Function at 0x10002590
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x3a0
mov esi, esp
mov dword [esi + 0x388], ebp
mov edx, ecx
mov dword [esi + 8], ecx
mov dword [esi + 0x38c], esp
mov dword [esi + 0x398], 0xffffffff
lea eax, [esi + 0x390]
mov dword [esi + 0x394], 0x10002d00
mov ecx, dword fs:[0]
mov dword [esi + 0x390], ecx
mov dword fs:[0], eax
mov dword [edx + 0x14], 0
mov eax, dword [edx]
mov ecx, dword [edx + 8]
mov dword [esi + 4], ecx
mov eax, dword [eax + 0x44]
mov dword [esi + 0x10], eax
lea eax, [edx + 8]
xorps xmm0, xmm0
movlps qword [esi + 0x14], xmm0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x398], 0
lea ecx, [esi + 0x14]
mov dword [esi + 0x24], eax
push eax
push 0
call fcn.10002a60
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x14]
mov ebx, dword [esi + 4]
jmp 0x10002665
movzx eax, byte [esi + 0x3c]
mov dword [esi + 4], ebx
add eax, ebx
add eax, dword [esi + 0x68]
mov dword [esi + 0x20], eax
mov edx, dword [esi + 0x18]
cmp edx, dword [esi + 0x1c]
je 0x100026f2
mov dword [edx], eax
add dword [esi + 0x18], 4
mov ebx, dword [esi + 4]
movzx ecx, byte [esi + 0x3c]
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x14]
add eax, ecx
mov dword [edx + 0x14], eax
add ebx, ecx
cmp eax, 4
ja 0x1000270e
push 0x358
push 0
lea edi, [esi + 0x30]
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 1
push 1
push ebx
push edi
call fcn.100061a0
add esp, 0x10
test eax, eax
js 0x100029cd
movzx eax, byte [esi + 0x38]
not al
test al, 0x84
jne 0x100026ab
movzx eax, byte [esi + 0x3e]
and al, 0xf0
cmp al, 0x40
je 0x10002630
test byte [esi + 0x39], 0x20
je 0x10002654
movzx eax, byte [esi + 0x41]
and al, 0xf0
cmp al, 0x40
jne 0x10002654
movzx eax, byte [esi + 0x3c]
mov dword [esi + 4], ebx
add eax, ebx
add eax, dword [esi + 0x6c]
mov dword [esi + 0x20], eax
mov edx, dword [esi + 0x18]
cmp edx, dword [esi + 0x1c]
jne 0x1000264b
mov dword [esi + 0x398], 0
lea ecx, [esi + 0x14]
lea eax, [esi + 0x20]
push eax
push edx
call fcn.10002a60
jmp 0x10002651
mov dword [esi + 0x398], 0
lea ecx, [esi + 0x14]
lea eax, [esi + 0x20]
push eax
push edx
call fcn.10002a60
jmp 0x10002651
mov dword [esi + 4], ebx
add eax, 0xa
mov ecx, dword [esi + 8]
mov dword [ecx + 0x18], eax
mov ecx, dword [esi + 0x10]
mov ecx, dword [ecx]
mov dword [esi + 0x398], 0
push 0x7fffffff
push eax
lea eax, [esi + 0x14]
push eax
call fcn.100017c0
mov ebx, dword [esi + 8]
mov dword [ebx + 0x10], eax
test eax, eax
je 0x100029cd
mov edx, dword [ebx + 0x14]
xor eax, eax
test edx, edx
je 0x1000286a
lea eax, [ebx + 0x1c]
mov dword [esi + 0x28], eax
mov edi, dword [ebx + 8]
jmp 0x1000276c
movzx ecx, byte [edi]
mov byte [eax], cl
inc dword [ebx + 0x20]
inc edi
dec edx
je 0x10002799
mov eax, dword [ebx + 0x20]
cmp eax, dword [ebx + 0x24]
jne 0x10002760
mov dword [esi + 0x398], 0
mov ecx, dword [esi + 0x28]
push edi
push eax
mov dword [esi + 0xc], edx
mov dword [esi + 0x2c], edi
call fcn.10002ba0
mov edi, dword [esi + 0x2c]
mov edx, dword [esi + 0xc]
mov ebx, dword [esi + 8]
jmp 0x10002768
mov eax, dword [ebx + 0x14]
test eax, eax
je 0x10002868
push eax
push dword [ebx + 8]
push dword [ebx + 0x10]
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
cmp dword [ebx + 0x14], 0
mov eax, 0
je 0x1000286a
xor edi, edi
jmp 0x100027f9
mov eax, dword [ebx + 0x10]
add eax, edi
mov ecx, dword [ebx + 8]
add ecx, edi
add ecx, dword [esi + 0x68]
sub ecx, eax
movzx edx, byte [esi + 0x43]
movzx edx, dl
and edx, 0xf
mov dword [eax + edx], ecx
movzx eax, byte [esi + 0x3c]
add edi, eax
mov eax, dword [ebx + 0x14]
cmp edi, eax
jae 0x1000286a
push 0x358
push 0
lea eax, [esi + 0x30]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, dword [esi + 0x24]
mov eax, dword [eax]
add eax, edi
push 1
push 1
push eax
lea eax, [esi + 0x30]
push eax
call fcn.100061a0
add esp, 0x10
test eax, eax
js 0x10002a10
movzx eax, byte [esi + 0x38]
not al
test al, 0x84
jne 0x10002840
movzx eax, byte [esi + 0x3e]
and al, 0xf0
cmp al, 0x40
je 0x100027d0
test byte [esi + 0x39], 0x20
je 0x100027ec
movzx eax, byte [esi + 0x41]
and al, 0xf0
cmp al, 0x40
jne 0x100027ec
mov eax, dword [ebx + 0x10]
add eax, edi
mov ecx, dword [ebx + 8]
add ecx, edi
add ecx, dword [esi + 0x6c]
sub ecx, eax
movzx edx, byte [esi + 0x46]
jmp 0x100027e3
xor eax, eax
mov ecx, dword [ebx + 0x10]
mov dword [esi + 0xc], ecx
lea ebx, [eax + ecx]
mov dword [esi + 0x30], ebx
lea ecx, [esi + 0x38]
movsd xmm0, qword [0x100586f0]
movsd qword [esi + 0x34], xmm0
push ecx
push 0x40
push 5
push ebx
mov edi, eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [esi + 4]
sub eax, ebx
mov ebx, dword [esi + 8]
add eax, 0xfffffffb
mov ecx, dword [esi + 0xc]
mov byte [edi + ecx], 0xe9
mov dword [edi + ecx + 1], eax
lea eax, [esi + 0x38]
push eax
push dword [esi + 0x38]
push dword [esi + 0x34]
push dword [esi + 0x30]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edi, dword [ebx + 0x10]
mov ecx, dword [ebx + 0x14]
cmp ecx, 5
jb 0x10002931
mov dword [esi + 0xc], edi
mov edx, dword [ebx + 8]
mov dword [esi + 0x30], edx
mov dword [esi + 0x34], ecx
mov dword [esi + 0x38], 0
lea eax, [esi + 0x38]
push eax
push 0x40
push ecx
mov dword [esi + 4], edx
push edx
mov edi, ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ecx, edi
cmp edi, 5
je 0x10002908
push ecx
push 0x90
push dword [esi + 4]
call sub.VCRUNTIME140.dll_memset
mov ecx, edi
add esp, 0xc
mov eax, dword [esi + 0xc]
mov edx, dword [esi + 4]
sub eax, edx
add eax, ecx
mov byte [edx], 0xe9
mov dword [edx + 1], eax
lea eax, [esi + 0x38]
push eax
push dword [esi + 0x38]
push dword [esi + 0x34]
push dword [esi + 0x30]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edi, dword [ebx + 0x10]
mov ecx, dword [ebx + 0x14]
lea eax, [ecx + edi]
mov edx, ecx
mov dword [esi + 4], ecx
mov ecx, dword [esi + 8]
mov ebx, dword [ecx + 0xc]
sub ebx, eax
lea eax, [edx + edi]
add eax, 5
mov dword [esi + 0x30], eax
movsd xmm0, qword [0x100586f0]
movsd qword [esi + 0x34], xmm0
lea ecx, [esi + 0x38]
push ecx
push 0x40
push 5
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
add ebx, 0xfffffff6
mov eax, dword [esi + 4]
mov byte [eax + edi + 5], 0xe9
mov dword [eax + edi + 6], ebx
mov edi, dword [esi + 8]
lea eax, [esi + 0x38]
push eax
push dword [esi + 0x38]
push dword [esi + 0x34]
push dword [esi + 0x30]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
add dword [esi + 0x10], 0xc
xor ecx, ecx
cmp ecx, dword [edi + 0x14]
jae 0x100029cd
nop word cs:[eax + eax]
mov eax, dword [edi + 0x10]
add eax, ecx
mov edx, dword [edi + 8]
mov dword [esi + 4], ecx
add edx, ecx
mov dword [esi + 0x398], 0
mov ecx, dword [esi + 0x10]
push eax
push edx
call fcn.10002f80
mov edi, dword [esi + 8]
mov ecx, dword [esi + 4]
inc ecx
cmp ecx, dword [edi + 0x14]
jb 0x100029a0
mov ecx, dword [esi + 0x14]
test ecx, ecx
je 0x100029fc
mov eax, dword [esi + 0x1c]
sub eax, ecx
cmp eax, 0x1000
jb 0x100029f2
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x10002a2e
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.100520b8
add esp, 8
mov eax, dword [esi + 0x390]
mov dword fs:[0], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esi + 0x10]
mov ecx, dword [eax]
mov eax, dword [ebx + 0x10]
mov edx, dword [ebx + 0x18]
mov dword [esi + 0x398], 0
push edx
push eax
call fcn.10001bf0
jmp 0x100029cd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop word cs:[eax + eax]
push ebp
sub esp, 0x10
lea esi, [ebp - 0x39c]
mov ebp, dword [esi + 0x388]
lea ecx, [esi + 0x14]
call fcn.100019a0
add esp, 0x10
pop ebp
ret