Function at 0x100ba770
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push 0x100ba740
push 0x7c57b9
mov bl, 0xe8
call fcn.100b6700
push 0x100ba240
push 0x81aa9c
call fcn.100b6700
push 0x100ba240
push 0x81aa42
call fcn.100b6700
push 0x100ba240
push 0x81a9e8
call fcn.100b6700
push 0x100ba240
push 0x81a977
call fcn.100b6700
push 0x100ba240
push 0x81a944
call fcn.100b6700
push 0x100ba240
push 0x81a73d
call fcn.100b6700
push 0x100ba240
push 0x81a6f4
call fcn.100b6700
add esp, 0x40
push 0x100ba270
push 0x4287f7
call fcn.100b6700
push 0x100ba270
push 0x428835
call fcn.100b6700
push 0x100ba270
push 0x428873
call fcn.100b6700
push 0x100ba270
push 0x4288b1
call fcn.100b6700
push 0x100ba270
push 0x42930a
call fcn.100b6700
push 0x100ba270
push 0x429348
call fcn.100b6700
push 0x100ba270
push 0x429386
call fcn.100b6700
push 0x100ba270
push 0x4293be
call fcn.100b6700
add esp, 0x40
push 0x100ba6b0
push 0x4286ed
call fcn.100b6700
push 0x100ba6b0
push 0x42912d
call fcn.100b6700
push 0x100ba6b0
push 0x429193
call fcn.100b6700
push 0x100ba6b0
push 0x429200
call fcn.100b6700
push 0x100ba650
push 0x82b005
call fcn.100b6700
push 0x100ba650
push 0x82b08b
call fcn.100b6700
push 0x100ba650
push 0x82b100
call fcn.100b6700
push 0x100ba650
push 0x82b25d
call fcn.100b6700
add esp, 0x40
push 0x100ba5a0
push 0x934286
call fcn.100b6700
push 0x100ba5a0
push 0x855868
call fcn.100b6700
push 0x100ba5a0
push 0x85589f
call fcn.100b6700
push 0x100ba560
push 0x7919b8
call fcn.100b6700
push 0x100ba560
push 0x791982
call fcn.100b6700
push 0x100ba560
push 0x778f05
call fcn.100b6700
push 0x100ba240
push 0x9481eb
call fcn.100b6700
push 0x100ba240
push 0x94823e
call fcn.100b6700
add esp, 0x40
push 0x100ba240
push 0x948298
call fcn.100b6700
push 0x100ba240
push 0x9482d5
call fcn.100b6700
push 0x100ba240
push 0x948312
call fcn.100b6700
push 0x100ba240
push 0x94839e
call fcn.100b6700
push 0x100ba510
push 0x947edd
call fcn.100b6700
push 0x100ba510
push 0x947f64
call fcn.100b6700
push 0x100ba610
push 0x947fe5
call fcn.100b6700
push 0x100ba610
push 0x94801a
call fcn.100b6700
add esp, 0x40
push 0x100ba610
push 0x94807d
call fcn.100b6700
push 0x100ba610
push 0x9480be
call fcn.100b6700
push 0x100ba610
push 0x948102
call fcn.100b6700
push 0x100ba610
push 0x948151
call fcn.100b6700
push 0x100ba700
push 0x8863f9
call fcn.100b6700
push 0x100ba700
push 0x88643f
call fcn.100b6700
push 0x100ba700
push 0x886270
call fcn.100b6700
push 0x100ba700
push 0x886318
call fcn.100b6700
add esp, 0x40
push 0x100ba700
push 0x886367
call fcn.100b6700
push 0x100ba700
push 0x8863a2
call fcn.100b6700
push 0x100ba590
push 0x85ecb1
call fcn.100b6700
add esp, 0x18
cmp dword [0x102ee01c], 0
jne 0x100baab4
push 0x100ba160
push 0x4d7c98
call fcn.100b6700
push 0x100ba160
push 0x4d7c0d
call fcn.100b6700
add esp, 0x10
cmp dword [0x103104b8], 1
je 0x100baada
cmp dword [0x102ee01c], 1
je 0x100baada
push 0x100ba130
push 0x40464e
mov bl, 0xe8
call fcn.100b6700
add esp, 8
push 0x100b7db0
push 0x4d2180
mov bl, 0xe8
call fcn.100b6700
push 0x100ba0d0
push 0x857746
call fcn.100b6700
mov eax, dword [0x102ee018]
add esp, 0x10
test eax, eax
je 0x100bab1f
cmp eax, 1
je 0x100bab1f
cmp eax, 2
je 0x100bab1f
cmp eax, 3
je 0x100bab1f
cmp eax, 6
je 0x100bab1f
cmp eax, 7
jne 0x100bab31
push 0x100b9f90
push 0x85676e
call fcn.100b6700
add esp, 8
push 0x100b9e20
push 0x841e49
mov bl, 0xe8
call fcn.100b6700
push 0x100b9cd0
push 0x7d591d
call fcn.100b6700
push 0x100b9a90
push 0x85f0cd
call fcn.100b6700
push 0x100b9a90
push 0x85efe0
call fcn.100b6700
add esp, 0x20
cmp dword [0x102ee018], 0
jne 0x100bab8f
push 0x100b9a80
push 0x78b0f0
mov bl, 0xe9
call fcn.100b6700
add esp, 8
push 0x100b95a0
push 0x5c6e80
mov bl, 0xe9
call fcn.100b6700
push 0x100b9530
push 0x779ccd
call fcn.100b6700
push 0x100b94e0
push 0x59792d
call fcn.100b6700
push 0x100b9490
push 0x635b55
call fcn.100b6700
push 0x100b9430
push 0x4d06a1
call fcn.100b6700
push 0x100b9450
push 0x4d06f4
call fcn.100b6700
push 0x100b93f0
push 0x6359b6
call fcn.100b6700
push 0x100b9350
push 0x636420
call fcn.100b6700
add esp, 0x40
push 0x100ba1e0
push 0x5b97dc
mov bl, 0xe8
call fcn.100b6700
push 0x100ba1e0
push 0x5b984c
call fcn.100b6700
push 0x100ba1e0
push 0x5b9904
call fcn.100b6700
push 0x100ba1e0
push 0x8c2e0f
call fcn.100b6700
push 0x100ba1e0
push 0x8c2e7f
call fcn.100b6700
push 0x100ba1e0
push 0x8cc713
call fcn.100b6700
push 0x100ba1e0
push 0x8cc788
call fcn.100b6700
push 0x100ba1e0
push 0x8d99b8
call fcn.100b6700
add esp, 0x40
push 0x100ba1e0
push 0x8d9a2d
call fcn.100b6700
push 0x100ba1e0
push 0x8ef47b
call fcn.100b6700
push 0x100ba1e0
push 0x8ef4ed
call fcn.100b6700
push 0x100ba1e0
push 0x8ef5c5
call fcn.100b6700
push 0x100ba1e0
push 0x8ef65a
call fcn.100b6700
push 0x100ba1e0
push 0x914fc9
call fcn.100b6700
push 0x100ba1e0
push 0x91503e
call fcn.100b6700
push 0x100ba2a0
push 0x81a146
call fcn.100b6700
add esp, 0x40
push 0x100ba2a0
push 0x81a199
call fcn.100b6700
push 0x100ba2e0
push 0x819415
call fcn.100b6700
push 0x100ba340
push 0x85cc50
call fcn.100b6700
push 0x100ba3d0
push 0x85c446
call fcn.100b6700
push 0x100ba410
push 0x943d7f
call fcn.100b6700
push 0x100ba380
push 0x8240a9
call fcn.100b6700
push 0x100ba480
push 0x945114
call fcn.100b6700
push 0x100ba4e0
push 0x945180
call fcn.100b6700
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x40
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d128f
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x4d128f], 0x1d
mov edx, dword [ebp - 4]
push edx
push 1
push 0x4d128f
call esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret