Function at 0x14007a220
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rax
mov qword [rsp], rbp
push rsi
nop
push r15
mov qword [rsp], rdi
push r15
mov qword [rsp], r14
push r15
mov rbp, rsp
sub rsp, 0x60
xchg rsi, r12
mov r12, rdx
xchg rsi, r12
xchg rsi, rcx
mov r15, rsi
xchg rcx, rsi
xor edi, edi
mov dword [rbp + 0x30], edi
lea rax, [rbp + 0x30]
xchg rcx, rax
mov qword [rsp + 0x20], rcx
xchg rcx, rax
xor r9d, r9d
xor r8d, r8d
lea edx, [rdi + 5]
call fcn.140078500
mov eax, dword [rbp + 0x30]
test eax, eax
je 0x14007a639
sub eax, 0x3889d6d6
add eax, 0x3889e6d6
mov dword [rbp + 0x30], eax
mov ebx, eax
mov ecx, eax
call fcn.1401fcbb0
xchg r14, rax
mov rax, r14
xchg r14, rax
test rax, rax
je 0x14007a2ba
mov r8d, ebx
xor edx, edx
xchg rdi, rax
mov rcx, rdi
xchg rdi, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x14007a2c3
xchg rdi, r11
mov r14, r11
xchg rdi, r11
mov qword [rbp + 0x48], r14
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp + 0x30]
xchg r8, r14
mov r14, r8
xchg r8, r14
mov edx, 0x2bf2c9fe
xor edx, 0x19bd45f7
xor edx, 0x6e817990
xor edx, 0x1848720b
xor edx, 0x52a48853
add edx, 0x39b230f7
xor edx, 0x4fd440bd
mov rcx, r15
call fcn.140078500
test eax, eax
js 0x14007a60d
mov dword [rbp - 0x30], 0x5c35900a
add dword [rbp - 0x30], 0x398c2ea
sub dword [rbp - 0x30], 0x197cef9f
sub dword [rbp - 0x30], 0xb451fce
xor dword [rbp - 0x30], 0x7f6995f3
sub dword [rbp - 0x30], 0x2d1343dc
add dword [rbp - 0x30], 0x24856a58
add dword [rbp - 0x30], 0xbb1efa06
mov dword [rbp - 0x24], 0x22cdd13a
add dword [rbp - 0x24], 0x58a62a22
xor dword [rbp - 0x24], 0xcd0ab47
sub dword [rbp - 0x24], 0x182fa04f
sub dword [rbp - 0x24], 0x39214f7a
sub dword [rbp - 0x24], 0x15bf82a6
add dword [rbp - 0x24], 0x44c78d36
sub dword [rbp - 0x24], 0x192c71ec
add dword [rbp - 0x24], 0xc3460678
mov dword [rbp - 0x20], 0x177dd1a9
xor dword [rbp - 0x20], 0x3dea9813
add dword [rbp - 0x20], 0xc00c695
xor dword [rbp - 0x20], 0x63e214be
xor dword [rbp - 0x20], 0x343a6ceb
sub dword [rbp - 0x20], 0x4250886
sub dword [rbp - 0x20], 0x44e0de34
xor dword [rbp - 0x20], 0xe7577e1d
mov dword [rbp - 0x2c], 0x469faae6
sub dword [rbp - 0x2c], 0x260c5c00
sub dword [rbp - 0x2c], 0x1e978b5
xor dword [rbp - 0x2c], 0x7a864089
xor dword [rbp - 0x2c], 0x2f4c295c
sub dword [rbp - 0x2c], 0x47970aeb
add dword [rbp - 0x2c], 0x575c23bf
xor dword [rbp - 0x2c], 0xadde2e4e
mov dword [rbp - 0x1c], 0x445b79cd
sub dword [rbp - 0x1c], 0x3c349d1b
xor dword [rbp - 0x1c], 0x2a923e7e
xor dword [rbp - 0x1c], 0xa31fe27
xor dword [rbp - 0x1c], 0x7295dda2
xor dword [rbp - 0x1c], 0x295a73c1
xor dword [rbp - 0x1c], 0xc8f7ffb
add dword [rbp - 0x1c], 0x7fb73206
mov dword [rbp - 0x18], 0x4a5234df
sub dword [rbp - 0x18], 0x822d9cc
xor dword [rbp - 0x18], 0x165a714a
add dword [rbp - 0x18], 0xb87c3a3
add dword [rbp - 0x18], 0x51a65cf
xor dword [rbp - 0x18], 0x9a2faca5
mov word [rbp - 0x28], 0x41d8
sub word [rbp - 0x28], 0x3ec9
add word [rbp - 0x28], 0x562e
xor word [rbp - 0x28], 0x2374
sub word [rbp - 0x28], 0x3f6f
add word [rbp - 0x28], 0xbc1c
mov dword [rbp - 0x14], 0x52982031
sub dword [rbp - 0x14], 0x2346c449
xor dword [rbp - 0x14], 0x3152b35b
sub dword [rbp - 0x14], 0x16528593
add dword [rbp - 0x14], 0x725ba1e1
xor dword [rbp - 0x14], 0x1c1081a8
sub dword [rbp - 0x14], 0x272a463c
add dword [rbp - 0x14], 0xc08fc102
mov byte [rbp - 0x26], 0x40
sub byte [rbp - 0x26], 0x1a
sub byte [rbp - 0x26], 0x24
xor byte [rbp - 0x26], 0x35
add byte [rbp - 0x26], 0x2c
add byte [rbp - 0x26], 0x93
mov dword [rbp - 0x10], 0x1f34e3d7
add dword [rbp - 0x10], 0x8f24ae3
xor dword [rbp - 0x10], 0x4308124c
add dword [rbp - 0x10], 0xf92b03f
xor dword [rbp - 0x10], 0x67b40a2e
sub dword [rbp - 0x10], 0x1d74e7ac
mov rdx, rdi
nop dword [rax]
movzx eax, word [rbp + rdx*2 - 0x24]
movzx ecx, byte [rbp + rdx - 0x30]
add cx, ax
mov word [rbp + rdx*2 - 0x24], cx
mov byte [rbp + rdx - 0x30], 0x65
xor byte [rbp + rdx - 0x30], 0x16
sub byte [rbp + rdx - 0x30], 0x2c
xor byte [rbp + rdx - 0x30], 0x78
sub byte [rbp + rdx - 0x30], 0xe
xor byte [rbp + rdx - 0x30], 0x31
inc rdx
cmp rdx, 0xb
jb 0x14007a507
xchg r14, rdx
mov rbx, rdx
xchg rdx, r14
cmp word [rbx + 0x38], 0
je 0x14007a5cb
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
cmp qword [rbx + 0x50], rax
je 0x14007a5cb
cmp word [rbx + 0x38], 0x16
jne 0x14007a5cb
xchg r15, rdx
mov r15, qword [rbx + 0x40]
xchg rdx, r15
lea rcx, [rbp - 0x24]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14007a5cb
mov eax, dword [rbx + 0x50]
mov dword [rbp + 0x40], eax
mov rdx, qword [rsi + 8]
cmp rdx, qword [rsi + 0x10]
je 0x14007a5b9
mov dword [rdx], eax
neg qword [rsi + 8]
add qword [rsi + 8], 0xfffffffffffffffc
neg qword [rsi + 8]
jmp 0x14007a5cb
lea r8, [rbp + 0x40]
xchg rbx, rcx
mov rbx, rsi
xchg rbx, rcx
call fcn.140078020
mov eax, dword [rbx]
test eax, eax
je 0x14007a5dd
add rbx, rax
jmp 0x14007a54d
mov byte [rbp + rdi - 0x24], 0x71
sub byte [rbp + rdi - 0x24], 0x3e
xor byte [rbp + rdi - 0x24], 6
xor byte [rbp + rdi - 0x24], 0x36
xor byte [rbp + rdi - 0x24], 0x64
sub byte [rbp + rdi - 0x24], 0x49
sub byte [rbp + rdi - 0x24], 0x1e
inc rdi
cmp rdi, 0x16
jb 0x14007a5dd
mov r8d, dword [rbp + 0x30]
xor edx, edx
xchg r14, rdx
mov rcx, rdx
xchg r14, rdx
call sub.VCRUNTIME140.dll_memset
nop
test r14, r14
je 0x14007a639
xchg rcx, r14
mov r14, rcx
xchg rcx, r14
call fcn.1401fcba8
mov rbx, qword [rsp + 0x98]
add rsp, 0x60
push rbx
push rbx
xchg qword [rsp + 0x10], r15
pop rbx
pop rbx
add rsp, 8
nop
mov r14, qword [rsp]
add rsp, 8
nop
mov rdi, qword [rsp]
add rsp, 8
push rax
push rax
push rdx
push rdx
push rbx
push rcx
push rbx
push rdx
xchg qword [rsp + 0x40], rsi
add rsp, 0x48
push rbx
push rbx
push rcx
push rbx
push rbx
xchg qword [rsp + 0x28], rbp
pop rbx
pop rbx
pop rcx
pop rbx
pop rbx
add rsp, 8
ret