Function at 0x18005f8c0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xc88
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xc00], 0xfffffffffffffffe
mov rdi, r8
mov rsi, rcx
lea rcx, [rbp + 0x3a8]
call fcn.18005f340
cmp dword [rbp + 0x3a8], 1
lea rdx, [rbp + 0x3b0]
jne 0x18005f92e
mov rax, qword [rdx + 0x10]
mov qword [rbp - 0x50], rax
movups xmm0, xmmword [rdx]
movaps xmmword [rbp - 0x60], xmm0
mov qword [rsi + 0x18], rax
movups xmmword [rsi + 8], xmm0
mov qword [rsi], 1
mov rax, rsi
jmp 0x18005f9f2
mov qword [rbp + 0xbf8], rsi
lea rbx, [rbp - 0x60]
mov r8d, 0x400
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rsi, [rbp + 0x7b0]
mov r8d, 0x400
mov rcx, rsi
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbp + 0x3a8]
mov rdx, rsi
xor r8d, r8d
call fcn.18005f520
cmp dword [rbp + 0x3a8], 1
je 0x18005f9b8
lea rcx, [rbp + 0x3a8]
lea rdx, [rbp + 0x7b0]
xor r8d, r8d
call fcn.18005f520
cmp dword [rbp + 0x3a8], 1
je 0x18005f9b8
lea rcx, [rbp + 0x3a8]
lea rdx, [rbp + 0x7b0]
xor r8d, r8d
call fcn.18005f520
cmp dword [rbp + 0x3a8], 1
jne 0x18005fa06
mov rax, qword [rbp + 0x3c0]
mov rcx, qword [rbp + 0xbf8]
mov qword [rcx + 0x18], rax
mov rax, rcx
movups xmm0, xmmword [rbp + 0x3b0]
movups xmmword [rcx + 8], xmm0
mov qword [rax], 1
lea rcx, [rbp + 0x7b0]
call fcn.180061260
mov rax, qword [rbp + 0xbf8]
add rsp, 0xc88
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x18005fd13
mov rcx, qword [rdi]
lea rax, [rax + rax*2]
lea rax, [rcx + rax*8]
mov qword [rbp + 0xbd8], rax
xor eax, eax
mov qword [rbp + 0xbe0], rax
jmp 0x18005fa50
mov rcx, qword [rbp + 0xbc8]
add rcx, 0x18
add qword [rbp + 0xbe0], 1
cmp rcx, qword [rbp + 0xbd8]
je 0x18005fd13
mov rsi, qword [rcx]
mov qword [rbp + 0xbc8], rcx
mov rcx, qword [rcx + 0x10]
mov rax, qword [rbp + 0xa50]
cmp rax, rcx
cmovbe rax, rcx
mov qword [rbp + 0xa50], rax
add qword [rbp + 0xa58], 1
mov ebx, dword [rbp + 0xa90]
test rcx, rcx
mov qword [rbp + 0xbd0], rsi
mov qword [rbp + 0xbf0], rcx
je 0x18005fc64
lea rax, [rsi + rcx]
mov qword [rbp + 0xbe8], rax
xor edi, edi
xor r14d, r14d
jmp 0x18005fac1
add rsi, 1
cmp rsi, qword [rbp + 0xbe8]
je 0x18005fc64
mov r12b, byte [rsi]
mov r15d, ebx
test dil, 1
mov dil, 1
jne 0x18005faf5
mov rdx, qword [rbp + 0xa88]
cmp rdx, r15
jbe 0x1800600aa
mov rax, qword [rbp + 0xa78]
lea rcx, [r15 + r15*8]
cmp qword [rax + rcx*8 + 0x30], 0
setne dil
mov rcx, qword [rbp + 0x7b0]
add rcx, 8
call fcn.180066930
test al, dil
jne 0x18005fa30
lea rcx, [rbp + 0xb98]
mov edx, r12d
mov r8d, r12d
call fcn.180069670
mov rax, qword [rbp + 0x7b0]
cmp byte [rax + 0xb], 0
je 0x18005fb46
mov ecx, r12d
call fcn.180068a00
lea rcx, [rbp + 0xb98]
mov edx, eax
mov r8d, eax
call fcn.180069670
mov rdx, qword [rbp + 0xa88]
cmp rdx, r15
jbe 0x180060088
add r14, 1
mov rdx, qword [rbp + 0xa78]
lea r13, [r15 + r15*8]
cmp dword [rdx + r13*8], 1
lea rax, [rdx + r13*8 + 8]
jne 0x18005fba0
movzx ecx, r12b
mov rdx, qword [rdx + r13*8 + 0x18]
cmp rdx, rcx
jbe 0x1800600bb
shl rcx, 2
add rcx, qword [rax]
mov ebx, dword [rcx]
test ebx, ebx
jne 0x18005fab0
jmp 0x18005fbd0
mov rbx, qword [rax]
mov rax, qword [rdx + r13*8 + 0x18]
lea rax, [rbx + rax*8]
nop dword [rax]
cmp rbx, rax
je 0x18005fbd0
mov rcx, rbx
add rbx, 8
cmp byte [rcx], r12b
jne 0x18005fbb0
add rcx, 4
mov ebx, dword [rcx]
test ebx, ebx
jne 0x18005fab0
nop
lea rcx, [rbp + 0x3a8]
lea rdx, [rbp + 0x7b0]
mov r8, r14
call fcn.18005f520
cmp dword [rbp + 0x3a8], 1
je 0x18005fcf4
mov rdx, qword [rbp + 0xa88]
cmp rdx, r15
jbe 0x180060099
mov ebx, dword [rbp + 0x3ac]
shl r13, 3
mov rcx, qword [rbp + 0xa78]
add rcx, r13
mov edx, r12d
mov r8d, ebx
call fcn.18005de10
mov rax, qword [rbp + 0x7b0]
cmp byte [rax + 0xb], 0
je 0x18005fab0
mov ecx, r12d
call fcn.180068a00
mov rdx, qword [rbp + 0xa88]
cmp rdx, r15
jbe 0x1800600c9
add r13, qword [rbp + 0xa78]
mov rcx, r13
mov edx, eax
mov r8d, ebx
call fcn.18005de10
jmp 0x18005fab0
mov ecx, ebx
mov rdx, qword [rbp + 0xa88]
cmp rdx, rcx
jbe 0x1800600da
mov rax, qword [rbp + 0xa78]
lea rcx, [rcx + rcx*8]
lea rbx, [rax + rcx*8]
add rbx, 0x20
mov rdx, qword [rax + rcx*8 + 0x30]
cmp rdx, qword [rax + rcx*8 + 0x28]
jne 0x18005fca1
mov rcx, rbx
call fcn.18002b880
mov rdx, qword [rbx + 0x10]
mov rax, qword [rbx]
shl rdx, 4
mov rcx, qword [rbp + 0xbe0]
mov qword [rax + rdx], rcx
mov rcx, qword [rbp + 0xbf0]
mov qword [rax + rdx + 8], rcx
add qword [rbx + 0x10], 1
mov rax, qword [rbp + 0x7b0]
cmp byte [rax + 9], 0
je 0x18005fa30
lea rcx, [rbp + 0x7b8]
mov rdx, qword [rbp + 0xbd0]
mov r8, qword [rbp + 0xbf0]
call fcn.180067400
jmp 0x18005fa30
mov rax, qword [rbp + 0x3b0]
movups xmm0, xmmword [rbp + 0x3b8]
movaps xmmword [rbp + 0xbb0], xmm0
cmp rax, 2
jne 0x18005fdb0
lea rcx, [rbp + 0x7b0]
call fcn.18005df10
mov rdx, qword [rbp + 0xa88]
cmp rdx, 1
jbe 0x1800600e8
mov rbx, qword [rbp + 0xa78]
call fcn.180005ef0
lea r14, [rbp + 0xa50]
add rbx, 0x48
mov word [rbp + 0x3a8], ax
lea rdi, [rbp + 0x3a8]
nop word cs:[rax + rax]
nop
mov rcx, rdi
call fcn.180073aa0
test al, 1
je 0x18005fd7c
mov rcx, rbx
mov r8d, 1
call fcn.18005de10
jmp 0x18005fd60
mov rax, qword [rbp + 0x7b0]
cmp byte [rax + 0xa], 0
jne 0x18005fdda
mov al, byte [rax + 8]
mov byte [rbp + 0x3a8], al
lea rcx, [rbp + 0x3a8]
call fcn.180066920
test al, al
je 0x18005fdce
lea rcx, [rbp + 0x7b0]
call fcn.18005e180
jmp 0x18005fdda
movaps xmm0, xmmword [rbp + 0xbb0]
mov rcx, qword [rbp + 0xbf8]
movups xmmword [rcx + 0x10], xmm0
mov qword [rcx + 8], rax
mov rax, rcx
jmp 0x18005f9d8
lea rcx, [rbp + 0x7b0]
call fcn.18005ebe0
lea rcx, [rbp + 0x7b0]
call fcn.18005e000
lea rcx, [rbp + 0x3a8]
lea rdx, [rbp + 0xb98]
call fcn.1800696e0
lea rcx, [rbp + 0xa96]
lea rdx, [rbp + 0x3a8]
mov r8d, pe_nt_image_headers64
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp + 0x7b0]
cmp byte [rax + 0xa], 0
jne 0x18005fe90
lea rcx, [rbp + 0x7b8]
call fcn.180066c30
mov rdi, rax
mov rsi, rdx
mov rcx, qword [rbp + 0xa68]
test rcx, rcx
je 0x18005fe82
mov qword [rbp + 0xbf0], rdi
mov qword [rbp + 0xbe8], rsi
mov rax, qword [rbp + 0xa70]
call qword [rax]
mov rax, qword [rbp + 0xa70]
mov rdx, qword [rax + 8]
test rdx, rdx
mov rsi, qword [rbp + 0xbe8]
mov rdi, qword [rbp + 0xbf0]
je 0x18005fe82
mov rcx, qword [rbp + 0xa68]
mov r8, qword [rax + 0x10]
call fcn.180018710
mov qword [rbp + 0xa68], rdi
mov qword [rbp + 0xa70], rsi
mov rax, qword [rbp + 0xa88]
test rax, rax
je 0x18005fed1
lea rax, [rax + rax*8]
lea rcx, [rax*8 - 0x48]
movabs rdx, 0xe38e38e38e38e38f
mov rax, rcx
mul rdx
mov r9, qword [rbp + 0xa78]
shr rdx, 6
add rdx, 1
cmp rcx, 0x48
jae 0x18005fed8
xor eax, eax
jmp 0x18005ff3d
xor eax, eax
jmp 0x18005ff61
mov r8, rdx
and r8, 0xfffffffffffffffe
xor eax, eax
mov rbx, r9
nop word cs:[rax + rax]
nop
cmp dword [rbx], 1
sete cl
mov rsi, qword [rbx + 0x18]
xor cl, 3
shl rsi, cl
mov rdi, qword [rbx + 0x30]
shl rdi, 4
add rdi, rax
add rdi, rsi
cmp dword [rbx + 0x48], 1
lea r9, [rbx + 0x90]
sete cl
mov rsi, qword [rbx + 0x60]
xor cl, 3
shl rsi, cl
mov rax, qword [rbx + 0x78]
shl rax, 4
add rax, rdi
add rax, rsi
mov rbx, r9
add r8, 0xfffffffffffffffe
jne 0x18005fef0
test dl, 1
je 0x18005ff61
mov rdx, qword [r9 + 0x30]
shl rdx, 4
add rdx, rax
mov rax, qword [r9 + 0x18]
cmp dword [r9], 1
sete cl
xor cl, 3
shl rax, cl
add rax, rdx
mov qword [rbp + 0xa60], rax
mov rsi, qword [rbp + 0xbf8]
lea rcx, [rsi + 8]
mov r8d, 0x148
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov rax, rsi
mov qword [rsi], 0
mov rdx, qword [rbp + 0x7c8]
test rdx, rdx
je 0x18005ffb0
mov rcx, qword [rbp + 0x7c0]
mov r8d, 1
call fcn.180018710
mov rax, qword [rbp + 0xbf8]
cmp byte [rbp + 0xa44], 2
je 0x180060061
mov rcx, qword [rbp + 0xa08]
test rcx, rcx
je 0x180060005
mov rax, qword [rbp + 0x9f8]
lea rcx, [rcx + rcx*2]
lea rsi, [rax + rcx*8]
jmp 0x18005ffe8
mov rax, rdi
cmp rdi, rsi
je 0x180060005
lea rdi, [rax + 0x18]
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18005ffe0
mov rcx, qword [rax]
mov r8d, 1
call fcn.180018710
jmp 0x18005ffe0
mov rax, qword [rbp + 0xa00]
test rax, rax
je 0x180060030
shl rax, 3
lea rdx, [rax + rax*2]
test rdx, rdx
je 0x180060030
mov rcx, qword [rbp + 0x9f8]
mov r8d, 8
call fcn.180018710
mov rdx, qword [rbp + 0xa18]
test rdx, rdx
mov rax, qword [rbp + 0xbf8]
je 0x180060061
add rdx, rdx
je 0x180060061
mov rcx, qword [rbp + 0xa10]
mov r8d, 2
call fcn.180018710
mov rax, qword [rbp + 0xbf8]
mov rdx, qword [rbp + 0xba0]
test rdx, rdx
je 0x18005f9f2
mov rcx, qword [rbp + 0xb98]
mov r8d, 1
call fcn.180018710
jmp 0x18005f9eb
lea r8, [0x1800fae18]
mov rcx, r15
call fcn.1800eb730
jmp 0x1800600f9
lea r8, [0x1800fae48]
mov rcx, r15
call fcn.1800eb730
jmp 0x1800600f9
lea r8, [0x1800fae18]
mov rcx, r15
call fcn.1800eb730
jmp 0x1800600f9
lea r8, [0x1800faf10]
call fcn.1800eb730
jmp 0x1800600f9
lea r8, [0x1800fae48]
mov rcx, r15
call fcn.1800eb730
jmp 0x1800600f9
lea r8, [0x1800fae48]
call fcn.1800eb730
jmp 0x1800600f9
lea r8, [0x1800fae48]
mov ecx, 1
call fcn.1800eb730
ud2