Function at 0x1800b6f80
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0x100
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
mov rax, qword [0x18030b348]
xor rax, rsp
mov qword [rbp + 0x27], rax
xor r14d, r14d
mov dword [rbp - 0x71], r14d
xor r9d, r9d
lea r8, [rbp - 0x59]
xor edx, edx
lea rbx, [0x18030e1f8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
test eax, eax
je 0x1800b78cf
lea rdi, [r14 - 1]
cmp dword [rbp - 0x59], r14d
je 0x1800b708e
mov qword [rbp - 0x69], rbx
mov dword [rbp - 0x61], 4
movdqa xmm0, xmmword [0x180159ac0]
movdqu xmmword [rbp - 0x51], xmm0
mov dword [rbp - 0x41], 0xecd4b9b6
mov word [rbp - 0x3d], 0xfb
mov byte [rbp - 0x3b], 1
mov ecx, r14d
nop word [rax + rax]
lea eax, [rcx - 0x7a]
xor byte [rbp + rcx - 0x51], al
inc rcx
cmp rcx, 0x15
jb 0x1800b7020
mov byte [rbp - 0x3b], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], r14
mov qword [rbp - 0x21], r14
lea rax, [rbp - 0x51]
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1800b7050
lea rdx, [rbp - 0x51]
lea rcx, [rbp - 0x39]
call fcn.18005b910
lea rdx, [rbp - 0x39]
lea rcx, [0x18030e0e0]
call fcn.1800b9e70
nop
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_InitOnceComplete]
test eax, eax
je 0x1800b78d5
mov dword [rbp - 0x69], 0xf1cda4a5
mov dword [rbp - 0x65], 0xf9f9e8ef
mov dword [rbp - 0x61], 0xf7f6fde1
mov word [rbp - 0x5d], 0xf3
mov byte [rbp - 0x5b], 1
mov rcx, r14
lea eax, [rcx - 0x7a]
xor byte [rbp + rcx - 0x69], al
inc rcx
cmp rcx, 0xd
jb 0x1800b70b0
mov byte [rbp - 0x5b], 0
xor edx, edx
lea r8d, [rdx + 0xb]
lea rcx, [rbp - 0x69]
call fcn.18001b9d0
mov dword [rbp - 0x69], 0xa9e9f2ca
mov dword [rbp - 0x65], 0xeee9f3cf
mov dword [rbp - 0x61], 0xe3fffbfb
mov word [rbp - 0x5d], 0x100
mov rcx, r14
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x7a]
xor byte [rbp + rcx - 0x69], al
inc rcx
cmp rcx, 0xc
jb 0x1800b7100
mov byte [rbp - 0x5c], 0
call fcn.180058a40
lea rcx, [rbp - 0x79]
call fcn.1800235c0
movss xmm6, dword [rax]
movss xmm7, dword [0x18012b67c]
movss dword [rsp + 0x20], xmm7
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x59]
call fcn.18001f190
mulss xmm6, dword [0x18012b5e8]
movss xmm2, dword [rax]
mulss xmm2, dword [0x18012b5e8]
subss xmm6, xmm2
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.18002ff00
lea rcx, [rbp - 0x69]
call fcn.180058c90
call fcn.180058a40
mov ecx, 1
call fcn.1800b65b0
mov dword [rbp - 0x59], 0x44480000
mov dword [rbp - 0x55], 0x43fa0000
xor edx, edx
lea rcx, [rbp - 0x59]
call fcn.1800311f0
mov ecx, dword [0x18030e868]
mov rax, qword gs:[0x58]
mov edx, 4
mov rax, qword [rax + rcx*8]
mov eax, dword [rdx + rax]
cmp dword [0x18030e550], eax
jg 0x1800b788c
call fcn.180067c50
mov rdx, rax
lea rcx, [0x18030e200]
call fcn.18006b570
mov byte [0x18030e27b], 0
call fcn.180065530
mov rdx, rax
lea rcx, [0x18030e200]
call fcn.18006b7d0
xor edx, edx
lea rcx, [0x18030e200]
call fcn.18006b810
lea rcx, [rbp - 0x79]
call fcn.1800235c0
movss xmm6, dword [rax + 4]
subss xmm6, dword [0x18012b7f0]
lea rcx, [rbp - 0x69]
call fcn.1800235c0
movss xmm0, dword [rax]
movss dword [rbp - 0x59], xmm0
movss dword [rbp - 0x55], xmm6
xor r9d, r9d
lea r8, [rbp - 0x59]
lea rdx, str.TextEditor
lea rcx, [0x18030e200]
call fcn.18006af90
mov qword [rbp - 0x59], 0
mov dword [rbp - 0x69], 0xfbe9c4a6
mov dword [rbp - 0x65], 0xecebeef8
mov dword [rbp - 0x61], 0xfef3affc
mov dword [rbp - 0x5d], 0x100f6f6
mov rcx, r14
nop dword [rax]
lea eax, [rcx - 0x7a]
xor byte [rbp + rcx - 0x69], al
inc rcx
cmp rcx, 0xe
jb 0x1800b7270
mov byte [rbp - 0x5a], 0
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x69]
call fcn.18004c8f0
test al, al
je 0x1800b72ad
lea rdx, [rbp - 0x19]
lea rcx, [0x18030e200]
call fcn.180065b80
mov rcx, rax
call fcn.1800c0880
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002ff00
mov qword [rbp - 0x59], 0
mov dword [rbp - 0x69], 0xe4e1cba6
mov dword [rbp - 0x65], 0xfeeafa
mov byte [rbp - 0x61], 1
mov rcx, r14
nop word [rax + rax]
lea eax, [rcx - 0x7a]
xor byte [rbp + rcx - 0x69], al
inc rcx
cmp rcx, 7
jb 0x1800b72e0
mov byte [rbp - 0x61], 0
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x69]
call fcn.18004c8f0
test al, al
je 0x1800b7393
mov byte [0x18030d980], 0
xor r8d, r8d
lea rdx, [0x180166c2b]
lea rcx, [0x18030af38]
call fcn.18000a5a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], r14
mov qword [rbp - 0x21], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x39], 0
lea rdx, [rbp - 0x39]
lea rcx, [0x18030e200]
call fcn.18006bc80
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 0x10
jb 0x1800b738c
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b7387
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800b7387
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18011f9bc
mov byte [0x18030ce3a], 0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002ff00
mov qword [rbp - 0x79], 0
mov dword [rbp - 0x59], 0xfcc4a9a6
mov word [rbp - 0x55], 0xeb
mov byte [rbp - 0x53], 1
mov rcx, r14
nop word [rax + rax]
lea eax, [rcx - 0x7a]
xor byte [rbp + rcx - 0x59], al
inc rcx
cmp rcx, 5
jb 0x1800b73c0
mov byte [rbp - 0x53], 0
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x59]
call fcn.18004c8f0
test al, al
je 0x1800b7624
mov dword [rbp - 0x59], 0xe8fdeba8
mov word [rbp - 0x55], 0x100
mov rcx, r14
nop dword [rax]
lea eax, [rcx - 0x7a]
xor byte [rbp + rcx - 0x59], al
inc rcx
cmp rcx, 4
jb 0x1800b7400
mov byte [rbp - 0x54], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
lea rax, [rbp - 0x59]
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1800b7430
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x19]
call fcn.18005b910
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x51], xmm0
mov qword [rbp - 0x41], r14
mov edx, 1
lea rcx, [rbp - 0x51]
call fcn.180014480
mov qword [rbp - 0x51], rax
mov qword [rbp - 0x49], rax
lea rbx, [rax + 0x20]
mov qword [rbp - 0x41], rbx
lea rcx, [rbp - 0x51]
mov qword [rbp - 0x69], rcx
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x31], rax
lea rcx, [rbp - 0x51]
mov qword [rbp - 0x29], rcx
lea rdx, [rbp - 0x19]
mov rcx, rax
call fcn.1800099a0
nop
mov qword [rbp - 0x49], rbx
lea rdx, [rbp - 0x51]
lea rcx, [0x18030e0e0]
call fcn.1800ba3b0
nop
mov rbx, qword [rbp - 0x51]
test rbx, rbx
je 0x1800b755b
mov rsi, qword [rbp - 0x49]
cmp rbx, rsi
je 0x1800b7514
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x1800b74f8
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1800b74f3
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b7540
mov rcx, r8
call fcn.18011f9bc
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
add rbx, 0x20
cmp rbx, rsi
jne 0x1800b74c2
mov rbx, qword [rbp - 0x51]
mov rdx, qword [rbp - 0x41]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x1800b7547
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800b7547
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.18011f9bc
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x51], xmm0
mov qword [rbp - 0x41], r14
lea r9, [fcn.180009870]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx - 0x1f]
lea rcx, [rbp - 0x19]
call fcn.18011fbc8
mov rbx, qword [0x18030e198]
mov r8, qword [rbx + 8]
lea rdx, [0x18030e198]
lea rcx, [0x18030e198]
call fcn.18009f620
mov qword [rbx + 8], rbx
mov qword [rbx], rbx
mov qword [rbx + 0x10], rbx
mov qword [0x18030e1a0], r14
mov rax, qword [0x18030e1c0]
mov byte [rax], 0
mov byte [0x18030e133], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
movdqa xmm6, xmmword [0x1801340d0]
mov byte [rbp - 0x19], 0
mov rdx, qword [0x18030e150]
cmp rdx, 0x10
jb 0x1800b7609
mov rcx, qword [0x18030e138]
inc rdx
cmp rdx, 0x1000
jb 0x1800b7604
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b7841
mov rcx, r8
call fcn.18011f9bc
movups xmm0, xmmword [rbp - 0x19]
movups xmmword [0x18030e138], xmm0
movups xmmword [0x18030e148], xmm6
mov word [0x18030e130], 1
call fcn.180020ab0
cmp byte [0x18030e133], 0
je 0x1800b784d
cmp qword [0x18030e1a0], 0
jne 0x1800b7652
lea rdx, [0x18030e178]
lea rcx, [rbp - 0x39]
call fcn.1800ac130
jmp 0x1800b7681
mov rax, qword [0x18030e198]
mov rbx, qword [rax]
lea rdx, [0x18030e178]
lea rcx, [rbp - 0x39]
call fcn.1800ac130
mov dword [rbp - 0x71], 2
lea rdx, [rbx + 0x20]
lea rcx, [rbp - 0x39]
call fcn.1800b1690
nop
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x39]
call fcn.1800c9620
mov rdx, rax
lea rcx, [0x18030afb8]
call fcn.1800098d0
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x1800b76db
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b76d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800b76d6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18011f9bc
movdqa xmm0, xmmword [0x1801340d0]
movdqu xmmword [rbp - 9], xmm0
mov byte [rbp - 0x19], 0
lea rcx, [rbp - 0x39]
call fcn.180009570
mov rbx, qword [0x18030e198]
mov r8, qword [rbx + 8]
lea rdx, [0x18030e198]
lea rcx, [0x18030e198]
call fcn.18009f620
mov qword [rbx + 8], rbx
mov qword [rbx], rbx
mov qword [rbx + 0x10], rbx
mov qword [0x18030e1a0], r14
mov rax, qword [0x18030e1c0]
mov byte [rax], 0
mov byte [0x18030e133], 0
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
movdqa xmm6, xmmword [0x1801340d0]
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
lea rdx, [0x18030afb8]
lea rcx, [rbp - 0x19]
call fcn.1800b67f0
lea rcx, [rbp + 7]
cmp rcx, rax
je 0x1800b7786
movups xmm0, xmmword [rax]
movups xmmword [rbp + 7], xmm0
movups xmm6, xmmword [rax + 0x10]
movdqu xmmword [rbp + 0x17], xmm6
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x1800b77c4
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b77bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800b77bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18011f9bc
lea rdx, [rbp + 7]
psrldq xmm6, 8
movq rax, xmm6
cmp rax, 0x10
cmovae rdx, qword [rbp + 7]
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], r14
mov qword [rbp - 0x21], r14
nop word [rax + rax]
inc rdi
cmp byte [rdx + rdi], 0
jne 0x1800b77f0
mov r8, rdi
lea rcx, [rbp - 0x39]
call fcn.18005b910
lea rcx, [rbp - 0x39]
call fcn.1800c0880
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0x10
jb 0x1800b784d
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b7848
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800b7848
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18011f9bc
lea rcx, [0x18030e0e0]
call fcn.1800b29f0
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.18011fa50
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop rbp
ret
lea rcx, [0x18030e550]
call fcn.1801200c0
cmp dword [0x18030e550], 0xffffffff
jne 0x1800b71c2
lea rcx, [0x18030e200]
call fcn.18005f3a0
lea rcx, [0x180125180]
call fcn.180120000
nop
lea rcx, [0x18030e550]
call fcn.180120054
jmp 0x1800b71c2
call sub.api_ms_win_crt_runtime_l1_1_0.dll_abort
int3
call fcn.18011ee70
int3