Function at 0x100108e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100a900c]
xor eax, ebp
mov dword [ebp - 4], eax
mov al, byte [0x100b017c]
mov byte [0x100b017d], al
test al, al
je 0x10010d23
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add eax, 0x1280a
push esi
push edi
push ecx
push 0x40
push 4
push eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 4
call ebx
mov eax, dword [ebp - 0x10]
mov ecx, 0x10071ae0
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x126a7
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov ecx, 0x10071b20
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x70a08
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov edi, 0x10071b70
mov ecx, edi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x70aab
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov esi, 0x10071b60
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x71488
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov ecx, edi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x7152b
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x72068
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov ecx, edi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x7210b
mov dword [ebp - 0xc], 4
push 4
mov dword [ebp - 0x10], eax
push eax
call ebx
mov eax, dword [ebp - 0x10]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x728d8
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
sub edi, eax
sub edi, 4
mov dword [eax], edi
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x7297b
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
sub esi, eax
sub esi, 4
mov dword [eax], esi
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov ecx, dword [0x100cab48]
mov dword [ebp - 0xc], 4
lea eax, [ecx + 0x1e42c0]
add ecx, 0x70a3f
mov dword [0x100b9b1c], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push ecx
mov dword [ebp - 0x10], ecx
call ebx
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x10071fb0
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x70ac5
mov dword [ebp - 0xc], 4
push 4
mov dword [ebp - 0x10], eax
push eax
call ebx
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x10071fe0
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x714bf
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x10072010
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x71545
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x10072040
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x7209f
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x10072070
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x72125
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x100720a0
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x7290f
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x100720d0
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x72995
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x10072100
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007491a
mov esp, ebp
pop ebp
ret