Function at 0x140079fc0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
nop
sub rsp, 8
mov qword [rsp], rbp
push rsi
push rdi
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
mov qword [rsp - 8], r15
sub rsp, 8
mov rbp, rsp
sub rsp, 0x60
mov rsi, rdx
xchg rcx, r15
mov rcx, r15
xchg r15, rcx
xor edi, edi
mov dword [rbp + 0x30], edi
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [rdi + 5]
call fcn.140078210
mov eax, dword [rbp + 0x30]
test eax, eax
je 0x14007a411
neg eax
add eax, 0xfffff000
neg eax
mov dword [rbp + 0x30], eax
mov ebx, eax
mov ecx, eax
call fcn.1401fcb90
xchg r14, rax
mov rax, r14
xchg r14, rax
test rax, rax
je 0x14007a05b
mov r8d, ebx
xor edx, edx
xchg r9, rcx
mov r9, rax
xchg r9, rcx
call sub.VCRUNTIME140.dll_memset
jmp 0x14007a064
xchg r11, r14
mov r11, rdi
xchg r11, r14
mov qword [rbp + 0x48], r14
lea rax, [rbp + 0x30]
xchg rbx, rax
mov qword [rsp + 0x20], rbx
xchg rbx, rax
mov r9d, dword [rbp + 0x30]
xchg r13, r8
mov r13, r14
xchg r8, r13
mov edx, 0x16c321e8
add edx, 0x5b9e865f
sub edx, 0x111a9ad5
add edx, 0x4e4da50
xor edx, 0x1dd46a73
sub edx, 0x69fe3795
add edx, 0x27e473c0
sub edx, 0xb15c5a4
xor edx, 0x2ed0043d
mov rcx, r15
call fcn.140078210
test eax, eax
js 0x14007a3e5
mov dword [rbp - 0x30], 0x239805d
add dword [rbp - 0x30], 0x63a4f228
add dword [rbp - 0x30], 0xeec51c1
sub dword [rbp - 0x30], 0x4721cb92
xor dword [rbp - 0x30], 0x27163518
add dword [rbp - 0x30], 0x51bd7ad7
sub dword [rbp - 0x30], 0x3cad6843
add dword [rbp - 0x30], 0xd72816b6
mov dword [rbp - 0x24], 0x1e861db3
xor dword [rbp - 0x24], 0x12c2a557
add dword [rbp - 0x24], 0x646c8c9f
xor dword [rbp - 0x24], 0x122ae96d
add dword [rbp - 0x24], 0x184b16a1
sub dword [rbp - 0x24], 0x1fec971d
add dword [rbp - 0x24], 0xa479d2fc
mov dword [rbp - 0x20], 0x135b6c4c
add dword [rbp - 0x20], 0x39ba4bd4
xor dword [rbp - 0x20], 0x7f64f14
sub dword [rbp - 0x20], 0x1f129a46
add dword [rbp - 0x20], 0x35abf89d
xor dword [rbp - 0x20], 0x3b79b372
xor dword [rbp - 0x20], 0x748e1a28
xor dword [rbp - 0x20], 0xd1e703ac
mov dword [rbp - 0x2c], 0x16b1927d
sub dword [rbp - 0x2c], 0x167ba498
add dword [rbp - 0x2c], 0x3332808d
add dword [rbp - 0x2c], 0x30fddbdd
sub dword [rbp - 0x2c], 0x413942a2
add dword [rbp - 0x2c], 0x286b2b27
add dword [rbp - 0x2c], 0xab5ec422
mov dword [rbp - 0x1c], 0x2a997968
xor dword [rbp - 0x1c], 0x7844bf32
add dword [rbp - 0x1c], 0x1c3b8abe
add dword [rbp - 0x1c], 0xc6077e9
sub dword [rbp - 0x1c], 0x122f95f5
xor dword [rbp - 0x1c], 0x16fd45be
sub dword [rbp - 0x1c], 0x2f07a5ba
sub dword [rbp - 0x1c], 0x292e41a9
xor dword [rbp - 0x1c], 0xd8fd7036
mov dword [rbp - 0x18], 0x9b80325
xor dword [rbp - 0x18], 0x2c5ba1dd
add dword [rbp - 0x18], 0x12ad609b
sub dword [rbp - 0x18], 0x1523c8f5
add dword [rbp - 0x18], 0x4a35b99f
sub dword [rbp - 0x18], 0x381f003f
sub dword [rbp - 0x18], 0x2b1c6400
xor dword [rbp - 0x18], 0xf55f7090
mov word [rbp - 0x28], 0x1943
xor word [rbp - 0x28], 0x7a84
sub word [rbp - 0x28], 0x5b92
add word [rbp - 0x28], 0x397f
sub word [rbp - 0x28], 0x202f
xor word [rbp - 0x28], 0xd773
mov dword [rbp - 0x14], 0x732876a4
sub dword [rbp - 0x14], 0x3f84317a
add dword [rbp - 0x14], 0x37a27c9c
add dword [rbp - 0x14], 0x11a9f179
sub dword [rbp - 0x14], 0x5792f97c
add dword [rbp - 0x14], 0x59d8c055
add dword [rbp - 0x14], 0x804c8557
mov byte [rbp - 0x26], 0x55
xor byte [rbp - 0x26], 0x6f
sub byte [rbp - 0x26], 6
xor byte [rbp - 0x26], 0x7b
xor byte [rbp - 0x26], 0x32
sub byte [rbp - 0x26], 0x4a
add byte [rbp - 0x26], 0xa
sub byte [rbp - 0x26], 0xc
add byte [rbp - 0x26], 0xc5
mov dword [rbp - 0x10], 0x409690bc
add dword [rbp - 0x10], 0x357c66f5
sub dword [rbp - 0x10], 0x1622d466
sub dword [rbp - 0x10], 0x379bd64c
xor dword [rbp - 0x10], 0x36081227
sub dword [rbp - 0x10], 0x20b3851
add dword [rbp - 0x10], 0x4b39fc9
sub dword [rbp - 0x10], 0xb91c640
xor dword [rbp - 0x10], 0x1573ff7f
xchg rsi, rdx
mov rsi, rdi
xchg rsi, rdx
nop dword [rax]
movzx eax, word [rbp + rdx*2 - 0x24]
movzx ecx, byte [rbp + rdx - 0x30]
add cx, ax
mov word [rbp + rdx*2 - 0x24], cx
mov byte [rbp + rdx - 0x30], 0xe
xor byte [rbp + rdx - 0x30], 8
add byte [rbp + rdx - 0x30], 0
add byte [rbp + rdx - 0x30], 0x19
xor byte [rbp + rdx - 0x30], 0x6f
sub byte [rbp + rdx - 0x30], 0x67
xor byte [rbp + rdx - 0x30], 0x7b
sub byte [rbp + rdx - 0x30], 0x38
sub byte [rbp + rdx - 0x30], 0x3a
inc rdx
cmp rdx, 0xb
jb 0x14007a2d8
xchg rbx, r13
mov r13, r14
xchg rbx, r13
cmp word [rbx + 0x38], 0
je 0x14007a3a3
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
cmp qword [rbx + 0x50], rax
je 0x14007a3a3
cmp word [rbx + 0x38], 0x16
jne 0x14007a3a3
xchg rdx, r10
mov r10, qword [rbx + 0x40]
xchg rdx, r10
lea rcx, [rbp - 0x24]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14007a3a3
mov eax, dword [rbx + 0x50]
mov dword [rbp + 0x40], eax
mov rdx, qword [rsi + 8]
cmp rdx, qword [rsi + 0x10]
je 0x14007a391
mov dword [rdx], eax
sub qword [rsi + 8], 0xfffffffffffffffc
jmp 0x14007a3a3
lea r8, [rbp + 0x40]
xchg rbp, rcx
mov rbp, rsi
xchg rcx, rbp
call fcn.140077d30
mov eax, dword [rbx]
test eax, eax
je 0x14007a3b5
add rbx, rax
jmp 0x14007a32d
mov byte [rbp + rdi - 0x24], 0x32
add byte [rbp + rdi - 0x24], 0x12
xor byte [rbp + rdi - 0x24], 0x69
sub byte [rbp + rdi - 0x24], 0x26
add byte [rbp + rdi - 0x24], 0xf
add byte [rbp + rdi - 0x24], 0x4f
xor byte [rbp + rdi - 0x24], 0x65
inc rdi
cmp rdi, 0x16
jb 0x14007a3b5
mov r8d, dword [rbp + 0x30]
xor edx, edx
xchg rbx, rcx
mov rbx, r14
xchg rcx, rbx
call sub.VCRUNTIME140.dll_memset
nop
test r14, r14
je 0x14007a411
xchg r12, r14
mov rcx, r12
xchg r14, r12
call fcn.1401fcb88
xchg rbx, r13
mov r13, qword [rsp + 0x98]
xchg rbx, r13
add rsp, 0x60
nop
mov r15, qword [rsp]
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], r14
push rax
push rdx
push rax
push rax
xchg qword [rsp + 0x20], rdi
add rsp, 0x28
nop
xchg qword [rsp], rsi
add rsp, 8
push rcx
push rax
push rdx
push rbx
push rcx
push rax
xchg qword [rsp + 0x30], rbp
add rsp, 0x38
nop
add rsp, 8
jmp qword [rsp - 8]