Function at 0x14019c0b0
Capabilities:
Encode data using xor
Terminate process

Disassembly:
xchg r13, rbx
mov qword [rsp + 8], r13
xchg r13, rbx
xchg rsi, r14
mov qword [rsp + 0x10], r14
xchg rsi, r14
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x980]
sub rsp, 0xa80
xchg rbx, rcx
mov rcx, rbx
xchg rbx, rcx
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x52d157c2
add r8d, 0x1948f7f
sub r8d, 0x28acbf27
xor r8d, 0x2d2ad509
add r8d, 0x400e62c9
sub r8d, 0x17a55568
sub r8d, 0x286947cd
xor r8d, 0x47c9b39e
xor r8d, 0x415a7b31
call sub.VCRUNTIME140.dll_memset
xchg r8, r11
mov r11, qword [rbx]
xchg r8, r11
xor ebx, ebx
mov edx, ebx
mov dword [rsp + 0x32], 0x7606fbb
add dword [rsp + 0x32], 0x111ea89f
xor dword [rsp + 0x32], 0x5984d7ca
sub dword [rsp + 0x32], 0x2bb44c24
add dword [rsp + 0x32], 0xdbf44de
add dword [rsp + 0x32], 0x1492276e
add dword [rsp + 0x32], 0x16c5978
xor dword [rsp + 0x32], 0xccf3bfc6
mov dword [rsp + 0x42], 0x1ded6555
xor dword [rsp + 0x42], 0x629f89c5
sub dword [rsp + 0x42], 0x3f127e2f
xor dword [rsp + 0x42], 0x15c1adb4
xor dword [rsp + 0x42], 0x26aff2a4
add dword [rsp + 0x42], 0x8c6fcdbe
mov dword [rsp + 0x46], 0x21432019
add dword [rsp + 0x46], 0x770d66c
add dword [rsp + 0x46], 0x3c16ed87
sub dword [rsp + 0x46], 0x2af06d7e
xor dword [rsp + 0x46], 0x5fd3739a
xor dword [rsp + 0x46], 0x33c6ca09
sub dword [rsp + 0x46], 0x4b98896e
xor dword [rsp + 0x46], 0xf544ba85
mov dword [rsp + 0x36], 0x1f3fed86
xor dword [rsp + 0x36], 0x45cf60a4
sub dword [rsp + 0x36], 0x2f7b3aeb
add dword [rsp + 0x36], 0x4665fd24
sub dword [rsp + 0x36], 0x34a939c0
sub dword [rsp + 0x36], 0x2c5a520d
add dword [rsp + 0x36], 0x948d787
add dword [rsp + 0x36], 0x1b974173
add dword [rsp + 0x36], 0xc13f1a6e
mov dword [rsp + 0x4a], 0x4fbcb985
add dword [rsp + 0x4a], 0x28ffd744
sub dword [rsp + 0x4a], 0xbe928e
xor dword [rsp + 0x4a], 0x121747f5
xor dword [rsp + 0x4a], 0x649ab93b
add dword [rsp + 0x4a], 0x209a7ba6
add dword [rsp + 0x4a], 0xdd2082e2
mov dword [rsp + 0x4e], 0x68ddc6c2
sub dword [rsp + 0x4e], 0x5d20a986
xor dword [rsp + 0x4e], 0x2d8ad292
xor dword [rsp + 0x4e], 0x27ebd606
add dword [rsp + 0x4e], 0x77603b00
add dword [rsp + 0x4e], 0x863daac5
mov dword [rsp + 0x3a], 0x3a20aa1a
sub dword [rsp + 0x3a], 0x191a05aa
add dword [rsp + 0x3a], 0x4943a5a2
sub dword [rsp + 0x3a], 0x327b4491
sub dword [rsp + 0x3a], 0xd68a906
add dword [rsp + 0x3a], 0x7216034
xor dword [rsp + 0x3a], 0xc7714a59
mov dword [rsp + 0x52], 0x3487b0d3
xor dword [rsp + 0x52], 0x190f2e6b
add dword [rsp + 0x52], 0x4db82781
xor dword [rsp + 0x52], 0x10f76cd0
xor dword [rsp + 0x52], 0x5fa75a37
sub dword [rsp + 0x52], 0x2c6629a9
xor dword [rsp + 0x52], 0x5851bedb
xor dword [rsp + 0x52], 0x4306373c
xor dword [rsp + 0x52], 0xe381b1ae
mov dword [rsp + 0x56], 0x3bb4a25b
add dword [rsp + 0x56], 0x1246e3cf
add dword [rsp + 0x56], 0x1877699d
sub dword [rsp + 0x56], 0x433bb028
sub dword [rsp + 0x56], 0x103efda6
xor dword [rsp + 0x56], 0x156d9008
add dword [rsp + 0x56], 0x42696171
add dword [rsp + 0x56], 0xb57bcc1d
mov word [rsp + 0x3e], 0x106a
add word [rsp + 0x3e], 0x6c21
sub word [rsp + 0x3e], 0x24c2
sub word [rsp + 0x3e], 0xc89
xor word [rsp + 0x3e], 0x39be
sub word [rsp + 0x3e], 0xd84
sub word [rsp + 0x3e], 0x2adb
add word [rsp + 0x3e], 0xbc57
mov dword [rsp + 0x5a], 0x3836c6ba
sub dword [rsp + 0x5a], 0x406451d
sub dword [rsp + 0x5a], 0x111845fe
add dword [rsp + 0x5a], 0x43d33a28
sub dword [rsp + 0x5a], 0x578881
sub dword [rsp + 0x5a], 0x1fb03270
add dword [rsp + 0x5a], 0xb88c44a8
mov byte [rsp + 0x40], 2
add byte [rsp + 0x40], 0
add byte [rsp + 0x40], 0x74
sub byte [rsp + 0x40], 0x63
add byte [rsp + 0x40], 0x40
add byte [rsp + 0x40], 0x1c
sub byte [rsp + 0x40], 0x6b
add byte [rsp + 0x40], 0xf2
mov dword [rsp + 0x5e], 0x61225bae
add dword [rsp + 0x5e], 0x15522b92
sub dword [rsp + 0x5e], 0x59f05386
add dword [rsp + 0x5e], 0x23b897e7
add dword [rsp + 0x5e], 0x139d04cf
sub dword [rsp + 0x5e], 0x23b090b9
sub dword [rsp + 0x5e], 0x2be175fa
sub dword [rsp + 0x5e], 0x446ca4f
nop
movzx eax, word [rsp + rdx*2 + 0x42]
movzx ecx, byte [rsp + rdx + 0x32]
add cx, ax
mov word [rsp + rdx*2 + 0x42], cx
mov byte [rsp + rdx + 0x32], bl
inc rdx
cmp rdx, 0xf
jb 0x14019c434
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x70]
call fcn.140086c80
mov rax, rbx
mov byte [rsp + rax + 0x42], bl
inc rax
cmp rax, 0x1e
jb 0x14019c469
mov dword [rsp + 0x20], 0x4b35ea5d
xor dword [rsp + 0x20], 0x6da73b17
add dword [rsp + 0x20], 0x4d0c0cb1
sub dword [rsp + 0x20], 0x6d33a293
xor dword [rsp + 0x20], 0x30840da2
sub dword [rsp + 0x20], 0x11cc3685
add dword [rsp + 0x20], 0x385bfb79
xor dword [rsp + 0x20], 0xab880d48
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
mov dword [rsp + 0x26], 0xec6ae4e
xor dword [rsp + 0x26], 0x19e1471f
sub dword [rsp + 0x26], 0x1a4c797
add dword [rsp + 0x26], 0x27bbaeeb
sub dword [rsp + 0x26], 0x322fa1db
add dword [rsp + 0x26], 0x6c9cd72
xor dword [rsp + 0x26], 0x3f332704
xor dword [rsp + 0x26], 0x1db5d942
add dword [rsp + 0x26], 0xcc1efcd5
mov dword [rsp + 0x2a], 0x4f27e803
sub dword [rsp + 0x2a], 0x8cd2ba4
sub dword [rsp + 0x2a], 0x14f9a298
sub dword [rsp + 0x2a], 0x1af4298c
add dword [rsp + 0x2a], 0x281814b2
xor dword [rsp + 0x2a], 0x2825e6be
add dword [rsp + 0x2a], 0x68914856
sub dword [rsp + 0x2a], 0x6bba2a2b
add dword [rsp + 0x2a], 0xec01fefe
mov byte [rsp + 0x24], 0x7b
sub byte [rsp + 0x24], 0x5b
xor byte [rsp + 0x24], 0x44
sub byte [rsp + 0x24], 0x5a
add byte [rsp + 0x24], 0x65
sub byte [rsp + 0x24], 0x5a
xor byte [rsp + 0x24], 6
sub byte [rsp + 0x24], 4
add byte [rsp + 0x24], 0xe7
mov dword [rsp + 0x2e], 0x12a0aa96
add dword [rsp + 0x2e], 0x252f9cc6
xor dword [rsp + 0x2e], 0x7b914bb9
add dword [rsp + 0x2e], 0x22c6bc12
sub dword [rsp + 0x2e], 0x602af905
add dword [rsp + 0x2e], 0x5e92ada3
xor dword [rsp + 0x2e], 0x492d653d
xor dword [rsp + 0x2e], 0x2442e7d4
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x26]
movzx edx, byte [rsp + rax + 0x20]
add dx, cx
mov word [rsp + rax*2 + 0x26], dx
mov byte [rsp + rax + 0x20], bl
inc rax
cmp rax, 5
jb 0x14019c5c8
mov r9d, 0x4c6a3195
add r9d, 0x8389525
sub r9d, 0x1eceebaf
xor r9d, 0x77a2c11c
xor r9d, 0x66c0a02d
xor r9d, 0x7dee35ac
sub r9d, 0x595f8f86
lea r8, [rsp + 0x26]
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop word [rax + rax]
mov byte [rsp + rbx + 0x26], 0x33
add byte [rsp + rbx + 0x26], 0x49
sub byte [rsp + rbx + 0x26], 0xa
xor byte [rsp + rbx + 0x26], 0x7d
xor byte [rsp + rbx + 0x26], 0x1c
sub byte [rsp + rbx + 0x26], 5
xor byte [rsp + rbx + 0x26], 0x68
sub byte [rsp + rbx + 0x26], 0x66
inc rbx
cmp rbx, 0xa
jb 0x14019c636
mov ecx, 0x211bb2ff
add ecx, 0x76768e8
add ecx, 0xb1140ed
xor ecx, 0x8f83d71
xor ecx, 0x5814e688
add ecx, 0x9c8778d2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3