Function at 0x1801425e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rsi, rdx
mov r14, rcx
call fcn.180065e80
movsxd rdx, eax
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdi, rax
test rax, rax
je 0x180142a34
mov ecx, dword [0x18029b6c0]
mov rax, qword gs:[0x58]
mov edx, 8
mov rbx, qword [rax + rcx*8]
add rbx, rdx
mov eax, dword [rbx]
cmp dword [0x1802a0b88], eax
jle 0x1801426e3
lea rcx, [0x1802a0b88]
call fcn.1801d7540
cmp dword [0x1802a0b88], 0xffffffff
jne 0x1801426e3
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, ntohs
lea rdx, str.ActiveCount
lea rcx, [rbp - 0x20]
call fcn.1800655f0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8d, 0x2d
lea rdx, str._Script_GameplayAbilities.GameplayAbilitySpec
lea rcx, [rbp - 0x40]
call fcn.1800655f0
nop
xor r8d, r8d
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.180065780
nop
lea rcx, [rbp - 0x40]
call fcn.1800693a0
nop
lea rcx, [rbp - 0x20]
call fcn.1800693a0
nop
lea rcx, [0x1802a0b88]
call fcn.1801d74d4
mov eax, dword [rbx]
cmp qword [0x18029d358], 0
je 0x180142746
cmp dword [0x1802a0c60], eax
jle 0x180142726
lea rcx, [0x1802a0c60]
call fcn.1801d7540
cmp dword [0x1802a0c60], 0xffffffff
jne 0x180142726
mov rax, qword [0x18029d358]
mov qword [0x1802a0c90], rax
lea rcx, [0x1802a0c60]
call fcn.1801d74d4
mov qword [rsp + 0x20], rsi
mov r9d, 0xffffffff
lea r8d, [r9 + 2]
mov rdx, r14
mov rcx, rdi
call qword [0x1802a0c90]
jmp 0x180142a31
cmp dword [0x1802a0c9c], eax
jle 0x1801427ed
lea rcx, [0x1802a0c9c]
call fcn.1801d7540
cmp dword [0x1802a0c9c], 0xffffffff
jne 0x1801427ed
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8d, 5
lea rdx, str.Level
lea rcx, [rbp - 0x40]
call fcn.1800655f0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, 0x2d
lea rdx, str._Script_GameplayAbilities.GameplayAbilitySpec
lea rcx, [rbp - 0x20]
call fcn.1800655f0
nop
mov r8b, 1
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.180065780
mov dword [0x1802a0cb0], eax
lea rcx, [rbp - 0x20]
call fcn.1800693a0
nop
lea rcx, [rbp - 0x40]
call fcn.1800693a0
nop
lea rcx, [0x1802a0c9c]
call fcn.1801d74d4
mov eax, dword [rbx]
cmp dword [0x1802a0d90], eax
jle 0x180142896
lea rcx, [0x1802a0d90]
call fcn.1801d7540
cmp dword [0x1802a0d90], 0xffffffff
jne 0x180142896
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8d, ntohs
lea rdx, str.SourceObject
lea rcx, [rbp - 0x40]
call fcn.1800655f0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, 0x2d
lea rdx, str._Script_GameplayAbilities.GameplayAbilitySpec
lea rcx, [rbp - 0x20]
call fcn.1800655f0
nop
mov r8b, 1
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.180065780
mov dword [0x1802a0a08], eax
lea rcx, [rbp - 0x20]
call fcn.1800693a0
nop
lea rcx, [rbp - 0x40]
call fcn.1800693a0
nop
lea rcx, [0x1802a0d90]
call fcn.1801d74d4
mov eax, dword [rbx]
cmp dword [0x1802a0d54], eax
jle 0x18014293f
lea rcx, [0x1802a0d54]
call fcn.1801d7540
cmp dword [0x1802a0d54], 0xffffffff
jne 0x18014293f
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8d, 7
lea rdx, str.InputID
lea rcx, [rbp - 0x40]
call fcn.1800655f0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, 0x2d
lea rdx, str._Script_GameplayAbilities.GameplayAbilitySpec
lea rcx, [rbp - 0x20]
call fcn.1800655f0
nop
mov r8b, 1
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.180065780
mov dword [0x1802a0dc0], eax
lea rcx, [rbp - 0x20]
call fcn.1800693a0
nop
lea rcx, [rbp - 0x40]
call fcn.1800693a0
nop
lea rcx, [0x1802a0d54]
call fcn.1801d74d4
mov eax, dword [rbx]
cmp dword [0x1802a0a24], eax
jle 0x1801429df
lea rcx, [0x1802a0a24]
call fcn.1801d7540
cmp dword [0x1802a0a24], 0xffffffff
jne 0x1801429df
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.GameplayEffectHandle
lea rcx, [rbp - 0x40]
call fcn.1800655f0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, 0x2d
lea rdx, str._Script_GameplayAbilities.GameplayAbilitySpec
lea rcx, [rbp - 0x20]
call fcn.1800655f0
nop
xor r8d, r8d
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.180065780
nop
lea rcx, [rbp - 0x20]
call fcn.1800693a0
nop
lea rcx, [rbp - 0x40]
call fcn.1800693a0
nop
lea rcx, [0x1802a0a24]
call fcn.1801d74d4
mov qword [rdi + 4], 0xffffffffffffffff
mov dword [rdi], 0xffffffff
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ebx, eax
mov rcx, rdi
call fcn.180066100
mov dword [rax], ebx
mov rcx, rdi
call fcn.180066010
mov qword [rax], r14
movsxd rax, dword [0x1802a0cb0]
mov dword [rax + rdi], 1
movsxd rax, dword [0x1802a0dc0]
mov dword [rax + rdi], 0xffffffff
movsxd rax, dword [0x1802a0a08]
mov qword [rax + rdi], rsi
mov rax, rdi
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret