Function at 0x100018b0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
mov eax, dword [0x1000c040]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1000c624]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x1000c648]
cmp eax, dword [ecx + 4]
jle 0x10001916
push 0x1000c648
call fcn.10007175
add esp, 4
cmp dword [0x1000c648], 0xffffffff
jne 0x10001916
push 0x10008150
mov dword [0x1000c64c], 0x10009370
call fcn.100074de
push 0x1000c648
call fcn.10007124
add esp, 8
push esi
push 0x103
lea eax, [ebp - 0x107]
mov byte [ebp - 0x108], 0
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x108]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x108]
push 0x5c
push eax
call dword [sym.imp.VCRUNTIME140.dll_strrchr]
add esp, 8
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x10c]
push eax
push 0x40
push 1
push 0x44e1ec
mov dword [ebp - 0x10c], 0
call esi
test eax, eax
je 0x100019a3
lea eax, [ebp - 0x10c]
mov byte [0x44e1ec], 0x32
push eax
push dword [ebp - 0x10c]
push 1
push 0x44e1ec
call esi
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0
push eax
push 0x40
push 1
push 0x546b64
call esi
test eax, eax
je 0x100019e0
lea eax, [ebp - 0x10c]
mov byte [0x546b64], 0x32
push eax
push dword [ebp - 0x10c]
push 1
push 0x546b64
call esi
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0
push eax
push 0x40
push 1
push 0x47da39
call esi
test eax, eax
je 0x10001a1d
lea eax, [ebp - 0x10c]
mov byte [0x47da39], 0x32
push eax
push dword [ebp - 0x10c]
push 1
push 0x47da39
call esi
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0
push eax
push 0x40
push 4
push 0x4e44e6
call esi
test eax, eax
je 0x10001a5d
lea eax, [ebp - 0x10c]
mov dword [0x4e44e6], 0xffffffff
push eax
push dword [ebp - 0x10c]
push 4
push 0x4e44e6
call esi
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0
push eax
push 0x40
push 1
push 0x4b8be4
call esi
test eax, eax
je 0x10001a9a
lea eax, [ebp - 0x10c]
mov byte [0x4b8be4], 0xeb
push eax
push dword [ebp - 0x10c]
push 1
push 0x4b8be4
call esi
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0
push eax
push 0x40
push 4
push 0x4b9302
call esi
test eax, eax
je 0x10001ada
lea eax, [ebp - 0x10c]
mov dword [0x4b9302], 0x2058
push eax
push dword [ebp - 0x10c]
push 4
push 0x4b9302
call esi
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0
push eax
push 0x40
push 4
push 0x48b66c
call esi
test eax, eax
je 0x10001b1a
lea eax, [ebp - 0x10c]
mov dword [0x48b66c], 0x2058
push eax
push dword [ebp - 0x10c]
push 4
push 0x48b66c
call esi
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0
push eax
push 0x40
push 1
push 0x4be4ee
call esi
test eax, eax
je 0x10001b57
lea eax, [ebp - 0x10c]
mov byte [0x4be4ee], 0xeb
push eax
push dword [ebp - 0x10c]
push 1
push 0x4be4ee
call esi
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0
push eax
push 0x40
push 1
push 0x4ba5b2
call esi
test eax, eax
je 0x10001b94
lea eax, [ebp - 0x10c]
mov byte [0x4ba5b2], 0xeb
push eax
push dword [ebp - 0x10c]
push 1
push 0x4ba5b2
call esi
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0
push eax
push 0x40
push 4
push 0x547cac
call esi
test eax, eax
je 0x10001bd4
lea eax, [ebp - 0x10c]
mov dword [0x547cac], 0
push eax
push dword [ebp - 0x10c]
push 4
push 0x547cac
call esi
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0
push eax
push 0x40
push 4
push 0x46eced
call esi
test eax, eax
je 0x10001c14
lea eax, [ebp - 0x10c]
mov dword [0x46eced], 0
push eax
push dword [ebp - 0x10c]
push 4
push 0x46eced
call esi
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0
push eax
push 0x40
push 4
push 0x46ecd7
call esi
test eax, eax
je 0x10001c54
lea eax, [ebp - 0x10c]
mov dword [0x46ecd7], 0
push eax
push dword [ebp - 0x10c]
push 4
push 0x46ecd7
call esi
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0
push eax
push 0x40
push 1
push 0x5bb744
call esi
test eax, eax
je 0x10001c91
lea eax, [ebp - 0x10c]
mov byte [0x5bb744], 0x55
push eax
push dword [ebp - 0x10c]
push 1
push 0x5bb744
call esi
mov ecx, dword [ebp - 4]
mov al, 1
xor ecx, ebp
pop esi
call fcn.10007116
mov esp, ebp
pop ebp
ret