Function at 0x14019c980
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
xchg rsi, r9
mov qword [rsp + 0x10], r9
xchg r9, rsi
xchg rdi, rdx
mov qword [rsp + 0x18], rdx
xchg rdx, rdi
nop
sub rsp, 8
mov qword [rsp], rbp
lea rbp, [rsp - 0x980]
sub rsp, 0xa80
mov rbx, rcx
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x213b642e
add r8d, 0x451c6490
sub r8d, 0x350ed66d
sub r8d, 0xc856e7d
sub r8d, 0x2214d623
add r8d, 0x7929586b
sub r8d, 0x1f3f8a9
sub r8d, 0x2b15eb08
sub r8d, 0x4ece1863
call sub.VCRUNTIME140.dll_memset
xchg r8, r9
mov r9, qword [rbx]
xchg r8, r9
xor ebx, ebx
mov edx, ebx
mov dword [rsp + 0x32], 0x491d11f3
xor dword [rsp + 0x32], 0x1ae8238
sub dword [rsp + 0x32], 0x1e205f0e
xor dword [rsp + 0x32], 0x7a221f59
xor dword [rsp + 0x32], 0x69dc2ff7
sub dword [rsp + 0x32], 0x1487662a
add dword [rsp + 0x32], 0xd211590d
mov dword [rsp + 0x42], 0x52ac7328
add dword [rsp + 0x42], 0xa1714a5
xor dword [rsp + 0x42], 0x3726faf1
sub dword [rsp + 0x42], 0x57dae216
xor dword [rsp + 0x42], 0x6f32161e
sub dword [rsp + 0x42], 0x68b399ca
xor dword [rsp + 0x42], 0x73f335dd
sub dword [rsp + 0x42], 0xbf14581
add dword [rsp + 0x42], 0xa9f77dfd
mov dword [rsp + 0x46], 0x328c5d3d
xor dword [rsp + 0x46], 0x6d4d3772
xor dword [rsp + 0x46], 0x1d8e1214
sub dword [rsp + 0x46], 0x3ce39d28
xor dword [rsp + 0x46], 0x9ec6a01
add dword [rsp + 0x46], 0x4768c992
add dword [rsp + 0x46], 0x19efa871
sub dword [rsp + 0x46], 0x605f1a13
add dword [rsp + 0x46], 0xf1f2f608
mov dword [rsp + 0x36], 0x36349bce
sub dword [rsp + 0x36], 0x258a0128
add dword [rsp + 0x36], 0x6a888959
sub dword [rsp + 0x36], 0x4a52f33d
add dword [rsp + 0x36], 0x1a66ba26
add dword [rsp + 0x36], 0x2f155778
sub dword [rsp + 0x36], 0x695c8e5e
add dword [rsp + 0x36], 0xe5f742f4
mov dword [rsp + 0x4a], 0x213ce718
xor dword [rsp + 0x4a], 0x2ad1e4bc
xor dword [rsp + 0x4a], 0x7ebb01b6
sub dword [rsp + 0x4a], 0x71e9bdd4
add dword [rsp + 0x4a], 0x48fb48c7
xor dword [rsp + 0x4a], 0x60b50849
xor dword [rsp + 0x4a], 0x55f0e1ee
sub dword [rsp + 0x4a], 0x1d573149
add dword [rsp + 0x4a], 0xa35fcc24
mov dword [rsp + 0x4e], 0x4181b603
xor dword [rsp + 0x4e], 0x2cc6abea
sub dword [rsp + 0x4e], 0x2ba77116
sub dword [rsp + 0x4e], 0x18c134f
add dword [rsp + 0x4e], 0x201f5619
sub dword [rsp + 0x4e], 0x102b9ffb
add dword [rsp + 0x4e], 0xaf72afcb
mov dword [rsp + 0x3a], 0x307daf76
sub dword [rsp + 0x3a], 0x299460a1
xor dword [rsp + 0x3a], 0x7d98269
xor dword [rsp + 0x3a], 0x6d2d385d
sub dword [rsp + 0x3a], 0x587204a4
add dword [rsp + 0x3a], 0x64a8b7c9
xor dword [rsp + 0x3a], 0x4444a256
add dword [rsp + 0x3a], 0xbae6eca6
mov dword [rsp + 0x52], 0x341ce362
add dword [rsp + 0x52], 0x27c1e8af
sub dword [rsp + 0x52], 0x31745cd3
sub dword [rsp + 0x52], 0x1a89e4af
xor dword [rsp + 0x52], 0x55ea944c
xor dword [rsp + 0x52], 0x609750f8
sub dword [rsp + 0x52], 0x133c5730
add dword [rsp + 0x52], 0xd81c0871
mov dword [rsp + 0x56], 0xb8241a8
xor dword [rsp + 0x56], 0x7397b02c
xor dword [rsp + 0x56], 0x2966f087
xor dword [rsp + 0x56], 0x590211ad
add dword [rsp + 0x56], 0x6c97668b
sub dword [rsp + 0x56], 0x47b90149
add dword [rsp + 0x56], 0xd22b898f
mov word [rsp + 0x3e], 0x3e90
add word [rsp + 0x3e], 0x1bb2
sub word [rsp + 0x3e], 0x570d
add word [rsp + 0x3e], 0x55ae
sub word [rsp + 0x3e], 0x2abf
add word [rsp + 0x3e], 0xc8d2
mov dword [rsp + 0x5a], 0x7cbff084
sub dword [rsp + 0x5a], 0x4d6e180e
add dword [rsp + 0x5a], 0x14d07e03
sub dword [rsp + 0x5a], 0x422604e1
add dword [rsp + 0x5a], 0x31fff6ca
add dword [rsp + 0x5a], 0x5183831
add dword [rsp + 0x5a], 0xc65b7eeb
mov byte [rsp + 0x40], 0x58
sub byte [rsp + 0x40], 0x54
xor byte [rsp + 0x40], 0x35
add byte [rsp + 0x40], 0x34
sub byte [rsp + 0x40], 0x65
xor byte [rsp + 0x40], 0x1e
add byte [rsp + 0x40], 0xd8
mov dword [rsp + 0x5e], 0x14f85e2f
add dword [rsp + 0x5e], 0x41eb00ae
xor dword [rsp + 0x5e], 0x45b921ea
xor dword [rsp + 0x5e], 0x38f9cfd0
add dword [rsp + 0x5e], 0x121d791e
sub dword [rsp + 0x5e], 0x3dc02a97
nop
movzx eax, word [rsp + rdx*2 + 0x42]
movzx ecx, byte [rsp + rdx + 0x32]
add cx, ax
mov word [rsp + rdx*2 + 0x42], cx
mov byte [rsp + rdx + 0x32], bl
inc rdx
cmp rdx, 0xf
jb 0x14019cd03
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x70]
call fcn.140086ff0
xchg rcx, rax
mov rcx, rbx
xchg rcx, rax
mov byte [rsp + rax + 0x42], bl
inc rax
cmp rax, 0x1e
jb 0x14019cd3c
mov dword [rsp + 0x20], 0x76d1c60b
sub dword [rsp + 0x20], 0xb7fb6e8
sub dword [rsp + 0x20], 0x43b802c8
sub dword [rsp + 0x20], 0x3f3b67b
add dword [rsp + 0x20], 0xbdfbbbd
xor dword [rsp + 0x20], 0x8152b62
xor dword [rsp + 0x20], 0x4b587c55
xor dword [rsp + 0x20], 0x9a3db05c
xchg r13, rbx
mov rax, r13
xchg rbx, r13
mov dword [rsp + 0x26], 0x7bf8b97d
sub dword [rsp + 0x26], 0x584213a5
add dword [rsp + 0x26], 0x3a9a05a3
sub dword [rsp + 0x26], 0x2d897613
xor dword [rsp + 0x26], 0x363ab329
add dword [rsp + 0x26], 0x219dfe6f
sub dword [rsp + 0x26], 0x1baf5959
add dword [rsp + 0x26], 0xf8633f9
xor dword [rsp + 0x26], 0xe30ea01f
mov dword [rsp + 0x2a], 0x7b94b2f4
sub dword [rsp + 0x2a], 0x54b1ce72
sub dword [rsp + 0x2a], 0x2079273
xor dword [rsp + 0x2a], 0x445bc1e5
xor dword [rsp + 0x2a], 0x681b3f80
add dword [rsp + 0x2a], 0xf6de5312
mov byte [rsp + 0x24], 0x32
add byte [rsp + 0x24], 0x49
sub byte [rsp + 0x24], 0x6d
xor byte [rsp + 0x24], 0x15
add byte [rsp + 0x24], 0x47
sub byte [rsp + 0x24], 0x22
add byte [rsp + 0x24], 0xb6
mov dword [rsp + 0x2e], 0x4205de81
add dword [rsp + 0x2e], 0x4b05208
add dword [rsp + 0x2e], 0x2e792408
sub dword [rsp + 0x2e], 0x6cc90df1
add dword [rsp + 0x2e], 0xcfd5f7f
xor dword [rsp + 0x2e], 0x716b853
sub dword [rsp + 0x2e], 0x12741ed0
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x26]
movzx edx, byte [rsp + rax + 0x20]
add dx, cx
mov word [rsp + rax*2 + 0x26], dx
mov byte [rsp + rax + 0x20], bl
inc rax
cmp rax, 5
jb 0x14019ce73
mov r9d, 0x70672b89
sub r9d, 0x561c9b55
add r9d, 0x26a5358b
xor r9d, 0x68b69705
xor r9d, 0x2055ceb2
add r9d, 0x231ac003
add r9d, 0x167e197
xor r9d, 0x52a5a7f9
sub r9d, 0x7e2a9a4b
lea r8, [rsp + 0x26]
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop word [rax + rax]
mov byte [rsp + rbx + 0x26], 0x44
sub byte [rsp + rbx + 0x26], 0xe
xor byte [rsp + rbx + 0x26], 0x44
sub byte [rsp + rbx + 0x26], 0x61
add byte [rsp + rbx + 0x26], 0x45
sub byte [rsp + rbx + 0x26], 0x56
inc rbx
cmp rbx, 0xa
jb 0x14019ceef
mov ecx, 0x611b5f17
add ecx, 0x11617619
sub ecx, 0x5e4024bc
add ecx, 0x14b4cf11
add ecx, 0xa150154
add ecx, 0x272f0d2b
xor ecx, 0x6d24d6c6
xor ecx, 0xc8eea73d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3