Function at 0x140026480
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor edi, edi
mov qword [rsp + 0x50], rdi
mov esi, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x58], rsi
mov byte [rsp + 0x40], dil
lea r14d, [rdi + 0x1e]
lea r15, str.0123456789667ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
movzx ebx, byte [rbp + 0x100]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
idiv dword [0x1400bac50]
movsxd rax, edx
movzx r9d, byte [rax + r15]
cmp rdi, rsi
jae 0x14002651d
lea rax, [rdi + 1]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp rsi, 0xf
cmova rax, qword [rsp + 0x40]
mov byte [rax + rdi], r9b
mov byte [rax + rdi + 1], 0
jmp 0x140026530
movzx r8d, bl
mov edx, 1
lea rcx, [rsp + 0x40]
call fcn.14000ac20
sub r14, 1
je 0x140026542
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x50]
jmp 0x1400264e0
mov dword [rbp + 0x100], 0xb4a8aae0
mov word [rbp + 0x104], 0x100
xor ecx, ecx
nop word [rax + rax]
lea eax, [rcx - 0x32]
xor byte [rbp + rcx + 0x100], al
inc rcx
cmp rcx, 4
jb 0x140026560
mov byte [rbp + 0x105], 0
lea rax, [rbp + 0x100]
mov rdi, 0xffffffffffffffff
mov rbx, rdi
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140026590
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r12, qword [rsp + 0x50]
sub rax, r12
cmp rax, rbx
jb 0x14002684b
lea rdx, [rsp + 0x40]
mov r15, qword [rsp + 0x40]
mov r13, qword [rsp + 0x58]
cmp r13, 0xf
cmova rdx, r15
mov qword [rbp + 0x108], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xor r8d, r8d
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r8
lea rax, [r12 + rbx]
mov esi, reloc.WS2_32.dll_ntohs
lea r14, [rsp + 0x20]
cmp rax, rsi
jbe 0x140026692
mov rsi, rax
or rsi, 0xf
cmp rsi, rcx
jbe 0x140026648
mov rsi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14008c6e8
test rax, rax
je 0x1400267b5
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
lea rax, [r12 + rbx]
mov rdx, qword [rbp + 0x108]
jmp 0x14002668d
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rsi, rcx
cmovb rsi, rcx
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x140026670
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140026845
jmp 0x14002661e
test rcx, rcx
je 0x14002668a
call fcn.14008c6e8
mov r14, rax
lea rax, [r12 + rbx]
mov rdx, qword [rbp + 0x108]
jmp 0x14002668d
mov r14, r8
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rsi
mov r8, r12
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r12 + r14]
mov r8, rbx
lea rdx, [rbp + 0x100]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [r12 + rbx]
mov byte [r14 + rax], 0
mov r8d, 0x104
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x140026781
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 0xf
cmova rax, qword [rsp + 0x20]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x70]
call fcn.14000e230
nop
lea rax, [rbp - 0x50]
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x50]
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140026720
mov qword [rsp + 0x68], rdi
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x70]
call fcn.14000e230
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 7
cmova rdx, qword [rbp - 0x70]
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 7
cmova rcx, qword [rsp + 0x70]
call fcn.14008de4c
test eax, eax
jne 0x14002682d
lea rcx, [rsp + 0x70]
call fcn.14001cc30
nop
lea rcx, [rbp - 0x70]
call fcn.14001cc30
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1400267c1
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400267bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400267bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008c724
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x20], 0
cmp r13, 0xf
jbe 0x140026812
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x14002680a
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002680a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14008c724
mov rbx, qword [rsp + 0x210]
add rsp, 0x1c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea r9, [rbp - 0x70]
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, str.rename
call fcn.14001c8b0
nop
call fcn.14000c670
int3
call fcn.14000c790
int3