Function at 0x14019bf40
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
xchg rcx, rsi
mov qword [rsp + 0x10], rcx
xchg rsi, rcx
xchg rdi, r14
mov qword [rsp + 0x18], r14
xchg r14, rdi
push rbp
lea rbp, [rsp - 0x980]
sub rsp, 0xa80
xchg rcx, r9
mov rbx, r9
xchg rcx, r9
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x6d8f955c
sub r8d, 0x1030dc9f
sub r8d, 0x14e2ae9f
xor r8d, 0xf1e18c5
add r8d, 0x7454b70
xor r8d, 0x4ea75443
call sub.VCRUNTIME140.dll_memset
xchg rcx, r8
mov rcx, qword [rbx]
xchg rcx, r8
xor ebx, ebx
mov edx, ebx
mov dword [rsp + 0x32], 0x16035117
xor dword [rsp + 0x32], 0x18d10a78
xor dword [rsp + 0x32], 0x1945697e
xor dword [rsp + 0x32], 0x5475ef01
xor dword [rsp + 0x32], 0x216e5919
sub dword [rsp + 0x32], 0x25217ee2
add dword [rsp + 0x32], 0x2091516b
xor dword [rsp + 0x32], 0xab0aa064
mov dword [rsp + 0x42], 0x7d5b981e
sub dword [rsp + 0x42], 0x50538fb6
sub dword [rsp + 0x42], 0x2b8d4171
add dword [rsp + 0x42], 0x742b790b
xor dword [rsp + 0x42], 0x564dbbce
xor dword [rsp + 0x42], 0x1a8989a0
add dword [rsp + 0x42], 0x16b1cb97
xor dword [rsp + 0x42], 0x26dafc9f
add dword [rsp + 0x42], 0x88af3c93
mov dword [rsp + 0x46], 0x35ca251c
add dword [rsp + 0x46], 0x43d14264
sub dword [rsp + 0x46], 0x7a8b17a
sub dword [rsp + 0x46], 0x703b5949
add dword [rsp + 0x46], 0x6c34f5aa
add dword [rsp + 0x46], 0x9187acc3
mov dword [rsp + 0x36], 0x4359bb47
xor dword [rsp + 0x36], 0xcb30cbc
add dword [rsp + 0x36], 0x21323714
sub dword [rsp + 0x36], 0x23a6922b
add dword [rsp + 0x36], 0x876d6bd
sub dword [rsp + 0x36], 0x3d5f22bc
xor dword [rsp + 0x36], 0xee78e613
mov dword [rsp + 0x4a], 0x2c31b70a
add dword [rsp + 0x4a], 0x47786bc2
sub dword [rsp + 0x4a], 0x38df585d
xor dword [rsp + 0x4a], 0x1a33cf3f
add dword [rsp + 0x4a], 0x13320945
xor dword [rsp + 0x4a], 0x4a8a0809
sub dword [rsp + 0x4a], 0x5b867977
xor dword [rsp + 0x4a], 0x5d2ed382
xor dword [rsp + 0x4a], 0x811ea1da
mov dword [rsp + 0x4e], 0x596bcbe4
sub dword [rsp + 0x4e], 0x4c83db2b
add dword [rsp + 0x4e], 0x28291653
add dword [rsp + 0x4e], 0xc514d58
xor dword [rsp + 0x4e], 0x4567939f
add dword [rsp + 0x4e], 0x20ccfbde
add dword [rsp + 0x4e], 0xdaa73b94
mov dword [rsp + 0x3a], 0x482632ac
add dword [rsp + 0x3a], 0x175966eb
sub dword [rsp + 0x3a], 0x57d7db8b
add dword [rsp + 0x3a], 0x819edee
xor dword [rsp + 0x3a], 0x7dc45e2b
sub dword [rsp + 0x3a], 0x4a80d594
xor dword [rsp + 0x3a], 0x505d817c
add dword [rsp + 0x3a], 0x7f1e55b5
mov dword [rsp + 0x52], 0x18d34c4f
add dword [rsp + 0x52], 0x342fa9b1
sub dword [rsp + 0x52], 0x4903a9ce
add dword [rsp + 0x52], 0x4c9245b4
xor dword [rsp + 0x52], 0x4839284b
add dword [rsp + 0x52], 0x414dcc68
add dword [rsp + 0x52], 0xa5867967
mov dword [rsp + 0x56], 0x3d62eb8c
add dword [rsp + 0x56], 0x20c12ec5
sub dword [rsp + 0x56], 0x10434aa9
add dword [rsp + 0x56], 0x1ae984e8
sub dword [rsp + 0x56], 0x581e3b4b
add dword [rsp + 0x56], 0xeecee63a
mov word [rsp + 0x3e], 0x482b
xor word [rsp + 0x3e], 0x45fb
add word [rsp + 0x3e], 0x61cf
sub word [rsp + 0x3e], 0x39ee
sub word [rsp + 0x3e], 0x791
xor word [rsp + 0x3e], 0xd8d6
mov dword [rsp + 0x5a], 0x2e57c9c5
add dword [rsp + 0x5a], 0x478da273
sub dword [rsp + 0x5a], 0x5d294098
add dword [rsp + 0x5a], 0x285d3a9e
add dword [rsp + 0x5a], 0x23ee678f
sub dword [rsp + 0x5a], 0x33c81475
sub dword [rsp + 0x5a], 0xabc97b2
xor dword [rsp + 0x5a], 0xd9ecded8
mov byte [rsp + 0x40], 0x2b
xor byte [rsp + 0x40], 0x6f
xor byte [rsp + 0x40], 0x3d
xor byte [rsp + 0x40], 0x32
xor byte [rsp + 0x40], 0x62
xor byte [rsp + 0x40], 9
add byte [rsp + 0x40], 0x44
add byte [rsp + 0x40], 0x13
add byte [rsp + 0x40], 0x7f
mov dword [rsp + 0x5e], 0x3f88bf0b
sub dword [rsp + 0x5e], 0x3674a8a6
add dword [rsp + 0x5e], 0x62221655
add dword [rsp + 0x5e], 0x54b8433
xor dword [rsp + 0x5e], 0x2b77192b
sub dword [rsp + 0x5e], 0x5bef2c7d
add dword [rsp + 0x5e], 0x28bab7bb
sub dword [rsp + 0x5e], 0x28c13596
nop
movzx eax, word [rsp + rdx*2 + 0x42]
movzx ecx, byte [rsp + rdx + 0x32]
add cx, ax
mov word [rsp + rdx*2 + 0x42], cx
mov byte [rsp + rdx + 0x32], bl
inc rdx
cmp rdx, 0xf
jb 0x14019c2a6
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x70]
call fcn.140086c20
xchg rsi, rax
mov rsi, rbx
xchg rsi, rax
mov byte [rsp + rax + 0x42], bl
inc rax
cmp rax, 0x1e
jb 0x14019c2df
mov dword [rsp + 0x20], 0x3113dd69
xor dword [rsp + 0x20], 0x3fbcdd1c
xor dword [rsp + 0x20], 0x64f9bad7
sub dword [rsp + 0x20], 0x1a1b3cd0
add dword [rsp + 0x20], 0x21a5d49d
sub dword [rsp + 0x20], 0x573391fd
add dword [rsp + 0x20], 0xdc493684
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
mov dword [rsp + 0x26], 0x22094172
add dword [rsp + 0x26], 0x1874cb6e
sub dword [rsp + 0x26], 0x3773276d
add dword [rsp + 0x26], 0x56e879be
sub dword [rsp + 0x26], 0x428fd9d2
add dword [rsp + 0x26], 0xe81979f0
mov dword [rsp + 0x2a], 0x4cc13de
add dword [rsp + 0x2a], 0x3e628507
add dword [rsp + 0x2a], 0xd88e010
add dword [rsp + 0x2a], 0x2b5d6bf2
sub dword [rsp + 0x2a], 0x2b2aa716
add dword [rsp + 0x2a], 0xae8fc1ab
mov byte [rsp + 0x24], 8
xor byte [rsp + 0x24], 0x10
add byte [rsp + 0x24], 0x16
sub byte [rsp + 0x24], 0x2d
add byte [rsp + 0x24], 0x40
xor byte [rsp + 0x24], 0x71
xor byte [rsp + 0x24], 6
add byte [rsp + 0x24], 0xc0
mov dword [rsp + 0x2e], 0x9ecc965
sub dword [rsp + 0x2e], 0x83fc9a7
add dword [rsp + 0x2e], 0x60e6306b
add dword [rsp + 0x2e], 0x1745719a
sub dword [rsp + 0x2e], 0x5c2dd11c
add dword [rsp + 0x2e], 0x53b45e3e
sub dword [rsp + 0x2e], 0x715e2f69
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x26]
movzx edx, byte [rsp + rax + 0x20]
add dx, cx
mov word [rsp + rax*2 + 0x26], dx
mov byte [rsp + rax + 0x20], bl
inc rax
cmp rax, 5
jb 0x14019c3f9
mov r9d, 0x57b35287
xor r9d, 0x53dad08a
add r9d, 0x159815a9
add r9d, 0x17598f92
add r9d, 0x1d0651b6
xor r9d, 0x232b7e4b
sub r9d, 0x6d4a06a5
lea r8, [rsp + 0x26]
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop word [rax + rax]
mov byte [rsp + rbx + 0x26], 0x41
xor byte [rsp + rbx + 0x26], 0x3a
xor byte [rsp + rbx + 0x26], 0x44
xor byte [rsp + rbx + 0x26], 0x47
xor byte [rsp + rbx + 0x26], 0x3f
sub byte [rsp + rbx + 0x26], 0x47
inc rbx
cmp rbx, 0xa
jb 0x14019c467
mov ecx, 0x782fab67
sub ecx, 0x223b8577
add ecx, 0x1145adde
sub ecx, 0x38c7215c
xor ecx, 0x4b834a12
add ecx, 0x9a0e079f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3