Function at 0x1400f1000
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
xchg rsi, rbx
mov qword [rsp + 0x10], rbx
xchg rbx, rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x980]
sub rsp, 0xa80
xchg r14, rcx
mov rbx, r14
xchg r14, rcx
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x6c14a9f3
sub r8d, 0x2dbbf616
xor r8d, 0x5610ffb1
sub r8d, 0x568615fd
xor r8d, 0x168cf327
sub r8d, 0x74ebb40
call sub.VCRUNTIME140.dll_memset
xchg r9, rcx
mov r9, qword [rbx]
xchg rcx, r9
sub rcx, 0x7e0a05d8
add rcx, 0x7e0a0bb0
call fcn.14007b660
xor ebx, ebx
mov dword [rsp + 0x32], 0x10fa44a
add dword [rsp + 0x32], 0x2028fb3e
sub dword [rsp + 0x32], 0x75262f8
add dword [rsp + 0x32], 0x5a5395f3
xor dword [rsp + 0x32], 0x6f74d64d
add dword [rsp + 0x32], 0xdba9f228
mov edx, ebx
mov dword [rsp + 0x42], 0x4de9359b
xor dword [rsp + 0x42], 0x5b3eacc8
add dword [rsp + 0x42], 0x5997f4bf
sub dword [rsp + 0x42], 0x9721a76
sub dword [rsp + 0x42], 0x4cccbc54
add dword [rsp + 0x42], 0xe54d47e7
xchg r8, rax
mov rax, r8
xchg r8, rax
mov dword [rsp + 0x46], 0x5ccc798c
add dword [rsp + 0x46], 0x194c3f9f
sub dword [rsp + 0x46], 0xfaaeb7a
xor dword [rsp + 0x46], 0x280b2e7e
sub dword [rsp + 0x46], 0x65c5795
sub dword [rsp + 0x46], 0x3afe9005
add dword [rsp + 0x46], 0x21ab2fb6
add dword [rsp + 0x46], 0xd0bcd33f
mov dword [rsp + 0x36], 0x26a8da3a
xor dword [rsp + 0x36], 0x681976bc
add dword [rsp + 0x36], 0x6a5047a
sub dword [rsp + 0x36], 0xd094352
sub dword [rsp + 0x36], 0x1133b8c7
xor dword [rsp + 0x36], 0x17715ba
add dword [rsp + 0x36], 0x3cc90fbd
xor dword [rsp + 0x36], 0x85c147ec
mov dword [rsp + 0x4a], 0x5a8be160
sub dword [rsp + 0x4a], 0x146c9a0a
add dword [rsp + 0x4a], 0x3801d201
sub dword [rsp + 0x4a], 0x4941e23b
add dword [rsp + 0x4a], 0x4929098e
add dword [rsp + 0x4a], 0x8122bed3
mov dword [rsp + 0x4e], 0x9cb9d1e
add dword [rsp + 0x4e], 0x18e6d504
add dword [rsp + 0x4e], 0x5bdeab86
xor dword [rsp + 0x4e], 0x545855a3
add dword [rsp + 0x4e], 0x2404a191
xor dword [rsp + 0x4e], 0x62d187f8
add dword [rsp + 0x4e], 0x13b30364
sub dword [rsp + 0x4e], 0x23223176
add dword [rsp + 0x4e], 0xe2ccbf1b
mov dword [rsp + 0x3a], 0x73361c96
xor dword [rsp + 0x3a], 0x3a731a97
xor dword [rsp + 0x3a], 0x74513688
sub dword [rsp + 0x3a], 0x31050a7c
add dword [rsp + 0x3a], 0x42efc915
xor dword [rsp + 0x3a], 0x4b145aca
add dword [rsp + 0x3a], 0x58c6e9a8
xor dword [rsp + 0x3a], 0xa8476966
mov dword [rsp + 0x52], 0x4b8b13e2
sub dword [rsp + 0x52], 0x3b0a4cde
xor dword [rsp + 0x52], 0x21a50c9b
add dword [rsp + 0x52], 0x35ba8beb
sub dword [rsp + 0x52], 0x5523c5d7
add dword [rsp + 0x52], 0x445195af
add dword [rsp + 0x52], 0x33e26e6
add dword [rsp + 0x52], 0xa630b134
mov dword [rsp + 0x56], 0x3e770189
sub dword [rsp + 0x56], 0x15fbcd6f
add dword [rsp + 0x56], 0x32b7b56d
xor dword [rsp + 0x56], 0x1653206e
add dword [rsp + 0x56], 0x2249d841
add dword [rsp + 0x56], 0x8fcf5d55
mov word [rsp + 0x3e], 0x78a5
sub word [rsp + 0x3e], 0x30e6
add word [rsp + 0x3e], 0xf95
xor word [rsp + 0x3e], 0x3171
sub word [rsp + 0x3e], 0x1e36
add word [rsp + 0x3e], 0xaf07
mov dword [rsp + 0x5a], 0x6442826b
add dword [rsp + 0x5a], 0x1880d113
xor dword [rsp + 0x5a], 0x3ed56d25
xor dword [rsp + 0x5a], 0x7e16e4ef
xor dword [rsp + 0x5a], 0x70d6f265
sub dword [rsp + 0x5a], 0x1da7cedd
add dword [rsp + 0x5a], 0xd041a58a
mov byte [rsp + 0x40], 0x21
add byte [rsp + 0x40], 0x18
xor byte [rsp + 0x40], 0x2a
add byte [rsp + 0x40], 0x66
sub byte [rsp + 0x40], 8
sub byte [rsp + 0x40], 0x48
add byte [rsp + 0x40], 0x41
add byte [rsp + 0x40], 0x8c
mov dword [rsp + 0x5e], 0x550a64fb
sub dword [rsp + 0x5e], 0x34f87cf4
add dword [rsp + 0x5e], 0x5ea9cb12
xor dword [rsp + 0x5e], 0x3f081d13
xor dword [rsp + 0x5e], 0x3e217223
xor dword [rsp + 0x5e], 0x16992212
sub dword [rsp + 0x5e], 0x4f5904d8
add dword [rsp + 0x5e], 0x85e8bad
sub dword [rsp + 0x5e], 0x221085a2
nop
movzx eax, word [rsp + rdx*2 + 0x42]
movzx ecx, byte [rsp + rdx + 0x32]
add cx, ax
mov word [rsp + rdx*2 + 0x42], cx
mov byte [rsp + rdx + 0x32], bl
inc rdx
cmp rdx, 0xf
jb 0x1400f1366
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x70]
call fcn.140086e10
xchg r15, rax
mov r15, rbx
xchg r15, rax
mov byte [rsp + rax + 0x42], bl
inc rax
cmp rax, 0x1e
jb 0x1400f139f
mov dword [rsp + 0x20], 0x7f746e
add dword [rsp + 0x20], 0x48fa5eed
xor dword [rsp + 0x20], 0x41894c11
xor dword [rsp + 0x20], 0x754a8ef7
sub dword [rsp + 0x20], 0x3a041784
add dword [rsp + 0x20], 0x202b71b5
sub dword [rsp + 0x20], 0x150d2c60
add dword [rsp + 0x20], 0xa822b768
xchg r13, rax
mov r13, rbx
xchg r13, rax
mov dword [rsp + 0x26], 0x79a1ae9d
sub dword [rsp + 0x26], 0x1515ddb0
sub dword [rsp + 0x26], 0x5fe52c50
xor dword [rsp + 0x26], 0x67ab7b02
sub dword [rsp + 0x26], 0x11f51a8b
xor dword [rsp + 0x26], 0x18ff45e1
xor dword [rsp + 0x26], 0xe4b3e81
xor dword [rsp + 0x26], 0xb8d0413b
mov dword [rsp + 0x2a], 0x59016df7
xor dword [rsp + 0x2a], 0x517763e1
sub dword [rsp + 0x2a], 0x6608593
add dword [rsp + 0x2a], 0x62b2365d
xor dword [rsp + 0x2a], 0x7339b235
xor dword [rsp + 0x2a], 0x7d401518
xor dword [rsp + 0x2a], 0x95c7e6b1
mov byte [rsp + 0x24], 0x23
add byte [rsp + 0x24], 0x22
sub byte [rsp + 0x24], 0x38
add byte [rsp + 0x24], 0x54
add byte [rsp + 0x24], 0x19
sub byte [rsp + 0x24], 0x4d
xor byte [rsp + 0x24], 8
add byte [rsp + 0x24], 0xd1
mov dword [rsp + 0x2e], 0x6d3e7c0d
sub dword [rsp + 0x2e], 0x7994ecb
sub dword [rsp + 0x2e], 0x47530f48
add dword [rsp + 0x2e], 0x1de69328
add dword [rsp + 0x2e], 0x124a8ebf
sub dword [rsp + 0x2e], 0x38dd3ae2
add dword [rsp + 0x2e], 0x2a959df9
add dword [rsp + 0x2e], 0x39921427
sub dword [rsp + 0x2e], 0x79ccb7a3
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x26]
movzx edx, byte [rsp + rax + 0x20]
add dx, cx
mov word [rsp + rax*2 + 0x26], dx
mov byte [rsp + rax + 0x20], bl
inc rax
cmp rax, 5
jb 0x1400f14e9
mov r9d, 0x12a3167
xor r9d, 0x394c7aea
add r9d, 0x4322da8c
sub r9d, 0x610c1de1
xor r9d, 0x57db0162
xor r9d, 0x361887f3
sub r9d, 0x7bbe8e99
lea r8, [rsp + 0x26]
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop word [rax + rax]
mov byte [rsp + rbx + 0x26], 0x68
sub byte [rsp + rbx + 0x26], 0x13
sub byte [rsp + rbx + 0x26], 0x22
xor byte [rsp + rbx + 0x26], 0x41
xor byte [rsp + rbx + 0x26], 0x5d
add byte [rsp + rbx + 0x26], 0x1e
add byte [rsp + rbx + 0x26], 0x1a
xor byte [rsp + rbx + 0x26], 0x67
inc rbx
cmp rbx, 0xa
jb 0x1400f1557
mov ecx, 0x6e62866a
xor ecx, 0x3d39349b
xor ecx, 0x3e028be8
xor ecx, 0x1f65eb0b
sub ecx, 0xefb13ab
xor ecx, 0x78b2175b
add ecx, 0x3dd302cf
add ecx, 0xfb60016
add ecx, 0x968353de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3