Function at 0x14007a480
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
nop
mov qword [rsp - 8], rbp
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], rsi
nop
push r11
mov qword [rsp], rdi
push r14
nop
mov qword [rsp - 8], r15
sub rsp, 8
mov rbp, rsp
sub rsp, 0x60
xchg r14, rdx
mov rsi, r14
xchg r14, rdx
mov r15, rcx
xor edi, edi
mov dword [rbp + 0x30], edi
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [rdi + 5]
call fcn.140078680
mov eax, dword [rbp + 0x30]
test eax, eax
je 0x14007a8aa
sub eax, 0x118c2598
add eax, 0x118c3598
mov dword [rbp + 0x30], eax
mov ebx, eax
mov ecx, eax
call fcn.1401fcb78
mov r14, rax
test rax, rax
je 0x14007a519
mov r8d, ebx
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x14007a522
xchg rsi, rdi
mov r14, rsi
xchg rdi, rsi
xchg r12, r14
mov qword [rbp + 0x48], r12
xchg r12, r14
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp + 0x30]
mov r8, r14
mov edx, 0x134a23c
xor edx, 0x2553a242
xor edx, 0x5a177be8
xor edx, 0x768c4e92
xor edx, 0x1a23a9a7
xor edx, 0x35c9883a
sub edx, 0x27161494
xchg r15, rdx
mov rcx, rdx
xchg rdx, r15
call fcn.140078680
test eax, eax
js 0x14007a87e
mov dword [rbp - 0x30], 0x4d7a447a
add dword [rbp - 0x30], 0x7d359f6
xor dword [rbp - 0x30], 0x4663b11c
add dword [rbp - 0x30], 0x37385265
add dword [rbp - 0x30], 0x7d90c73
add dword [rbp - 0x30], 0xa4b768b2
mov dword [rbp - 0x24], 0x28df3c59
xor dword [rbp - 0x24], 0x5a581903
sub dword [rbp - 0x24], 0x2f9c4e72
xor dword [rbp - 0x24], 0x1096bd54
sub dword [rbp - 0x24], 0x386a67b5
xor dword [rbp - 0x24], 0x7330dc7f
sub dword [rbp - 0x24], 0x2b3d64cb
add dword [rbp - 0x24], 0xc18e8bc1
mov dword [rbp - 0x20], 0x64fdd06f
add dword [rbp - 0x20], 0xd3083a1
xor dword [rbp - 0x20], 0xdbcc628
xor dword [rbp - 0x20], 0x200347d6
sub dword [rbp - 0x20], 0x436260db
xor dword [rbp - 0x20], 0x4d3a8e95
sub dword [rbp - 0x20], 0x2296e267
add dword [rbp - 0x20], 0x23126a77
xor dword [rbp - 0x20], 0xaefc7ceb
mov dword [rbp - 0x2c], 0x4672defb
sub dword [rbp - 0x2c], 0x14f36013
xor dword [rbp - 0x2c], 0x238425dd
add dword [rbp - 0x2c], 0x1c25d40f
xor dword [rbp - 0x2c], 0x1d722504
sub dword [rbp - 0x2c], 0x2cffe1e
xor dword [rbp - 0x2c], 0x7f186b04
add dword [rbp - 0x2c], 0xa65b8fd0
mov dword [rbp - 0x1c], 0x5ceab22f
sub dword [rbp - 0x1c], 0x76c7137
add dword [rbp - 0x1c], 0x252c0678
sub dword [rbp - 0x1c], 0x49c5864a
xor dword [rbp - 0x1c], 0x311facf2
add dword [rbp - 0x1c], 0x84bdc80
xor dword [rbp - 0x1c], 0xf53bb52d
mov dword [rbp - 0x18], 0x567c6a70
xor dword [rbp - 0x18], 0x5ae209af
sub dword [rbp - 0x18], 0x63b86b7
xor dword [rbp - 0x18], 0x6fc2f0e6
sub dword [rbp - 0x18], 0x582214fa
add dword [rbp - 0x18], 0xedbae69a
mov word [rbp - 0x28], 0x5e59
add word [rbp - 0x28], 0x16ca
sub word [rbp - 0x28], 0x3ba6
sub word [rbp - 0x28], 0x36d0
add word [rbp - 0x28], 0x504d
add word [rbp - 0x28], 0xe8e
xor word [rbp - 0x28], 0x5f10
add word [rbp - 0x28], 0xb85e
mov dword [rbp - 0x14], 0x2b4f2b5c
xor dword [rbp - 0x14], 0x1fe214f2
add dword [rbp - 0x14], 0x187e7b9
xor dword [rbp - 0x14], 0x7409dffa
xor dword [rbp - 0x14], 0x60c6b580
xor dword [rbp - 0x14], 0x2ed876b2
add dword [rbp - 0x14], 0xfa6e174
add dword [rbp - 0x14], 0xe3b9e24c
mov byte [rbp - 0x26], 0x7b
sub byte [rbp - 0x26], 0xa
sub byte [rbp - 0x26], 0x35
add byte [rbp - 0x26], 6
xor byte [rbp - 0x26], 0x40
xor byte [rbp - 0x26], 0xf4
mov dword [rbp - 0x10], 0x6f8fe2d3
sub dword [rbp - 0x10], 0x6a272837
add dword [rbp - 0x10], 0x5494777f
add dword [rbp - 0x10], 0xda6a5a7
xor dword [rbp - 0x10], 0x476e64aa
xor dword [rbp - 0x10], 0x7b70717
xor dword [rbp - 0x10], 0x277a4b10
xchg rdi, r15
mov rdx, r15
xchg r15, rdi
nop dword [rax]
movzx eax, word [rbp + rdx*2 - 0x24]
movzx ecx, byte [rbp + rdx - 0x30]
add cx, ax
mov word [rbp + rdx*2 - 0x24], cx
mov byte [rbp + rdx - 0x30], 0x61
sub byte [rbp + rdx - 0x30], 0x39
sub byte [rbp + rdx - 0x30], 0x28
xor byte [rbp + rdx - 0x30], 0xd
add byte [rbp + rdx - 0x30], 9
xor byte [rbp + rdx - 0x30], 0xe
add byte [rbp + rdx - 0x30], 0x45
sub byte [rbp + rdx - 0x30], 0x5d
inc rdx
cmp rdx, 0xb
jb 0x14007a770
mov rbx, r14
cmp word [rbx + 0x38], 0
je 0x14007a832
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
cmp qword [rbx + 0x50], rax
je 0x14007a832
cmp word [rbx + 0x38], 0x16
jne 0x14007a832
mov rdx, qword [rbx + 0x40]
lea rcx, [rbp - 0x24]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14007a832
mov eax, dword [rbx + 0x50]
mov dword [rbp + 0x40], eax
mov rdx, qword [rsi + 8]
cmp rdx, qword [rsi + 0x10]
je 0x14007a820
mov dword [rdx], eax
neg qword [rsi + 8]
add qword [rsi + 8], 0xfffffffffffffffc
neg qword [rsi + 8]
jmp 0x14007a832
lea r8, [rbp + 0x40]
xchg rsi, rdx
mov rcx, rdx
xchg rsi, rdx
call fcn.140078180
mov eax, dword [rbx]
test eax, eax
je 0x14007a844
add rbx, rax
jmp 0x14007a7ba
mov byte [rbp + rdi - 0x24], 0x66
sub byte [rbp + rdi - 0x24], 0x50
add byte [rbp + rdi - 0x24], 0x3d
sub byte [rbp + rdi - 0x24], 0x31
xor byte [rbp + rdi - 0x24], 7
add byte [rbp + rdi - 0x24], 0x2b
add byte [rbp + rdi - 0x24], 0x17
sub byte [rbp + rdi - 0x24], 0x39
sub byte [rbp + rdi - 0x24], 0x2e
inc rdi
cmp rdi, 0x16
jb 0x14007a844
mov r8d, dword [rbp + 0x30]
xor edx, edx
xchg rdx, r14
mov rcx, rdx
xchg rdx, r14
call sub.VCRUNTIME140.dll_memset
nop
test r14, r14
je 0x14007a8aa
xchg rcx, r14
mov r14, rcx
xchg rcx, r14
call fcn.1401fcb70
mov rbx, qword [rsp + 0x98]
add rsp, 0x60
nop
mov r15, qword [rsp]
add rsp, 8
push rdx
push rbx
push rbx
push rdx
push rax
xchg qword [rsp + 0x28], r14
pop rax
pop rdx
pop rbx
pop rbx
pop rdx
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
mov rsi, qword [rsp - 8]
nop
add rsp, 8
xchg qword [rsp - 8], rbp
nop
add rsp, 8
jmp qword [rsp - 8]