Function at 0x14000c8b0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xab8
movups xmmword [rsp + 0xa80], xmm6
movups xmmword [rsp + 0xa90], xmm7
movups xmmword [rsp + 0xaa0], xmm8
cmp qword [0x140111620], 0xffffffffffffffff
mov qword [rsp + 0xb08], rdx
mov r10, rcx
mov qword [rsp + 0xb10], r8
mov qword [rsp + 0xb18], r9
je 0x14000d09e
lea rax, [rsp + 0xb08]
lea r9, [rsp + 0x280]
mov ecx, 0x800
mov qword [rsp + 0x98], rax
mov rdi, r9
xor eax, eax
rep stosb byte [rdi], al
mov r8, qword [rsp + 0x98]
mov rdx, r10
mov rcx, r9
call qword [sym.imp.USER32.dll_wvsprintfW]
test eax, eax
jle 0x14000d09e
movzx eax, word [0x140120086]
mov r9d, 3
xor r10d, r10d
mov dword [rsp + 0xa4], 0xd0010
lea rbx, [rsp + 0x180]
lea rbp, [rsp + 0xd0]
mov word [rsp + 0xa8], r9w
lea edx, [rax + 3]
movzx eax, word [str.__02d:_02d:_02d_]
mov word [rsp + 0xae], r10w
mov rcx, rbx
mov word [rsp + 0xaa], dx
add eax, 3
mov qword [rsp + 0xc0], rbp
mov word [rsp + 0xac], ax
mov rax, qword [rsp + 0xa4]
mov qword [rsp + 0x180], rax
mov eax, dword [rsp + 0xac]
mov dword [rsp + 0x188], eax
movzx eax, word [rsp + 0x180]
sub eax, 3
mov word [rsp + 0x180], ax
movzx eax, word [rsp + 0x182]
sub eax, 3
mov word [rsp + 0x182], ax
movzx eax, word [rsp + 0x184]
sub eax, 3
mov word [rsp + 0x184], ax
movzx eax, word [rsp + 0x186]
sub eax, 3
mov word [rsp + 0x186], ax
movzx eax, word [rsp + 0x188]
sub eax, 3
mov word [rsp + 0x188], ax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x88], rax
call sub.msvcrt.dll_wcslen
lea rsi, [rax + rax]
mov r12, rsi
sar r12, 1
mov qword [rsp + 0x130], r12
mov rdx, r12
cmp rsi, 0xe
ja 0x14000d0fc
mov rcx, qword [rsp + 0xc0]
cmp r12, 1
jne 0x14000d0cb
movzx eax, word [rsp + 0x180]
lea rdi, [rsp + 0x130]
mov word [rcx], ax
mov eax, 2
xor r8d, r8d
mov qword [rsp + 0xc8], rdx
mov rdx, rbx
movdqu xmm0, xmmword [0x1401200f0]
mov word [rcx + rax], r8w
movd xmm6, dword [0x1401200d0]
mov rcx, rdi
movd xmm8, dword [0x140120100]
mov byte [rsp + 0x194], 0
movq xmm7, qword [0x1401200c8]
mov byte [rsp + 0x13c], 0
movups xmmword [rsp + 0x180], xmm0
movd dword [rsp + 0x190], xmm8
movq qword [rsp + 0x130], xmm7
movd dword [rsp + 0x138], xmm6
call fcn.140002660
lea rsi, [0x14015b160]
mov rcx, rsi
call rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [rsp + 0xbc]
xor edx, edx
mov dword [rsp + 0x130], 0x72
mov r15d, dword [rsp + 0x130]
mov word [rsp + 0x126], dx
mov dword [rsp + 0x3c], eax
movzx eax, word [rsp + 0xba]
mov dword [rsp + 0x40], eax
movzx eax, word [rsp + 0xb8]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x130]
mov ecx, dword [rsp + 0x130]
mov edx, dword [rsp + 0x130]
mov dword [rsp + 0x84], eax
mov r14d, dword [rsp + 0x130]
mov dword [rsp + 0x80], ecx
mov r11d, dword [rsp + 0x130]
mov r10d, dword [rsp + 0x130]
mov r8d, dword [rsp + 0x130]
mov dword [rsp + 0x7c], edx
mov r9d, dword [rsp + 0x130]
mov r13d, dword [rsp + 0x130]
mov dword [rsp + 0x78], r14d
mov r12d, dword [rsp + 0x130]
mov eax, dword [rsp + 0x130]
mov dword [rsp + 0x74], r11d
mov ecx, dword [rsp + 0x130]
mov dword [rsp + 0x70], r10d
mov dword [rsp + 0x6c], r8d
mov dword [rsp + 0x68], r9d
mov dword [rsp + 0x64], r13d
mov dword [rsp + 0x60], r12d
mov dword [rsp + 0x5c], eax
mov dword [rsp + 0x58], ecx
mov edx, dword [rsp + 0x130]
mov r14d, dword [rsp + 0x130]
mov r11d, dword [rsp + 0x130]
mov r10d, dword [rsp + 0x130]
mov dword [rsp + 0x54], edx
mov eax, dword [rsp + 0x130]
mov dword [rsp + 0x4c], r11d
mov r12d, dword [rsp + 0x130]
mov r8d, dword [rsp + 0x130]
mov dword [rsp + 0x48], r10d
mov r11d, dword [rsp + 0x130]
add eax, 0x11
mov edx, dword [rsp + 0x130]
mov dword [rsp + 0x50], r14d
mov r10d, dword [rsp + 0x130]
add r8d, 0x13
add r12d, 0x12
movd xmm0, eax
mov ecx, dword [rsp + 0x130]
add edx, 0x15
add r11d, 0x14
xor r8w, word [0x1401200ae]
xor dx, word [0x1401200b2]
add r10d, 0x16
movd xmm3, r8d
mov r9d, dword [rsp + 0x130]
xor r12w, word [0x1401200ac]
xor r11w, word [0x1401200b0]
movd xmm1, edx
add ecx, 0x17
pinsrw xmm0, r12d, 1
pinsrw xmm3, r11d, 1
add r9d, 0x18
xor r10w, word [0x1401200b4]
mov r14d, dword [rsp + 0x130]
xor cx, word [0x1401200b6]
pinsrw xmm1, r10d, 1
punpckldq xmm0, xmm3
mov r13d, dword [rsp + 0x130]
mov r12d, dword [rsp + 0x130]
movd xmm2, ecx
mov r11d, dword [rsp + 0x130]
mov r10d, dword [rsp + 0x130]
add r14d, 0x19
xor r9w, word [0x1401200b8]
add r13d, 0x1a
add r12d, 0x1b
xor r14w, word [0x1401200ba]
xor r13w, word [0x1401200bc]
xor r12w, word [0x1401200be]
add r11d, 0x1c
add r10d, 0x1d
xor r11w, word [0x1401200c0]
pinsrw xmm2, r9d, 1
xor r10w, word [0x1401200c2]
mov r9d, dword [rsp + 0x130]
mov r8d, dword [rsp + 0x130]
punpckldq xmm1, xmm2
mov ecx, dword [rsp + 0x130]
mov edx, dword [rsp + 0x130]
punpcklqdq xmm0, xmm1
add r9d, 0x1e
add r8d, 0x1f
xor r9w, word [0x1401200c4]
xor r8w, word [0x1401200c6]
add ecx, 0x20
xor cx, word [0x1401200c8]
add edx, 0x21
xor r15d, 0x5b
mov word [rsp + 0xe0], r15w
mov eax, dword [rsp + 0x130]
movzx r15d, word [rsp + 0x84]
xor dx, word [0x1401200ca]
add eax, 0x22
xor ax, word [0x1401200cc]
add r15d, 1
xor r15d, 0x25
mov word [rsp + 0xe2], r15w
movzx r15d, word [rsp + 0x80]
add r15d, 2
xor r15d, 0x30
mov word [rsp + 0xe4], r15w
movzx r15d, word [rsp + 0x7c]
add r15d, 3
xor r15d, 0x32
mov word [rsp + 0xe6], r15w
movzx r15d, word [rsp + 0x78]
add r15d, 4
xor r15d, 0x64
mov word [rsp + 0xe8], r15w
movzx r15d, word [rsp + 0x74]
add r15d, 5
xor r15d, 0x3a
mov word [rsp + 0xea], r15w
movzx r15d, word [rsp + 0x70]
add r15d, 6
xor r15d, 0x25
mov word [rsp + 0xec], r15w
movzx r15d, word [rsp + 0x6c]
add r15d, 7
xor r15d, 0x30
mov word [rsp + 0xee], r15w
movzx r15d, word [rsp + 0x68]
add r15d, 8
xor r15d, 0x32
mov word [rsp + 0xf0], r15w
movzx r15d, word [rsp + 0x64]
add r15d, 9
xor r15d, 0x64
mov word [rsp + 0xf2], r15w
movzx r15d, word [rsp + 0x60]
add r15d, 0xa
xor r15d, 0x3a
mov word [rsp + 0xf4], r15w
movzx r15d, word [rsp + 0x5c]
movdqu xmm4, xmmword [rsp + 0xe0]
movups xmmword [rsp + 0x102], xmm0
add r15d, 0xb
mov word [rsp + 0x112], r14w
xor r15d, 0x25
movups xmmword [rsp + 0x134], xmm4
mov word [rsp + 0xf6], r15w
movzx r15d, word [rsp + 0x58]
mov word [rsp + 0x114], r13w
add r15d, 0xc
mov word [rsp + 0x116], r12w
xor r15d, 0x30
mov word [rsp + 0x118], r11w
mov word [rsp + 0xf8], r15w
movzx r15d, word [rsp + 0x54]
mov word [rsp + 0x11a], r10w
add r15d, 0xd
mov word [rsp + 0x120], cx
xor r15d, 0x32
mov word [rsp + 0x122], dx
mov word [rsp + 0xfa], r15w
movzx r15d, word [rsp + 0x50]
mov word [rsp + 0x11c], r9w
add r15d, 0xe
mov word [rsp + 0x124], ax
mov rax, qword [rsp + 0x120]
mov word [rsp + 0x11e], r8w
xor r15d, 0x64
mov word [rsp + 0xfc], r15w
movzx r15d, word [rsp + 0x4c]
add r15d, 0xf
xor r15d, 0x5d
mov word [rsp + 0xfe], r15w
movzx r15d, word [rsp + 0x48]
movdqu xmm5, xmmword [rsp + 0xf0]
add r15d, 0x10
xor r15d, 0x20
movups xmmword [rsp + 0x144], xmm5
movdqu xmm5, xmmword [rsp + 0x110]
mov word [rsp + 0x100], r15w
movdqu xmm4, xmmword [rsp + 0x100]
movups xmmword [rsp + 0x154], xmm4
movups xmmword [rsp + 0x164], xmm5
mov qword [rsp + 0x174], rax
xor eax, eax
nop word cs:[rax + rax]
movzx ecx, word [rsp + rax*2 + 0x134]
mov edx, dword [rsp + 0x130]
add edx, eax
xor edx, ecx
mov word [rsp + rax*2 + 0x134], dx
add rax, 1
cmp rax, 0x23
jne 0x14000cfe0
xor eax, eax
mov r9d, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x44]
mov rcx, rbx
mov word [rsp + 0x17a], ax
mov eax, dword [rsp + 0x3c]
lea rdx, [rsp + 0x134]
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_wsprintfW]
movdqu xmm0, xmmword [str.LeaveCriticalSecGetLogicalDriveStringsW]
mov rdx, rbx
mov rcx, rdi
mov byte [rsp + 0x194], 0
mov byte [rsp + 0x13c], 0
movups xmmword [rsp + 0x180], xmm0
movd dword [rsp + 0x190], xmm8
movq qword [rsp + 0x130], xmm7
movd dword [rsp + 0x138], xmm6
call fcn.140002660
mov rcx, rsi
call rax
mov rcx, qword [rsp + 0xc0]
cmp rcx, rbp
je 0x14000d09e
mov rax, qword [rsp + 0xd0]
lea rdx, [rax + rax + 2]
call fcn.14010abb0
nop
movups xmm6, xmmword [rsp + 0xa80]
movups xmm7, xmmword [rsp + 0xa90]
movups xmm8, xmmword [rsp + 0xaa0]
add rsp, 0xab8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
lea rdi, [rsp + 0x130]
test r12, r12
je 0x14000d0f3
mov rdx, rbx
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov rdx, qword [rsp + 0x130]
mov rcx, qword [rsp + 0xc0]
lea rax, [rdx + rdx]
jmp 0x14000ca85
mov rcx, qword [rsp + 0x88]
lea rdi, [rsp + 0x130]
xor r8d, r8d
mov rdx, rdi
call fcn.1400f5560
mov rdx, qword [rsp + 0x130]
mov qword [rsp + 0xc0], rax
mov rcx, rax
mov qword [rsp + 0xd0], rdx
jmp 0x14000d0d3