Function at 0x140105120
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 8], rcx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov rbx, rcx
lea r13, [rsp + 0x78]
movabs r12, 0xff00ff00ff00ff07
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x30], r13
mov rdi, qword [r13]
xor rdi, r12
mov qword [rsp + 0x20], rdi
mov qword [r13], 0
lea rcx, [rsp + 0x78]
call fcn.140075e00
mov rcx, qword [rsp + 0x78]
call fcn.140075e00
lea rcx, [0x14029ae08]
cmp rcx, rbx
je 0x1401051a2
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140105199
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
call fcn.14006f470
lea rax, [rsp + 0x78]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], rax
mov rsi, qword [rax]
xor rsi, r12
mov qword [rsp + 0x38], rsi
mov qword [rax], 0
xor ecx, ecx
lea r15, [0x1400bff50]
lea r14, [0x140000000]
mov rax, qword [0x1402f4d80]
test rax, rax
je 0x14010520a
xor edx, edx
cmp rax, r15
je 0x1401051f9
inc ecx
mov edx, ecx
mov rax, qword [r14 + rcx*8 + 0x2f4d80]
test rax, rax
jne 0x1401051e1
jmp 0x14010520a
mov r8, qword [r14 + rdx*8 + 0x2f50a0]
test r8, r8
jne 0x14010530d
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x1401052ec
mov rax, r15
mov rcx, r8
mov edx, 3
nop dword [rax + rax]
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
vmovups xmm1, xmmword [rax + 0x70]
vmovups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140105240
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402f4d70]
mov qword [r14 + rax*8 + 0x2f4d80], r15
mov qword [r14 + rax*8 + 0x2f50a0], r8
inc rax
mov qword [0x1402f4d70], rax
lea rcx, [0x140104a40]
call r8
nop
xor rsi, r12
lea rax, [rsp + 0x78]
mov qword [rax], rsi
lea rcx, [rsp + 0x78]
call fcn.140075ea0
mov rcx, qword [rsp + 0x78]
call fcn.140075ea0
nop
xor rdi, r12
mov qword [r13], rdi
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140105375
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x140105370
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401053a2
mov rcx, r8
call fcn.14019ebcc
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3