Function at 0x140001834
Capabilities:
Clear file content
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x30
mov r15d, dword [rsp + 0x80]
lea rax, [0x1406d63b0]
mov esi, dword [rsp + 0x78]
lea r14d, [rdx + 0x1a7]
mov rbx, qword [rsp + 0x70]
lea ebp, [rcx - 0x20a]
mov r10d, r9d
mov edi, ecx
xor edi, 0x760e
lea r9d, [rdx + 0x4b9]
add r15d, 0xffffffd8
xor r10d, 0x7522
add esi, 0x8a2
mov qword [rbx + 0x78], rax
xor r12d, r12d
mov r11d, r12d
mov rax, qword [rbx + 0x78]
mov r8d, dword [r11 + rax]
mov eax, 0x24fced
sub eax, dword [rbx + 0x50]
add r11, 4
sub eax, dword [rbx + 0x70]
add dword [rbx + 0x134], eax
mov eax, dword [rbx + 0xc0]
xor eax, dword [rbx + 0x80]
xor eax, 0x19dddf7
add dword [rbx + 0x34], eax
mov rdx, qword [section..data]
mov eax, dword [rbx + 0x24]
add eax, 0xfe677869
mov ecx, dword [rdx + 0x80]
imul r8d, dword [rdx + 0x44]
add ecx, eax
add dword [rdx + 0x8c], ecx
movsxd rcx, dword [rbx + 0x48]
mov rax, qword [rbx + 0x98]
mov byte [rcx + rax], r8b
inc dword [rbx + 0x48]
mov eax, dword [0x1406080dc]
sub eax, dword [rbx + 0x6c]
add eax, 0x1c215f
xor dword [0x14060809c], eax
mov eax, dword [0x140608034]
mov ecx, dword [rbx + 0x80]
add eax, 0xfe677869
add ecx, eax
add dword [rbx + 0x68], ecx
mov eax, dword [rbx + 0xf0]
xor eax, 1
or dword [rbx + 0x138], eax
mov ecx, dword [rbx + 0xf0]
sub ecx, dword [rbx + 0x8c]
mov eax, dword [0x140608090]
dec eax
add ecx, eax
mov eax, 1
mov dword [0x140608090], ecx
sub eax, dword [rbx + 0xa4]
mov rcx, qword [section..data]
add dword [rcx + 0x3c], eax
cmp r11, 0x6df380
jl 0x1400018a3
mov eax, dword [rbx + 0x6c]
cmp dword [rbx + 0x8c], eax
jae 0x14000199b
mov eax, dword [rbx + 0x68]
sub eax, dword [rbx + 0x138]
add eax, 0x287a7b78
mov dword [rbx + 0x44], eax
lea eax, [rsi - 0x9fe]
cmp edi, eax
je 0x1400019d8
cmp dword [0x14060809c], 0x16510
je 0x1400019c5
mov rax, qword [section..data]
lea rcx, [0x1400164b0]
mov qword [rax + 0x78], rcx
jmp 0x1400019d8
mov eax, dword [rbx]
sub eax, dword [0x1406080dc]
sub eax, 0x12d48
mov dword [0x140608034], eax
lea eax, [rsi - 0x6d4]
cmp r9d, eax
jge 0x140001c44
lea eax, [r10 - 0x2e0]
cmp r9d, eax
je 0x140001b2e
mov rax, qword [rbx + 0x78]
mov ecx, dword [rbx + 0x134]
mov edx, dword [r12 + rax]
add r12, 4
mov eax, dword [rbx + 0x50]
xor eax, 0x102c2c
movzx r8d, dl
sub dword [rbx + 0xc0], eax
mov eax, dword [rbx + 0x68]
add eax, dword [rbx + 0x8c]
xor eax, 0xfffa34dd
add dword [rbx + 0xf0], eax
mov rax, qword [section..data]
sub ecx, dword [rax + 0x68]
sub ecx, 0x5cb23
add dword [rbx + 0xd4], ecx
movzx eax, byte [rbx + 0x44]
movsxd rdx, dword [0x140608058]
imul r8d, eax
mov rax, qword [section..data]
mov rcx, qword [rax + 0x98]
mov byte [rdx + rcx], r8b
inc dword [0x140608058]
mov ecx, dword [0x14060811c]
mov eax, dword [rbx + 0x6c]
sub eax, 0x1c215e
imul ecx, eax
mov eax, dword [0x1406080e4]
add eax, 0xffdbca31
mov dword [0x14060811c], ecx
mov ecx, dword [rbx + 0x50]
add ecx, eax
add dword [rbx + 0x8c], ecx
mov rax, qword [section..data]
mov ecx, dword [rax + 0x134]
xor ecx, dword [rax + 0xf0]
mov eax, 1
sub eax, ecx
add dword [rbx + 0x134], eax
mov eax, 0x8949b
sub eax, dword [rbx + 0x24]
add dword [rbx + 0xf0], eax
mov eax, 1
sub eax, dword [rbx + 0xa4]
mov rcx, qword [section..data]
add dword [rcx + 0xa4], eax
mov eax, dword [rbx + 0x70]
sub eax, dword [rbx + 0x80]
add eax, 0x17b223b
xor dword [rbx + 0x134], eax
mov rax, qword [section..data]
mov ecx, dword [rax]
sub ecx, 0x1438b6
or dword [rbx + 0x68], ecx
cmp r12, 0x11d480
jl 0x1400019f7
mov ecx, dword [rbx + 0xf0]
xor ecx, dword [0x14060809c]
mov rax, qword [section..data]
add ecx, 0xc0f
mov dword [rax + 0x44], ecx
add dword [0x140608054], 0xfffff3f1
mov eax, esi
xor eax, 0x36f
cmp r10d, eax
je 0x140001c44
mov eax, edi
xor eax, 0x3cb
cmp r10d, eax
jl 0x140001b64
lea rax, str.1by_T_
mov qword [rbx + 0x78], rax
jmp 0x140001c44
or r9d, esi
cmp edi, r9d
je 0x140001bac
mov ecx, dword [rbx + 0xf0]
mov rax, qword [section..data]
sub ecx, 0x4ee8
or dword [rax], ecx
mov eax, dword [rbx + 0xd8]
mov rcx, qword [section..data]
add eax, 0x3bef
or eax, 0x4d34
or dword [rcx + 0x8c], eax
mov ecx, dword [rbx + 0xf8]
add ecx, edi
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rax, qword [section..data]
mov ecx, r15d
imul ecx, r14d
and ecx, dword [rax + 0x108]
cmp dword [0x140608034], ecx
jae 0x140001c44
mov ecx, dword [rbx + 0x6c]
sub ecx, 0x4b98
or rcx, 0x4bd7
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov eax, dword [rbx + 0x138]
mov r8d, esi
mov r11d, dword [rbx + 0xfc]
mov r9, qword [section..data]
mov edx, dword [0x140608128]
mov ecx, dword [rbx + 0xd0]
sub edx, edi
sub r8d, dword [0x140608118]
or ecx, esi
or r8d, dword [r9 + 0x80]
sub ecx, 0x3d96
and edx, dword [0x1406080b8]
imul eax, r14d
imul r11d, r15d
imul r10d, eax, 0x41e4
sub r11d, dword [rbx + 0x110]
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
call fcn.1400118f4
mov rbx, qword [rsp + 0x50]
xor ebp, 0x73e6
mov rsi, qword [rsp + 0x60]
mov eax, ebp
mov rbp, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x68]
add rsp, 0x30
pop r15
pop r14
pop r12
ret