Function at 0x14000c370
Capabilities:
Encode data using xor

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xc0
cmp qword [0x140015b88], 0
je 0x14000c393
xor al, al
add rsp, 0xc0
pop rbp
ret
mov qword [rsp + 0xd0], rbx
xor ecx, ecx
mov qword [rsp + 0xd8], rsi
mov qword [rsp + 0xe0], rdi
call qword [sym.imp.ole32.dll_CoInitialize]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
xor edx, edx
lea rax, [0x140015b90]
lea r9, [0x140010c40]
mov qword [rsp + 0x20], rax
lea rcx, [0x140010c50]
lea r8d, [rdx + 1]
call qword [sym.imp.ole32.dll_CoCreateInstance]
movsxd r10, dword [0x140015ba0]
lea rsi, [0x140015b10]
mov r11, qword [0x140015bd8]
lea r9, [0x140015068]
mov r8d, 0xa
mov rcx, qword [rsi + r10*8]
inc r10d
sub r9, rcx
mov rdx, rcx
movzx eax, byte [r9 + rdx]
lea rdx, [rdx + 1]
xor al, 0x48
mov byte [rdx - 1], al
sub r8, 1
jne 0x14000c412
xor edi, edi
mov byte [rcx + 0xa], r8b
cmp r10d, 0xf
cmovge r10d, edi
mov dword [0x140015ba0], r10d
call r11
movsxd r10, dword [0x140015ba0]
lea r8, str._t__:___h__h___:_h_:
mov qword [0x140015b98], rax
lea edx, [rdi + 0x16]
mov r9, qword [rsi + r10*8]
inc r10d
sub r8, r9
mov rcx, r9
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rcx]
lea rcx, [rcx + 1]
xor al, 0x48
mov byte [rcx - 1], al
sub rdx, 1
jne 0x14000c470
mov byte [r9 + 0x16], dil
cmp r10d, 0xf
mov rbx, 0xffffffffffffffff
mov qword [rbp + 0x17], rdi
cmovge r10d, edi
mov qword [rbp + 0x27], rdi
mov dword [0x140015ba0], r10d
mov r8, rbx
mov qword [rbp + 0x2f], 0xf
inc r8
cmp byte [r9 + r8], dil
jne 0x14000c4b1
mov rdx, r9
lea rcx, [rbp + 0x17]
call fcn.140002dc0
movsxd r10, dword [0x140015ba0]
lea r8, str._t__:___h.____
mov edx, 0xd
mov r9, qword [rsi + r10*8]
inc r10d
sub r8, r9
mov rcx, r9
nop word [rax + rax]
movzx eax, byte [r8 + rcx]
lea rcx, [rcx + 1]
xor al, 0x48
mov byte [rcx - 1], al
sub rdx, 1
jne 0x14000c4f0
mov byte [r9 + 0xd], dil
cmp r10d, 0xf
mov qword [rbp - 9], rdi
mov r8, rbx
cmovge r10d, edi
mov qword [rbp + 7], rdi
mov dword [0x140015ba0], r10d
mov qword [rbp + 0xf], 0xf
nop word [rax + rax]
inc r8
cmp byte [r9 + r8], dil
jne 0x14000c530
mov rdx, r9
lea rcx, [rbp - 9]
call fcn.140002dc0
movsxd r10, dword [0x140015ba0]
lea r8, str.h:h___:h___:___
mov edx, 0x11
mov r9, qword [rsi + r10*8]
inc r10d
sub r8, r9
mov rcx, r9
nop word [rax + rax]
movzx eax, byte [r8 + rcx]
lea rcx, [rcx + 1]
xor al, 0x48
mov byte [rcx - 1], al
sub rdx, 1
jne 0x14000c570
mov byte [r9 + 0x11], dil
cmp r10d, 0xf
mov qword [rbp - 0x29], rdi
cmovge r10d, edi
mov qword [rbp - 0x19], rdi
mov dword [0x140015ba0], r10d
mov qword [rbp - 0x11], 0xf
inc rbx
cmp byte [r9 + rbx], dil
jne 0x14000c5a7
mov r8, rbx
lea rcx, [rbp - 0x29]
mov rdx, r9
call fcn.140002dc0
lea rdx, [rbp + 0x17]
lea rcx, [rbp + 0x37]
call fcn.14000f1f0
mov rdx, rax
lea rcx, [0x140015440]
call fcn.140002730
mov rdx, qword [rbp + 0x4f]
cmp rdx, 8
jb 0x14000c61e
mov rcx, qword [rbp + 0x37]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c619
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c619
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b3f0
lea rdx, [rbp - 9]
lea rcx, [rbp + 0x37]
call fcn.14000f1f0
mov rdx, rax
lea rcx, [0x140015480]
call fcn.140002730
mov rdx, qword [rbp + 0x4f]
cmp rdx, 8
jb 0x14000c67d
mov rcx, qword [rbp + 0x37]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c678
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c678
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b3f0
lea rdx, [rbp - 0x29]
lea rcx, [rbp + 0x37]
call fcn.14000f1f0
mov rdx, rax
lea rcx, [0x1400154c0]
call fcn.140002730
mov rdx, qword [rbp + 0x4f]
cmp rdx, 8
jb 0x14000c6dc
mov rcx, qword [rbp + 0x37]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c6d7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c6d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b3f0
movsxd rbx, dword [0x140015ba0]
lea r9, str._t_______a___
mov qword [rbp + 0x47], rdi
mov r8d, 0x19
mov qword [rbp + 0x4f], 7
mov word [rbp + 0x37], di
mov rdx, qword [rsi + rbx*8]
inc ebx
sub r9, rdx
mov rcx, rdx
nop dword [rax]
movzx eax, byte [r9 + rcx]
lea rcx, [rcx + 1]
xor al, 0x48
mov byte [rcx - 1], al
sub r8, 1
jne 0x14000c710
mov rcx, qword [0x140015b98]
cmp ebx, 0xf
mov byte [rdx + 0x19], dil
cmovge ebx, edi
call fcn.14000f4e0
mov qword [0x140015bb0], rax
lea r9, [0x140015170]
movsxd rax, ebx
mov r8d, 0xf
inc ebx
mov rdx, qword [rsi + rax*8]
mov rcx, rdx
sub r9, rdx
nop dword [rax]
movzx eax, byte [r9 + rcx]
lea rcx, [rcx + 1]
xor al, 0x48
mov byte [rcx - 1], al
sub r8, 1
jne 0x14000c760
mov rcx, qword [0x140015bc8]
cmp ebx, 0xf
mov byte [rdx + 0xf], dil
cmovge ebx, edi
mov dword [0x140015ba0], ebx
call fcn.14000f4e0
mov edx, 0x800e
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], edi
lea r9, [0x14000c8c0]
xor r8d, r8d
mov qword [0x140015bc0], rax
mov dword [rsp + 0x20], edi
lea ecx, [rdx - 9]
call rax
mov rdx, qword [rbp - 0x11]
mov qword [0x140015b88], rax
cmp rdx, 0x10
jb 0x14000c7f9
mov rcx, qword [rbp - 0x29]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c7f4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c882
call fcn.14000b3f0
mov rdx, qword [rbp + 0xf]
mov qword [rbp - 0x19], rdi
mov qword [rbp - 0x11], 0xf
mov byte [rbp - 0x29], dil
cmp rdx, 0x10
jb 0x14000c840
mov rcx, qword [rbp - 9]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c83b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c882
call fcn.14000b3f0
mov rdx, qword [rbp + 0x2f]
mov qword [rbp + 7], rdi
mov qword [rbp + 0xf], 0xf
mov byte [rbp - 9], dil
cmp rdx, 0x10
jb 0x14000c88e
mov rcx, qword [rbp + 0x17]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c889
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c889
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b3f0
mov rsi, qword [rsp + 0xd8]
mov al, 1
mov rbx, qword [rsp + 0xd0]
mov rdi, qword [rsp + 0xe0]
add rsp, 0xc0
pop rbp
ret