Function at 0x140079fa0
Capabilities:
Encode data using xor

Disassembly:
xchg r11, rbx
mov qword [rsp + 0x10], r11
xchg rbx, r11
nop
sub rsp, 8
mov qword [rsp], rbp
nop
mov qword [rsp - 8], rsi
sub rsp, 8
push rdi
nop
sub rsp, 8
mov qword [rsp], r14
nop
sub rsp, 8
mov qword [rsp], r15
mov rbp, rsp
sub rsp, 0x60
mov rsi, rdx
xchg r11, rcx
mov r15, r11
xchg rcx, r11
xor edi, edi
mov dword [rbp + 0x30], edi
lea rax, [rbp + 0x30]
xchg r11, rax
mov qword [rsp + 0x20], r11
xchg r11, rax
xor r9d, r9d
xor r8d, r8d
lea edx, [rdi + 5]
call fcn.1400781d0
mov eax, dword [rbp + 0x30]
test eax, eax
je 0x14007a3e7
add eax, 0x7869beec
sub eax, 0x7869aeec
mov dword [rbp + 0x30], eax
mov ebx, eax
mov ecx, eax
call fcn.1401fd094
mov r14, rax
test rax, rax
je 0x14007a047
mov r8d, ebx
xor edx, edx
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x14007a050
xchg r14, r9
mov r9, rdi
xchg r14, r9
xchg rsi, r14
mov qword [rbp + 0x48], rsi
xchg r14, rsi
lea rax, [rbp + 0x30]
xchg rcx, rax
mov qword [rsp + 0x20], rcx
xchg rcx, rax
mov r9d, dword [rbp + 0x30]
xchg r14, r9
mov r8, r9
xchg r9, r14
mov edx, 0x2763d8e6
xor edx, 0x2d5383fd
xor edx, 0xef6e0ee
add edx, 0xf4d0e57
xor edx, 0x1e5825d8
sub edx, 0xa4bef8f
xchg r15, rcx
mov r15, rcx
xchg rcx, r15
call fcn.1400781d0
test eax, eax
js 0x14007a3bb
mov dword [rbp - 0x30], 0x1da0db4f
add dword [rbp - 0x30], 0x327262c5
add dword [rbp - 0x30], 0x195f1e79
xor dword [rbp - 0x30], 0xf7f5f49
xor dword [rbp - 0x30], 0x378653ce
xor dword [rbp - 0x30], 0x4ae7f6f1
add dword [rbp - 0x30], 0x321b5428
xor dword [rbp - 0x30], 0x707ab492
xor dword [rbp - 0x30], 0xcb0bb947
mov dword [rbp - 0x24], 0x6e05a76f
add dword [rbp - 0x24], 0x76c89fa
sub dword [rbp - 0x24], 0x42a630b3
add dword [rbp - 0x24], 0x33ebd673
sub dword [rbp - 0x24], 0x32ffd16d
xor dword [rbp - 0x24], 0x2846b0b
sub dword [rbp - 0x24], 0x8391f7
xor dword [rbp - 0x24], 0x327ba8e7
xor dword [rbp - 0x24], 0xfdb08b49
mov dword [rbp - 0x20], 0x31710aff
add dword [rbp - 0x20], 0x367f990a
xor dword [rbp - 0x20], 0x553fd73b
sub dword [rbp - 0x20], 0x1723708b
xor dword [rbp - 0x20], 0x36d8b4ef
add dword [rbp - 0x20], 0xd1f94935
mov dword [rbp - 0x2c], 0x3e709b62
add dword [rbp - 0x2c], 0x237b07a0
sub dword [rbp - 0x2c], 0x19d76bb5
xor dword [rbp - 0x2c], 0x3a721017
xor dword [rbp - 0x2c], 0x6b1d074c
add dword [rbp - 0x2c], 0xdd7bd6e0
mov dword [rbp - 0x1c], 0x58ac65a0
sub dword [rbp - 0x1c], 0x2efe779b
add dword [rbp - 0x1c], 0x1725ce1d
xor dword [rbp - 0x1c], 0x165cbbee
xor dword [rbp - 0x1c], 0x37418f9a
sub dword [rbp - 0x1c], 0x34f303e9
xor dword [rbp - 0x1c], 0xd3a77b14
mov dword [rbp - 0x18], 0x54bc9ce8
sub dword [rbp - 0x18], 0x22c971a2
add dword [rbp - 0x18], 0x4cf71c3b
sub dword [rbp - 0x18], 0x68f8ad10
sub dword [rbp - 0x18], 0x10fabde6
add dword [rbp - 0x18], 0x68a98b2e
xor dword [rbp - 0x18], 0x2baaf4b
xor dword [rbp - 0x18], 0x9022379c
mov word [rbp - 0x28], 0x3905
xor word [rbp - 0x28], 0x94c
sub word [rbp - 0x28], 0x13be
xor word [rbp - 0x28], 0x2da6
add word [rbp - 0x28], 0x214f
xor word [rbp - 0x28], 0xc08
add word [rbp - 0x28], 0xdc0
add word [rbp - 0x28], 0x8ac2
mov dword [rbp - 0x14], 0x645b9d76
add dword [rbp - 0x14], 0x566aacd
xor dword [rbp - 0x14], 0xe530239
sub dword [rbp - 0x14], 0x5b469ae5
add dword [rbp - 0x14], 0x32e4e1a5
xor dword [rbp - 0x14], 0xc0ad6e55
mov byte [rbp - 0x26], 0x41
xor byte [rbp - 0x26], 0x2d
sub byte [rbp - 0x26], 0x6c
add byte [rbp - 0x26], 0x37
add byte [rbp - 0x26], 0x25
add byte [rbp - 0x26], 0x11
sub byte [rbp - 0x26], 0x1d
add byte [rbp - 0x26], 0xa6
mov dword [rbp - 0x10], 0x19722426
xor dword [rbp - 0x10], 0x2dd31ea0
sub dword [rbp - 0x10], 0xaca8b63
sub dword [rbp - 0x10], 0x81e141b
add dword [rbp - 0x10], 0xd416a20
xor dword [rbp - 0x10], 0x3c1d5805
sub dword [rbp - 0x10], 0x2d43e65
add dword [rbp - 0x10], 0xd1cb1c0
xor dword [rbp - 0x10], 0x1d2f2fe7
xchg rdx, r9
mov r9, rdi
xchg rdx, r9
nop dword [rax]
movzx eax, word [rbp + rdx*2 - 0x24]
movzx ecx, byte [rbp + rdx - 0x30]
add cx, ax
mov word [rbp + rdx*2 - 0x24], cx
mov byte [rbp + rdx - 0x30], 0x41
sub byte [rbp + rdx - 0x30], 0x15
xor byte [rbp + rdx - 0x30], 0x77
sub byte [rbp + rdx - 0x30], 4
xor byte [rbp + rdx - 0x30], 5
add byte [rbp + rdx - 0x30], 0x1d
sub byte [rbp + rdx - 0x30], 0x6f
inc rdx
cmp rdx, 0xb
jb 0x14007a2b1
xchg rdx, r14
mov rbx, rdx
xchg rdx, r14
cmp word [rbx + 0x38], 0
je 0x14007a37e
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
cmp qword [rbx + 0x50], rax
je 0x14007a37e
cmp word [rbx + 0x38], 0x16
jne 0x14007a37e
mov rdx, qword [rbx + 0x40]
lea rcx, [rbp - 0x24]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14007a37e
mov eax, dword [rbx + 0x50]
mov dword [rbp + 0x40], eax
xchg r8, rdx
mov r8, qword [rsi + 8]
xchg rdx, r8
cmp rdx, qword [rsi + 0x10]
je 0x14007a36c
mov dword [rdx], eax
nop
sub qword [rsi + 8], 0x58110509
add qword [rsi + 8], 0x5811050d
jmp 0x14007a37e
lea r8, [rbp + 0x40]
xchg rcx, r14
mov r14, rsi
xchg r14, rcx
call fcn.140077d00
mov eax, dword [rbx]
test eax, eax
je 0x14007a390
add rbx, rax
jmp 0x14007a2fc
mov byte [rbp + rdi - 0x24], 0x1a
add byte [rbp + rdi - 0x24], 0x4d
sub byte [rbp + rdi - 0x24], 0x18
xor byte [rbp + rdi - 0x24], 6
sub byte [rbp + rdi - 0x24], 4
sub byte [rbp + rdi - 0x24], 0x45
inc rdi
cmp rdi, 0x16
jb 0x14007a390
mov r8d, dword [rbp + 0x30]
xor edx, edx
xchg rsi, r14
mov rcx, rsi
xchg r14, rsi
call sub.VCRUNTIME140.dll_memset
nop
test r14, r14
je 0x14007a3e7
xchg rcx, r8
mov r8, r14
xchg r8, rcx
call fcn.1401fd08c
xchg r13, rbx
mov r13, qword [rsp + 0x98]
xchg rbx, r13
add rsp, 0x60
nop
add rsp, 8
mov r15, qword [rsp - 8]
nop
xchg qword [rsp], r14
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
xchg qword [rsp - 8], rsi
nop
add rsp, 8
xchg qword [rsp - 8], rbp
nop
add rsp, 8
jmp qword [rsp - 8]