Function at 0x14000bd60
Capabilities:
Create thread
Encode data using xor
Execute command

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
mov rbp, rsp
sub rsp, 0x80
xor edx, edx
mov cl, 0x63
call fcn.140001e60
mov edx, 1
mov byte [rbp + 0x30], al
mov cl, 0x6c
movzx ebx, al
call fcn.140001e60
mov edx, 2
mov byte [rbp + 0x31], al
mov cl, 0x73
movzx edi, al
call fcn.140001e60
movzx esi, al
mov byte [rbp + 0x32], al
xor eax, eax
xor r14d, r14d
mov byte [rbp + 0x33], al
mov r8d, r14d
nop
movsxd rcx, r8d
lea rdx, [rbp + 0x30]
add rdx, rcx
lea ecx, [r8 + 0x13]
inc r8d
xor byte [rdx], cl
cmp r8d, 3
jb 0x14000bdb0
lea rcx, [rbp + 0x30]
mov byte [rbp + 0x33], al
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x140009a50]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
cmp byte [0x140106b60], r14b
jne 0x14000c0c8
mov qword [rsp + 0x78], r12
xor edx, edx
mov qword [rsp + 0x70], r13
mov cl, 0xa
mov qword [rsp + 0x68], r15
call fcn.140001e60
mov edx, 1
mov cl, 0x20
movzx r14d, al
call fcn.140001e60
mov edx, 2
mov cl, 0x5b
movzx r15d, al
call fcn.140001e60
mov edx, 3
mov cl, 0x21
movzx r12d, al
call fcn.140001e60
mov edx, 4
mov cl, 0x5d
movzx r13d, al
call fcn.140001e60
mov edx, 5
mov byte [rbp - 0x47], al
mov cl, 0x20
movzx r8d, al
call fcn.140001e60
mov edx, 6
mov byte [rbp - 0x46], al
mov cl, 0x41
movzx r9d, al
call fcn.140001e60
mov edx, 7
mov byte [rbp - 0x45], al
mov cl, 0x77
movzx r10d, al
call fcn.140001e60
mov edx, 8
mov byte [rbp - 0x44], al
mov cl, 0x61
movzx r11d, al
call fcn.140001e60
mov edx, 9
mov byte [rbp + 0x30], al
mov cl, 0x69
call fcn.140001e60
mov edx, 0xa
mov byte [rbp + 0x38], al
mov cl, 0x74
call fcn.140001e60
mov edx, 0xb
mov byte [rbp + 0x40], al
mov cl, 0x69
call fcn.140001e60
mov edx, 0xc
mov byte [rbp + 0x48], al
mov cl, 0x6e
call fcn.140001e60
mov edx, 0xd
mov byte [rbp - 0x50], al
mov cl, 0x67
call fcn.140001e60
mov edx, 0xe
mov byte [rbp - 0x4f], al
mov cl, 0x20
call fcn.140001e60
mov edx, 0xf
mov byte [rbp - 0x4e], al
mov cl, 0x56
call fcn.140001e60
mov edx, 0x10
mov byte [rbp - 0x4d], al
mov cl, 0x52
call fcn.140001e60
mov edx, 0x11
mov byte [rbp - 0x4c], al
mov cl, 0x43
call fcn.140001e60
mov byte [rbp - 0x4b], al
mov edx, 0x12
mov cl, 0x68
call fcn.140001e60
mov edx, 0x13
mov byte [rbp - 0x4a], al
mov cl, 0x61
call fcn.140001e60
mov edx, 0x14
mov byte [rbp - 0x49], al
mov cl, 0x74
call fcn.140001e60
mov edx, 0x15
mov byte [rbp - 0x48], al
mov cl, 0x20
call fcn.140001e60
movzx ecx, al
mov byte [rbp - 0x43], al
nop
movzx eax, byte [rbp + 0x30]
mov byte [rbp - 0x36], al
movzx eax, byte [rbp + 0x38]
mov byte [rbp - 0x35], al
movzx eax, byte [rbp + 0x40]
mov byte [rbp - 0x34], al
movzx eax, byte [rbp + 0x48]
mov byte [rbp - 0x33], al
movzx eax, byte [rbp - 0x50]
mov byte [rbp - 0x32], al
movzx eax, byte [rbp - 0x4f]
mov byte [rbp - 0x31], al
movzx eax, byte [rbp - 0x4e]
mov byte [rbp - 0x30], al
movzx eax, byte [rbp - 0x4d]
mov byte [rbp - 0x2f], al
movzx eax, byte [rbp - 0x4c]
mov byte [rbp - 0x2e], al
movzx eax, byte [rbp - 0x4b]
mov byte [rbp - 0x2d], al
movzx eax, byte [rbp - 0x4a]
mov byte [rbp - 0x2c], al
movzx eax, byte [rbp - 0x49]
mov byte [rbp - 0x2b], al
movzx eax, byte [rbp - 0x48]
mov byte [rbp - 0x2a], al
xor eax, eax
mov byte [rbp - 0x3a], r8b
xor r8d, r8d
mov byte [rbp - 0x28], al
mov byte [rbp - 0x3e], r14b
mov byte [rbp - 0x3d], r15b
mov byte [rbp - 0x3c], r12b
mov byte [rbp - 0x3b], r13b
mov byte [rbp - 0x39], r9b
mov byte [rbp - 0x38], r10b
mov byte [rbp - 0x37], r11b
mov byte [rbp - 0x29], cl
nop word [rax + rax]
movsxd rax, r8d
lea rdx, [rbp - 0x3e]
add rdx, rax
lea eax, [r8 + 0x13]
inc r8d
xor byte [rdx], al
cmp r8d, 0x16
jb 0x14000c000
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x3e]
mov byte [rbp - 0x28], 0
call fcn.14000d610
mov rcx, rax
call fcn.14000d7e0
lea rdx, [0x14000d9a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.14000bb90
mov ecx, 0x96
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
mov byte [rbp - 0x42], bl
mov byte [rbp - 0x3f], al
mov byte [rbp - 0x41], dil
mov byte [rbp - 0x40], sil
nop word [rax + rax]
movsxd rcx, eax
lea rdx, [rbp - 0x42]
add rdx, rcx
lea ecx, [rax + 0x13]
inc eax
xor byte [rdx], cl
cmp eax, 3
jb 0x14000c070
lea rcx, [rbp - 0x42]
mov byte [rbp - 0x3f], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp byte [0x140106b60], 0
movzx r8d, byte [rbp - 0x47]
movzx r9d, byte [rbp - 0x46]
movzx r10d, byte [rbp - 0x45]
movzx r11d, byte [rbp - 0x44]
movzx ecx, byte [rbp - 0x43]
je 0x14000bf70
mov r15, qword [rsp + 0x68]
mov r13, qword [rsp + 0x70]
mov r12, qword [rsp + 0x78]
add rsp, 0x80
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret