Function at 0x14000ddc0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor edi, edi
mov qword [rsp + 0x50], rdi
mov esi, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x58], rsi
mov byte [rsp + 0x40], dil
lea r14d, [rdi + 0x1e]
lea r15, str.0123456789667ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
movzx ebx, byte [rbp + 0x100]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
idiv dword [0x140098870]
movsxd rax, edx
movzx r9d, byte [rax + r15]
cmp rdi, rsi
jae 0x14000de5d
lea rax, [rdi + 1]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp rsi, 0xf
cmova rax, qword [rsp + 0x40]
mov byte [rax + rdi], r9b
mov byte [rax + rdi + 1], 0
jmp 0x14000de70
movzx r8d, bl
mov edx, 1
lea rcx, [rsp + 0x40]
call fcn.140003b30
sub r14, 1
je 0x14000de82
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x50]
jmp 0x14000de20
mov dword [rbp + 0x100], 0xfdeff3bb
mov word [rbp + 0x104], 0x100
xor ecx, ecx
nop word [rax + rax]
lea eax, [rcx - 0x6b]
xor byte [rbp + rcx + 0x100], al
inc rcx
cmp rcx, 4
jb 0x14000dea0
mov byte [rbp + 0x105], 0
lea rax, [rbp + 0x100]
mov rdi, 0xffffffffffffffff
mov rbx, rdi
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14000ded0
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r12, qword [rsp + 0x50]
sub rax, r12
cmp rax, rbx
jb 0x14000e18b
lea rdx, [rsp + 0x40]
mov r15, qword [rsp + 0x40]
mov r13, qword [rsp + 0x58]
cmp r13, 0xf
cmova rdx, r15
mov qword [rbp + 0x108], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xor r8d, r8d
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r8
lea rax, [r12 + rbx]
mov esi, reloc.WS2_32.dll_ntohs
lea r14, [rsp + 0x20]
cmp rax, rsi
jbe 0x14000dfd2
mov rsi, rax
or rsi, 0xf
cmp rsi, rcx
jbe 0x14000df88
mov rsi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140072d48
test rax, rax
je 0x14000e0f5
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
lea rax, [r12 + rbx]
mov rdx, qword [rbp + 0x108]
jmp 0x14000dfcd
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rsi, rcx
cmovb rsi, rcx
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x14000dfb0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000e185
jmp 0x14000df5e
test rcx, rcx
je 0x14000dfca
call fcn.140072d48
mov r14, rax
lea rax, [r12 + rbx]
mov rdx, qword [rbp + 0x108]
jmp 0x14000dfcd
mov r14, r8
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rsi
mov r8, r12
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r12 + r14]
mov r8, rbx
lea rdx, [rbp + 0x100]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [r12 + rbx]
mov byte [r14 + rax], 0
mov r8d, 0x104
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x14000e0c1
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 0xf
cmova rax, qword [rsp + 0x20]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x70]
call fcn.140007030
nop
lea rax, [rbp - 0x50]
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x50]
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000e060
mov qword [rsp + 0x68], rdi
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x70]
call fcn.140007030
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 7
cmova rdx, qword [rbp - 0x70]
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 7
cmova rcx, qword [rsp + 0x70]
call fcn.140072ce4
test eax, eax
jne 0x14000e16d
lea rcx, [rsp + 0x70]
call fcn.14000c330
nop
lea rcx, [rbp - 0x70]
call fcn.14000c330
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14000e101
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e0fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e0fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140072d8c
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x20], 0
cmp r13, 0xf
jbe 0x14000e152
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x14000e14a
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e14a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.140072d8c
mov rbx, qword [rsp + 0x210]
add rsp, 0x1c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea r9, [rbp - 0x70]
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, str.rename
call fcn.14000c050
nop
call fcn.140005590
int3
call fcn.1400056b0
int3