Function at 0x462e20
Capabilities:
Encode data using xor
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x968
mov eax, dword [0x57506c]
xor eax, esp
mov dword [esp + 0x964], eax
xor eax, eax
mov dword [esp + 0xc], 0
cmp dword [ecx + 0x14], 8
push esi
push edi
mov edi, edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
jb 0x462e5c
mov ecx, dword [ecx]
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp eax, 0xffffffff
jne 0x462e9a
call fcn.00462d20
test eax, eax
je 0x462e9e
mov dword [esp + 0x1c], 0
mov edi, dword [esp + 0x1c]
jmp 0x463320
mov dword [esp + 0x14], eax
push 0x400
lea eax, [esp + 0x16c]
push 0
push eax
call fcn.004ac860
add esp, 0xc
lea eax, [esp + 0x20]
push 0
push eax
push 0x64
lea eax, [esp + 0x174]
push eax
push dword [esp + 0x24]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x462ee1
call fcn.00462d20
test eax, eax
jne 0x46330b
cmp dword [esp + 0x20], 0x64
jne 0x46330b
mov eax, dword [ebp + 8]
cmp eax, 1
jne 0x462fff
lea ecx, [esp + 0x168]
mov eax, str.SQLite_format_3
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x462f24
test dl, dl
je 0x462f20
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x462f24
add eax, 2
add ecx, 2
test dl, dl
jne 0x462f04
xor eax, eax
jmp 0x462f29
sbb eax, eax
or eax, 1
test eax, eax
je 0x463041
mov eax, dword [esp + 0x178]
shl eax, 8
cmp byte [esp + 0x17c], 0xc
movzx eax, ax
jne 0x4632ea
mov ecx, 0x400
cmp ax, cx
jne 0x4632ea
push 0
lea eax, [esp + 0x40]
xorps xmm0, xmm0
push eax
push 0
push dword [esp + 0x20]
movlpd qword [esp + 0x48], xmm0
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x462f80
call fcn.00462d20
movups xmm0, xmmword [0x5680fc]
xor ecx, ecx
movups xmmword [esp + 0x130], xmm0
mov eax, ecx
and eax, 0x8000000f
jns 0x462f9f
dec eax
or eax, 0xfffffff0
inc eax
mov al, byte [esp + eax + 0x130]
mov byte [esp + ecx + 0x148], al
inc ecx
cmp ecx, 0x20
jl 0x462f91
push ecx
lea edx, [esp + 0x14c]
lea ecx, [esp + 0x44]
call fcn.004633e0
xor ecx, ecx
mov dword [esp + 0x38], eax
add esp, 4
mov dword [esp + 0x30], ecx
cmp dword [edi + 0x14], 8
jb 0x462fd9
mov edi, dword [edi]
sub esp, 0xc
push 2
push ecx
push 0x40000000
push edi
lea ecx, [esp + 0x40]
call fcn.00462dc0
test eax, eax
je 0x463065
mov eax, dword [esp + 0x24]
mov dword [esp + 0x18], eax
jmp 0x46331e
cmp eax, 2
jne 0x462f31
lea ecx, [esp + 0x168]
mov eax, str.SQLite_format_3
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x463034
test dl, dl
je 0x463030
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x463034
add eax, 2
add ecx, 2
test dl, dl
jne 0x463014
xor eax, eax
jmp 0x463039
sbb eax, eax
or eax, 1
test eax, eax
je 0x462f31
mov eax, dword [esp + 0x14]
test eax, eax
je 0x463054
push eax
call esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x1c], 0xffffffff
mov edi, dword [esp + 0x1c]
jmp 0x463320
push 0x400
lea eax, [esp + 0x56c]
push 0
push eax
call fcn.004ac860
mov eax, dword [esp + 0x30]
add esp, 0xc
mov dword [esp + 0x18], eax
xor esi, esi
mov eax, dword [esp + 0x28]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x1c], eax
push 0
lea eax, [esp + 0x24]
push eax
push 0x400
lea eax, [esp + 0x174]
push eax
push dword [esp + 0x24]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x4630c5
call fcn.00462d20
test eax, eax
jne 0x4632b7
mov edi, dword [esp + 0x20]
test edi, edi
je 0x4632b7
test esi, esi
jne 0x4630eb
mov eax, dword [esp + 0x178]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x17c]
mov dword [esp + 0x2c], eax
movq xmm2, qword [esp + 0x55c]
lea eax, [esi + 1]
mov edi, dword [esp + 0x34]
lea ecx, [esp + 0x40]
xorps xmm0, xmm0
mov dword [esp + 0x139], 0
movq qword [esp + 0x131], xmm0
mov edx, edi
mov dword [esp + 0x130], eax
mov eax, dword [esp + 0x564]
mov word [esp + 0x13d], 0
mov byte [esp + 0x13f], 0
mov dword [esp + 0x38], eax
mov dword [esp + 0x13c], eax
lea eax, [esp + 0x568]
push eax
lea eax, [esp + 0x134]
movq qword [esp + 0x138], xmm2
push eax
call fcn.00463670
add esp, 8
xor esi, esi
nop word [eax + eax]
lea ecx, [esp + 0x568]
mov edx, edi
add ecx, esi
lea eax, [ecx + 0x10]
push eax
push ecx
lea ecx, [esp + 0x48]
call fcn.00463670
add esi, 0x10
add esp, 8
cmp esi, 0x3f0
jb 0x463170
mov edi, dword [esp + 0x20]
xor eax, eax
test edi, edi
je 0x463213
cmp edi, 0x20
jb 0x4631ef
mov ecx, edi
mov edx, edi
and ecx, 0x1f
sub edx, ecx
nop
movups xmm0, xmmword [esp + eax + 0x168]
movups xmm1, xmmword [esp + eax + 0x568]
pxor xmm1, xmm0
movups xmmword [esp + eax + 0x168], xmm1
movups xmm0, xmmword [esp + eax + 0x178]
movups xmm1, xmmword [esp + eax + 0x578]
pxor xmm1, xmm0
movups xmmword [esp + eax + 0x178], xmm1
add eax, 0x20
cmp eax, edx
jb 0x4631b0
cmp eax, edi
jae 0x463213
nop dword [eax]
nop word [eax + eax]
mov cl, byte [esp + eax + 0x568]
xor byte [esp + eax + 0x168], cl
inc eax
cmp eax, edi
jb 0x463200
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x38]
movq qword [esp + 0x55c], xmm2
mov dword [esp + 0x564], eax
test ecx, ecx
jne 0x463280
cmp dword [ebp + 8], 1
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x178], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x17c], eax
jne 0x463280
lea ecx, [esp + 0x168]
mov eax, str.SQLite_format_3
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x463277
test dl, dl
je 0x463273
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x463277
add eax, 2
add ecx, 2
test dl, dl
jne 0x463257
xor eax, eax
jmp 0x46327c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4632b3
push 0
lea eax, [esp + 0x28]
push eax
push edi
lea eax, [esp + 0x174]
push eax
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x4632a3
call fcn.00462d20
mov esi, dword [esp + 0x130]
mov dword [esp + 0x30], esi
jmp 0x463096
xor edi, edi
jmp 0x4632bc
mov edi, 1
mov eax, dword [esp + 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x4632d5
push eax
call esi
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x463320
push eax
call esi
mov dword [esp + 0x18], 0
jmp 0x463320
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4632fd
push eax
call esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x1c], 0
mov edi, dword [esp + 0x1c]
jmp 0x463320
mov eax, dword [esp + 0x14]
test eax, eax
je 0x46331e
push eax
call esi
mov dword [esp + 0x14], 0
xor edi, edi
mov eax, dword [esp + 0x18]
test eax, eax
je 0x46332b
push eax
call esi
mov eax, dword [esp + 0x14]
test eax, eax
je 0x463336
push eax
call esi
mov ecx, dword [esp + 0x96c]
mov eax, edi
pop edi
pop esi
xor ecx, esp
call fcn.00469c8e
mov esp, ebp
pop ebp
ret