Function at 0x180062810
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x18007cd08]
xor rax, rsp
mov qword [rbp - 8], rax
mov rsi, r9
mov edi, edx
mov r11, rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
xor r15d, r15d
mov qword [rbp - 0x30], r15
mov r9d, edx
imul r14d, edx, 0x108
mov rbx, qword [rbp - 0x50]
cmp edx, r14d
ja 0x180062b1c
mov r10, qword [rbp - 0x50]
cmp r9d, 0x59
ja 0x1800628f2
je 0x180062b1c
mov eax, r9d
sub eax, 1
je 0x1800628b3
sub eax, 8
je 0x180062946
cmp eax, 0x24
jne 0x180062932
imul r10, r10, 0x8001
xor edx, edx
mov rax, r10
div qword [r11]
mov rbx, rdx
mov qword [rbp - 0x50], rdx
jmp 0x180062932
mov rdx, r15
mov rcx, r15
mov r10, qword [r8]
test r10, r10
je 0x1800628e2
movsx rax, byte [rsi + rdx]
add rax, rcx
imul rcx, rax, 0x401
mov rax, rcx
shr rax, 6
xor rcx, rax
inc rdx
cmp rdx, r10
jb 0x1800628c1
lea r10, [rcx + rcx*8]
mov rax, r10
shr rax, 0xb
xor r10, rax
jmp 0x180062932
cmp r9d, 0x7f
je 0x180062907
cmp r9d, 0x1653
je 0x180062b1c
jmp 0x180062932
test r8, r8
je 0x18006292b
mov rcx, qword [r11]
nop
cmp rcx, qword [r8 + 8]
je 0x180062b19
jae 0x180062922
mov r8, qword [r8 + 0x10]
jmp 0x180062926
mov r8, qword [r8 + 0x18]
test r8, r8
jne 0x180062910
mov rbx, r15
mov qword [rbp - 0x50], rbx
imul eax, edi, 0x2c
add r9d, eax
cmp r9d, r14d
ja 0x180062b1c
jmp 0x180062872
mov ecx, 0x41
mov r14d, reloc.SHELL32.dll_ILRemoveLastID
mov r12, qword [rbp - 0x50]
movzx r13d, byte [rbp - 0x48]
nop word [rax + rax]
cmp r14d, 0x11
je 0x1800629a1
cmp r14d, 0x7d
jne 0x180062ad6
mov dword [rsi], r15d
mov rcx, qword [rbp - 0x40]
mov rax, rcx
mov rdx, qword [rbp - 0x38]
cmp rcx, rdx
je 0x180062994
cmp dword [rax + 8], 0
jne 0x18006298b
inc dword [rsi]
add rax, 0x20
cmp rax, rdx
jne 0x180062983
mov byte [rbp - 0x50], 1
mov rbx, qword [rbp - 0x50]
jmp 0x180062b20
mov r8d, ecx
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.1800418a0
test al, al
jne 0x180062ad1
mov edi, r15d
nop word [rax + rax]
cmp edi, 9
ja case.default.0x1800629dc
mov eax, edi
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x62b90]
add rcx, rdx
jmp rcx
mov eax, 0x74
mov word [rbp - 0x23], ax
mov eax, 0x73
mov word [rbp - 0x22], ax
mov eax, 0x2e
mov word [rbp - 0x21], ax
jmp case.default.0x1800629dc
mov dword [rsi], 1
lea rax, [rbp - 0x28]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x100
xor r9d, r9d
xor edx, edx
lea rcx, [rdx - 1]
lea r8d, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov r12, rax
jmp case.default.0x1800629dc
mov eax, 0x20
mov word [rbp - 0x1a], ax
mov eax, 0x203d
mov word [rbp - 0x19], ax
mov dword [rbp - 0x17], 0x44414527
mov eax, 0x4e
mov word [rbp - 0x13], ax
jmp case.default.0x1800629dc
mov eax, 0x3b
mov word [rbp - 0xe], ax
mov r13b, 1
jmp case.default.0x1800629dc
mov ecx, 0x41
mov word [rbp - 0x20], cx
mov eax, 0x44
mov word [rbp - 0x1f], ax
mov eax, 0x4e
mov word [rbp - 0x1e], ax
jmp 0x180062abc
mov dword [rbp - 0x1d], 0x454d41
jmp case.default.0x1800629dc
mov dword [rbp - 0x12], 0x27454d41
jmp case.default.0x1800629dc
mov eax, 0x65
mov word [rbp - 0x28], ax
mov eax, 0x78
mov word [rbp - 0x27], ax
mov eax, 0x6f70
mov word [rbp - 0x26], ax
jmp case.default.0x1800629dc
mov eax, 0x72
mov word [rbp - 0x24], ax
mov ecx, 0x41
inc edi
lea eax, [rdi + 0x124]
cmp eax, 0x12e
jb 0x1800629c0
jmp 0x180062ad6
mov ecx, 0x41
add r14d, 0x6c
cmp r14d, 0xe9
jae 0x180062b1c
jmp 0x180062960
movzx eax, r13b
test r12, r12
cmovne r15d, eax
test r15b, r15b
je 0x180062b0f
xor r8d, r8d
xor edx, edx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_SetupComm]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [rbp - 0x50], 0
mov rbx, qword [rbp - 0x50]
jmp 0x180062b1c
mov rbx, r8
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x180062b5d
mov rdx, qword [rbp - 0x30]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x180062b58
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180062b58
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18006e8b0
mov rax, rbx
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.18006edc0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret