Function at 0x14001a9c6
Capabilities:
Allocate or change rwx memory

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x40
mov r15, rdx
mov r14, rcx
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x28], rax
mov eax, dword [0x140109414]
mov ecx, dword [0x140109494]
lea edx, [rax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
and eax, edx
setne dl
test eax, eax
sete al
cmp ecx, 0xa
setl bl
cmp ecx, 9
setg cl
xor bl, al
or cl, dl
xor cl, 1
or cl, bl
mov eax, 0x53c031c0
mov edx, 0x1e63eea0
cmove eax, edx
mov ecx, 0x5a081596
cmove ecx, edx
mov esi, 0x514ffbef
mov edx, 0x4c4b9d1d
jmp 0x14001aa7a
cmp ebx, 0x514ffbef
jne 0x14001add3
cmp qword [rsp + 0x28], 0
sete byte [rsp + 0x20]
mov esi, 0x1b2e6621
jmp 0x14001aa7a
mov bl, byte [rsp + 0x20]
test bl, bl
mov esi, 0x2d69a79f
cmovne esi, edx
jmp 0x14001aa7a
mov esi, 0x53c031c0
mov ebx, esi
and ebx, 0x7fffffff
cmp ebx, 0x4c4b9d1c
jle 0x14001aa9e
cmp ebx, 0x53c031bf
jle 0x14001aa47
cmp ebx, 0x53c031c0
mov esi, ecx
jne 0x14001aabd
jmp 0x14001aa7a
cmp ebx, 0x1b2e6621
je 0x14001aa65
cmp ebx, 0x1e63eea0
je 0x14001aa75
cmp ebx, 0x2d69a79f
mov esi, eax
je 0x14001aa7a
jmp 0x14001addb
cmp ebx, 0x5a081596
jne 0x14001addb
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
lea rax, [r14 + 0x2080]
mov qword [rsp + 0x28], rax
mov edi, 0x57d50f7b
mov eax, 0x23b968e8
mov r8d, 0xcdcab824
mov r9d, 0xffffffff
mov esi, 0xc12462cb
jmp 0x14001ab9a
mov ebx, dword [0x140109454]
mov ecx, dword [0x140109478]
lea edx, [rbx - 1]
imul edx, ebx
mov edi, edx
xor edi, 0xfffffffe
and edi, edx
sete dl
cmp ecx, 0xa
setl bl
xor bl, dl
mov edx, 0xcdcab824
cmovne edx, eax
test edi, edi
mov edi, edx
cmove edi, eax
cmp ecx, 0xa
cmovge edi, edx
jmp 0x14001ab9a
cmp ebx, 0x23b968e8
je 0x14001ab68
cmp ebx, 0x57d50f7b
jne 0x14001ac0c
mov rbx, qword [rsp + 0x28]
mov rbx, qword [rbx]
add rbx, r15
mov rdi, qword [rsp + 0x28]
mov qword [rdi], rbx
mov edi, 0x9a8ec1aa
jmp 0x14001ab9a
mov ecx, dword [0x140109454]
lea edx, [rcx - 1]
imul edx, ecx
not edx
or edx, 0xfffffffe
cmp edx, r9d
sete cl
mov edi, 0xcdcab824
cmove edi, esi
cmp dword [0x140109478], 0xa
setl dl
cmovge edi, r8d
xor dl, cl
cmovne edi, esi
mov ebx, edi
cmp ebx, 0x23b968e7
jg 0x14001ab3a
cmp ebx, 0xcdcab824
mov edi, 0x23b968e8
je 0x14001ab9a
cmp ebx, 0x9a8ec1aa
je 0x14001aaff
cmp ebx, 0xc12462cb
jne 0x14001ac0c
mov eax, dword [0x140113410]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
cmp dword [0x140110518], 9
setg dl
test eax, ecx
setne al
mov ecx, edx
xor cl, al
or dl, al
xor dl, 1
or dl, cl
mov ebx, 0xdf152a8e
mov eax, 0xe171689c
cmove ebx, eax
mov ecx, 0xc4b2a8f9
cmove ecx, eax
mov eax, 0x187c483e
jmp 0x14001ac3d
jmp 0x14001ac0c
mov rax, qword [rsp + 0x30]
mov eax, 0xdf152a8e
jmp 0x14001ac3d
cmp edx, 0x187c483e
mov eax, ebx
je 0x14001ac3d
jmp 0x14001ac64
mov eax, 0xea2a4a33
jmp 0x14001ac3d
mov rax, qword [rsp + 0x30]
add rax, 0x10
mov qword [rsp + 0x38], rax
mov eax, ecx
mov edx, eax
cmp edx, 0xea2a4a32
jg 0x14001ac1a
cmp edx, 0xc4b2a8f9
je 0x14001ac26
cmp edx, 0xdf152a8e
je 0x14001ac2d
cmp edx, 0xe171689c
je 0x14001ac0e
jmp 0x14001ad07
cmp edx, 0xea2a4a33
jne 0x14001ad07
mov rax, qword [rsp + 0x38]
xor ecx, ecx
mov qword [rax], rcx
mov rax, qword [rsp + 0x30]
mov qword [rax + 0x18], rcx
mov rax, qword [rsp + 0x30]
mov qword [rax + 8], r15
mov qword [rax], 1
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov eax, dword [0x140113368]
mov ecx, dword [0x14011a7f8]
mov edx, eax
neg edx
not edx
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
and eax, edx
setne dl
test eax, eax
sete al
cmp ecx, 0xa
setl bl
cmp ecx, 9
setg cl
xor bl, al
or cl, dl
xor cl, 1
or cl, bl
mov eax, 0xb0c32c38
mov edx, 0x6523360e
cmove eax, edx
mov ecx, 0xa061fdf
cmove ecx, edx
mov edx, 0xc8f33ba
mov ebx, 0x58012f2b
cmove edx, ebx
mov edi, 0x8b404104
cmove edi, ebx
mov ebx, 0x7abbf64f
jmp 0x14001ad3b
jmp 0x14001ad07
mov ebx, 0x50b1e636
jmp 0x14001ad3b
mov rbx, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x20]
mov ebx, 0xb0c32c38
jmp 0x14001ad3b
mov rbx, qword [rsp + 0x20]
sar rbx, 0xc
mov qword [rsp + 0x28], rbx
mov ebx, ecx
mov esi, ebx
cmp esi, 0x50b1e635
jle 0x14001ad68
cmp esi, 0x6523360d
jg 0x14001ad86
cmp esi, 0x50b1e636
mov ebx, edx
je 0x14001ad3b
cmp esi, 0x58012f2b
mov ebx, esi
jne 0x14001ad3b
mov ebx, 0xc8f33ba
jmp 0x14001ad3b
cmp esi, 0xa061fde
jle 0x14001ad9c
cmp esi, 0xa061fdf
je 0x14001ad09
cmp esi, 0xc8f33ba
mov ebx, esi
jne 0x14001ad3b
mov ebx, edi
jmp 0x14001ad3b
cmp esi, 0x6523360e
je 0x14001ad10
cmp esi, 0x7abbf64f
mov ebx, esi
jne 0x14001ad3b
mov ebx, eax
jmp 0x14001ad3b
cmp esi, 0xb0c32c38
je 0x14001ad2b
cmp esi, 0x8b404104
mov ebx, esi
jne 0x14001ad3b
mov r8, qword [rsp + 0x28]
lea rdx, [r14 + 0x20a8]
mov rcx, r14
call fcn.14001760d
mov rax, qword [rsp + 0x30]
add rsp, 0x40
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
cmp ebx, 0x4c4b9d1d
je 0x14001addd
jmp 0x14001addb
call fcn.140012699
ud2