Function at 0x140011590
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
mov rax, qword [0x14003d040]
xor rax, rsp
mov qword [rbp + 0xb0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
lea rax, [rbp + 0xe8]
movabs r12, 0xff00ff00ff00ff00
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], rax
mov r13, qword [rax]
xor r13, r12
mov qword [rsp + 0x50], r13
xor r15d, r15d
mov qword [rax], r15
mov qword [rsp + 0x28], r15
lea rax, [rsp + 0x28]
mov qword [rsp + 0x20], rax
movups xmmword [rsp + 0x68], xmm0
lea r14, [rbp + 0xe8]
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r14
mov rbx, qword [r14]
xor rbx, r12
mov qword [rsp + 0x68], rbx
mov qword [r14], r15
mov ecx, r15d
lea rsi, [0x140013bd0]
lea rdi, [0x140000000]
mov rax, qword [0x14003fe40]
test rax, rax
je 0x140011679
nop dword [rax]
cmp rax, rsi
je 0x140011666
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3fe40]
test rax, rax
jne 0x140011650
jmp 0x140011679
mov eax, ecx
mov r9, qword [rdi + rax*8 + 0x40490]
test r9, r9
jne 0x14001175f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r9, rax
test rax, rax
jne 0x1400116a2
mov r9, r15
jmp 0x14001173e
mov rax, rsi
mov rcx, r9
mov edx, 3
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400116b0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400407c8]
mov qword [rdi + rax*8 + 0x3fe40], rsi
mov qword [rdi + rax*8 + 0x40490], r9
inc rax
mov qword [0x1400407c8], rax
lea r8, [rsp + 0x20]
lea rdx, [0x14000e6f0]
mov rcx, qword [sym.imp.dxgi.dll_CreateDXGIFactory]
call r9
nop
xor rbx, r12
mov qword [r14], rbx
test eax, eax
js 0x140011aa9
xor ebx, ebx
mov qword [rsp + 0x20], rbx
xor r12b, r12b
mov r15d, ebx
mov rcx, qword [rsp + 0x28]
mov rax, qword [rcx]
lea r8, [rsp + 0x20]
xor edx, edx
call qword [rax + 0x38]
cmp eax, 0x887a0002
je 0x140011afe
movabs rsi, 0x7ffffffffffffffe
mov rcx, qword [rsp + 0x20]
mov rax, qword [rcx]
lea rdx, [rbp - 0x80]
call qword [rax + 0x40]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
lea rax, [rbp - 0x80]
mov rdi, 0xffffffffffffffff
inc rdi
cmp word [rax + rdi*2], 0
jne 0x1400117e4
cmp rdi, rsi
ja 0x140011af8
cmp rdi, 7
ja 0x14001183b
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], 7
lea rbx, [rdi + rdi]
mov r8, rbx
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x30]
call fcn.140038680
xor eax, eax
mov word [rsp + rbx + 0x30], ax
mov r14, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x30]
jmp 0x1400118eb
mov r14, rdi
or r14, 7
cmp r14, rsi
jbe 0x14001188d
mov r14, rsi
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x1400118bb
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140011b26
mov rcx, rax
call fcn.140018998
test rax, rax
je 0x140011b20
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400118c3
cmp r14, 0xa
mov eax, 0xa
cmovb r14, rax
lea rcx, [r14 + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x140011b26
add rcx, rcx
jne 0x140011858
mov rsi, rbx
jmp 0x1400118c3
call fcn.140018998
mov rsi, rax
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r14
lea rbx, [rdi + rdi]
mov r8, rbx
lea rdx, [rbp - 0x80]
mov rcx, rsi
call fcn.140038680
xor eax, eax
mov word [rbx + rsi], ax
lea r10, [rsp + 0x30]
cmp r14, 7
cmova r10, rsi
xor ebx, ebx
cmp rdi, 6
jb 0x140011988
lea r11, [rdi - 5]
lea r11, [r10 + r11*2]
mov rcx, r10
nop
mov rax, r11
sub rax, rcx
sar rax, 1
mov rdx, rbx
je 0x14001193a
cmp word [rcx], 0x4e
je 0x140011937
cmp rax, 1
je 0x14001193a
dec rax
add rcx, 2
cmp word [rcx], 0x4e
jne 0x140011924
mov rdx, rcx
mov rcx, rdx
test rdx, rdx
je 0x140011988
mov r8d, 6
lea rax, [0x14000e6a8]
mov rdx, rax
mov r9, rcx
sub r9, rax
nop dword [rax + rax]
movzx eax, word [rdx + r9]
cmp ax, word [rdx]
jne 0x140011ae6
add rdx, 2
sub r8, 1
jne 0x140011960
sub rcx, r10
sar rcx, 1
cmp rcx, 0xffffffffffffffff
jne 0x140011a24
lea r10, [rsp + 0x30]
cmp r14, 7
cmova r10, rsi
cmp rdi, 3
jb 0x140011a27
lea r11, [rdi - 2]
lea r11, [r10 + r11*2]
mov rcx, r10
nop word [rax + rax]
mov rax, r11
sub rax, rcx
sar rax, 1
mov rdx, rbx
je 0x1400119da
cmp word [rcx], 0x41
je 0x1400119d7
cmp rax, 1
je 0x1400119da
dec rax
add rcx, 2
cmp word [rcx], 0x41
jne 0x1400119c4
mov rdx, rcx
mov rcx, rdx
test rdx, rdx
je 0x140011a27
mov r8d, 3
lea rax, [0x14000e6b8]
mov rdx, rax
mov r9, rcx
sub r9, rax
nop dword [rax + rax]
movzx eax, word [rdx + r9]
cmp ax, word [rdx]
jne 0x140011aef
add rdx, 2
sub r8, 1
jne 0x140011a00
sub rcx, r10
sar rcx, 1
cmp rcx, 0xffffffffffffffff
je 0x140011a27
mov r12b, 1
mov rcx, qword [rsp + 0x20]
mov rax, qword [rcx]
call qword [rax + Ordinal_17]
nop
cmp r14, 7
jbe 0x140011a6e
lea rdx, [r14*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140011a66
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b20
mov rcx, rsi
call fcn.140018990
inc r15d
mov rcx, qword [rsp + 0x28]
mov rax, qword [rcx]
lea r8, [rsp + 0x20]
mov edx, r15d
call qword [rax + 0x38]
cmp eax, 0x887a0002
jne 0x1400117ae
test r12b, r12b
je 0x140011afe
mov rcx, qword [rsp + 0x28]
mov rax, qword [rcx]
call qword [rax + Ordinal_17]
movabs r12, 0xff00ff00ff00ff00
xor r13, r12
lea rax, [rbp + 0xe8]
mov qword [rax], r13
mov rcx, qword [rbp + 0xb0]
xor rcx, rsp
call fcn.140018970
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
add rcx, 2
jmp 0x140011910
add rcx, 2
jmp 0x1400119b0
call fcn.140010630
int3
mov r9d, Ordinal_17
lea r8, [0x14000e6c0]
lea rdx, [0x14000e6c4]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
call fcn.140011380
int3
call fcn.1400214d8
int3
call fcn.140010590
int3