Function at 0x1400f1070
Capabilities:
Encode data using xor
Terminate process

Disassembly:
xchg r13, rbx
mov qword [rsp + 8], r13
xchg r13, rbx
xchg rdx, rsi
mov qword [rsp + 0x10], rdx
xchg rdx, rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x980]
sub rsp, 0xa80
mov rbx, rcx
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0xaeb8b24
add r8d, 0x430018f5
xor r8d, 0x4420544c
add r8d, 0x4dc56799
xor r8d, 0x54c638c1
add r8d, 0x57e7e212
xor r8d, 0x5b3f5b49
call sub.VCRUNTIME140.dll_memset
xchg r12, rcx
mov r12, qword [rbx]
xchg rcx, r12
add rcx, 0x3d63c566
sub rcx, 0x3d63bf8e
call fcn.14007b910
xor ebx, ebx
mov dword [rsp + 0x32], 0x6ed74fba
xor dword [rsp + 0x32], 0x3d246f2b
sub dword [rsp + 0x32], 0x1bc71999
xor dword [rsp + 0x32], 0x64a5b0df
sub dword [rsp + 0x32], 0xfc234a
sub dword [rsp + 0x32], 0x2391231
add dword [rsp + 0x32], 0x1d2973bd
add dword [rsp + 0x32], 0x8079028d
mov edx, ebx
mov dword [rsp + 0x42], 0x5a2f73ea
sub dword [rsp + 0x42], 0x3eca5f04
xor dword [rsp + 0x42], 0x6f0e64c4
sub dword [rsp + 0x42], 0x11a90cfb
add dword [rsp + 0x42], 0xa0dda68
add dword [rsp + 0x42], 0xd37a879
add dword [rsp + 0x42], 0x47e22d9
add dword [rsp + 0x42], 0x80f7f64e
xchg r8, rax
mov rax, r8
xchg r8, rax
mov dword [rsp + 0x46], 0x4ec34a1d
sub dword [rsp + 0x46], 0x3b754e32
add dword [rsp + 0x46], 0x2ecda87e
sub dword [rsp + 0x46], 0xaf094b8
xor dword [rsp + 0x46], 0x8f133ea
xor dword [rsp + 0x46], 0x4a81d83b
sub dword [rsp + 0x46], 0x4cc6e5b0
add dword [rsp + 0x46], 0x33d7d5c4
add dword [rsp + 0x46], 0xa3072ab6
mov dword [rsp + 0x36], 0x3eddb97a
sub dword [rsp + 0x36], 0x3a083564
add dword [rsp + 0x36], 0x4edb282f
xor dword [rsp + 0x36], 0x51931c94
add dword [rsp + 0x36], 0x34cb298c
add dword [rsp + 0x36], 0x12cc3f4e
sub dword [rsp + 0x36], 0x425eb581
xor dword [rsp + 0x36], 0x4a2c9509
add dword [rsp + 0x36], 0xa98605d3
mov dword [rsp + 0x4a], 0x4b1bd303
add dword [rsp + 0x4a], 0x8fc8387
add dword [rsp + 0x4a], 0x16316d33
sub dword [rsp + 0x4a], 0x1f82d279
xor dword [rsp + 0x4a], 0x3f672fa4
xor dword [rsp + 0x4a], 0x125b6799
add dword [rsp + 0x4a], 0x97304604
mov dword [rsp + 0x4e], 0x7c625810
xor dword [rsp + 0x4e], 0x69225cc8
sub dword [rsp + 0x4e], 0x7dfcd6d
sub dword [rsp + 0x4e], 0x76d91fb
add dword [rsp + 0x4e], 0x28ab14fd
add dword [rsp + 0x4e], 0xd0dc4500
mov dword [rsp + 0x3a], 0xddd7dde
xor dword [rsp + 0x3a], 0x45e23977
xor dword [rsp + 0x3a], 0x1ba28a47
sub dword [rsp + 0x3a], 0x3b3565ac
add dword [rsp + 0x3a], 0x1c5aa3c2
xor dword [rsp + 0x3a], 0x736ca1a5
xor dword [rsp + 0x3a], 0x1f52ec8
add dword [rsp + 0x3a], 0x1207f7e3
xor dword [rsp + 0x3a], 0xae948cba
mov dword [rsp + 0x52], 0x465074da
xor dword [rsp + 0x52], 0x230af75e
sub dword [rsp + 0x52], 0x28b91d83
sub dword [rsp + 0x52], 0x302d52f1
xor dword [rsp + 0x52], 0x5146968f
xor dword [rsp + 0x52], 0x2088a1ca
add dword [rsp + 0x52], 0x81c2db27
mov dword [rsp + 0x56], 0x1bd5bd49
add dword [rsp + 0x56], 0x4b1229e
add dword [rsp + 0x56], 0x5e207583
sub dword [rsp + 0x56], 0x2a4a4cae
sub dword [rsp + 0x56], 0xf5cedc0
xor dword [rsp + 0x56], 0x63f059e1
add dword [rsp + 0x56], 0xd88abc62
mov word [rsp + 0x3e], 0x2f63
xor word [rsp + 0x3e], 0x2f52
add word [rsp + 0x3e], 0x6cdf
sub word [rsp + 0x3e], 0x4255
add word [rsp + 0x3e], 0x15dc
sub word [rsp + 0x3e], 0x29a4
xor word [rsp + 0x3e], 0x2103
sub word [rsp + 0x3e], 0x1038
add word [rsp + 0x3e], 0xcf3e
mov dword [rsp + 0x5a], 0x440b6085
xor dword [rsp + 0x5a], 0x6223e4c4
sub dword [rsp + 0x5a], 0x1074c906
add dword [rsp + 0x5a], 0x66592583
sub dword [rsp + 0x5a], 0x5dc2c4b5
add dword [rsp + 0x5a], 0x23fff8b0
add dword [rsp + 0x5a], 0xbd25eac5
mov byte [rsp + 0x40], 0x3a
xor byte [rsp + 0x40], 0x68
xor byte [rsp + 0x40], 4
sub byte [rsp + 0x40], 0x33
xor byte [rsp + 0x40], 0x24
add byte [rsp + 0x40], 0x1f
xor byte [rsp + 0x40], 0x2c
xor byte [rsp + 0x40], 0xfc
mov dword [rsp + 0x5e], 0x68f39a2f
xor dword [rsp + 0x5e], 0x692937b7
add dword [rsp + 0x5e], 0x6e400cf9
xor dword [rsp + 0x5e], 0x45aca2d
xor dword [rsp + 0x5e], 0x152e2968
xor dword [rsp + 0x5e], 0x7bcc2dbd
sub dword [rsp + 0x5e], 0x1aa174fb
nop
movzx eax, word [rsp + rdx*2 + 0x42]
movzx ecx, byte [rsp + rdx + 0x32]
add cx, ax
mov word [rsp + rdx*2 + 0x42], cx
mov byte [rsp + rdx + 0x32], bl
inc rdx
cmp rdx, 0xf
jb 0x1400f140a
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x70]
call fcn.140086ff0
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
mov byte [rsp + rax + 0x42], bl
inc rax
cmp rax, 0x1e
jb 0x1400f1443
mov dword [rsp + 0x20], 0x2d43e6fc
sub dword [rsp + 0x20], 0x1306832b
xor dword [rsp + 0x20], 0xe167bf3
xor dword [rsp + 0x20], 0x2530abcb
add dword [rsp + 0x20], 0x4f215c6
sub dword [rsp + 0x20], 0x149a7f31
add dword [rsp + 0x20], 0xd583ac78
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
mov dword [rsp + 0x26], 0x2e8cd1fd
add dword [rsp + 0x26], 0xb6b4c3a
add dword [rsp + 0x26], 0x15fa9225
add dword [rsp + 0x26], 0x2c9902f8
xor dword [rsp + 0x26], 0x1b28d24b
add dword [rsp + 0x26], 0x59660c6
add dword [rsp + 0x26], 0x92433d6a
mov dword [rsp + 0x2a], 0x5991061d
add dword [rsp + 0x2a], 0x127e1e1e
sub dword [rsp + 0x2a], 0x589bfd2
sub dword [rsp + 0x2a], 0x20c3f1f2
add dword [rsp + 0x2a], 0x3e026b5
sub dword [rsp + 0x2a], 0x99b25a7
sub dword [rsp + 0x2a], 0x18f98928
xor dword [rsp + 0x2a], 0xd8751521
mov byte [rsp + 0x24], 0x5c
sub byte [rsp + 0x24], 0x43
sub byte [rsp + 0x24], 0x13
add byte [rsp + 0x24], 5
xor byte [rsp + 0x24], 0x3a
add byte [rsp + 0x24], 0x2d
xor byte [rsp + 0x24], 0x73
add byte [rsp + 0x24], 0xc9
mov dword [rsp + 0x2e], 0x6b5a4171
xor dword [rsp + 0x2e], 0x4553d605
xor dword [rsp + 0x2e], 0xbf70cb5
xor dword [rsp + 0x2e], 0x49025b97
sub dword [rsp + 0x2e], 0x5cf5fd8
add dword [rsp + 0x2e], 0xb7ca5e8
sub dword [rsp + 0x2e], 0x72a906ea
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x26]
movzx edx, byte [rsp + rax + 0x20]
add dx, cx
mov word [rsp + rax*2 + 0x26], dx
mov byte [rsp + rax + 0x20], bl
inc rax
cmp rax, 5
jb 0x1400f1575
mov r9d, 0x7700cb05
sub r9d, 0x2caf37bd
sub r9d, 0x41aeac37
add r9d, 0x36689b3f
add r9d, 0x25c47a31
add r9d, 0x966c82a
sub r9d, 0x16526338
xor r9d, 0x57e46163
lea r8, [rsp + 0x26]
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop word [rax + rax]
mov byte [rsp + rbx + 0x26], 0x61
sub byte [rsp + rbx + 0x26], 0x61
add byte [rsp + rbx + 0x26], 0x16
add byte [rsp + rbx + 0x26], 0x13
add byte [rsp + rbx + 0x26], 4
sub byte [rsp + rbx + 0x26], 0xb
add byte [rsp + rbx + 0x26], 0x3c
xor byte [rsp + rbx + 0x26], 0x5e
inc rbx
cmp rbx, 0xa
jb 0x1400f15ea
mov ecx, 0x729be0ba
add ecx, 0x671cb2a
xor ecx, 0x1c71b7d6
xor ecx, 0x74590980
add ecx, 0x2d4a0137
xor ecx, 0xc190e916
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3