Function at 0x14003c810
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rax, qword [0x140057010]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rdi, rcx
mov qword [rbp - 0x41], rcx
xor r14d, r14d
mov rcx, qword [0x140057890]
lea rsi, [rbp + 0x5f]
movabs rbx, 0x7a5db90d33787107
mov qword [rbp - 0x19], rbx
mov qword [rbp - 0x11], rsi
mov r13, qword [rsi]
xor r13, rbx
mov qword [rbp - 0x41], r13
mov qword [rbp - 0x21], r13
mov qword [rsi], r14
add rcx, 0xae8
call fcn.140044ab0
mov r15, rax
lea rcx, [rax + 0x10]
call fcn.140044bc0
movsxd r12, eax
test eax, eax
jg 0x14003c8e4
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 0xf
mov byte [rdi], r14b
xor r13, rbx
mov qword [rsi], r13
mov rax, rdi
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400455d0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov eax, 2
mul r12
mov rsi, 0xffffffffffffffff
cmovo rax, rsi
mov rcx, rax
call fcn.140045c38
mov qword [rbp - 0x49], rax
lea rcx, [r15 + 8]
call fcn.140044ab0
lea rcx, [r12 + r12]
mov qword [rbp - 0x31], rcx
mov qword [rbp - 0x29], rax
lea rax, [rbp + 0x5f]
movabs rcx, 0x7a5db90d33787107
mov qword [rbp - 1], rcx
mov qword [rbp + 7], rax
mov rbx, qword [rax]
xor rbx, rcx
mov qword [rbp - 9], rbx
mov qword [rax], r14
mov ecx, r14d
lea rdx, [0x140045110]
lea r15, [0x140000000]
mov rax, qword [0x14005b860]
test rax, rax
je 0x14003c981
cmp rax, rdx
je 0x14003c96e
inc ecx
mov rax, qword [r15 + rcx*8 + 0x5b860]
test rax, rax
jne 0x14003c958
jmp 0x14003c981
mov eax, ecx
mov r10, qword [r15 + rax*8 + 0x62680]
test r10, r10
jne 0x14003ca6f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10, rax
lea r8, [0x140045110]
test rax, rax
jne 0x14003c9af
mov r10, r14
jmp 0x14003ca4e
mov rax, r8
mov rcx, r10
mov edx, 3
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14003c9c0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14005c800]
mov qword [r15 + rax*8 + 0x5b860], r8
mov qword [r15 + rax*8 + 0x62680], r10
inc rax
mov qword [0x14005c800], rax
lea r9, [rbp - 0x31]
lea r8, [rbp - 0x49]
lea rdx, [rbp - 0x29]
lea rcx, [fcn.140038500]
call r10
nop
movabs rax, 0x7a5db90d33787107
xor rbx, rax
lea rax, [rbp + 0x5f]
mov qword [rax], rbx
lea eax, [r12 - 1]
mov r8d, r14d
mov rcx, qword [rbp - 0x49]
movsx edx, al
and edx, 3
lea eax, [r12 - 1]
cmp r8d, eax
jge 0x14003cacc
add edx, 3
inc r8d
movzx eax, dx
and ax, 7
add word [rcx], ax
add rcx, 2
jmp 0x14003caac
mov r12, qword [rbp - 0x49]
xorps xmm0, xmm0
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp + 0x1f], r14
mov qword [rbp + 0x27], r14
nop
inc rsi
cmp word [r12 + rsi*2], 0
jne 0x14003cae0
movabs rbx, 0x7ffffffffffffffe
cmp rsi, rbx
ja 0x14003cd5b
movabs r15, 0x7fffffffffffffff
mov qword [rbp + 0x27], 7
cmp rsi, 8
jae 0x14003cb38
mov qword [rbp + 0x1f], rsi
lea rbx, [rsi + rsi]
mov r8, rbx
mov rdx, r12
lea rcx, [rbp + 0xf]
call sub.VCRUNTIME140.dll_memcpy
mov word [rbp + rbx + 0xf], r14w
jmp 0x14003cbd7
mov rax, rsi
or rax, 7
cmp rax, rbx
jbe 0x14003cb4a
lea rcx, [r15 + r15]
jmp 0x14003cb72
mov rbx, rax
mov ecx, 0xa
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, r15
ja 0x14003cd55
add rcx, rcx
cmp rcx, 0x1000
jb 0x14003cb9e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003cd55
mov rcx, rax
call fcn.140045bfc
test rax, rax
je 0x14003cd23
lea r13, [rax + 0x27]
and r13, 0xffffffffffffffe0
mov qword [r13 - 8], rax
jmp 0x14003cbb0
test rcx, rcx
je 0x14003cbad
call fcn.140045bfc
mov r13, rax
jmp 0x14003cbb0
mov r13, r14
mov qword [rbp + 0xf], r13
mov qword [rbp + 0x1f], rsi
mov qword [rbp + 0x27], rbx
lea rbx, [rsi + rsi]
mov r8, rbx
mov rdx, r12
mov rcx, r13
call sub.VCRUNTIME140.dll_memcpy
mov word [rbx + r13], r14w
mov r13, qword [rbp - 0x41]
lea r8, [rbp + 0xf]
mov rcx, qword [rbp + 0xf]
mov rdx, qword [rbp + 0x27]
mov rax, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x14003cbf6
lea rbx, [rcx + rax*2]
mov rsi, rcx
jmp 0x14003cbfe
lea rbx, [r8 + rax*2]
lea rsi, [rbp + 0xf]
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 0xf
cmp rsi, rbx
jne 0x14003cc1d
mov byte [rdi], 0
jmp 0x14003ccf4
mov rax, rbx
sub rax, rsi
sar rax, 1
cmp rax, r15
ja 0x14003cd49
cmp rax, 0x10
jb 0x14003ccb0
or rax, 0xf
cmp rax, r15
jbe 0x14003cc67
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140045bfc
test rax, rax
je 0x14003cc92
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14003cca6
mov r15, rax
mov ecx, 0x16
cmp rax, rcx
cmovb r15, rcx
lea rcx, [r15 + 1]
cmp rcx, 0x1000
jb 0x14003cc99
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003cd4f
jmp 0x14003cc4c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14003cca6
call fcn.140045bfc
mov r14, rax
mov qword [rdi], r14
mov qword [rdi + 0x18], r15
nop dword [rax]
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x14003ccbd
mov rdx, qword [rdi]
movzx ecx, byte [rsi]
mov rax, qword [rdi + 0x10]
mov byte [rdx + rax], cl
mov rax, qword [rdi + 0x10]
inc rax
mov qword [rdi + 0x10], rax
add rsi, 2
cmp rsi, rbx
jne 0x14003ccb0
mov rcx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x14003cce8
mov rcx, qword [rdi]
mov byte [rax + rcx], 0
mov rdx, qword [rbp + 0x27]
mov rcx, qword [rbp + 0xf]
cmp rdx, 8
jb 0x14003cd30
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003cd2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003cd2a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004583c
nop
movabs rax, 0x7a5db90d33787107
xor r13, rax
lea rax, [rbp + 0x5f]
mov qword [rax], r13
jmp 0x14003c8b4
call fcn.140038480
int3
call fcn.1400383e0
nop
call fcn.1400383e0
int3
call fcn.140038480
int3