Function at 0x18005eb90
Capabilities:
Allocate or change rwx memory

Disassembly:
mov byte [rsp + 0x10], dl
mov qword [rsp + 8], rcx
mov eax, 0x13f8
call fcn.1800c6970
sub rsp, rax
mov rax, qword [0x1804ccc40]
xor rax, rsp
mov qword [rsp + 0x13e0], rax
mov dword [rsp + 0x4c], 0
lea rcx, [rsp + 0x38]
call fcn.18005ae40
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x40]
mov rcx, qword [rsp + 0x28]
call fcn.1800603b0
mov rcx, rax
call fcn.180019c70
mov qword [rsp + 0x30], rax
mov edx, dword [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1800399f0
mov r8w, 0xffff
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.180039e40
mov rax, qword [rsp + 0x1400]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
movsxd rax, dword [rax + 0x3c]
lea r9, [rsp + 0x4c]
mov r8d, 4
mov rdx, rax
mov rax, qword [rsp + 0x1400]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x18005ec4f
xor al, al
jmp 0x18005ee06
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001fc50
mov rcx, qword [rsp + 0x20]
mov word [rcx + 2], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001fc50
mov rcx, qword [rsp + 0x20]
mov word [rcx + 8], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001fc50
mov rcx, qword [rsp + 0x20]
mov word [rcx + 6], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001fc50
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x16], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001fc50
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x12], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001fc50
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x14], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001fc50
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x18], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001fc50
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0xc], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001fc50
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0xa], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001fc50
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x24], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001fc50
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x26], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001fc50
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x1a], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001fc50
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0x10], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.18001fc50
mov rcx, qword [rsp + 0x20]
mov word [rcx + 0xe], ax
movzx eax, byte [rsp + 0x1408]
test eax, eax
je 0x18005edd3
mov rax, qword [rsp + 0x20]
movsxd rax, dword [rax + 0x3c]
sub rax, 0x40
mov rcx, qword [rsp + 0x1400]
mov rcx, qword [rcx + 0x10]
add rcx, 0x40
mov r8, rax
xor edx, edx
call sub.VCRUNTIME140.dll_memset
nop
mov rax, qword [rsp + 0x20]
movsxd rax, dword [rax + 0x3c]
lea r9, [rsp + 0x4c]
mov r8d, 2
mov rdx, rax
mov rax, qword [rsp + 0x1400]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x18005ee04
xor al, al
jmp 0x18005ee06
mov al, 1
mov rcx, qword [rsp + 0x13e0]
xor rcx, rsp
call fcn.1800c6440
add rsp, 0x13f8
ret