Function at 0x18007d5c0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x38]
sub rsp, 0x110
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm13
mov rax, qword [0x180151040]
xor rax, rsp
mov qword [rbp - 0x68], rax
mov rsi, qword [0x1803f0d80]
mov rbx, qword [0x1803f0d78]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
lea r12, [rbp + 0x38]
movabs rcx, 0xff00ff00ff00ff00
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x70], r12
mov rax, qword [r12]
mov rdi, rax
xor rdi, rcx
mov qword [rbp - 0x80], rdi
xor r13d, r13d
mov qword [r12], r13
mov r14d, dword [0x1803f7950]
mov r15d, dword [0x1803f792c]
test rbx, rbx
jne 0x18007d674
mov qword [r12], rax
jmp 0x18007dba9
cmp byte [0x1803f7929], 0
je 0x18007d686
cmp byte [0x1803f0c72], 0
je 0x18007d66b
call fcn.180066690
mov r8d, eax
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.18005ff40
xorps xmm7, xmm7
cmp byte [0x1803f7928], 0
je 0x18007d9d6
movsd xmm11, qword [rsp + 0x28]
movaps xmm0, xmm11
subsd xmm0, qword [0x1803f0fc0]
cvtpd2ps xmm0, xmm0
movss xmm6, dword [0x18013c084]
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm8, xmm0
movsd xmm0, qword [rsp + 0x20]
subsd xmm0, qword [0x1803f0fb8]
cvtpd2ps xmm0, xmm0
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm8, xmm0
movsd xmm13, qword [rsp + 0x30]
movaps xmm2, xmm13
subsd xmm2, qword [0x1803f0fc8]
cvtpd2ps xmm0, xmm2
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm8, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm8
ja 0x18007d72c
xorps xmm6, xmm6
sqrtss xmm6, xmm8
jmp 0x18007d738
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
mov rbx, qword [0x1803f0c80]
mov rax, qword [0x1803f11a8]
test rax, rax
jne 0x18007d77a
mov rax, qword [0x1803f11a0]
test rax, rax
jne 0x18007d763
call fcn.180093f20
mov qword [0x1803f11a0], rax
xor r9d, r9d
lea r8, str.FortWeapon.GetChargePercent
xor edx, edx
xor ecx, ecx
call rax
mov qword [0x1803f11a8], rax
xorps xmm9, xmm9
mov dword [rsp + 0x48], 0
mov rcx, qword [rbx]
mov r9, qword [rcx + 0xb8]
lea r8, [rsp + 0x48]
mov rdx, rax
mov rcx, rbx
call r9
mov rbx, qword [0x1803f0c80]
mov rax, qword [0x1803f1b30]
test rax, rax
jne 0x18007d7e0
mov rax, qword [0x1803f11a0]
test rax, rax
jne 0x18007d7c9
call fcn.180093f20
mov qword [0x1803f11a0], rax
xor r9d, r9d
lea r8, str.FortWeapon.GetProjectileSpeed
xor edx, edx
xor ecx, ecx
call rax
mov qword [0x1803f1b30], rax
movss xmm0, dword [rsp + 0x48]
movss dword [rsp + 0x40], xmm0
xor ecx, ecx
mov dword [rsp + 0x44], ecx
mov rcx, qword [rbx]
mov r9, qword [rcx + 0xb8]
lea r8, [rsp + 0x40]
mov rdx, rax
mov rcx, rbx
call r9
movss xmm10, dword [rsp + 0x44]
mov rbx, qword [0x1803f0c80]
mov rax, qword [0x1803f5710]
test rax, rax
jne 0x18007d853
mov rax, qword [0x1803f11a0]
test rax, rax
jne 0x18007d83c
call fcn.180093f20
mov qword [0x1803f11a0], rax
xor r9d, r9d
lea r8, str.FortniteGame.FortProjectileBase.GetGravityScale
xor edx, edx
xor ecx, ecx
call rax
mov qword [0x1803f5710], rax
mov dword [rsp + 0x48], 0
mov rcx, qword [rbx]
mov r9, qword [rcx + 0xb8]
lea r8, [rsp + 0x48]
mov rdx, rax
mov rcx, rbx
call r9
movss xmm8, dword [rsp + 0x48]
comiss xmm10, xmm9
jbe 0x18007d9c2
mov qword [rsp + 0x40], r13
mov rax, qword [0x1803f7930]
test rax, rax
jne 0x18007d8c4
mov rax, qword [0x1803f11a0]
test rax, rax
jne 0x18007d8ad
call fcn.180093f20
mov qword [0x1803f11a0], rax
xor r9d, r9d
lea r8, str.Actor.K2_GetRootComponent
xor edx, edx
xor ecx, ecx
call rax
mov qword [0x1803f7930], rax
mov rdx, qword [rsi]
mov r9, qword [rdx + 0xb8]
lea r8, [rsp + 0x40]
mov rdx, rax
mov rcx, rsi
call r9
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
movsd qword [rsp + 0x60], xmm7
mov rax, qword [0x1803f79d0]
test rax, rax
jne 0x18007d925
mov rax, qword [0x1803f11a0]
test rax, rax
jne 0x18007d90e
call fcn.180093f20
mov qword [0x1803f11a0], rax
xor r9d, r9d
lea r8, str.SceneComponent.GetComponentVelocity
xor edx, edx
xor ecx, ecx
call rax
mov qword [0x1803f79d0], rax
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0xb8]
lea r8, [rsp + 0x50]
mov rdx, rax
call r9
divss xmm6, xmm10
xorps xmm3, xmm3
cvtss2sd xmm3, xmm6
mulss xmm8, dword [0x18013c2b0]
andps xmm8, xmmword [0x18013c6b0]
mulss xmm8, dword [0x18013bff0]
mulss xmm6, xmm6
mulss xmm8, xmm6
cvtps2pd xmm2, xmm8
movsd xmm0, qword [rsp + 0x60]
mulsd xmm0, xmm3
addsd xmm2, xmm0
movsd xmm0, qword [rsp + 0x50]
mulsd xmm0, xmm3
addsd xmm0, qword [rsp + 0x20]
movsd qword [rsp + 0x20], xmm0
movsd xmm1, qword [rsp + 0x58]
mulsd xmm1, xmm3
addsd xmm1, xmm11
movsd qword [rsp + 0x28], xmm1
addsd xmm2, xmm13
movsd qword [rsp + 0x30], xmm2
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x50]
jmp 0x18007d9f6
movsd xmm0, qword [rsp + 0x20]
unpcklpd xmm0, xmm11
movsd qword [rsp + 0x60], xmm13
jmp 0x18007d9e7
movups xmm0, xmmword [rsp + 0x20]
movsd xmm1, qword [rsp + 0x30]
movsd qword [rsp + 0x60], xmm1
lea rcx, [rsp + 0x20]
lea rdx, [rsp + 0x50]
movaps xmmword [rsp + 0x50], xmm0
call fcn.1800667e0
movups xmm4, xmmword [rax]
movsd xmm0, qword [rax + 0x10]
movsd qword [rsp + 0x60], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
mov eax, dword [0x1803f008c]
add eax, 3
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movsd xmm8, qword [0x18013c6c0]
ucomisd xmm4, xmm7
jp 0x18007da30
je 0x18007da8e
movd xmm5, r14d
cvtdq2pd xmm5, xmm5
comisd xmm4, xmm5
jbe 0x18007da6d
movaps xmm3, xmm5
subsd xmm3, xmm4
xorps xmm3, xmm8
cvtps2pd xmm0, xmm6
divsd xmm3, xmm0
movaps xmm1, xmm5
addsd xmm1, xmm3
lea eax, [r14 + r14]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
comisd xmm1, xmm0
jbe 0x18007da6d
xorps xmm3, xmm3
comisd xmm5, xmm4
jbe 0x18007da8e
movaps xmm3, xmm4
subsd xmm3, xmm5
cvtps2pd xmm0, xmm6
divsd xmm3, xmm0
addsd xmm5, xmm3
comisd xmm7, xmm5
jbe 0x18007da8e
xorps xmm3, xmm3
unpckhpd xmm4, xmm4
ucomisd xmm4, xmm7
jp 0x18007da9a
je 0x18007daf8
movd xmm5, r15d
cvtdq2pd xmm5, xmm5
comisd xmm4, xmm5
jbe 0x18007dad7
movaps xmm2, xmm5
subsd xmm2, xmm4
xorps xmm2, xmm8
cvtps2pd xmm0, xmm6
divsd xmm2, xmm0
movaps xmm1, xmm5
addsd xmm1, xmm2
lea eax, [r15 + r15]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
comisd xmm1, xmm0
jbe 0x18007dad7
xorps xmm2, xmm2
comisd xmm5, xmm4
jbe 0x18007daf8
movaps xmm2, xmm4
subsd xmm2, xmm5
cvtps2pd xmm0, xmm6
divsd xmm2, xmm0
addsd xmm5, xmm2
comisd xmm7, xmm5
jbe 0x18007daf8
xorps xmm2, xmm2
cvttsd2si ecx, xmm2
cvttsd2si eax, xmm3
mov dword [rsp + 0x50], r13d
mov dword [rsp + 0x60], r13d
mov qword [rsp + 0x64], 0x4001
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], ecx
mov edx, 0x1000
xor ecx, ecx
mov r9d, 0x40
mov r8d, edx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
test rax, rax
je 0x18007db98
movups xmm0, xmmword [0x1803f1090]
movups xmmword [rax], xmm0
movsd xmm1, qword [0x1803f10a0]
movsd qword [rax + 0x10], xmm1
mov ecx, dword [0x1803f10a8]
mov dword [rax + 0x18], ecx
movzx ecx, word [0x1803f10ac]
mov word [rax + 0x1c], cx
mov r8d, 0x28
lea rdx, [rsp + 0x50]
mov ecx, 1
call rbx
xor edx, edx
mov r8d, 0x1000
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x8000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
nop
movabs rax, 0xff00ff00ff00ff00
xor rdi, rax
mov qword [r12], rdi
mov rcx, qword [rbp - 0x68]
xor rcx, rsp
call fcn.180101a90
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm13, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret