Function at 0x1400451b0
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x2e0]
sub rsp, 0x3e0
mov dword [rbp - 0x7a], 0xf6e2e1e3
mov dword [rbp - 0x76], 0xbdf5f3f4
mov dword [rbp - 0x72], 0xf3edf1
mov byte [rbp - 0x6e], 1
xor ecx, ecx
mov edx, ecx
nop dword [rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx - 0x7a], al
inc rdx
cmp rdx, 0xb
jb 0x1400451f0
mov byte [rbp - 0x6e], cl
lea rax, [rbp - 0x7a]
mov qword [rbp + 0x190], rax
movdqa xmm0, xmmword [0x14014fe30]
movdqu xmmword [rbp + 0xa3], xmm0
mov word [rbp + 0xb3], 0xf9
mov byte [rbp + 0xb5], 1
mov rdx, rcx
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0xa3], al
inc rdx
cmp rdx, 0x11
jb 0x140045231
mov byte [rbp + 0xb5], cl
lea rax, [rbp + 0xa3]
mov qword [rbp + 0x198], rax
mov dword [rbp - 0x6d], 0xf9feeef8
mov dword [rbp - 0x69], 0xbde5f4f9
mov dword [rbp - 0x65], 0xf3edf1
mov byte [rbp - 0x61], 1
mov rdx, rcx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx - 0x6d], al
inc rdx
cmp rdx, 0xb
jb 0x140045280
mov byte [rbp - 0x61], cl
lea rax, [rbp - 0x6d]
mov qword [rbp + 0x1a0], rax
mov dword [rbp - 0x12], 0xe0faf8ed
mov dword [rbp - 0xe], 0xe0fce4e2
mov dword [rbp - 0xa], 0xf2eef0ba
mov word [rbp - 6], 0x100
mov rdx, rcx
nop dword [rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx - 0x12], al
inc rdx
cmp rdx, 0xc
jb 0x1400452c0
mov byte [rbp - 5], cl
lea rax, [rbp - 0x12]
mov qword [rbp + 0x1a8], rax
mov dword [rbp - 4], 0xe0faf8ed
mov dword [rbp], 0xe0fce4e2
mov dword [rbp + 4], 0xeff3bbf7
mov word [rbp + 8], 0xfd
mov byte [rbp + 0xa], 1
mov rdx, rcx
lea eax, [rdx - 0x74]
xor byte [rbp + rdx - 4], al
inc rdx
cmp rdx, 0xd
jb 0x140045300
mov byte [rbp + 0xa], cl
lea rax, [rbp - 4]
mov qword [rbp + 0x1b0], rax
mov dword [rbp - 0x60], 0xeae2e4ea
mov dword [rbp - 0x5c], 0xbdfcfefd
mov dword [rbp - 0x58], 0xf3edf1
mov byte [rbp - 0x54], 1
mov rdx, rcx
nop word [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx - 0x60], al
inc rdx
cmp rdx, 0xb
jb 0x140045340
mov byte [rbp - 0x54], cl
lea rax, [rbp - 0x60]
mov qword [rbp + 0x1b8], rax
mov dword [rbp - 0x53], 0xece1fffc
mov dword [rbp - 0x4f], 0xbdfcfefd
mov dword [rbp - 0x4b], 0xf3edf1
mov byte [rbp - 0x47], 1
mov rdx, rcx
nop word [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx - 0x53], al
inc rdx
cmp rdx, 0xb
jb 0x140045380
mov byte [rbp - 0x47], cl
lea rax, [rbp - 0x53]
mov qword [rbp + 0x1c0], rax
mov dword [rsp + 0x3e], 0xe2e9e8fe
mov dword [rsp + 0x42], 0xf6bcffff
mov dword [rsp + 0x46], 0x100f0ec
mov rdx, rcx
nop dword [rax]
lea eax, [rdx - 0x74]
xor byte [rsp + rdx + 0x3e], al
inc rdx
cmp rdx, 0xa
jb 0x1400453c0
mov byte [rsp + 0x49], cl
lea rax, [rsp + 0x3e]
mov qword [rbp + 0x1c8], rax
mov dword [rbp - 0x46], 0xece1fffc
mov dword [rbp - 0x42], 0xbde2e9f5
mov dword [rbp - 0x3e], 0xf3edf1
mov byte [rbp - 0x3a], 1
mov rdx, rcx
nop dword [rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx - 0x46], al
inc rdx
cmp rdx, 0xb
jb 0x140045400
mov byte [rbp - 0x3a], cl
lea rax, [rbp - 0x46]
mov qword [rbp + 0x1d0], rax
mov dword [rsp + 0x29], 0xfeefe9e5
mov dword [rsp + 0x2d], 0xf6eaf4be
mov word [rsp + 0x31], 0x100
mov rdx, rcx
nop dword [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rsp + rdx + 0x29], al
inc rdx
cmp rdx, 8
jb 0x140045440
mov byte [rsp + 0x32], cl
lea rax, [rsp + 0x29]
mov qword [rbp + 0x1d8], rax
mov dword [rsp + 0x4a], 0xfeefe9e5
mov dword [rsp + 0x4e], 0xf6bca5a6
mov dword [rsp + 0x52], 0x100f0ec
mov rdx, rcx
nop dword [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rsp + rdx + 0x4a], al
inc rdx
cmp rdx, 0xa
jb 0x140045480
mov byte [rsp + 0x55], cl
lea rax, [rsp + 0x4a]
mov qword [rbp + 0x1e0], rax
mov dword [rsp + 0x20], 0xa1efe9e5
mov dword [rsp + 0x24], 0xf7e9f5
mov byte [rsp + 0x28], 1
mov rdx, rcx
nop dword [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rsp + rdx + 0x20], al
inc rdx
cmp rdx, 7
jb 0x1400454c0
mov byte [rsp + 0x28], cl
lea rax, [rsp + 0x20]
mov qword [rbp + 0x1e8], rax
mov dword [rsp + 0x33], 0xb9efe9e5
mov dword [rsp + 0x37], 0xebf7bfa4
mov word [rsp + 0x3b], 0xf1
mov byte [rsp + 0x3d], 1
mov rdx, rcx
nop
lea eax, [rdx - 0x74]
xor byte [rsp + rdx + 0x33], al
inc rdx
cmp rdx, 9
jb 0x140045500
mov byte [rsp + 0x3d], cl
lea rax, [rsp + 0x33]
mov qword [rbp + 0x1f0], rax
movdqa xmm0, xmmword [0x14014fe80]
movdqu xmmword [rbp + 0x50], xmm0
mov dword [rbp + 0x60], 0xfae6f8b2
mov word [rbp + 0x64], 0x100
mov rdx, rcx
nop dword [rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0x50], al
inc rdx
cmp rdx, 0x14
jb 0x140045540
mov byte [rbp + 0x65], cl
lea rax, [rbp + 0x50]
mov qword [rbp + 0x1f8], rax
mov dword [rbp + 0xb], 0xeafce4db
mov dword [rbp + 0xf], 0xe1f3f9e3
mov dword [rbp + 0x13], 0xeff3bbff
mov word [rbp + 0x17], 0xfd
mov byte [rbp + 0x19], 1
mov rdx, rcx
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0xb], al
inc rdx
cmp rdx, 0xd
jb 0x140045580
mov byte [rbp + 0x19], cl
lea rax, [rbp + 0xb]
mov qword [rbp + 0x200], rax
mov dword [rbp - 0x39], 0xffe3f8e8
mov dword [rbp - 0x35], 0xbde2f0f3
mov dword [rbp - 0x31], 0xf3edf1
mov byte [rbp - 0x2d], 1
mov rdx, rcx
nop word [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx - 0x39], al
inc rdx
cmp rdx, 0xb
jb 0x1400455c0
mov byte [rbp - 0x2d], cl
lea rax, [rbp - 0x39]
mov qword [rbp + 0x208], rax
movdqa xmm0, xmmword [0x14014ff10]
movdqu xmmword [rbp + 0x108], xmm0
mov word [rbp + 0x118], 0x100
mov rdx, rcx
nop word [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0x108], al
inc rdx
cmp rdx, 0x10
jb 0x140045600
mov byte [rbp + 0x119], cl
lea rax, [rbp + 0x108]
mov qword [rbp + 0x210], rax
mov dword [rbp + 0x1a], 0xe0fee0c5
mov dword [rbp + 0x1e], 0xd6c0e5e2
mov dword [rbp + 0x22], 0xeff3bbd7
mov word [rbp + 0x26], 0xfd
mov byte [rbp + 0x28], 1
mov rdx, rcx
nop dword [rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0x1a], al
inc rdx
cmp rdx, 0xd
jb 0x140045650
mov byte [rbp + 0x28], cl
lea rax, [rbp + 0x1a]
mov qword [rbp + 0x218], rax
mov dword [rbp - 0x2c], 0xe0dac8dc
mov dword [rbp - 0x28], 0xbde1fdff
mov dword [rbp - 0x24], 0xf3edf1
mov byte [rbp - 0x20], 1
mov rdx, rcx
nop word [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx - 0x2c], al
inc rdx
cmp rdx, 0xb
jb 0x140045690
mov byte [rbp - 0x20], cl
lea rax, [rbp - 0x2c]
mov qword [rbp + 0x220], rax
mov dword [rsp + 0x56], 0xebfce2c0
mov dword [rsp + 0x5a], 0xf6bcd4c0
mov dword [rsp + 0x5e], 0x100f0ec
mov rdx, rcx
nop dword [rax]
lea eax, [rdx - 0x74]
xor byte [rsp + rdx + 0x56], al
inc rdx
cmp rdx, 0xa
jb 0x1400456d0
mov byte [rsp + 0x61], cl
lea rax, [rsp + 0x56]
mov qword [rbp + 0x228], rax
movdqa xmm0, xmmword [0x14014ff30]
movdqu xmmword [rbp + 0x11a], xmm0
mov word [rbp + 0x12a], 0x100
mov rdx, rcx
nop dword [rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0x11a], al
inc rdx
cmp rdx, 0x10
jb 0x140045710
mov byte [rbp + 0x12b], cl
lea rax, [rbp + 0x11a]
mov qword [rbp + 0x230], rax
movdqa xmm0, xmmword [0x14014fe20]
movdqu xmmword [rbp + 0xb6], xmm0
mov word [rbp + 0xc6], 0xf9
mov byte [rbp + 0xc8], 1
mov rdx, rcx
nop word [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0xb6], al
inc rdx
cmp rdx, 0x11
jb 0x140045760
mov byte [rbp + 0xc8], cl
lea rax, [rbp + 0xb6]
mov qword [rbp + 0x238], rax
movdqa xmm0, xmmword [0x14014fc60]
movdqu xmmword [rbp + 0x150], xmm0
mov byte [rbp + 0x160], 1
mov rdx, rcx
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0x150], al
inc rdx
cmp rdx, 0xf
jb 0x1400457a1
mov byte [rbp + 0x160], cl
lea rax, [rbp + 0x150]
mov qword [rbp + 0x240], rax
mov dword [rbp + 0x29], 0xe9e7e3ff
mov dword [rbp + 0x2d], 0xfafacef6
mov dword [rbp + 0x31], 0xeff3bbe0
mov word [rbp + 0x35], 0xfd
mov byte [rbp + 0x37], 1
mov rdx, rcx
nop word [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0x29], al
inc rdx
cmp rdx, 0xd
jb 0x1400457f0
mov byte [rbp + 0x37], cl
lea rax, [rbp + 0x29]
mov qword [rbp + 0x248], rax
mov dword [rsp + 0x62], 0xebe0e4fb
mov dword [rsp + 0x66], 0xf6bcf6f2
mov dword [rsp + 0x6a], 0x100f0ec
mov rdx, rcx
nop dword [rax]
lea eax, [rdx - 0x74]
xor byte [rsp + rdx + 0x62], al
inc rdx
cmp rdx, 0xa
jb 0x140045830
mov byte [rsp + 0x6d], cl
lea rax, [rsp + 0x62]
mov qword [rbp + 0x250], rax
movdqa xmm0, xmmword [0x14014fe40]
movdqu xmmword [rbp + 0xc9], xmm0
mov word [rbp + 0xd9], 0xf9
mov byte [rbp + 0xdb], 1
mov rdx, rcx
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0xc9], al
inc rdx
cmp rdx, 0x11
jb 0x140045873
mov byte [rbp + 0xdb], cl
lea rax, [rbp + 0xc9]
mov qword [rbp + 0x258], rax
movdqa xmm0, xmmword [0x14014ff00]
movdqu xmmword [rbp + 0x12c], xmm0
mov word [rbp + 0x13c], 0x100
mov rdx, rcx
nop word [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0x12c], al
inc rdx
cmp rdx, 0x10
jb 0x1400458c0
mov byte [rbp + 0x13d], cl
lea rax, [rbp + 0x12c]
mov qword [rbp + 0x260], rax
movdqa xmm0, xmmword [0x14014fef0]
movdqu xmmword [rbp + 0x7b], xmm0
mov dword [rbp + 0x8b], 0x100f8e4
mov rdx, rcx
nop dword [rax]
nop word [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0x7b], al
inc rdx
cmp rdx, 0x12
jb 0x140045910
mov byte [rbp + 0x8e], cl
lea rax, [rbp + 0x7b]
mov qword [rbp + 0x268], rax
mov dword [rsp + 0x6e], 0xebbcbef4
mov dword [rsp + 0x72], 0xf6bcf6f2
mov dword [rsp + 0x76], 0x100f0ec
mov rdx, rcx
nop dword [rax]
lea eax, [rdx - 0x74]
xor byte [rsp + rdx + 0x6e], al
inc rdx
cmp rdx, 0xa
jb 0x140045950
mov byte [rsp + 0x79], cl
lea rax, [rsp + 0x6e]
mov qword [rbp + 0x270], rax
mov dword [rsp + 0x7a], 0xebbabbf4
mov dword [rsp + 0x7e], 0xf6bcf6f2
mov dword [rbp - 0x7e], 0x100f0ec
mov rdx, rcx
nop word [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rsp + rdx + 0x7a], al
inc rdx
cmp rdx, 0xa
jb 0x140045990
mov byte [rbp - 0x7b], cl
lea rax, [rsp + 0x7a]
mov qword [rbp + 0x278], rax
mov dword [rbp - 0x1f], 0xebeae4ca
mov dword [rbp - 0x1b], 0xbde0f4fc
mov dword [rbp - 0x17], 0xf3edf1
mov byte [rbp - 0x13], 1
mov rdx, rcx
nop dword [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx - 0x1f], al
inc rdx
cmp rdx, 0xb
jb 0x1400459d0
mov byte [rbp - 0x13], cl
lea rax, [rbp - 0x1f]
mov qword [rbp + 0x280], rax
movdqa xmm0, xmmword [0x14014ff20]
movdqu xmmword [rbp + 0x13e], xmm0
mov word [rbp + 0x14e], 0x100
mov rdx, rcx
nop word [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0x13e], al
inc rdx
cmp rdx, 0x10
jb 0x140045a10
mov byte [rbp + 0x14f], cl
lea rax, [rbp + 0x13e]
mov qword [rbp + 0x288], rax
movdqa xmm0, xmmword [0x14014fe90]
movdqu xmmword [rbp + 0xdc], xmm0
movdqa xmm1, xmmword [0x14014fd30]
movdqu xmmword [rbp + 0xec], xmm1
mov dword [rbp + 0xfc], 0xc6cc8d9e
mov dword [rbp + 0x100], 0xd69c98c4
mov dword [rbp + 0x104], 0x100d0cc
mov rdx, rcx
nop dword [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0xdc], al
inc rdx
cmp rdx, 0x2a
jb 0x140045a80
mov byte [rbp + 0x107], cl
lea rax, [rbp + 0xdc]
mov qword [rbp + 0x290], rax
movdqa xmm0, xmmword [0x14014fee0]
movdqu xmmword [rbp + 0x8f], xmm0
mov dword [rbp + 0x9f], 0x100f8e4
mov rdx, rcx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0x8f], al
inc rdx
cmp rdx, 0x12
jb 0x140045ad0
mov byte [rbp + 0xa2], cl
lea rax, [rbp + 0x8f]
mov qword [rbp + 0x298], rax
movdqa xmm0, xmmword [0x14014fd60]
movdqu xmmword [rbp + 0x66], xmm0
mov dword [rbp + 0x76], 0xfbe5f9
mov byte [rbp + 0x7a], 1
mov rdx, rcx
nop dword [rax]
nop word [rax + rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0x66], al
inc rdx
cmp rdx, 0x13
jb 0x140045b20
mov byte [rbp + 0x7a], cl
lea rax, [rbp + 0x66]
mov qword [rbp + 0x2a0], rax
movdqa xmm0, xmmword [0x14014fd90]
movdqu xmmword [rbp + 0x38], xmm0
mov dword [rbp + 0x48], 0xfab0a9aa
mov dword [rbp + 0x4c], 0x100c4d8
mov rdx, rcx
nop dword [rax]
lea eax, [rdx - 0x74]
xor byte [rbp + rdx + 0x38], al
inc rdx
cmp rdx, 0x16
jb 0x140045b60
mov byte [rbp + 0x4f], cl
lea rax, [rbp + 0x38]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [0x14014fd90]
movdqu xmmword [rbp + 0x161], xmm0
movdqa xmm1, xmmword [0x14014fde0]
movdqu xmmword [rbp + 0x171], xmm1
mov word [rbp + 0x181], 0x100
nop word [rax + rax]
lea eax, [rcx - 0x74]
xor byte [rbp + rcx + 0x161], al
inc rcx
cmp rcx, 0x20
jb 0x140045bb0
mov byte [rbp + 0x182], 0
lea rax, [rbp + 0x161]
mov qword [rbp + 0x2b0], rax
mov ecx, pe_nt_image_headers64
call fcn.1400cd26c
mov rsi, rax
mov qword [rbp + 0x2c0], rax
lea rdi, [rax + 0x128]
mov qword [rbp + 0x2d0], rdi
mov r8d, pe_nt_image_headers64
lea rdx, [rbp + 0x190]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x2c8], rdi
mov rbx, rsi
cmp rsi, rdi
je 0x140045c35
nop
mov rcx, qword [rbx]
call fcn.140044a10
test al, al
jne 0x140045c88
add rbx, 8
cmp rbx, rdi
jne 0x140045c20
test rsi, rsi
je 0x140045c6d
sub rdi, rsi
and rdi, 0xfffffffffffffff8
cmp rdi, 0x1000
jb 0x140045c62
add rdi, 0x27
mov rcx, qword [rsi - 8]
sub rsi, rcx
lea rax, [rsi - 8]
cmp rax, 0x1f
ja 0x140045ca2
mov rsi, rcx
mov rdx, rdi
mov rcx, rsi
call fcn.1400ccf04
xor al, al
lea r11, [rsp + 0x3e0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.140045100
nop
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3