Function at 0x14019bc90
Capabilities:
Contain obfuscated stackstrings
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, rsi
mov qword [rsp + 0x10], rdx
xchg rsi, rdx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x980]
sub rsp, 0xa80
mov rbx, rcx
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x246d2362
add r8d, 0x12a83877
xor r8d, 0x606973f5
xor r8d, 0x52c1dd3
add r8d, 0xe347c1b
xor r8d, 0x309a4450
xor r8d, 0x799b1637
add r8d, 0xdfee84e
sub r8d, 0x3784bec3
call sub.VCRUNTIME140.dll_memset
xchg r15, r8
mov r15, qword [rbx]
xchg r8, r15
xor ebx, ebx
mov edx, ebx
mov dword [rsp + 0x32], 0x17fb0446
sub dword [rsp + 0x32], 0x107dca2a
add dword [rsp + 0x32], 0x29c92f29
xor dword [rsp + 0x32], 0x240752cc
xor dword [rsp + 0x32], 0x4cb35439
sub dword [rsp + 0x32], 0x52da19e4
add dword [rsp + 0x32], 0x698f2c6f
add dword [rsp + 0x32], 0x864f74bb
mov dword [rsp + 0x42], 0x7543c6bc
sub dword [rsp + 0x42], 0x19e9c61a
add dword [rsp + 0x42], 0x1b334afe
sub dword [rsp + 0x42], 0x101acb95
xor dword [rsp + 0x42], 0x1d8e87a
add dword [rsp + 0x42], 0x97d396be
mov dword [rsp + 0x46], 0x3b95dc8c
xor dword [rsp + 0x46], 0x2b1ed6a7
sub dword [rsp + 0x46], 0x65607fb
xor dword [rsp + 0x46], 0x246c979b
xor dword [rsp + 0x46], 0x616af875
add dword [rsp + 0x46], 0x1a53904d
sub dword [rsp + 0x46], 0x2b3d000
sub dword [rsp + 0x46], 0x55477950
add dword [rsp + 0x46], 0xede84a4f
mov dword [rsp + 0x36], 0x3f3fba9d
xor dword [rsp + 0x36], 0xbae7071
xor dword [rsp + 0x36], 0x9fcfa5e
sub dword [rsp + 0x36], 0x578c7c1
xor dword [rsp + 0x36], 0x35c701d5
xor dword [rsp + 0x36], 0x7b161687
sub dword [rsp + 0x36], 0x6894a4bf
add dword [rsp + 0x36], 0xe6661c12
mov dword [rsp + 0x4a], 0x412d6bae
xor dword [rsp + 0x4a], 0x25c6adb3
xor dword [rsp + 0x4a], 0x214f6be3
add dword [rsp + 0x4a], 0x8dce77d
sub dword [rsp + 0x4a], 0x3764c74b
add dword [rsp + 0x4a], 0x580eef5f
sub dword [rsp + 0x4a], 0x2597daf2
add dword [rsp + 0x4a], 0xb5971ce0
mov dword [rsp + 0x4e], 0x3fcf01f7
add dword [rsp + 0x4e], 0x28fea705
add dword [rsp + 0x4e], 0x8a44568
sub dword [rsp + 0x4e], 0x39185059
sub dword [rsp + 0x4e], 0x6b5c3d
xor dword [rsp + 0x4e], 0x4ff3125a
add dword [rsp + 0x4e], 0x875cabd9
mov dword [rsp + 0x3a], 0x764e6018
sub dword [rsp + 0x3a], 0x772acc0
add dword [rsp + 0x3a], 0x6eaa272
xor dword [rsp + 0x3a], 0xaa0ba78
xor dword [rsp + 0x3a], 0xb982c21
xor dword [rsp + 0x3a], 0x629eabf6
add dword [rsp + 0x3a], 0x6578b121
sub dword [rsp + 0x3a], 0x261f1ab5
xor dword [rsp + 0x3a], 0xa34f0827
mov dword [rsp + 0x52], 0x77589e3b
sub dword [rsp + 0x52], 0x2120792b
xor dword [rsp + 0x52], 0x20dbec5f
xor dword [rsp + 0x52], 0x54e6a519
add dword [rsp + 0x52], 0x25cd7adb
add dword [rsp + 0x52], 0xb7aa184b
mov dword [rsp + 0x56], 0x53205925
sub dword [rsp + 0x56], 0x2be9e162
sub dword [rsp + 0x56], 0x2003ba07
add dword [rsp + 0x56], 0x5da6d4ff
add dword [rsp + 0x56], 0xc86d8a6
sub dword [rsp + 0x56], 0x57ab2fe0
add dword [rsp + 0x56], 0xe5c5c3fe
mov word [rsp + 0x3e], 0x1aba
xor word [rsp + 0x3e], 0x5879
add word [rsp + 0x3e], 0x20a3
add word [rsp + 0x3e], 0x7f8
xor word [rsp + 0x3e], 0x2481
sub word [rsp + 0x3e], 0x2a0e
add word [rsp + 0x3e], 0xd125
mov dword [rsp + 0x5a], 0x6ae0b1cc
sub dword [rsp + 0x5a], 0x59fd8ffe
xor dword [rsp + 0x5a], 0x74db1bef
sub dword [rsp + 0x5a], 0x59b5108e
add dword [rsp + 0x5a], 0x26cb1fe1
xor dword [rsp + 0x5a], 0xd81e55d
sub dword [rsp + 0x5a], 0x210fab9d
add dword [rsp + 0x5a], 0x487da040
add dword [rsp + 0x5a], 0x9b325eb2
mov byte [rsp + 0x40], 0x56
sub byte [rsp + 0x40], 0x42
sub byte [rsp + 0x40], 0xf
add byte [rsp + 0x40], 2
add byte [rsp + 0x40], 0x14
add byte [rsp + 0x40], 0x28
sub byte [rsp + 0x40], 0x2f
add byte [rsp + 0x40], 0x5b
xor byte [rsp + 0x40], 0x99
mov dword [rsp + 0x5e], 0x79507046
sub dword [rsp + 0x5e], 0x43e65d28
add dword [rsp + 0x5e], 0x36d9e14b
sub dword [rsp + 0x5e], 0x5f67a02f
add dword [rsp + 0x5e], 0x15ca260a
xor dword [rsp + 0x5e], 0x61fc9da2
xor dword [rsp + 0x5e], 0x43d6aa10
add dword [rsp + 0x5e], 0x77307948
sub dword [rsp + 0x5e], 0x77bbc7d0
nop
movzx eax, word [rsp + rdx*2 + 0x42]
movzx ecx, byte [rsp + rdx + 0x32]
add cx, ax
mov word [rsp + rdx*2 + 0x42], cx
mov byte [rsp + rdx + 0x32], bl
inc rdx
cmp rdx, 0xf
jb 0x14019c01e
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x70]
call fcn.140086ef0
xchg r13, rax
mov r13, rbx
xchg r13, rax
mov byte [rsp + rax + 0x42], bl
inc rax
cmp rax, 0x1e
jb 0x14019c057
mov dword [rsp + 0x20], 0x4d172a92
sub dword [rsp + 0x20], 0x196b5f26
add dword [rsp + 0x20], 0x323c84e6
sub dword [rsp + 0x20], 0x131be75
sub dword [rsp + 0x20], 0x229161a7
add dword [rsp + 0x20], 0x11de8d88
xor dword [rsp + 0x20], 0x766889e1
sub dword [rsp + 0x20], 0x154f18dc
xor dword [rsp + 0x20], 0xfbeaed75
xchg rbx, r11
mov rax, r11
xchg r11, rbx
mov dword [rsp + 0x26], 0xd3ecb02
add dword [rsp + 0x26], 0x703ca33d
sub dword [rsp + 0x26], 0x15832dca
sub dword [rsp + 0x26], 0x2a54d77a
xor dword [rsp + 0x26], 0x6ca7c83
add dword [rsp + 0x26], 0xc413ead7
mov dword [rsp + 0x2a], 0x687d021
add dword [rsp + 0x2a], 0x23e74bf4
add dword [rsp + 0x2a], 0x29c7d351
sub dword [rsp + 0x2a], 0x502d0795
add dword [rsp + 0x2a], 0x56e7a973
add dword [rsp + 0x2a], 0xa4886e38
mov byte [rsp + 0x24], 0x53
xor byte [rsp + 0x24], 0x60
sub byte [rsp + 0x24], 0x18
xor byte [rsp + 0x24], 0x4c
sub byte [rsp + 0x24], 0x25
xor byte [rsp + 0x24], 0xc4
mov dword [rsp + 0x2e], 0x5d47d81d
xor dword [rsp + 0x2e], 0x50581216
sub dword [rsp + 0x2e], 0x20c8ffe
sub dword [rsp + 0x2e], 0x4dce223
add dword [rsp + 0x2e], 0x16ec2d0f
add dword [rsp + 0x2e], 0x306cd9bf
xor dword [rsp + 0x2e], 0x4979c5ac
sub dword [rsp + 0x2e], 0x4f59b98
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x26]
movzx edx, byte [rsp + rax + 0x20]
add dx, cx
mov word [rsp + rax*2 + 0x26], dx
mov byte [rsp + rax + 0x20], bl
inc rax
cmp rax, 5
jb 0x14019c181
mov r9d, 0x26a759d3
xor r9d, 0x60558975
xor r9d, 0x59470c19
add r9d, 0x312ed828
add r9d, 0x21b0d97c
sub r9d, 0x18d23cbe
sub r9d, 0x4260dfeb
add r9d, 0x52c8cb7b
sub r9d, 0x6a2b3d25
lea r8, [rsp + 0x26]
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop word [rax + rax]
mov byte [rsp + rbx + 0x26], 0x7d
sub byte [rsp + rbx + 0x26], 0x5d
sub byte [rsp + rbx + 0x26], 0x13
add byte [rsp + rbx + 0x26], 0xd
sub byte [rsp + rbx + 0x26], 0xc
add byte [rsp + rbx + 0x26], 0x34
add byte [rsp + rbx + 0x26], 6
add byte [rsp + rbx + 0x26], 5
sub byte [rsp + rbx + 0x26], 0x4d
inc rbx
cmp rbx, 0xa
jb 0x14019c1fd
mov ecx, 0x3611d74
add ecx, 0x539cb75d
xor ecx, 0xc43f91b
xor ecx, 0x7eac088b
add ecx, 0x5047a8c4
add ecx, 0x8ba631fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3