Function at 0x1400f0b50
Capabilities:
Encode data using xor
Terminate process

Disassembly:
xchg rbx, r13
mov qword [rsp + 8], r13
xchg rbx, r13
mov qword [rsp + 0x10], rsi
xchg rdi, r11
mov qword [rsp + 0x18], r11
xchg r11, rdi
push rbp
lea rbp, [rsp - 0x980]
sub rsp, 0xa80
xchg rbx, rsi
mov rsi, rcx
xchg rbx, rsi
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x66539264
xor r8d, 0x2555ab0f
xor r8d, 0x298a07f0
add r8d, 0xc03dd93
sub r8d, 0xb28fa52
sub r8d, 0x2f9eaa2
add r8d, 0x3a29dc5
sub r8d, 0x66138328
xor r8d, 0x5fc5bdf
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rbx]
add rcx, 0x192e2071
sub rcx, 0x192e1a99
call fcn.14007ba70
xor ebx, ebx
mov dword [rsp + 0x32], 0x2aae8048
add dword [rsp + 0x32], 0x139f3210
add dword [rsp + 0x32], 0x283a046b
xor dword [rsp + 0x32], 0x69a96dd3
add dword [rsp + 0x32], 0x49ac864d
add dword [rsp + 0x32], 0x7de108a
xor dword [rsp + 0x32], 0x2074706
sub dword [rsp + 0x32], 0x3cc0f3a3
add dword [rsp + 0x32], 0xd0f9b3b8
mov edx, ebx
mov dword [rsp + 0x42], 0x32347c9a
add dword [rsp + 0x42], 0x3ad24ecb
xor dword [rsp + 0x42], 0x7e2386cb
add dword [rsp + 0x42], 0x4624971c
xor dword [rsp + 0x42], 0x35832661
add dword [rsp + 0x42], 0x92b33c84
xchg r8, rbx
mov rbx, rax
xchg r8, rbx
mov dword [rsp + 0x46], 0x31c25184
add dword [rsp + 0x46], 0x704f451
sub dword [rsp + 0x46], 0x156c564f
sub dword [rsp + 0x46], 0x11bb8673
xor dword [rsp + 0x46], 0x2291993f
add dword [rsp + 0x46], 0xcc650efe
mov dword [rsp + 0x36], 0xd605e11
xor dword [rsp + 0x36], 0x6a42a785
xor dword [rsp + 0x36], 0x7befb3b1
sub dword [rsp + 0x36], 0x1ac5266b
xor dword [rsp + 0x36], 0x2e2f73e0
add dword [rsp + 0x36], 0x2331ccf6
add dword [rsp + 0x36], 0x15aab03d
xor dword [rsp + 0x36], 0x93f53b7b
mov dword [rsp + 0x4a], 0x6604d3bd
sub dword [rsp + 0x4a], 0x12e2a42e
sub dword [rsp + 0x4a], 0x227640a3
add dword [rsp + 0x4a], 0x145806f2
xor dword [rsp + 0x4a], 0x3da579f
add dword [rsp + 0x4a], 0x30132471
sub dword [rsp + 0x4a], 0x44cd5af7
sub dword [rsp + 0x4a], 0x29acf052
add dword [rsp + 0x4a], 0xf6b88414
mov dword [rsp + 0x4e], 0x141cafd1
add dword [rsp + 0x4e], 0x37ccd6e8
sub dword [rsp + 0x4e], 0x40ecbcb8
add dword [rsp + 0x4e], 0x21de1c80
xor dword [rsp + 0x4e], 0x62399f6f
sub dword [rsp + 0x4e], 0x1abc1ca9
add dword [rsp + 0x4e], 0x17b88edc
sub dword [rsp + 0x4e], 0x1e09b23a
add dword [rsp + 0x4e], 0xd1a3c586
mov dword [rsp + 0x3a], 0x3e7d3983
sub dword [rsp + 0x3a], 0x178e9036
xor dword [rsp + 0x3a], 0x63a0c27e
add dword [rsp + 0x3a], 0x3a651a83
xor dword [rsp + 0x3a], 0x65f799d
sub dword [rsp + 0x3a], 0x7408705b
xor dword [rsp + 0x3a], 0x7fed20da
xor dword [rsp + 0x3a], 0x8cff5dfc
mov dword [rsp + 0x52], 0x5f6a875d
sub dword [rsp + 0x52], 0x270f6a2d
xor dword [rsp + 0x52], 0x731b059a
sub dword [rsp + 0x52], 0x36e79d14
add dword [rsp + 0x52], 0x3a2c4e79
xor dword [rsp + 0x52], 0x16a42d2b
add dword [rsp + 0x52], 0xa75c1858
mov dword [rsp + 0x56], 0x7a1b1e4a
xor dword [rsp + 0x56], 0x4544ddcb
xor dword [rsp + 0x56], 0x67b23e5a
xor dword [rsp + 0x56], 0x116cc2f0
xor dword [rsp + 0x56], 0x7e15e6d2
sub dword [rsp + 0x56], 0x25d905e3
sub dword [rsp + 0x56], 0xc59092c
add dword [rsp + 0x56], 0x1ab8cd1f
xor dword [rsp + 0x56], 0xdf616776
mov word [rsp + 0x3e], 0x5030
xor word [rsp + 0x3e], 0x366a
sub word [rsp + 0x3e], 0x114a
xor word [rsp + 0x3e], 0x66b3
sub word [rsp + 0x3e], 0x3c1
add word [rsp + 0x3e], 0xc714
mov dword [rsp + 0x5a], 0x72fecb57
sub dword [rsp + 0x5a], 0x48bcb13c
add dword [rsp + 0x5a], 0x2368bbf8
sub dword [rsp + 0x5a], 0x13f388f
sub dword [rsp + 0x5a], 0x39d41532
add dword [rsp + 0x5a], 0x61a9416b
sub dword [rsp + 0x5a], 0x571287b7
add dword [rsp + 0x5a], 0x2200223f
add dword [rsp + 0x5a], 0xc0419b39
mov byte [rsp + 0x40], 5
add byte [rsp + 0x40], 0x49
add byte [rsp + 0x40], 7
xor byte [rsp + 0x40], 0x37
sub byte [rsp + 0x40], 0x61
xor byte [rsp + 0x40], 0xf7
mov dword [rsp + 0x5e], 0x5cc9a244
sub dword [rsp + 0x5e], 0x3462eb95
xor dword [rsp + 0x5e], 0x1a8eee9f
add dword [rsp + 0x5e], 0x3b9cae93
sub dword [rsp + 0x5e], 0x3d8186fe
sub dword [rsp + 0x5e], 0x1dc749c5
sub dword [rsp + 0x5e], 0x8057793
sub dword [rsp + 0x5e], 0xb35beff
nop
movzx eax, word [rsp + rdx*2 + 0x42]
movzx ecx, byte [rsp + rdx + 0x32]
add cx, ax
mov word [rsp + rdx*2 + 0x42], cx
mov byte [rsp + rdx + 0x32], bl
inc rdx
cmp rdx, 0xf
jb 0x1400f0efb
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x70]
call fcn.140087130
xchg rcx, rbx
mov rax, rcx
xchg rbx, rcx
mov byte [rsp + rax + 0x42], bl
inc rax
cmp rax, 0x1e
jb 0x1400f0f36
mov dword [rsp + 0x20], 0x606cf0f3
sub dword [rsp + 0x20], 0x13e5199d
sub dword [rsp + 0x20], 0x3d478427
add dword [rsp + 0x20], 0x3bff37fd
sub dword [rsp + 0x20], 0x351459be
xor dword [rsp + 0x20], 0x4be8a70b
add dword [rsp + 0x20], 0x1fe73e96
sub dword [rsp + 0x20], 0x26ab38d4
add dword [rsp + 0x20], 0x9ff75acf
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
mov dword [rsp + 0x26], 0x41208256
xor dword [rsp + 0x26], 0x6a28386b
add dword [rsp + 0x26], 0x3edd06c7
sub dword [rsp + 0x26], 0x23e16406
xor dword [rsp + 0x26], 0x7217c55f
xor dword [rsp + 0x26], 0x12998651
add dword [rsp + 0x26], 0x209e35d6
add dword [rsp + 0x26], 0x1f382b13
xor dword [rsp + 0x26], 0x991c7f96
mov dword [rsp + 0x2a], 0x65c3f498
xor dword [rsp + 0x2a], 0x541f6598
add dword [rsp + 0x2a], 0x125e009
sub dword [rsp + 0x2a], 0xfaf32f5
add dword [rsp + 0x2a], 0x9beb80c
xor dword [rsp + 0x2a], 0x29481ea4
xor dword [rsp + 0x2a], 0x2e5a5bcb
xor dword [rsp + 0x2a], 0xd57a4c33
mov byte [rsp + 0x24], 0x62
sub byte [rsp + 0x24], 0x43
add byte [rsp + 0x24], 0x44
xor byte [rsp + 0x24], 0x3e
xor byte [rsp + 0x24], 0x5f
xor byte [rsp + 0x24], 0x18
add byte [rsp + 0x24], 0x43
add byte [rsp + 0x24], 0x99
mov dword [rsp + 0x2e], 0x297e2c49
xor dword [rsp + 0x2e], 0x661aabe4
xor dword [rsp + 0x2e], 0x6702684a
sub dword [rsp + 0x2e], 0x14c23763
add dword [rsp + 0x2e], 0x392d829a
sub dword [rsp + 0x2e], 0x424b4597
add dword [rsp + 0x2e], 0x5c53190f
sub dword [rsp + 0x2e], 0x66d90f1a
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x26]
movzx edx, byte [rsp + rax + 0x20]
add dx, cx
mov word [rsp + rax*2 + 0x26], dx
mov byte [rsp + rax + 0x20], bl
inc rax
cmp rax, 5
jb 0x1400f1090
mov r9d, 0x1cdb0617
add r9d, 0xa2f711d
xor r9d, 0x26e68a92
xor r9d, 0x153496e
add r9d, 0x62ef0ecd
sub r9d, 0x15a09a1
sub r9d, 0x12f585b8
add r9d, 0x22568382
xor r9d, 0x71b5b7ae
lea r8, [rsp + 0x26]
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop word [rax + rax]
mov byte [rsp + rbx + 0x26], 1
add byte [rsp + rbx + 0x26], 0x24
sub byte [rsp + rbx + 0x26], 8
sub byte [rsp + rbx + 0x26], 0x1b
xor byte [rsp + rbx + 0x26], 0x2b
add byte [rsp + rbx + 0x26], 8
xor byte [rsp + rbx + 0x26], 0x31
inc rbx
cmp rbx, 0xa
jb 0x1400f110c
mov ecx, 0x7e2a8290
sub ecx, 0x1d9362
sub ecx, 0x20eea87
sub ecx, 0x22f3119a
xor ecx, 0x17ae21e8
sub ecx, 0x9eca694
add ecx, 0xbb47d3ae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3