Function at 0x18009d330
Capabilities:
Allocate or change rwx memory

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x98
mov dword [rsp + 0x38], 0
cmp qword [rsp + 0xb0], 0
je 0x18009d36d
mov rax, qword [rsp + 0xb0]
mov qword [rax], 0
cmp qword [rsp + 0xb8], 0
je 0x18009d387
mov rax, qword [rsp + 0xb8]
mov qword [rax], 0
cmp qword [rsp + 0xc0], 0
je 0x18009d3a1
mov rax, qword [rsp + 0xc0]
mov qword [rax], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x1802053b4], eax
je 0x18009d3b9
mov eax, 0x10dd
jmp 0x18009d7df
cmp dword [0x1802053b8], 0
je 0x18009d3cd
mov eax, dword [0x1802053b8]
jmp 0x18009d7df
cmp qword [rsp + 0xa0], 0
jne 0x18009d3e2
mov eax, 6
jmp 0x18009d7df
mov rax, qword [rsp + 0xa0]
cmp qword [rax], 0
jne 0x18009d41a
mov dword [rsp + 0x38], 6
mov eax, dword [rsp + 0x38]
mov dword [0x1802053b8], eax
mov rax, qword [rsp + 0xa0]
mov qword [0x1802053c0], rax
mov eax, dword [rsp + 0x38]
jmp 0x18009d7df
mov rax, qword [rsp + 0xa0]
mov rax, qword [rax]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], 0
xor edx, edx
mov rcx, qword [rsp + 0x30]
call fcn.18009c8e0
mov qword [rsp + 0x30], rax
xor edx, edx
mov rcx, qword [rsp + 0xa8]
call fcn.18009c8e0
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x30]
cmp qword [rsp + 0xa8], rax
jne 0x18009d486
cmp dword [0x1802053b0], 0
je 0x18009d482
jmp 0x18009d4f2
jmp 0x18009d4e8
cmp qword [rsp + 0xb8], 0
je 0x18009d4a1
mov rcx, qword [rsp + 0xb8]
mov rax, qword [rsp + 0x30]
mov qword [rcx], rax
cmp qword [rsp + 0xc0], 0
je 0x18009d4bf
mov rcx, qword [rsp + 0xc0]
mov rax, qword [rsp + 0xa8]
mov qword [rcx], rax
mov ecx, 0x30
call fcn.1801196e4
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
jne 0x18009d550
mov dword [rsp + 0x38], 8
mov eax, dword [rsp + 0x38]
mov dword [0x1802053b8], eax
cmp qword [rsp + 0x48], 0
je 0x18009d50d
mov rcx, qword [rsp + 0x48]
call fcn.18009cc70
mov qword [rsp + 0x48], 0
cmp qword [rsp + 0x58], 0
je 0x18009d538
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x80], rax
mov rcx, qword [rsp + 0x80]
call fcn.1801196dc
mov qword [rsp + 0x58], 0
mov rax, qword [rsp + 0xa0]
mov qword [0x1802053c0], rax
mov eax, dword [rsp + 0x38]
jmp 0x18009d7df
mov rcx, qword [rsp + 0x30]
call fcn.18009d7f0
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0
jne 0x18009d574
mov dword [rsp + 0x38], 8
jmp 0x18009d4e8
cmp qword [rsp + 0xb0], 0
je 0x18009d58f
mov rcx, qword [rsp + 0xb0]
mov rax, qword [rsp + 0x48]
mov qword [rcx], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
cmp dword [rsp + 0x20], 5
jge 0x18009d60a
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x60], 0
movsxd rax, dword [rsp + 0x20]
mov rcx, qword [rsp + 0x48]
add rcx, rax
lea r9, [rsp + 0x60]
xor r8d, r8d
mov rdx, qword [rsp + 0x28]
call fcn.18009f700
mov qword [rsp + 0x28], rax
cmp dword [rsp + 0x60], 0
je 0x18009d5e7
jmp 0x18009d60a
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x28]
sub rax, rcx
mov dword [rsp + 0x20], eax
mov rcx, qword [rsp + 0x68]
call fcn.18009e1b0
test eax, eax
je 0x18009d608
jmp 0x18009d60a
jmp 0x18009d5a1
cmp dword [rsp + 0x20], 5
jge 0x18009d62e
mov dword [rsp + 0x38], 9
cmp dword [0x1802053b0], 0
je 0x18009d629
jmp 0x18009d4f2
jmp 0x18009d4e8
movsxd rax, dword [rsp + 0x20]
cmp rax, 0x1a
jbe 0x18009d646
mov dword [rsp + 0x38], 6
jmp 0x18009d4e8
movsxd rax, dword [rsp + 0x20]
mov rcx, qword [rsp + 0x30]
add rcx, rax
mov rax, qword [rsp + 0x48]
mov qword [rax + 0x20], rcx
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0xa8]
mov qword [rcx + 0x28], rax
mov rcx, qword [rsp + 0x48]
movzx eax, byte [rsp + 0x20]
mov byte [rcx + 0x1f], al
mov rdx, qword [rsp + 0x48]
add rdx, 0x20
movsxd rax, dword [rsp + 0x20]
mov rcx, qword [rsp + 0x48]
add rcx, rax
call fcn.18009e0f0
mov qword [rsp + 0x28], rax
mov rdx, qword [rsp + 0x48]
add rdx, 0x1f
mov rcx, qword [rsp + 0x28]
call fcn.18009e170
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x50], 0
movsxd rdx, dword [rsp + 0x20]
lea r9, [rsp + 0x50]
mov r8d, 0x40
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x18009d6e8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
jmp 0x18009d4e8
mov rcx, qword [rsp + 0x30]
call fcn.18009dcc0
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0
je 0x18009d77d
mov rax, qword [rsp + 0x40]
movzx eax, word [rax + 0x1c]
cmp eax, 0x6544
je 0x18009d77d
mov dword [rsp + 0x70], 0
lea r9, [rsp + 0x70]
mov r8d, 0x40
mov edx, 0x40
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x18009d745
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
jmp 0x18009d4e8
mov ecx, 0x6544
mov rax, qword [rsp + 0x40]
mov word [rax + 0x1c], cx
mov ecx, 0x6f74
mov rax, qword [rsp + 0x40]
mov word [rax + 0x1e], cx
mov ecx, 0x7275
mov rax, qword [rsp + 0x40]
mov word [rax + 0x20], cx
mov ecx, 0x2173
mov rax, qword [rsp + 0x40]
mov word [rax + 0x22], cx
mov rax, qword [rsp + 0x58]
mov dword [rax + 8], 0
mov rcx, qword [rsp + 0x58]
mov rax, qword [rsp + 0xa0]
mov qword [rcx + 0x10], rax
mov rcx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x48]
mov qword [rcx + 0x20], rax
mov rcx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x30]
mov qword [rcx + 0x18], rax
mov rcx, qword [rsp + 0x58]
mov eax, dword [rsp + 0x50]
mov dword [rcx + 0x28], eax
mov rcx, qword [rsp + 0x58]
mov rax, qword [0x1802053d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x58]
mov qword [0x1802053d0], rax
xor eax, eax
add rsp, 0x98
ret