Function at 0x18005efe8
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov r13, rcx
mov r8d, 0x104
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xor edi, edi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x20], dil
lea rax, [rsp + 0x70]
or rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], dil
jne 0x18005f045
lea rcx, [rsp + 0x20]
cmp rbx, 0xf
ja 0x18005f072
mov qword [rsp + 0x30], rbx
mov r8, rbx
lea rdx, [rsp + 0x70]
call fcn.18009fc20
mov byte [rsp + rbx + 0x20], dil
jmp 0x18005f083
lea r9, [rsp + 0x70]
mov r8b, dil
mov rdx, rbx
call fcn.180003a38
nop
lea r14, [rsp + 0x20]
mov rbx, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x38]
cmp rsi, 0x10
cmovae r14, rbx
lea r12, [rsp + 0x20]
cmovae r12, rbx
mov rcx, qword [rsp + 0x30]
add r12, rcx
lea rdi, [rsp + 0x20]
cmp rsi, 0x10
cmovae rdi, rbx
mov r15d, 1
cmp rdi, r12
je 0x18005f0e9
sub r14, rdi
movsx ecx, byte [rdi]
call fcn.1800a4800
mov byte [rdi + r14], al
add rdi, r15
cmp rdi, r12
jne 0x18005f0c6
mov rsi, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x20]
lea r14, [rsp + 0x20]
cmp rsi, 0x10
cmovae r14, rbx
cmp rcx, 7
jb 0x18005f146
lea r12, [rcx + r14]
lea r8, [r12 - 6]
sub r8, r14
mov rcx, r14
jmp 0x18005f134
mov r8d, 7
lea rdx, str.firefox
mov rcx, rdi
call fcn.18009fb20
test eax, eax
je 0x18005f1a4
add rdi, r15
lea r8, [r12 - 6]
sub r8, rdi
mov rcx, rdi
mov edx, 0x66
call fcn.1800a06d0
test rax, rax
mov rdi, rax
jne 0x18005f10d
xor r15d, r15d
cmp rsi, 0x10
jb 0x18005f180
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x18005f178
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005f2c0
mov rcx, rbx
call fcn.18009d1f4
mov eax, r15d
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
sub rdi, r14
cmp rdi, 0xffffffffffffffff
je 0x18005f146
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x60]
call fcn.1800098d0
nop
lea r8, [0x1800eb6a8]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.180009988
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
lea r9, [r13 + 4]
mov r8, r13
lea rdx, str._d._d
call fcn.18005f2c8
xor edi, edi
cmp byte [0x18010a364], dil
je 0x18005f255
lea rcx, [rbp + 0xb8]
call fcn.18005e918
cmp byte [rax + 0x30], dil
je 0x18005f23f
mov r10d, edi
mov cl, r10b
and cl, 7
shl cl, 3
movabs r8, 0xd993efbb19cfe32d
shr r8, cl
xor byte [r10 + rax], r8b
add r10, r15
cmp r10, 0x30
jb 0x18005f218
mov byte [rax + 0x30], dil
mov r9d, dword [r13 + 4]
mov r8d, dword [r13]
mov rdx, rax
mov ecx, 4
call fcn.18006a848
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x18005f28e
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005f289
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005f2ba
call fcn.18009d1f4
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], dil
lea rcx, [rsp + 0x60]
call fcn.180005f10
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x20]
jmp 0x18005f149
call fcn.1800a45b8
nop
call fcn.1800a45b8
int3