Function at 0x100af9c0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
push 0x100af570
push 0x62ec6d
mov bl, 0xe9
call fcn.100b6700
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 4
xor esi, esi
push 0x4d75f0
mov ebx, 0x4d
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100afa1b
mov ecx, 0x4d75f0
mov dword [ecx], ebx
mov eax, dword [ebp - 4]
lea edx, [ebp - 8]
push edx
push eax
push 4
push ecx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100afa21
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x4d6c2c
mov ebx, 0x4e
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100afa57
mov edx, 0x4d6c2c
mov dword [edx], ebx
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 4
push edx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100afa5d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x100aed20
push 0x4d76fb
mov bl, 0xe8
call fcn.100b6700
push 0x100aed20
push 0x4d79c3
call fcn.100b6700
push 0x100aed20
push 0x4d712a
call fcn.100b6700
push 0x100af590
push 0x91006d
mov bl, 0xe9
call fcn.100b6700
push 0x100af5b0
push 0x910076
call fcn.100b6700
push 0x100af5d0
push 0x4da0a6
call fcn.100b6700
push 0x100af5f0
push 0x5524d9
call fcn.100b6700
push 0x100af610
push 0x5d9629
call fcn.100b6700
add esp, 0x40
push 0x100af630
push 0x5db835
call fcn.100b6700
push 0x100af650
push 0x5dc58c
call fcn.100b6700
push 0x100af670
push 0x5ee0c8
call fcn.100b6700
push 0x100af690
push 0x62f10c
call fcn.100b6700
push 0x100af6b0
push 0x8fcedd
call fcn.100b6700
push 0x100af6d0
push 0x8fe63c
call fcn.100b6700
push 0x100af6f0
push 0x4d7c98
mov bl, 0xe8
call fcn.100b6700
push 0x100af6f0
push 0x4d7c0d
call fcn.100b6700
add esp, 0x40
push 0x100af250
push 0x5ede8b
call fcn.100b6700
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x100af330
push 5
sub edx, 0x4d87cd
mov bl, 0xe9
push 0x4d87c8
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100afbbc
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x4d87c8
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x4d87c8
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100afbc2
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x100af350
push 5
sub edx, 0x4d8801
push 0x4d87fc
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100afc11
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x4d87fc
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x4d87fc
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100afc17
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x100af370
push 5
sub edx, 0x5db530
push 0x5db52b
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100afc66
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x5db52b
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x5db52b
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100afc6c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, 5
mov ebx, 0x63d1ce
call fcn.100b6570
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x100af390
push 5
sub edx, 0x63d1d3
xor esi, esi
push ebx
mov byte [ebp - 0x10], 0xe9
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100afcc2
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, ebx
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push ebx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100afcc8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, 5
mov ebx, 0x63d40f
call fcn.100b6570
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x100af3c0
push 5
sub edx, 0x63d414
xor esi, esi
push ebx
mov byte [ebp - 0x10], 0xe9
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100afd1e
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, ebx
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push ebx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100afd24
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, 5
mov ebx, 0x63d1eb
call fcn.100b6570
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x100af3f0
push 5
sub edx, 0x63d1f0
xor esi, esi
push ebx
mov byte [ebp - 0x10], 0xe9
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100afd7a
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, ebx
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push ebx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100afd80
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, 5
mov ebx, 0x63d42c
call fcn.100b6570
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x100af420
push 5
sub edx, 0x63d431
xor esi, esi
push ebx
mov byte [ebp - 0x10], 0xe9
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100afdd6
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, ebx
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push ebx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100afddc
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, 5
mov ebx, 0x63d208
call fcn.100b6570
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x100af450
push 5
sub edx, 0x63d20d
xor esi, esi
push ebx
mov byte [ebp - 0x10], 0xe9
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100afe32
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, ebx
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push ebx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100afe38
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, 5
mov ebx, 0x63d449
call fcn.100b6570
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x100af480
push 5
sub edx, 0x63d44e
xor esi, esi
push ebx
mov byte [ebp - 0x10], 0xe9
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100afe8e
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, ebx
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push ebx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100afe94
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, 5
mov ebx, 0x63d225
call fcn.100b6570
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x100af4b0
push 5
sub edx, 0x63d22a
xor esi, esi
push ebx
mov byte [ebp - 0x10], 0xe9
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100afeea
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, ebx
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push ebx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100afef0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, 5
mov ebx, 0x63d466
call fcn.100b6570
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x100af4e0
push 5
sub edx, 0x63d46b
xor esi, esi
push ebx
mov byte [ebp - 0x10], 0xe9
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100aff46
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, ebx
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push ebx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100aff4c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, 5
mov ebx, 0x63d242
call fcn.100b6570
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x100af510
push 5
sub edx, 0x63d247
xor esi, esi
push ebx
mov byte [ebp - 0x10], 0xe9
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100affa2
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, ebx
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push ebx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100affa8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, 5
mov ebx, 0x63d483
call fcn.100b6570
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x100af540
push 5
sub edx, 0x63d488
xor esi, esi
push ebx
mov byte [ebp - 0x10], 0xe9
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
jne 0x100affe7
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
jmp 0x100b0018
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, ebx
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x63d483
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100b0012
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
fld dword [0x100d2384]
lea edx, [ebp - 4]
push edx
fstp dword [ebp - 8]
push 0x40
push 4
push 0xd27b0c
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100b0059
mov ecx, dword [ebp - 8]
mov eax, 0xd27b0c
mov dword [eax], ecx
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x10]
push edx
push eax
push 4
push 0xd27b0c
mov dword [ebp - 0x10], esi
call edi
test eax, eax
jne 0x100b005b
call ebx
fld dword [0x100d25bc]
lea ecx, [ebp - 4]
push ecx
fstp dword [ebp - 0x10]
push 0x40
push 4
push 0xd27b08
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100b009c
mov eax, dword [ebp - 0x10]
mov edx, 0xd27b08
mov dword [edx], eax
mov edx, dword [ebp - 4]
lea ecx, [ebp - 8]
push ecx
push edx
push 4
push 0xd27b08
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100b009e
call ebx
fld dword [0x100d2ea8]
lea eax, [ebp - 4]
push eax
fstp dword [ebp - 0x10]
push 0x40
push 4
push 0x503834
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100b00df
mov edx, dword [ebp - 0x10]
mov ecx, 0x503834
mov dword [ecx], edx
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 4
push 0x503834
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x100b00e1
call ebx
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x57f0fc
mov ebx, 0xffffffe9
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100b0117
mov eax, 0x57f0fc
mov dword [eax], ebx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x10]
push ecx
push edx
push 4
push eax
mov dword [ebp - 0x10], esi
call edi
test eax, eax
jne 0x100b011d
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x57f0fd
mov ebx, 0x4a
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100b0153
mov ecx, 0x57f0fd
mov dword [ecx], ebx
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x10]
push edx
push eax
push 4
push ecx
mov dword [ebp - 0x10], esi
call edi
test eax, eax
jne 0x100b0159
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x57f0fe
mov ebx, 1
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100b018f
mov edx, 0x57f0fe
mov dword [edx], ebx
mov ecx, dword [ebp - 4]
lea eax, [ebp - 0x10]
push eax
push ecx
push 4
push edx
mov dword [ebp - 0x10], esi
call edi
test eax, eax
jne 0x100b0195
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x57f0ff
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100b01c6
mov eax, 0x57f0ff
mov dword [eax], esi
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x10]
push ecx
push edx
push 4
push eax
mov dword [ebp - 0x10], esi
call edi
test eax, eax
jne 0x100b01cc
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x57f100
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100b01fd
mov ecx, 0x57f100
mov dword [ecx], esi
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x10]
push edx
push eax
push 4
push ecx
mov dword [ebp - 0x10], esi
call edi
test eax, eax
jne 0x100b0203
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x57f101
mov ebx, 0xffffff90
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x100b0239
mov edx, 0x57f101
mov dword [edx], ebx
mov ecx, dword [ebp - 4]
lea eax, [ebp - 0x10]
push eax
push ecx
push 4
push edx
mov dword [ebp - 0x10], esi
call edi
test eax, eax
jne 0x100b023f
call dword [sym.imp.KERNEL32.dll_GetLastError]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret