Function at 0x1400022c0
Capabilities:
Allocate or change rwx memory

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
mov rax, qword gs:[0x58]
mov rbx, rcx
mov ecx, 4
mov rdx, qword [rax]
mov eax, dword [rcx + rdx]
cmp dword [0x14054c6d4], eax
jle 0x140002315
lea rcx, [0x14054c6d4]
call fcn.14015ed1c
cmp dword [0x14054c6d4], 0xffffffff
jne 0x140002315
mov rax, qword [rbx + 0x10]
lea rcx, [0x14054c6d4]
mov qword [0x14054c6c8], rax
call fcn.14015ecb0
mov rax, qword [0x14054c6c8]
lea r9, [0x14054c66c]
mov rcx, qword [rbx + 0x10]
mov r8d, 4
movsxd rdx, dword [rax + 0x3c]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x14000263d
lea rcx, [rsp + 0x30]
call fcn.1400017e0
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov edi, 0x80008001
mov eax, edi
imul r8d
mov rax, qword [0x14054c6c8]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 2], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054c6c8]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 8], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054c6c8]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 6], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054c6c8]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0x16], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054c6c8]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0x12], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov rax, qword [0x14054c6c8]
mov word [rax + 0x14], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054c6c8]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0x18], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054c6c8]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0xc], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054c6c8]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0xa], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054c6c8]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0x24], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054c6c8]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0x26], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054c6c8]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0x1a], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov rcx, qword [0x14054c6c8]
mov word [rcx + 0x10], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054c6c8]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
xor edx, edx
sub r8d, ecx
mov word [rax + 0xe], r8w
mov rax, qword [0x14054c6c8]
mov rcx, qword [rbx + 0x10]
add rcx, 0x40
movsxd r8, dword [rax + 0x3c]
sub r8, 0x40
call fcn.14015fd92
mov rax, qword [0x14054c6c8]
lea r9, [0x14054c66c]
mov rcx, qword [rbx + 0x10]
mov r8d, 2
movsxd rdx, dword [rax + 0x3c]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
setne al
jmp 0x14000263f
xor al, al
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret