Function at 0x1000e2a0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ecx
cmp byte [0x100b3acc], 0
jne 0x1000e2c6
cmp byte [0x100b3b1c], 0
jne 0x1000e2c6
cmp byte [0x100b3af4], 0
jne 0x1000e2c6
mov ecx, 0x100b3fe0
call fcn.10001660
cmp byte [0x100b40fc], 0
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push esi
push edi
je 0x1000e312
mov esi, dword [0x100b40e8]
lea eax, [esp + 0xc]
mov edi, dword [0x100b40dc]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b40ec
push edi
call fcn.100568a0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b40fc], 0
cmp byte [0x100b4048], 0
je 0x1000e355
mov esi, dword [0x100b4034]
lea eax, [esp + 0xc]
mov edi, dword [0x100b4028]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b4038
push edi
call fcn.100568a0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b4048], 0
cmp byte [0x100b406c], 0
je 0x1000e398
mov esi, dword [0x100b4058]
lea eax, [esp + 0xc]
mov edi, dword [0x100b404c]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b405c
push edi
call fcn.100568a0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b406c], 0
cmp byte [0x100b3acc], 0
jne 0x1000e3bd
cmp byte [0x100b3b1c], 0
jne 0x1000e3bd
cmp byte [0x100b3af4], 0
jne 0x1000e3bd
mov ecx, 0x100b3fe0
call fcn.10001660
cmp byte [0x100b4144], 0
je 0x1000e400
mov esi, dword [0x100b4130]
lea eax, [esp + 0xc]
mov edi, dword [0x100b4124]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b4134
push edi
call fcn.100568a0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b4144], 0
cmp byte [0x100b4120], 0
je 0x1000e443
mov esi, dword [0x100b410c]
lea eax, [esp + 0xc]
mov edi, dword [0x100b4100]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b4110
push edi
call fcn.100568a0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b4120], 0
cmp byte [0x100b40d8], 0
je 0x1000e486
mov esi, dword [0x100b40c4]
lea eax, [esp + 0xc]
mov edi, dword [0x100b40b8]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b40c8
push edi
call fcn.100568a0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b40d8], 0
cmp byte [0x100b3acc], 0
jne 0x1000e4ab
cmp byte [0x100b3b1c], 0
jne 0x1000e4ab
cmp byte [0x100b3af4], 0
jne 0x1000e4ab
mov ecx, 0x100b3fe0
call fcn.10001660
cmp byte [0x100b40b4], 0
je 0x1000e4ee
mov esi, dword [0x100b40a0]
lea eax, [esp + 0xc]
mov edi, dword [0x100b4094]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b40a4
push edi
call fcn.100568a0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b40b4], 0
cmp byte [0x100b4090], 0
je 0x1000e531
mov esi, dword [0x100b407c]
lea eax, [esp + 0xc]
mov edi, dword [0x100b4070]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b4080
push edi
call fcn.100568a0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b4090], 0
cmp byte [0x100b3fb8], 0
je 0x1000e574
mov esi, dword [0x100b3fa4]
lea eax, [esp + 0xc]
mov edi, dword [0x100b3f98]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b3fa8
push edi
call fcn.100568a0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b3fb8], 0
mov ecx, 0x100b3fbc
call fcn.10001660
mov ecx, 0x100b3fe0
call fcn.10001660
call fcn.10010100
call fcn.1000e1b0
mov ecx, dword [0x100b6b98]
test ecx, ecx
je 0x1000e5a3
mov al, byte [0x100b3a17]
mov byte [ecx], al
mov ecx, dword [0x100b6b94]
test ecx, ecx
je 0x1000e5b4
mov al, byte [0x100b3a16]
mov byte [ecx], al
mov eax, dword [0x100b69d8]
test eax, eax
je 0x1000e5d8
mov eax, dword [eax]
test eax, eax
je 0x1000e5d8
mov eax, dword [eax + 0x68]
test eax, eax
je 0x1000e5d8
mov eax, dword [eax + 0x54]
test eax, eax
je 0x1000e5d8
mov dword [eax + 0x28], 0x3f800000
cmp byte [0x100b41d4], 0
je 0x1000e61b
mov esi, dword [0x100b41c0]
lea eax, [esp + 0xc]
mov edi, dword [0x100b41b4]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b41c4
push edi
call fcn.100568a0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b41d4], 0
cmp byte [0x100b4168], 0
je 0x1000e65e
mov esi, dword [0x100b4154]
lea eax, [esp + 0xc]
mov edi, dword [0x100b4148]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b4158
push edi
call fcn.100568a0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b4168], 0
call fcn.10010310
call fcn.1000e1b0
mov ecx, 0x100b416c
call fcn.10001660
mov eax, dword [0x100b6a98]
test eax, eax
je 0x1000e6af
cmp dword [0x100b6a44], 0
je 0x1000e6af
lea ecx, [esp + 0xc]
push ecx
push 0x40
push 5
push eax
call ebx
mov ecx, dword [0x100b6a98]
mov eax, dword [0x100b6a44]
mov byte [ecx], 0xe9
mov dword [ecx + 1], eax
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push 5
push ecx
call ebx
pop edi
pop esi
pop ebx
pop ecx
ret