Function at 0x140039e70
Capabilities:
Create thread
Encode data using xor
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1401e56c8]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor ebx, ebx
lea edx, [rbx + 1]
lea rcx, [0x140039280]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
lea rcx, [fcn.14003a180]
call fcn.14015c074
test eax, eax
jne 0x14003a172
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rdi, 0x989680
jne 0x140039ed7
imul rax, rax, 0x64
jmp 0x140039ef2
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
movabs rcx, 0x7fffffffc46535ff
cmp rax, rcx
jge 0x140039f09
add rax, 0x3b9aca00
jmp 0x140039f13
movabs rax, 0x7fffffffffffffff
mov qword [rbp - 0x50], rax
lea rcx, [rbp - 0x50]
call fcn.140010f20
call fcn.140039ae0
lea rax, [0x14003fbd0]
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov edx, 1
lea rcx, [rbp - 0x40]
call fcn.14003abf0
mov rcx, qword [rbp - 0x40]
mov rax, qword [rbp - 0x50]
mov qword [rcx], rax
lea r8, [rcx + 8]
mov qword [rbp - 0x38], r8
lea rax, [rbp - 0x40]
mov qword [rbp - 0x20], rax
mov rdx, qword [rbp - 0x40]
sub r8, rdx
sar r8, 3
call fcn.140073570
nop
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x140039fbf
mov rax, qword [rbp - 0x30]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039fba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039fba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14015c094
mov ecx, reloc.WS2_32.dll_recv
call fcn.14015be00
lea rcx, [0x1401e575c]
mov qword [rax], rcx
lea rcx, [0x1400731d0]
mov qword [rax + 8], rcx
mov qword [rbp - 0x20], rax
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14003af50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x14003a163
cmp dword [rbp - 0x48], 0
je 0x14003a157
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14003a157
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
mov byte [0x1401ea239], 1
mov eax, dword [str.ZVH_T_UI]
mov dword [rbp - 0x50], eax
cmp byte [reloc.WLDAP32.dll_Ordinal_60], 0
je 0x14003a12c
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14003a0f4
movdqa xmm3, xmmword [0x1401c4b30]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1401c4e10]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1401c4e10]
shufps xmm2, xmm0, 0xdd
mov ecx, 4
movd xmm0, ecx
psrad xmm2, xmm0
mov ecx, Ordinal_35
movd xmm0, ecx
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1401c4bc0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401c4d00]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401c4de0]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp - 0x50], xmm2
jmp 0x14003a12c
lea r8, [rbp - 0x50]
nop dword [rax + rax]
mov eax, 0x4d4873ed
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, bl
sub al, cl
add al, 0x39
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 4
jl 0x14003a100
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.14015bde0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x48], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
movss xmm0, dword [0x1401c48f8]
call fcn.1400cdb40
int3