Function at 0x1000b838
Capabilities:
Allocate or change rwx memory

Disassembly:
jae 0x1000b7e3
jmp 0x1000b7de
call fcn.1000b7e5
jae 0x1000b7de
add esp, 4
jmp 0x1000b7ea
dec dword [esp]
jno 0x1000b7ef
jns 0x1000b7da
jp 0x1000b7f3
add esp, 4
popf
jmp 0x1000b7fa
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1000b813
jne 0x1000b813
call 0x1fc0eb67
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
clc
jae 0x1000b829
salc
out 0x66, eax
pushfd
pushf
push 0xa
jae 0x1000b836
jmp 0x1000b831
call 0x1000b838
jae 0x1000b831
add esp, 4
jmp 0x1000b83d
dec dword [esp]
jno 0x1000b842
jns 0x1000b82d
jp 0x1000b846
add esp, 4
popf
jmp 0x1000b84d
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1000b866
jne 0x1000b866
out 0x7c, eax
add ebp, ebx
add esp, edi
jl 0x1000b86b
jmp 0x1000b86d
je 0x1000b868
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1000b887
jne 0x1000b886
call 0x9304a90e
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1000b895
jne 0x1000b895
call 0x60f8fe26
lea eax, [ebp - 8]
push eax
push 0x40
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
xor eax, eax
test eax, eax
je 0x1000b8b2
jne 0x1000b8b1
call 0x9304a939
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
mov al, 0x74
sti
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1000b8c0
jmp 0x1000b8c2
je 0x1000b8bd
clc
jae 0x1000b8c7
xor byte [eax + 0x1750374], 0xb0
je 0x1000b8cc
jne 0x1000b8cc
mov al, 0x66
pushfd
pushf
push 0xa
jae 0x1000b8d9
jmp 0x1000b8d4
call 0x1000b8db
jae 0x1000b8d4
add esp, 4
jmp 0x1000b8e0
dec dword [esp]
jno 0x1000b8e5
jns 0x1000b8d0
jp 0x1000b8e9
add esp, 4
popf
jmp 0x1000b8f0
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1000b909
jne 0x1000b909
call 0x1fc0ec5d
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.10028ec0
add esp, 0xc
clc
jae 0x1000b933
sub bh, byte [ecx + 0x66]
pushfd
pushf
push 0xa
jae 0x1000b940
jmp 0x1000b93b
call 0x1000b942
jae 0x1000b93b
add esp, 4
jmp 0x1000b947
dec dword [esp]
jno 0x1000b94c
jns 0x1000b937
jp 0x1000b950
add esp, 4
popf
jmp 0x1000b957
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1000b970
jne 0x1000b970
jns 0x1000b9ed
jl 0x1000b975
add ebp, ebx
add edi, dword [ecx + 0x74]
sti
jmp 0x1000b977
je 0x1000b972
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1000b991
jne 0x1000b990
call 0x9304aa18
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1000b99f
jne 0x1000b99f
call 0x60f8ff30
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
xor eax, eax
test eax, eax
je 0x1000b9be
jne 0x1000b9bd
call 0x9304aa45
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sub al, 0x74
sti
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1000b9cc
jmp 0x1000b9ce
je 0x1000b9c9
clc
jae 0x1000b9d3
jl 0x1000b9ff
je 0x1000b9d8
jne 0x1000b9d8
sub al, 0x66
pushfd
pushf
push 0xa
jae 0x1000b9e5
jmp 0x1000b9e0
call 0x1000b9e7
jae 0x1000b9e0
add esp, 4
jmp 0x1000b9ec
dec dword [esp]
or al, 0x24
jno 0x1000b9f1
jns 0x1000b9dc
jp 0x1000b9f5
add esp, 4
popf
jmp 0x1000b9fc
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1000ba15
nop
add byte [eax], al
add byte [edx - 0x7f], dl
ljmp 0x358
jne 0x1000ba15
call 0x1fc0ed69
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10026f69
mov esp, ebp
pop ebp
ret