Function at 0x1400f0b50
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
xchg rdi, rbp
mov qword [rsp + 0x18], rbp
xchg rdi, rbp
push rbp
lea rbp, [rsp - 0x980]
sub rsp, 0xa80
xchg r13, rbx
mov r13, rcx
xchg r13, rbx
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x7d998c3a
xor r8d, 0x4fb3e6b5
add r8d, 0x136be999
xor r8d, 0x47dfd108
add r8d, 0x49ac3c29
sub r8d, 0x3a9d0136
add r8d, 0x3b4fd97
add r8d, 0x192fd200
sub r8d, 0x2e3d85a2
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rbx]
add rcx, 0x53a1df3c
sub rcx, 0x53a1d964
call fcn.14007b710
xor ebx, ebx
mov dword [rsp + 0x32], 0x5f13c5b4
add dword [rsp + 0x32], 0x5bad16e
sub dword [rsp + 0x32], 0x4fba43c
sub dword [rsp + 0x32], 0x40d667a7
add dword [rsp + 0x32], 0x4b0b2fdd
xor dword [rsp + 0x32], 0x9cf14dea
mov edx, ebx
mov dword [rsp + 0x42], 0xd881a5e
add dword [rsp + 0x42], 0x2cad907d
xor dword [rsp + 0x42], 0x7d057fcf
xor dword [rsp + 0x42], 0x477c456
sub dword [rsp + 0x42], 0x2bfd489d
sub dword [rsp + 0x42], 0x1b59864
xor dword [rsp + 0x42], 0x5311f989
xor dword [rsp + 0x42], 0xb9f836e7
xchg r8, rax
mov rax, r8
xchg r8, rax
mov dword [rsp + 0x46], 0x1881353b
add dword [rsp + 0x46], 0x50917951
xor dword [rsp + 0x46], 0x6694982a
add dword [rsp + 0x46], 0x490c4a98
add dword [rsp + 0x46], 0x73616c2
xor dword [rsp + 0x46], 0x62353d9e
sub dword [rsp + 0x46], 0x7163cf3
xor dword [rsp + 0x46], 0xc9949781
mov dword [rsp + 0x36], 0x57cfe57b
add dword [rsp + 0x36], 0x197e7e3e
sub dword [rsp + 0x36], 0x1551cc64
add dword [rsp + 0x36], 0xa22c029
xor dword [rsp + 0x36], 0x20c1f31e
add dword [rsp + 0x36], 0x705621f
xor dword [rsp + 0x36], 0xbb12f089
mov dword [rsp + 0x4a], 0x68ff1365
sub dword [rsp + 0x4a], 0x64c46641
add dword [rsp + 0x4a], 0x48f43a8a
xor dword [rsp + 0x4a], 0x1de382
xor dword [rsp + 0x4a], 0x4570d2cd
add dword [rsp + 0x4a], 0xf6e7289c
mov dword [rsp + 0x4e], 0x12e8e9d6
sub dword [rsp + 0x4e], 0x5b762a4
add dword [rsp + 0x4e], 0x1516cce2
add dword [rsp + 0x4e], 0x2ba99890
sub dword [rsp + 0x4e], 0x1c47a72a
xor dword [rsp + 0x4e], 0x3f2ab79c
add dword [rsp + 0x4e], 0xf0f90c87
mov dword [rsp + 0x3a], 0x3449c64d
add dword [rsp + 0x3a], 0x26fb5a2
xor dword [rsp + 0x3a], 0x671beb35
xor dword [rsp + 0x3a], 0x54900e81
add dword [rsp + 0x3a], 0x2a97a1e
xor dword [rsp + 0x3a], 0x4c94cfa1
add dword [rsp + 0x3a], 0xabae1f1e
mov dword [rsp + 0x52], 0x472b147a
xor dword [rsp + 0x52], 0x2e9f7004
sub dword [rsp + 0x52], 0x1272c1a5
sub dword [rsp + 0x52], 0x46169e19
add dword [rsp + 0x52], 0xab6abc
add dword [rsp + 0x52], 0x199b9e05
xor dword [rsp + 0x52], 0xf0bd930
add dword [rsp + 0x52], 0x9042fcd
xor dword [rsp + 0x52], 0xd202fb02
mov dword [rsp + 0x56], 0x2104205b
add dword [rsp + 0x56], 0x7b7c5e1
add dword [rsp + 0x56], 0x4bed2fae
xor dword [rsp + 0x56], 0x6e42d032
add dword [rsp + 0x56], 0x62cfc0d2
sub dword [rsp + 0x56], 0x70f70c3e
add dword [rsp + 0x56], 0x5dac2703
add dword [rsp + 0x56], 0x950a5e10
mov word [rsp + 0x3e], 0x3179
xor word [rsp + 0x3e], 0x61cb
xor word [rsp + 0x3e], 0x259d
xor word [rsp + 0x3e], 0x7633
add word [rsp + 0x3e], 0x2d94
xor word [rsp + 0x3e], 0xc646
mov dword [rsp + 0x5a], 0x72e27884
xor dword [rsp + 0x5a], 0xa38a144
xor dword [rsp + 0x5a], 0x447b2561
add dword [rsp + 0x5a], 0x3c22f3cc
sub dword [rsp + 0x5a], 0x48fae74e
add dword [rsp + 0x5a], 0xcfa5f65f
mov byte [rsp + 0x40], 0x59
xor byte [rsp + 0x40], 0x72
add byte [rsp + 0x40], 0x32
sub byte [rsp + 0x40], 0x48
add byte [rsp + 0x40], 0x36
add byte [rsp + 0x40], 0xab
mov dword [rsp + 0x5e], 0x125d6d46
add dword [rsp + 0x5e], 0x41693c05
sub dword [rsp + 0x5e], 0x1b794e34
xor dword [rsp + 0x5e], 0x4d16eee2
xor dword [rsp + 0x5e], 0x5083434
xor dword [rsp + 0x5e], 0x2528ae7d
sub dword [rsp + 0x5e], 0x557a304e
nop
movzx eax, word [rsp + rdx*2 + 0x42]
movzx ecx, byte [rsp + rdx + 0x32]
add cx, ax
mov word [rsp + rdx*2 + 0x42], cx
mov byte [rsp + rdx + 0x32], bl
inc rdx
cmp rdx, 0xf
jb 0x1400f0eab
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x70]
call fcn.140086db0
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
mov byte [rsp + rax + 0x42], bl
inc rax
cmp rax, 0x1e
jb 0x1400f0ee4
mov dword [rsp + 0x20], 0x7305c1dc
sub dword [rsp + 0x20], 0x1be57de9
add dword [rsp + 0x20], 0x1ef95305
xor dword [rsp + 0x20], 0x7021aeb5
xor dword [rsp + 0x20], 0x2ccb89e5
xor dword [rsp + 0x20], 0xdc05475e
mov rax, rbx
mov dword [rsp + 0x26], 0x25143075
add dword [rsp + 0x26], 0x1ef27913
sub dword [rsp + 0x26], 0x1cdeea97
add dword [rsp + 0x26], 0x23a2ca2c
sub dword [rsp + 0x26], 0x228cc010
add dword [rsp + 0x26], 0x9a46f1
sub dword [rsp + 0x26], 0x1ea9ad73
add dword [rsp + 0x26], 0x13408c48
add dword [rsp + 0x26], 0xe20e107c
mov dword [rsp + 0x2a], 0x10f85f0f
add dword [rsp + 0x2a], 0x142ade0e
add dword [rsp + 0x2a], 0xb99df8d
sub dword [rsp + 0x2a], 0x16a5022
sub dword [rsp + 0x2a], 0xdada1fb
sub dword [rsp + 0x2a], 0x19772057
add dword [rsp + 0x2a], 0xf74bf546
mov byte [rsp + 0x24], 2
add byte [rsp + 0x24], 4
xor byte [rsp + 0x24], 0x7a
xor byte [rsp + 0x24], 0x40
sub byte [rsp + 0x24], 0x2c
xor byte [rsp + 0x24], 0xe6
mov dword [rsp + 0x2e], 0x5aedc315
sub dword [rsp + 0x2e], 0x10c01137
sub dword [rsp + 0x2e], 0x2fe837a6
add dword [rsp + 0x2e], 0x5ef3c77e
xor dword [rsp + 0x2e], 0x12075f23
sub dword [rsp + 0x2e], 0x1724d66b
sub dword [rsp + 0x2e], 0x2e2e14e
xor dword [rsp + 0x2e], 0x74718730
sub dword [rsp + 0x2e], 0x2546e270
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x26]
movzx edx, byte [rsp + rax + 0x20]
add dx, cx
mov word [rsp + rax*2 + 0x26], dx
mov byte [rsp + rax + 0x20], bl
inc rax
cmp rax, 5
jb 0x1400f1018
mov r9d, 0x3434acd5
sub r9d, 0x220fac28
xor r9d, 0x303e8d89
xor r9d, 0x2f2a2bcd
add r9d, 0x53785f6a
xor r9d, 0x60aa0643
lea r8, [rsp + 0x26]
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop word [rax + rax]
mov byte [rsp + rbx + 0x26], 0x27
xor byte [rsp + rbx + 0x26], 1
sub byte [rsp + rbx + 0x26], 0xc
add byte [rsp + rbx + 0x26], 0x58
sub byte [rsp + rbx + 0x26], 4
sub byte [rsp + rbx + 0x26], 0x6e
inc rbx
cmp rbx, 0xa
jb 0x1400f107f
mov ecx, 0x5705a54e
sub ecx, 0x25939f42
sub ecx, 0x13abfffd
xor ecx, 0x24a4d9b0
sub ecx, 0x32011c5a
add ecx, 0x2c13b7dc
xor ecx, 0xcc8a84be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3