Function at 0x1801868e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x68
mov eax, edx
and eax, 0x3fffff00
mov dword [rsp + 0x28], eax
jne 0x180186bb1
mov eax, edx
and eax, 0xc0000000
mov dword [rsp + 0x28], eax
je 0x180186b95
mov rsi, rcx
mov edi, edx
mov rcx, rsi
call fcn.180110eb0
test al, al
je 0x1801869e0
mov eax, edi
xor ecx, ecx
test eax, eax
jns 0x180186986
nop word cs:[rax + rax]
mov edi, eax
mov eax, dword [rsi]
nop word cs:[rax + rax]
mov ecx, eax
xor ecx, 0xa0000000
lock cmpxchg dword [rsi], ecx
jne 0x180186940
mov ecx, eax
and ecx, 0x80000000
mov dword [rsp + 0x28], ecx
je 0x180186c38
and eax, 0x3fffff00
mov dword [rsp + 0x28], eax
jne 0x180186c65
mov rcx, rsi
call fcn.1801119e0
mov ecx, 0x20000000
test al, al
mov eax, edi
jne 0x180186baa
test eax, 0x40000000
jne 0x180186ae0
mov eax, dword [rsi]
nop word cs:[rax + rax]
mov ecx, eax
and ecx, 0xdfffffff
lock cmpxchg dword [rsi], ecx
jne 0x1801869a0
mov ecx, eax
and ecx, 0x20000000
mov dword [rsp + 0x28], ecx
je 0x180186bde
cmp eax, 0x40000000
jb 0x180186baa
and eax, 0xdfffffff
pause
xor ecx, ecx
test eax, eax
jns 0x180186986
jmp 0x180186930
mov eax, edi
test edi, 0x40000000
jne 0x180186a98
nop
and eax, 0x80000000
mov dword [rsp + 0x28], eax
je 0x180186bf0
mov eax, dword [rsi]
nop word cs:[rax + rax]
mov ecx, eax
xor ecx, 0xa0000000
lock cmpxchg dword [rsi], ecx
jne 0x180186a10
mov ecx, eax
and ecx, 0x80000000
mov dword [rsp + 0x28], ecx
je 0x180186c02
and eax, 0x3fffff00
mov dword [rsp + 0x28], eax
jne 0x180186c14
mov rcx, rsi
call fcn.1801119e0
test al, al
jne 0x180186baa
mov eax, dword [rsi]
nop word cs:[rax + rax]
mov ecx, eax
and ecx, 0xdfffffff
lock cmpxchg dword [rsi], ecx
jne 0x180186a60
mov ecx, eax
and ecx, 0x20000000
mov dword [rsp + 0x28], ecx
je 0x180186c26
cmp eax, 0x40000000
jb 0x180186baa
pause
test eax, 0x40000000
je 0x1801869f0
mov dword [rsp + 0x2c], pe_nt_image_headers64
mov eax, dword [rsi]
nop word cs:[rax + rax]
mov ecx, eax
xor ecx, 0x50000100
lock cmpxchg dword [rsi], ecx
jne 0x180186ab0
mov ecx, eax
and ecx, 0x100
mov dword [rsp + 0x28], ecx
jne 0x180186c7a
and eax, 0x20000000
mov dword [rsp + 0x28], eax
je 0x180186b44
jmp 0x180186ca5
mov dword [rsp + 0x64], ecx
mov dword [rsp + 0x2c], pe_nt_image_headers64
mov edx, ecx
or edx, 0x50000100
mov eax, dword [rsi]
nop word cs:[rax + rax]
mov r8d, eax
xor r8d, edx
lock cmpxchg dword [rsi], r8d
jne 0x180186b00
mov edx, eax
and edx, ecx
mov dword [rsp + 0x28], edx
cmp edx, ecx
jne 0x180186cba
mov edx, eax
and edx, 0x100
mov dword [rsp + 0x28], edx
jne 0x180186c7a
and eax, 0x20000000
mov edx, eax
xor edx, ecx
mov dword [rsp + 0x28], edx
cmp eax, ecx
jne 0x180186ca5
mov rcx, rsi
call fcn.1801114b0
shl eax, 8
mov ecx, 0x10000000
sub ecx, eax
lock sub dword [rsi], ecx
mov edx, 0xffffff00
lock xadd dword [rsi], edx
mov eax, edx
and eax, 0x3fffff00
cmp eax, 0x100
setne al
cmp edx, 0x40000000
setb cl
or cl, al
jne 0x180186baa
add edx, 0xffffff00
mov eax, edx
and eax, 0xc0000000
mov dword [rsp + 0x28], eax
jne 0x18018690b
mov qword [rsp + 0x30], 0
lea rax, [0x180194088]
jmp 0x180186c48
add rsp, 0x68
pop rdi
pop rsi
ret
mov qword [rsp + 0x30], 0
lea rax, [0x180193fc8]
mov qword [rsp + 0x20], rax
lea r8, [0x180193fa8]
lea rdx, [rsp + 0x28]
lea r9, [rsp + 0x30]
xor ecx, ecx
call fcn.18018e6d0
mov qword [rsp + 0x30], 0
lea rax, [0x180194058]
jmp 0x180186c48
mov qword [rsp + 0x30], 0
lea rax, [0x180194028]
jmp 0x180186c48
mov qword [rsp + 0x30], 0
lea rax, [0x180194010]
jmp 0x180186c48
mov qword [rsp + 0x30], 0
lea rax, [0x180193fe0]
jmp 0x180186bc1
mov qword [rsp + 0x30], 0
lea rax, [0x180193ff8]
jmp 0x180186c48
mov qword [rsp + 0x30], 0
lea rax, [0x180194070]
mov qword [rsp + 0x20], rax
lea r8, [0x180193fa8]
lea rdx, [rsp + 0x28]
lea r9, [rsp + 0x30]
mov cl, 1
call fcn.18018e6d0
mov qword [rsp + 0x30], 0
lea rax, [0x180194040]
jmp 0x180186bc1
mov qword [rsp + 0x30], 0
lea rax, [0x180193f78]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x28]
lea r8, [rsp + 0x2c]
lea r9, [rsp + 0x30]
mov cl, 1
call fcn.18018e6d0
mov qword [rsp + 0x30], 0
lea rax, [0x180193fb0]
jmp 0x180186bc1
mov qword [rsp + 0x30], 0
lea rax, [0x180193f90]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x28]
lea r8, [rsp + 0x64]
lea r9, [rsp + 0x30]
xor ecx, ecx
call fcn.18018e6d0
int3