Function at 0x100e3262
Capabilities:
Allocate or change rwx memory

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x34
push ebx
push esi
mov eax, edx
mov ebx, ecx
push edi
xor edi, edi
mov dword [esp + 0x30], eax
mov dword [esp + 0x38], ebx
test eax, eax
jne 0x100e328a
push 0x57
pop eax
jmp 0x100e352c
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x1013dde8], eax
je 0x100e32a2
mov eax, 0x10dd
jmp 0x100e352c
mov eax, dword [0x1013dde0]
test eax, eax
jne 0x100e352c
test ebx, ebx
jne 0x100e32b7
push 6
jmp 0x100e3284
mov ecx, dword [ebx]
test ecx, ecx
jne 0x100e32d0
push 6
pop eax
mov dword [0x1013dde0], eax
mov dword [0x1013ddd4], ebx
jmp 0x100e352c
mov ebx, edi
mov esi, edi
call fcn.100e353b
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x10], eax
call fcn.100e353b
mov dword [esp + 0x3c], eax
cmp eax, dword [esp + 0x10]
jne 0x100e3301
cmp dword [0x1013ddcc], ebx
jne 0x100e3521
jmp 0x100e3502
push 0x18
call fcn.10061922
pop ecx
mov ecx, dword [esp + 0x10]
mov esi, eax
mov dword [esp + 0x24], esi
call fcn.100e2dea
mov ebx, eax
test ebx, ebx
jne 0x100e3326
push 8
pop edi
jmp 0x100e3502
mov esi, dword [esp + 0x10]
lea eax, [ebx + 0x38]
mov dword [eax], edi
mov edx, ebx
mov dword [esp + 0x2c], eax
mov dword [eax + 4], edi
mov eax, esi
mov dword [esp + 0x18], edx
mov dword [esp + 0x20], edi
jmp 0x100e3348
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x28]
mov dword [esp + 0x30], eax
push ecx
push edi
push eax
mov ecx, edx
mov dword [esp + 0x34], edi
call fcn.100e2c33
mov edx, dword [esp + 0x18]
mov ecx, eax
mov eax, dword [esp + 0x28]
sub eax, dword [esp + 0x30]
add eax, ecx
mov dword [esp + 0x1c], ecx
add edx, eax
sub ecx, esi
mov dword [esp + 0x18], edx
mov al, cl
sub dl, bl
mov dword [esp + 0x14], ecx
mov byte [esp + 0xf], dl
and al, 7
shl dl, 3
or dl, al
mov eax, dword [esp + 0x2c]
mov byte [eax], dl
mov edx, dword [esp + 0x20]
inc edx
inc eax
mov dword [esp + 0x20], edx
mov dword [esp + 0x2c], eax
cmp edx, 8
jae 0x100e33c0
mov ecx, dword [esp + 0x30]
call fcn.100e2efc
mov ecx, dword [esp + 0x14]
test eax, eax
jne 0x100e33c0
mov edx, dword [esp + 0x18]
cmp ecx, 5
jb 0x100e3344
mov esi, dword [esp + 0x24]
cmp ecx, 5
jae 0x100e33ea
mov ecx, dword [esp + 0x1c]
call fcn.100e2fb0
test eax, eax
je 0x100e34f6
add ecx, eax
mov dword [esp + 0x1c], ecx
sub ecx, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
jmp 0x100e33c4
cmp dword [esp + 0x20], 8
ja 0x100e34f6
lea edx, [ebx + 0x1e]
cmp dword [esp + 0x18], edx
jbe 0x100e33ff
int3
mov al, byte [esp + 0xf]
mov byte [edx], al
mov eax, dword [esp + 0x10]
push ecx
push eax
lea eax, [ebx + 0x20]
mov byte [ebx + 0x36], cl
push eax
call fcn.10063a50
mov eax, dword [esp + 0x20]
add esp, 0xc
cmp eax, 0x19
jbe 0x100e342a
push 6
jmp 0x100e3320
mov esi, dword [esp + 0x10]
lea edx, [ebx + 0x1e]
movzx ecx, byte [edx]
add esi, eax
mov eax, dword [esp + 0x3c]
add ecx, ebx
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x40], esi
mov dword [ebx + 0x5c], edi
lea eax, [ecx + 5]
mov byte [ecx], 0xe9
sub esi, eax
mov dword [ecx + 1], esi
add ecx, 5
call fcn.100e2f88
cmp dword [ebp + 0x14], edi
je 0x100e349e
mov eax, dword [ebp + 0x18]
lea esi, [ebx + 0x48]
mov edx, esi
mov dword [edx + 1], eax
lea ecx, [edx + 0xf]
mov eax, dword [ebp + 0x14]
sub eax, ecx
mov dword [edx + 6], ecx
mov dword [edx + 0xb], eax
lea ecx, [edx + 0x14]
mov eax, dword [ebx + 0x44]
sub eax, ecx
mov byte [edx], 0x68
mov byte [edx + 5], 0x68
lea ecx, [edx + 0x14]
mov byte [edx + 0xa], 0xe9
mov byte [edx + 0xf], 0xe9
mov dword [edx + 0x10], eax
lea edx, [ebx + 0x5c]
call fcn.100e2f88
mov dword [ebx + 0x5c], esi
mov esi, dword [esp + 0x10]
lea eax, [esp + 0x34]
push eax
push 0x40
push dword [esp + 0x1c]
mov dword [esp + 0x40], edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x100e34ca
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [esp + 0x24]
mov edi, eax
jmp 0x100e3502
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x38]
mov dword [ecx + 8], eax
mov dword [ecx + 4], edi
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0xc], esi
mov eax, dword [esp + 0x34]
mov dword [ecx + 0x14], eax
mov eax, dword [0x1013ddc8]
mov dword [ecx], eax
xor eax, eax
mov dword [0x1013ddc8], ecx
jmp 0x100e352c
cmp dword [0x1013ddcc], 0
push 9
pop edi
jne 0x100e350c
mov dword [0x1013dde0], edi
test ebx, ebx
je 0x100e3513
mov ecx, ebx
call fcn.100e2f5b
test esi, esi
je 0x100e3521
push 0x18
push esi
call fcn.10061ce6
pop ecx
pop ecx
mov eax, dword [esp + 0x38]
mov dword [0x1013ddd4], eax
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14