Function at 0x14002f2bb
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x358
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x2c0], xmm15
movdqa xmmword [rbp + 0x2b0], xmm14
movdqa xmmword [rbp + 0x2a0], xmm13
movdqa xmmword [rbp + 0x290], xmm12
movdqa xmmword [rbp + 0x280], xmm11
movdqa xmmword [rbp + 0x270], xmm10
movdqa xmmword [rbp + 0x260], xmm9
movdqa xmmword [rbp + 0x250], xmm8
movdqa xmmword [rbp + 0x240], xmm7
movdqa xmmword [rbp + 0x230], xmm6
mov qword [rbp + 0x228], 0xfffffffffffffffe
mov rbx, r9
mov r14, r8
mov r15, rdx
mov rdi, rcx
movzx r12d, word [rcx + 0x60]
lea rsi, [rbp + 0x188]
mov rcx, rsi
mov edx, r12d
call fcn.1400320c1
cmp byte [rsi], 0
jne 0x14002f37e
cmp byte [rbp + 0x189], 0
jne 0x140031858
mov rcx, rsi
mov edx, r12d
call fcn.14003212b
cmp byte [rsi], 0
je 0x14002f3f6
mov rsi, qword [rbp + 0x190]
mov word [rbp + 0x21e], r12w
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x40], r14
movzx r13d, word [rdi + 0x62]
cmp r13, 0x61
jae 0x14003189e
test r13w, r13w
mov qword [rbp + 0x60], rdi
mov qword [rbp + 0x208], rbx
je 0x14002f571
mov r14, qword [rdi + 8]
mov r15, qword [rdi + 0x10]
mov rsi, qword [rdi + 0x78]
mov qword [rbp + 0x58], r14
xor edi, edi
cmp r15, rdi
je 0x140031645
mov rbx, r15
mov r15d, dword [r14 + 0x28]
xor ecx, ecx
mov rdx, r15
mov r8d, 0x103000
mov r9d, 0x40
call qword [sym.imp.kernel32.dll_VirtualAlloc]
mov r12, rax
movabs rax, 0x8000000000000000
cmp qword [r14 + 8], rax
jne 0x14002f4d2
mov word [rbp + 0x90], 0
mov qword [rbp + 0x168], 0
lea rax, [rbp + 0x90]
mov qword [rsp + 0x20], rax
mov r8d, 8
lea rcx, [rbp + 0x188]
mov rdx, r14
lea r9, [rbp + 0x168]
call fcn.14004c275
mov rax, qword [rbp + 0x188]
mov rcx, qword [rbp + 0x190]
mov rdx, qword [rbp + 0x198]
cmp rax, 5
je 0x14002f4da
jmp 0x140030f1b
mov rcx, qword [r14 + 0x10]
mov rdx, qword [r14 + 0x18]
mov r9d, 4
lea r8, str.text
call fcn.140032195
test al, al
je 0x14002f4f6
mov dword [0x1401aa388], edi
mov rax, qword [0x1401aa398]
cmp rax, qword [0x1401aa390]
jne 0x14002f512
call fcn.1400cd3ef
mov rax, qword [0x1401aa398]
mov rcx, qword [0x1401aa020]
mov qword [rcx + rax*8], r12
inc rax
mov qword [0x1401aa398], rax
mov edx, dword [r14 + 0x2c]
test rdx, rdx
je 0x14002f540
add rdx, rsi
mov rcx, r12
mov r8, r15
call fcn.1401035b1
jmp 0x14002f54d
mov rcx, r12
xor edx, edx
mov r8, r15
call sub.VCRUNTIME140.dll_memset
inc rdi
add r14, 0x40
cmp r13, rdi
mov r15, rbx
jne 0x14002f43c
mov rdi, qword [rbp + 0x60]
mov rbx, qword [rbp + 0x208]
mov rsi, qword [rbp + 0x58]
jmp 0x14002f579
mov rsi, qword [rdi + 8]
mov r15, qword [rdi + 0x10]
test r15, r15
movzx eax, word [rbp + 0x21e]
je 0x140030b91
movzx eax, ax
mov dword [rbp + 0x3c], eax
shl r15, 6
add r15, rsi
mov rax, qword [rdi + 0x78]
mov qword [rbp - 0x50], rax
mov rax, qword [rdi + 0x80]
mov qword [rbp - 0x58], rax
mov rax, qword [rdi + 0x50]
mov qword [rbp + 0x148], rax
mov rax, qword [rdi + 0x58]
mov qword [rbp + 0x158], rax
mov rax, qword [rdi + 0x20]
mov qword [rbp + 0x18], rax
mov rax, qword [rdi + 0x28]
mov qword [rbp + 0x10], rax
xor eax, eax
mov qword [rbp + 0x20], rax
lea r12, [rbp + 0x188]
movdqa xmm9, xmmword [0x140114230]
movdqa xmm15, xmmword [0x1401141e0]
movdqa xmm13, xmmword [0x1401141f0]
movdqa xmm7, xmmword [0x1401141a0]
movdqa xmm10, xmmword [0x1401141b0]
movdqa xmm11, xmmword [0x1401141c0]
xor ecx, ecx
movdqa xmm14, xmmword [str.BeaconFormatToStBeaconFormatAppend]
movdqa xmm12, xmmword [0x140114170]
movdqa xmm6, xmmword [0x140114180]
movdqa xmm8, xmmword [0x140114190]
mov qword [rbp - 0x48], r15
lea rsi, [rbp + 0x188]
mov r8, qword [rsi + 0x18]
lea rdi, [rbp + 0x90]
mov qword [rdi], rax
mov qword [rdi + 8], rcx
mov qword [rdi + 0x10], rdx
mov qword [rdi + 0x18], r8
lea rdx, fcn.14002d491
lea r8, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
mov rcx, rdi
call fcn.14004bc1f
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsi + 0x28], xmm1
movups xmmword [rsi + 0x18], xmm0
lea rcx, [0x140116330]
mov qword [rsi], rcx
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rdx
mov rcx, rsi
lea r8, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
mov rcx, r15
mov rdx, r15
call fcn.140104820