Function at 0x18000f4a0
Capabilities:
Allocate or change rwx memory

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1f8]
sub rsp, 0x2d0
mov qword [rbp - 0x70], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x1800e0280]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
xor r15d, r15d
mov dword [rbp - 0x78], r15d
cmp word [0x1800e7466], 0x26
setae al
test al, al
jne 0x18000f82f
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp - 0x40]
call fcn.1800743b0
lea rdi, [0x180000000]
lea rax, [rdi + 0xb08f8]
mov qword [rbp - 0x40], rax
lea rax, [rdi + 0xb09a8]
mov qword [rbp - 0x30], rax
lea rax, [rbp + 0x58]
mov qword [rsp + 0x60], rax
lea r12, [0x1800b0988]
mov qword [rbp + 0x58], r12
lea r13, [0x1800b08f0]
mov qword [rbp + 0x58], r13
mov dword [rbp - 0x78], 1
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800b0850]
mov qword [rbp + rcx - 0x40], rax
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx - 0x44], edx
mov qword [rbp - 0x38], r15
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x40]
add rcx, rax
lea rdx, [rbp - 0x28]
call fcn.1800141b0
nop
lea rax, [rbp - 0x30]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800b0868]
mov qword [rbp + rcx - 0x30], rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx - 0x34], edx
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800b0908]
mov qword [rbp + rcx - 0x40], rax
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x20]
mov dword [rbp + rcx - 0x44], edx
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800b0990]
mov qword [rbp + rcx - 0x40], rax
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 0x44], edx
lea rax, [rbp - 0x28]
mov qword [rsp + 0x60], rax
lea rcx, [rbp - 0x28]
call fcn.180014250
nop
lea rax, [0x1800b0910]
mov qword [rbp - 0x28], rax
mov qword [rbp + 0x40], r15
mov dword [rbp + 0x48], r15d
mov r9b, 0x3c
lea r8d, [r15 + 0x1a]
lea rdx, [0x1800b0460]
lea rcx, [rsp + 0x20]
call fcn.1800403f0
mov r15, rax
mov r9b, 0x79
mov r8d, 1
lea rdx, [0x1800b040c]
lea rcx, [rsp + 0x40]
call fcn.1800403f0
mov r14, rax
mov r9b, 0xbe
mov r8d, 1
lea rdx, [0x1800b0410]
lea rcx, [rsp + 0x68]
call fcn.1800403f0
mov rdi, rax
call fcn.18006c598
mov esi, eax
call fcn.18006bebc
mov ebx, eax
mov rdx, rdi
lea rcx, [rbp - 0x30]
call fcn.180015f30
mov rcx, rax
mov edx, ebx
call fcn.180011820
mov rcx, rax
mov rdx, r14
call fcn.180015f30
mov rcx, rax
mov rdx, r15
call fcn.180015f30
mov rcx, rax
lea rdx, str._Last_Error:
call fcn.1800161a0
mov rcx, rax
mov edx, esi
call fcn.180011820
nop
cmp qword [rbp - 0x80], 8
jb 0x18000f6e2
mov rcx, qword [rsp + 0x68]
call fcn.180073478
mov qword [rbp - 0x80], 7
xor esi, esi
mov qword [rsp + 0x78], rsi
mov word [rsp + 0x68], si
cmp qword [rsp + 0x58], 8
jb 0x18000f708
mov rcx, qword [rsp + 0x40]
call fcn.180073478
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], rsi
mov word [rsp + 0x40], si
cmp qword [rsp + 0x38], 8
jb 0x18000f72d
mov rcx, qword [rsp + 0x20]
call fcn.180073478
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], rsi
mov word [rsp + 0x20], si
mov r9b, 0xc
mov r8d, 6
lea rdx, [0x1800b0398]
lea rcx, [rsp + 0x68]
call fcn.18003fcc0
mov rdi, rax
mov r9b, 0xf8
mov r8d, 5
lea rdx, [0x1800b0414]
lea rcx, [rsp + 0x40]
call fcn.18003fcc0
mov rbx, rax
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x40]
call fcn.1800124c0
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.18003bf90
nop
cmp qword [rsp + 0x38], 8
jb 0x18000f7aa
mov rcx, qword [rsp + 0x20]
call fcn.180073478
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], rsi
mov word [rsp + 0x20], si
cmp qword [rsp + 0x58], 0x10
jb 0x18000f7cf
mov rcx, qword [rsp + 0x40]
call fcn.180073478
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0x50], rsi
mov byte [rsp + 0x40], 0
cmp qword [rbp - 0x80], 0x10
jb 0x18000f7f3
mov rcx, qword [rsp + 0x68]
call fcn.180073478
mov qword [rbp - 0x80], 0xf
mov qword [rsp + 0x78], rsi
mov byte [rsp + 0x68], 0
lea rcx, [rbp + 0x58]
call fcn.1800123f0
lea rax, [rbp + 0x58]
mov qword [rsp + 0x60], rax
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x58], r12
lea rcx, [rbp + 0x58]
call fcn.1800723c4
mov al, 1
jmp 0x18001012b
lea rcx, [0x1800e74d8]
call fcn.18006da68
lea rcx, [0x1800e74a0]
call fcn.18006da68
mov r9b, 0xc4
mov r8d, 0xf
lea rdx, [0x1800b0498]
lea rcx, [rsp + 0x40]
call fcn.18003fcc0
mov rbx, rax
mov r9b, 0xa6
mov r8d, 0xc
lea rdx, [0x1800b04a8]
lea rcx, [rsp + 0x20]
call fcn.1800403f0
nop
cmp qword [rbx + 0x18], 0x10
jb 0x18000f889
mov rbx, qword [rbx]
cmp qword [rax + 0x18], 8
jb 0x18000f893
mov rax, qword [rax]
mov rcx, rax
call fcn.18006c8c0
mov rcx, rax
mov rdx, rbx
call fcn.18006ccbc
mov qword [0x1800e7468], rax
cmp qword [rsp + 0x38], 8
jb 0x18000f8bf
mov rcx, qword [rsp + 0x20]
call fcn.180073478
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], r15
mov word [rsp + 0x20], r15w
cmp qword [rsp + 0x58], 0x10
jb 0x18000f8e5
mov rcx, qword [rsp + 0x40]
call fcn.180073478
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0x50], r15
mov byte [rsp + 0x40], 0
lea rdx, [0x1800189f0]
lea rcx, [0x1800e7468]
call fcn.180037ca0
mov r9b, 0xa8
mov r8d, 9
lea rdx, [0x1800b04c8]
lea rcx, [rsp + 0x40]
call fcn.18003fcc0
mov rbx, rax
mov r9b, 0x45
mov r8d, 0xc
lea rdx, str..K9W2m_q
lea rcx, [rsp + 0x20]
call fcn.1800403f0
nop
cmp qword [rbx + 0x18], 0x10
jb 0x18000f94d
mov rbx, qword [rbx]
cmp qword [rax + 0x18], 8
jb 0x18000f957
mov rax, qword [rax]
mov rcx, rax
call fcn.18006c8c0
mov rcx, rax
mov rdx, rbx
call fcn.18006ccbc
mov qword [0x1800e7440], rax
cmp qword [rsp + 0x38], 8
jb 0x18000f983
mov rcx, qword [rsp + 0x20]
call fcn.180073478
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], r15
mov word [rsp + 0x20], r15w
cmp qword [rsp + 0x58], 0x10
jb 0x18000f9a9
mov rcx, qword [rsp + 0x40]
call fcn.180073478
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0x50], r15
mov byte [rsp + 0x40], 0
lea rdx, [0x18001b6b0]
lea rcx, [0x1800e7440]
call fcn.180037ca0
mov r9b, 0x2b
mov r8d, 8
lea rdx, [0x1800b04f8]
lea rcx, [rsp + 0x40]
call fcn.18003fcc0
mov rbx, rax
mov r9b, 0x85
mov r8d, 0xc
lea rdx, [0x1800b0508]
lea rcx, [rsp + 0x20]
call fcn.1800403f0
nop
cmp qword [rbx + 0x18], 0x10
jb 0x18000fa11
mov rbx, qword [rbx]
cmp qword [rax + 0x18], 8
jb 0x18000fa1b
mov rax, qword [rax]
mov rcx, rax
call fcn.18006c8c0
mov rcx, rax
mov rdx, rbx
call fcn.18006ccbc
mov qword [0x1800e7478], rax
cmp qword [rsp + 0x38], 8
jb 0x18000fa47
mov rcx, qword [rsp + 0x20]
call fcn.180073478
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], r15
mov word [rsp + 0x20], r15w
cmp qword [rsp + 0x58], 0x10
jb 0x18000fa6d
mov rcx, qword [rsp + 0x40]
call fcn.180073478
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0x50], r15
mov byte [rsp + 0x40], 0
lea rdx, [0x18002abc0]
lea rcx, [0x1800e7478]
call fcn.180037ca0
mov r9b, 0x8d
mov r8d, 0x16
lea rdx, [0x1800b0528]
lea rcx, [rsp + 0x40]
call fcn.18003fcc0
mov rbx, rax
mov r9b, 0xdb
mov r8d, 0xc
lea rdx, [0x1800b0540]
lea rcx, [rsp + 0x20]
call fcn.1800403f0
nop
cmp qword [rbx + 0x18], 0x10
jb 0x18000fad5
mov rbx, qword [rbx]
cmp qword [rax + 0x18], 8
jb 0x18000fadf
mov rax, qword [rax]
mov rcx, rax
call fcn.18006c8c0
mov rcx, rax
mov rdx, rbx
call fcn.18006ccbc
mov qword [0x1800e7450], rax
cmp qword [rsp + 0x38], 8
jb 0x18000fb0b
mov rcx, qword [rsp + 0x20]
call fcn.180073478
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], r15
mov word [rsp + 0x20], r15w
cmp qword [rsp + 0x58], 0x10
jb 0x18000fb31
mov rcx, qword [rsp + 0x40]
call fcn.180073478
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0x50], r15
mov byte [rsp + 0x40], 0
lea rdx, [0x18002b2c0]
lea rcx, [0x1800e7450]
call fcn.180037ca0
mov r9b, 0xf9
mov r8d, 0x13
lea rdx, [0x1800b0560]
lea rcx, [rsp + 0x40]
call fcn.18003fcc0
mov rbx, rax
mov r9b, 0xc2
mov r8d, 0xc
lea rdx, [0x1800b0578]
lea rcx, [rsp + 0x20]
call fcn.1800403f0
nop
cmp qword [rbx + 0x18], 0x10
jb 0x18000fb99
mov rbx, qword [rbx]
cmp qword [rax + 0x18], 8
jb 0x18000fba3
mov rax, qword [rax]
mov rcx, rax
call fcn.18006c8c0
mov rcx, rax
mov rdx, rbx
call fcn.18006ccbc
mov qword [0x1800e7438], rax
cmp qword [rsp + 0x38], 8
jb 0x18000fbcf
mov rcx, qword [rsp + 0x20]
call fcn.180073478
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], r15
mov word [rsp + 0x20], r15w
cmp qword [rsp + 0x58], 0x10
jb 0x18000fbf5
mov rcx, qword [rsp + 0x40]
call fcn.180073478
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0x50], r15
mov byte [rsp + 0x40], 0
lea rdx, [0x18002b390]
lea rcx, [0x1800e7438]
call fcn.180037ca0
call fcn.18006bc88
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x50], 7
mov qword [rbp - 0x58], r15
mov word [rbp - 0x68], r15w
cmp word [rax], 0
jne 0x18000fc44
mov r8, r15
jmp 0x18000fc5b
or r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18000fc50
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.180014300
nop
mov r9b, 0x36
mov r8d, 0xf
lea rdx, str.e6E___K_
lea rcx, [rsp + 0x20]
call fcn.1800403f0
nop
mov r9, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x18000fc91
mov rax, qword [rax]
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.180012d40
cmp rax, 0xffffffffffffffff
setne bl
cmp qword [rsp + 0x38], 8
jb 0x18000fcb9
mov rcx, qword [rsp + 0x20]
call fcn.180073478
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], r15
mov word [rsp + 0x20], r15w
test bl, bl
je 0x18000fd99
mov r9b, 0xce
mov r8d, 0x10
lea rdx, [0x1800b05b8]
lea rcx, [rsp + 0x40]
call fcn.18003fcc0
mov rbx, rax
mov r9b, 0x10
mov r8d, 0xc
lea rdx, [0x1800b05d0]
lea rcx, [rsp + 0x20]
call fcn.1800403f0
nop
cmp qword [rbx + 0x18], 0x10
jb 0x18000fd17
mov rbx, qword [rbx]
cmp qword [rax + 0x18], 8
jb 0x18000fd21
mov rax, qword [rax]
mov rcx, rax
call fcn.18006c8c0
mov rcx, rax
mov rdx, rbx
call fcn.18006ccbc
mov qword [0x1800e7428], rax
cmp qword [rsp + 0x38], 8
jb 0x18000fd4d
mov rcx, qword [rsp + 0x20]
call fcn.180073478
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], r15
mov word [rsp + 0x20], r15w
cmp qword [rsp + 0x58], 0x10
jb 0x18000fd73
mov rcx, qword [rsp + 0x40]
call fcn.180073478
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0x50], r15
mov byte [rsp + 0x40], 0
lea rdx, [0x18000e6e0]
lea rcx, [0x1800e7428]
call fcn.180037ca0
lea rdi, [0x1800694ad]
lea r12, [0x180069410]
sub rdi, r12
mov r9d, 0x40
mov r8d, 0x1000
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
mov qword [0x1800e7420], rax
test rax, rax
je 0x18000fefa
mov r8, rdi
mov rdx, r12
mov rcx, rax
call fcn.180072a70
sub rbx, r12
lea rdi, [0x180000000]
lea rsi, [rdi + 0x69428]
add rsi, rbx
lea r14, [rdi + 0x69430]
add r14, rbx
mov qword [rbx + rdi + 0x69418], r15
lea rax, [0x18002b020]
mov qword [rbx + rdi + 0x69420], rax
mov r9b, 0x7c
mov r8d, 0x19
lea rdx, str._
lea rcx, [rsp + 0x40]
call fcn.18003fcc0
mov rbx, rax
mov r9b, 0xf8
mov r8d, 0xc
lea rdx, [0x1800b0610]
lea rcx, [rsp + 0x20]
call fcn.1800403f0
nop
cmp qword [rbx + 0x18], 0x10
jb 0x18000fe59
mov rbx, qword [rbx]
cmp qword [rax + 0x18], 8
jb 0x18000fe63
mov rax, qword [rax]
mov rcx, rax
call fcn.18006c8c0
mov rcx, rax
mov rdx, rbx
call fcn.18006ccbc
mov qword [0x1800e7430], rax
cmp qword [rsp + 0x38], 8
jb 0x18000fe8f
mov rcx, qword [rsp + 0x20]
call fcn.180073478
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], r15
mov word [rsp + 0x20], r15w
cmp qword [rsp + 0x58], 0x10
jb 0x18000feb5
mov rcx, qword [rsp + 0x40]
call fcn.180073478
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0x50], r15
mov byte [rsp + 0x40], 0
mov rax, qword [0x1800e7430]
mov qword [rsi], rax
mov rdx, r14
mov rcx, rsi
call fcn.180037ca0
mov rax, qword [0x1800e7420]
sub rax, r12
mov qword [rax + rdi + 0x69418], 1
mov bl, 1
jmp 0x180010107
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0xc0]
call fcn.1800743b0
lea rcx, [rbp + 0xc0]
call fcn.180012320
nop
mov r9b, 0x79
mov r8d, 1
lea rdx, [0x1800b040c]
lea rcx, [rsp + 0x40]
call fcn.1800403f0
mov r14, rax
mov r9b, 0xbe
mov r8d, 1
lea rdx, [0x1800b0410]
lea rcx, [rsp + 0x20]
call fcn.1800403f0
mov rdi, rax
call fcn.18006c598
mov esi, eax
call fcn.18006bebc
mov ebx, eax
mov rdx, rdi
lea rcx, [rbp + 0xd0]
call fcn.180015f30
mov rcx, rax
mov edx, ebx
call fcn.180011820
mov rcx, rax
mov rdx, r14
call fcn.180015f30
mov rcx, rax
lea rdx, str.VirtualAlloc_failed
call fcn.1800161a0
mov rcx, rax
lea rdx, str._Last_Error:
call fcn.1800161a0
mov rcx, rax
mov edx, esi
call fcn.180011820
nop
cmp qword [rsp + 0x38], 8
jb 0x18000ffc2
mov rcx, qword [rsp + 0x20]
call fcn.180073478
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], r15
mov word [rsp + 0x20], r15w
cmp qword [rsp + 0x58], 8
jb 0x18000ffe8
mov rcx, qword [rsp + 0x40]
call fcn.180073478
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], r15
mov word [rsp + 0x40], r15w
mov r9b, 0xc
mov r8d, 6
lea rdx, [0x1800b0398]
lea rcx, [rsp + 0x68]
call fcn.18003fcc0
mov rdi, rax
mov r9b, 0xf8
mov r8d, 5
lea rdx, [0x1800b0414]
lea rcx, [rsp + 0x40]
call fcn.18003fcc0
mov rbx, rax
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0xc0]
call fcn.1800124c0
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.18003bf90
nop
cmp qword [rsp + 0x38], 8
jb 0x180010069
mov rcx, qword [rsp + 0x20]
call fcn.180073478
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], r15
mov word [rsp + 0x20], r15w
cmp qword [rsp + 0x58], 0x10
jb 0x18001008f
mov rcx, qword [rsp + 0x40]
call fcn.180073478
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0x50], r15
mov byte [rsp + 0x40], 0
cmp qword [rbp - 0x80], 0x10
jb 0x1800100b3
mov rcx, qword [rsp + 0x68]
call fcn.180073478
mov qword [rbp - 0x80], 0xf
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x68], 0
lea rcx, [rbp + 0x158]
call fcn.1800123f0
lea rax, [rbp + 0x158]
mov qword [rsp + 0x60], rax
lea r13, [0x1800b08f0]
mov qword [rbp + 0x158], r13
lea r12, [0x1800b0988]
mov qword [rbp + 0x158], r12
lea rcx, [rbp + 0x158]
call fcn.1800723c4
xor bl, bl
cmp qword [rbp - 0x50], 8
jb 0x180010117
mov rcx, qword [rbp - 0x68]
call fcn.180073478
mov qword [rbp - 0x50], 7
mov qword [rbp - 0x58], r15
mov word [rbp - 0x68], r15w
movzx eax, bl
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.180072850
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret