Function at 0x1000a6f0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [0x100beec0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [0x100c0760]
lea ecx, [ebp - 0xc]
add ebx, 0x6526a2
push esi
push edi
lea eax, [ebx + 1]
push eax
call fcn.100027f0
mov esi, dword [ebp - 0xc]
lea eax, [ebp - 0x14]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
mov ecx, dword [esi]
mov dword [ebp - 8], ecx
test eax, eax
je 0x1000a75e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0xc]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
push dword [ebp - 0x1c]
call edi
mov ecx, dword [ebp - 8]
push 1
push ecx
mov eax, esp
add esi, 4
push ecx
add esi, ecx
mov ecx, esp
push ebx
mov dword [eax], 0x1000abc0
call fcn.100027f0
lea eax, [ebp - 8]
push eax
call fcn.1000abd0
mov ebx, dword [0x100c0760]
lea ecx, [ebp - 8]
add ebx, 0x65104d
mov dword [0x100c0824], esi
add esp, 0x10
lea eax, [ebx + 1]
push eax
call fcn.100027f0
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
mov ecx, dword [esi]
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x1000a7de
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
mov ecx, dword [ebp - 0xc]
push 1
push ecx
mov eax, esp
add esi, 4
push ecx
add esi, ecx
mov ecx, esp
push ebx
mov dword [eax], 0x1000ab70
call fcn.100027f0
lea eax, [ebp - 0xc]
push eax
call fcn.1000abd0
mov ebx, dword [0x100c0760]
lea ecx, [ebp - 8]
add ebx, 0x64d227
mov dword [0x100c0828], esi
add esp, 0x10
lea eax, [ebx + 1]
push eax
call fcn.100027f0
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
mov ecx, dword [esi]
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x1000a85e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
mov ecx, dword [ebp - 0xc]
push 1
push ecx
mov eax, esp
add esi, 4
push ecx
add esi, ecx
mov ecx, esp
push ebx
mov dword [eax], 0x1000aba0
call fcn.100027f0
lea eax, [ebp - 0xc]
push eax
call fcn.1000abd0
mov ebx, dword [0x100c0760]
lea ecx, [ebp - 8]
add ebx, 0x650770
mov dword [0x100c082c], esi
add esp, 0x10
lea eax, [ebx + 1]
push eax
call fcn.100027f0
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
mov ecx, dword [esi]
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x1000a8de
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
mov ecx, dword [ebp - 0xc]
push 1
push ecx
mov eax, esp
add esi, 4
push ecx
add esi, ecx
mov ecx, esp
push ebx
mov dword [eax], 0x1000ab90
call fcn.100027f0
lea eax, [ebp - 0xc]
push eax
call fcn.1000abd0
mov ebx, dword [0x100c0760]
lea ecx, [ebp - 8]
add ebx, 0x64d411
mov dword [0x100c0830], esi
add esp, 0x10
lea eax, [ebx + 1]
push eax
call fcn.100027f0
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
mov ecx, dword [esi]
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x1000a95e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
mov ecx, dword [ebp - 0xc]
push 1
push ecx
mov eax, esp
add esi, 4
push ecx
add esi, ecx
mov ecx, esp
push ebx
mov dword [eax], 0x1000abb0
call fcn.100027f0
lea eax, [ebp - 0xc]
push eax
call fcn.1000abd0
mov edi, dword [0x100c0760]
add esp, 0x10
add edi, 0x64d40a
mov dword [0x100c0834], esi
push 1
push 4
push ecx
lea eax, [edi + 1]
mov ecx, esp
push eax
call fcn.100027f0
lea eax, [ebp - 8]
push eax
call fcn.1000ad00
add esp, 0x10
mov esi, dword [eax]
push 1
push ecx
mov eax, esp
push ecx
mov ecx, esp
push edi
mov dword [eax], 0x1000ab80
call fcn.100027f0
lea eax, [ebp - 0xc]
push eax
call fcn.1000abd0
mov edi, dword [0x100c0760]
add esp, 0x10
add edi, 0x65264c
mov dword [0x100c0838], esi
push 1
push 4
push ecx
lea eax, [edi + 1]
mov ecx, esp
push eax
call fcn.100027f0
lea eax, [ebp - 8]
push eax
call fcn.1000ad00
add esp, 0x10
mov esi, dword [eax]
push 1
push ecx
mov eax, esp
push ecx
mov ecx, esp
push edi
mov dword [eax], 0x1000ab50
call fcn.100027f0
lea eax, [ebp - 0xc]
push eax
call fcn.1000abd0
mov edi, dword [0x100c0760]
add esp, 0x10
add edi, 0xb9d499
mov dword [0x100c083c], esi
push 1
push 4
push ecx
lea eax, [edi + 1]
mov ecx, esp
push eax
call fcn.100027f0
lea eax, [ebp - 8]
push eax
call fcn.1000ad00
mov esi, dword [eax]
add esp, 0x10
push 1
push ecx
mov eax, esp
push ecx
mov ecx, esp
push edi
mov dword [eax], 0x1000ab30
call fcn.100027f0
lea eax, [ebp - 0xc]
push eax
call fcn.1000abd0
mov edi, dword [0x100c0760]
add esp, 0x10
add edi, 0xb9d0fa
mov dword [0x100c0840], esi
push 1
push 4
push ecx
lea eax, [edi + 1]
mov ecx, esp
push eax
call fcn.100027f0
lea eax, [ebp - 8]
push eax
call fcn.1000ad00
add esp, 0x10
mov esi, dword [eax]
push 1
push ecx
mov eax, esp
push ecx
mov ecx, esp
push edi
mov dword [eax], 0x1000ab40
call fcn.100027f0
lea eax, [ebp - 0xc]
push eax
call fcn.1000abd0
mov edi, dword [0x100c0760]
add esp, 0x10
add edi, 0x9f975c
mov dword [0x100c0844], esi
push 1
push 4
push ecx
lea eax, [edi + 1]
mov ecx, esp
push eax
call fcn.100027f0
lea eax, [ebp - 8]
push eax
call fcn.1000ad00
add esp, 0x10
mov esi, dword [eax]
push 1
push ecx
mov eax, esp
push ecx
mov ecx, esp
push edi
mov dword [eax], 0x1000ab60
call fcn.100027f0
lea eax, [ebp - 0xc]
push eax
call fcn.1000abd0
mov ecx, dword [ebp - 4]
add esp, 0x10
mov dword [0x100c0848], esi
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.10054ef6
mov esp, ebp
pop ebp
ret