Function at 0x10095990
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 0xd64243
ja 0x10095a82
cmp dword [ebp - 0x14], 0xd64243
je 0x10095b02
cmp dword [ebp - 0x14], 0xd14243
ja 0x10095a3b
cmp dword [ebp - 0x14], 0xd14243
je 0x10095b02
cmp dword [ebp - 0x14], 0x814243
ja 0x10095a1c
cmp dword [ebp - 0x14], 0x814243
je 0x10095b02
cmp dword [ebp - 0x14], 0x724243
je 0x10095b69
cmp dword [ebp - 0x14], 0x754243
je 0x10095c04
jmp 0x10095c96
cmp dword [ebp - 0x14], 0xb14243
je 0x10095b02
cmp dword [ebp - 0x14], 0xd04243
je 0x10095b02
jmp 0x10095c96
cmp dword [ebp - 0x14], 0xd44243
ja 0x10095a70
cmp dword [ebp - 0x14], 0xd44243
je 0x10095b02
cmp dword [ebp - 0x14], 0xd24243
je 0x10095b02
cmp dword [ebp - 0x14], 0xd34243
je 0x10095b02
jmp 0x10095c96
cmp dword [ebp - 0x14], 0xd54243
je 0x10095b02
jmp 0x10095c96
cmp dword [ebp - 0x14], 0xf34243
ja 0x10095acb
cmp dword [ebp - 0x14], 0xf34243
je 0x10095b02
cmp dword [ebp - 0x14], 0xf14243
ja 0x10095abd
cmp dword [ebp - 0x14], 0xf14243
je 0x10095b02
cmp dword [ebp - 0x14], 0xd74243
je 0x10095b02
cmp dword [ebp - 0x14], 0xf04243
je 0x10095b02
jmp 0x10095c96
cmp dword [ebp - 0x14], 0xf24243
je 0x10095b02
jmp 0x10095c96
cmp dword [ebp - 0x14], 0xf64243
ja 0x10095af4
cmp dword [ebp - 0x14], 0xf64243
je 0x10095b02
cmp dword [ebp - 0x14], 0xf44243
je 0x10095b02
cmp dword [ebp - 0x14], 0xf54243
je 0x10095b02
jmp 0x10095c96
cmp dword [ebp - 0x14], 0xf74243
je 0x10095b02
jmp 0x10095c96
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc]
shl eax, 2
mov ecx, dword [ebp + 8]
mov dword [ecx + 8], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
call fcn.10095360
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x10], eax
mov edx, dword [ebp + 8]
cmp dword [edx + 0x10], 0
je 0x10095b4b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 0xc]
add edx, 0x14
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
call fcn.10043990
add esp, 0xc
jmp 0x10095b64
push 0x84000007
mov ecx, 0x100e441c
call fcn.1008a2a0
jmp 0x10095cea
jmp 0x10095cb6
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x14
push eax
call fcn.100962e0
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x10095b96
jmp 0x10095cea
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x10]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
lea edx, [ecx + edx*8]
mov dword [ebp - 4], edx
push 0x40
push 0x3000
mov eax, dword [ebp - 4]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x10], eax
mov edx, dword [ebp + 8]
cmp dword [edx + 0x10], 0
je 0x10095be6
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
call fcn.10043990
add esp, 0xc
jmp 0x10095bff
push 0x84000007
mov ecx, 0x100e441c
call fcn.1008a2a0
jmp 0x10095cea
jmp 0x10095cb6
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x14
push eax
call fcn.100962e0
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x10095c31
jmp 0x10095cea
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x10]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
lea edx, [ecx + edx*8]
mov dword [ebp - 4], edx
push 0x40
push 0x3000
mov eax, dword [ebp - 4]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x10], eax
mov edx, dword [ebp + 8]
cmp dword [edx + 0x10], 0
je 0x10095c81
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
call fcn.10043990
add esp, 0xc
jmp 0x10095c94
push 0x84000007
mov ecx, 0x100e441c
call fcn.1008a2a0
jmp 0x10095cea
jmp 0x10095cb6
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x14
push eax
call fcn.100962e0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x10], eax
mov edx, dword [ebp + 8]
cmp dword [edx + 0x10], 0
jne 0x10095cc3
jmp 0x10095cea
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x1004243
jne 0x10095ce3
mov ecx, dword [ebp + 8]
push ecx
call fcn.10095530
movzx edx, al
test edx, edx
jne 0x10095ce3
jmp 0x10095cea
mov dword [ebp - 0xc], 1
cmp dword [ebp - 8], 0
je 0x10095cf9
mov eax, dword [ebp - 8]
push eax
call fcn.10095340
mov dword [ebp - 8], 0
mov eax, dword [ebp - 0xc]
mov esp, ebp
pop ebp
ret 8