Function at 0x1400f0c50
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
xchg rsi, rcx
mov qword [rsp + 0x10], rcx
xchg rcx, rsi
mov qword [rsp + 0x18], rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
lea rbp, [rsp - 0x980]
sub rsp, 0xa80
xchg rcx, rbx
mov rcx, rbx
xchg rcx, rbx
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x7c71086d
sub r8d, 0x39d06c5f
sub r8d, 0x1f29f3a9
add r8d, 0x23f5df
add r8d, 0x23eae555
xor r8d, 0x34718bf2
sub r8d, 0x48e9b4b0
sub r8d, 0x2b0a49b3
call sub.VCRUNTIME140.dll_memset
xchg r13, rcx
mov r13, qword [rbx]
xchg rcx, r13
sub rcx, 0xfffffffffffffa28
call fcn.14007b620
xor ebx, ebx
mov dword [rsp + 0x32], 0x17a830ed
xor dword [rsp + 0x32], 0x5d7e79bb
sub dword [rsp + 0x32], 0x5a5b307
sub dword [rsp + 0x32], 0x22663445
sub dword [rsp + 0x32], 0x637c4e3
add dword [rsp + 0x32], 0x32a7e159
add dword [rsp + 0x32], 0xa7bc7876
mov edx, ebx
mov dword [rsp + 0x42], 0x13236aad
add dword [rsp + 0x42], 0x498b851c
xor dword [rsp + 0x42], 0x6d0b3c79
add dword [rsp + 0x42], 0x20b50c5e
xor dword [rsp + 0x42], 0x67abfe23
xor dword [rsp + 0x42], 0x5972a3e
sub dword [rsp + 0x42], 0x1181961b
xor dword [rsp + 0x42], 0xe19962d7
xchg r8, rcx
mov rcx, rax
xchg rcx, r8
mov dword [rsp + 0x46], 0x38ae7632
add dword [rsp + 0x46], 0x25979be3
sub dword [rsp + 0x46], 0x5d75d5db
add dword [rsp + 0x46], 0x2a22aa38
sub dword [rsp + 0x46], 0x6395c87
sub dword [rsp + 0x46], 0xd064bbd
add dword [rsp + 0x46], 0x283c8ebc
sub dword [rsp + 0x46], 0x21ed1dd
add dword [rsp + 0x46], 0xc1a3041d
mov dword [rsp + 0x36], 0x1ce3df0
add dword [rsp + 0x36], 0x4c5da58b
xor dword [rsp + 0x36], 0x7ebe99ba
add dword [rsp + 0x36], 0x3c4700db
sub dword [rsp + 0x36], 0x32b77fe5
xor dword [rsp + 0x36], 0x45ce92d1
add dword [rsp + 0x36], 0x770c8d90
mov dword [rsp + 0x4a], 0x6a71a6ff
xor dword [rsp + 0x4a], 0x3b168028
sub dword [rsp + 0x4a], 0x347bd9d8
sub dword [rsp + 0x4a], 0xa981e8c
add dword [rsp + 0x4a], 0x95c4cff
add dword [rsp + 0x4a], 0xe37b840b
mov dword [rsp + 0x4e], 0x2a2a22e0
sub dword [rsp + 0x4e], 0x17e14b69
add dword [rsp + 0x4e], 0x63b7e60b
xor dword [rsp + 0x4e], 0x76351161
add dword [rsp + 0x4e], 0x187964c1
sub dword [rsp + 0x4e], 0x170d210f
xor dword [rsp + 0x4e], 0xfed80ff8
mov dword [rsp + 0x3a], 0xaedd71b
add dword [rsp + 0x3a], 0x6db79973
sub dword [rsp + 0x3a], 0x6cde710a
add dword [rsp + 0x3a], 0x26d686b3
add dword [rsp + 0x3a], 0x455dbca5
sub dword [rsp + 0x3a], 0x17d38b79
sub dword [rsp + 0x3a], 0x596abdac
xor dword [rsp + 0x3a], 0x2eaeb1aa
add dword [rsp + 0x3a], 0xcee4aed9
mov dword [rsp + 0x52], 0x72a74b3d
sub dword [rsp + 0x52], 0x11a50f21
xor dword [rsp + 0x52], 0x55870b9d
add dword [rsp + 0x52], 0x3cbc07d5
sub dword [rsp + 0x52], 0x316de696
xor dword [rsp + 0x52], 0x303fae5d
add dword [rsp + 0x52], 0x56754d11
xor dword [rsp + 0x52], 0x79115b95
add dword [rsp + 0x52], 0xe009e741
mov dword [rsp + 0x56], 0x78ca36a0
sub dword [rsp + 0x56], 0x77343bdc
add dword [rsp + 0x56], 0xdd9b453
add dword [rsp + 0x56], 0x193b390f
xor dword [rsp + 0x56], 0x680ea249
sub dword [rsp + 0x56], 0x35186caf
add dword [rsp + 0x56], 0x426297a5
xor dword [rsp + 0x56], 0x30d8425a
add dword [rsp + 0x56], 0x8244c840
mov word [rsp + 0x3e], 0x5d9f
sub word [rsp + 0x3e], 0x4bff
sub word [rsp + 0x3e], 0x55b
xor word [rsp + 0x3e], 0x3494
add word [rsp + 0x3e], 0x4308
sub word [rsp + 0x3e], 0x2f9f
add word [rsp + 0x3e], 0xc4d
add word [rsp + 0x3e], 0x9e6f
mov dword [rsp + 0x5a], 0xdf2c316
add dword [rsp + 0x5a], 0x230a14c8
add dword [rsp + 0x5a], 0x3b573ec9
xor dword [rsp + 0x5a], 0x394dcaf0
sub dword [rsp + 0x5a], 0x34bbeaaa
xor dword [rsp + 0x5a], 0x8a4a86c
sub dword [rsp + 0x5a], 0x5a68fd0
add dword [rsp + 0x5a], 0xdc1d358d
mov byte [rsp + 0x40], 0x69
sub byte [rsp + 0x40], 0x4b
add byte [rsp + 0x40], 0x19
add byte [rsp + 0x40], 0x28
sub byte [rsp + 0x40], 0x37
xor byte [rsp + 0x40], 0x2d
add byte [rsp + 0x40], 0x3d
add byte [rsp + 0x40], 0xb4
mov dword [rsp + 0x5e], 0x26f5e2c8
xor dword [rsp + 0x5e], 0x34edf6cd
add dword [rsp + 0x5e], 0x49d7df19
xor dword [rsp + 0x5e], 0x63ff055b
sub dword [rsp + 0x5e], 0x1e4eec04
add dword [rsp + 0x5e], 0x5ef82a8
add dword [rsp + 0x5e], 0x48f61990
xor dword [rsp + 0x5e], 0x68a75917
nop
movzx eax, word [rsp + rdx*2 + 0x42]
movzx ecx, byte [rsp + rdx + 0x32]
add cx, ax
mov word [rsp + rdx*2 + 0x42], cx
mov byte [rsp + rdx + 0x32], bl
inc rdx
cmp rdx, 0xf
jb 0x1400f1006
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x70]
call fcn.140086ef0
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
mov byte [rsp + rax + 0x42], bl
inc rax
cmp rax, 0x1e
jb 0x1400f103f
mov dword [rsp + 0x20], 0x116f4615
xor dword [rsp + 0x20], 0x20b91f1f
sub dword [rsp + 0x20], 0x6957309
sub dword [rsp + 0x20], 0x2213be8
sub dword [rsp + 0x20], 0x24288b46
add dword [rsp + 0x20], 0x7470f011
sub dword [rsp + 0x20], 0x4e07cfcd
xor dword [rsp + 0x20], 0x47697e1f
add dword [rsp + 0x20], 0x8aedb5ee
xchg r15, rbx
mov rax, r15
xchg r15, rbx
mov dword [rsp + 0x26], 0x77b25fa9
sub dword [rsp + 0x26], 0x55ed03f
xor dword [rsp + 0x26], 0x586a9a47
xor dword [rsp + 0x26], 0x46255653
sub dword [rsp + 0x26], 0x57a31c27
add dword [rsp + 0x26], 0x43b47ee8
add dword [rsp + 0x26], 0x81414bb
sub dword [rsp + 0x26], 0x2f92addd
add dword [rsp + 0x26], 0xcecdf232
mov dword [rsp + 0x2a], 0x14caeb6e
add dword [rsp + 0x2a], 0x155914fe
sub dword [rsp + 0x2a], 0x2830358a
xor dword [rsp + 0x2a], 0x1deaf5aa
add dword [rsp + 0x2a], 0x994ad21
xor dword [rsp + 0x2a], 0x16a01786
add dword [rsp + 0x2a], 0xcc6c038d
mov byte [rsp + 0x24], 0x4a
xor byte [rsp + 0x24], 4
xor byte [rsp + 0x24], 0x50
add byte [rsp + 0x24], 0x23
sub byte [rsp + 0x24], 7
xor byte [rsp + 0x24], 5
xor byte [rsp + 0x24], 0x7d
add byte [rsp + 0x24], 1
xor byte [rsp + 0x24], 0xb5
mov dword [rsp + 0x2e], 0x614c5991
sub dword [rsp + 0x2e], 0x3fac8225
xor dword [rsp + 0x2e], 0x5b81c529
sub dword [rsp + 0x2e], 0x1a0dbcde
xor dword [rsp + 0x2e], 0x369c5f56
sub dword [rsp + 0x2e], 0x9e66730
add dword [rsp + 0x2e], 0x2a85763c
xor dword [rsp + 0x2e], 0x772be641
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x26]
movzx edx, byte [rsp + rax + 0x20]
add dx, cx
mov word [rsp + rax*2 + 0x26], dx
mov byte [rsp + rax + 0x20], bl
inc rax
cmp rax, 5
jb 0x1400f1198
mov r9d, 0x766ae608
sub r9d, 0x15036369
add r9d, 0x17cdbda9
xor r9d, 0x1cb99f85
xor r9d, 0x7bead88b
add r9d, 0x2402048c
sub r9d, 0x1ead1b10
sub r9d, 0x2d5cd89
sub r9d, 0x20e52329
lea r8, [rsp + 0x26]
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop word [rax + rax]
mov byte [rsp + rbx + 0x26], 0x2b
sub byte [rsp + rbx + 0x26], 0x2a
xor byte [rsp + rbx + 0x26], 0x76
xor byte [rsp + rbx + 0x26], 0x26
sub byte [rsp + rbx + 0x26], 8
add byte [rsp + rbx + 0x26], 9
add byte [rsp + rbx + 0x26], 0x23
xor byte [rsp + rbx + 0x26], 0x2a
xor byte [rsp + rbx + 0x26], 0x5f
inc rbx
cmp rbx, 0xa
jb 0x1400f1214
mov ecx, 0x5e54d19f
xor ecx, 0x597cdb31
add ecx, 0x33b9186b
sub ecx, 0x27959a67
xor ecx, 0x31ef70a6
xor ecx, 0x335824c6
xor ecx, 0x19b8ccf8
xor ecx, 0xf7bbefd5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3