Function at 0x18006fb60
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov qword [rsp + 0x28], rcx
xor ebp, ebp
lea rdi, [0x1802b3fc0]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x1802b41f0], 0
je 0x18006fd16
mov r15, qword [0x1802b3fc0]
mov rbx, qword [r15 + 8]
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x38], ebp
mov r14, r15
mov r12, qword [0x1802b3f98]
mov rsi, qword [0x1802b3f90]
mov r13, qword [0x1802b3f80]
cmp byte [rbx + 0x19], 0
jne 0x18006fc36
mov qword [rsp + 0x30], rbx
lea rcx, [rbx + 0x20]
lea rdx, [0x1802b3f80]
cmp r12, 0xf
cmova rdx, r13
mov rdi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x18006fc06
mov rcx, qword [rcx]
mov r8, rdi
cmp rsi, rdi
cmovb r8, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18006fc79
js 0x18006fc7e
mov dword [rsp + 0x38], 1
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x18006fbe0
lea rdi, [0x1802b3fc0]
cmp byte [r14 + 0x19], 0
jne 0x18006fc91
lea rdx, [r14 + 0x20]
mov rbx, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x18006fc4f
mov rdx, qword [rdx]
lea rcx, [0x1802b3f80]
cmp r12, 0xf
cmova rcx, r13
mov r8, rsi
cmp rbx, rsi
cmovb r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18006fc88
jns 0x18006fb95
jmp 0x18006fc91
cmp rdi, rsi
jae 0x18006fc1b
mov dword [rsp + 0x38], ebp
mov rbx, qword [rbx + 0x10]
jmp 0x18006fc29
cmp rsi, rbx
jae 0x18006fb95
movabs rax, 0x38e38e38e38e38e
cmp qword [0x1802b3fc8], rax
je 0x18006fd10
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rbp
mov ecx, 0x48
call fcn.18012e4dc
mov rdi, rax
mov qword [rsp + 0x58], rax
lea rdx, [0x1802b3f80]
lea rcx, [rax + 0x20]
call fcn.18004fff0
mov byte [rdi + 0x40], 0
mov qword [rdi], r15
mov qword [rdi + 8], r15
mov qword [rdi + 0x10], r15
mov word [rdi + 0x18], 0
mov qword [rsp + 0x58], rbp
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x30], xmm0
mov r8, rdi
lea rdx, [rsp + 0x30]
lea rdi, [0x1802b3fc0]
mov rcx, rdi
call fcn.18001e330
jmp 0x18006fb95
call fcn.18001e5b0
int3
mov rbx, qword [rsp + 0x28]
mov rbx, qword [rbx]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x20]
call fcn.18006fed0
mov r9, rax
cmp byte [rax + 0x28], 0
je 0x18006fe9d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x18006fe62
movdqa xmm5, xmmword [0x18013cb90]
movdqa xmm4, xmmword [0x180143550]
movdqa xmm6, xmmword [str.6666]
movdqa xmm0, xmmword [str.5555555555555555]
movdqa xmmword [rsp + 0x30], xmm0
mov rcx, rax
movdqa xmm7, xmmword [0x180143490]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, ebp
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rbp + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add ebp, 8
lea rcx, [rcx + 8]
cmp ebp, 0x28
jl 0x18006fd80
cmp ebp, 0x29
jge 0x18006fe9d
movsxd r8, ebp
add r8, r9
nop dword [rax + rax]
mov eax, 0x4bda12f7
imul ebp
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, bpl
sub al, cl
add al, 0x35
xor byte [r8], al
inc ebp
lea r8, [r8 + 1]
cmp ebp, 0x29
jl 0x18006fe70
mov rdx, r9
lea rcx, [rsp + 0x30]
call fcn.180050110
mov rdx, rax
mov rcx, rbx
call fcn.180079b60
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3