Function at 0x180139660
Capabilities:
Encode data using xor
Write file on windows

Disassembly:
push rbp
push rbx
push rdi
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0xe8
mov r14, rcx
mov rbx, r9
mov rcx, qword [r8 + 8]
mov rdi, r8
test rcx, rcx
je 0x1801399be
mov rax, qword [r14 + 0xf0]
call rax
cmp eax, 0xffffffff
je 0x1801399be
mov r9, qword [rdi + 8]
mov rcx, r14
mov r8, qword [rbx + 0x28]
mov rdx, qword [rbp + 0x7f]
mov qword [rsp + 0x110], rsi
xor esi, esi
mov qword [rsp + 0x118], r12
mov qword [rsp + 0x120], r13
mov qword [rsp + 0xe0], r15
mov dword [rsp + 0x20], esi
call fcn.180141e70
mov r15, rax
test rax, rax
jne 0x180139798
movdqa xmm0, xmmword [0x180161300]
lea rdx, [rsp + 0x30]
movdqa xmm1, xmmword [0x1801612b0]
lea rcx, [rbp - 0x39]
mov dword [rbp - 0x60], eax
mov word [rbp - 0x5c], ax
mov byte [rbp - 0x5a], al
movabs rax, 0xf0cec3b5d447d029
mov qword [rbp - 0x59], rax
movabs rax, 0xc959caf9a23159aa
mov qword [rbp - 0x51], rax
movabs rax, 0x4767e9aaaa72800a
mov qword [rbp - 0x49], rax
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rbp - 0x61], 0x46
movdqu xmmword [rbp - 0x71], xmm1
call fcn.18000cdb0
lea r8, [rbp - 9]
mov edx, 0x100000
lea rcx, [0x18017bd90]
movups xmm2, xmmword [rax]
movups xmmword [rbp - 9], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 7], xmm0
movzx eax, word [rax + 0x20]
mov word [rbp + 0x17], ax
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x1801397a5
mov rcx, qword [rdi + 8]
call fcn.180146f60
mov qword [rdi + 8], r15
mov rdx, qword [rdi + 0x30]
mov rcx, r14
call fcn.18013a560
mov r9, rbx
mov qword [rsp + 0x20], rax
mov r8, rdi
mov rcx, r14
call fcn.1801399e0
mov r12d, eax
movabs rsi, 0xb0233063af3d6b8
movabs rbx, 0xe1853dc234c3cf2
movabs r13, 0xf437ff3808c16f2b
test eax, eax
jne 0x180139896
movdqa xmm0, xmmword [0x180161a10]
lea rdx, [rsp + 0x30]
movdqa xmm1, xmmword [0x180160a30]
lea rcx, [rbp - 9]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rbp - 0x61], 0xd2a2d56f
movdqu xmmword [rbp - 0x71], xmm1
mov dword [rbp - 0x5d], 0x5529
mov qword [rbp - 0x59], r13
mov qword [rbp - 0x51], rsi
mov qword [rbp - 0x49], rbx
call fcn.18000fed0
lea r8, [rbp - 0x39]
mov edx, 0x100000
movups xmm2, xmmword [rax]
movups xmmword [rbp - 0x39], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp - 0x29], xmm0
mov ecx, dword [rax + 0x20]
mov dword [rbp - 0x19], ecx
movzx ecx, word [rax + 0x24]
mov word [rbp - 0x15], cx
lea rcx, [0x18017bd90]
movzx eax, byte [rax + 0x26]
mov byte [rbp - 0x13], al
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteFile]
test r15, r15
mov r15, qword [rsp + 0xe0]
je 0x180139996
mov rax, qword [r14 + 8]
mov rcx, qword [rdi + 8]
call rax
test eax, eax
jne 0x180139996
call qword [sym.imp.KERNEL32.dll_GetLastError]
movdqa xmm0, xmmword [0x180161ed0]
xor ecx, ecx
movdqa xmm1, xmmword [0x180160a70]
mov r8d, eax
movdqu xmmword [rsp + 0x30], xmm0
mov rax, rbx
mov qword [rbp - 0x51], r13
movdqa xmm0, xmmword [0x180160970]
movdqu xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x49], rsi
movdqu xmmword [rbp - 0x71], xmm1
mov qword [rbp - 0x41], rbx
nop dword [rax + rax]
imul rax, rbx
add rsi, r13
add rax, rsi
mov rbx, rax
shl rax, 0x20
shr rbx, 0x20
or rbx, rax
movzx eax, bl
xor al, byte [rsp + rcx + 0x30]
mov byte [rbp + rcx - 0x39], al
inc rcx
mov rax, rbx
cmp rcx, 0x2f
jb 0x180139900
movups xmm0, xmmword [rbp - 0x39]
mov r9, qword [rdi + 8]
mov edx, 0x100000
movups xmm1, xmmword [rbp - 0x29]
mov dword [rsp + 0x20], r8d
lea r8, [rbp - 9]
movups xmmword [rbp - 9], xmm0
mov byte [rbp - 0xa], 0
lea rcx, [0x18017bd90]
movups xmm0, xmmword [rbp - 0x19]
movups xmmword [rbp + 7], xmm1
movups xmmword [rbp + 0x17], xmm0
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r13, qword [rsp + 0x120]
mov eax, r12d
mov r12, qword [rsp + 0x118]
mov rsi, qword [rsp + 0x110]
add rsp, 0xe8
pop r14
pop rdi
pop rbx
pop rbp
ret
xor eax, eax
add rsp, 0xe8
pop r14
pop rdi
pop rbx
pop rbp
ret