Function at 0x140062b00
Capabilities:
Encode data using xor
Read file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
push r13
lea rbp, [rax - 0x2a8]
sub rsp, 0x398
mov qword [rax - 0x18], rbx
lea rcx, [0x14021a2d0]
mov qword [rax - 0x20], rsi
xor r9d, r9d
mov qword [rax - 0x28], rdi
mov edx, 0x80000000
mov qword [rax - 0x30], r12
mov qword [rax - 0x38], r14
mov qword [rax - 0x40], r15
xor r15d, r15d
mov qword [rsp + 0x30], r15
mov esi, r15d
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
lea r8d, [r15 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r13, rax
cmp rax, 0xffffffffffffffff
je 0x140063069
mov r12d, 0x400000
lea rdx, [0x14014fdc0]
mov ecx, r12d
call fcn.14002e8b0
test rax, rax
je 0x140063069
xor r9d, r9d
mov dword [rbp + 0x2b0], r12d
lea r8, [rsp + 0x54]
mov qword [rsp + 0x50], r15
xor edx, edx
mov rcx, r13
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x50], eax
cmp eax, 0xffffffff
jne 0x140062bc8
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140063069
cmp qword [rsp + 0x50], 0xffffffffffffffff
je 0x140063069
mov ebx, r15d
test rsi, rsi
je 0x140062c26
nop dword [rax]
mov r8d, r12d
mov edx, ebx
sub r8d, ebx
mov dword [rbp + 0x2c0], r15d
add rdx, rsi
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x2c0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140062c1c
mov eax, dword [rbp + 0x2c0]
test eax, eax
je 0x140062c1c
add ebx, eax
cmp ebx, r12d
jb 0x140062be0
mov eax, ebx
lock add qword [0x1401f3d70], rax
mov qword [rsp + 0x40], r15
mov r14, r15
test rsi, rsi
je 0x140063069
mov eax, 0xf8
cmp ebx, eax
jae 0x140062ce1
cmp r13, 0xffffffffffffffff
je 0x140063074
xor r9d, r9d
mov qword [rsp + 0x58], r15
lea r8, [rsp + 0x5c]
xor edx, edx
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x58], eax
cmp eax, 0xffffffff
jne 0x140062c7d
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140063069
cmp qword [rsp + 0x58], 0xffffffffffffffff
je 0x140063069
mov ebx, r15d
test rsi, rsi
je 0x140062cd7
mov r8d, r12d
mov edx, ebx
sub r8d, ebx
mov dword [rbp + 0x2c8], r15d
add rdx, rsi
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x2c8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140062ccd
mov eax, dword [rbp + 0x2c8]
test eax, eax
je 0x140062ccd
add ebx, eax
cmp ebx, r12d
jb 0x140062c91
mov eax, ebx
lock add qword [0x1401f3d70], rax
mov qword [rsp + 0x40], r15
mov eax, 0xf8
cmp ebx, eax
mov r12d, ebx
cmova r12d, eax
test r12d, r12d
je 0x140063069
mov edi, r12d
test rsi, rsi
je 0x140062d14
cmp rdi, rax
ja 0x140062d14
mov r8d, edi
lea rcx, [0x14021a1d8]
mov rdx, rsi
call fcn.14014cbf0
jmp 0x140062d50
mov r8, rax
lea rcx, [0x14021a1d8]
xor edx, edx
call fcn.14014d290
test rsi, rsi
jne 0x140062d37
call fcn.1400409f4
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x140062d4b
cmp rdi, 0xf8
jbe 0x140062d50
call fcn.1400409f4
mov dword [rax], 0x22
call fcn.140040884
cmp r12d, 0xf8
jne 0x140063069
cmp dword [0x14021a1d8], 2
jne 0x140063069
mov edx, 9
lea r8, [0x140000000]
mov rcx, r15
nop dword [rax]
movzx eax, word [rcx + r8 + 0x1b91b0]
cmp word [rcx + r8 + 0x21a1dc], ax
jne 0x140063069
add rcx, 2
sub rdx, 1
jne 0x140062d80
xor ecx, ecx
call fcn.140035ae0
mov qword [rsp + 0x78], rax
mov ecx, 0x288
test rsi, rsi
je 0x140063037
cmp r12d, ebx
ja 0x140063037
mov eax, ebx
sub eax, r12d
cmp eax, ecx
jae 0x140062ee3
cmp r13, 0xffffffffffffffff
je 0x140063042
mov r15d, r12d
add r15, r14
mov r14d, dword [rbp + 0x2b0]
mov r12, r15
and r12d, 0xfff
sub r15, r12
lea edi, [r12 + 0x400000]
cmp edi, r14d
jbe 0x140062e31
mov ecx, edi
lea rdx, [0x14014fdc0]
call fcn.14002e8b0
mov r14, rax
test rax, rax
je 0x140063037
mov rcx, rsi
call fcn.14002e8a8
mov rsi, r14
mov dword [rbp + 0x2b0], edi
mov r14d, edi
xor r9d, r9d
mov qword [rsp + 0x60], r15
lea r8, [rsp + 0x64]
mov edx, r15d
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x60], eax
cmp eax, 0xffffffff
jne 0x140062e61
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140063037
cmp qword [rsp + 0x60], 0xffffffffffffffff
je 0x140063037
test rsi, rsi
je 0x140062ec5
xor eax, eax
mov ebx, eax
nop word [rax + rax]
mov r8d, edi
mov edx, ebx
sub r8d, ebx
mov dword [rsp + 0x48], eax
add rdx, rsi
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x48]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140062eb9
mov eax, dword [rsp + 0x48]
test eax, eax
je 0x140062eb9
add ebx, eax
mov eax, 0
cmp ebx, edi
jb 0x140062e80
mov eax, ebx
lock add qword [0x1401f3d70], rax
jmp 0x140062ec7
xor ebx, ebx
mov qword [rsp + 0x40], r15
cmp r12d, ebx
ja 0x140063037
cmp r12d, r14d
ja 0x140063037
mov ecx, 0x288
mov edi, ebx
sub edi, r12d
cmp edi, ecx
cmova edi, ecx
test edi, edi
je 0x140063037
mov r14d, r12d
mov r15d, edi
add r14, rsi
je 0x140062f16
cmp r15, rcx
ja 0x140062f16
mov r8d, r15d
lea rcx, [rbp - 0x30]
mov rdx, r14
call fcn.14014cbf0
jmp 0x140062f4f
mov r8, rcx
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14014d290
test r14, r14
jne 0x140062f36
call fcn.1400409f4
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x140062f4a
cmp r15, 0x288
jbe 0x140062f4f
call fcn.1400409f4
mov dword [rax], 0x22
call fcn.140040884
add r12d, edi
cmp edi, 0x288
jne 0x140063037
xor dl, dl
lea r8, [rbp - 0x30]
xor r9d, r9d
lea r11, [0x140000000]
mov r10d, edi
movzx ecx, byte [r8]
lea r8, [r8 + 1]
mov rax, r9
inc r9
and eax, 0xf
add dl, byte [r11 + rax*4 + 0x1bd1e0]
xor dl, cl
mov byte [r8 - 1], dl
movzx edx, cl
sub r10, 1
jne 0x140062f71
mov ecx, 0x288
mov r14, qword [rsp + 0x40]
cmp word [rbp - 0x30], r10w
je 0x140062db3
cmp word [rbp + 0x50], r10w
jne 0x140062fc3
cmp word [rbp + 0x150], r10w
je 0x140062db3
mov rax, qword [rbp + 0x250]
test rax, rax
je 0x140062fe4
mov ecx, 0x288
mov r14, qword [rsp + 0x40]
cmp rax, qword [rsp + 0x78]
jle 0x140062db3
mov edx, dword [0x14021a700]
lea rcx, [0x14021a6e8]
inc edx
call fcn.140003020
mov r14, qword [rsp + 0x40]
mov ecx, 0x288
test al, al
je 0x140062db3
mov eax, dword [0x14021a708]
lea rdx, [rbp - 0x30]
mov r8d, eax
imul eax, dword [0x14021a700]
mov ecx, eax
add rcx, qword [0x14021a6f8]
call fcn.14014cbf0
inc dword [0x14021a700]
jmp 0x140062dae
cmp r13, 0xffffffffffffffff
je 0x140063042
test rsi, rsi
je 0x140063051
test rsi, rsi
je 0x140063051
mov rcx, rsi
call fcn.14002e8a8
xor esi, esi
cmp r13, 0xffffffffffffffff
je 0x140063074
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, 0xffffffffffffffff
jmp 0x140063074
cmp r13, 0xffffffffffffffff
je 0x140063074
test rsi, rsi
je 0x140063081
test rsi, rsi
je 0x140063081
mov rcx, rsi
call fcn.14002e8a8
mov r15, qword [rsp + 0x368]
mov r14, qword [rsp + 0x370]
mov r12, qword [rsp + 0x378]
mov rdi, qword [rsp + 0x380]
mov rsi, qword [rsp + 0x388]
mov rbx, qword [rsp + 0x390]
cmp r13, 0xffffffffffffffff
je 0x1400630c0
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x398
pop r13
pop rbp
ret