Function at 0x18005cf10
Capabilities:
Allocate or change rwx memory

Disassembly:
mov byte [rsp + 0x10], dl
mov qword [rsp + 8], rcx
mov eax, 0x13f8
call fcn.1800c5560
sub rsp, rax
mov rax, qword [0x1804ccc80]
xor rax, rsp
mov qword [rsp + 0x13e0], rax
mov dword [rsp + 0x4c], 0
lea rcx, [rsp + 0x38]
call fcn.1800591c0
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x40]
mov rcx, qword [rsp + 0x28]
call fcn.18005eac0
mov rcx, rax
call fcn.18001b560
mov qword [rsp + 0x30], rax
mov edx, dword [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1800398d0
mov r8w, 0xffff
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.180039d20
mov rax, qword [rsp + 0x1400]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
movsxd rax, dword [rax + 0x3c]
lea r9, [rsp + 0x4c]
mov r8d, 4
mov rdx, rax
mov rax, qword [rsp + 0x1400]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x18005cfcf
xor al, al
jmp 0x18005d186
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001f7e0
mov rcx, qword [rsp + 0x20]
mov word [rcx + 2], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001f7e0
mov rcx, qword [rsp + 0x20]
mov word [rcx + 8], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001f7e0
mov rcx, qword [rsp + 0x20]
mov word [rcx + 6], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001f7e0
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x16], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001f7e0
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x12], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001f7e0
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x14], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001f7e0
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x18], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001f7e0
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0xc], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001f7e0
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0xa], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001f7e0
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x24], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001f7e0
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x26], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001f7e0
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x1a], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001f7e0
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x10], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001f7e0
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0xe], ax
movzx eax, byte [rsp + 0x1408]
test eax, eax
je 0x18005d153
mov rax, qword [rsp + 0x20]
movsxd rax, dword [rax + 0x3c]
sub rax, 0x40
mov rcx, qword [rsp + 0x1400]
mov rcx, qword [rcx + 0x10]
add rcx, 0x40
mov r8, rax
xor edx, edx
call sub.VCRUNTIME140.dll_memset
nop
mov rax, qword [rsp + 0x20]
movsxd rax, dword [rax + 0x3c]
lea r9, [rsp + 0x4c]
mov r8d, 2
mov rdx, rax
mov rax, qword [rsp + 0x1400]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x18005d184
xor al, al
jmp 0x18005d186
mov al, 1
mov rcx, qword [rsp + 0x13e0]
xor rcx, rsp
call fcn.1800c5020
add rsp, 0x13f8
ret