Function at 0x14007a100
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
mov qword [rsp], rbp
nop
push r9
mov qword [rsp], rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
push r14
mov qword [rsp], r14
push rax
mov qword [rsp], r15
mov rbp, rsp
sub rsp, 0x60
xchg rsi, rdx
mov rdx, rsi
xchg rsi, rdx
xchg r14, rcx
mov r15, r14
xchg rcx, r14
xor edi, edi
mov dword [rbp + 0x30], edi
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [rdi + 5]
call fcn.140078410
mov eax, dword [rbp + 0x30]
test eax, eax
je 0x14007a551
sub eax, 0x19c1c334
add eax, 0x19c1d334
mov dword [rbp + 0x30], eax
mov ebx, eax
mov ecx, eax
call fcn.1401fd2a4
xchg r14, rax
mov rax, r14
xchg r14, rax
test rax, rax
je 0x14007a1a2
mov r8d, ebx
xor edx, edx
xchg r8, rax
mov rcx, r8
xchg r8, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x14007a1ab
xchg rdi, r8
mov r14, r8
xchg rdi, r8
xchg rdx, r14
mov qword [rbp + 0x48], rdx
xchg r14, rdx
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp + 0x30]
xchg r14, r8
mov r14, r8
xchg r14, r8
mov edx, 0x6ee86712
xor edx, 0x281395b1
add edx, 0x1b5351ef
add edx, 0x10a492c6
sub edx, 0x32496a1e
sub edx, 0x40aa6d35
mov rcx, r15
call fcn.140078410
test eax, eax
js 0x14007a52b
mov dword [rbp - 0x30], 0x2674781b
add dword [rbp - 0x30], 0x2e30007d
sub dword [rbp - 0x30], 0x3d64b9a
xor dword [rbp - 0x30], 0x79613d3c
sub dword [rbp - 0x30], 0x1e26d3b6
xor dword [rbp - 0x30], 0x4887e62
add dword [rbp - 0x30], 0x34c63a0d
add dword [rbp - 0x30], 0xb3307c7b
mov dword [rbp - 0x24], 0xe541798
add dword [rbp - 0x24], 0x4c71aa91
xor dword [rbp - 0x24], 0x5c410725
xor dword [rbp - 0x24], 0x3a8b14e8
add dword [rbp - 0x24], 0x3be4f0b0
xor dword [rbp - 0x24], 0x11b8f0c5
xor dword [rbp - 0x24], 0x60d69391
add dword [rbp - 0x24], 0xf8d95dae
mov dword [rbp - 0x20], 0x2edfbc92
add dword [rbp - 0x20], 0x369e97a8
xor dword [rbp - 0x20], 0x58d8d687
xor dword [rbp - 0x20], 0x26850803
add dword [rbp - 0x20], 0x3f12b4e3
sub dword [rbp - 0x20], 0x59f3143b
xor dword [rbp - 0x20], 0xff2ed41b
mov dword [rbp - 0x2c], 0x6b56f95d
xor dword [rbp - 0x2c], 0x6a524533
add dword [rbp - 0x2c], 0x2f2a1078
xor dword [rbp - 0x2c], 0x213c9fce
xor dword [rbp - 0x2c], 0x4bac031f
sub dword [rbp - 0x2c], 0x3cd17b0e
sub dword [rbp - 0x2c], 0xf0a920b
add dword [rbp - 0x2c], 0xe814b3d8
mov dword [rbp - 0x1c], 0x6bc4eadd
xor dword [rbp - 0x1c], 0x5bdde2e4
add dword [rbp - 0x1c], 0x34e3e285
sub dword [rbp - 0x1c], 0x4ad3773b
sub dword [rbp - 0x1c], 0x164e2afa
add dword [rbp - 0x1c], 0x6e9091b2
sub dword [rbp - 0x1c], 0x320952f5
add dword [rbp - 0x1c], 0xbf1a7833
mov dword [rbp - 0x18], 0x4ed5654a
sub dword [rbp - 0x18], 0x341e92c5
add dword [rbp - 0x18], 0x4aa6a5f3
sub dword [rbp - 0x18], 0x53413d2c
add dword [rbp - 0x18], 0x4288376
add dword [rbp - 0x18], 0x3ae6203d
xor dword [rbp - 0x18], 0xae122191
mov word [rbp - 0x28], 0x78ca
sub word [rbp - 0x28], 0x40b
sub word [rbp - 0x28], 0x13ff
sub word [rbp - 0x28], 0x5173
add word [rbp - 0x28], 0x5852
add word [rbp - 0x28], 0x44b
add word [rbp - 0x28], 0x89
add word [rbp - 0x28], 0x8a83
mov dword [rbp - 0x14], 0x5aea69ae
sub dword [rbp - 0x14], 0x51f39e00
add dword [rbp - 0x14], 0x166d6fea
sub dword [rbp - 0x14], 0x1309e87b
add dword [rbp - 0x14], 0x634d53a7
xor dword [rbp - 0x14], 0x3f35e0eb
add dword [rbp - 0x14], 0x266e00d5
xor dword [rbp - 0x14], 0x702e9930
add dword [rbp - 0x14], 0xf854213b
mov byte [rbp - 0x26], 0x35
xor byte [rbp - 0x26], 0x6a
sub byte [rbp - 0x26], 0xf
sub byte [rbp - 0x26], 0x1e
xor byte [rbp - 0x26], 0xa
xor byte [rbp - 0x26], 0x3a
xor byte [rbp - 0x26], 0x18
add byte [rbp - 0x26], 0x31
add byte [rbp - 0x26], 0xab
mov dword [rbp - 0x10], 0x60c5fd6
add dword [rbp - 0x10], 0x7166249d
sub dword [rbp - 0x10], 0xb33a754
sub dword [rbp - 0x10], 0x252ddb87
add dword [rbp - 0x10], 0xd358f30
xor dword [rbp - 0x10], 0x5cbed700
xor dword [rbp - 0x10], 0x23b153c5
sub dword [rbp - 0x10], 0x217a81df
sub dword [rbp - 0x10], 0x9cd92bf
xchg r13, rdi
mov rdx, r13
xchg r13, rdi
nop dword [rax]
movzx eax, word [rbp + rdx*2 - 0x24]
movzx ecx, byte [rbp + rdx - 0x30]
add cx, ax
mov word [rbp + rdx*2 - 0x24], cx
mov byte [rbp + rdx - 0x30], 0x7e
xor byte [rbp + rdx - 0x30], 0x63
add byte [rbp + rdx - 0x30], 0x25
sub byte [rbp + rdx - 0x30], 2
add byte [rbp + rdx - 0x30], 0x1f
sub byte [rbp + rdx - 0x30], 0x11
sub byte [rbp + rdx - 0x30], 7
sub byte [rbp + rdx - 0x30], 0x47
inc rdx
cmp rdx, 0xb
jb 0x14007a422
xchg r14, rbx
mov r14, rbx
xchg r14, rbx
cmp word [rbx + 0x38], 0
je 0x14007a4ee
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
cmp qword [rbx + 0x50], rax
je 0x14007a4ee
cmp word [rbx + 0x38], 0x16
jne 0x14007a4ee
mov rdx, qword [rbx + 0x40]
lea rcx, [rbp - 0x24]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14007a4ee
mov eax, dword [rbx + 0x50]
mov dword [rbp + 0x40], eax
mov rdx, qword [rsi + 8]
cmp rdx, qword [rsi + 0x10]
je 0x14007a4dc
mov dword [rdx], eax
nop
add qword [rsi + 8], 0x2e2b7b5d
sub qword [rsi + 8], 0x2e2b7b59
jmp 0x14007a4ee
lea r8, [rbp + 0x40]
xchg rdi, rcx
mov rdi, rsi
xchg rcx, rdi
call fcn.140077f40
mov eax, dword [rbx]
test eax, eax
je 0x14007a500
add rbx, rax
jmp 0x14007a472
mov byte [rbp + rdi - 0x24], 0x56
xor byte [rbp + rdi - 0x24], 0x6f
sub byte [rbp + rdi - 0x24], 5
sub byte [rbp + rdi - 0x24], 2
sub byte [rbp + rdi - 0x24], 0x18
xor byte [rbp + rdi - 0x24], 0x1a
inc rdi
cmp rdi, 0x16
jb 0x14007a500
mov r8d, dword [rbp + 0x30]
xor edx, edx
mov rcx, r14
call sub.VCRUNTIME140.dll_memset
nop
test r14, r14
je 0x14007a551
xchg rcx, r11
mov r11, r14
xchg rcx, r11
call fcn.1401fd29c
mov rbx, qword [rsp + 0x98]
add rsp, 0x60
nop
mov r15, qword [rsp]
add rsp, 8
push rcx
push rdx
push rax
push rbx
push rdx
xchg qword [rsp + 0x28], r14
add rsp, 0x30
push rbx
push rdx
push rax
push rbx
push rbx
push rcx
push rdx
push rdx
xchg qword [rsp + 0x40], rdi
add rsp, 0x48
nop
mov rsi, qword [rsp]
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], rbp
nop
add rsp, 8
jmp qword [rsp - 8]