Function at 0x140063970
Capabilities:
Encode data using xor
Read file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
push r13
lea rbp, [rax - 0x2a8]
sub rsp, 0x398
mov qword [rax - 0x18], rbx
lea rcx, [0x14021b360]
mov qword [rax - 0x20], rsi
xor r9d, r9d
mov qword [rax - 0x28], rdi
mov edx, 0x80000000
mov qword [rax - 0x30], r12
mov qword [rax - 0x38], r14
mov qword [rax - 0x40], r15
xor r15d, r15d
mov qword [rsp + 0x30], r15
mov r14d, r15d
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
lea r8d, [r15 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r13, rax
cmp rax, 0xffffffffffffffff
je 0x140063efa
mov r12d, 0x400000
lea rdx, [0x1401ae572]
mov ecx, r12d
call fcn.14002ec60
test rax, rax
je 0x140063efa
xor r9d, r9d
mov dword [rbp + 0x2b0], r12d
lea r8, [rsp + 0x54]
mov qword [rsp + 0x50], r15
xor edx, edx
mov rcx, r13
mov r14, rax
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x50], eax
cmp eax, 0xffffffff
jne 0x140063a38
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140063efa
cmp qword [rsp + 0x50], 0xffffffffffffffff
je 0x140063efa
mov ebx, r15d
test r14, r14
je 0x140063a96
nop dword [rax]
mov r8d, r12d
mov edx, ebx
sub r8d, ebx
mov dword [rbp + 0x2c0], r15d
add rdx, r14
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x2c0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140063a8c
mov eax, dword [rbp + 0x2c0]
test eax, eax
je 0x140063a8c
add ebx, eax
cmp ebx, r12d
jb 0x140063a50
mov eax, ebx
lock add qword [0x1401f4d70], rax
mov qword [rsp + 0x40], r15
mov rsi, r15
test r14, r14
je 0x140063efa
mov eax, 0xf8
cmp ebx, eax
jae 0x140063b51
cmp r13, 0xffffffffffffffff
je 0x140063f05
xor r9d, r9d
mov qword [rsp + 0x58], r15
lea r8, [rsp + 0x5c]
xor edx, edx
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x58], eax
cmp eax, 0xffffffff
jne 0x140063aed
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140063efa
cmp qword [rsp + 0x58], 0xffffffffffffffff
je 0x140063efa
mov ebx, r15d
test r14, r14
je 0x140063b47
mov r8d, r12d
mov edx, ebx
sub r8d, ebx
mov dword [rbp + 0x2c8], r15d
add rdx, r14
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x2c8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140063b3d
mov eax, dword [rbp + 0x2c8]
test eax, eax
je 0x140063b3d
add ebx, eax
cmp ebx, r12d
jb 0x140063b01
mov eax, ebx
lock add qword [0x1401f4d70], rax
mov qword [rsp + 0x40], r15
mov eax, 0xf8
cmp ebx, eax
mov r12d, ebx
cmova r12d, eax
test r12d, r12d
je 0x140063efa
mov edi, r12d
test r14, r14
je 0x140063b84
cmp rdi, rax
ja 0x140063b84
mov r8d, edi
lea rcx, [0x14021b268]
mov rdx, r14
call fcn.14014dae0
jmp 0x140063bc0
mov r8, rax
lea rcx, [0x14021b268]
xor edx, edx
call fcn.14014e180
test r14, r14
jne 0x140063ba7
call fcn.140040da4
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x140063bbb
cmp rdi, 0xf8
jbe 0x140063bc0
call fcn.140040da4
mov dword [rax], 0x22
call fcn.140040c34
cmp r12d, 0xf8
jne 0x140063efa
cmp dword [0x14021b268], 2
jne 0x140063efa
mov edx, 9
lea rdi, [0x140000000]
mov rcx, r15
nop dword [rax]
movzx eax, word [rcx + rdi + 0x1ba290]
cmp word [rcx + rdi + 0x21b26c], ax
jne 0x140063efa
add rcx, 2
sub rdx, 1
jne 0x140063bf0
xor ecx, ecx
call fcn.140035e90
mov qword [rsp + 0x78], rax
mov ecx, 0x288
test r14, r14
je 0x140063ec7
cmp r12d, ebx
ja 0x140063ec7
mov eax, ebx
sub eax, r12d
cmp eax, ecx
jae 0x140063d44
cmp r13, 0xffffffffffffffff
je 0x140063ed2
mov r15d, r12d
add r15, rsi
mov esi, dword [rbp + 0x2b0]
mov r12, r15
and r12d, 0xfff
sub r15, r12
lea edi, [r12 + 0x400000]
cmp edi, esi
jbe 0x140063c9c
mov ecx, edi
lea rdx, [0x1401ae572]
call fcn.14002ec60
mov rsi, rax
test rax, rax
je 0x140063ec7
mov rcx, r14
call fcn.14002ec58
mov r14, rsi
mov dword [rbp + 0x2b0], edi
mov esi, edi
xor r9d, r9d
mov qword [rsp + 0x60], r15
lea r8, [rsp + 0x64]
mov edx, r15d
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x60], eax
cmp eax, 0xffffffff
jne 0x140063ccc
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140063ec7
cmp qword [rsp + 0x60], 0xffffffffffffffff
je 0x140063ec7
test r14, r14
je 0x140063d26
xor eax, eax
mov ebx, eax
mov r8d, edi
mov edx, ebx
sub r8d, ebx
mov dword [rsp + 0x48], eax
add rdx, r14
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x48]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140063d1a
mov eax, dword [rsp + 0x48]
test eax, eax
je 0x140063d1a
add ebx, eax
mov eax, 0
cmp ebx, edi
jb 0x140063ce1
mov eax, ebx
lock add qword [0x1401f4d70], rax
jmp 0x140063d28
xor ebx, ebx
mov qword [rsp + 0x40], r15
cmp r12d, ebx
ja 0x140063ec7
cmp r12d, esi
ja 0x140063ec7
mov ecx, 0x288
mov edi, ebx
sub edi, r12d
cmp edi, ecx
cmova edi, ecx
test edi, edi
je 0x140063ec7
mov esi, r12d
mov r15d, edi
add rsi, r14
je 0x140063d77
cmp r15, rcx
ja 0x140063d77
mov r8d, r15d
lea rcx, [rbp - 0x30]
mov rdx, rsi
call fcn.14014dae0
jmp 0x140063db0
mov r8, rcx
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14014e180
test rsi, rsi
jne 0x140063d97
call fcn.140040da4
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x140063dab
cmp r15, 0x288
jbe 0x140063db0
call fcn.140040da4
mov dword [rax], 0x22
call fcn.140040c34
add r12d, edi
cmp edi, 0x288
jne 0x140063ec7
xor dl, dl
lea rdi, [rbp - 0x30]
xor esi, esi
lea r9, [0x140000000]
mov r8d, 0x288
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rdi]
lea rdi, [rdi + 1]
mov rax, rsi
inc rsi
and eax, 0xf
add dl, byte [r9 + rax*4 + 0x1be080]
xor dl, cl
mov byte [rdi - 1], dl
movzx edx, cl
sub r8, 1
jne 0x140063de0
mov ecx, 0x288
mov rsi, qword [rsp + 0x40]
cmp word [rbp - 0x30], r8w
je 0x140063c21
cmp word [rbp + 0x50], r8w
jne 0x140063e30
cmp word [rbp + 0x150], r8w
je 0x140063c21
mov rax, qword [rbp + 0x250]
test rax, rax
je 0x140063e51
mov ecx, 0x288
mov rsi, qword [rsp + 0x40]
cmp rax, qword [rsp + 0x78]
jle 0x140063c21
mov edx, dword [0x14021b790]
lea rcx, [0x14021b778]
inc edx
call fcn.140002fe0
mov rsi, qword [rsp + 0x40]
mov ecx, 0x288
test al, al
je 0x140063c21
mov eax, dword [0x14021b798]
lea rsi, [rbp - 0x30]
mov edx, eax
imul eax, dword [0x14021b790]
mov ecx, edx
shr rcx, 2
mov r8d, eax
add r8, qword [0x14021b788]
mov rdi, r8
rep movsd dword [rdi], dword [rsi]
mov ecx, edx
and ecx, 3
je 0x140063eb7
and rdx, 0xfffffffffffffffc
lea rsi, [rbp - 0x30]
add rsi, rdx
lea rdi, [rdx + r8]
rep movsb byte [rdi], byte [rsi]
inc dword [0x14021b790]
mov rsi, qword [rsp + 0x40]
jmp 0x140063c1c
cmp r13, 0xffffffffffffffff
je 0x140063ed2
test r14, r14
je 0x140063ee2
test r14, r14
je 0x140063ee2
mov rcx, r14
call fcn.14002ec58
xor r14d, r14d
cmp r13, 0xffffffffffffffff
je 0x140063f05
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, 0xffffffffffffffff
jmp 0x140063f05
cmp r13, 0xffffffffffffffff
je 0x140063f05
test r14, r14
je 0x140063f12
test r14, r14
je 0x140063f12
mov rcx, r14
call fcn.14002ec58
mov r15, qword [rsp + 0x368]
mov r14, qword [rsp + 0x370]
mov r12, qword [rsp + 0x378]
mov rdi, qword [rsp + 0x380]
mov rsi, qword [rsp + 0x388]
mov rbx, qword [rsp + 0x390]
cmp r13, 0xffffffffffffffff
je 0x140063f51
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x398
pop r13
pop rbp
ret