Function at 0x14019c150
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
xchg rsi, rdi
mov qword [rsp + 0x10], rdi
xchg rsi, rdi
mov qword [rsp + 0x18], rdi
nop
sub rsp, 8
mov qword [rsp], rbp
lea rbp, [rsp - 0x980]
sub rsp, 0xa80
mov rbx, rcx
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x41982e52
add r8d, 0xe6bae9d
sub r8d, 0x48786f5c
add r8d, 0x217f5bc8
add r8d, 0xc49c83e
xor r8d, 0x2a73fc86
sub r8d, 0x16ac6126
sub r8d, 0x87b01f1
call sub.VCRUNTIME140.dll_memset
mov r8, qword [rbx]
xor ebx, ebx
mov edx, ebx
mov dword [rsp + 0x32], 0x71aded37
add dword [rsp + 0x32], 0x2952801
sub dword [rsp + 0x32], 0xf62c2c8
add dword [rsp + 0x32], 0x11a263a7
sub dword [rsp + 0x32], 0x2b21c79d
xor dword [rsp + 0x32], 0x158157de
xor dword [rsp + 0x32], 0x14755b59
xor dword [rsp + 0x32], 0xbc62140b
mov dword [rsp + 0x42], 0x2e8285a6
add dword [rsp + 0x42], 0x336225c2
xor dword [rsp + 0x42], 0x7a4564a9
add dword [rsp + 0x42], 0x4fc92543
sub dword [rsp + 0x42], 0x3316d469
add dword [rsp + 0x42], 0x45676028
sub dword [rsp + 0x42], 0x12171bee
add dword [rsp + 0x42], 0x93d99a5a
mov dword [rsp + 0x46], 0x4d769277
add dword [rsp + 0x46], 0x24ffd232
xor dword [rsp + 0x46], 0x613b7598
xor dword [rsp + 0x46], 0x5e57d44
add dword [rsp + 0x46], 0x278701
xor dword [rsp + 0x46], 0xe9bc0c5c
mov dword [rsp + 0x36], 0x154967e4
xor dword [rsp + 0x36], 0x14df395b
xor dword [rsp + 0x36], 0x141d86ea
xor dword [rsp + 0x36], 0x34dd8a72
xor dword [rsp + 0x36], 0x2454d0f5
add dword [rsp + 0x36], 0x289af0e3
add dword [rsp + 0x36], 0xc9598341
mov dword [rsp + 0x4a], 0x14c5f4e8
xor dword [rsp + 0x4a], 0x4f73ed4c
sub dword [rsp + 0x4a], 0x15eb58f4
xor dword [rsp + 0x4a], 0x2aec9b30
sub dword [rsp + 0x4a], 0x4e76f13b
add dword [rsp + 0x4a], 0x2f414112
add dword [rsp + 0x4a], 0xaf3a5426
mov dword [rsp + 0x4e], 0x3517e28
add dword [rsp + 0x4e], 0xe1906be
xor dword [rsp + 0x4e], 0x56209d6
add dword [rsp + 0x4e], 0x1496236f
sub dword [rsp + 0x4e], 0x28279f19
xor dword [rsp + 0x4e], 0xff0eeeeb
mov dword [rsp + 0x3a], 0x1e320b86
add dword [rsp + 0x3a], 0x3c465feb
add dword [rsp + 0x3a], 0xd87fce5
sub dword [rsp + 0x3a], 0x62fbb80d
xor dword [rsp + 0x3a], 0x514b24ac
sub dword [rsp + 0x3a], 0x1d8454be
add dword [rsp + 0x3a], 0xc02bb6cf
mov dword [rsp + 0x52], 0x112efb44
add dword [rsp + 0x52], 0x5b15eb47
sub dword [rsp + 0x52], 0x5e519518
add dword [rsp + 0x52], 0x644e9c84
xor dword [rsp + 0x52], 0x45320249
add dword [rsp + 0x52], 0x223face
add dword [rsp + 0x52], 0x43a8959d
xor dword [rsp + 0x52], 0x823c7f55
mov dword [rsp + 0x56], 0x1eb64e5a
add dword [rsp + 0x56], 0x26b33c10
sub dword [rsp + 0x56], 0xd09cdba
add dword [rsp + 0x56], 0x3d696af3
sub dword [rsp + 0x56], 0x117a3529
xor dword [rsp + 0x56], 0x9b340d05
mov word [rsp + 0x3e], 0x5243
add word [rsp + 0x3e], 0x1f2a
sub word [rsp + 0x3e], 0x217e
xor word [rsp + 0x3e], 0x34a9
sub word [rsp + 0x3e], 0x6b6e
xor word [rsp + 0x3e], 0x2bb7
xor word [rsp + 0x3e], 0x2257
add word [rsp + 0x3e], 0xf0be
mov dword [rsp + 0x5a], 0x4a11518a
xor dword [rsp + 0x5a], 0x422534a4
xor dword [rsp + 0x5a], 0xb3637ee
add dword [rsp + 0x5a], 0x40b9122
add dword [rsp + 0x5a], 0x2cbfb543
add dword [rsp + 0x5a], 0x28c6051c
add dword [rsp + 0x5a], 0xbbc1338
sub dword [rsp + 0x5a], 0x1b295ec3
add dword [rsp + 0x5a], 0xb249acc8
mov byte [rsp + 0x40], 0x1b
add byte [rsp + 0x40], 1
add byte [rsp + 0x40], 0x1e
sub byte [rsp + 0x40], 0x20
add byte [rsp + 0x40], 0x44
xor byte [rsp + 0x40], 0x4d
add byte [rsp + 0x40], 0x4d
xor byte [rsp + 0x40], 0x96
mov dword [rsp + 0x5e], 0x1cb7ba83
xor dword [rsp + 0x5e], 0x56cb0f2a
sub dword [rsp + 0x5e], 0x10cf1b02
xor dword [rsp + 0x5e], 0xc8eadc7
xor dword [rsp + 0x5e], 0x1f77ed6f
sub dword [rsp + 0x5e], 0x26132822
add dword [rsp + 0x5e], 0x4a681a5b
add dword [rsp + 0x5e], 0x239133ac
sub dword [rsp + 0x5e], 0x723a0086
nop
movzx eax, word [rsp + rdx*2 + 0x42]
movzx ecx, byte [rsp + rdx + 0x32]
add cx, ax
mov word [rsp + rdx*2 + 0x42], cx
mov byte [rsp + rdx + 0x32], bl
inc rdx
cmp rdx, 0xf
jb 0x14019c4b3
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x70]
call fcn.140087020
mov rax, rbx
mov byte [rsp + rax + 0x42], bl
inc rax
cmp rax, 0x1e
jb 0x14019c4e8
mov dword [rsp + 0x20], 0x5552ecce
add dword [rsp + 0x20], 0xf976740
sub dword [rsp + 0x20], 0x53be3b5
xor dword [rsp + 0x20], 0x5c2d7ffc
xor dword [rsp + 0x20], 0x55d1a330
sub dword [rsp + 0x20], 0x436dabf7
xor dword [rsp + 0x20], 0x25966d5f
xor dword [rsp + 0x20], 0xc1859b37
mov rax, rbx
mov dword [rsp + 0x26], 0x23cd9768
add dword [rsp + 0x26], 0x5dfefb3
add dword [rsp + 0x26], 0x53f43a8b
xor dword [rsp + 0x26], 0x2dc958cf
sub dword [rsp + 0x26], 0x4648c7cb
add dword [rsp + 0x26], 0x3cea3f35
add dword [rsp + 0x26], 0x37668da
xor dword [rsp + 0x26], 0xb5fc86e2
mov dword [rsp + 0x2a], 0x39b303b4
add dword [rsp + 0x2a], 0x246b9ffb
sub dword [rsp + 0x2a], 0x56de2b4c
xor dword [rsp + 0x2a], 0x691c924f
sub dword [rsp + 0x2a], 0x51116241
xor dword [rsp + 0x2a], 0x2bbbf158
add dword [rsp + 0x2a], 0xc88988c9
mov byte [rsp + 0x24], 6
add byte [rsp + 0x24], 0x17
add byte [rsp + 0x24], 0x29
xor byte [rsp + 0x24], 8
sub byte [rsp + 0x24], 9
sub byte [rsp + 0x24], 0x29
xor byte [rsp + 0x24], 0xea
mov dword [rsp + 0x2e], 0x59dc8a08
sub dword [rsp + 0x2e], 0x40bf17a9
xor dword [rsp + 0x2e], 0x4aadb5e7
xor dword [rsp + 0x2e], 0x6c798d82
xor dword [rsp + 0x2e], 0x1a192cfe
add dword [rsp + 0x2e], 0x2665f724
sub dword [rsp + 0x2e], 0x80e6fe8
add dword [rsp + 0x2e], 0x20c07ed8
sub dword [rsp + 0x2e], 0x64e76d5c
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x26]
movzx edx, byte [rsp + rax + 0x20]
add dx, cx
mov word [rsp + rax*2 + 0x26], dx
mov byte [rsp + rax + 0x20], bl
inc rax
cmp rax, 5
jb 0x14019c629
mov r9d, 0x787956cd
sub r9d, 0x7368fef2
add r9d, 0x2aef4c3c
sub r9d, 0xa9143e5
xor r9d, 0x6f15bf0a
sub r9d, 0x4a7bdf28
lea r8, [rsp + 0x26]
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop word [rax + rax]
mov byte [rsp + rbx + 0x26], 0x37
add byte [rsp + rbx + 0x26], 0x46
sub byte [rsp + rbx + 0x26], 0x65
xor byte [rsp + rbx + 0x26], 0x2c
add byte [rsp + rbx + 0x26], 0x48
xor byte [rsp + rbx + 0x26], 0x3e
add byte [rsp + rbx + 0x26], 0
xor byte [rsp + rbx + 0x26], 0x69
xor byte [rsp + rbx + 0x26], 0x2b
inc rbx
cmp rbx, 0xa
jb 0x14019c690
mov ecx, 0x5d702b06
xor ecx, 0x55b5e847
add ecx, 0x4da019e
xor ecx, 0x6855c891
sub ecx, 0x7035a09
sub ecx, 0x6c61ba5
xor ecx, 0xa7ff695f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3