Function at 0x140001f18
Capabilities:
Allocate or change rwx memory

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
mov rax, qword gs:[0x58]
mov rbx, rcx
mov ecx, 4
mov rdx, qword [rax]
mov eax, dword [rcx + rdx]
cmp dword [0x14054b6cc], eax
jle 0x140001f6d
lea rcx, [0x14054b6cc]
call fcn.14015e97c
cmp dword [0x14054b6cc], 0xffffffff
jne 0x140001f6d
mov rax, qword [rbx + 0x10]
lea rcx, [0x14054b6cc]
mov qword [0x14054b6c0], rax
call fcn.14015e910
mov rax, qword [0x14054b6c0]
lea r9, [0x14054b3fc]
mov rcx, qword [rbx + 0x10]
mov r8d, 4
movsxd rdx, dword [rax + 0x3c]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x140002295
lea rcx, [rsp + 0x30]
call fcn.140001438
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov edi, 0x80008001
mov eax, edi
imul r8d
mov rax, qword [0x14054b6c0]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 2], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054b6c0]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 8], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054b6c0]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 6], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054b6c0]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0x16], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054b6c0]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0x12], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov rax, qword [0x14054b6c0]
mov word [rax + 0x14], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054b6c0]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0x18], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054b6c0]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0xc], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054b6c0]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0xa], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054b6c0]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0x24], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054b6c0]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0x26], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054b6c0]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov word [rax + 0x1a], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
sub r8d, ecx
mov rcx, qword [0x14054b6c0]
mov word [rcx + 0x10], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, edi
imul r8d
mov rax, qword [0x14054b6c0]
add edx, r8d
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xffff
xor edx, edx
sub r8d, ecx
mov word [rax + 0xe], r8w
mov rax, qword [0x14054b6c0]
mov rcx, qword [rbx + 0x10]
add rcx, 0x40
movsxd r8, dword [rax + 0x3c]
sub r8, 0x40
call fcn.14015f9f2
mov rax, qword [0x14054b6c0]
lea r9, [0x14054b3fc]
mov rcx, qword [rbx + 0x10]
mov r8d, 2
movsxd rdx, dword [rax + 0x3c]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
setne al
jmp 0x140002297
xor al, al
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret