Function at 0x10109df0
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xdc
push ebx
push esi
push edi
lea edi, [ebp - 0x1c]
mov ecx, 7
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x10191a80]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, 0x101997a0
call fcn.1014e9b0
mov eax, dword [0x10198064]
push eax
call fcn.10109b00
add esp, 4
push 0x10198208
mov eax, dword [0x101980d0]
push eax
call fcn.1010a700
add esp, 8
push 0x10198208
mov eax, dword [0x10198264]
push eax
call fcn.1010a700
add esp, 8
push 0x10198208
mov eax, dword [0x101981e4]
push eax
call fcn.1010a700
add esp, 8
push 0x10198208
mov eax, dword [0x10198200]
push eax
call fcn.1010a700
add esp, 8
push 0x10198208
mov eax, dword [0x101980e8]
push eax
call fcn.1010a700
add esp, 8
push 0x10198208
mov eax, dword [0x101980c8]
push eax
call fcn.1010a700
add esp, 8
push 0x10197c68
mov eax, dword [0x10198250]
push eax
call fcn.1010a700
add esp, 8
push 0x101980d8
mov eax, dword [0x10197c7c]
push eax
call fcn.1010a700
add esp, 8
mov eax, dword [0x10198158]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x10198154]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x10198238]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x101981f8]
push eax
call fcn.10109b00
add esp, 4
push 0x10198208
mov eax, dword [0x101981d8]
push eax
call fcn.1010a700
add esp, 8
push 0x10198208
mov eax, dword [0x10197c64]
push eax
call fcn.1010a700
add esp, 8
push 0x10198208
mov eax, dword [0x101981dc]
push eax
call fcn.1010a700
add esp, 8
push 0x10198208
mov eax, dword [0x10198224]
push eax
call fcn.1010a700
add esp, 8
mov eax, dword [0x101981f4]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x10197c78]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x10198248]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x1019815c]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x101981ec]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x101980d4]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x10198220]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x1019824c]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x1019821c]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x10198178]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x10198150]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x101981ac]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x10198114]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x10198244]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x101981c4]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x101980ec]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x10198204]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x10198060]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x101981f0]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x1019823c]
push eax
call fcn.10109b00
add esp, 4
mov esi, esp
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
mov ecx, dword [0x101981fc]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp esi, esp
call fcn.1014e980
mov eax, dword [0x101981fc]
mov byte [eax], 0xe9
mov eax, dword [0x101981fc]
add eax, 5
mov ecx, 0x1012e5a0
sub ecx, eax
mov edx, dword [0x101981fc]
mov dword [edx + 1], ecx
mov eax, dword [0x101981b8]
push eax
call fcn.10109b00
add esp, 4
mov eax, dword [0x10198068]
push eax
call fcn.10109b00
add esp, 4
mov esi, esp
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
mov ecx, dword [0x10198160]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp esi, esp
call fcn.1014e980
mov eax, dword [0x10198160]
mov byte [eax], 0xe9
mov eax, dword [0x10198160]
add eax, 5
mov ecx, 0x1010b1c0
sub ecx, eax
mov edx, dword [0x10198160]
mov dword [edx + 1], ecx
mov eax, dword [0x10198160]
mov byte [eax + 5], 0x90
push edx
mov ecx, ebp
push eax
lea edx, [0x1010a134]
call fcn.1014e920
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1014e9f0
add esp, 0xdc
cmp ebp, esp
call fcn.1014e980
mov esp, ebp
pop ebp
ret