Function at 0x14019c5c0
Capabilities:
Encode data using xor
Terminate process

Disassembly:
xchg rdi, rbx
mov qword [rsp + 8], rdi
xchg rdi, rbx
xchg rsi, rcx
mov qword [rsp + 0x10], rcx
xchg rcx, rsi
mov qword [rsp + 0x18], rdi
nop
sub rsp, 8
mov qword [rsp], rbp
lea rbp, [rsp - 0x980]
sub rsp, 0xa80
xchg rbx, rcx
mov rcx, rbx
xchg rcx, rbx
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x1f9e6df5
add r8d, 0x4595c072
xor r8d, 0x3630c235
add r8d, 0xb230a44
add r8d, 0xf112134
sub r8d, 0x6d390dc2
call sub.VCRUNTIME140.dll_memset
mov r8, qword [rbx]
xor ebx, ebx
mov edx, ebx
mov dword [rsp + 0x32], 0x4d2273a
add dword [rsp + 0x32], 0x7978fd7
xor dword [rsp + 0x32], 0x757d1643
sub dword [rsp + 0x32], 0x4b51c605
xor dword [rsp + 0x32], 0x28b46b5f
xor dword [rsp + 0x32], 0x5175e3cd
add dword [rsp + 0x32], 0xa2f3a317
mov dword [rsp + 0x42], 0x1409954
xor dword [rsp + 0x42], 0xeefdf9
add dword [rsp + 0x42], 0x762a443d
sub dword [rsp + 0x42], 0x20b24b88
xor dword [rsp + 0x42], 0x19657c75
xor dword [rsp + 0x42], 0x2ce2c05f
sub dword [rsp + 0x42], 0x4aa4460c
add dword [rsp + 0x42], 0xe78063f3
mov dword [rsp + 0x46], 0x778b65
add dword [rsp + 0x46], 0x743486eb
sub dword [rsp + 0x46], 0x3b096627
xor dword [rsp + 0x46], 0x25024375
add dword [rsp + 0x46], 0x186a1180
add dword [rsp + 0x46], 0x1da66456
xor dword [rsp + 0x46], 0xadc29a18
mov dword [rsp + 0x36], 0x787ecc8b
xor dword [rsp + 0x36], 0x1e75f38
sub dword [rsp + 0x36], 0x42d6ded
sub dword [rsp + 0x36], 0x2b498cec
add dword [rsp + 0x36], 0x159a79c7
xor dword [rsp + 0x36], 0xa94be457
mov dword [rsp + 0x4a], 0x262ac30f
xor dword [rsp + 0x4a], 0x6b4ee311
add dword [rsp + 0x4a], 0x1ee64e95
sub dword [rsp + 0x4a], 0x1118a511
xor dword [rsp + 0x4a], 0x550712c7
xor dword [rsp + 0x4a], 0x68af9b7e
add dword [rsp + 0x4a], 0x9891bf62
mov dword [rsp + 0x4e], 0x4eec9f5e
xor dword [rsp + 0x4e], 0x1154c3e9
xor dword [rsp + 0x4e], 0x3e6b6d3e
sub dword [rsp + 0x4e], 0x30b60b7d
add dword [rsp + 0x4e], 0x33fb4f84
xor dword [rsp + 0x4e], 0x2ade421a
add dword [rsp + 0x4e], 0xafb3c7e3
mov dword [rsp + 0x3a], 0x4bd024b3
xor dword [rsp + 0x3a], 0x6e997f4
sub dword [rsp + 0x3a], 0x2d5ec9c2
sub dword [rsp + 0x3a], 0x95b40b8
xor dword [rsp + 0x3a], 0x477500d6
sub dword [rsp + 0x3a], 0x4cdd2105
add dword [rsp + 0x3a], 0x441f9b69
add dword [rsp + 0x3a], 0xaea9d477
mov dword [rsp + 0x52], 0x66752f87
sub dword [rsp + 0x52], 0x2048374c
sub dword [rsp + 0x52], 0x3692288f
add dword [rsp + 0x52], 0x3ec2d339
sub dword [rsp + 0x52], 0x43c5f322
add dword [rsp + 0x52], 0x33fac02b
add dword [rsp + 0x52], 0xc0ea8f8e
mov dword [rsp + 0x56], 0x70beccbd
sub dword [rsp + 0x56], 0x4e72b21c
sub dword [rsp + 0x56], 0x221c73af
xor dword [rsp + 0x56], 0x662eddc3
add dword [rsp + 0x56], 0xee30f63
sub dword [rsp + 0x56], 0x9bc5ec7
sub dword [rsp + 0x56], 0x46eaef4d
add dword [rsp + 0x56], 0xdb3dc2ff
mov word [rsp + 0x3e], 0xcd1
add word [rsp + 0x3e], 0x39e
add word [rsp + 0x3e], 0x101d
add word [rsp + 0x3e], 0x3877
sub word [rsp + 0x3e], 0x10b7
add word [rsp + 0x3e], 0x2290
xor word [rsp + 0x3e], 0x9c2a
mov dword [rsp + 0x5a], 0xe413371
add dword [rsp + 0x5a], 0x596c9bb4
sub dword [rsp + 0x5a], 0x3e4922cd
sub dword [rsp + 0x5a], 0x3c2ea4c
xor dword [rsp + 0x5a], 0x357b3e30
add dword [rsp + 0x5a], 0x36e76378
xor dword [rsp + 0x5a], 0xb8ada0ca
mov byte [rsp + 0x40], 0x6f
xor byte [rsp + 0x40], 0x48
add byte [rsp + 0x40], 0x4f
sub byte [rsp + 0x40], 0x43
xor byte [rsp + 0x40], 0x3a
xor byte [rsp + 0x40], 0x40
sub byte [rsp + 0x40], 0x1c
add byte [rsp + 0x40], 0x34
add byte [rsp + 0x40], 0x95
mov dword [rsp + 0x5e], 0x2c10e435
xor dword [rsp + 0x5e], 0x2a0ee506
add dword [rsp + 0x5e], 0x585978f0
sub dword [rsp + 0x5e], 0x339dd4e
xor dword [rsp + 0x5e], 0x1c63d5f2
sub dword [rsp + 0x5e], 0x2015a920
add dword [rsp + 0x5e], 0x41f52410
xor dword [rsp + 0x5e], 0x693d3b79
nop
movzx eax, word [rsp + rdx*2 + 0x42]
movzx ecx, byte [rsp + rdx + 0x32]
add cx, ax
mov word [rsp + rdx*2 + 0x42], cx
mov byte [rsp + rdx + 0x32], bl
inc rdx
cmp rdx, 0xf
jb 0x14019c917
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x70]
call fcn.140086db0
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
mov byte [rsp + rax + 0x42], bl
inc rax
cmp rax, 0x1e
jb 0x14019c950
mov dword [rsp + 0x20], 0x2543def9
xor dword [rsp + 0x20], 0x1fb1457e
xor dword [rsp + 0x20], 0x3617c72d
add dword [rsp + 0x20], 0x840cbd8
add dword [rsp + 0x20], 0x66aba060
sub dword [rsp + 0x20], 0x7a71fa38
add dword [rsp + 0x20], 0xf597284c
mov rax, rbx
mov dword [rsp + 0x26], 0x37d97fd5
add dword [rsp + 0x26], 0x35d46306
xor dword [rsp + 0x26], 0x7d6a7738
add dword [rsp + 0x26], 0x342c635f
xor dword [rsp + 0x26], 0x140073cf
sub dword [rsp + 0x26], 0x1c90a772
xor dword [rsp + 0x26], 0x25c8e8e6
xor dword [rsp + 0x26], 0xeed6f4b2
mov dword [rsp + 0x2a], 0x10cc1fcf
add dword [rsp + 0x2a], 0x1a8e6c97
add dword [rsp + 0x2a], 0x1abe3998
xor dword [rsp + 0x2a], 0x4fa3d5
sub dword [rsp + 0x2a], 0x3a9f620e
add dword [rsp + 0x2a], 0x2f9158e7
xor dword [rsp + 0x2a], 0x72af028f
add dword [rsp + 0x2a], 0x2a9abcba
add dword [rsp + 0x2a], 0x8af8e337
mov byte [rsp + 0x24], 0x68
xor byte [rsp + 0x24], 0x3c
xor byte [rsp + 0x24], 0x3d
sub byte [rsp + 0x24], 0x32
add byte [rsp + 0x24], 0x20
add byte [rsp + 0x24], 0x9f
mov dword [rsp + 0x2e], 0x45ae551f
add dword [rsp + 0x2e], 0x7b311cf
sub dword [rsp + 0x2e], 0xd0fa1d5
xor dword [rsp + 0x2e], 0x368a4694
sub dword [rsp + 0x2e], 0x63635095
xor dword [rsp + 0x2e], 0x1378cd84
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x26]
movzx edx, byte [rsp + rax + 0x20]
add dx, cx
mov word [rsp + rax*2 + 0x26], dx
mov byte [rsp + rax + 0x20], bl
inc rax
cmp rax, 5
jb 0x14019ca7c
mov r9d, 0xbbc2fc5
add r9d, 0x6c88e55e
sub r9d, 0xf6b3d29
sub r9d, 0x2e4d9675
xor r9d, 0x52acc8b4
xor r9d, 0x8987fd1
sub r9d, 0x60b8f6d0
lea r8, [rsp + 0x26]
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop word [rax + rax]
mov byte [rsp + rbx + 0x26], 5
add byte [rsp + rbx + 0x26], 0x2b
sub byte [rsp + rbx + 0x26], 0x14
xor byte [rsp + rbx + 0x26], 0x56
add byte [rsp + rbx + 0x26], 0x16
xor byte [rsp + rbx + 0x26], 0x60
inc rbx
cmp rbx, 0xa
jb 0x14019caea
mov ecx, 0x2fee74c4
sub ecx, 0x1171d35
sub ecx, 0x6885386
add ecx, 0x54149b98
sub ecx, 0x188309d6
sub ecx, 0x5f5e4d96
xor ecx, 0xfb7db7ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3