Function at 0x14000ab30
Capabilities:
Delete file
Encode data using xor
Execute command
Terminate process

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rdi
push r14
sub rsp, 0x80
mov qword [rsp + 0xb0], rsi
movzx esi, cl
mov byte [0x14010bf30], 0
mov byte [0x14010bf31], 0
call fcn.140017780
call fcn.140018620
call fcn.140060710
lea rcx, [0x14010c1d0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rcx, [0x14010c0c0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [str.ZVH_]
mov ebp, 5
mov edi, dword [reloc.WS2_32.dll_accept]
xor ebx, ebx
cmp byte [reloc.WLDAP32.dll_Ordinal_60], bl
mov dword [rsp + 0xa0], eax
lea r14d, [rbp + 0x1a]
je 0x14000ac86
cmp edi, 2
jl 0x14000ac41
movdqa xmm3, xmmword [0x1400f7330]
movdqa xmm2, xmm3
movdqa xmm0, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400f7540]
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400f7540]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
movd xmm0, ebp
psrad xmm2, xmm0
movd xmm0, r14d
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400f73d0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400f7470]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400f74b0]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rsp + 0xa0], xmm2
jmp 0x14000ac86
lea r9, [rsp + 0xa0]
mov r8d, ebx
nop dword [rax]
mov eax, 0x8fb823ef
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x39
add cl, r8b
inc r8d
xor byte [r9 - 1], cl
cmp r8d, 4
jl 0x14000ac50
lea rcx, [rsp + 0xa0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
test sil, sil
mov rsi, qword [rsp + 0xb0]
jne 0x14000aead
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x30]
call fcn.14000aec0
mov r9, rax
cmp byte [rax + 0x1d], bl
je 0x14000ae71
cmp edi, 2
jl 0x14000ae38
movdqa xmm0, xmmword [0x1400f74b0]
mov rcx, rax
movdqa xmm5, xmmword [0x1400f7330]
movdqa xmm4, xmmword [0x1400f7540]
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm7
movdqa xmm7, xmmword [0x1400f73d0]
movdqa xmmword [rsp + 0x20], xmm0
mov edx, dword [rsp + 0x20]
movaps xmmword [rsp + 0x50], xmm8
movd xmm6, ebp
movd xmm8, r14d
nop dword [rax]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add ebx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400f7470]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400f7470]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
cmp ebx, 0x18
jl 0x14000ad20
movaps xmm8, xmmword [rsp + 0x50]
movaps xmm7, xmmword [rsp + 0x60]
movaps xmm6, xmmword [rsp + 0x70]
cmp ebx, 0x1e
jge 0x14000ae71
movsxd r8, ebx
add r8, r9
nop
mov eax, 0x8fb823ef
lea r8, [r8 + 1]
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul edx, eax, 0x39
add dl, bl
inc ebx
xor byte [r8 - 1], dl
cmp ebx, 0x1e
jl 0x14000ae40
mov rdx, r9
mov rcx, r10
call fcn.14000b490
lea rdx, [rsp + 0xa0]
mov dword [rsp + 0xa0], 0x7d0
lea rcx, [rsp + 0xa8]
call fcn.14000b2f0
mov rcx, rax
call fcn.14000b300
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14000f850
int3