Function at 0x1001a530
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
mov ebx, ecx
mov byte [ebp - 1], dl
movzx eax, byte [ebx + 0xb0]
push esi
push edi
lea edi, [ebx + 0xb0]
mov dword [ebp - 0xc], ebx
xor eax, 0x811c9dc5
imul esi, eax, 0x1000193
movzx eax, byte [edi + 1]
xor esi, eax
movzx eax, byte [edi + 2]
imul ecx, esi, 0x1000193
xor ecx, eax
movzx eax, byte [edi + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, 0x101f4494
push eax
push edi
lea eax, [ebp - 0x18]
push eax
call fcn.10020aa0
mov esi, dword [eax + 4]
test esi, esi
je 0x1001a71a
cmp esi, dword [0x101f4498]
je 0x1001a71a
mov al, byte [ebp - 1]
cmp byte [esi + 0x10], al
je 0x1001a71a
push edi
call fcn.1001c520
mov cl, byte [ebp - 1]
push str.common.dll
mov byte [eax + 4], cl
mov eax, dword [ebx + 0x22c]
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0xc]
mov dword [ebx + 0x22c], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp byte [ebp - 1], 0
mov dword [ebp - 8], eax
mov byte [ebp - 2], 0xeb
mov byte [ebp - 3], 0x74
jne 0x1001a67d
lea ebx, [eax + 0x52ce9]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0
push 0x38
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0
push 1
lea eax, [ebp - 2]
push eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push esi
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call edi
mov ecx, dword [ebp - 0xc]
call dword [sym.imp.Common.dll_public:_float___thiscall_CShip::close_bay_void_]
fstp st(0)
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0
push 0x38
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 8]
push 0x40
push 1
add eax, 0x52ce9
push eax
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0
lea eax, [ebp - 3]
push 1
push eax
mov eax, dword [ebp - 8]
add eax, 0x52ce9
jmp 0x1001a707
lea ebx, [eax + 0x52ba1]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0
push 0x38
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0
push 1
lea eax, [ebp - 2]
push eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push esi
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call edi
mov ecx, dword [ebp - 0xc]
call dword [sym.imp.Common.dll_public:_float___thiscall_CShip::open_bay_void_]
fstp st(0)
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0
push 0x38
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 8]
push 0x40
push 1
add eax, 0x52ba1
push eax
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0
lea eax, [ebp - 3]
push 1
push eax
mov eax, dword [ebp - 8]
add eax, 0x52ba1
push eax
push esi
call ebx
push esi
call edi
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x10]
mov dword [eax + 0x22c], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret