Function at 0x18005bd80
Capabilities:
Encode data using xor
Get file size
Hash data with crc32

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x1c8]
sub rsp, 0x2a0
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x1800eb008]
xor rax, rsp
mov qword [rbp + 0x190], rax
mov r14, r8
mov rsi, rdx
mov rdi, rcx
test rdx, rdx
je 0x18005c26f
cmp word [rdx], 0
je 0x18005c26f
test r8, r8
jne 0x18005bde6
mov eax, 0x80070057
jmp 0x18005c274
mov qword [rsp + 0x78], r14
mov rax, qword [r8]
mov rcx, r14
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
xor r15d, r15d
mov qword [rsp + 0x40], r15
mov rax, qword [r14]
lea r8, [rsp + 0x40]
lea rdx, [0x1800d97d0]
mov rcx, r14
call qword [rax]
mov ebx, eax
mov r12d, 0x80000000
test r12d, eax
jne 0x18005c251
cmp eax, 1
je 0x18005c251
cmp qword [rsp + 0x40], r15
jne 0x18005be3c
mov ebx, 0x80004005
jmp 0x18005c251
mov rcx, qword [rdi + 0x70]
cmp rcx, 0xffffffffffffffff
je 0x18005be4c
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rdi + 0x380]
test rcx, rcx
je 0x18005be64
call fcn.18007294c
mov qword [rdi + 0x380], r15
mov edx, 0xc0000000
cmp dword [rdi + 0x24], 0
cmovne edx, r12d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x20000000
mov dword [rsp + 0x20], 3
xor r9d, r9d
lea r8d, [r9 + 1]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rdi + 0x70], rax
cmp rax, 0xffffffffffffffff
jne 0x18005bf1d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, 0x21
ja 0x18005bebd
movabs rcx, 0x300080020
bt rcx, rbx
jb 0x18005bedb
cmp ebx, 0xa7
je 0x18005bedb
test ebx, ebx
jle 0x18005c251
movzx ebx, bx
or ebx, 0x80070000
jmp 0x18005c251
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 3
xor r9d, r9d
lea r8d, [r9 + 1]
mov edx, r12d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rdi + 0x70], rax
cmp rax, 0xffffffffffffffff
jne 0x18005bf16
call fcn.180002050
mov ebx, eax
jmp 0x18005c251
mov dword [rdi + 0x24], 1
mov esi, 0x200
mov r8d, esi
xor edx, edx
lea rcx, [rbp - 0x70]
call fcn.18008c000
mov qword [rbp - 0x80], r15
lea rcx, [rdi + 0x10]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
lea r9, [rbp - 0x80]
mov r8d, 1
mov rdx, qword [rdi + 0x70]
call fcn.1800019b0
mov ebx, eax
test r12d, eax
jne 0x18005c251
cmp eax, 1
je 0x18005c251
cmp dword [rbp - 0x70], 0x5120372
je 0x18005bf89
mov ebx, 0xe00e1001
jmp 0x18005c251
lea rdx, [rsp + 0x48]
mov rcx, qword [rdi + 0x70]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x18005bfa8
call fcn.180002050
mov ebx, eax
jmp 0x18005c251
mov rax, qword [rsp + 0x48]
cqo
and edx, 0x1ff
add rax, rdx
mov rcx, rax
and eax, 0x1ff
sar rcx, 9
cmp rax, rdx
je 0x18005bfd3
mov ebx, 0xe0037001
jmp 0x18005c251
mov qword [rsp + 0x48], rcx
mov dword [rdi + 0x80], ecx
mov dword [rdi + 0x88], r15d
mov eax, dword [rbp - 0x6c]
test eax, eax
jne 0x18005c025
mov dword [rdi + 0x78], r15d
mov edx, dword [rbp - 0x60]
mov dword [rdi + 0x84], edx
mov eax, dword [rbp - 0x54]
shl rax, 9
mov qword [rdi + 0x30], rax
mov rcx, rdi
call fcn.18005d9f0
mov ebx, eax
test r12d, eax
jne 0x18005c251
cmp eax, 1
jne 0x18005c197
jmp 0x18005c251
cmp eax, 1
jne 0x18005c0b0
mov r8d, r15d
mov edx, r15d
mov r9d, r15d
mov r10d, r15d
mov rcx, r15
nop dword [rax]
movzx eax, byte [rbp + rcx - 0x70]
add r8d, eax
movzx eax, byte [rbp + rcx - 0x6f]
add r10d, eax
movzx eax, byte [rbp + rcx - 0x6e]
add r9d, eax
movzx eax, byte [rbp + rcx - 0x6d]
add edx, eax
add rcx, 4
cmp rcx, rsi
jl 0x18005c040
lea eax, [r10 + r9]
add eax, edx
add r8d, eax
mov edx, dword [rbp - 0x58]
mov eax, edx
shr eax, 0x10
movzx ecx, al
mov eax, edx
shr eax, 8
movzx eax, al
add ecx, eax
movzx eax, dl
add ecx, eax
mov eax, edx
shr eax, 0x18
add ecx, eax
sub r8d, ecx
cmp edx, r8d
je 0x18005c0a4
mov ebx, 0xe0037001
jmp 0x18005c251
mov dword [rdi + 0x78], 1
jmp 0x18005c142
cmp eax, 2
jne 0x18005c24c
mov r10d, dword [rbp - 0x64]
mov dword [rbp - 0x64], r15d
lea r9, [rbp - 0x70]
or r8d, 0xffffffff
lea r11, [0x1800cd2a0]
mov ecx, r8d
movzx eax, byte [r9]
xor rcx, rax
movzx edx, cl
mov eax, r8d
shr eax, 8
mov r8d, dword [r11 + rdx*4]
xor r8d, eax
lea r9, [r9 + 1]
sub esi, 1
jne 0x18005c0d0
not r8d
cmp r10d, r8d
je 0x18005c105
mov ebx, 0xe0037001
jmp 0x18005c251
mov dword [rdi + 0x78], 2
test byte [rbp - 0x68], 1
je 0x18005c142
mov dword [rdi + 0x88], 1
mov r8, qword [rsp + 0x40]
lea rdx, [rbp - 0x70]
mov rcx, rdi
call fcn.18005c840
mov ebx, eax
test r12d, eax
jne 0x18005c251
cmp eax, 1
jne 0x18005c184
jmp 0x18005c251
mov eax, dword [rbp - 0x60]
mov dword [rdi + 0x370], eax
shr eax, 9
mov dword [rdi + 0x374], eax
mov eax, dword [rbp - 0x5c]
mov dword [rdi + 0x378], eax
mov eax, dword [rbp - 0x54]
shl rax, 9
mov qword [rdi + 0x30], rax
mov rcx, rdi
call fcn.18005d780
test r12d, eax
mov ebx, eax
jne 0x18005c251
cmp eax, 1
je 0x18005c251
mov rcx, rdi
call fcn.18005c2a0
test eax, eax
jne 0x18005c197
mov dword [rdi + 0x24], 1
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov rsi, r15
mov qword [rsp + 0x60], r15
xor eax, eax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x7c], rax
mov rax, qword [rdi + 0x30]
shr rax, 9
mov dword [rbp - 0x78], eax
lea rdx, [rbp - 0x80]
mov rcx, rdi
call fcn.18005d8c0
mov ebx, eax
test r12d, eax
jne 0x18005c20d
cmp eax, 1
je 0x18005c20d
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x50]
call fcn.18000d800
mov r9d, 1
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.180001580
mov ebx, eax
test eax, eax
jne 0x18005c208
mov dword [rdi + 0x28], 1
mov rsi, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x18005c251
sub rsi, rcx
movabs rax, 0x2aaaaaaaaaaaaaab
imul rsi
sar rdx, 1
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, rcx
call fcn.18000dd50
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
jmp 0x18005c251
mov ebx, 0xe0037000
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x18005c262
mov rdx, qword [rcx]
call qword [rdx + reloc.WS2_32.dll_recv]
nop
mov rdx, qword [r14]
mov rcx, r14
call qword [rdx + reloc.WS2_32.dll_recv]
mov eax, ebx
jmp 0x18005c274
mov eax, 0xe00e1001
mov rcx, qword [rbp + 0x190]
xor rcx, rsp
call fcn.180072920
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret