Function at 0x14007a2b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
nop
mov qword [rsp - 8], rbp
sub rsp, 8
nop
push 0x14d93cc1
mov qword [rsp], rsi
push rdi
push r14
nop
sub rsp, 8
mov qword [rsp], r15
mov rbp, rsp
sub rsp, 0x60
mov rsi, rdx
xchg r12, r15
mov r12, rcx
xchg r15, r12
xor edi, edi
mov dword [rbp + 0x30], edi
lea rax, [rbp + 0x30]
xchg r12, rax
mov qword [rsp + 0x20], r12
xchg r12, rax
xor r9d, r9d
xor r8d, r8d
lea edx, [rdi + 5]
call fcn.140078590
mov eax, dword [rbp + 0x30]
test eax, eax
je 0x14007a700
neg eax
add eax, 0xfffff000
neg eax
mov dword [rbp + 0x30], eax
mov ebx, eax
mov ecx, eax
call fcn.1401fc5d4
xchg r14, rax
mov rax, r14
xchg r14, rax
test rax, rax
je 0x14007a34a
mov r8d, ebx
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x14007a353
xchg rdi, r14
mov rdi, r14
xchg rdi, r14
mov qword [rbp + 0x48], r14
lea rax, [rbp + 0x30]
xchg r10, rax
mov qword [rsp + 0x20], r10
xchg r10, rax
mov r9d, dword [rbp + 0x30]
xchg r8, r14
mov r14, r8
xchg r8, r14
mov edx, 0x603e1a08
sub edx, 0x45dc03ed
xor edx, 0x46f7772
add edx, 0x43e6201d
sub edx, 0x5aa3e411
add edx, 0xca3534b
sub edx, 0x13f2f0bb
xchg rcx, r12
mov r12, r15
xchg r12, rcx
call fcn.140078590
test eax, eax
js 0x14007a6da
mov dword [rbp - 0x30], 0x5ee2a50c
sub dword [rbp - 0x30], 0x5bbc25c7
add dword [rbp - 0x30], 0x204ee83b
xor dword [rbp - 0x30], 0x74cfa24d
sub dword [rbp - 0x30], 0xaa8d9b6
xor dword [rbp - 0x30], 0xbbe71ae1
mov dword [rbp - 0x24], 0x2b4d5cf
add dword [rbp - 0x24], 0x57ed5a43
xor dword [rbp - 0x24], 0x49f87ea9
add dword [rbp - 0x24], 0x1d1fcb37
sub dword [rbp - 0x24], 0x2fa8227b
add dword [rbp - 0x24], 0x48807229
xor dword [rbp - 0x24], 0x4d05b08f
add dword [rbp - 0x24], 0x380aad74
add dword [rbp - 0x24], 0xc31178cb
mov dword [rbp - 0x20], 0x58aa7520
xor dword [rbp - 0x20], 0x1e38034b
add dword [rbp - 0x20], 0x22e8da88
sub dword [rbp - 0x20], 0x2f0dabaf
add dword [rbp - 0x20], 0x213fb9d4
xor dword [rbp - 0x20], 0x14f6349e
sub dword [rbp - 0x20], 0x4e2d177f
add dword [rbp - 0x20], 0xfe3fab76
mov dword [rbp - 0x2c], 0x258b8965
add dword [rbp - 0x2c], 0x43d63ad0
add dword [rbp - 0x2c], 0xd26048
sub dword [rbp - 0x2c], 0x61a378d4
add dword [rbp - 0x2c], 0x51d742f2
sub dword [rbp - 0x2c], 0x1a9704bd
add dword [rbp - 0x2c], 0xc977e98
sub dword [rbp - 0x2c], 0x25cfb53b
add dword [rbp - 0x2c], 0xd05e43bb
mov dword [rbp - 0x1c], 0x13dadf5e
add dword [rbp - 0x1c], 0x5f15f3bb
sub dword [rbp - 0x1c], 0x2ac2bf37
add dword [rbp - 0x1c], 0x3f798d1
xor dword [rbp - 0x1c], 0x25b666a8
add dword [rbp - 0x1c], 0x95e9355e
mov dword [rbp - 0x18], 0x3e4d2e27
add dword [rbp - 0x18], 0x125b3fd9
xor dword [rbp - 0x18], 0xe7973f7
sub dword [rbp - 0x18], 0x406669ae
xor dword [rbp - 0x18], 0x2d7eff06
add dword [rbp - 0x18], 0x47cd09c6
sub dword [rbp - 0x18], 0x2e331aeb
sub dword [rbp - 0x18], 0x1694a90a
add dword [rbp - 0x18], 0xc91f6e4e
mov word [rbp - 0x28], 0x5757
sub word [rbp - 0x28], 0x564c
add word [rbp - 0x28], 0x3bbc
xor word [rbp - 0x28], 0x62e
add word [rbp - 0x28], 0x42d3
sub word [rbp - 0x28], 0x1cbd
sub word [rbp - 0x28], 0x4d87
xor word [rbp - 0x28], 0xe58e
mov dword [rbp - 0x14], 0x54df544b
sub dword [rbp - 0x14], 0x674c25d
xor dword [rbp - 0x14], 0x1ab37e53
sub dword [rbp - 0x14], 0x47efbc11
xor dword [rbp - 0x14], 0x6120b8d6
sub dword [rbp - 0x14], 0x6799af5c
add dword [rbp - 0x14], 0xf9522351
mov byte [rbp - 0x26], 0x15
xor byte [rbp - 0x26], 2
xor byte [rbp - 0x26], 0x48
xor byte [rbp - 0x26], 0x77
add byte [rbp - 0x26], 0x52
sub byte [rbp - 0x26], 0xf
xor byte [rbp - 0x26], 0x2f
sub byte [rbp - 0x26], 0x3e
add byte [rbp - 0x26], 0xf0
mov dword [rbp - 0x10], 0x378f272d
add dword [rbp - 0x10], 0x158a4b3e
xor dword [rbp - 0x10], 0x54013156
add dword [rbp - 0x10], 0x49f085e1
add dword [rbp - 0x10], 0xd4577a0
sub dword [rbp - 0x10], 0x425a87c7
sub dword [rbp - 0x10], 0x2d1035bf
sub dword [rbp - 0x10], 0xe283c9
xchg rdx, rcx
mov rcx, rdi
xchg rdx, rcx
nop dword [rax]
movzx eax, word [rbp + rdx*2 - 0x24]
movzx ecx, byte [rbp + rdx - 0x30]
add cx, ax
mov word [rbp + rdx*2 - 0x24], cx
mov byte [rbp + rdx - 0x30], 0x66
sub byte [rbp + rdx - 0x30], 0x5f
xor byte [rbp + rdx - 0x30], 0x4d
sub byte [rbp + rdx - 0x30], 0x1f
add byte [rbp + rdx - 0x30], 0x3b
xor byte [rbp + rdx - 0x30], 0x38
sub byte [rbp + rdx - 0x30], 0x46
xor byte [rbp + rdx - 0x30], 0x18
inc rdx
cmp rdx, 0xb
jb 0x14007a5c6
xchg r14, r15
mov rbx, r15
xchg r14, r15
cmp word [rbx + 0x38], 0
je 0x14007a68e
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
cmp qword [rbx + 0x50], rax
je 0x14007a68e
cmp word [rbx + 0x38], 0x16
jne 0x14007a68e
xchg r10, rdx
mov r10, qword [rbx + 0x40]
xchg rdx, r10
lea rcx, [rbp - 0x24]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14007a68e
mov eax, dword [rbx + 0x50]
mov dword [rbp + 0x40], eax
mov rdx, qword [rsi + 8]
cmp rdx, qword [rsi + 0x10]
je 0x14007a682
mov dword [rdx], eax
neg qword [rsi + 8]
add qword [rsi + 8], 0xfffffffffffffffc
neg qword [rsi + 8]
jmp 0x14007a68e
lea r8, [rbp + 0x40]
mov rcx, rsi
call fcn.1400780d0
mov eax, dword [rbx]
test eax, eax
je 0x14007a6a0
add rbx, rax
jmp 0x14007a616
mov byte [rbp + rdi - 0x24], 0
add byte [rbp + rdi - 0x24], 0xb
add byte [rbp + rdi - 0x24], 0x73
sub byte [rbp + rdi - 0x24], 0x30
sub byte [rbp + rdi - 0x24], 0xe
add byte [rbp + rdi - 0x24], 0x30
xor byte [rbp + rdi - 0x24], 0x4a
add byte [rbp + rdi - 0x24], 0x13
xor byte [rbp + rdi - 0x24], 0x4d
inc rdi
cmp rdi, 0x16
jb 0x14007a6a0
mov r8d, dword [rbp + 0x30]
xor edx, edx
xchg rcx, r14
mov r14, rcx
xchg r14, rcx
call sub.VCRUNTIME140.dll_memset
nop
test r14, r14
je 0x14007a700
mov rcx, r14
call fcn.1401fc5cc
mov rbx, qword [rsp + 0x98]
add rsp, 0x60
nop
add rsp, 8
mov r15, qword [rsp - 8]
nop
add rsp, 8
xchg qword [rsp - 8], r14
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
mov rsi, qword [rsp - 8]
nop
xchg qword [rsp], rbp
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]