Function at 0x140011c00
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor edi, edi
mov qword [rsp + 0x50], rdi
mov esi, send
mov qword [rsp + 0x58], rsi
mov byte [rsp + 0x40], dil
lea r14d, [rdi + 0x1e]
lea r15, str.0123456789667ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
movzx ebx, byte [rbp + 0x100]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
idiv dword [0x140029870]
movsxd rax, edx
movzx r9d, byte [rax + r15]
cmp rdi, rsi
jae 0x140011c9d
lea rax, [rdi + 1]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp rsi, 0x10
cmovae rax, qword [rsp + 0x40]
mov byte [rax + rdi], r9b
mov byte [rax + rdi + 1], 0
jmp 0x140011cb0
movzx r8d, bl
mov edx, 1
lea rcx, [rsp + 0x40]
call fcn.140006be0
sub r14, 1
je 0x140011cc2
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x50]
jmp 0x140011c60
mov dword [rbp + 0x100], 0xe8f4eea4
mov word [rbp + 0x104], 0x100
xor ecx, ecx
nop word [rax + rax]
lea eax, [rcx - 0x76]
xor byte [rbp + rcx + 0x100], al
inc rcx
cmp rcx, 4
jb 0x140011ce0
mov byte [rbp + 0x105], 0
lea rax, [rbp + 0x100]
mov rdi, 0xffffffffffffffff
mov rbx, rdi
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140011d10
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r12, qword [rsp + 0x50]
sub rax, r12
cmp rax, rbx
jb 0x140011fcb
lea rdx, [rsp + 0x40]
mov r15, qword [rsp + 0x40]
mov r13, qword [rsp + 0x58]
cmp r13, 0x10
cmovae rdx, r15
mov qword [rbp + 0x108], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xor r8d, r8d
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r8
lea rax, [r12 + rbx]
mov esi, send
lea r14, [rsp + 0x20]
cmp rax, rsi
jbe 0x140011e12
mov rsi, rax
or rsi, 0xf
cmp rsi, rcx
jbe 0x140011dc8
mov rsi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400182d0
test rax, rax
je 0x140011f35
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
lea rax, [r12 + rbx]
mov rdx, qword [rbp + 0x108]
jmp 0x140011e0d
mov ecx, socket
cmp rsi, rcx
cmovb rsi, rcx
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x140011df0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140011fc5
jmp 0x140011d9e
test rcx, rcx
je 0x140011e0a
call fcn.1400182d0
mov r14, rax
lea rax, [r12 + rbx]
mov rdx, qword [rbp + 0x108]
jmp 0x140011e0d
mov r14, r8
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rsi
mov r8, r12
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r12 + r14]
mov r8, rbx
lea rdx, [rbp + 0x100]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [r12 + rbx]
mov byte [r14 + rax], 0
mov r8d, 0x104
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x140011f01
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 0x10
cmovae rax, qword [rsp + 0x20]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x70]
call fcn.1400096d0
nop
lea rax, [rbp - 0x50]
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x50]
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140011ea0
mov qword [rsp + 0x68], rdi
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x70]
call fcn.1400096d0
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rdx, qword [rbp - 0x70]
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rcx, qword [rsp + 0x70]
call fcn.140018274
test eax, eax
jne 0x140011fad
lea rcx, [rsp + 0x70]
call fcn.14000cf10
nop
lea rcx, [rbp - 0x70]
call fcn.14000cf10
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x140011f41
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011f3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011f3c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140018314
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], send
mov byte [rsp + 0x20], 0
cmp r13, 0x10
jb 0x140011f92
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140011f8a
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011f8a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.140018314
mov rbx, qword [rsp + 0x210]
add rsp, 0x1c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea r9, [rbp - 0x70]
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, str.rename
call fcn.14000cd80
nop
call fcn.140001e70
int3
call fcn.140001f20
int3