Function at 0x1400135e0
Capabilities:
Allocate or change rwx memory

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x57]
sub rsp, 0xf0
xor r15d, r15d
mov rbx, r9
mov qword [rbp + 0x5f], r15
mov rsi, r8
mov r14, rcx
mov edi, r15d
test rcx, rcx
je 0x1400138a9
test rdx, rdx
je 0x1400138a9
test r8, r8
jne 0x140013632
test rbx, rbx
je 0x1400138a9
or rcx, 0xffffffffffffffff
test rbx, rbx
je 0x14001364a
mov rdi, rcx
inc rdi
cmp word [r9 + rdi*2], r15w
jne 0x14001363e
add edi, edi
mov r9, rdx
mov eax, edi
add rax, 0x2e4
mov dword [rsp + 0x28], 0x40
mov qword [rdx], rax
xor r8d, r8d
lea rdx, [rbp + 0x5f]
mov dword [rsp + 0x30], 0x81485740
mov dword [rbp - 0x7d], 0xf0ec
mov dword [rbp - 0x79], 0x448d4800
mov dword [rbp - 0x75], 0x8b486024
mov dword [rbp - 0x71], 0xb9c033f8
mov dword [rbp - 0x6d], 0x68
mov dword [rbp - 0x69], 0x44c7aaf3
mov dword [rbp - 0x65], 0x686024
mov dword [rbp - 0x61], 0x5b80000
mov dword [rbp - 0x5d], 0x66000000
mov dword [rbp - 0x59], 0xa0248489
mov dword [rbp - 0x55], 0xc7000000
mov qword [rbp - 0x51], 0x9c2484
mov dword [rbp - 0x49], 0xc7480000
mov dword [rbp - 0x45], 0x582444
mov dword [rbp - 0x41], 0x48000000
mov dword [rbp - 0x3d], 0xd024848d
mov dword [rbp - 0x39], 0x48000000
mov dword [rbp - 0x35], 0x50244489
mov dword [rbp - 0x31], 0x24448d48
mov dword [rbp - 0x2d], 0x44894860
mov dword [rbp - 0x29], 0xc7484824
mov dword [rbp - 0x25], 0x402444
mov dword [rbp - 0x21], 0x48000000
mov qword [rbp - 0x1d], 0x382444c7
mov qword [rbp - 0x15], 0x302444c7
mov qword [rbp - 0xd], 0x282444c7
mov dword [rbp - 5], 0x2444c748
mov dword [rbp - 1], 0x20
mov dword [rbp + 3], 0xc9334500
mov qword [rbp + 7], 0xb849
mov dword [rbp + 0xf], 0xba480000
mov qword [rbp + 0x13], r15
mov dword [rbp + 0x1b], 0xb848c933
mov qword [rbp + 0x1f], r15
mov dword [rbp + 0x27], 0x8148d0ff
mov dword [rbp + 0x2b], 0xf0c4
mov word [rbp + 0x2f], 0x5f00
mov byte [rbp + 0x31], 0xc3
mov dword [rsp + 0x20], 0x1000
call qword [sym.imp.ntoskrnl.exe_ZwAllocateVirtualMemory]
test eax, eax
js 0x1400138a9
mov rdx, qword [rbp + 0x5f]
lea rcx, [rsp + 0x30]
movups xmm0, xmmword [rcx]
mov eax, 0x80
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmmword [rdx + 0x60], xmm0
add rdx, rax
movups xmm0, xmmword [rcx + 0x70]
add rcx, rax
movups xmmword [rdx - 0x10], xmm0
movzx eax, word [rcx + 0x30]
movups xmm1, xmmword [rcx]
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm1
movups xmm1, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm0
movups xmmword [rdx + 0x20], xmm1
mov word [rdx + 0x30], ax
mov al, byte [rcx + 0x32]
mov cl, byte [rbp + 0x7f]
mov byte [rdx + 0x32], al
mov rax, qword [rbp + 0x5f]
mov byte [rax + 0x23], cl
test cl, cl
jne 0x140013824
mov rax, qword [rbp + 0x5f]
mov dword [rax + 0x36], 1
mov rax, qword [rbp + 0x5f]
mov dword [rax + 0x70], 0x8000000
test edi, edi
je 0x14001385d
test rbx, rbx
je 0x14001385d
mov rcx, qword [rbp + 0x5f]
add rcx, 0x2d0
movzx eax, word [rbx]
lea rbx, [rbx + 2]
mov word [rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x140013838
mov rcx, qword [rbp + 0x5f]
lea rax, [rcx + 0x2d0]
mov qword [rcx + 0x8a], rax
test rsi, rsi
je 0x140013898
cmp word [rsi], r15w
je 0x140013898
mov rcx, qword [rbp + 0x5f]
add rcx, 0xc8
movzx eax, word [rsi]
lea rsi, [rsi + 2]
mov word [rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x140013873
mov rcx, qword [rbp + 0x5f]
lea rax, [rcx + 0xc8]
mov qword [rcx + 0x94], rax
mov rax, qword [rbp + 0x5f]
mov qword [rax + 0xa0], r14
mov rax, qword [rbp + 0x5f]
jmp 0x1400138ab
xor eax, eax
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret