Function at 0x18001f2f0
Capabilities:
Encode data using xor
Write file on windows

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x388]
sub rsp, 0x480
cmp byte [0x18023ca42], 0
je 0x18001fa22
mov qword [rax + 0x18], rbx
mov rbx, qword [0x18023ca08]
mov qword [rax + 0x20], rdi
movaps xmmword [rax - 0x18], xmm6
cmp dword [rbx + 0x4088], 0
jg 0x18001f345
mov r8d, 0x6fa
lea rdx, str.E:Cheat_src_UpdateCHEAT_SRC_ESP_AIMBOTimguiimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4090]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1800176e0
movaps xmm0, xmmword [0x1800acbe0]
lea rcx, [rsp + 0x40]
movups xmmword [rsp + 0x40], xmm0
mov rbx, rax
mov dword [rbp + 0x390], 0x44f00000
mov dword [rbp + 0x394], 0x44870000
xorps xmm6, xmm6
mov qword [rbp + 0x398], 0
call fcn.18000abd0
xor edi, edi
lea r8, [rbp + 0x390]
mov dword [rsp + 0x28], edi
lea rdx, [rbp + 0x398]
mov r9d, eax
movss dword [rsp + 0x20], xmm6
mov rcx, rbx
call fcn.1800416f0
mov rax, qword [0x18023ca08]
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 2
or dword [rax + 0x3f90], 2
mov dword [rax + 0x3fb0], 0x43960000
mov dword [rax + 0x3fb4], 0x43960000
mov dword [rax + 0x3f98], 1
mov rbx, qword [0x18023ca08]
movss xmm1, dword [rbx + 0x37e8]
lea rcx, [rbx + 0x4010]
movss xmm0, dword [rbx + 0x37ec]
movss dword [rsp + 0x44], xmm1
movss dword [rsp + 0x48], xmm0
call fcn.180031610
mov eax, dword [str.yYPQW:]
lea r8d, [rdi + 0x2b]
mov dword [rbp + 0x390], eax
lea rcx, [rbp + 0x390]
movzx eax, word [0x1800ac0e8]
xor edx, edx
xor byte [rbp + 0x391], 0x36
xor byte [rbp + 0x392], 0x37
xor byte [rbp + 0x393], 0x38
mov word [rbp + 0x394], ax
xor al, 0x39
xor byte [rbp + 0x395], 0x3a
mov byte [rbp + 0x394], al
mov qword [rbx + 0x37e8], rdi
mov byte [rbp + 0x390], 0x4c
call fcn.180005900
mov rcx, qword [0x18023ca08]
mov rax, qword [rcx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e90]
mov rbx, qword [rax + 0x280]
call fcn.18002fcc0
mov rcx, qword [0x18023ca08]
lea edx, [rdi + 8]
mov rax, qword [rcx + 0x3e90]
movss xmm4, dword [rax + 0x18]
movss xmm5, dword [rax + 0x1c]
movss xmm2, dword [rax + 0x20]
movss xmm3, dword [rax + 0x24]
lea rax, [rcx + 0x37e0]
lea rcx, [rsp + 0x50]
nop dword [rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x18001f4e0
movss xmm6, dword [0x1800ac90c]
addss xmm2, xmm4
movups xmm0, xmmword [rax]
mov rax, qword [rax + 0x10]
addss xmm3, xmm5
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], rax
lea rcx, [rsp + 0x40]
movaps xmm0, xmmword [0x1800acb40]
subss xmm2, xmm6
addss xmm4, xmm6
subss xmm3, xmm6
addss xmm5, xmm6
movups xmmword [rsp + 0x40], xmm0
movss dword [rbp + 0x390], xmm2
movss dword [rbp + 0x394], xmm3
movss dword [rbp + 0x398], xmm4
movss dword [rbp + 0x39c], xmm5
call fcn.18000abd0
movss xmm0, dword [rsp + 0x60]
lea r8, [rbp + 0x390]
movss dword [rsp + 0x30], xmm6
lea rdx, [rbp + 0x398]
mov r9d, eax
mov dword [rsp + 0x28], edi
mov rcx, rbx
movss dword [rsp + 0x20], xmm0
call fcn.1800415e0
mov rcx, qword [0x18023ca08]
mov rax, qword [rcx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e90]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, dword [0x1800ac970]
addss xmm0, dword [0x1800ac9c4]
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.180008ab0
call fcn.1800146d0
cmp dword [0x180197d08], 1
mov rbx, qword [rsp + 0x4a0]
jne 0x18001f9fe
mov rcx, qword [0x18023ca08]
mov rax, qword [rcx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e90]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, dword [0x1800ac9c8]
addss xmm0, dword [0x1800ac9d8]
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.180008ab0
call fcn.1800146d0
cmp dword [0x180197d0c], 2
jne 0x18001f9fe
mov rcx, qword [0x18023ca08]
lea r8, [0x18023c950]
mov qword [rsp + 0x30], rdi
lea rdx, str.Username
mov qword [rsp + 0x28], rdi
mov r9d, 0x19
mov dword [rsp + 0x20], 0x14
mov rax, qword [rcx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e90]
lea rcx, [0x1800ac10c]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, dword [0x1800aca08]
addss xmm0, dword [0x1800ac98c]
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.180067240
mov qword [rsp + 0x30], rdi
lea r8, [0x18023c970]
mov qword [rsp + 0x28], rdi
lea rdx, str.Password
mov r9d, 0x19
mov dword [rsp + 0x20], 0x8000
lea rcx, [0x1800ac11c]
call fcn.180067240
call fcn.18006a5e0
cmp byte [0x1800ac0fb], dil
movsd xmm0, qword [str.gSZ_TXN]
mov eax, dword [0x1800ac0f8]
movsd qword [rsp + 0x40], xmm0
mov dword [rsp + 0x48], eax
je 0x18001f8f0
cmp dword [0x18023c2e0], 2
jl 0x18001f8ad
movdqa xmm2, xmmword [0x1800acac0]
mov eax, 5
movdqa xmm3, xmmword [0x1800acad0]
movdqa xmm1, xmm2
movdqa xmm4, xmmword [0x1800ace50]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
mov edi, 8
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
movd xmm6, eax
mov eax, 0x1f
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
movd xmm5, eax
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1800acae0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, dword [str.gSZ_TXN]
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800acb20]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.5555555555555555]
xorps xmm2, xmm0
punpckldq xmm1, xmm3
movd dword [rsp + 0x40], xmm2
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1800acae0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, dword [rsp + 0x44]
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800acb20]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.5555555555555555]
xorps xmm2, xmm0
movd dword [rsp + 0x44], xmm2
movsxd rax, edi
lea r8, [rsp + 0x40]
add r8, rax
nop dword [rax + rax]
mov eax, 0xa0a0a0a1
lea r8, [r8 + 1]
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, dil
inc edi
sub al, cl
add al, 0x35
xor byte [r8 - 1], al
cmp edi, 0xc
jl 0x18001f8c0
lea rdx, [0x18023ca43]
lea rcx, [rsp + 0x40]
call fcn.18005e450
call fcn.18006a5e0
lea rdx, [rbp + 0x390]
mov qword [rbp + 0x390], 0
lea rcx, str.Login
call fcn.18005dbf0
test al, al
je 0x18001f9fe
cmp byte [0x18023ca43], 0
je 0x18001f9f2
mov eax, dword [0x1800ac080]
lea r8, [0x1800ac088]
mov dword [rbp + 0x390], eax
lea rdx, [rbp + 0x390]
movzx eax, word [0x1800ac084]
lea rcx, [0x18023c9c8]
xor byte [rbp + 0x391], 0x36
xor byte [rbp + 0x392], 0x37
xor byte [rbp + 0x393], 0x38
mov word [rbp + 0x394], ax
xor al, 0x39
xor byte [rbp + 0x395], 0x3a
mov byte [rbp + 0x394], al
mov byte [rbp + 0x390], 0x4c
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen_s]
mov rcx, qword [0x18023c9c8]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
mov r9, qword [0x18023c9c8]
lea rcx, [0x18023c950]
mov edx, 0x19
lea r8d, [rdx - 0x18]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov r9, qword [0x18023c9c8]
lea rcx, [0x18023c970]
mov edx, 0x19
lea r8d, [rdx - 0x18]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, qword [0x18023c9c8]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov byte [0x18023c93e], 1
call fcn.180017170
call fcn.180013750
mov ecx, 1
call fcn.1800253d0
call fcn.1800142b0
movaps xmm6, xmmword [rsp + 0x470]
mov rdi, qword [rsp + 0x4a8]
add rsp, 0x480
pop rbp
ret