Function at 0x140001dc0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r15
sub rsp, 0x1b0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x160], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xc0], xmm0
lea r12, [rsp + 0x1c8]
movabs r15, 0xff00ff00ff00ff00
mov qword [rbp + 0xc8], r15
mov qword [rbp + 0xd0], r12
mov rdi, qword [r12]
xor rdi, r15
mov qword [rbp + 0xc0], rdi
mov qword [r12], rax
lea rdx, str.Do_you_want_to_load___y_n_:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400024f0
lea rdx, [rbp]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t___std::wcin]
call fcn.1400026d0
movzx eax, word [rbp]
sub ax, 0x59
mov ecx, 0xffdf
test cx, ax
je 0x140001e90
lea rdx, str.Loading_canceled.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400024f0
lea rdx, [0x140002800]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x1400024ba
call fcn.1400016e0
cmp al, 1
jne 0x14000200f
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
lea rcx, [rsp + 0x1c8]
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xb8], rcx
mov rax, qword [rcx]
xor rax, r15
mov qword [rbp + 0xa8], rax
mov qword [rcx], 0
xor ecx, ecx
lea rsi, [0x1400027a0]
lea rbx, [0x140000000]
mov rax, qword [0x140006980]
test rax, rax
je 0x140001f17
nop dword [rax]
cmp rax, rsi
je 0x140001f06
inc ecx
mov rax, qword [rbx + rcx*8 + 0x6980]
test rax, rax
jne 0x140001ef0
jmp 0x140001f17
mov r8, qword [rbx + rcx*8 + 0x6cb0]
test r8, r8
jne 0x140001fff
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x140001fde
mov rax, rsi
mov rcx, r8
mov edx, 3
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140001f50
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140006ca8]
mov qword [rbx + rax*8 + 0x6980], rsi
mov qword [rbx + rax*8 + 0x6cb0], r8
inc rax
mov qword [0x140006ca8], rax
lea rcx, [0x140001b50]
call r8
nop
jmp 0x1400024ba
movabs rax, 0x97cf845785f3b869
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x20], rax
movabs rax, 0x7b3f7be1d77a352c
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x28], rax
movabs rax, 0x25b1d68b3290a9fa
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x30], rax
movabs rax, 0x1e1ddf5e949af00a
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x38], rax
movabs rax, 0x677f3f0656ba3f43
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x40], rax
movabs rax, 0x785b491155786ecc
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x48], rax
movabs rax, 0x3bbea286d8651ee7
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x50], rax
movabs rax, 0x6df18afa2b82b253
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x58], rax
movabs rax, 0x76fb052fa2f0e146
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x60], rax
movabs rax, 0xc0587b710f643e50
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x68], rax
movabs rax, 0xba1a5eec258afbea
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x70], rax
movabs rax, 0xb404216a6ecb0154
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x78], rax
movabs rax, 0x37b1ecdf44bd4e84
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x80], rax
movabs rcx, 0x78df040a74a257e2
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x88], rax
movabs rax, 0x97bf84238587b801
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe0], rax
movabs rax, 0x7b0e7bced7553516
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe8], rax
movabs rax, 0x2583d6a532a3a9c3
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xf0], rax
movabs rax, 0x1e24df7094a8f038
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xf8], rax
movabs rax, 0x674b3f3756943f75
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
movabs rax, 0x786b492255426efa
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
movabs rax, 0x3bdaa2a9d8541ed7
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
movabs rax, 0x6d9d8a942bf5b23c
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movabs rax, 0x76d4054ba291e129
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
movabs rax, 0xc03f7b160f013e3e
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movabs rax, 0xba6e5e8d25fdfb8b
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
movabs rax, 0xb43021586ee50120
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movabs rax, 0x37b1ecdf44904ebd
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
lea rax, [rbp + 0x20]
mov qword [rbp + 0xa0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
lea rcx, [rsp + 0x1c8]
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xb8], rcx
mov rax, qword [rcx]
xor rax, r15
mov qword [rbp + 0xa8], rax
mov qword [rcx], 0
xor ecx, ecx
lea rbx, [0x140000000]
lea rdi, [0x1400027d0]
mov rax, qword [0x140006fd0]
test rax, rax
je 0x1400023c7
nop dword [rax]
cmp rax, rdi
je 0x1400023b6
inc ecx
mov rax, qword [rbx + rcx*8 + 0x6fd0]
test rax, rax
jne 0x1400023a0
jmp 0x1400023c7
mov r8, qword [rbx + rcx*8 + 0x6660]
test r8, r8
jne 0x1400024a1
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x140002480
mov rcx, rdi
mov edx, 3
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x1400023f2
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
mov ecx, dword [rcx + 0x70]
mov dword [rax + 0x70], ecx
mov rax, qword [0x140006ca0]
mov qword [rbx + rax*8 + 0x6fd0], rdi
mov qword [rbx + rax*8 + 0x6660], r8
inc rax
mov qword [0x140006ca0], rax
lea rdx, [rbp + 0xa0]
lea rcx, [0x140001090]
call r8
nop
mov rdi, qword [rbp + 0xc0]
xor rdi, r15
mov qword [r12], rdi
xor eax, eax
mov rcx, qword [rbp + 0x160]
xor rcx, rsp
call fcn.1400028f0
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r12
pop rbp
ret