Function at 0x14005efb0
Capabilities:
Allocate or change rwx memory

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 8], rcx
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0x40b0
call fcn.140137880
sub rsp, rax
lea rbx, [0x140177278]
mov rdx, rbx
call fcn.14005eee0
test eax, eax
jne 0x14005f001
lea rbx, str.HD_Player
mov rdx, rbx
call fcn.14005eee0
test eax, eax
cmove rbx, qword [rsp + 0x40e0]
mov rdx, rbx
call fcn.14005eee0
test eax, eax
je 0x14005f02f
mov dword [0x1405478b8], eax
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1405478c0], rax
test rax, rax
jne 0x14005f048
mov r8d, Ordinal_30
lea rdx, str.Aplicando_Scope_Track_AWM
lea rcx, [0x140525240]
call fcn.14004b620
lea r8, str.Aplicando_Scope_Track_AWM
mov edx, 5
lea rcx, [rsp + 0x50]
call fcn.14005c830
mov rax, qword [0x14055ee58]
cmp rax, qword [0x14055ee60]
je 0x14005f08e
mov r8d, 0x2030
lea rdx, [rsp + 0x50]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x14055ee58], 0x2030
jmp 0x14005f09b
lea r8, [rsp + 0x50]
mov rdx, rax
call fcn.14006d810
mov edx, 0x1c2
mov ecx, 0x352
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x34
call fcn.1401372a8
mov rbx, rax
mov dword [rax], 0xffb1e040
mov dword [rax + 4], 0xffb1e0ff
mov dword [rax + 8], 0xffb1e0ff
mov dword [rax + 0xc], 0xffb1e0ff
mov dword [rax + 0x10], 0xffb1e0ff
mov dword [rax + 0x14], 0xff
mov dword [rax + 0x18], 0xf0000000
mov dword [rax + 0x1c], 0x48000041
mov dword [rax + 0x20], 0x42
mov dword [rax + 0x24], 0x1333333f
mov dword [rax + 0x28], 0xb0000040
mov dword [rax + 0x2c], 0x2900003f
mov dword [rax + 0x30], 0x15c
mov ecx, 0x34
call fcn.1401372a8
mov rdi, rax
mov dword [rax], 0x8ccccd40
mov dword [rax + 4], 0xf5c28f3f
mov dword [rax + 8], 0xcccccd3c
mov qword [rax + 0xc], 0x73d
mov dword [rax + 0x14], 0
mov dword [rax + 0x18], 0xf0000000
mov dword [rax + 0x1c], 0x48000041
mov dword [rax + 0x20], 0x42
mov dword [rax + 0x24], 0x1333333f
mov dword [rax + 0x28], 0xb0000040
mov dword [rax + 0x2c], 0x8000003f
mov dword [rax + 0x30], 0x13f
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll__msize]
mov r14, rax
test eax, eax
jle 0x14005f335
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
xor r12d, r12d
mov qword [rsp + 0x40], r12
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9, rdi
call fcn.14005f360
mov rdi, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
cmp rdi, rsi
jne 0x14005f200
test rdi, rdi
je 0x14005f335
mov rdx, qword [rsp + 0x40]
sub rdx, rdi
and rdx, 0xfffffffffffffff8
mov rax, rdi
cmp rdx, 0x1000
jb 0x14005f1f3
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f2a1
mov rcx, rdi
call fcn.1401371e8
jmp 0x14005f335
mov ebp, r12d
sub rsi, rdi
sar rsi, 3
test rsi, rsi
je 0x14005f26f
movsxd r15, r14d
mov r14, rdi
nop word [rax + rax]
mov edx, dword [r14]
lea rax, [rsp + 0x40e0]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8, r15
mov rcx, qword [0x1405478c0]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov qword [rsp + 0x20], r12
mov r9, r15
mov r8, rbx
mov rdx, qword [r14]
mov rcx, qword [0x1405478c0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
inc ebp
lea r14, [r14 + 8]
movsxd rax, ebp
cmp rax, rsi
jb 0x14005f220
test rdi, rdi
je 0x14005f2b0
mov rdx, qword [rsp + 0x40]
sub rdx, rdi
and rdx, 0xfffffffffffffff8
mov rax, rdi
cmp rdx, 0x1000
jb 0x14005f2a8
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f2a8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1401371e8
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Scope_Track_Activado
lea rcx, [0x140525240]
call fcn.14004b620
lea r8, str.Scope_Track_Activado
mov edx, 1
lea rcx, [rsp + 0x2080]
call fcn.14005c830
mov rax, qword [0x14055ee58]
cmp rax, qword [0x14055ee60]
je 0x14005f315
mov r8d, 0x2030
lea rdx, [rsp + 0x2080]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x14055ee58], 0x2030
jmp 0x14005f325
lea r8, [rsp + 0x2080]
mov rdx, rax
call fcn.14006d810
mov edx, 0x1c2
mov ecx, 0x352
call qword [sym.imp.KERNEL32.dll_Beep]
mov rcx, qword [0x1405478c0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r11, [rsp + 0x40b0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret