Function at 0x1000b930
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x1008f400]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x10091388]
test eax, eax
jne 0x1000b956
xor edx, edx
mov dword [0x10090af4], edx
jmp 0x1000b9da
cmp eax, 1
jne 0x1000b968
mov edx, 0x14
mov dword [0x10090af4], edx
jmp 0x1000b9da
cmp eax, 2
jne 0x1000b97a
mov edx, 0x46
mov dword [0x10090af4], edx
jmp 0x1000b9da
cmp eax, 3
jne 0x1000b98c
mov edx, 0x5a
mov dword [0x10090af4], edx
jmp 0x1000b9da
cmp eax, 4
jne 0x1000b99e
mov edx, 0x78
mov dword [0x10090af4], edx
jmp 0x1000b9da
cmp eax, 5
jne 0x1000b9b0
mov edx, 0xc8
mov dword [0x10090af4], edx
jmp 0x1000b9da
cmp eax, 6
jne 0x1000b9c2
mov edx, 0x104
mov dword [0x10090af4], edx
jmp 0x1000b9da
cmp eax, 7
jne 0x1000b9d4
mov edx, 0x136
mov dword [0x10090af4], edx
jmp 0x1000b9da
mov edx, dword [0x10090af4]
mov ecx, dword [0x10093478]
push ebx
mov ebx, dword [0x10093834]
push esi
mov esi, dword [0x10093534]
add ecx, esi
push edi
mov edi, dword [0x100935e0]
mov eax, dword [edi + esi]
mov dword [ecx + eax], edx
cmp dword [ebx], 1
mov ecx, dword [0x1009367c]
jne 0x1000bb30
mov eax, dword [0x10092404]
cmp eax, 1
jne 0x1000ba29
imul eax, dword [edi + esi], 0x17c
add eax, ecx
mov dword [eax + esi + 0x3c], 0x3dcccccd
jmp 0x1000ba6f
cmp eax, 2
jne 0x1000ba41
imul eax, dword [edi + esi], 0x17c
add eax, ecx
mov dword [eax + esi + 0x3c], 0x3e4ccccd
jmp 0x1000ba6f
cmp eax, 3
jne 0x1000ba59
imul eax, dword [edi + esi], 0x17c
add eax, ecx
mov dword [eax + esi + 0x3c], 0x3f000000
jmp 0x1000ba6f
cmp eax, 4
jne 0x1000ba6f
imul eax, dword [edi + esi], 0x17c
add eax, ecx
mov dword [eax + esi + 0x3c], 0x3f400000
mov eax, dword [0x100916a4]
cmp eax, 1
jne 0x1000ba8c
imul eax, dword [edi + esi], 0x17c
add eax, ecx
mov dword [eax + esi + 0x50], 0x3dcccccd
jmp 0x1000bad2
cmp eax, 2
jne 0x1000baa4
imul eax, dword [edi + esi], 0x17c
add eax, ecx
mov dword [eax + esi + 0x50], 0x3e4ccccd
jmp 0x1000bad2
cmp eax, 3
jne 0x1000babc
imul eax, dword [edi + esi], 0x17c
add eax, ecx
mov dword [eax + esi + 0x50], 0x3f000000
jmp 0x1000bad2
cmp eax, 4
jne 0x1000bad2
imul eax, dword [edi + esi], 0x17c
add eax, ecx
mov dword [eax + esi + 0x50], 0x3f400000
cmp dword [ebx], 1
jne 0x1000bb30
imul eax, dword [edi + esi], 0x17c
add eax, ecx
cmp dword [0x10091414], 0
jne 0x1000baf6
mov dword [eax + esi + 0xa0], 0
jmp 0x1000bb01
mov dword [eax + esi + 0xa0], 0x4412c000
cmp dword [ebx], 1
jne 0x1000bb30
imul eax, dword [edi + esi], 0x17c
add eax, ecx
cmp dword [0x10091470], 0
jne 0x1000bb25
mov dword [eax + esi + 0x168], 0
jmp 0x1000bb30
mov dword [eax + esi + 0x168], 0x3f800000
cmp dword [ebx], 0
je 0x1000bb88
imul eax, dword [edi + esi], 0x17c
add eax, ecx
cmp dword [0x1009135c], 0
jne 0x1000bb51
mov dword [eax + esi + 0x78], 0
jmp 0x1000bb59
mov dword [eax + esi + 0x78], 0x3f800000
cmp dword [ebx], 0
je 0x1000bb88
imul eax, dword [edi + esi], 0x17c
add eax, ecx
cmp dword [0x100919e0], 0
jne 0x1000bb7d
mov dword [eax + esi + 0xc8], 0
jmp 0x1000bb88
mov dword [eax + esi + 0xc8], 0x43480000
cmp dword [0x100913f8], 0
je 0x1000bbb7
imul edx, dword [edi + esi], 0x45
mov ecx, dword [0x100936a4]
mov ax, word [0x10090b40]
sub edx, dword [0x100934b0]
add edx, dword [0x10093790]
add edx, dword [0x100935f8]
mov word [edx + ecx], ax
mov edx, dword [0x10091334]
test edx, edx
je 0x1000bc00
dec edx
cmp dword [ebx], 1
mov dword [0x10090714], edx
je 0x1000bbd7
mov eax, dword [0x100934b4]
cmp dword [eax], 6
jne 0x1000bc00
mov ecx, dword [edi + esi]
mov eax, dword [0x100937d4]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + esi]
test edx, edx
js 0x1000bc00
add ecx, 8
inc edx
nop dword [eax]
mov al, byte [0x10090b11]
lea ecx, [ecx + 2]
mov byte [ecx - 2], al
sub edx, 1
jne 0x1000bbf0
mov eax, dword [0x10093550]
mov ecx, dword [eax]
mov eax, dword [0x1009354c]
sub ecx, dword [eax]
mov eax, dword [0x1009372c]
mov eax, dword [eax]
mov ecx, dword [ecx + eax + 0x18]
mov eax, dword [0x1009380c]
mov dword [eax + ecx], 0
mov eax, dword [0x1009172c]
test eax, eax
je 0x1000bcac
cmp byte [0x10094878], 0
mov dword [eax + 0x40], 0
jne 0x1000bcac
mov edi, dword [0x10093754]
lea eax, [ebp - 8]
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 1
push edi
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 1
call esi
push 1
call esi
push 1
mov byte [edi], 0x8b
call esi
push 1
call esi
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 1
push edi
call ebx
lea eax, [ebp - 0xc]
mov byte [0x10094878], 1
push eax
push 0x40
push 1
push dword [0x10093620]
call ebx
mov eax, dword [0x10093620]
lea ecx, [ebp - 0xc]
push ecx
mov dword [eax], 0
push dword [ebp - 0xc]
push 1
push eax
call ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10071a6b
mov esp, ebp
pop ebp
ret