Function at 0x1000b060
Capabilities:
Allocate or change rwx memory
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push ebx
push esi
push edi
mov edi, edx
mov ebx, ecx
xor esi, esi
mov dword [ebp - 0x2c], ebx
test edi, edi
jne 0x1000b082
pop edi
pop esi
lea eax, [edx + 0x57]
pop ebx
mov esp, ebp
pop ebp
ret 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x102360a8], eax
je 0x1000b09e
pop edi
pop esi
mov eax, 0x10dd
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x102360a4]
test eax, eax
jne 0x1000b34f
test ebx, ebx
je 0x1000b0c5
mov ecx, dword [ebx]
test ecx, ecx
jne 0x1000b0d3
mov dword [0x102360a4], 6
mov dword [0x102360b0], ebx
pop edi
pop esi
mov eax, 6
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xor eax, eax
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], eax
call fcn.1000ab70
mov ebx, eax
mov ecx, edi
mov dword [ebp - 0x10], ebx
call fcn.1000ab70
mov dword [ebp - 0x30], eax
cmp eax, ebx
jne 0x1000b104
cmp dword [0x10235fb8], esi
jne 0x1000b345
jmp 0x1000b316
push 0x18
call fcn.101e725a
add esp, 4
mov dword [ebp - 0xc], eax
mov ecx, ebx
call fcn.1000a990
mov dword [ebp - 8], eax
test eax, eax
jne 0x1000b127
lea esi, [eax + 8]
jmp 0x1000b316
lea ecx, [eax + 0x38]
mov esi, ebx
mov ebx, eax
mov dword [ebp - 0x24], ecx
xorps xmm0, xmm0
add eax, 0x1e
movq qword [ecx], xmm0
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1000b153
mov ebx, dword [ebp - 0x18]
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0
push eax
push 0
push esi
lea eax, [ebp - 0x1c]
mov edi, esi
push eax
push ebx
call fcn.10001860
mov edx, dword [ebp - 8]
mov esi, eax
mov eax, dword [ebp - 0x20]
sub eax, edi
add eax, esi
add ebx, eax
mov dword [ebp - 0x18], ebx
mov ebx, esi
mov al, byte [ebp - 0x18]
sub ebx, dword [ebp - 0x10]
sub al, dl
mov cl, al
mov byte [ebp - 1], al
shl cl, 3
mov al, bl
and al, 7
or cl, al
mov eax, dword [ebp - 0x24]
mov byte [eax], cl
inc eax
mov ecx, dword [ebp - 0x14]
inc ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], ecx
cmp ecx, 8
jae 0x1000b201
mov al, byte [edi]
cmp al, 0xeb
je 0x1000b201
cmp al, 0xe9
je 0x1000b201
cmp al, 0xe0
je 0x1000b201
cmp al, 0xc2
je 0x1000b201
cmp al, 0xc3
je 0x1000b201
cmp al, 0xcc
je 0x1000b201
lea ecx, [edi + 1]
cmp al, 0xf3
jne 0x1000b266
cmp byte [ecx], 0xc3
je 0x1000b201
cmp al, 0x26
je 0x1000b1ed
cmp al, 0x2e
je 0x1000b1ed
cmp al, 0x36
je 0x1000b1ed
cmp al, 0x3e
je 0x1000b1ed
cmp al, 0x64
je 0x1000b1ed
cmp al, 0x65
jne 0x1000b1f8
cmp byte [ecx], 0xff
jne 0x1000b1f8
cmp byte [edi + 2], 0x25
je 0x1000b201
cmp ebx, 5
jb 0x1000b150
mov edi, dword [ebp - 0x10]
cmp ebx, 5
jae 0x1000b22d
nop dword [eax]
mov ecx, esi
call fcn.1000a540
test eax, eax
je 0x1000b308
add esi, eax
mov ebx, esi
sub ebx, edi
cmp ebx, 5
jb 0x1000b210
mov edx, dword [ebp - 8]
cmp dword [ebp - 0x14], 8
ja 0x1000b308
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1c]
jbe 0x1000b240
int3
mov al, byte [ebp - 1]
push ebx
mov byte [edx + 0x1e], al
lea eax, [edx + 0x20]
push edi
push eax
mov byte [edx + 0x36], bl
call fcn.101e93c0
add esp, 0xc
cmp ebx, 0x19
jbe 0x1000b273
mov esi, 6
jmp 0x1000b316
cmp al, 0xff
jne 0x1000b1d5
cmp byte [ecx], 0x25
jmp 0x1000b1f6
mov eax, dword [ebp - 8]
lea edx, [ebx + edi]
mov ecx, dword [ebp - 0x30]
xor esi, esi
mov dword [eax + 0x44], ecx
movzx ecx, byte [eax + 0x1e]
add ecx, eax
mov dword [eax + 0x40], edx
lea eax, [ecx + 5]
mov byte [ecx], 0xe9
sub edx, eax
mov dword [ecx + 1], edx
lea edx, [ecx + 5]
mov ecx, dword [ebp - 0x1c]
sub ecx, edx
cmp edx, dword [ebp - 0x1c]
cmova ecx, esi
test ecx, ecx
je 0x1000b2b6
push ecx
push 0xcc
push edx
call fcn.101e9940
add esp, 0xc
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], esi
push eax
push 0x40
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x1000b2d5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
jmp 0x1000b316
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x2c]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 8]
mov dword [ecx + 0x10], eax
mov dword [ecx + 4], esi
mov dword [ecx + 0xc], edi
mov eax, dword [ebp - 0x28]
pop edi
mov dword [ecx + 0x14], eax
mov eax, dword [0x102360bc]
pop esi
mov dword [ecx], eax
xor eax, eax
mov dword [0x102360bc], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [0x10235fb8], 0
mov esi, 9
jne 0x1000b32b
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov dword [0x102360a4], esi
test ecx, ecx
je 0x1000b336
jmp 0x1000b32e
mov ecx, dword [ebp - 8]
call fcn.1000aab0
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x1000b345
push 0x18
push eax
call fcn.101e73a4
add esp, 8
mov eax, dword [ebp - 0x2c]
mov dword [0x102360b0], eax
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc