Function at 0x14000bbb0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push rbx
push r14
push r15
sub rsp, 0x100
mov rax, qword [0x1400ecdc0]
xor rax, rsp
mov qword [rsp + 0xd0], rax
xor r14d, r14d
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x38], rcx
mov r15, rdx
mov rbx, rcx
test rdx, rdx
jne 0x14000bbef
lea eax, [rdx + 0x57]
jmp 0x14000c0dd
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x1400f253c], eax
je 0x14000bc07
mov eax, 0x10dd
jmp 0x14000c0dd
mov eax, dword [0x1400f2538]
test eax, eax
jne 0x14000c0dd
test rbx, rbx
jne 0x14000bc22
lea eax, [rbx + 6]
jmp 0x14000c0dd
mov qword [rsp + 0xf0], rdi
mov rdi, qword [rbx]
test rdi, rdi
jne 0x14000bc4b
mov dword [0x1400f2538], 6
lea eax, [rdi + 6]
mov qword [0x1400f2610], rbx
jmp 0x14000c0d5
cmp byte [rdi], 0xff
mov qword [rsp + 0x130], rbp
mov rbp, r14
mov qword [rsp + 0xe8], r12
mov r12, r14
jne 0x14000bc88
cmp byte [rdi + 1], 0x25
jne 0x14000bc88
movsxd rbx, dword [rdi + 2]
lea rdx, [rdi + 6]
add rdx, rbx
mov rcx, rdi
call fcn.14000acd0
test al, al
je 0x14000bc88
mov rdi, qword [rbx + rdi + 6]
cmp byte [rdi], 0xeb
jne 0x14000bcd5
movsx rax, byte [rdi + 1]
add rdi, 2
add rdi, rax
movzx ecx, byte [rdi]
cmp cl, 0xff
jne 0x14000bcc5
cmp byte [rdi + 1], 0x25
jne 0x14000bcc5
movsxd rbx, dword [rdi + 2]
mov rcx, rdi
lea rdx, [rbx + 6]
add rdx, rdi
call fcn.14000acd0
test al, al
je 0x14000bcd5
mov rdi, qword [rbx + rdi + 6]
jmp 0x14000bcd5
cmp cl, 0xe9
jne 0x14000bcd5
movsxd rax, dword [rdi + 1]
add rdi, 5
add rdi, rax
cmp byte [r15], 0xff
jne 0x14000bd03
cmp byte [r15 + 1], 0x25
jne 0x14000bd03
movsxd rbx, dword [r15 + 2]
lea rdx, [r15 + 6]
add rdx, rbx
mov rcx, r15
call fcn.14000acd0
test al, al
je 0x14000bd03
mov r15, qword [rbx + r15 + 6]
mov qword [rsp + 0x28], r15
cmp byte [r15], 0xeb
jne 0x14000bd5d
movsx rax, byte [r15 + 1]
add r15, 2
add r15, rax
mov qword [rsp + 0x28], r15
movzx ecx, byte [r15]
cmp cl, 0xff
jne 0x14000bd48
cmp byte [r15 + 1], 0x25
jne 0x14000bd48
movsxd rbx, dword [r15 + 2]
mov rcx, r15
lea rdx, [rbx + 6]
add rdx, r15
call fcn.14000acd0
test al, al
je 0x14000bd5d
mov r15, qword [rbx + r15 + 6]
jmp 0x14000bd58
cmp cl, 0xe9
jne 0x14000bd5d
movsxd rax, dword [r15 + 1]
add r15, 5
add r15, rax
mov qword [rsp + 0x28], r15
mov qword [rsp + 0xf8], rsi
mov qword [rsp + 0xe0], r13
cmp r15, rdi
jne 0x14000bd84
cmp dword [0x1400f24f8], r14d
jne 0x14000c0a6
jmp 0x14000c057
mov ecx, 0x30
call fcn.14003e268
mov rcx, rdi
mov qword [rsp + 0x30], rax
mov r12, rax
call fcn.14000b260
mov rbp, rax
test rax, rax
jne 0x14000bdaf
lea r14d, [rax + 8]
jmp 0x14000c057
xor eax, eax
mov dword [rsp + 0x20], r14d
mov qword [rbp + 0x40], rax
lea r15, [0x1400fc150]
mov r8, rdi
mov r13, rbp
movabs r12, 0x8040000403
nop dword [rax]
nop word [rax + rax]
xorps xmm0, xmm0
mov dword [rsp + 0x40], r14d
lea rax, [rsp + 0x88]
test r13, r13
movups xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x90]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x40]
cmovne rcx, r13
mov qword [rsp + 0x78], rax
mov rbx, r8
movups xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x88], r14
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x90], xmm0
movups xmmword [rsp + 0xa0], xmm0
movups xmmword [rsp + 0xb0], xmm0
movups xmmword [rsp + 0xc0], xmm0
test r8, r8
jne 0x14000be64
lea ecx, [r8 + 0xd]
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r8, r14
jmp 0x14000be83
movzx eax, byte [r8]
mov r9, r8
shl rax, 4
mov r8, rcx
add rax, r15
lea rcx, [rsp + 0x50]
mov rdx, rax
call qword [rax + htons]
mov r8, rax
mov r9d, dword [rsp + 0x20]
mov esi, r8d
movsxd rax, dword [rsp + 0x40]
sub esi, edi
sub rax, rbx
movzx ecx, sil
add rax, r8
add r13, rax
movzx eax, r13b
sub al, bpl
shl al, 3
xor cl, al
and cl, 7
xor cl, al
mov byte [r9 + rbp + 0x40], cl
inc r9d
mov dword [rsp + 0x20], r9d
cmp r9d, 8
jae 0x14000bf1a
movzx ecx, byte [rbx]
cmp cl, 0xeb
je 0x14000bf1a
lea eax, [rcx + 0x3e]
cmp al, 0x27
ja 0x14000bed8
bt r12, rax
jb 0x14000bf1a
cmp cl, 0xf3
jne 0x14000bf8d
cmp byte [rbx + 1], 0xc3
je 0x14000bf1a
cmp cl, 0x26
je 0x14000bf05
cmp cl, 0x2e
je 0x14000bf05
cmp cl, 0x36
je 0x14000bf05
cmp cl, 0x3e
je 0x14000bf05
cmp cl, 0x64
je 0x14000bf05
cmp cl, 0x65
jne 0x14000bf11
cmp byte [rbx + 1], 0xff
jne 0x14000bf11
cmp byte [rbx + 2], 0x25
je 0x14000bf1a
cmp esi, 5
jb 0x14000bde0
mov r15, qword [rsp + 0x28]
mov r12, qword [rsp + 0x30]
cmp esi, 5
jae 0x14000bf4f
nop dword [rax]
mov rcx, r8
call fcn.14000ad70
test eax, eax
je 0x14000c048
cdqe
add r8, rax
mov rsi, r8
sub esi, edi
cmp esi, 5
jb 0x14000bf30
cmp r9d, 8
ja 0x14000c048
lea rax, [rbp + 0x1e]
cmp r13, rax
jbe 0x14000bf63
int3
sub r13b, bpl
mov r8d, esi
lea rcx, [rbp + 0x20]
mov byte [rbp + 0x1e], r13b
mov rdx, rdi
mov byte [rbp + 0x3e], sil
call fcn.14009ade0
cmp esi, 0x19
jbe 0x14000bf9f
mov r14d, 6
jmp 0x14000c057
cmp cl, 0xff
jne 0x14000bee7
cmp byte [rbx + 1], 0x25
jmp 0x14000bf0f
movzx edx, byte [rbp + 0x1e]
lea rax, [rdi + rsi]
add rdx, rbp
mov qword [rbp + 0x48], rax
mov eax, ebp
mov qword [rbp + 0x50], r15
lea rcx, [rdx + 6]
mov word [rdx], 0x25ff
sub eax, ecx
lea rcx, [rdx + 6]
add eax, 0x48
mov dword [rdx + 2], eax
lea rax, [rbp + 0x1e]
mov r8, rax
sub r8, rcx
cmp rcx, rax
cmova r8, r14
test r8, r8
je 0x14000bfe6
mov dl, 0xcc
call fcn.14009b600
mov edx, esi
lea r9, [rsp + 0x44]
mov r8d, 0x40
mov dword [rsp + 0x44], r14d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x14000c010
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
jmp 0x14000c057
mov rax, qword [rsp + 0x38]
mov qword [r12 + 0x10], rax
mov dword [r12 + 8], r14d
mov qword [r12 + 0x20], rbp
mov qword [r12 + 0x18], rdi
mov eax, dword [rsp + 0x44]
mov dword [r12 + 0x28], eax
mov rax, qword [0x1400f2628]
mov qword [r12], rax
xor eax, eax
mov qword [0x1400f2628], r12
jmp 0x14000c0b5
cmp dword [0x1400f24f8], 0
mov r14d, 9
jne 0x14000c063
mov dword [0x1400f2538], r14d
test rbp, rbp
je 0x14000c094
xorps xmm0, xmm0
mov r8, rbp
movups xmmword [rbp], xmm0
and r8, 0xffffffffffff0000
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov rax, qword [r8 + 0x10]
mov qword [rbp + 0x48], rax
mov qword [r8 + 0x10], rbp
test r12, r12
je 0x14000c0a6
mov edx, 0x30
mov rcx, r12
call fcn.14003e260
mov rax, qword [rsp + 0x38]
mov qword [0x1400f2610], rax
mov eax, r14d
mov rsi, qword [rsp + 0xf8]
mov r13, qword [rsp + 0xe0]
mov rbp, qword [rsp + 0x130]
mov r12, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0xf0]
mov rcx, qword [rsp + 0xd0]
xor rcx, rsp
call fcn.14003e240
add rsp, 0x100
pop r15
pop r14
pop rbx
ret