Function at 0x18002e0b0
Capabilities:
Encode data using xor
Write file on windows

Disassembly:
push rbp
push rsi
push r12
push r14
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
xor esi, esi
mov r15, rcx
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x40], 8
mov qword [rbp + 0x1d8], 0x10
mov rdx, qword [rbp + 0x1d8]
mov rax, qword [rsp + 0x40]
add rdx, rax
mov qword [rbp + 0x1d8], rdx
mov rdx, qword [rbp + 0x1d8]
mov rax, qword [rsp + 0x30]
mov dword [rsp + 0x38], 3
mov dword [rbp + 0x1d8], 0x31
mov ecx, dword [rbp + 0x1d8]
mov eax, dword [rsp + 0x38]
add ecx, eax
mov dword [rsp + 0x40], ecx
mov dword [rsp + 0x38], 0xa0
mov dword [rbp + 0x1d8], 0x27
mov ecx, dword [rbp + 0x1d8]
mov eax, dword [rsp + 0x38]
add ecx, eax
mov dword [rbp + 0x1d8], ecx
mov ecx, dword [rbp + 0x1d8]
mov rax, qword [rsp + 0x30]
movzx edx, al
mov eax, dword [rsp + 0x40]
movzx r8d, cl
mov rcx, qword [rsp + 0x30]
imul r8d, edx
add al, r8b
add cl, al
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax - 0x68], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], 8
mov qword [rbp + 0x1d8], 0x10
mov rcx, qword [rbp + 0x1d8]
mov rax, qword [rsp + 0x40]
add rcx, rax
mov qword [rbp + 0x1d8], rcx
mov rcx, qword [rbp + 0x1d8]
mov rax, qword [rsp + 0x30]
cmp rax, rcx
jb 0x18002e108
mov qword [rsp + 0x30], 0x13
lea r8, [r15 + 0x59]
mov qword [rbp + 0x1d8], 5
mov rcx, qword [rbp + 0x1d8]
mov rax, qword [rsp + 0x30]
add rcx, rax
mov qword [rbp + 0x1d8], rcx
mov rdx, qword [rbp + 0x1d8]
mov qword [rsp + 0x30], 0x22
mov qword [rbp + 0x1d8], 0x5e
mov rcx, qword [rbp + 0x1d8]
mov rax, qword [rsp + 0x30]
add rcx, rax
mov qword [rsp + 0x28], rdx
mov qword [rbp + 0x1d8], rcx
lea rax, [rbp - 0x68]
mov r9, qword [rbp + 0x1d8]
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.18002cbe0
xor eax, eax
mov qword [rsp + 0x58], rsi
mov byte [rbp + 0x1c2], al
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov word [rbp + 0x1c0], 0xe5f1
movabs r12, 0xaaaaaaaaaaaaaaab
mov qword [rbp + 0x1d8], rsi
mov rax, qword [rbp + 0x1d8]
nop
mov rcx, qword [rbp + 0x1d8]
mov rax, qword [rbp + 0x1d8]
movzx r8d, byte [rbp + rax + 0x1c1]
mov rax, r12
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rbp + 0x1d8]
shl dl, 3
sub cl, dl
mov edx, 0x5b1caec9
sar edx, cl
xor dl, r8b
mov byte [rbp + rax + 0x1c1], dl
mov rax, qword [rbp + 0x1d8]
inc rax
mov qword [rbp + 0x1d8], rax
mov rax, qword [rbp + 0x1d8]
cmp rax, 1
jb 0x18002e280
lea r8, [rbp - 0x10]
movsx r11d, byte [rbp + 0x1c1]
mov r9, rsi
mov byte [rbp + 0x1c2], sil
cmp byte [rbp - 0x10], sil
je 0x18002e335
nop
lea rax, [rbp + 0x1c1]
test r11b, r11b
je 0x18002e325
movzx edx, byte [r8]
movzx ecx, r11b
cmp dl, cl
je 0x18002e325
movzx ecx, byte [rax + 1]
inc rax
test cl, cl
jne 0x18002e314
jmp 0x18002e335
cmp byte [rax], sil
je 0x18002e335
inc r8
inc r9
cmp byte [r8], sil
jne 0x18002e300
lea r10, [rbp - 0x10]
mov qword [rsp + 0x288], rbx
add r10, r9
mov qword [rsp + 0x280], rdi
mov r14, 0xffffffffffffffff
movzx eax, byte [r10]
test al, al
je 0x18002e515
mov r9, r10
mov rbx, rsi
nop word [rax + rax]
movsx r8d, al
lea r9, [r9 + 1]
lea rcx, [rbp + 0x1c1]
cmp r11d, r8d
je 0x18002e398
movzx edx, r11b
test dl, dl
je 0x18002e39d
movsx edx, byte [rcx + 1]
inc rcx
cmp edx, r8d
jne 0x18002e388
cmp byte [rcx], sil
jne 0x18002e3a8
movzx eax, byte [r9]
inc rbx
test al, al
jne 0x18002e370
add rbx, r10
cmp byte [rbx], sil
je 0x18002e3b8
mov byte [rbx], sil
inc rbx
jmp 0x18002e3c0
mov rbx, rsi
nop dword [rax + rax]
mov qword [rsp + 0x78], rsi
mov r8, r14
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], sil
inc r8
cmp byte [r10 + r8], sil
jne 0x18002e3d5
mov rdx, r10
lea rcx, [rsp + 0x68]
call fcn.18023c100
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x48]
call fcn.18023abe0
lea rcx, [rsp + 0x68]
call fcn.18023c0a0
xor eax, eax
mov word [rbp + 0x1c8], 0x6e63
mov byte [rbp + 0x1ca], al
mov qword [rbp + 0x1d8], rsi
mov rax, qword [rbp + 0x1d8]
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rbp + 0x1d8]
mov rax, qword [rbp + 0x1d8]
movzx r8d, byte [rbp + rax + 0x1c9]
mov rax, r12
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rbp + 0x1d8]
shl dl, 3
sub cl, dl
mov edx, 0x4627b42
sar edx, cl
xor dl, r8b
mov byte [rbp + rax + 0x1c9], dl
mov rax, qword [rbp + 0x1d8]
inc rax
mov qword [rbp + 0x1d8], rax
mov rax, qword [rbp + 0x1d8]
cmp rax, 1
jb 0x18002e430
mov byte [rbp + 0x1ca], sil
test rbx, rbx
jne 0x18002e4a4
mov r10, rsi
jmp 0x18002e50c
mov r9, rsi
movsx edi, byte [rbp + 0x1c9]
mov r8, rbx
cmp byte [rbx], sil
je 0x18002e4f5
nop word [rax + rax]
lea rax, [rbp + 0x1c9]
test dil, dil
je 0x18002e4e5
movzx edx, byte [r8]
movzx ecx, dil
cmp dl, cl
je 0x18002e4e5
movzx ecx, byte [rax + 1]
inc rax
test cl, cl
jne 0x18002e4d4
jmp 0x18002e4f5
cmp byte [rax], sil
je 0x18002e4f5
inc r8
inc r9
cmp byte [r8], sil
jne 0x18002e4c0
movzx eax, byte [r9 + rbx]
lea r10, [r9 + rbx]
test al, al
jne 0x18002e64a
mov r10, rsi
mov rbx, rsi
test r10, r10
jne 0x18002e3c0
movzx eax, byte [r15 + 0x58]
test al, al
je 0x18002e6a1
dec al
cmp al, 4
ja 0x18002e7b4
mov dword [rbp + 0x1d0], 0x33d4fc
mov qword [rbp + 0x1d8], rsi
mov rax, qword [rbp + 0x1d8]
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x1d8]
mov rax, qword [rbp + 0x1d8]
movzx r8d, byte [rbp + rax + 0x1d1]
mov rax, r12
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rbp + 0x1d8]
shl dl, 3
sub cl, dl
mov edx, 0x7d03faa3
sar edx, cl
xor dl, r8b
mov byte [rbp + rax + 0x1d1], dl
mov rax, qword [rbp + 0x1d8]
inc rax
mov qword [rbp + 0x1d8], rax
mov rax, qword [rbp + 0x1d8]
cmp rax, 2
jb 0x18002e550
lea rdx, [rbp - 0x50]
mov byte [rbp + 0x1d3], sil
mov rcx, r15
lea rbx, [rbp + 0x1d1]
call fcn.18002f660
cmp qword [rax + 0x18], 0x10
jb 0x18002e5d7
mov rax, qword [rax]
mov rdx, rbx
mov rcx, rax
call fcn.180251264
lea rcx, [rbp - 0x50]
mov rbx, rax
call fcn.18023c0a0
test rbx, rbx
je 0x18002e7b4
mov rcx, qword [r15 + 0xf0]
mov r9, rbx
mov rdx, qword [r15 + 0xf8]
mov r8d, 1
sub rdx, rcx
call fcn.180252740
lea rdx, [rbp - 0x30]
mov rcx, r15
call fcn.18002f660
cmp qword [rax + 0x18], 0x10
jb 0x18002e62c
mov rax, qword [rax]
mov rcx, rax
call fcn.180006970
lea rcx, [rbp - 0x30]
call fcn.18023c0a0
mov rcx, rbx
call fcn.1802518f4
jmp 0x18002e7b4
mov r9, r10
mov r11, rsi
movsx r8d, al
lea r9, [r9 + 1]
lea rcx, [rbp + 0x1c9]
cmp edi, r8d
je 0x18002e678
movzx edx, dil
test dl, dl
je 0x18002e67d
movsx edx, byte [rcx + 1]
inc rcx
cmp edx, r8d
jne 0x18002e668
cmp byte [rcx], sil
jne 0x18002e688
movzx eax, byte [r9]
inc r11
test al, al
jne 0x18002e650
cmp byte [r11 + r10], sil
lea rbx, [r11 + r10]
je 0x18002e509
mov byte [rbx], sil
inc rbx
jmp 0x18002e50c
mov rax, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x48]
sub rax, rdi
sar rax, 5
cmp rax, 1
jb 0x18002e7b4
mov ecx, 0x28
call fcn.180249f28
mov qword [rax + 0x18], rsi
lea rcx, [0x18027aae0]
mov dword [rax + 0x20], esi
mov qword [rax + 0x10], r14
mov qword [rax], rcx
lea rcx, [rax + 0x10]
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
mov rbx, qword [r15 + 0x50]
mov qword [r15 + 0x48], rcx
mov qword [r15 + 0x50], rax
test rbx, rbx
je 0x18002e72d
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18002e728
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], r14d
cmp r14d, 1
jne 0x18002e728
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov rdi, qword [rsp + 0x48]
mov r8d, dword [r15 + 0xf8]
sub r8d, dword [r15 + 0xf0]
cmp qword [rdi + 0x18], 0x10
jb 0x18002e745
mov rdi, qword [rdi]
mov rcx, qword [r15 + 0x48]
mov rdx, rdi
call fcn.18002ac30
test al, al
je 0x18002e7b4
mov rcx, qword [r15 + 0x48]
call fcn.18002c520
mov r9, qword [r15 + 0x48]
mov r8, qword [r15 + 0xf0]
mov rcx, qword [r15 + 0xf8]
mov rax, qword [r9 + 8]
test rax, rax
lea rdx, [rax + 8]
cmove rdx, rsi
sub rcx, r8
je 0x18002e7a8
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [r8]
lea r8, [r8 + 1]
mov byte [rdx], al
lea rdx, [rdx + 1]
sub rcx, 1
jne 0x18002e790
mov r9, qword [r15 + 0x48]
mov rax, qword [r9 + 8]
test rax, rax
je 0x18002e7b4
xchg dword [rax + 4], esi
lea rcx, [rsp + 0x48]
call fcn.18023bf70
mov rdi, qword [rsp + 0x280]
mov rbx, qword [rsp + 0x288]
add rsp, 0x290
pop r15
pop r14
pop r12
pop rsi
pop rbp
ret