Function at 0x100a0d90
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4fa27b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4fa27b], 0xa0000001
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4fa27b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7828cf
call esi
mov ebx, 0xa0000002
lea ecx, [ebp - 4]
push ecx
mov dword [0x7828cf], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7828cf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84d782
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84d782], 0xa0000003
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84d782
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84dbd6
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84dbd6], 0xa0000004
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84dbd6
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4fa240
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4fa240], 0xa0000001
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4fa240
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x78154e
call esi
mov dword [0x78154e], ebx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x78154e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x78158d
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x78158d], 0xa0000003
mov edx, dword [ebp - 4]
push edx
push 4
push 0x78158d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84d705
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84d705], 0xa0000004
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84d705
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84db89
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84db89], 0xa0000005
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84db89
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ff79
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ff79], 0xa0000001
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ff79
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84d563
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84d563], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84d563
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84d9f3
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84d9f3], 0xa0000003
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84d9f3
call esi
push 0x100a1c00
push 0x77fb09
mov bl, 0xe9
call fcn.100b6700
push 0x100a1c40
push 0x77fb3e
call fcn.100b6700
push 0x100a1c80
push 0x80fcf0
call fcn.100b6700
push 0x100a1cd0
push 0x80fefd
call fcn.100b6700
push 0x100a1d10
push 0x80fd27
call fcn.100b6700
push 0x100a1d60
push 0x810090
call fcn.100b6700
push 0x100a1da0
push 0x81025b
call fcn.100b6700
push 0x100a1df0
push 0x810361
call fcn.100b6700
add esp, 0x40
push 0x100a1e30
push 0x81052b
call fcn.100b6700
push 0x100a1e80
push 0x810631
call fcn.100b6700
push 0x100a1ec0
push 0x64c934
call fcn.100b6700
push 0x100a1ee0
push 0x64c9e4
call fcn.100b6700
push 0x100a1f10
push 0x65158a
call fcn.100b6700
push 0x100a1f40
push 0x65164d
call fcn.100b6700
push 0x100a1f80
push 0x402327
call fcn.100b6700
push 0x100a1fc0
push 0x593b53
call fcn.100b6700
add esp, 0x40
push 0x100a2020
push 0x595ea1
call fcn.100b6700
push 0x100a2040
push 0x596142
call fcn.100b6700
push 0x100a2060
push 0x7801ad
call fcn.100b6700
push 0x100a2080
push 0x7818f2
call fcn.100b6700
push 0x100a20a0
push 0x782ce9
call fcn.100b6700
push 0x100a20c0
push 0x7830c3
call fcn.100b6700
push 0x100a20e0
push 0x784b4f
call fcn.100b6700
push 0x100a12a0
push 0x510feb
mov bl, 0xe8
call fcn.100b6700
add esp, 0x40
push 0x100a12a0
push 0x51100d
call fcn.100b6700
push 0x100a1240
push 0x51107b
call fcn.100b6700
push 0x100a1240
push 0x5428a4
call fcn.100b6700
push 0x100a1240
push 0x6439a1
call fcn.100b6700
push 0x100a1240
push 0x643bad
call fcn.100b6700
push 0x100a1240
push 0x643d29
call fcn.100b6700
push 0x100a1270
push 0x643d91
call fcn.100b6700
push 0x100a1240
push 0x6441b6
call fcn.100b6700
add esp, 0x40
push 0x100a1240
push 0x64422f
call fcn.100b6700
push 0x100a1240
push 0x644291
call fcn.100b6700
push 0x100a1240
push 0x6442cf
call fcn.100b6700
push 0x100a1240
push 0x64435a
call fcn.100b6700
push 0x100a1240
push 0x6443cb
call fcn.100b6700
push 0x100a1240
push 0x6443f1
call fcn.100b6700
push 0x100a1270
push 0x644465
call fcn.100b6700
push 0x100a1240
push 0x64a4ab
call fcn.100b6700
add esp, 0x40
push 0x100a1240
push 0x64a71d
call fcn.100b6700
push 0x100a1240
push 0x64a779
call fcn.100b6700
push 0x100a1240
push 0x64aac0
call fcn.100b6700
push 0x100a1240
push 0x64ab1c
call fcn.100b6700
add esp, 0x20
pop esi
pop ebx
mov esp, ebp
pop ebp
ret