Function at 0x1402ca7e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor ecx, ecx
mov edx, 0x10000
mov r8d, 0x3000
lea r9d, [rcx + 0x40]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x50], rax
mov r9d, 0x1ffff0
mov qword [0x140422e60], rax
lea rdx, [section._TEXT_CN]
mov rcx, rax
mov r8d, 0x40000
lea rbx, [rax + 0x1000]
lea rdi, [rax + 0x2000]
mov qword [0x140422e68], rbx
lea rsi, [rax + 0x3000]
mov qword [0x140422e40], rdi
lea rbp, [rax + 0x4000]
mov qword [0x140422e18], rsi
lea r14, [rax + 0x5000]
mov qword [0x140422e08], rbp
lea r15, [rax + 0x6000]
mov qword [0x140422e48], r14
lea r12, [rax + 0x7000]
mov qword [0x140422e28], r15
lea r13, [rax + 0x8000]
mov qword [0x140422e10], r12
add rax, 0x9000
mov qword [0x140422e20], r13
mov qword [0x140422e50], rax
lea rax, [rcx + 0xa000]
mov qword [0x140422e78], rax
lea rax, [rcx + 0xb000]
mov qword [0x140422e38], rax
lea rax, [rcx + 0xc000]
mov qword [0x140422e58], rax
lea rax, [rcx + 0xd000]
mov qword [0x140422e80], rax
lea rax, [rcx + 0xe000]
mov qword [0x140422e30], rax
lea rax, [rcx + 0xf000]
mov qword [0x140422e70], rax
call fcn.1402c9b20
mov r9d, 0x1ffff0
lea rdx, [fcn.140754300]
mov r8d, 0x40000
mov rcx, rbx
call fcn.1402c9b20
mov r9d, 0x1ffff0
lea rdx, [fcn.1407545c0]
mov r8d, 0x40000
mov rcx, rdi
call fcn.1402c9b20
mov r9d, 0x1ffff0
lea rdx, [fcn.140754880]
mov r8d, 0x40000
mov rcx, rsi
call fcn.1402c9b20
mov r9d, 0x1fff0
lea rdx, [section._TEXT_CN]
mov r8d, 0x10000
mov rcx, rbp
call fcn.1402c9b20
mov r9d, 0x1fff0
lea rdx, [fcn.140754300]
mov r8d, 0x10000
mov rcx, r14
call fcn.1402c9b20
mov r9d, 0x1fff0
lea rdx, [fcn.1407545c0]
mov r8d, 0x10000
mov rcx, r15
call fcn.1402c9b20
mov r9d, 0x1fff0
lea rdx, [fcn.140754880]
mov r8d, 0x10000
mov rcx, r12
call fcn.1402c9b20
mov r9d, 0x1ffff0
lea rdx, [section._TEXT_CN]
mov r8d, 0x60000
mov rcx, r13
call fcn.1402c9b20
mov rbx, qword [rsp + 0x50]
lea rdx, [fcn.140754300]
mov r9d, 0x1ffff0
mov r8d, 0x60000
lea rcx, [rbx + 0x9000]
call fcn.1402c9b20
mov r9d, 0x1ffff0
lea rdx, [fcn.1407545c0]
mov r8d, 0x60000
lea rcx, [rbx + 0xa000]
call fcn.1402c9b20
mov r9d, 0x1ffff0
lea rdx, [fcn.140754880]
mov r8d, 0x60000
lea rcx, [rbx + 0xb000]
call fcn.1402c9b20
mov r9d, 0x1ffff0
lea rdx, [section._TEXT_CN]
mov r8d, 0x100000
lea rcx, [rbx + 0xc000]
call fcn.1402c9b20
mov r9d, 0x1ffff0
lea rdx, [fcn.140754300]
mov r8d, 0x100000
lea rcx, [rbx + 0xd000]
call fcn.1402c9b20
mov r9d, 0x1ffff0
lea rdx, [fcn.1407545c0]
mov r8d, 0x100000
lea rcx, [rbx + 0xe000]
call fcn.1402c9b20
mov r9d, 0x1ffff0
lea rdx, [fcn.140754880]
mov r8d, 0x100000
lea rcx, [rbx + 0xf000]
call fcn.1402c9b20
lea r9, [rsp + 0x50]
mov edx, 0x10000
mov r8d, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r8d, 0x10000
mov rdx, rbx
mov rcx, rax
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
jmp qword [sym.imp.KERNEL32.dll_FlushInstructionCache]