Function at 0x14019bce0
Capabilities:
Encode data using xor
Terminate process

Disassembly:
xchg r11, rbx
mov qword [rsp + 8], r11
xchg r11, rbx
xchg r10, rsi
mov qword [rsp + 0x10], r10
xchg rsi, r10
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x980]
sub rsp, 0xa80
mov rbx, rcx
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x2fe0e8ed
xor r8d, 0x2b368b11
add r8d, 0x485be9a4
sub r8d, 0x1b0175d2
xor r8d, 0x28e5de62
xor r8d, 0x774b4886
sub r8d, 0x6d9e3722
call sub.VCRUNTIME140.dll_memset
mov r8, qword [rbx]
xor ebx, ebx
mov edx, ebx
mov dword [rsp + 0x32], 0x2aa2dc4
add dword [rsp + 0x32], 0x1dc7019b
add dword [rsp + 0x32], 0x3cc0504a
sub dword [rsp + 0x32], 0x6ac391b
add dword [rsp + 0x32], 0x11c5f7cf
sub dword [rsp + 0x32], 0x4c778ca8
sub dword [rsp + 0x32], 0x1a44de19
add dword [rsp + 0x32], 0xf568235a
mov dword [rsp + 0x42], 0x4bfcf171
add dword [rsp + 0x42], 0x1dddfa47
sub dword [rsp + 0x42], 0x4cd5868b
sub dword [rsp + 0x42], 0xfbc624a
sub dword [rsp + 0x42], 0x1c3b1f6
xor dword [rsp + 0x42], 0x44e961f5
sub dword [rsp + 0x42], 0x71b5c1b
xor dword [rsp + 0x42], 0xb72d2bd2
mov dword [rsp + 0x46], 0x3ae31099
xor dword [rsp + 0x46], 0x5aec2284
sub dword [rsp + 0x46], 0x243f9897
add dword [rsp + 0x46], 0x34144770
sub dword [rsp + 0x46], 0x2c437a6
add dword [rsp + 0x46], 0x925455da
mov dword [rsp + 0x36], 0x34efbfb9
add dword [rsp + 0x36], 0x3c4d9539
xor dword [rsp + 0x36], 0x4fe752e
sub dword [rsp + 0x36], 0x4a8460ec
xor dword [rsp + 0x36], 0x34950ca0
add dword [rsp + 0x36], 0xd74b2aa6
mov dword [rsp + 0x4a], 0x21c8a034
add dword [rsp + 0x4a], 0x5a0208d7
xor dword [rsp + 0x4a], 0x49214973
sub dword [rsp + 0x4a], 0x32a28615
xor dword [rsp + 0x4a], 0x3cfa630e
sub dword [rsp + 0x4a], 0x345100ae
add dword [rsp + 0x4a], 0xb455f3b
add dword [rsp + 0x4a], 0xeb836783
mov dword [rsp + 0x4e], 0x7d2e16b7
sub dword [rsp + 0x4e], 0x6713f1c4
add dword [rsp + 0x4e], 0x1b30bab6
sub dword [rsp + 0x4e], 0x1e01f9c0
add dword [rsp + 0x4e], 0x51ee2ae6
sub dword [rsp + 0x4e], 0x337c2dbd
add dword [rsp + 0x4e], 0x9b5161b
sub dword [rsp + 0x4e], 0x1554bbe9
add dword [rsp + 0x4e], 0xd95ec229
mov dword [rsp + 0x3a], 0x342e422b
sub dword [rsp + 0x3a], 0x2264ea9c
xor dword [rsp + 0x3a], 0x3d7adbb3
xor dword [rsp + 0x3a], 0x42fa3b9e
sub dword [rsp + 0x3a], 0x41df8b9f
add dword [rsp + 0x3a], 0xca8ccaf3
mov dword [rsp + 0x52], 0x6a46ab1
xor dword [rsp + 0x52], 0x32200077
add dword [rsp + 0x52], 0x49e32224
sub dword [rsp + 0x52], 0x3c66f4df
sub dword [rsp + 0x52], 0x1f65a99e
add dword [rsp + 0x52], 0x2cf4ee13
add dword [rsp + 0x52], 0x15af0dda
add dword [rsp + 0x52], 0x9a3e1522
mov dword [rsp + 0x56], 0x12ce9668
xor dword [rsp + 0x56], 0x28c2fe9f
add dword [rsp + 0x56], 0x23ce31e7
xor dword [rsp + 0x56], 0xa169766
add dword [rsp + 0x56], 0x695cfcc
xor dword [rsp + 0x56], 0x52a2779b
add dword [rsp + 0x56], 0x5faee2bb
sub dword [rsp + 0x56], 0x651629a5
xor dword [rsp + 0x56], 0xf8269c4a
mov word [rsp + 0x3e], 0x72e3
xor word [rsp + 0x3e], 0x7c97
add word [rsp + 0x3e], 0x3597
add word [rsp + 0x3e], 0x11
xor word [rsp + 0x3e], 0x7b21
xor word [rsp + 0x3e], 0xc9cb
mov dword [rsp + 0x5a], 0x4f2be3c0
xor dword [rsp + 0x5a], 0x54e30e96
xor dword [rsp + 0x5a], 0x3e7a2de1
add dword [rsp + 0x5a], 0x3103566c
add dword [rsp + 0x5a], 0x145e404e
sub dword [rsp + 0x5a], 0x3cfd38e8
xor dword [rsp + 0x5a], 0x683b04a8
sub dword [rsp + 0x5a], 0x3c22f28
add dword [rsp + 0x5a], 0xbd061485
mov byte [rsp + 0x40], 0x5a
sub byte [rsp + 0x40], 0x48
sub byte [rsp + 0x40], 0xd
add byte [rsp + 0x40], 0xf
add byte [rsp + 0x40], 0xb
add byte [rsp + 0x40], 0x2f
add byte [rsp + 0x40], 0xa8
mov dword [rsp + 0x5e], 0x5321170e
sub dword [rsp + 0x5e], 0x1a524e49
sub dword [rsp + 0x5e], 0x34148f31
xor dword [rsp + 0x5e], 0x2bd3b03b
add dword [rsp + 0x5e], 0x2d7a218f
add dword [rsp + 0x5e], 0x90c844c
xor dword [rsp + 0x5e], 0x65f0d0e4
nop
movzx eax, word [rsp + rdx*2 + 0x42]
movzx ecx, byte [rsp + rdx + 0x32]
add cx, ax
mov word [rsp + rdx*2 + 0x42], cx
mov byte [rsp + rdx + 0x32], bl
inc rdx
cmp rdx, 0xf
jb 0x14019c03e
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x70]
call fcn.140087130
mov rax, rbx
mov byte [rsp + rax + 0x42], bl
inc rax
cmp rax, 0x1e
jb 0x14019c073
mov dword [rsp + 0x20], 0x481bdd86
sub dword [rsp + 0x20], 0x3762eda2
xor dword [rsp + 0x20], 0x631c7f37
xor dword [rsp + 0x20], 0x2b5a4423
sub dword [rsp + 0x20], 0x4f5113a3
add dword [rsp + 0x20], 0x9870d5d
add dword [rsp + 0x20], 0x222caf43
add dword [rsp + 0x20], 0x44243ec3
add dword [rsp + 0x20], 0x7d713a46
xchg rcx, rax
mov rcx, rbx
xchg rcx, rax
mov dword [rsp + 0x26], 0x4692e2ba
xor dword [rsp + 0x26], 0x565505d6
add dword [rsp + 0x26], 0x4eb0266
add dword [rsp + 0x26], 0x453355d
add dword [rsp + 0x26], 0x53d6307d
xor dword [rsp + 0x26], 0x15c821ee
add dword [rsp + 0x26], 0x8768910d
mov dword [rsp + 0x2a], 0x45d5a6a7
xor dword [rsp + 0x2a], 0x766b0b3
xor dword [rsp + 0x2a], 0x7c9b6641
add dword [rsp + 0x2a], 0x1d4fa77e
sub dword [rsp + 0x2a], 0x3adb9fce
add dword [rsp + 0x2a], 0xdedd8777
mov byte [rsp + 0x24], 0x73
xor byte [rsp + 0x24], 0x43
sub byte [rsp + 0x24], 0x16
xor byte [rsp + 0x24], 0x73
xor byte [rsp + 0x24], 0x60
xor byte [rsp + 0x24], 0x2d
add byte [rsp + 0x24], 0x30
add byte [rsp + 0x24], 0xa2
mov dword [rsp + 0x2e], 0x9fce19d
add dword [rsp + 0x2e], 0xd2f2d34
add dword [rsp + 0x2e], 0xf47d563
sub dword [rsp + 0x2e], 0x22491056
xor dword [rsp + 0x2e], 0x4fa8535
xor dword [rsp + 0x2e], 0xdfc29f
xor dword [rsp + 0x2e], 0x2f3ccc44
sub dword [rsp + 0x2e], 0x22aa431c
sub dword [rsp + 0x2e], 0xc881598
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x26]
movzx edx, byte [rsp + rax + 0x20]
add dx, cx
mov word [rsp + rax*2 + 0x26], dx
mov byte [rsp + rax + 0x20], bl
inc rax
cmp rax, 5
jb 0x14019c1b5
mov r9d, 0x7dd0c0ba
xor r9d, 0x62da78c7
xor r9d, 0x1e221f1d
add r9d, 0x6333e37d
sub r9d, 0xa809c5e
xor r9d, 0x317e66e6
xor r9d, 0x550d4b60
sub r9d, 0x3da8c3e9
lea r8, [rsp + 0x26]
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop word [rax + rax]
mov byte [rsp + rbx + 0x26], 0x45
sub byte [rsp + rbx + 0x26], 6
sub byte [rsp + rbx + 0x26], 0x39
xor byte [rsp + rbx + 0x26], 0x69
sub byte [rsp + rbx + 0x26], 0x40
xor byte [rsp + rbx + 0x26], 0x13
xor byte [rsp + rbx + 0x26], 0x11
sub byte [rsp + rbx + 0x26], 0x2d
inc rbx
cmp rbx, 0xa
jb 0x14019c22a
mov ecx, 0x21f978b6
add ecx, 0x2a7cdc25
sub ecx, 0x154cf36b
add ecx, 0x93d288b
xor ecx, 0x1ebf20cd
xor ecx, 0x6c097299
add ecx, 0x209ddabd
add ecx, 0xac914993
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3