Function at 0x140002290
Capabilities:
Encode data using xor
Execute command

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x60]
sub rsp, 0x160
movdqa xmm0, xmmword [0x14000a990]
xor ebx, ebx
movdqa xmm1, xmmword [0x14000aa50]
mov ecx, ebx
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm0, xmmword [0x14000aa60]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm1, xmmword [0x14000a900]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm0, xmmword [0x14000a940]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm1, xmmword [0x14000a7c0]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm0, xmmword [0x14000a6a0]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm1, xmmword [0x14000a650]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm0, xmmword [0x14000a610]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm1, xmmword [0x14000a7e0]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm0, xmmword [0x14000a7b0]
movdqa xmmword [rbp], xmm1
movdqa xmm1, xmmword [0x14000a760]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm0, xmmword [str._Q0:_a]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmm1, xmmword [0x14000a860]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x40], xmm1
mov dword [rbp + 0x50], 0xe1e5f8a7
mov dword [rbp + 0x54], 0xe4e1eb
mov byte [rbp + 0x58], 1
nop
lea eax, [rcx - 0x56]
xor byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 0xe7
jb 0x140002370
lea rcx, [rsp + 0x70]
mov byte [rbp + 0x58], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x14000a990]
mov rcx, rbx
movdqa xmm1, xmmword [0x14000aa50]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm0, xmmword [0x14000aa60]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm1, xmmword [0x14000a900]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm0, xmmword [0x14000a950]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm1, xmmword [0x14000a720]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm0, xmmword [0x14000a700]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm1, xmmword [str._x__y]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm0, xmmword [0x14000a790]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm1, xmmword [0x14000a6f0]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm0, xmmword [0x14000a730]
movdqa xmmword [rbp], xmm1
movdqa xmm1, xmmword [0x14000a6e0]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm0, xmmword [0x14000a630]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmm1, xmmword [0x14000aaa0]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x40], xmm1
mov dword [rbp + 0x50], 0xfea1a6aa
mov dword [rbp + 0x54], 0xfff5e3e7
mov word [rbp + 0x58], 0xe6
mov byte [rbp + 0x5a], 1
lea eax, [rcx - 0x56]
xor byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 0xe9
jb 0x140002463
lea rcx, [rsp + 0x70]
mov byte [rbp + 0x5a], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x14000a9d0]
mov rcx, rbx
movdqa xmm1, xmmword [0x14000a800]
movdqa xmmword [rsp + 0x20], xmm0
movdqa xmm0, xmmword [0x14000a8c0]
movdqa xmmword [rsp + 0x30], xmm1
movdqa xmm1, xmmword [0x14000a810]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x60], 0xc0c1cb99
mov dword [rsp + 0x64], 0x949c869d
mov dword [rsp + 0x68], 0x100879c
nop word [rax + rax]
lea eax, [rcx - 0x56]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0x4a
jb 0x1400024e0
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x6b], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x14000aa80]
mov rcx, rbx
movdqa xmm1, xmmword [0x14000a8a0]
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x40], 0x100aeb2
movdqu xmmword [rsp + 0x30], xmm1
nop word [rax + rax]
lea eax, [rcx - 0x56]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0x22
jb 0x140002530
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x43], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x14000aa80]
movdqa xmm1, xmmword [0x14000a880]
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x40], 0xb4bfe5ae
movdqu xmmword [rsp + 0x30], xmm1
mov word [rsp + 0x44], 0xbd
mov byte [rsp + 0x46], 1
nop
lea eax, [rbx - 0x56]
xor byte [rsp + rbx + 0x20], al
inc rbx
cmp rbx, 0x25
jb 0x140002580
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x46], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rbx, qword [rsp + 0x170]
add rsp, 0x160
pop rbp
ret