Function at 0x10014280
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100a900c]
xor eax, ebp
mov dword [ebp - 4], eax
mov al, byte [0x100b00cc]
mov byte [0x100b00cd], al
test al, al
je 0x100145f8
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add eax, 0x40f63
push edi
push ecx
push 0x40
push 1
push eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 1
call esi
mov eax, dword [ebp - 0x10]
mov byte [eax], 1
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x2d194
mov dword [ebp - 0xc], 0x3f
push 0x3f
push eax
mov dword [ebp - 0x10], eax
call esi
mov eax, dword [ebp - 0x10]
mov ecx, 0x9d04
mov edi, 0x16a
mov dword [eax], 0x8b08c483
mov eax, dword [ebp - 0x10]
mov word [eax + 4], cx
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x100cab48]
add ecx, 0x14d3b0
mov dword [eax + 6], ecx
mov eax, dword [ebp - 0x10]
mov dword [eax + 0xa], 0x1575c085
mov eax, dword [ebp - 0x10]
mov dword [eax + 0xe], 0x858d0e8b
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x100cab48]
add ecx, 0x14def0
mov dword [eax + 0x12], ecx
mov eax, dword [ebp - 0x10]
mov word [eax + 0x16], di
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x18], 0xe8088950
mov ecx, dword [0x100cab48]
mov eax, dword [ebp - 0x10]
sub ecx, eax
add ecx, 0x2c450
mov dword [eax + 0x1c], ecx
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x20], 0x8b08c483
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x24], 0xc981cb
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x28], 0x51000100
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x2c], 0x3eb68
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x30], 0x158b00
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x100cab48]
add ecx, 0x177a44
mov dword [eax + 0x33], ecx
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x37], 0x11168
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x3b], 0xd7ff5200
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x2d6a5
mov dword [ebp - 0xc], 0x46
push 0x46
push eax
mov dword [ebp - 0x10], eax
call esi
mov eax, dword [ebp - 0x10]
mov dword [eax], 0xbd048b
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x100cab48]
add ecx, 0x14d3b0
mov dword [eax + 3], ecx
mov eax, dword [ebp - 0x10]
mov dword [eax + 7], 0x850fc085
mov eax, dword [ebp - 0x10]
mov dword [eax + 0xb], 0x15
mov eax, dword [ebp - 0x10]
mov dword [eax + 0xf], 0x838d0e8b
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x100cab48]
add ecx, 0x14def0
mov dword [eax + 0x13], ecx
mov eax, dword [ebp - 0x10]
mov word [eax + 0x17], di
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x19], 0xe8088950
mov ecx, dword [0x100cab48]
mov eax, dword [ebp - 0x10]
sub ecx, eax
add ecx, 0x2c44f
mov dword [eax + 0x1d], ecx
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x21], 0xa108c483
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x100cab48]
add ecx, 0x177a44
mov dword [eax + 0x25], ecx
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x29], 0xc483d78b
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x2d], 0xca8108
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x31], 0x52000100
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x35], 0x3eb68
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x39], 0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x3a], 0x11168
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x3e], 0x15ff5000
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x100cab48]
add ecx, 0x9a334
mov dword [eax + 0x42], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x2f68c
mov dword [ebp - 0xc], 0x42
push 0x42
push eax
mov dword [ebp - 0x10], eax
call esi
mov eax, dword [ebp - 0x10]
mov ecx, 0xbd04
mov dword [eax], 0x8b08c483
mov eax, dword [ebp - 0x10]
mov word [eax + 4], cx
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x100cab48]
add ecx, 0x14d3b0
mov dword [eax + 6], ecx
mov eax, dword [ebp - 0x10]
mov dword [eax + 0xa], 0x1575c085
mov eax, dword [ebp - 0x10]
mov dword [eax + 0xe], 0x868d138b
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x100cab48]
add ecx, 0x14def0
mov dword [eax + 0x12], ecx
mov eax, dword [ebp - 0x10]
mov word [eax + 0x16], di
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x18], 0xe8108950
mov ecx, dword [0x100cab48]
mov eax, dword [ebp - 0x10]
sub ecx, eax
add ecx, 0x2c450
mov dword [eax + 0x1c], ecx
mov ecx, 0xd8b
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x20], 0x8b08c483
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x24], 0xdc7
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x28], 0x68500001
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x2c], 0x3eb
mov eax, dword [ebp - 0x10]
mov word [eax + 0x30], cx
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x100cab48]
add ecx, 0x177a44
mov dword [eax + 0x32], ecx
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x36], 0x11168
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x3a], 0x15ff5100
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x100cab48]
add ecx, 0x9a334
mov dword [eax + 0x3e], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call esi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007491a
mov esp, ebp
pop ebp
ret