Function at 0x180061e50
Capabilities:
Encode data using xor
Hash data using sha1

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xf0
mov rax, qword [0x1800c37a8]
xor rax, rsp
mov qword [rbp + 0x17], rax
movzx ebx, byte [rsp + 0x30]
lea eax, [r8 + 0xc]
mov dword [rsp + 0x3c], eax
cmp r8d, eax
mov r13, r9
mov dword [rsp + 0x38], r8d
mov esi, r8d
mov rdi, rdx
mov r14, rcx
jae case.0x180061ec4.220
xor r11d, r11d
lea eax, [rsi - 0xca]
lea rdx, [0x180000000]
cmp eax, 0x19
ja case.0x180061ec4.205
mov ecx, dword [rdx + rax*4 + 0x6240c]
add rcx, rdx
jmp rcx
mov r15, qword [rbp - 0x69]
xorps xmm0, xmm0
mov rcx, r15
movups xmmword [r15], xmm0
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
inc esi
cmp esi, dword [rsp + 0x3c]
mov dword [rsp + 0x38], esi
jmp 0x180061e9b
mov rdx, qword [rbp - 0x61]
xor r9d, r9d
xor r8d, r8d
mov ecx, 0xa9
call fcn.1800271f0
inc esi
xor bl, bl
cmp esi, dword [rsp + 0x3c]
mov dword [rsp + 0x38], esi
jmp 0x180061e9b
mov rdx, qword [rbp - 0x69]
mov ecx, 0x19
call fcn.180028580
inc esi
cmp esi, dword [rsp + 0x3c]
mov dword [rsp + 0x38], esi
jmp 0x180061e9b
lea r8, [rbp - 0x59]
mov r9d, 5
nop
mov edx, 0x22
mov eax, edx
sub eax, 0x22
je 0x180061f65
sub eax, 1
je 0x180061f4d
cmp eax, 1
jne 0x180061f6f
movzx eax, byte [r8 + 3]
jmp 0x180061f69
mov ecx, dword [r8]
mov eax, ecx
shr eax, 8
shr ecx, 0x10
mov byte [r14], al
mov byte [r14 + 1], cl
add r14, 2
jmp 0x180061f6f
movzx eax, byte [r8]
mov byte [r14], al
inc r14
inc edx
cmp edx, 0x25
jb 0x180061f35
add r8, 4
sub r9, 1
jne 0x180061f30
inc esi
cmp esi, dword [rsp + 0x3c]
mov dword [rsp + 0x38], esi
jmp 0x180061e9b
test rdi, rdi
je case.0x180061ec4.220
inc esi
mov qword [rbp - 0x69], rdi
cmp esi, dword [rsp + 0x3c]
mov dword [rsp + 0x38], esi
jmp 0x180061e9b
test dword [r13], 0xffffffc0
mov r15d, r11d
mov dword [rbp - 0x41], 0x67452301
mov dword [rbp - 0x3d], 0xefcdab89
mov dword [rbp - 0x39], 0x98badcfe
mov dword [rbp - 0x35], 0x10325476
movups xmm0, xmmword [rbp - 0x41]
mov dword [rbp - 0x49], 0xc3d2e1f0
movups xmmword [rbp - 0x59], xmm0
jbe 0x1800620b5
nop word [rax + rax]
mov esi, 0x8e
nop word [rax + rax]
cmp esi, 0x8e
jne 0x180062090
lea r9, [rbp - 0x29]
lea r10d, [rsi - 0x7e]
mov r8d, 0x3e
nop word [rax + rax]
cmp r8d, 0x3e
je 0x18006203d
cmp r8d, 0x102
jne 0x180062059
movzx eax, byte [rdi]
shl eax, 0x18
or dword [r9], eax
inc rdi
jmp 0x180062059
movzx ecx, byte [rdi + 2]
movzx eax, byte [rdi + 1]
movzx edx, byte [rdi]
shl ecx, 8
or ecx, eax
shl ecx, 8
or ecx, edx
mov dword [r9], ecx
add rdi, 3
add r8d, 0xc4
cmp r8d, 0x1c6
jb 0x180062020
add r9, 4
sub r10, 1
jne 0x180062014
mov r9d, 0xd4
mov qword [rsp + 0x20], r11
lea r8, [rbp - 0x29]
xor ecx, ecx
lea rdx, [rbp - 0x59]
call fcn.180022e30
xor r11d, r11d
add esi, 0x672c
cmp esi, 0x672c
jbe 0x180062000
mov eax, dword [r13]
inc r15d
shr eax, 6
cmp r15d, eax
jb 0x180061ff0
mov esi, SHSetFolderPathA
nop word [rax + rax]
cmp esi, 0xe3
je 0x180062161
cmp esi, 0x7fb
je 0x180062120
cmp esi, 0xf13
je 0x180062107
cmp esi, 0x162b
jne 0x1800621e3
mov r9d, 0xd4
mov qword [rsp + 0x20], r11
lea r8, [rbp - 0x29]
xor ecx, ecx
lea rdx, [rbp - 0x59]
call fcn.180022e30
jmp 0x1800621e3
mov ecx, dword [r13]
lea eax, [rcx*8]
shr ecx, 0x1d
mov dword [rbp + 0x13], ecx
mov dword [rbp + 0xf], eax
jmp 0x1800621e3
mov eax, dword [r13]
and eax, 0x3f
cmp al, 0x37
jbe 0x1800621e3
mov r9d, 0xd4
mov qword [rsp + 0x20], r11
lea r8, [rbp - 0x29]
xor ecx, ecx
lea rdx, [rbp - 0x59]
call fcn.180022e30
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rbp - 9], xmm0
movups xmmword [rbp + 7], xmm0
jmp 0x1800621e3
mov r11d, dword [r13]
xorps xmm0, xmm0
mov r10d, r11d
movaps xmmword [rbp - 0x29], xmm0
movaps xmmword [rbp - 0x19], xmm0
mov r8d, 0
movaps xmmword [rbp - 9], xmm0
movaps xmmword [rbp + 7], xmm0
and r10d, 0x3f
jbe 0x1800621bd
xor r9d, r9d
nop word [rax + rax]
mov rax, r9
lea rdx, [rbp - 0x29]
shr rax, 2
mov ecx, r8d
lea rdx, [rdx + rax*4]
and ecx, 3
movzx eax, byte [rdi]
inc r8d
shl ecx, 3
inc rdi
shl eax, cl
inc r9
xor dword [rdx], eax
cmp r8d, r10d
jb 0x180062190
mov rax, r11
lea rdx, [rbp - 0x29]
shr rax, 2
and r11d, 3
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
lea eax, [r11*8 + 7]
btc ecx, eax
mov dword [rdx], ecx
add esi, 0x718
mov r11d, 0
cmp esi, 0x1c60
jbe 0x1800620c0
mov esi, dword [rsp + 0x38]
inc esi
cmp esi, dword [rsp + 0x3c]
mov dword [rsp + 0x38], esi
jmp 0x180061e9b
cmp qword [rdi + 8], 0
jne case.0x180061ec4.205
xor al, al
jmp 0x1800623e3
cmp qword [rbp - 0x79], 0
jbe case.0x180061ec4.205
nop dword [rax + rax]
xor r9d, r9d
xor edx, edx
xor ecx, ecx
lea r8d, [r9 + 0x7c]
call fcn.18009d260
lea r9, [rsp + 0x31]
mov qword [rbp - 0x61], rax
mov r8d, 0xb9
mov qword [rsp + 0x40], 1
lea rdx, [rsp + 0x48]
mov r15, rax
lea rcx, [rsp + 0x40]
call fcn.180026240
test al, al
je case.0x180061ec4.218
movzx ecx, byte [rsp + 0x31]
mov dword [r15], ecx
movzx ecx, byte [rsp + 0x31]
cmp cl, 0x4c
jae 0x18006228c
mov r12d, ecx
jmp 0x180062311
jne 0x1800622c1
lea r9, [rsp + 0x30]
mov qword [rsp + 0x40], 1
mov r8d, 0xb9
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x40]
call fcn.180026240
test al, al
je case.0x180061ec4.218
movzx r12d, byte [rsp + 0x30]
jmp 0x180062311
cmp cl, 0x4d
jne 0x1800622ea
lea r8, [rsp + 0x34]
mov ecx, 0xf6
lea rdx, [rsp + 0x48]
call fcn.180030c30
test al, al
je case.0x180061ec4.218
movzx r12d, word [rsp + 0x34]
jmp 0x180062311
cmp cl, 0x4e
jne 0x180062383
lea r9, [rbp - 0x71]
mov r8d, 0xb4
lea rdx, [rsp + 0x48]
xor ecx, ecx
call fcn.18009d260
test al, al
je case.0x180061ec4.218
mov r12d, dword [rbp - 0x71]
mov edx, r12d
mov ecx, 1
mov esi, r12d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r8d, r12d
lea rdx, [rsp + 0x48]
mov rcx, rax
mov qword [r15 + 8], rax
call sub.VCRUNTIME140.dll_memcpy
xor r9d, r9d
mov qword [r15 + 0x10], rsi
mov r8d, 0x9d
mov qword [rsp + 0x20], r15
mov rdx, r13
xor ecx, ecx
call fcn.18009f250
lea r8, [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov edx, ILAppendID
lea rcx, [rsp + 0x48]
call fcn.180030aa0
test al, al
jne 0x18006239b
mov esi, 0xda
inc esi
cmp esi, dword [rsp + 0x3c]
mov dword [rsp + 0x38], esi
jmp 0x180061e9b
xor r9d, r9d
mov qword [rsp + 0x20], r15
mov r8d, 0x9d
mov rdx, r13
xor ecx, ecx
call fcn.18009f250
cmp qword [rbp - 0x79], 0
ja 0x180062230
mov esi, dword [rsp + 0x38]
inc esi
cmp esi, dword [rsp + 0x3c]
mov dword [rsp + 0x38], esi
jmp 0x180061e9b
mov rax, qword [rdi]
mov qword [rsp + 0x48], rax
mov rax, qword [rdi + 8]
mov qword [rbp - 0x79], rax
mov qword [rbp - 0x61], r11
inc esi
cmp esi, dword [rsp + 0x3c]
mov dword [rsp + 0x38], esi
jmp 0x180061e9b
mov al, 1
jmp 0x1800623e3
movzx eax, bl
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1800a1820
mov rbx, qword [rsp + 0x138]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret