Function at 0x100beaf0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [0x102e1844], 1
jne 0x100bef04
push 0x100be590
push 0x4fa292
push 0xe8
call fcn.100d0e40
push 0x100be5b0
push 0x7828e0
push 0xe8
call fcn.100d0e40
push 0x100be590
push 0x84d793
push 0xe8
call fcn.100d0e40
push 0x100be590
push 0x84dbe7
push 0xe8
call fcn.100d0e40
push 0x100be690
push 0x5c52f6
push 0xe8
call fcn.100d0e40
push 0x100be690
push 0x5c54d4
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x100be5d0
push 0x4fa256
push 0xe8
call fcn.100d0e40
push 0x100be600
push 0x78155f
push 0xe8
call fcn.100d0e40
push 0x100be600
push 0x78159e
push 0xe8
call fcn.100d0e40
push 0x100be5d0
push 0x84d716
push 0xe8
call fcn.100d0e40
push 0x100be5d0
push 0x84db9a
push 0xe8
call fcn.100d0e40
push 0x100be6d0
push 0x7815f8
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x100be6d0
push 0x781633
push 0xe8
call fcn.100d0e40
push 0x100be750
push 0x7825b4
push 0xe8
call fcn.100d0e40
push 0x100be750
push 0x782604
push 0xe8
call fcn.100d0e40
push 0x100be750
push 0x7826af
push 0xe8
call fcn.100d0e40
push 0x100be780
push 0x782636
push 0xe8
call fcn.100d0e40
push 0x100be7b0
push 0x7826ec
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x100be7d0
push 0x782720
push 0xe8
call fcn.100d0e40
push 0x100be7f0
push 0x782de3
push 0xe8
call fcn.100d0e40
push 0x100be7f0
push 0x782e19
push 0xe8
call fcn.100d0e40
push 0x100be810
push 0x7831bc
push 0xe8
call fcn.100d0e40
push 0x100be810
push 0x7831f3
push 0xe8
call fcn.100d0e40
push 0x100be830
push 0x8103e8
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x100be850
push 0x783efb
push 0xe8
call fcn.100d0e40
push 0x100be690
push 0x783f36
push 0xe8
call fcn.100d0e40
push 0x100be8a0
push 0x77fd56
push 0xe8
call fcn.100d0e40
push 0x100be7f0
push 0x80ff8a
push 0xe8
call fcn.100d0e40
push 0x100be810
push 0x81011d
push 0xe8
call fcn.100d0e40
push 0x100be8c0
push 0x65aa14
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x100be8c0
push 0x65acb1
push 0xe8
call fcn.100d0e40
push 0x100be8c0
push 0x65af35
push 0xe8
call fcn.100d0e40
push 0x100be8e0
push 0x78488e
push 0xe8
call fcn.100d0e40
push 0x100be8e0
push 0x7848ed
push 0xe8
call fcn.100d0e40
push 0x100be8e0
push 0x78495c
push 0xe8
call fcn.100d0e40
push 0x100be900
push 0x5c5441
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x100be900
push 0x5c550e
push 0xe8
call fcn.100d0e40
push 0x100be900
push 0x5c5773
push 0xe8
call fcn.100d0e40
push 0x100be940
push 0x5c52b8
push 0xe8
call fcn.100d0e40
push 0x100be980
push 0x7847de
push 0xe8
call fcn.100d0e40
push 0x100be940
push 0x78480d
push 0xe8
call fcn.100d0e40
push 0x100be940
push 0x78480d
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x100be9d0
push 0x8106ca
push 0xe8
call fcn.100d0e40
push 0x100be9f0
push 0x7817f2
push 0xe8
call fcn.100d0e40
push 0x100bea10
push 0x782b32
push 0xe8
call fcn.100d0e40
push 0x100bea30
push 0x7817cd
push 0xe8
call fcn.100d0e40
push 0x100bea60
push 0x782b00
push 0xe8
call fcn.100d0e40
push 0x100bea90
push 0x782fd7
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x100beab0
push 0x7849cd
push 0xe8
call fcn.100d0e40
push 0x100bead0
push 0x784a4d
push 0xe8
call fcn.100d0e40
add esp, 0x18
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4fa27b
call esi
lea eax, [ebp - 4]
mov dword [0x4fa27b], 0xa0000001
push eax
push dword [ebp - 4]
push 4
push 0x4fa27b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7828cf
call esi
lea eax, [ebp - 4]
mov dword [0x7828cf], 0xa0000002
push eax
push dword [ebp - 4]
push 4
push 0x7828cf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84d782
call esi
lea eax, [ebp - 4]
mov dword [0x84d782], 0xa0000003
push eax
push dword [ebp - 4]
push 4
push 0x84d782
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84dbd6
call esi
lea eax, [ebp - 4]
mov dword [0x84dbd6], 0xa0000004
push eax
push dword [ebp - 4]
push 4
push 0x84dbd6
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4fa240
call esi
lea eax, [ebp - 4]
mov dword [0x4fa240], 0xa0000001
push eax
push dword [ebp - 4]
push 4
push 0x4fa240
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x78154e
call esi
lea eax, [ebp - 4]
mov dword [0x78154e], 0xa0000002
push eax
push dword [ebp - 4]
push 4
push 0x78154e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x78158d
call esi
lea eax, [ebp - 4]
mov dword [0x78158d], 0xa0000003
push eax
push dword [ebp - 4]
push 4
push 0x78158d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84d705
call esi
lea eax, [ebp - 4]
mov dword [0x84d705], 0xa0000004
push eax
push dword [ebp - 4]
push 4
push 0x84d705
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84db89
call esi
lea eax, [ebp - 4]
mov dword [0x84db89], 0xa0000005
push eax
push dword [ebp - 4]
push 4
push 0x84db89
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ff79
call esi
lea eax, [ebp - 4]
mov dword [0x80ff79], 0xa0000001
push eax
push dword [ebp - 4]
push 4
push 0x80ff79
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84d563
call esi
lea eax, [ebp - 4]
mov dword [0x84d563], 0xa0000002
push eax
push dword [ebp - 4]
push 4
push 0x84d563
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84d9f3
call esi
lea eax, [ebp - 4]
mov dword [0x84d9f3], 0xa0000003
push eax
push dword [ebp - 4]
push 4
push 0x84d9f3
call esi
push 0x100bff20
push 0x77fb09
push 0xe9
call fcn.100d0e40
push 0x100bffb0
push 0x77fb3e
push 0xe9
call fcn.100d0e40
push 0x100bfff0
push 0x80fcf0
push 0xe9
call fcn.100d0e40
push 0x100c0040
push 0x80fefd
push 0xe9
call fcn.100d0e40
push 0x100c0080
push 0x80fd27
push 0xe9
call fcn.100d0e40
push 0x100c00d0
push 0x810090
push 0xe9
call fcn.100d0e40
add esp, 0x48
push 0x100c0110
push 0x81025b
push 0xe9
call fcn.100d0e40
push 0x100c0160
push 0x810361
push 0xe9
call fcn.100d0e40
push 0x100c01a0
push 0x81052b
push 0xe9
call fcn.100d0e40
push 0x100c01f0
push 0x810631
push 0xe9
call fcn.100d0e40
push 0x100c0230
push 0x65158a
push 0xe9
call fcn.100d0e40
push 0x100c0260
push 0x65164d
push 0xe9
call fcn.100d0e40
add esp, 0x48
push 0x100c02a0
push 0x402327
push 0xe9
call fcn.100d0e40
push 0x100c02e0
push 0x593b53
push 0xe9
call fcn.100d0e40
push 0x100c0340
push 0x595ea1
push 0xe9
call fcn.100d0e40
push 0x100c0360
push 0x596142
push 0xe9
call fcn.100d0e40
push 0x100c0380
push 0x7801ad
push 0xe9
call fcn.100d0e40
push 0x100c03a0
push 0x7818f2
push 0xe9
call fcn.100d0e40
add esp, 0x48
push 0x100c03c0
push 0x782ce9
push 0xe9
call fcn.100d0e40
push 0x100c03e0
push 0x7830c3
push 0xe9
call fcn.100d0e40
push 0x100c0400
push 0x784b4f
push 0xe9
call fcn.100d0e40
push 0x100bf530
push 0x510feb
push 0xe8
call fcn.100d0e40
push 0x100bf530
push 0x51100d
push 0xe8
call fcn.100d0e40
push 0x100bf4f0
push 0x51107b
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x100bf4f0
push 0x5428a4
push 0xe8
call fcn.100d0e40
push 0x100bf4f0
push 0x6439a1
push 0xe8
call fcn.100d0e40
push 0x100bf4f0
push 0x643bad
push 0xe8
call fcn.100d0e40
push 0x100bf4f0
push 0x643d29
push 0xe8
call fcn.100d0e40
push 0x100bf510
push 0x643d91
push 0xe8
call fcn.100d0e40
push 0x100bf4f0
push 0x6441b6
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x100bf4f0
push 0x64422f
push 0xe8
call fcn.100d0e40
push 0x100bf4f0
push 0x644291
push 0xe8
call fcn.100d0e40
push 0x100bf4f0
push 0x6442cf
push 0xe8
call fcn.100d0e40
push 0x100bf4f0
push 0x64435a
push 0xe8
call fcn.100d0e40
push 0x100bf4f0
push 0x6443cb
push 0xe8
call fcn.100d0e40
push 0x100bf4f0
push 0x6443f1
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x100bf510
push 0x644465
push 0xe8
call fcn.100d0e40
push 0x100bf4f0
push 0x64a4ab
push 0xe8
call fcn.100d0e40
push 0x100bf4f0
push 0x64a71d
push 0xe8
call fcn.100d0e40
push 0x100bf4f0
push 0x64a779
push 0xe8
call fcn.100d0e40
push 0x100bf4f0
push 0x64aac0
push 0xe8
call fcn.100d0e40
push 0x100bf4f0
push 0x64ab1c
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x100c0a40
push 0x4022b1
push 0xe9
call fcn.100d0e40
push 0x100c0a60
push 0x5958f9
push 0xe8
call fcn.100d0e40
push 0x100c0a60
push 0x595b16
push 0xe8
call fcn.100d0e40
push 0x100c0b10
push 0x77fb93
push 0xe8
call fcn.100d0e40
push 0x100c0b50
push 0x833fad
push 0xe9
call fcn.100d0e40
push 0x100c0b90
push 0x590832
push 0xe9
call fcn.100d0e40
add esp, 0x48
push 0x100c0bd0
push 0x4eb465
push 0xe9
call fcn.100d0e40
add esp, 0xc
pop esi
mov esp, ebp
pop ebp
ret