Function at 0x4ea4a2
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x80
mov eax, dword [0x5c8910]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
xor edi, edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x5d0c20], eax
je 0x4ea4d0
mov eax, 0x10dd
jmp 0x4ea6ad
mov eax, dword [0x5d0c1c]
test eax, eax
jne 0x4ea6ad
mov ecx, dword [0x5d0b98]
push ebx
push esi
test ecx, ecx
jne 0x4ea4f7
push 6
pop edi
mov dword [0x5d0c1c], edi
jmp 0x4ea664
mov esi, edi
mov ebx, edi
call fcn.004e9d71
mov ecx, 0x4c0ac0
mov dword [ebp - 0x64], eax
call fcn.004e9d71
mov dword [ebp - 0x74], eax
cmp eax, dword [ebp - 0x64]
jne 0x4ea526
cmp dword [0x5d0c24], ebx
jne 0x4ea664
jmp 0x4ea648
push 0x18
call fcn.0041286d
mov ebx, eax
mov dword [ebp - 0x80], ebx
pop ecx
test ebx, ebx
jne 0x4ea53f
push 8
pop edi
jmp 0x4ea648
mov ecx, dword [ebp - 0x64]
call fcn.004e9e58
mov esi, eax
mov dword [ebp - 0x6c], esi
test esi, esi
je 0x4ea537
mov eax, dword [ebp - 0x64]
mov ebx, edi
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x68], eax
lea ecx, [ebp - 0x60]
lea eax, [ebp - 0x78]
mov dword [ebp - 0x78], edi
push eax
push edi
call fcn.004ebef0
push dword [ebp - 0x70]
lea eax, [ebx + esi]
push eax
call fcn.004ebf26
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x78], edi
jne 0x4ea59b
mov ecx, dword [ebp - 0x68]
mov ebx, eax
sub ebx, dword [ebp - 0x64]
call fcn.004e9db7
test eax, eax
jne 0x4ea59b
mov eax, dword [ebp - 0x70]
cmp ebx, 5
jl 0x4ea55b
mov dword [ebp - 0x68], ebx
cmp ebx, 5
mov ebx, dword [ebp - 0x80]
jge 0x4ea5bb
cmp dword [0x5d0c24], 0
push 9
pop edi
jne 0x4ea64e
jmp 0x4ea648
mov eax, dword [ebp - 0x68]
cmp eax, 0x12
jbe 0x4ea5ca
push 6
jmp 0x4ea539
mov ecx, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x64]
mov edx, dword [ebp - 0x74]
add esi, eax
mov dword [ecx + 0x1c], edx
lea edx, [ecx + 0x17]
mov dword [ecx + 0x18], esi
add ecx, eax
mov byte [edx], al
lea eax, [ecx + 5]
mov byte [ecx], 0xe9
sub esi, eax
mov dword [ecx + 1], esi
add ecx, 5
call fcn.004e9d50
mov esi, dword [ebp - 0x64]
lea eax, [ebp - 0x7c]
push eax
push 0x40
push dword [ebp - 0x68]
mov dword [ebp - 0x7c], edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x4ea63d
mov ecx, esi
call fcn.004ea05f
mov esi, eax
test esi, esi
je 0x4ea680
mov eax, 0x6544
cmp word [esi + 0x1c], ax
je 0x4ea680
lea eax, [ebp - 0x74]
mov dword [ebp - 0x74], edi
push eax
push 0x40
push 0x40
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x4ea672
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebp - 0x6c]
mov edi, eax
mov dword [0x5d0c1c], edi
test esi, esi
je 0x4ea659
mov ecx, esi
call fcn.004ea03e
test ebx, ebx
je 0x4ea664
push ebx
call fcn.005363a4
pop ecx
mov dword [0x5d0c08], 0x5d0b98
mov eax, edi
jmp 0x4ea6ab
mov dword [esi + 0x1c], 0x6f746544
mov dword [esi + 0x20], 0x21737275
mov eax, dword [ebp - 0x6c]
mov dword [ebx + 0x10], eax
mov eax, dword [ebp - 0x64]
mov dword [ebx + 0xc], eax
mov dword [ebx + 4], edi
mov dword [ebx + 8], 0x5d0b98
mov eax, dword [ebp - 0x7c]
mov dword [ebx + 0x14], eax
mov eax, dword [0x5d0c14]
mov dword [ebx], eax
xor eax, eax
mov dword [0x5d0c14], ebx
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop edi
call fcn.0053bd6c
mov esp, ebp
pop ebp
ret 0xc