Function at 0x14007a2f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
nop
mov qword [rsp - 8], rbp
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
push r15
mov qword [rsp], r14
nop
mov qword [rsp - 8], r15
sub rsp, 8
mov rbp, rsp
sub rsp, 0x60
xchg rdx, r10
mov rsi, r10
xchg r10, rdx
xchg r15, rcx
mov rcx, r15
xchg r15, rcx
xor edi, edi
mov dword [rbp + 0x30], edi
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [rdi + 5]
call fcn.140078550
mov eax, dword [rbp + 0x30]
test eax, eax
je 0x14007a759
add eax, 0x1000
mov dword [rbp + 0x30], eax
mov ebx, eax
mov ecx, eax
call fcn.1401fd470
xchg r14, rax
mov rax, r14
xchg r14, rax
test rax, rax
je 0x14007a399
mov r8d, ebx
xor edx, edx
xchg rdi, rax
mov rcx, rdi
xchg rdi, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x14007a3a2
xchg r12, rdi
mov r14, r12
xchg r12, rdi
xchg r9, r14
mov qword [rbp + 0x48], r9
xchg r14, r9
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp + 0x30]
xchg r8, r15
mov r15, r14
xchg r15, r8
mov edx, 0xebd1b9b
add edx, 0x5da6e205
xor edx, 0x69a14285
add edx, 0x71b66553
sub edx, 0x71b4384d
add edx, 0x6b96dee3
sub edx, 0x249d15c1
add edx, 0x20b41370
xor edx, 0x6d72c8b8
xchg r15, rbx
mov rcx, rbx
xchg r15, rbx
call fcn.140078550
test eax, eax
js 0x14007a72d
mov dword [rbp - 0x30], 0x7560db36
sub dword [rbp - 0x30], 0x64665465
xor dword [rbp - 0x30], 0x476293e4
add dword [rbp - 0x30], 0xbd76dfc
xor dword [rbp - 0x30], 0x6369c116
xor dword [rbp - 0x30], 0x351720b4
add dword [rbp - 0x30], 0x2af73ced
sub dword [rbp - 0x30], 0x2c4b5944
xor dword [rbp - 0x30], 0xc54bb0ca
mov dword [rbp - 0x24], 0x7d8a7a1e
sub dword [rbp - 0x24], 0x6809ee82
add dword [rbp - 0x24], 0x514855a0
add dword [rbp - 0x24], 0xed89a3d
sub dword [rbp - 0x24], 0x6eadd5d4
add dword [rbp - 0x24], 0x75ca646a
sub dword [rbp - 0x24], 0x43514e6
xor dword [rbp - 0x24], 0x87fb0a47
mov dword [rbp - 0x20], 0x13e9c534
add dword [rbp - 0x20], 0x1908cdf1
add dword [rbp - 0x20], 0x385af0
xor dword [rbp - 0x20], 0x6f1573f9
sub dword [rbp - 0x20], 0x24aeb53
sub dword [rbp - 0x20], 0x1def0a17
xor dword [rbp - 0x20], 0x2b80500b
add dword [rbp - 0x20], 0x62f17638
xor dword [rbp - 0x20], 0x931a91bc
mov dword [rbp - 0x2c], 0x582694c3
add dword [rbp - 0x2c], 0x1a763d2f
add dword [rbp - 0x2c], 0x2229202
xor dword [rbp - 0x2c], 0x196677d3
xor dword [rbp - 0x2c], 0x78a9d2d9
add dword [rbp - 0x2c], 0xe1862ff8
mov dword [rbp - 0x1c], 0x4ed6a6f7
add dword [rbp - 0x1c], 0x11c64235
add dword [rbp - 0x1c], 0x14614faa
sub dword [rbp - 0x1c], 0x17f76c15
sub dword [rbp - 0x1c], 0x3bfa6117
add dword [rbp - 0x1c], 0x41ed4fd8
add dword [rbp - 0x1c], 0x9c8343f7
mov dword [rbp - 0x18], 0x3ae10c2e
xor dword [rbp - 0x18], 0x425e9efc
xor dword [rbp - 0x18], 0x59605695
xor dword [rbp - 0x18], 0x5b66b526
add dword [rbp - 0x18], 0xc2bd1
xor dword [rbp - 0x18], 0x46ddff05
xor dword [rbp - 0x18], 0xe8ff940
add dword [rbp - 0x18], 0xcca163f7
mov word [rbp - 0x28], 0x52ac
sub word [rbp - 0x28], 0x1649
sub word [rbp - 0x28], 0x3393
xor word [rbp - 0x28], 0xcd5
add word [rbp - 0x28], 0x214f
add word [rbp - 0x28], 0x8cd
add word [rbp - 0x28], 0x8b2
add word [rbp - 0x28], 0xc023
mov dword [rbp - 0x14], 0x2f6ae8af
add dword [rbp - 0x14], 0x412d6f58
sub dword [rbp - 0x14], 0x43c8b5ec
add dword [rbp - 0x14], 0x49430a10
sub dword [rbp - 0x14], 0x38d47ef5
add dword [rbp - 0x14], 0x1ce791ac
xor dword [rbp - 0x14], 0xa5a7418d
mov byte [rbp - 0x26], 0x1e
add byte [rbp - 0x26], 0x3b
sub byte [rbp - 0x26], 0x23
add byte [rbp - 0x26], 0x46
sub byte [rbp - 0x26], 0x29
xor byte [rbp - 0x26], 6
sub byte [rbp - 0x26], 0x54
xor byte [rbp - 0x26], 0xf7
mov dword [rbp - 0x10], 0x5601b9e0
xor dword [rbp - 0x10], 0x489a04e5
xor dword [rbp - 0x10], 0x52345678
xor dword [rbp - 0x10], 0x4b6dbe8a
xor dword [rbp - 0x10], 0x18ec6c07
add dword [rbp - 0x10], 0x23c11fb0
xor dword [rbp - 0x10], 0x5c3e21a9
sub dword [rbp - 0x10], 0x1ed0789a
mov rdx, rdi
nop dword [rax]
movzx eax, word [rbp + rdx*2 - 0x24]
movzx ecx, byte [rbp + rdx - 0x30]
add cx, ax
mov word [rbp + rdx*2 - 0x24], cx
mov byte [rbp + rdx - 0x30], 0xf
xor byte [rbp + rdx - 0x30], 0x33
add byte [rbp + rdx - 0x30], 0xb
add byte [rbp + rdx - 0x30], 0x21
xor byte [rbp + rdx - 0x30], 0x52
sub byte [rbp + rdx - 0x30], 0x15
add byte [rbp + rdx - 0x30], 0x26
sub byte [rbp + rdx - 0x30], 0x2e
sub byte [rbp + rdx - 0x30], 0x1d
inc rdx
cmp rdx, 0xb
jb 0x14007a619
xchg rbp, rbx
mov rbp, r14
xchg rbp, rbx
cmp word [rbx + 0x38], 0
je 0x14007a6f0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
cmp qword [rbx + 0x50], rax
je 0x14007a6f0
cmp word [rbx + 0x38], 0x16
jne 0x14007a6f0
mov rdx, qword [rbx + 0x40]
lea rcx, [rbp - 0x24]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14007a6f0
mov eax, dword [rbx + 0x50]
mov dword [rbp + 0x40], eax
xchg r15, rdx
mov r15, qword [rsi + 8]
xchg rdx, r15
cmp rdx, qword [rsi + 0x10]
je 0x14007a6de
mov dword [rdx], eax
nop
add qword [rsi + 8], 0x9e06fa
sub qword [rsi + 8], 0x9e06f6
jmp 0x14007a6f0
lea r8, [rbp + 0x40]
xchg rsi, rcx
mov rsi, rcx
xchg rsi, rcx
call fcn.140078080
mov eax, dword [rbx]
test eax, eax
je 0x14007a702
add rbx, rax
jmp 0x14007a66e
mov byte [rbp + rdi - 0x24], 0x28
sub byte [rbp + rdi - 0x24], 0x14
add byte [rbp + rdi - 0x24], 0x40
sub byte [rbp + rdi - 0x24], 0x2d
xor byte [rbp + rdi - 0x24], 0x2e
sub byte [rbp + rdi - 0x24], 9
inc rdi
cmp rdi, 0x16
jb 0x14007a702
mov r8d, dword [rbp + 0x30]
xor edx, edx
xchg rcx, r14
mov r14, rcx
xchg r14, rcx
call sub.VCRUNTIME140.dll_memset
nop
test r14, r14
je 0x14007a759
xchg r14, rcx
mov r14, rcx
xchg r14, rcx
call fcn.1401fd468
mov rbx, qword [rsp + 0x98]
add rsp, 0x60
push rax
push rbx
push rax
push rdx
push rdx
xchg qword [rsp + 0x28], r15
add rsp, 0x30
nop
add rsp, 8
xchg qword [rsp - 8], r14
nop
xchg qword [rsp], rdi
add rsp, 8
push rcx
push rax
push rax
push rax
push rdx
push rbx
push rbx
xchg qword [rsp + 0x38], rsi
add rsp, 0x40
push rax
push rax
xchg qword [rsp + 0x10], rbp
add rsp, 0x18
nop
add rsp, 8
jmp qword [rsp - 8]