Function at 0x1800225f0
Capabilities:
Allocate or change rwx memory

Disassembly:
mov byte [rsp + 0x10], dl
mov qword [rsp + 8], rcx
mov eax, 0x13f8
call fcn.1800c0d70
sub rsp, rax
mov rax, qword [0x18047d0c0]
xor rax, rsp
mov qword [rsp + 0x13e0], rax
mov dword [rsp + 0x4c], 0
lea rcx, [rsp + 0x38]
call fcn.18001c4c0
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x40]
mov rcx, qword [rsp + 0x28]
call fcn.18002e000
mov rcx, rax
call fcn.1800191a0
mov qword [rsp + 0x30], rax
mov edx, dword [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.18002d350
mov r8w, 0xffff
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.18002d0a0
mov rax, qword [rsp + 0x1400]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
movsxd rax, dword [rax + 0x3c]
lea r9, [rsp + 0x4c]
mov r8d, 4
mov rdx, rax
mov rax, qword [rsp + 0x1400]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x1800226af
xor al, al
jmp 0x180022867
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.180037910
mov rcx, qword [rsp + 0x20]
mov word [rcx + 2], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.180037910
mov rcx, qword [rsp + 0x20]
mov word [rcx + 8], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.180037910
mov rcx, qword [rsp + 0x20]
mov word [rcx + 6], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.180037910
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x16], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.180037910
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x12], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.180037910
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x14], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.180037910
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x18], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.180037910
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0xc], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.180037910
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0xa], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.180037910
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x24], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.180037910
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x26], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.180037910
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x1a], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.180037910
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x10], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.180037910
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0xe], ax
movzx eax, byte [rsp + 0x1408]
test eax, eax
je 0x180022834
mov rax, qword [rsp + 0x20]
movsxd rax, dword [rax + 0x3c]
sub rax, 0x40
mov rcx, qword [rsp + 0x1400]
mov rcx, qword [rcx + 0x10]
add rcx, 0x40
mov r8, rax
xor edx, edx
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov rax, qword [rsp + 0x20]
movsxd rax, dword [rax + 0x3c]
lea r9, [rsp + 0x4c]
mov r8d, 2
mov rdx, rax
mov rax, qword [rsp + 0x1400]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x180022865
xor al, al
jmp 0x180022867
mov al, 1
mov rcx, qword [rsp + 0x13e0]
xor rcx, rsp
call fcn.1800c00c0
add rsp, 0x13f8
ret