Function at 0x14019c210
Capabilities:
Encode data using xor
Terminate process

Disassembly:
xchg rbx, rdx
mov qword [rsp + 8], rdx
xchg rbx, rdx
mov qword [rsp + 0x10], rsi
xchg rdi, rdx
mov qword [rsp + 0x18], rdx
xchg rdx, rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
lea rbp, [rsp - 0x980]
sub rsp, 0xa80
xchg rdx, rcx
mov rbx, rdx
xchg rdx, rcx
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x44f94c57
add r8d, 0x1785efbc
xor r8d, 0x648ae12f
add r8d, 0xb15fc40
sub r8d, 0x6b24ec7
xor r8d, 0x37f5fb00
xor r8d, 0x67324fc6
xor r8d, 0x18edef53
sub r8d, 0x7573c718
call sub.VCRUNTIME140.dll_memset
mov r8, qword [rbx]
xor ebx, ebx
mov edx, ebx
mov dword [rsp + 0x32], 0x3678688b
sub dword [rsp + 0x32], 0x2c8721c7
add dword [rsp + 0x32], 0x6b8ee0b
sub dword [rsp + 0x32], 0x652f490
add dword [rsp + 0x32], 0x59e684a8
xor dword [rsp + 0x32], 0x58b744c8
xor dword [rsp + 0x32], 0x12a63390
add dword [rsp + 0x32], 0x3c614d00
xor dword [rsp + 0x32], 0x9c78f649
mov dword [rsp + 0x42], 0x67a02e3b
sub dword [rsp + 0x42], 0x426c9ca5
add dword [rsp + 0x42], 0x538d1208
sub dword [rsp + 0x42], 0x26a46ed9
sub dword [rsp + 0x42], 0x191fe923
add dword [rsp + 0x42], 0x1a5a997d
sub dword [rsp + 0x42], 0x4277b749
add dword [rsp + 0x42], 0x6304afec
xor dword [rsp + 0x42], 0x8c9e22ed
mov dword [rsp + 0x46], 0x422299de
sub dword [rsp + 0x46], 0x30f7af62
add dword [rsp + 0x46], 0x623b173e
sub dword [rsp + 0x46], 0x29e44262
add dword [rsp + 0x46], 0x177ad9e7
xor dword [rsp + 0x46], 0x4d881b13
sub dword [rsp + 0x46], 0x1fa12b4f
add dword [rsp + 0x46], 0xabb7cfb
xor dword [rsp + 0x46], 0xe7fd2cf2
mov dword [rsp + 0x36], 0x33a425aa
add dword [rsp + 0x36], 0x4c1b013c
xor dword [rsp + 0x36], 0x4914a47e
xor dword [rsp + 0x36], 0x6bcd8d81
xor dword [rsp + 0x36], 0x173e0b83
xor dword [rsp + 0x36], 0x50edd5ad
xor dword [rsp + 0x36], 0x623fae2a
add dword [rsp + 0x36], 0x7e6c77d9
mov dword [rsp + 0x4a], 0x4dfb532a
xor dword [rsp + 0x4a], 0x132cb15d
sub dword [rsp + 0x4a], 0x42981ead
add dword [rsp + 0x4a], 0x58ee8935
sub dword [rsp + 0x4a], 0x3b9759df
sub dword [rsp + 0x4a], 0xe736e1d
add dword [rsp + 0x4a], 0xd4077a7a
mov dword [rsp + 0x4e], 0x4109c5c2
add dword [rsp + 0x4e], 0x2f05364d
xor dword [rsp + 0x4e], 0x20cf4656
sub dword [rsp + 0x4e], 0x211c2ef
add dword [rsp + 0x4e], 0xd0f0b04
add dword [rsp + 0x4e], 0xa3bafcff
mov dword [rsp + 0x3a], 0x3e92e214
sub dword [rsp + 0x3a], 0x304a9d00
xor dword [rsp + 0x3a], 0x3e784a6b
add dword [rsp + 0x3a], 0x21b628d1
add dword [rsp + 0x3a], 0x1c83308b
add dword [rsp + 0x3a], 0xa35f8c2
sub dword [rsp + 0x3a], 0x5b8d8a2e
add dword [rsp + 0x3a], 0xd9e51f87
mov dword [rsp + 0x52], 0x241ba9ac
add dword [rsp + 0x52], 0x2665438
sub dword [rsp + 0x52], 0xe64b99a
add dword [rsp + 0x52], 0x1ef77a5c
xor dword [rsp + 0x52], 0x1d1baa22
add dword [rsp + 0x52], 0x2b3bc602
xor dword [rsp + 0x52], 0xaa3625fa
mov dword [rsp + 0x56], 0x4ca1bfcf
sub dword [rsp + 0x56], 0x38878d6
add dword [rsp + 0x56], 0x1081177
add dword [rsp + 0x56], 0x160a3bf3
sub dword [rsp + 0x56], 0x3d4dacb4
add dword [rsp + 0x56], 0x166bc168
xor dword [rsp + 0x56], 0x7d2245da
sub dword [rsp + 0x56], 0x2aeb83d0
add dword [rsp + 0x56], 0xe5fa9682
mov word [rsp + 0x3e], 0x2097
add word [rsp + 0x3e], 0xe60
xor word [rsp + 0x3e], 0x259
sub word [rsp + 0x3e], 0x1087
add word [rsp + 0x3e], 0x1f68
sub word [rsp + 0x3e], 0x1083
add word [rsp + 0x3e], 0x2ec6
add word [rsp + 0x3e], 0x180b
add word [rsp + 0x3e], 0x8519
mov dword [rsp + 0x5a], 0x6172d6d0
add dword [rsp + 0x5a], 0x60ef7d3
sub dword [rsp + 0x5a], 0x4e9b7c22
xor dword [rsp + 0x5a], 0x7bbd36e2
xor dword [rsp + 0x5a], 0x6ca2e585
xor dword [rsp + 0x5a], 0x56f2da3a
sub dword [rsp + 0x5a], 0x4ecf6d5f
xor dword [rsp + 0x5a], 0xf5541103
mov byte [rsp + 0x40], 0x1c
xor byte [rsp + 0x40], 0x4d
xor byte [rsp + 0x40], 0x7f
add byte [rsp + 0x40], 0x2b
add byte [rsp + 0x40], 9
sub byte [rsp + 0x40], 0x50
add byte [rsp + 0x40], 0x30
sub byte [rsp + 0x40], 0x31
add byte [rsp + 0x40], 0xe5
mov dword [rsp + 0x5e], 0x1b2ef8d8
add dword [rsp + 0x5e], 0x43372b92
sub dword [rsp + 0x5e], 0x357b788a
sub dword [rsp + 0x5e], 0x1e0d56d3
add dword [rsp + 0x5e], 0x6802213e
sub dword [rsp + 0x5e], 0x4a2ab1e8
xor dword [rsp + 0x5e], 0x32bb7dea
add dword [rsp + 0x5e], 0x1fc9f359
xor dword [rsp + 0x5e], 0x39d9538c
nop
movzx eax, word [rsp + rdx*2 + 0x42]
movzx ecx, byte [rsp + rdx + 0x32]
add cx, ax
mov word [rsp + rdx*2 + 0x42], cx
mov byte [rsp + rdx + 0x32], bl
inc rdx
cmp rdx, 0xf
jb 0x14019c5d3
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x70]
call fcn.140086cf0
mov rax, rbx
mov byte [rsp + rax + 0x42], bl
inc rax
cmp rax, 0x1e
jb 0x14019c608
mov dword [rsp + 0x20], 0xd324bfc
add dword [rsp + 0x20], 0x67bd8433
xor dword [rsp + 0x20], 0x763a35a4
add dword [rsp + 0x20], 0x56f707a7
sub dword [rsp + 0x20], 0x487c6a03
xor dword [rsp + 0x20], 0x6d879f5d
xor dword [rsp + 0x20], 0x4896d13f
xor dword [rsp + 0x20], 0xc2b73bbb
mov rax, rbx
mov dword [rsp + 0x26], 0x5b35f748
xor dword [rsp + 0x26], 0x69d91390
add dword [rsp + 0x26], 0x3f5530c4
sub dword [rsp + 0x26], 0x1656ab42
xor dword [rsp + 0x26], 0x54315309
xor dword [rsp + 0x26], 0x10747c62
xor dword [rsp + 0x26], 0xe5bbf3a
add dword [rsp + 0x26], 0x2415bf4b
xor dword [rsp + 0x26], 0xc9774619
mov dword [rsp + 0x2a], 0x7e0c68a0
sub dword [rsp + 0x2a], 0x6b7798d1
add dword [rsp + 0x2a], 0x2033baa7
xor dword [rsp + 0x2a], 0x1b69a1cd
sub dword [rsp + 0x2a], 0x1f29ec67
add dword [rsp + 0x2a], 0x174d9a5f
add dword [rsp + 0x2a], 0x199884c1
add dword [rsp + 0x2a], 0xc41ca108
mov byte [rsp + 0x24], 0x72
sub byte [rsp + 0x24], 0x2a
add byte [rsp + 0x24], 0xe
add byte [rsp + 0x24], 0x1d
sub byte [rsp + 0x24], 0x32
sub byte [rsp + 0x24], 0x28
add byte [rsp + 0x24], 0x20
add byte [rsp + 0x24], 0xbd
mov dword [rsp + 0x2e], 0xb882282
xor dword [rsp + 0x2e], 0xe741dac
add dword [rsp + 0x2e], 0x4d0bfa2e
sub dword [rsp + 0x2e], 0x4ba04de4
add dword [rsp + 0x2e], 0x354f79d3
add dword [rsp + 0x2e], 0x27a6690b
xor dword [rsp + 0x2e], 0x645d312a
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x26]
movzx edx, byte [rsp + rax + 0x20]
add dx, cx
mov word [rsp + rax*2 + 0x26], dx
mov byte [rsp + rax + 0x20], bl
inc rax
cmp rax, 5
jb 0x14019c74e
mov r9d, 0x5d1b4dcd
xor r9d, 0x6ff88f94
xor r9d, 0x231a5ca6
xor r9d, 0x4f4a2fe7
add r9d, 0x10d6855f
sub r9d, 0x6f8a3667
lea r8, [rsp + 0x26]
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop word [rax + rax]
mov byte [rsp + rbx + 0x26], 0x35
xor byte [rsp + rbx + 0x26], 0x3f
add byte [rsp + rbx + 0x26], 3
xor byte [rsp + rbx + 0x26], 0x60
add byte [rsp + rbx + 0x26], 5
sub byte [rsp + rbx + 0x26], 0x51
sub byte [rsp + rbx + 0x26], 0x21
inc rbx
cmp rbx, 0xa
jb 0x14019c7b5
mov ecx, 0x1ef26a65
xor ecx, 0xa20e04
add ecx, 0x13a3456e
add ecx, 0x124ee43c
add ecx, 0x191c4d3e
xor ecx, 0x1e7ca3f8
add ecx, 0xbcdd874e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3