Function at 0x14019bb90
Capabilities:
Encode data using xor
Terminate process

Disassembly:
xchg r8, rbx
mov qword [rsp + 8], r8
xchg r8, rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x980]
sub rsp, 0xa80
mov rbx, rcx
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x6ed9bc7
add r8d, 0x694e9fec
sub r8d, 0x2633a9de
sub r8d, 0x1a45cd96
sub r8d, 0x28aeb6d8
xor r8d, 0x40b9e1f7
add r8d, 0x1c3e7090
xor r8d, 0x63ec5728
call sub.VCRUNTIME140.dll_memset
mov r8, qword [rbx]
xor ebx, ebx
mov edx, ebx
mov dword [rsp + 0x32], 0x19c07f1a
xor dword [rsp + 0x32], 0x43c40e5d
xor dword [rsp + 0x32], 0x7404f09d
add dword [rsp + 0x32], 0x1e5373b4
xor dword [rsp + 0x32], 0x213dc342
sub dword [rsp + 0x32], 0xb012aae
add dword [rsp + 0x32], 0x15eedcf3
add dword [rsp + 0x32], 0x64355db
xor dword [rsp + 0x32], 0x8869c81a
mov dword [rsp + 0x42], 0x5f96b73e
sub dword [rsp + 0x42], 0x407d298c
add dword [rsp + 0x42], 0x21f662f3
add dword [rsp + 0x42], 0x15d3e798
xor dword [rsp + 0x42], 0x194b639
xor dword [rsp + 0x42], 0x77018768
sub dword [rsp + 0x42], 0xb3720de
add dword [rsp + 0x42], 0xea3e36a1
mov dword [rsp + 0x46], 0x73320719
sub dword [rsp + 0x46], 0x39cd6093
sub dword [rsp + 0x46], 0x114b14cc
add dword [rsp + 0x46], 0xd81fc31
add dword [rsp + 0x46], 0x3e7c78ef
xor dword [rsp + 0x46], 0x1f434a7e
xor dword [rsp + 0x46], 0x9428b38e
mov dword [rsp + 0x36], 0x6822786c
sub dword [rsp + 0x36], 0x39563088
add dword [rsp + 0x36], 0x387fb69c
xor dword [rsp + 0x36], 0x71b3f4ab
add dword [rsp + 0x36], 0x3ebe1c8e
xor dword [rsp + 0x36], 0x5871fe0c
xor dword [rsp + 0x36], 0x5b5e0985
xor dword [rsp + 0x36], 0xa06f27c6
mov dword [rsp + 0x4a], 0xc16f55
xor dword [rsp + 0x4a], 0x5b925cc3
add dword [rsp + 0x4a], 0x11507c7b
xor dword [rsp + 0x4a], 0x742e6e1b
add dword [rsp + 0x4a], 0x32e5f6fc
sub dword [rsp + 0x4a], 0x331ce12d
xor dword [rsp + 0x4a], 0xe77c0ca4
mov dword [rsp + 0x4e], 0x9be4c2c
add dword [rsp + 0x4e], 0x46ea0bcb
sub dword [rsp + 0x4e], 0x21e4775c
xor dword [rsp + 0x4e], 0x4fa38eb2
sub dword [rsp + 0x4e], 0xd677090
sub dword [rsp + 0x4e], 0x30c01073
add dword [rsp + 0x4e], 0xdc411247
mov dword [rsp + 0x3a], 0x57f42e47
xor dword [rsp + 0x3a], 0xa01395f
xor dword [rsp + 0x3a], 0x41b84a50
xor dword [rsp + 0x3a], 0x335c743f
xor dword [rsp + 0x3a], 0x1fa95961
xor dword [rsp + 0x3a], 0x1ec1d625
xor dword [rsp + 0x3a], 0xd88f50c5
mov dword [rsp + 0x52], 0x511b31c6
sub dword [rsp + 0x52], 0x2fbac47c
add dword [rsp + 0x52], 0x29e9ce84
xor dword [rsp + 0x52], 0x4daac51a
xor dword [rsp + 0x52], 0x4135fb77
add dword [rsp + 0x52], 0x91d1227
add dword [rsp + 0x52], 0x120ae8a0
add dword [rsp + 0x52], 0x9c7fff12
mov dword [rsp + 0x56], 0x1918e173
xor dword [rsp + 0x56], 0x2593ca70
xor dword [rsp + 0x56], 0x1ca99efc
add dword [rsp + 0x56], 0x5009476
add dword [rsp + 0x56], 0x33fb5db1
sub dword [rsp + 0x56], 0x40950e88
xor dword [rsp + 0x56], 0x6a88bb87
add dword [rsp + 0x56], 0x8d79dd66
mov word [rsp + 0x3e], 0x4a58
sub word [rsp + 0x3e], 0x1717
sub word [rsp + 0x3e], 0x398
xor word [rsp + 0x3e], 0x5e06
xor word [rsp + 0x3e], 0x49f3
xor word [rsp + 0x3e], 0xceaa
mov dword [rsp + 0x5a], 0x684028c2
sub dword [rsp + 0x5a], 0x1f7e4c59
xor dword [rsp + 0x5a], 0x37bcdcc6
xor dword [rsp + 0x5a], 0x2dd95105
sub dword [rsp + 0x5a], 0x80d076
xor dword [rsp + 0x5a], 0x4b6930d0
add dword [rsp + 0x5a], 0x4b295bbc
add dword [rsp + 0x5a], 0x9afbf1de
mov byte [rsp + 0x40], 0x10
add byte [rsp + 0x40], 1
xor byte [rsp + 0x40], 0x19
xor byte [rsp + 0x40], 0x43
sub byte [rsp + 0x40], 0x45
add byte [rsp + 0x40], 0x6f
add byte [rsp + 0x40], 0x81
mov dword [rsp + 0x5e], 0x4cbed34d
add dword [rsp + 0x5e], 0x32e99375
sub dword [rsp + 0x5e], 0x2242a71
sub dword [rsp + 0x5e], 0x14ae967b
sub dword [rsp + 0x5e], 0x4204917a
sub dword [rsp + 0x5e], 0x4252cfd
add dword [rsp + 0x5e], 0x148c657
sub dword [rsp + 0x5e], 0x23f3ae48
nop
movzx eax, word [rsp + rdx*2 + 0x42]
movzx ecx, byte [rsp + rdx + 0x32]
add cx, ax
mov word [rsp + rdx*2 + 0x42], cx
mov byte [rsp + rdx + 0x32], bl
inc rdx
cmp rdx, 0xf
jb 0x14019bef8
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x70]
call fcn.140086fd0
xchg rbp, rbx
mov rax, rbp
xchg rbp, rbx
mov byte [rsp + rax + 0x42], bl
inc rax
cmp rax, 0x1e
jb 0x14019bf33
mov dword [rsp + 0x20], 0x15b6d282
add dword [rsp + 0x20], 0x168fd602
add dword [rsp + 0x20], 0x380e7566
add dword [rsp + 0x20], 0x1b99a026
sub dword [rsp + 0x20], 0x3265bd30
add dword [rsp + 0x20], 0x27240549
sub dword [rsp + 0x20], 0x2cb130ad
add dword [rsp + 0x20], 0xaefb217a
xchg rbx, r9
mov rax, r9
xchg r9, rbx
mov dword [rsp + 0x26], 0x5bac340f
sub dword [rsp + 0x26], 0x3d548dec
add dword [rsp + 0x26], 0x5c4872d2
sub dword [rsp + 0x26], 0x9bb9fd
sub dword [rsp + 0x26], 0x76670260
add dword [rsp + 0x26], 0x1d9feb60
add dword [rsp + 0x26], 0xde3fb757
mov dword [rsp + 0x2a], 0x5e504927
xor dword [rsp + 0x2a], 0x70e57c5c
add dword [rsp + 0x2a], 0x451a9602
sub dword [rsp + 0x2a], 0x3ec10302
xor dword [rsp + 0x2a], 0x8337082
add dword [rsp + 0x2a], 0xc23c4683
mov byte [rsp + 0x24], 0x45
sub byte [rsp + 0x24], 0x41
add byte [rsp + 0x24], 0x45
add byte [rsp + 0x24], 0x2e
xor byte [rsp + 0x24], 0x21
xor byte [rsp + 0x24], 0x7d
add byte [rsp + 0x24], 0xcb
mov dword [rsp + 0x2e], 0x33c2eef5
add dword [rsp + 0x2e], 0x41614307
sub dword [rsp + 0x2e], 0x2d68d56c
xor dword [rsp + 0x2e], 0x5052d3cd
xor dword [rsp + 0x2e], 0x16e60d69
add dword [rsp + 0x2e], 0x3d00190e
sub dword [rsp + 0x2e], 0xc9bd688
xor dword [rsp + 0x2e], 0x1139f3b8
xor dword [rsp + 0x2e], 0x204ac87e
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x26]
movzx edx, byte [rsp + rax + 0x20]
add dx, cx
mov word [rsp + rax*2 + 0x26], dx
mov byte [rsp + rax + 0x20], bl
inc rax
cmp rax, 5
jb 0x14019c06a
mov r9d, 0x686a5a9d
sub r9d, 0x65d46802
xor r9d, 0x658b5758
sub r9d, 0x4180990c
add r9d, 0x4ddea4a1
sub r9d, 0x737cb148
lea r8, [rsp + 0x26]
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop word [rax + rax]
mov byte [rsp + rbx + 0x26], 0x4e
sub byte [rsp + rbx + 0x26], 0xf
xor byte [rsp + rbx + 0x26], 6
add byte [rsp + rbx + 0x26], 0x42
sub byte [rsp + rbx + 0x26], 0x4f
sub byte [rsp + rbx + 0x26], 0xd
xor byte [rsp + rbx + 0x26], 0x1f
inc rbx
cmp rbx, 0xa
jb 0x14019c0d1
mov ecx, 0x4de53453
sub ecx, 0x3d829085
add ecx, 0x496d266b
sub ecx, 0x195a8dff
add ecx, 0x208286ab
xor ecx, 0x2a65aedd
add ecx, 0xb56d93c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3