Function at 0x180005d50
Capabilities:
Allocate or change rwx memory

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x98
movaps xmmword [rsp + 0x80], xmm6
mov rsi, rcx
lea rax, str.Allocating_memory_for_trampoline..._n
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x38], 8
xorps xmm6, xmm6
movups xmmword [rsp + 0x40], xmm6
lea rcx, [rsp + 0x28]
call fcn.1800eb7b0
mov edx, 0x1000
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 0x40
call qword [sym.imp.kernel32.dll_VirtualAlloc]
mov qword [0x1801bc170], rax
test rax, rax
je 0x18000627c
lea rax, [0x1801bc170]
mov qword [rsp + 0x60], rax
lea r14, [0x18000afa0]
mov qword [rsp + 0x68], r14
lea rax, str.Allocated_memory_for_trampoline_at_address:
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x48], 0
lea rdi, [rsp + 0x60]
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], 1
lea rcx, [rsp + 0x28]
call fcn.1800eb7b0
lea rax, str.Copying_gate_memory_to_trampoline..._n
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x38], 8
movups xmmword [rsp + 0x40], xmm6
lea rcx, [rsp + 0x28]
call fcn.1800eb7b0
mov rax, qword [0x1801bc170]
movzx ecx, byte [rsi + 8]
mov byte [rax + 8], cl
mov rcx, qword [rsi]
mov qword [rax], rcx
lea rax, str.Verifying_trampoline_memory_content_after_copy..._n
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x38], 8
movups xmmword [rsp + 0x40], xmm6
lea rcx, [rsp + 0x28]
call fcn.1800eb7b0
mov qword [rsp + 0x58], 0
mov rax, qword [0x1801bc170]
movzx eax, byte [rax]
mov byte [rsp + 0x24], al
lea r15, [rsp + 0x58]
mov qword [rsp + 0x60], r15
lea r12, [fcn.18010c070]
mov qword [rsp + 0x68], r12
lea r13, [rsp + 0x24]
mov qword [rsp + 0x70], r13
lea rbp, [0x18010b530]
mov qword [rsp + 0x78], rbp
lea rbx, str.Trampoline_memory_byte_:_0x
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], 3
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], 2
lea rsi, [rsp + 0x28]
mov rcx, rsi
call fcn.1800eb7b0
mov qword [rsp + 0x58], 1
mov rax, qword [0x1801bc170]
movzx eax, byte [rax + 1]
mov byte [rsp + 0x24], al
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], 3
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], 2
mov rcx, rsi
call fcn.1800eb7b0
mov qword [rsp + 0x58], 2
mov rax, qword [0x1801bc170]
movzx eax, byte [rax + 2]
mov byte [rsp + 0x24], al
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], 3
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], 2
mov rcx, rsi
call fcn.1800eb7b0
mov qword [rsp + 0x58], 3
mov rax, qword [0x1801bc170]
movzx eax, byte [rax + 3]
mov byte [rsp + 0x24], al
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], 3
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], 2
mov rcx, rsi
call fcn.1800eb7b0
mov qword [rsp + 0x58], 4
mov rax, qword [0x1801bc170]
movzx eax, byte [rax + 4]
mov byte [rsp + 0x24], al
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], 3
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], 2
mov rcx, rsi
call fcn.1800eb7b0
mov qword [rsp + 0x58], 5
mov rax, qword [0x1801bc170]
movzx eax, byte [rax + 5]
mov byte [rsp + 0x24], al
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], 3
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], 2
mov rcx, rsi
call fcn.1800eb7b0
mov qword [rsp + 0x58], 6
mov rax, qword [0x1801bc170]
movzx eax, byte [rax + 6]
mov byte [rsp + 0x24], al
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], 3
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], 2
mov rcx, rsi
call fcn.1800eb7b0
mov qword [rsp + 0x58], 7
mov rax, qword [0x1801bc170]
movzx eax, byte [rax + 7]
mov byte [rsp + 0x24], al
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], 3
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], 2
mov rcx, rsi
call fcn.1800eb7b0
mov qword [rsp + 0x58], 8
mov rax, qword [0x1801bc170]
movzx eax, byte [rax + 8]
mov byte [rsp + 0x24], al
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], 3
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], 2
mov rcx, rsi
call fcn.1800eb7b0
mov dword [rsp + 0x24], 0
mov rcx, qword [0x1801bc170]
lea r9, [rsp + 0x24]
mov edx, 0x1000
mov r8d, 0x40
call qword [sym.imp.kernel32.dll_VirtualProtect]
test eax, eax
je 0x1800062a1
lea rax, str.Trampoline_memory_protection_set_to_PAGE_EXECUTE_READWRITE._n
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x38], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x28]
call fcn.1800eb7b0
lea rax, [0x1801bc170]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], r14
lea rax, str.Trampoline_hook_successfully_set_at_address:
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], 1
lea rcx, [rsp + 0x28]
call fcn.1800eb7b0
mov rax, qword [0x1801bc170]
jmp 0x180006319
lea rax, str.Failed_to_allocate_memory_for_trampoline._n
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x38], 8
movups xmmword [rsp + 0x40], xmm6
jmp 0x18000630d
call fcn.1800e2770
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x30], edx
test edx, edx
je 0x1800061f9
test rax, rax
je 0x1800062c6
lea rcx, [rsp + 0x28]
call fcn.1800e2760
call qword [sym.imp.kernel32.dll_GetLastError]
mov dword [rsp + 0x58], eax
mov qword [rsp + 0x60], r15
lea rax, [0x1800e2650]
mov qword [rsp + 0x68], rax
lea rax, str.Failed_to_set_memory_protection_on_trampoline._Error_code:
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], 1
lea rcx, [rsp + 0x28]
call fcn.1800eb7b0
xor eax, eax
movaps xmm6, xmmword [rsp + 0x80]
add rsp, 0x98
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret