Function at 0x18006819c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
push r14
push r15
sub rsp, 0x20
mov rbx, rdx
mov r14, rcx
call fcn.180049e38
xor edi, edi
test al, al
je 0x1800682b6
cmp qword [0x18010a080], rdi
je 0x1800682af
mov rax, qword [0x18010a078]
mov rbx, qword [rax]
movabs rsi, 0xd993efbb19cfe32d
cmp rbx, rax
je 0x1800682a8
mov r15, qword [rbx + 0x20]
cmp byte [0x18010a364], dil
je 0x18006823e
lea rcx, [rsp + 0x50]
call fcn.1800669e4
cmp byte [rax + 0x34], dil
je 0x18006822e
mov r9, rdi
mov cl, r9b
and cl, 7
shl cl, 3
mov r8, rsi
shr r8, cl
xor byte [r9 + rax], r8b
inc r9
cmp r9, 0x34
jb 0x18006820e
mov byte [rax + 0x34], dil
mov r8, r15
mov rdx, rax
mov ecx, 3
call fcn.18006a848
mov rax, qword [r14]
mov rdx, r15
mov rcx, r14
call qword [rax + 0x50]
mov rdx, rbx
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], dil
je 0x180068275
mov rax, qword [rbx + 8]
jmp 0x18006826a
cmp rbx, qword [rax + 0x10]
jne 0x180068270
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], dil
je 0x18006825d
mov rbx, rax
jmp 0x180068290
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], dil
jne 0x180068290
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], dil
je 0x180068281
lea rcx, [0x18010a078]
call fcn.1800556e8
mov rax, qword [0x18010a078]
jmp 0x1800681e5
jmp 0x1800682af
mov eax, edi
jmp 0x1800685ac
test rbx, rbx
jne 0x1800682cd
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rbx, rax
test rax, rax
je 0x1800685aa
lea rdx, [rsp + 0x58]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp eax, dword [rsp + 0x58]
jne 0x1800685aa
xor r9d, r9d
lea r8, str.MDIClient
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_FindWindowExA]
mov r15, rax
test rax, rax
je 0x18006836c
cmp byte [0x18010a364], dil
je 0x18006835d
lea rcx, [rsp + 0x50]
call fcn.180066e3c
movabs rsi, 0xd993efbb19cfe32d
cmp byte [rax + 0x14], dil
je 0x18006834e
mov r8, rdi
mov cl, r8b
and cl, 7
shl cl, 3
mov rdx, rsi
shr rdx, cl
xor byte [r8 + rax], dl
inc r8
cmp r8, 0x14
jb 0x18006832e
mov byte [rax + 0x14], dil
mov rdx, rax
mov ecx, 3
call fcn.18006a848
jmp 0x180068367
movabs rsi, 0xd993efbb19cfe32d
mov rbx, r15
jmp 0x180068376
movabs rsi, 0xd993efbb19cfe32d
xor r9d, r9d
lea r8, str.AOL_Child
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_FindWindowExA]
mov r15, rax
test rax, rax
je 0x1800683df
cmp byte [0x18010a364], dil
je 0x1800683dc
lea rcx, [rsp + 0x50]
call fcn.18006664c
cmp byte [rax + 0x14], dil
je 0x1800683cf
mov r9, rdi
mov cl, r9b
and cl, 7
shl cl, 3
mov r8, rsi
shr r8, cl
xor byte [r9 + rax], r8b
inc r9
cmp r9, 0x14
jb 0x1800683af
mov byte [rax + 0x14], dil
mov rdx, rax
mov ecx, 3
call fcn.18006a848
mov rbx, r15
xor r9d, r9d
lea r8, [0x1800d40c0]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_FindWindowExA]
test rax, rax
cmovne rbx, rax
xor r9d, r9d
lea r8, str._ABROWSER_SITE
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_FindWindowExA]
test rax, rax
cmovne rbx, rax
xor r9d, r9d
lea r8, str._MINIBROWSER_SITE
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_FindWindowExA]
mov r15, rax
test rax, rax
je 0x180068480
cmp byte [0x18010a364], dil
je 0x18006847d
lea rcx, [rsp + 0x50]
call fcn.180066938
cmp byte [rax + 0x1c], dil
je 0x180068470
mov r9, rdi
mov cl, r9b
and cl, 7
shl cl, 3
mov r8, rsi
shr r8, cl
xor byte [r9 + rax], r8b
inc r9
cmp r9, 0x1c
jb 0x180068450
mov byte [rax + 0x1c], dil
mov rdx, rax
mov ecx, 3
call fcn.18006a848
mov rbx, r15
xor r9d, r9d
lea r8, str._oxFrame.class_
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_FindWindowExA]
mov r15, rax
test rax, rax
je 0x1800684ec
cmp byte [0x18010a364], dil
je 0x1800684e9
lea rcx, [rsp + 0x50]
call fcn.180066888
mov r9, rax
cmp byte [rax + 0x1a], dil
je 0x1800684dc
mov r8, rdi
mov cl, r8b
and cl, 7
shl cl, 3
mov rax, rsi
shr rax, cl
xor byte [r8 + r9], al
inc r8
cmp r8, 0x1a
jb 0x1800684bc
mov byte [r9 + 0x1a], dil
mov rdx, r9
mov ecx, 3
call fcn.18006a848
mov rbx, r15
xor r9d, r9d
lea r8, str._MINIBROWSER_SITE
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_FindWindowExA]
test rax, rax
cmovne rbx, rax
xor r9d, r9d
lea r8, str.Shell_Embedding
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_FindWindowExA]
mov r15, rax
test rax, rax
je 0x180068573
cmp byte [0x18010a364], dil
je 0x18006856e
lea rcx, [rsp + 0x50]
call fcn.18006659c
cmp byte [rax + 0x1a], dil
je 0x180068561
mov r9, rdi
mov cl, r9b
and cl, 7
shl cl, 3
mov r8, rsi
shr r8, cl
xor byte [r9 + rax], r8b
inc r9
cmp r9, 0x1a
jb 0x180068541
mov byte [rax + 0x1a], dil
mov rdx, rax
mov ecx, 3
call fcn.18006a848
mov rbx, r15
jmp 0x18006859e
xor edx, edx
jmp 0x180068587
mov r8, qword [r14]
mov rdx, rsi
mov rcx, r14
call qword [r8 + 0x48]
mov rdx, rsi
xor r9d, r9d
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.USER32.dll_FindWindowExA]
test rax, rax
mov rsi, rax
jne 0x180068577
mov rax, qword [r14]
mov rdx, rbx
mov rcx, r14
call qword [rax + 0x50]
xor eax, eax
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop r15
pop r14
pop rdi
ret