Function at 0x14005d130
Capabilities:
Allocate or change rwx memory

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x40
mov rax, qword [0x1400b9010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov r9d, dword [0x1400bda18]
mov rdi, r8
mov rbx, rdx
test r9d, r9d
jne 0x14005cd4e
mov r9d, 1
mov dword [0x1400bda10], ecx
mov dword [0x1400bda18], r9d
jmp 0x14005cd94
mov rdx, qword [0x1400ef000]
cmp rdx, qword [0x1400ef008]
mov eax, ecx
mov qword [rsp + 0x30], rax
je 0x14005cd7c
mov qword [rdx], rax
mov rax, qword [0x1400ef000]
add rax, 8
mov qword [0x1400ef000], rax
jmp 0x14005cd9b
lea r8, [rsp + 0x30]
lea rcx, [0x1400eeff8]
call fcn.14005cf80
mov r9d, dword [0x1400bda18]
mov rax, qword [0x1400ef000]
mov ecx, dword [rbx]
test r9d, r9d
jne 0x14005cdb7
mov r9d, 1
mov dword [0x1400bda10], ecx
mov dword [0x1400bda18], r9d
jmp 0x14005cdfe
cmp rax, qword [0x1400ef008]
mov qword [rsp + 0x30], rcx
je 0x14005cddc
mov qword [rax], rcx
mov rax, qword [0x1400ef000]
add rax, 8
mov qword [0x1400ef000], rax
jmp 0x14005cdfe
lea r8, [rsp + 0x30]
mov rdx, rax
lea rcx, [0x1400eeff8]
call fcn.14005cf80
mov r9d, dword [0x1400bda18]
mov rax, qword [0x1400ef000]
mov ecx, dword [rdi]
test r9d, r9d
jne 0x14005ce17
mov dword [0x1400bda10], ecx
mov dword [0x1400bda18], 1
jmp 0x14005ce57
cmp rax, qword [0x1400ef008]
mov qword [rsp + 0x30], rcx
je 0x14005ce3c
mov qword [rax], rcx
mov rax, qword [0x1400ef000]
add rax, 8
mov qword [0x1400ef000], rax
jmp 0x14005ce57
lea r8, [rsp + 0x30]
mov rdx, rax
lea rcx, [0x1400eeff8]
call fcn.14005cf80
mov rax, qword [0x1400ef000]
sub rax, qword [0x1400eeff8]
sar rax, 3
movsxd rbx, eax
mov rcx, rbx
call fcn.14005e7f4
xor esi, esi
mov rdi, rax
mov r8d, esi
test rbx, rbx
jle 0x14005ce98
nop word [rax + rax]
mov rcx, qword [0x1400eeff8]
movzx edx, byte [rcx + r8*8]
mov byte [r8 + rax], dl
inc r8
cmp r8, rbx
jl 0x14005ce80
movsxd rbx, dword [0x1400bda10]
lea rax, [rsp + 0x30]
mov rcx, qword [0x1400bda60]
mov r9d, 0x40
mov rdx, rbx
mov qword [rsp + 0x20], rax
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1400bda60]
mov r9d, 8
mov r8, rdi
mov qword [rsp + 0x20], rsi
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r9d, dword [rsp + 0x30]
mov r8d, 8
mov rcx, qword [0x1400bda60]
mov rdx, rbx
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, rdi
call fcn.14005e300
mov rax, qword [0x1400eeff8]
cmp rax, qword [0x1400ef000]
mov dword [0x1400bda10], esi
mov dword [0x1400bda18], esi
je 0x14005cf2c
mov qword [0x1400ef000], rax
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14005e040
add rsp, 0x40
pop rdi
pop rsi
pop rbx
ret
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov r10d, dword [0x1400bda18]
mov rsi, r9
mov rdi, r8
mov rbx, rdx
test r10d, r10d
jne 0x14005d169
mov r10d, 1
mov dword [0x1400bda10], ecx
mov dword [0x1400bda18], r10d
jmp 0x14005d1a5
mov rdx, qword [0x1400ef000]
cmp rdx, qword [0x1400ef008]
mov eax, ecx
mov qword [rsp + 0x38], rax
je 0x14005d18d
mov qword [rdx], rax
add qword [0x1400ef000], 8
jmp 0x14005d1a5
lea r8, [rsp + 0x38]
lea rcx, [0x1400eeff8]
call fcn.14005cf80
mov r10d, dword [0x1400bda18]
mov eax, dword [rbx]
test r10d, r10d
jne 0x14005d1c1
mov r10d, 1
mov dword [0x1400bda10], eax
mov dword [0x1400bda18], r10d
jmp 0x14005d1fb
mov rdx, qword [0x1400ef000]
cmp rdx, qword [0x1400ef008]
mov qword [rsp + 0x38], rax
je 0x14005d1e3
mov qword [rdx], rax
add qword [0x1400ef000], 8
jmp 0x14005d1fb
lea r8, [rsp + 0x38]
lea rcx, [0x1400eeff8]
call fcn.14005cf80
mov r10d, dword [0x1400bda18]
mov eax, dword [rdi]
test r10d, r10d
jne 0x14005d217
mov r10d, 1
mov dword [0x1400bda10], eax
mov dword [0x1400bda18], r10d
jmp 0x14005d251
mov rdx, qword [0x1400ef000]
cmp rdx, qword [0x1400ef008]
mov qword [rsp + 0x38], rax
je 0x14005d239
mov qword [rdx], rax
add qword [0x1400ef000], 8
jmp 0x14005d251
lea r8, [rsp + 0x38]
lea rcx, [0x1400eeff8]
call fcn.14005cf80
mov r10d, dword [0x1400bda18]
mov eax, dword [rsi]
test r10d, r10d
jne 0x14005d26d
mov r10d, 1
mov dword [0x1400bda10], eax
mov dword [0x1400bda18], r10d
jmp 0x14005d2a7
mov rdx, qword [0x1400ef000]
cmp rdx, qword [0x1400ef008]
mov qword [rsp + 0x38], rax
je 0x14005d28f
mov qword [rdx], rax
add qword [0x1400ef000], 8
jmp 0x14005d2a7
lea r8, [rsp + 0x38]
lea rcx, [0x1400eeff8]
call fcn.14005cf80
mov r10d, dword [0x1400bda18]
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax]
test r10d, r10d
jne 0x14005d2c8
mov r10d, 1
mov dword [0x1400bda10], ecx
mov dword [0x1400bda18], r10d
jmp 0x14005d302
mov rdx, qword [0x1400ef000]
cmp rdx, qword [0x1400ef008]
mov qword [rsp + 0x50], rcx
je 0x14005d2ea
mov qword [rdx], rcx
add qword [0x1400ef000], 8
jmp 0x14005d302
lea r8, [rsp + 0x50]
lea rcx, [0x1400eeff8]
call fcn.14005cf80
mov r10d, dword [0x1400bda18]
mov rax, qword [rsp + 0x58]
mov ecx, dword [rax]
test r10d, r10d
jne 0x14005d323
mov r10d, 1
mov dword [0x1400bda10], ecx
mov dword [0x1400bda18], r10d
jmp 0x14005d35d
mov rdx, qword [0x1400ef000]
cmp rdx, qword [0x1400ef008]
mov qword [rsp + 0x50], rcx
je 0x14005d345
mov qword [rdx], rcx
add qword [0x1400ef000], 8
jmp 0x14005d35d
lea r8, [rsp + 0x50]
lea rcx, [0x1400eeff8]
call fcn.14005cf80
mov r10d, dword [0x1400bda18]
mov rax, qword [rsp + 0x60]
mov ecx, dword [rax]
test r10d, r10d
jne 0x14005d37e
mov r10d, 1
mov dword [0x1400bda10], ecx
mov dword [0x1400bda18], r10d
jmp 0x14005d3b8
mov rdx, qword [0x1400ef000]
cmp rdx, qword [0x1400ef008]
mov qword [rsp + 0x50], rcx
je 0x14005d3a0
mov qword [rdx], rcx
add qword [0x1400ef000], 8
jmp 0x14005d3b8
lea r8, [rsp + 0x50]
lea rcx, [0x1400eeff8]
call fcn.14005cf80
mov r10d, dword [0x1400bda18]
mov rax, qword [rsp + 0x68]
mov ecx, dword [rax]
test r10d, r10d
jne 0x14005d3d9
mov r10d, 1
mov dword [0x1400bda10], ecx
mov dword [0x1400bda18], r10d
jmp 0x14005d413
mov rdx, qword [0x1400ef000]
cmp rdx, qword [0x1400ef008]
mov qword [rsp + 0x50], rcx
je 0x14005d3fb
mov qword [rdx], rcx
add qword [0x1400ef000], 8
jmp 0x14005d413
lea r8, [rsp + 0x50]
lea rcx, [0x1400eeff8]
call fcn.14005cf80
mov r10d, dword [0x1400bda18]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rax]
test r10d, r10d
jne 0x14005d434
mov r10d, 1
mov dword [0x1400bda10], ecx
mov dword [0x1400bda18], r10d
jmp 0x14005d46e
mov rdx, qword [0x1400ef000]
cmp rdx, qword [0x1400ef008]
mov qword [rsp + 0x50], rcx
je 0x14005d456
mov qword [rdx], rcx
add qword [0x1400ef000], 8
jmp 0x14005d46e
lea r8, [rsp + 0x50]
lea rcx, [0x1400eeff8]
call fcn.14005cf80
mov r10d, dword [0x1400bda18]
mov rax, qword [rsp + 0x78]
mov ecx, dword [rax]
test r10d, r10d
jne 0x14005d48f
mov r10d, 1
mov dword [0x1400bda10], ecx
mov dword [0x1400bda18], r10d
jmp 0x14005d4c9
mov rdx, qword [0x1400ef000]
cmp rdx, qword [0x1400ef008]
mov qword [rsp + 0x50], rcx
je 0x14005d4b1
mov qword [rdx], rcx
add qword [0x1400ef000], 8
jmp 0x14005d4c9
lea r8, [rsp + 0x50]
lea rcx, [0x1400eeff8]
call fcn.14005cf80
mov r10d, dword [0x1400bda18]
mov rax, qword [rsp + 0x80]
mov ecx, dword [rax]
test r10d, r10d
jne 0x14005d4ea
mov dword [0x1400bda10], ecx
mov dword [0x1400bda18], 1
jmp 0x14005d51d
mov rdx, qword [0x1400ef000]
cmp rdx, qword [0x1400ef008]
mov qword [rsp + 0x50], rcx
je 0x14005d50c
mov qword [rdx], rcx
add qword [0x1400ef000], 8
jmp 0x14005d51d
lea r8, [rsp + 0x50]
lea rcx, [0x1400eeff8]
call fcn.14005cf80
mov rcx, qword [rsp + 0x88]
mov r8, qword [rsp + 0x98]
mov rdx, qword [rsp + 0x90]
mov ecx, dword [rcx]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
jmp 0x14005cd10