Function at 0x140001390
Capabilities:
Allocate or change rwx memory

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x14020e240]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, rdx
mov rbx, rcx
mov rcx, rdx
call fcn.140001ecc
mov r15, rax
mov qword [rsp + 0x30], rax
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.140011fa0
test rdi, rdi
je 0x140001443
lea r8, [rdi - 1]
add r8, r15
mov r10d, 0x1f
sub r10, r15
mov r9, rdi
nop word [rax + rax]
lea rax, [r10 + r8]
xor edx, edx
div rdi
movzx ecx, byte [r8]
movzx eax, byte [rdx + r15]
mov byte [r8], al
mov byte [rdx + r15], cl
lea r8, [r8 - 1]
sub r9, 1
jne 0x140001400
mov rcx, r15
lea rdx, [0x14020eea0]
nop dword [rax]
movzx eax, byte [rcx]
movzx eax, byte [rax + rdx]
mov byte [rcx], al
lea rcx, [rcx + 1]
sub rdi, 1
jne 0x140001430
movsxd r12, dword [r15 + 0x3c]
add r12, r15
mov edx, dword [r12 + 0x50]
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x14000147a
mov rcx, r15
call fcn.140001ec4
xor al, al
jmp 0x140001899
mov r8d, dword [r12 + 0x54]
mov rdx, r15
mov rcx, rsi
call fcn.140011fa0
xor r13d, r13d
mov edi, r13d
cmp r13w, word [r12 + 6]
jae 0x1400014de
mov ebx, r13d
nop dword [rax + rax]
movsxd rax, dword [r15 + 0x3c]
add rax, rbx
mov ecx, dword [rax + rsi + 0x118]
test ecx, ecx
je 0x1400014ce
mov r8d, ecx
mov edx, dword [rax + rsi + 0x11c]
add rdx, r15
mov ecx, dword [rax + rsi + 0x114]
add rcx, rsi
call fcn.140011fa0
inc edi
add rbx, 0x28
movzx eax, word [r12 + 6]
cmp edi, eax
jl 0x1400014a0
mov r10, rsi
sub r10, qword [r12 + 0x30]
je 0x140001588
mov ebx, dword [r12 + 0xb0]
add rbx, rsi
mov rax, qword [rbx]
mov rdx, rax
shr rdx, 0x20
test edx, edx
je 0x140001588
lea rdi, [rbx + 8]
mov r11, rax
shr r11, 0x20
mov r14d, 0xfff
nop word [rax + rax]
mov ecx, edx
sub rcx, 8
shr rcx, 1
mov r8, rdi
test ecx, ecx
jle 0x14000156b
mov r9d, ecx
nop dword [rax]
nop word [rax + rax]
movzx edx, word [r8]
movzx ecx, dx
shr cx, 0xc
and dx, r14w
cmp cx, 0xa
jne 0x140001561
mov ecx, eax
movzx edx, dx
add rcx, rsi
add qword [rdx + rcx], r10
add r8, 2
sub r9, 1
jne 0x140001540
add rbx, r11
mov rax, qword [rbx]
mov rcx, rax
shr rcx, 0x20
mov edx, ecx
add rdi, r11
mov r11, rax
shr r11, 0x20
test ecx, ecx
jne 0x140001520
cmp dword [r12 + 0x94], r13d
jbe 0x14000163f
mov r14d, dword [r12 + 0x90]
add r14, rsi
movups xmm1, xmmword [r14]
mov ebx, dword [r14 + 0x10]
mov rax, qword [r14 + 8]
shr rax, 0x20
test eax, eax
je 0x14000163f
nop dword [rax]
psrldq xmm1, 0xc
movd ecx, xmm1
add rcx, rsi
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
je 0x140001630
add rbx, rsi
mov rcx, qword [rbx]
test rcx, rcx
je 0x140001616
mov rdx, rcx
mov rcx, rdi
jns 0x1400015f2
movzx edx, dx
jmp 0x1400015f9
add rdx, 2
add rdx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140001630
mov qword [rbx], rax
add rbx, 8
mov rcx, qword [rbx]
mov rdx, rcx
test rcx, rcx
jne 0x1400015e8
add r14, 0x14
movups xmm1, xmmword [r14]
mov ebx, dword [r14 + 0x10]
mov rax, qword [r14 + 8]
shr rax, 0x20
test eax, eax
jne 0x1400015c0
jmp 0x14000163f
mov rcx, r15
call fcn.140001ec4
xor al, al
jmp 0x140001899
mov ecx, 0x20
call fcn.140001e88
mov r14, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140001690
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
lea rbx, [rax + 0x10]
mov qword [rsp + 0x20], rbx
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov ecx, 0x48
call fcn.140001e88
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbx], rax
jmp 0x140001693
mov r14, r13
mov qword [r14], rsi
mov qword [r14 + 8], r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov r12d, 0xf
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
movsd xmm0, qword [str.ManualMappedDLL]
movsd qword [rsp + 0x58], xmm0
mov eax, dword [0x1400143e8]
mov dword [rsp + 0x60], eax
movzx eax, word [0x1400143ec]
mov word [rsp + 0x64], ax
movzx eax, byte [0x1400143ee]
mov byte [rsp + 0x66], al
mov byte [rsp + 0x67], 0
mov r13, qword [0x14020efa0]
mov rbx, qword [r13 + 8]
mov qword [rsp + 0x38], rbx
xor edi, edi
mov dword [rsp + 0x40], edi
mov rsi, r13
cmp byte [rbx + 0x19], dil
jne 0x14000175c
nop word [rax + rax]
mov qword [rsp + 0x38], rbx
lea rcx, [rbx + 0x20]
mov rdi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140001727
mov rcx, qword [rcx]
mov r8, rdi
cmp rdi, 0xf
cmova r8, r12
lea rdx, [rsp + 0x58]
call fcn.140011ea0
test eax, eax
jne 0x140001797
cmp rdi, 0xf
jb 0x140001799
mov dword [rsp + 0x40], 1
mov rsi, rbx
mov rbx, qword [rbx]
xor edi, edi
cmp byte [rbx + 0x19], 0
je 0x140001710
cmp byte [rsi + 0x19], 0
jne 0x1400017ab
lea rdx, [rsi + 0x20]
mov rbx, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140001774
mov rdx, qword [rdx]
mov r8, r12
cmp rbx, r12
cmovb r8, rbx
lea rcx, [rsp + 0x58]
call fcn.140011ea0
test eax, eax
jne 0x1400017a5
cmp rbx, 0xf
ja 0x1400017ab
jmp 0x140001839
jns 0x140001746
xor edi, edi
mov dword [rsp + 0x40], edi
mov rbx, qword [rbx + 0x10]
jmp 0x140001756
jns 0x140001839
movabs rax, 0x38e38e38e38e38e
cmp qword [0x14020efa8], rax
je 0x1400018c3
lea rbx, [0x14020efa0]
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
mov ecx, 0x48
call fcn.140001e88
nop
mov qword [rax + 0x30], rdi
mov qword [rax + 0x38], rdi
movups xmm0, xmmword [rsp + 0x58]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rsp + 0x68]
movups xmmword [rax + 0x30], xmm1
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], r12
mov byte [rsp + 0x58], 0
mov qword [rax + 0x40], rdi
mov qword [rax], r13
mov qword [rax + 8], r13
mov qword [rax + 0x10], r13
mov word [rax + 0x18], 0
movups xmm0, xmmword [rsp + 0x38]
movaps xmmword [rsp + 0x20], xmm0
mov r8, rax
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.140001930
mov rsi, rax
mov qword [rsi + 0x40], r14
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140001876
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001871
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400018c9
call fcn.140001ec4
mov rcx, r14
call fcn.1400018d0
mov rcx, r15
test al, al
jne 0x14000188e
call fcn.140001ec4
xor al, al
jmp 0x140001899
call fcn.140001ec4
mov al, 1
jmp 0x140001899
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.140002220
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.140001b90
nop
call fcn.140007c44
int3