rcx, rbx
and rcx, 0xfffffffffffffff8
sub rcx, rax
cmp r15, 8
cmovb rcx, r15
movdqa xmm6, xmmword [rdx]
mov rax, rcx
shr rax, 1
cmp rbp, rax
mov qword [rsp + 0x20], r9
jae 0x18006a838
mov rdi, qword [r9]
mov rcx, rbx
shr rcx, 4
xor eax, eax
test bl, 0xf
setne al
add rax, rcx
je 0x18006ab2a
cmp rax, 1
jne 0x18006aabb
xor ecx, ecx
jmp 0x18006ab14
lea rax, [rbp + 1]
inc rcx
cmp rax, rcx
cmova rcx, rax
cmp rcx, 8
jae 0x18006a85f
xor eax, eax
cmp rcx, 4
setae al
lea rsi, [rax*4 + 4]
jmp 0x18006a8b6
mov rax, rcx
shr rax, 0x3d
jne 0x18006b215
shl rcx, 3
movabs rdx, 0x2492492492492493
mov rax, rcx
mul rdx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 2
dec rcx
bsr rcx, rcx
not ecx
mov rsi, 0xffffffffffffffff
shr rsi, cl
movabs rax, 0x7fffffffffffffe
cmp rsi, rax
ja 0x18006b215
inc rsi
mov r12, rsi
shl r12, 5
lea rbx, [rsi + 0x10]
mov r14, r12
add r14, rbx
jb 0x18006b215
movabs rax, 0x7ffffffffffffff1
cmp r14, rax
jae 0x18006b215
movzx eax, byte [0x18346a000]
xor ecx, ecx
mov rdx, r14
call fcn.180034da0
test rax, rax
je 0x18006b21a
mov rdi, rax
lea r13, [rsi - 1]
mov rax, rsi
shr rax, 3
mov r14, rsi
and r14, 0xfffffffffffffff8
sub r14, rax
cmp rsi, 9
cmovb r14, r13
add rdi, r12
mov rcx, rdi
mov dl, 0xff
mov r8, rbx
call sub.VCRUNTIME140.dll_memset
test rbp, rbp
je 0x18006aa5d
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x20]
mov rbx, qword [rax]
movdqa xmm0, xmmword [rbx]
mov r14, rbp
pmovmskb ebp, xmm0
not ebp
xor r12d, r12d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x38], r14
jmp 0x18006a9a8
lea ecx, [rbp - 1]
and ecx, ebp
dec r14
shr rax, 0x39
lea r8, [rdx - 0x10]
and r8, r13
mov byte [rdi + rdx], al
mov byte [rdi + r8 + 0x10], al
shl rdx, 5
mov rax, rdi
sub rax, rdx
neg rdx
movdqu xmm0, xmmword [rsi - 0x20]
movdqu xmm1, xmmword [rsi - 0x10]
movdqu xmmword [rdi + rdx - 0x20], xmm0
movdqu xmmword [rax - 0x10], xmm1
mov ebp, ecx
test r14, r14
je 0x18006aa51
test bp, bp
jne 0x18006a9cb
nop dword [rax]
movdqa xmm0, xmmword [rbx + 0x10]
add rbx, 0x10
pmovmskb ebp, xmm0
add r12, 0x10
cmp ebp, 0xffff
je 0x18006a9b0
not ebp
tzcnt eax, ebp
add rax, r12
shl rax, 5
mov rsi, qword [rsp + 0x28]
sub rsi, rax
mov rdx, qword [rsi - 0x18]
mov r8, qword [rsi - 0x10]
movdqa xmmword [rsp + 0x40], xmm6
lea rcx, [rsp + 0x40]
call fcn.18000fbb0
mov rcx, r13
and rcx, rax
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x18006aa27
mov r8d, 0x10
nop
add rcx, r8
and rcx, r13
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x18006aa10
mov r9, qword [rsp + 0x20]
tzcnt edx, edx
add rdx, rcx
and rdx, r13
cmp byte [rdi + rdx], 0
js 0x18006a960
movdqa xmm0, xmmword [rdi]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x18006a960
mov rax, qword [rsp + 0x38]
mov r14, qword [rsp + 0x30]
jmp 0x18006aa6c
mov r9, qword [rsp + 0x20]
mov rax, qword [r9]
mov qword [rsp + 0x28], rax
xor eax, eax
sub r14, rax
mov qword [r9], rdi
mov qword [r9 + 8], r13
mov qword [r9 + 0x10], r14
mov qword [r9 + 0x18], rax
test r15, r15
je 0x18006b1f5
mov rax, r15
shl rax, 5
add r15, rax
cmp r15, 0xffffffffffffffcf
je 0x18006b1f5
mov r8, qword [rsp + 0x28]
sub r8, rax
add r8, 0xffffffffffffffe0
mov rcx, qword [0x183469f98]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x18006b1f5
movabs rdx, 0x1ffffffffffffffe
and rdx, rax
xor ecx, ecx
movdqa xmm0, xmmword [0x18006d480]
nop word cs:[rax + rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rdi + rcx]
por xmm1, xmm0
movdqa xmmword [rdi + rcx], xmm1
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rdi + rcx + 0x10]
por xmm1, xmm0
movdqa xmmword [rdi + rcx + 0x10], xmm1
add rcx, 0x20
add rdx, 0xfffffffffffffffe
jne 0x18006aae0
test al, 1
je 0x18006ab2a
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rdi + rcx]
por xmm0, xmmword [0x18006d480]
movdqa xmmword [rdi + rcx], xmm0
cmp rbx, 0x10
jae 0x18006ab50
lea rcx, [rdi + 0x10]
mov rdx, rdi
mov r8, rbx
call sub.VCRUNTIME140.dll_memmove
mov r9, qword [rsp + 0x20]
test rbx, rbx
jne 0x18006ab59
xor eax, eax
jmp 0x18006b1ee
movdqu xmm0, xmmword [rdi]
movdqu xmmword [rdi + rbx], xmm0
pshufd xmm0, xmm6, 0x44
pxor xmm0, xmmword [0x18006d490]
pshufd xmm1, xmm6, 0xee
pxor xmm1, xmmword [0x18006d4a0]
pshufd xmm2, xmm1, 0xee
movq qword [rsp + 0x28], xmm2
movq qword [rsp + 0x38], xmm0
movq qword [rsp + 0x30], xmm1
pshufd xmm2, xmm0, 0xee
movq r10, xmm2
xor ecx, ecx
xor r14d, r14d
jmp 0x18006abc5
shr rbx, 0x39
lea rax, [r14 - 0x10]
and rax, r15
mov byte [rdi + r14], bl
mov byte [rdi + rax + 0x10], bl
xor ecx, ecx
lea rax, [r14 + 1]
cmp r14, r15
mov r14, rax
je 0x18006b1cc
cmp cl, byte [rdi + r14]
jno 0x18006abb5
mov rax, r14
shl rax, 5
mov r12, rdi
sub r12, rax
add r12, 0xffffffffffffffe0
mov r13, r14
neg r13
shl r13, 5
mov rax, rdi
nop dword [rax]
mov r11, qword [rax + r13 - 0x18]
mov rbp, qword [rax + r13 - 0x10]
mov rcx, rbp
and rcx, 0xfffffffffffffff8
je 0x18006acb0
mov rax, r10
mov rsi, qword [rsp + 0x30]
mov r8, qword [rsp + 0x28]
xor ebx, ebx
mov rdx, qword [rsp + 0x38]
nop dword [rax + rax]
mov r9, qword [r11 + rbx]
xor r8, r9
add rdx, rsi
rol rsi, 0xd
add rax, r8
xor rsi, rdx
rol r8, 0x10
xor r8, rax
rol rdx, 0x20
add rax, rsi
add rdx, r8
rol rsi, 0x11
xor rsi, rax
rol r8, 0x15
rol rax, 0x20
xor r8, rdx
xor rdx, r9
add rbx, 8
cmp rbx, rcx
jb 0x18006ac20
movq xmm3, r8
movq xmm2, rsi
punpcklqdq xmm2, xmm3
movq xmm4, rax
movq xmm3, rdx
punpcklqdq xmm3, xmm4
mov r9, qword [rsp + 0x20]
mov esi, ebp
and esi, 7
cmp esi, 4
jb 0x18006acc4
mov edx, dword [r11 + rbx]
mov eax, 4
mov ecx, eax
or ecx, 1
cmp ecx, esi
jb 0x18006acd1
jmp 0x18006aceb
movdqa xmm2, xmm1
movdqa xmm3, xmm0
xor ebx, ebx
mov esi, ebp
and esi, 7
cmp esi, 4
jae 0x18006ac8e
xor edx, edx
xor eax, eax
mov ecx, eax
or ecx, 1
cmp ecx, esi
jae 0x18006aceb
lea rcx, [r11 + rax]
movzx r8d, word [rbx + rcx]
lea ecx, [rax*8]
shl r8, cl
or rdx, r8
or rax, 2
cmp eax, esi
jae 0x18006ad10
add rbx, rax
movzx r8d, byte [r11 + rbx]
shl eax, 3
mov ecx, eax
shl r8, cl
or rdx, r8
jmp 0x18006ad19
test rsi, rsi
je 0x18006adaa
lea ecx, [rsi*8]
mov ebx, 0xff
shl rbx, cl
or rbx, rdx
cmp rsi, 7
jne 0x18006adb0
pshufd xmm4, xmm2, 0xee
movq rcx, xmm4
xor rcx, rbx
movq r8, xmm2
paddq xmm2, xmm3
movq rax, xmm2
pshufd xmm2, xmm3, 0xee
movq rdx, xmm2
add rdx, rcx
rol r8, 0xd
xor r8, rax
rol rcx, 0x10
xor rcx, rdx
rol rax, 0x20
add rdx, r8
add rax, rcx
rol r8, 0x11
rol rcx, 0x15
xor r8, rdx
xor rcx, rax
movq xmm3, rcx
movq xmm2, r8
punpcklqdq xmm2, xmm3
rol rdx, 0x20
xor rax, rbx
movq xmm4, rdx
movq xmm3, rax
punpcklqdq xmm3, xmm4
xor ebx, ebx
jmp 0x18006adb0
mov ebx, 0xff
nop
pshufd xmm4, xmm3, 0xee
movq rax, xmm4
movq rcx, xmm2
pshufd xmm4, xmm2, 0xee
movq r11, xmm4
shl rbp, 0x38
movabs rdx, 0x100000000000000
add rbp, rdx
or rbp, rbx
xor r11, rbp
paddq xmm2, xmm3
movq rbx, xmm2
rol rcx, 0xd
add rax, r11
xor rcx, rbx
rol r11, 0x10
xor r11, rax
rol rbx, 0x20
add rax, rcx
add rbx, r11
rol rcx, 0x11
xor rcx, rax
rol r11, 0x15
rol rax, 0x20
xor r11, rbx
xor rbx, rbp
xor rax, 0xff
add rbx, rcx
add rax, r11
rol rcx, 0xd
xor rcx, rbx
rol r11, 0x10
rol rbx, 0x20
xor r11, rax
add rax, rcx
rol rcx, 0x11
add rbx, r11
xor rcx, rax
rol r11, 0x15
xor r11, rbx
rol rax, 0x20
add rbx, rcx
add rax, r11
rol rcx, 0xd
xor rcx, rbx
rol r11, 0x10
rol rbx, 0x20
xor r11, rax
add rax, rcx
rol rcx, 0x11
add rbx, r11
xor rcx, rax
rol r11, 0x15
xor r11, rbx
rol rax, 0x20
add rbx, rcx
add rax, r11
rol rcx, 0xd
xor rcx, rbx
rol r11, 0x10
xor r11, rax
add rax, rcx
rol rcx, 0x11
rol r11, 0x15
mov rbx, rax
rol rbx, 0x20
xor rbx, rcx
xor rbx, r11
xor rbx, rax
mov rax, r15
and rax, rbx
movdqu xmm2, xmmword [rdi + rax]
pmovmskb ecx, xmm2
mov rdx, rax
test ecx, ecx
jne 0x18006aee7
mov r8d, 0x10
mov rdx, rax
nop dword [rax]
add rdx, r8
and rdx, r15
movdqu xmm2, xmmword [rdi + rdx]
pmovmskb ecx, xmm2
add r8, 0x10
test ecx, ecx
je 0x18006aed0
tzcnt ecx, ecx
add rcx, rdx
and rcx, r15
cmp byte [rdi + rcx], 0
js 0x18006af03
movdqa xmm2, xmmword [rdi]
pmovmskb ecx, xmm2
tzcnt ecx, ecx
mov rdx, r14
sub rdx, rax
mov r8, rcx
sub r8, rax
xor r8, rdx
and r8, r15
cmp r8, 0x10
jb 0x18006aba0
mov rax, rcx
shl rax, 5
neg rax
add rax, rdi
add rax, 0xffffffffffffffe0
movzx edx, byte [rdi + rcx]
shr rbx, 0x39
lea r8, [rcx - 0x10]
and r8, r15
mov byte [rdi + rcx], bl
mov byte [rdi + r8 + 0x10], bl
cmp dl, 0xff
je 0x18006b1a0
movzx ecx, byte [r12]
movzx edx, byte [rax]
mov byte [r12], dl
mov byte [rax], cl
movzx ecx, byte [r12 + 1]
movzx edx, byte [rax + 1]
mov byte [r12 + 1], dl
mov byte [rax + 1], cl
movzx ecx, byte [r12 + 2]
movzx edx, byte [rax + 2]
mov byte [r12 + 2], dl
mov byte [rax + 2], cl
movzx ecx, byte [r12 + 3]
movzx edx, byte [rax + 3]
mov byte [r12 + 3], dl
mov byte [rax + 3], cl
movzx ecx, byte [r12 + 4]
movzx edx, byte [rax + 4]
mov byte [r12 + 4], dl
mov byte [rax + 4], cl
movzx ecx, byte [r12 + 5]
movzx edx, byte [rax + 5]
mov byte [r12 + 5], dl
mov byte [rax + 5], cl
movzx ecx, byte [r12 + 6]
movzx edx, byte [rax + 6]
mov byte [r12 + 6], dl
mov byte [rax + 6], cl
movzx ecx, byte [r12 + 7]
movzx edx, byte [rax + 7]
mov byte [r12 + 7], dl
mov byte [rax + 7], cl
movzx ecx, byte [r12 + 8]
movzx edx, byte [rax + 8]
mov byte [r12 + 8], dl
mov byte [rax + 8], cl
movzx ecx, byte [r12 + 9]
movzx edx, byte [rax + 9]
mov byte [r12 + 9], dl
mov byte [rax + 9], cl
movzx ecx, byte [r12 + 0xa]
movzx edx, byte [rax + 0xa]
mov byte [r12 + 0xa], dl
mov byte [rax + 0xa], cl
movzx ecx, byte [r12 + 0xb]
movzx edx, byte [rax + 0xb]
mov byte [r12 + 0xb], dl
mov byte [rax + 0xb], cl
movzx ecx, byte [r12 + 0xc]
movzx edx, byte [rax + 0xc]
mov byte [r12 + 0xc], dl
mov byte [rax + 0xc], cl
movzx ecx, byte [r12 + 0xd]
movzx edx, byte [rax + 0xd]
mov byte [r12 + 0xd], dl
mov byte [rax + 0xd], cl
movzx ecx, byte [r12 + 0xe]
movzx edx, byte [rax + 0xe]
mov byte [r12 + 0xe], dl
mov byte [rax + 0xe], cl
movzx ecx, byte [r12 + 0xf]
movzx edx, byte [rax + 0xf]
mov byte [r12 + 0xf], dl
mov byte [rax + 0xf], cl
movzx ecx, byte [r12 + 0x10]
movzx edx, byte [rax + 0x10]
mov byte [r12 + 0x10], dl
mov byte [rax + 0x10], cl
movzx ecx, byte [r12 + 0x11]
movzx edx, byte [rax + 0x11]
mov byte [r12 + 0x11], dl
mov byte [rax + 0x11], cl
movzx ecx, byte [r12 + 0x12]
movzx edx, byte [rax + 0x12]
mov byte [r12 + 0x12], dl
mov byte [rax + 0x12], cl
movzx ecx, byte [r12 + 0x13]
movzx edx, byte [rax + 0x13]
mov byte [r12 + 0x13], dl
mov byte [rax + 0x13], cl
movzx ecx, byte [r12 + 0x14]
movzx edx, byte [rax + 0x14]
mov byte [r12 + 0x14], dl
mov byte [rax + 0x14], cl
movzx ecx, byte [r12 + 0x15]
movzx edx, byte [rax + 0x15]
mov byte [r12 + 0x15], dl
mov byte [rax + 0x15], cl
movzx ecx, byte [r12 + 0x16]
movzx edx, byte [rax + 0x16]
mov byte [r12 + 0x16], dl
mov byte [rax + 0x16], cl
movzx ecx, byte [r12 + 0x17]
movzx edx, byte [rax + 0x17]
mov byte [r12 + 0x17], dl
mov byte [rax + 0x17], cl
movzx ecx, byte [r12 + 0x18]
movzx edx, byte [rax + 0x18]
mov byte [r12 + 0x18], dl
mov byte [rax + 0x18], cl
movzx ecx, byte [r12 + 0x19]
movzx edx, byte [rax + 0x19]
mov byte [r12 + 0x19], dl
mov byte [rax + 0x19], cl
movzx ecx, byte [r12 + 0x1a]
movzx edx, byte [rax + 0x1a]
mov byte [r12 + 0x1a], dl
mov byte [rax + 0x1a], cl
movzx ecx, byte [r12 + 0x1b]
movzx edx, byte [rax + 0x1b]
mov byte [r12 + 0x1b], dl
mov byte [rax + 0x1b], cl
movzx ecx, byte [r12 + 0x1c]
movzx edx, byte [rax + 0x1c]
mov byte [r12 + 0x1c], dl
mov byte [rax + 0x1c], cl
movzx ecx, byte [r12 + 0x1d]
movzx edx, byte [rax + 0x1d]
mov byte [r12 + 0x1d], dl
mov byte [rax + 0x1d], cl
movzx ecx, byte [r12 + 0x1e]
movzx edx, byte [rax + 0x1e]
mov byte [r12 + 0x1e], dl
mov byte [rax + 0x1e], cl
movzx ecx, byte [r12 + 0x1f]
movzx edx, byte [rax + 0x1f]
mov byte [r12 + 0x1f], dl
mov byte [rax + 0x1f], cl
mov rax, qword [r9]
jmp 0x18006abf0
lea rcx, [r14 - 0x10]
and rcx, r15
mov byte [rdi + r14], 0xff
mov byte [rdi + rcx + 0x10], 0xff
movdqu xmm2, xmmword [r12]
movdqu xmm3, xmmword [r12 + 0x10]
movdqu xmmword [rax + 0x10], xmm3
movdqu xmmword [rax], xmm2
jmp 0x18006abb3
mov rcx, qword [r9 + 8]
mov rbp, qword [r9 + 0x18]
lea rax, [rcx + 1]
mov rdx, rax
shr rdx, 3
and rax, 0xfffffffffffffff8
sub rax, rdx
cmp rcx, 8
cmovb rax, rcx
sub rax, rbp
mov qword [r9 + 0x10], rax
movabs rax, 0x8000000000000001
movaps xmm6, xmmword [rsp + 0x50]
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.180006c60
mov rcx, r14
call fcn.180006ca0
int3