Function at 0x1400ce0c0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor ecx, ecx
mov edx, 0x20000
mov r8d, 0x3000
lea r9d, [rcx + 0x40]
call qword [sym.imp.KERNEL32.DLL_VirtualAlloc]
mov rcx, rax
mov qword [rsp + 0x50], rax
mov qword [0x1407b2038], rax
lea rbx, [rax + 0x1000]
lea rdi, [rax + 0x2000]
mov qword [0x1407b2020], rbx
lea rsi, [rax + 0x3000]
mov qword [0x1407b1fa8], rdi
lea r14, [rax + 0x4000]
mov qword [0x1407b1f80], rsi
lea r12, [rax + 0x5000]
mov qword [0x1407b1f30], r14
add rax, 0x6000
mov qword [0x1407b1fd0], r12
mov qword [0x1407b1f68], rax
lea rbp, [rcx + 0x10000]
lea rax, [rcx + 0x7000]
mov qword [0x1407b2010], rbp
mov qword [0x1407b1f48], rax
lea r15, [rcx + 0x11000]
lea rax, [rcx + 0x8000]
mov qword [0x1407b1f88], r15
mov qword [0x1407b1f50], rax
lea r13, [rcx + 0x12000]
lea rax, [rcx + 0x9000]
mov qword [0x1407b1fb8], r13
mov qword [0x1407b1fd8], rax
lea rax, [rcx + 0xa000]
mov qword [0x1407b2060], rax
lea rax, [rcx + 0xb000]
mov qword [0x1407b1fb0], rax
lea rax, [rcx + 0xc000]
mov qword [0x1407b1fe8], rax
lea rax, [rcx + 0xd000]
mov qword [0x1407b2068], rax
lea rax, [rcx + 0xe000]
mov qword [0x1407b1f98], rax
lea rax, [rcx + 0xf000]
mov qword [0x1407b2030], rax
lea rax, [rcx + 0x13000]
mov qword [0x1407b2008], rax
lea rax, [rcx + 0x14000]
mov qword [0x1407b1f38], rax
lea rax, [rcx + 0x15000]
mov qword [0x1407b1f70], rax
lea rax, [rcx + 0x16000]
mov qword [0x1407b2040], rax
lea rax, [rcx + 0x16800]
mov qword [0x1407b1f78], rax
lea rax, [rcx + 0x17000]
mov qword [0x1407b2050], rax
lea rax, [rcx + 0x17800]
mov qword [0x1407b1fc0], rax
lea rax, [rcx + 0x18000]
mov qword [0x1407b1f58], rax
lea rax, [rcx + 0x18800]
mov qword [0x1407b1fc8], rax
lea rax, [rcx + 0x19000]
mov qword [0x1407b1f60], rax
lea rax, [rcx + 0x19800]
mov qword [0x1407b2018], rax
lea rax, [rcx + 0x1a000]
mov qword [0x1407b1fe0], rax
lea rax, [rcx + 0x1a800]
mov qword [0x1407b2048], rax
lea rax, [rcx + 0x1b000]
mov qword [0x1407b1ff8], rax
lea rax, [rcx + 0x1b800]
mov qword [0x1407b1fa0], rax
lea rax, [rcx + 0x1c000]
mov qword [0x1407b1f40], rax
lea rax, [rcx + 0x1c800]
mov qword [0x1407b1ff0], rax
lea rax, [rcx + 0x1d000]
mov qword [0x1407b1f90], rax
lea rax, [rcx + 0x1d800]
mov qword [0x1407b2000], rax
lea rdx, [fcn.1407e6880]
lea rax, [rcx + 0x1e000]
mov r9d, 0x1ffff0
mov qword [0x1407b2028], rax
mov r8d, 0x40000
lea rax, [rcx + 0x1e800]
mov qword [0x1407b2058], rax
call fcn.1400d2550
mov r9d, 0x1ffff0
lea rdx, [fcn.1407e6b80]
mov r8d, 0x40000
mov rcx, rbx
call fcn.1400d2550
mov r9d, 0x1ffff0
lea rdx, [fcn.1407e6e40]
mov r8d, 0x40000
mov rcx, rdi
call fcn.1400d2550
mov r9d, 0x1ffff0
lea rdx, [fcn.1407e7100]
mov r8d, 0x40000
mov rcx, rsi
call fcn.1400d2550
mov r9d, 0x1fff0
lea rdx, [fcn.1407e6880]
mov r8d, 0x10000
mov rcx, r14
call fcn.1400d2550
mov r9d, 0x1fff0
lea rdx, [fcn.1407e6b80]
mov r8d, 0x10000
mov rcx, r12
call fcn.1400d2550
mov rbx, qword [rsp + 0x50]
lea rdx, [fcn.1407e6e40]
mov r9d, 0x1fff0
mov r8d, 0x10000
lea rcx, [rbx + 0x6000]
call fcn.1400d2550
mov r9d, 0x1fff0
lea rdx, [fcn.1407e7100]
mov r8d, 0x10000
lea rcx, [rbx + 0x7000]
call fcn.1400d2550
mov r9d, 0x3fff0
lea rdx, [fcn.1407e6880]
mov r8d, 0x10000
mov rcx, rbp
call fcn.1400d2550
mov r9d, 0x3fff0
lea rdx, [fcn.1407e6b80]
mov r8d, 0x10000
mov rcx, r15
call fcn.1400d2550
mov r9d, 0x3fff0
lea rdx, [fcn.1407e6e40]
mov r8d, 0x10000
mov rcx, r13
call fcn.1400d2550
mov r9d, 0x3fff0
lea rdx, [fcn.1407e7100]
mov r8d, 0x10000
lea rcx, [rbx + 0x13000]
call fcn.1400d2550
mov r9d, 0x1ffff0
lea rdx, [fcn.1407e6880]
mov r8d, 0x60000
lea rcx, [rbx + 0x8000]
call fcn.1400d2550
mov r9d, 0x1ffff0
lea rdx, [fcn.1407e6b80]
mov r8d, 0x60000
lea rcx, [rbx + 0x9000]
call fcn.1400d2550
mov r9d, 0x1ffff0
lea rdx, [fcn.1407e6e40]
mov r8d, 0x60000
lea rcx, [rbx + 0xa000]
call fcn.1400d2550
mov r9d, 0x1ffff0
mov r8d, 0x60000
lea rdx, [fcn.1407e7100]
lea rcx, [rbx + 0xb000]
call fcn.1400d2550
mov r9d, 0x1ffff0
lea rdx, [fcn.1407e6880]
mov r8d, 0x100000
lea rcx, [rbx + 0xc000]
call fcn.1400d2550
mov r9d, 0x1ffff0
lea rdx, [fcn.1407e6b80]
mov r8d, 0x100000
lea rcx, [rbx + 0xd000]
call fcn.1400d2550
mov r9d, 0x1ffff0
lea rdx, [fcn.1407e6e40]
mov r8d, 0x100000
lea rcx, [rbx + 0xe000]
call fcn.1400d2550
mov r9d, 0x1ffff0
lea rdx, [fcn.1407e7100]
mov r8d, 0x100000
lea rcx, [rbx + 0xf000]
call fcn.1400d2550
lea rdx, [fcn.1407e77c0]
lea rcx, [rbx + 0x14000]
call fcn.1400d25f0
lea rdx, [fcn.1407e7ac0]
lea rcx, [rbx + 0x15000]
call fcn.1400d25f0
mov r9d, 0x7fff0
lea rdx, section._TEXT_CN
mov r8d, 0x20000
lea rcx, [rbx + 0x16000]
call fcn.1400d2550
mov r9d, 0x3fff0
lea rdx, section._TEXT_CN
mov r8d, 0x20000
lea rcx, [rbx + 0x16800]
call fcn.1400d2550
mov r9d, 0x1ffff0
lea rdx, section._TEXT_CN
mov r8d, 0x40000
lea rcx, [rbx + 0x17000]
call fcn.1400d2550
mov r9d, 0xffff0
lea rdx, section._TEXT_CN
mov r8d, 0x40000
lea rcx, [rbx + 0x17800]
call fcn.1400d2550
mov r9d, 0x3fff0
lea rdx, section._TEXT_CN
mov r8d, 0x10000
lea rcx, [rbx + 0x18000]
call fcn.1400d2550
mov r9d, 0x1fff0
lea rdx, section._TEXT_CN
mov r8d, 0x10000
lea rcx, [rbx + 0x18800]
call fcn.1400d2550
mov r9d, 0x7fff0
lea rdx, [0x1407e6140]
mov r8d, 0x20000
lea rcx, [rbx + 0x19000]
call fcn.1400d2550
mov r9d, 0x3fff0
lea rdx, [0x1407e6140]
mov r8d, 0x20000
lea rcx, [rbx + 0x19800]
call fcn.1400d2550
mov r9d, 0x1ffff0
lea rdx, [0x1407e6140]
mov r8d, 0x40000
lea rcx, [rbx + 0x1a000]
call fcn.1400d2550
mov r9d, 0xffff0
lea rdx, [0x1407e6140]
mov r8d, 0x40000
lea rcx, [rbx + 0x1a800]
call fcn.1400d2550
mov r9d, 0x3fff0
mov r8d, 0x10000
lea rdx, [0x1407e6140]
lea rcx, [rbx + 0x1b000]
call fcn.1400d2550
mov r9d, 0x1fff0
lea rdx, [0x1407e6140]
mov r8d, 0x10000
lea rcx, [rbx + 0x1b800]
call fcn.1400d2550
mov r9d, 0x7fff0
lea rdx, [0x1407e6380]
mov r8d, 0x20000
lea rcx, [rbx + 0x1c000]
call fcn.1400d2550
mov r9d, 0x3fff0
lea rdx, [0x1407e6380]
mov r8d, 0x20000
lea rcx, [rbx + 0x1c800]
call fcn.1400d2550
mov r9d, 0x1ffff0
lea rdx, [0x1407e6380]
mov r8d, 0x40000
lea rcx, [rbx + 0x1d000]
call fcn.1400d2550
mov r9d, 0xffff0
lea rdx, [0x1407e6380]
mov r8d, 0x40000
lea rcx, [rbx + 0x1d800]
call fcn.1400d2550
mov r9d, 0x3fff0
lea rdx, [0x1407e6380]
mov r8d, 0x10000
lea rcx, [rbx + 0x1e000]
call fcn.1400d2550
mov r9d, 0x1fff0
lea rdx, [0x1407e6380]
mov r8d, 0x10000
lea rcx, [rbx + 0x1e800]
call fcn.1400d2550
lea r9, [rsp + 0x50]
mov edx, 0x20000
mov r8d, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_VirtualProtect]
call qword [sym.imp.KERNEL32.DLL_GetCurrentProcess]
mov r8d, 0x20000
mov rdx, rbx
mov rcx, rax
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
jmp qword [sym.imp.KERNEL32.DLL_FlushInstructionCache]