Function at 0x1400116e5
Capabilities:
Allocate or change rwx memory

Disassembly:
jmp 0x140019bd0
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0x200
lea rbp, [rsp + 0x30]
mov rdi, rsp
mov ecx, 0x80
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x228]
mov qword [rbp + 0x1a8], 0xfffffffffffffffe
mov rax, qword [0x14002b468]
xor rax, rbp
mov qword [rbp + 0x1c0], rax
lea rcx, [0x140031037]
call fcn.140011172
mov qword [rbp + 8], 0
lea rax, [rbp + 0x48]
mov rdi, rax
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
mov dword [rbp + 0x74], 0
jmp 0x140019c51
mov eax, dword [rbp + 0x74]
inc eax
mov dword [rbp + 0x74], eax
movsxd rax, dword [rbp + 0x74]
mov qword [rbp + 0x1b8], rax
mov rcx, qword [rbp + 0x1f8]
call fcn.1400114ba
mov rcx, qword [rbp + 0x1b8]
cmp rcx, rax
jae 0x140019cfb
movsxd rax, dword [rbp + 0x74]
mov rdx, rax
mov rcx, qword [rbp + 0x1f8]
call fcn.1400116b3
xor edx, edx
mov rcx, qword [rax]
call fcn.140011046
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
je 0x140019cf6
lea rdx, str.RWX_Founded
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112c6
movsxd rax, dword [rbp + 0x74]
mov rdx, rax
mov rcx, qword [rbp + 0x1f8]
call fcn.1400116b3
mov rax, qword [rax]
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x50], rax
movsxd rax, dword [rbp + 0x74]
mov rdx, rax
mov rcx, qword [rbp + 0x1f8]
call fcn.1400116b3
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov dword [rbp + 0x58], eax
jmp 0x140019cfb
jmp 0x140019c49
cmp qword [rbp + 0x48], 0
jne 0x140019df9
mov dword [rbp + 0x94], 0
jmp 0x140019d20
mov eax, dword [rbp + 0x94]
inc eax
mov dword [rbp + 0x94], eax
movsxd rax, dword [rbp + 0x94]
mov qword [rbp + 0x1b8], rax
mov rcx, qword [rbp + 0x1f8]
call fcn.1400114ba
mov rcx, qword [rbp + 0x1b8]
cmp rcx, rax
jae 0x140019df9
movsxd rax, dword [rbp + 0x94]
mov rdx, rax
mov rcx, qword [rbp + 0x1f8]
call fcn.1400116b3
xor edx, edx
mov rcx, qword [rax]
call fcn.14001150f
mov qword [rbp + 8], rax
lea rdx, str.RW_Founded
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112c6
cmp qword [rbp + 8], 0
je 0x140019df4
movsxd rax, dword [rbp + 0x94]
mov rdx, rax
mov rcx, qword [rbp + 0x1f8]
call fcn.1400116b3
mov rax, qword [rax]
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x50], rax
movsxd rax, dword [rbp + 0x94]
mov rdx, rax
mov rcx, qword [rbp + 0x1f8]
call fcn.1400116b3
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov dword [rbp + 0x58], eax
lea rax, [rbp + 0x24]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8d, 0x39f
mov rdx, qword [rbp + 0x50]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
jmp 0x140019df9
jmp 0x140019d12
lea rax, [rbp + 0x178]
lea rcx, [rbp + 0x48]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x18
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x1f8]
call fcn.140011735
lea rax, [rbp + 0x178]
mov rdi, qword [rbp + 0x1f0]
mov rsi, rax
mov ecx, 0x18
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rbp + 0x1f0]
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x140024ee0]
call fcn.140011712
mov rax, rdi
mov rcx, qword [rbp + 0x1c0]
xor rcx, rbp
call fcn.140011208
lea rsp, [rbp + 0x1d0]
pop rdi
pop rsi
pop rbp
ret