Function at 0x180029e20
Capabilities:
Encode data using xor
Get storage device properties

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x100
movaps xmmword [rsp + 0xf0], xmm6
mov rax, qword [0x1800c8010]
xor rax, rsp
mov qword [rbp + 7], rax
mov r12, rdx
mov rdi, rcx
mov qword [rbp - 0x39], rcx
mov qword [rbp - 0x49], rdx
movdqa xmm0, xmmword [0x1800bc3c0]
movdqu xmmword [rbp - 0x31], xmm0
movdqa xmm1, xmmword [0x1800ba890]
movdqu xmmword [rbp - 0x21], xmm1
xor ebx, ebx
mov ecx, ebx
nop
movzx eax, byte [rbp - 0x31]
xor byte [rbp + rcx - 0x30], al
movzx eax, byte [rbp - 0x31]
xor byte [rbp + rcx - 0x2f], al
add rcx, 2
cmp rcx, 0x1e
jb 0x180029e80
mov byte [rbp - 0x12], bl
mov qword [rbp - 0x61], rbx
mov qword [rbp - 0x59], 0xf
mov byte [rbp - 0x71], bl
lea rax, [rbp - 0x30]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], bl
jne 0x180029ec0
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x71]
call fcn.18000b0f0
lea rdx, [rbp - 0x71]
call fcn.18000a540
mov rcx, r12
cmp qword [r12 + 0x18], 0x10
jb 0x180029eee
mov rcx, qword [r12]
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 3]
call rax
mov r14, rax
cmp rax, rsi
jne 0x180029f25
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xf
mov byte [rdi], bl
jmp 0x18002a1dd
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
lea rax, [0x18002a220]
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x29], r14
movsd xmm6, qword [0x1800ba7d0]
movaps xmm1, xmm6
movq rdx, xmm6
lea rcx, [0x1800a7d98]
call fcn.18000ba10
mov qword [rbp - 0xd], rbx
mov dword [rbp - 0x11], ebx
mov qword [rbp - 0x39], rbx
mov dword [rbp - 0x41], ebx
movdqa xmm0, xmmword [0x1800bb9c0]
movdqu xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1800bb8d0]
movdqu xmmword [rsp + 0x50], xmm1
mov dword [rbp - 0x79], 0x3a443231
mov word [rbp - 0x75], 0x4335
mov byte [rbp - 0x73], 0
mov rax, rbx
movdqa xmm1, xmmword [0x1800bab70]
nop dword [rax]
movdqu xmm0, xmmword [rsp + rax + 0x40]
psubb xmm0, xmm1
movdqu xmmword [rsp + rax + 0x40], xmm0
add rax, 0x10
cmp rax, 0x20
jb 0x180029fa0
cmp rax, 0x26
jae 0x180029fcd
dec byte [rsp + rax + 0x40]
inc rax
cmp rax, 0x26
jb 0x180029fc0
mov qword [rbp - 0x61], rbx
mov qword [rbp - 0x59], 0xf
mov byte [rbp - 0x71], 0
lea rax, [rsp + 0x40]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x180029fe5
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x71]
call fcn.18000b0f0
lea rdx, [rbp - 0x71]
call fcn.18000a540
mov qword [rsp + 0x38], rbx
lea rcx, [rbp - 0x41]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], 8
lea rcx, [rbp - 0x39]
mov qword [rsp + 0x20], rcx
mov r9d, 0xc
lea r8, [rbp - 0x11]
mov edx, 0x2d1400
mov rcx, r14
call rax
test eax, eax
jne 0x18002a050
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xf
mov byte [rdi], al
jmp 0x18002a1ce
movaps xmm1, xmm6
movq rdx, xmm6
lea rcx, [0x1800a7d98]
call fcn.18000ba10
mov r13d, dword [rbp - 0x35]
mov ecx, r13d
call fcn.1800558d4
mov r15, rax
mov r8d, r13d
xor edx, edx
mov rcx, rax
call fcn.180059570
mov qword [rbp - 1], r15
movdqa xmm0, xmmword [0x1800bbfd0]
movdqu xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1800bc250]
movdqu xmmword [rsp + 0x50], xmm1
mov dword [rbp - 0x79], 0x6f1a1a68
mov dword [rbp - 0x75], 0x6d1a14
xor ebx, ebx
mov ecx, ebx
movzx eax, cl
add al, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x41], al
inc rcx
cmp rcx, 0x26
jb 0x18002a0b2
mov byte [rbp - 0x72], bl
mov qword [rbp - 0x61], rbx
mov qword [rbp - 0x59], 0xf
mov byte [rbp - 0x71], bl
lea rax, [rsp + 0x41]
mov r8, rsi
inc r8
cmp byte [rax + r8], bl
jne 0x18002a0e0
lea rdx, [rsp + 0x41]
lea rcx, [rbp - 0x71]
call fcn.18000b0f0
lea rdx, [rbp - 0x71]
call fcn.18000a540
mov qword [rsp + 0x38], rbx
lea rcx, [rbp - 0x41]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp - 0x11]
mov edx, 0x2d1400
mov rcx, r14
call rax
test eax, eax
jne 0x18002a14c
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xf
mov byte [rdi], bl
mov rcx, r15
call fcn.180055890
nop
jmp 0x18002a1ce
movaps xmm1, xmm6
movq rdx, xmm6
lea rcx, [0x1800a7d98]
call fcn.18000ba10
mov ebx, dword [r15 + 0x18]
test ebx, ebx
jne 0x18002a185
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], 0xf
mov byte [rdi], bl
mov rcx, r15
call fcn.180055890
nop
jmp 0x18002a1ce
movaps xmm1, xmm6
movq rdx, xmm6
lea rcx, [0x1800a7d98]
call fcn.18000ba10
lea rdx, [r15 + rbx]
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
inc rsi
cmp byte [rdx + rsi], 0
jne 0x18002a1b0
mov r8, rsi
mov rcx, rdi
call fcn.18000b0f0
nop
mov rcx, r15
call fcn.180055890
nop
test r14, r14
je 0x18002a1dd
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, r12
call fcn.18000b090
mov rax, rdi
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1800555d0
mov rbx, qword [rsp + 0x150]
movaps xmm6, xmmword [rsp + 0xf0]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret