Function at 0x14000b220
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x70
vmovaps xmmword [rsp + 0x60], xmm7
vmovaps xmmword [rsp + 0x50], xmm6
mov ebx, r8d
mov rax, qword [0x140114500]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rax, qword [0x1401145e0]
vcvtdq2pd xmm6, qword [rax + 0x140]
mov rsi, rdx
mov rax, qword [0x1401145b0]
mov edi, dword [rax + 0x18]
test r8b, r8b
je 0x14000b28b
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
imul eax, eax, 0xab6ffab7
add eax, 0x2a4802
rorx eax, eax, 1
cmp eax, 0x2a4802
ja 0x14000b28b
xor byte [0x14011469e], 1
lea eax, [rdi + 5]
vmovupd xmm1, xmmword [rsi]
vxorpd xmm0, xmm0, xmm0
vmovddup xmm2, qword [rsi + 8]
vcmpneqpd xmm2, xmm2, xmm0
vcmpneqpd xmm0, xmm1, xmm0
vorpd xmm0, xmm0, xmm2
vmovd ecx, xmm0
vxorpd xmm0, xmm0, xmm0
test cl, 1
je 0x14000b2f0
vsubpd xmm2, xmm1, xmm6
vblendpd xmm0, xmm1, xmm6, 1
vblendpd xmm3, xmm6, xmm1, 1
vcmpltpd xmm4, xmm3, xmm0
vcmpneqpd xmm0, xmm0, xmm3
vblendpd xmm0, xmm4, xmm0, 1
vandpd xmm0, xmm0, xmm2
vcmpltpd xmm1, xmm1, xmm6
vpextrb ecx, xmm1, 8
test cl, 1
je 0x14000b2f0
vblendpd xmm0, xmm2, xmm0, 1
vcvtsi2sd xmm1, xmm5, eax
vmovsd xmm2, qword [0x1400a4da0]
vdivsd xmm1, xmm2, xmm1
vmovddup xmm1, xmm1
vmulpd xmm0, xmm0, xmm1
vcvtpd2ps xmm0, xmm0
vbroadcastss xmm1, dword [0x1400a4da8]
vcmpltps xmm2, xmm0, xmm1
vcvtps2pd xmm3, xmm0
vmovddup xmm4, qword [0x1400a4dd0]
vcmpltpd xmm3, xmm4, xmm3
vshufps xmm3, xmm3, xmm3, 0xe8
vandpd xmm2, xmm3, xmm2
vblendvps xmm2, xmm0, xmm1, xmm2
vcvtss2sd xmm4, xmm2, xmm2
vbroadcastss xmm0, dword [0x1400a4dac]
vcmpltps xmm0, xmm0, xmm2
vshufps xmm0, xmm0, xmm0, 0x50
vmovmskpd eax, xmm0
vmovss xmm0, dword [0x1400a4dac]
vmovaps xmm1, xmm0
test al, 1
jne 0x14000b369
vmovaps xmm1, xmm2
vmovsd xmm3, qword [0x1400a4db0]
vucomisd xmm4, xmm3
jb 0x14000b37b
vmovaps xmm1, xmm2
vmovshdup xmm2, xmm2
vcvtss2sd xmm4, xmm2, xmm2
test al, 2
jne 0x14000b3d8
vmovaps xmm0, xmm2
vucomisd xmm4, xmm3
jae 0x14000b3de
cmp edi, 0xfffffffd
jg 0x14000b3e7
vmovss xmm7, dword [0x1400a4dc0]
vucomiss xmm1, xmm7
vmovaps xmm6, xmm7
ja 0x14000b3be
vucomiss xmm1, dword [0x1400a4dc4]
vmovaps xmm6, xmm1
jae 0x14000b3be
vmovss xmm6, dword [0x1400a4dc4]
vucomiss xmm0, xmm7
ja 0x14000b42d
vucomiss xmm0, dword [0x1400a4dc4]
jae 0x14000b429
vmovss xmm7, dword [0x1400a4dc4]
jmp 0x14000b42d
vucomisd xmm4, xmm3
jb 0x14000b391
vmovaps xmm0, xmm2
cmp edi, 0xfffffffd
jle 0x14000b396
vmovss xmm7, dword [0x1400a4db8]
vucomiss xmm1, xmm7
vmovaps xmm6, xmm7
ja 0x14000b40f
vucomiss xmm1, dword [0x1400a4dbc]
vmovaps xmm6, xmm1
jae 0x14000b40f
vmovss xmm6, dword [0x1400a4dbc]
vucomiss xmm0, xmm7
ja 0x14000b42d
vucomiss xmm0, dword [0x1400a4dbc]
jae 0x14000b429
vmovss xmm7, dword [0x1400a4dbc]
jmp 0x14000b42d
vmovaps xmm7, xmm0
cmp byte [0x14011469e], 0
vbroadcastss xmm0, dword [0x1400a4dc8]
vandps xmm1, xmm6, xmm0
vcvttss2si eax, xmm1
vandps xmm0, xmm7, xmm0
vcvttss2si esi, xmm0
je 0x14000b47f
test bl, bl
je 0x14000b47f
cmp eax, 0x20
jl 0x14000b4c0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdqe
imul rcx, rax, 0x30c30c31
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x22
add ecx, edx
lea edx, [rcx + rcx*4]
lea ecx, [rcx + rdx*4]
jmp 0x14000b587
cmp eax, 0x20
jl 0x14000b4a8
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdqe
imul rcx, rax, 0x30c30c31
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x22
add ecx, edx
lea edx, [rcx + rcx*4]
lea ecx, [rcx + rdx*4]
jmp 0x14000b4f9
cmp eax, 0x11
jl 0x14000b4df
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea ecx, [rax + 7]
test eax, eax
cmovns ecx, eax
and ecx, 0xfffffff8
jmp 0x14000b4f9
cmp eax, 0x11
jl 0x14000b56d
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea ecx, [rax + 7]
test eax, eax
cmovns ecx, eax
and ecx, 0xfffffff8
jmp 0x14000b587
cmp eax, 9
jl 0x14000b7d2
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea ecx, [rax + 3]
test eax, eax
cmovns ecx, eax
and ecx, 0xfffffffc
sub eax, ecx
vcvtsi2ss xmm0, xmm5, eax
vsubss xmm6, xmm6, xmm0
cmp esi, 0x20
jl 0x14000b52c
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdqe
imul rcx, rax, 0x30c30c31
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x22
add ecx, edx
lea edx, [rcx + rcx*4]
lea ecx, [rcx + rdx*4]
jmp 0x14000b55e
cmp esi, 0x11
jl 0x14000b544
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea ecx, [rax + 7]
test eax, eax
cmovns ecx, eax
and ecx, 0xfffffff8
jmp 0x14000b55e
cmp esi, 9
jl 0x14000b7f6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea ecx, [rax + 3]
test eax, eax
cmovns ecx, eax
and ecx, 0xfffffffc
sub eax, ecx
vcvtsi2ss xmm0, xmm5, eax
vsubss xmm7, xmm7, xmm0
jmp 0x14000b5f6
cmp eax, 9
jl 0x14000b81a
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea ecx, [rax + 3]
test eax, eax
cmovns ecx, eax
and ecx, 0xfffffffc
sub eax, ecx
vcvtsi2ss xmm0, xmm5, eax
vaddss xmm6, xmm6, xmm0
cmp esi, 0x20
jl 0x14000b5ba
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdqe
imul rcx, rax, 0x30c30c31
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x22
add ecx, edx
lea edx, [rcx + rcx*4]
lea ecx, [rcx + rdx*4]
jmp 0x14000b5ec
cmp esi, 0x11
jl 0x14000b5d2
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea ecx, [rax + 7]
test eax, eax
cmovns ecx, eax
and ecx, 0xfffffff8
jmp 0x14000b5ec
cmp esi, 9
jl 0x14000b83a
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea ecx, [rax + 3]
test eax, eax
cmovns ecx, eax
and ecx, 0xfffffffc
sub eax, ecx
vcvtsi2ss xmm0, xmm5, eax
vaddss xmm7, xmm7, xmm0
vcvttss2si eax, xmm7
vcvttss2si ecx, xmm6
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x2c], eax
mov edx, 0x1000
xor ecx, ecx
mov r8d, 0x1000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x14000b7b1
mov rsi, rax
vbroadcastss xmm0, dword [0x1400a4d9c]
vxorps xmm1, xmm0, xmmword [0x140114680]
vmovss xmm2, dword [0x14011468c]
vxorps xmm2, xmm2, xmm0
vbroadcastss xmm2, xmm2
vmovsd xmm3, qword [0x140114688]
vxorps xmm3, xmm3, xmm0
vbroadcastss xmm3, xmm3
vunpcklps xmm2, xmm3, xmm2
vmovss xmm3, dword [0x140114684]
vxorps xmm3, xmm3, xmm0
vunpcklps xmm1, xmm1, xmm3
vblendps xmm1, xmm1, xmm2, 0xc
vmovaps xmmword [0x140114680], xmm1
vxorps xmm1, xmm0, xmmword [0x140114690]
vmovss dword [0x140114690], xmm1
vmovss xmm1, dword [0x140114694]
vxorps xmm1, xmm1, xmm0
vmovss dword [0x140114694], xmm1
vmovsd xmm1, qword [0x140114698]
vxorps xmm1, xmm1, xmm0
vmovss dword [0x140114698], xmm1
xor byte [0x14011469c], 0xfa
xor byte [0x14011469d], 0xfa
vmovups xmm1, xmmword [0x14011468e]
vmovups xmmword [rax + 0xe], xmm1
vmovaps xmm1, xmmword [0x140114680]
vmovups xmmword [rax], xmm1
vxorps xmm1, xmm0, xmmword [0x140114680]
vmovss dword [0x140114680], xmm1
vmovss xmm1, dword [0x140114684]
vxorps xmm1, xmm1, xmm0
vmovss dword [0x140114684], xmm1
vmovsd xmm1, qword [0x140114688]
vxorps xmm1, xmm1, xmm0
vmovss dword [0x140114688], xmm1
vmovss xmm1, dword [0x14011468c]
vxorps xmm1, xmm1, xmm0
vmovss dword [0x14011468c], xmm1
vxorps xmm1, xmm0, xmmword [0x140114690]
vmovss dword [0x140114690], xmm1
vmovss xmm1, dword [0x140114694]
vxorps xmm1, xmm1, xmm0
vmovss dword [0x140114694], xmm1
vmovsd xmm1, qword [0x140114698]
vxorps xmm0, xmm1, xmm0
vmovss dword [0x140114698], xmm0
xor byte [0x14011469c], 0xfa
xor byte [0x14011469d], 0xfa
lea rcx, [rsp + 0x28]
mov edx, 1
call rax
mov r8d, 0x1000
mov rcx, rsi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, rsi
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1400a1e40
vmovaps xmm6, xmmword [rsp + 0x50]
vmovaps xmm7, xmmword [rsp + 0x60]
add rsp, 0x70
pop rbx
pop rdi
pop rsi
ret
cmp eax, 4
jl 0x14000b86e
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ecx, eax
shr ecx, 0x1f
add ecx, eax
and ecx, 0xfffffffe
sub eax, ecx
vcvtsi2ss xmm0, xmm5, eax
jmp 0x14000b4ff
cmp esi, 4
jl 0x14000b85a
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ecx, eax
shr ecx, 0x1f
add ecx, eax
and ecx, 0xfffffffe
sub eax, ecx
vcvtsi2ss xmm0, xmm5, eax
vsubss xmm7, xmm7, xmm0
jmp 0x14000b5f6
cmp eax, 4
jl 0x14000b882
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ecx, eax
shr ecx, 0x1f
add ecx, eax
and ecx, 0xfffffffe
sub eax, ecx
vcvtsi2ss xmm0, xmm5, eax
jmp 0x14000b58d
cmp esi, 4
jl 0x14000b85a
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ecx, eax
shr ecx, 0x1f
add ecx, eax
and ecx, 0xfffffffe
sub eax, ecx
vcvtsi2ss xmm0, xmm5, eax
jmp 0x14000b5f2
cmp esi, 2
jl 0x14000b5f6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
jmp 0x14000b5f6
cmp eax, 2
jl 0x14000b503
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
jmp 0x14000b503
cmp eax, 2
jl 0x14000b591
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
jmp 0x14000b591