Function at 0x140013d50
Capabilities:
Allocate or change rwx memory

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x57]
sub rsp, 0xf0
xor r15d, r15d
mov rbx, r9
mov qword [rbp + 0x5f], r15
mov rsi, r8
mov r14, rcx
mov edi, r15d
test rcx, rcx
je 0x140014019
test rdx, rdx
je 0x140014019
test r8, r8
jne 0x140013da2
test rbx, rbx
je 0x140014019
or rcx, 0xffffffffffffffff
test rbx, rbx
je 0x140013dba
mov rdi, rcx
inc rdi
cmp word [r9 + rdi*2], r15w
jne 0x140013dae
add edi, edi
mov r9, rdx
mov eax, edi
add rax, 0x2e4
mov dword [rsp + 0x28], 0x40
mov qword [rdx], rax
xor r8d, r8d
lea rdx, [rbp + 0x5f]
mov dword [rsp + 0x30], 0x81485740
mov dword [rbp - 0x7d], 0xf0ec
mov dword [rbp - 0x79], 0x448d4800
mov dword [rbp - 0x75], 0x8b486024
mov dword [rbp - 0x71], 0xb9c033f8
mov dword [rbp - 0x6d], 0x68
mov dword [rbp - 0x69], 0x44c7aaf3
mov dword [rbp - 0x65], 0x686024
mov dword [rbp - 0x61], 0x5b80000
mov dword [rbp - 0x5d], 0x66000000
mov dword [rbp - 0x59], 0xa0248489
mov dword [rbp - 0x55], 0xc7000000
mov qword [rbp - 0x51], 0x9c2484
mov dword [rbp - 0x49], 0xc7480000
mov dword [rbp - 0x45], 0x582444
mov dword [rbp - 0x41], 0x48000000
mov dword [rbp - 0x3d], 0xd024848d
mov dword [rbp - 0x39], 0x48000000
mov dword [rbp - 0x35], 0x50244489
mov dword [rbp - 0x31], 0x24448d48
mov dword [rbp - 0x2d], 0x44894860
mov dword [rbp - 0x29], 0xc7484824
mov dword [rbp - 0x25], 0x402444
mov dword [rbp - 0x21], 0x48000000
mov qword [rbp - 0x1d], 0x382444c7
mov qword [rbp - 0x15], 0x302444c7
mov qword [rbp - 0xd], 0x282444c7
mov dword [rbp - 5], 0x2444c748
mov dword [rbp - 1], 0x20
mov dword [rbp + 3], 0xc9334500
mov qword [rbp + 7], 0xb849
mov dword [rbp + 0xf], 0xba480000
mov qword [rbp + 0x13], r15
mov dword [rbp + 0x1b], 0xb848c933
mov qword [rbp + 0x1f], r15
mov dword [rbp + 0x27], 0x8148d0ff
mov dword [rbp + 0x2b], 0xf0c4
mov word [rbp + 0x2f], 0x5f00
mov byte [rbp + 0x31], 0xc3
mov dword [rsp + 0x20], 0x1000
call qword [sym.imp.ntoskrnl.exe_ZwAllocateVirtualMemory]
test eax, eax
js 0x140014019
mov rdx, qword [rbp + 0x5f]
lea rcx, [rsp + 0x30]
movups xmm0, xmmword [rcx]
mov eax, 0x80
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmmword [rdx + 0x60], xmm0
add rdx, rax
movups xmm0, xmmword [rcx + 0x70]
add rcx, rax
movups xmmword [rdx - 0x10], xmm0
movzx eax, word [rcx + 0x30]
movups xmm1, xmmword [rcx]
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm1
movups xmm1, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm0
movups xmmword [rdx + 0x20], xmm1
mov word [rdx + 0x30], ax
mov al, byte [rcx + 0x32]
mov cl, byte [rbp + 0x7f]
mov byte [rdx + 0x32], al
mov rax, qword [rbp + 0x5f]
mov byte [rax + 0x23], cl
test cl, cl
jne 0x140013f94
mov rax, qword [rbp + 0x5f]
mov dword [rax + 0x36], 1
mov rax, qword [rbp + 0x5f]
mov dword [rax + 0x70], 0x8000000
test edi, edi
je 0x140013fcd
test rbx, rbx
je 0x140013fcd
mov rcx, qword [rbp + 0x5f]
add rcx, 0x2d0
movzx eax, word [rbx]
lea rbx, [rbx + 2]
mov word [rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x140013fa8
mov rcx, qword [rbp + 0x5f]
lea rax, [rcx + 0x2d0]
mov qword [rcx + 0x8a], rax
test rsi, rsi
je 0x140014008
cmp word [rsi], r15w
je 0x140014008
mov rcx, qword [rbp + 0x5f]
add rcx, 0xc8
movzx eax, word [rsi]
lea rsi, [rsi + 2]
mov word [rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x140013fe3
mov rcx, qword [rbp + 0x5f]
lea rax, [rcx + 0xc8]
mov qword [rcx + 0x94], rax
mov rax, qword [rbp + 0x5f]
mov qword [rax + 0xa0], r14
mov rax, qword [rbp + 0x5f]
jmp 0x14001401b
xor eax, eax
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret