Function at 0x1000c9f0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
mov al, byte [0x100b01e0]
sub esp, 0xc
mov byte [0x100b01e1], al
test al, al
je 0x1000ce35
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add eax, 0x417c8
push ecx
push 0x40
push 4
push eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 4
call edi
mov eax, dword [ebp - 0xc]
mov esi, 0x1006d960
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
push 0x40
add eax, 0x4194a
mov dword [ebp - 8], 4
push 4
push eax
mov dword [ebp - 0xc], eax
call edi
mov eax, dword [ebp - 0xc]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
push 0x40
add eax, 0x419eb
mov dword [ebp - 8], 4
push 4
push eax
mov dword [ebp - 0xc], eax
call edi
mov eax, dword [ebp - 0xc]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
push 0x40
add eax, 0x41b4f
mov dword [ebp - 8], 4
push 4
push eax
mov dword [ebp - 0xc], eax
call edi
mov eax, dword [ebp - 0xc]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
push 0x40
add eax, 0x41c65
mov dword [ebp - 8], 4
push 4
push eax
mov dword [ebp - 0xc], eax
call edi
mov eax, dword [ebp - 0xc]
sub esi, eax
sub esi, 4
mov dword [eax], esi
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
push 0x40
add eax, 0x2cd04
mov dword [ebp - 8], 4
push 4
push eax
mov dword [ebp - 0xc], eax
call edi
mov eax, dword [ebp - 0xc]
mov esi, 0x1006d9a0
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
push 0x40
add eax, 0x2da5d
mov dword [ebp - 8], 4
push 4
push eax
mov dword [ebp - 0xc], eax
call edi
mov eax, dword [ebp - 0xc]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
push 0x40
add eax, 0x3957d
mov dword [ebp - 8], 4
push 4
push eax
mov dword [ebp - 0xc], eax
call edi
mov ecx, esi
mov eax, dword [ebp - 0xc]
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
push 0x40
add eax, 0x417d3
mov dword [ebp - 8], 4
push 4
push eax
mov dword [ebp - 0xc], eax
call edi
mov eax, dword [ebp - 0xc]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
push 0x40
add eax, 0x41956
mov dword [ebp - 8], 4
push 4
push eax
mov dword [ebp - 0xc], eax
call edi
mov eax, dword [ebp - 0xc]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
push 0x40
add eax, 0x419f7
mov dword [ebp - 8], 4
push 4
push eax
mov dword [ebp - 0xc], eax
call edi
mov eax, dword [ebp - 0xc]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
add eax, 0x41b5a
mov dword [ebp - 8], 4
push 0x40
mov dword [ebp - 0xc], eax
push 4
push eax
call edi
mov eax, dword [ebp - 0xc]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
push 0x40
add eax, 0x41c71
mov dword [ebp - 8], 4
push 4
push eax
mov dword [ebp - 0xc], eax
call edi
mov eax, dword [ebp - 0xc]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
push 0x40
add eax, 0x41f52
mov dword [ebp - 8], 4
push 4
push eax
mov dword [ebp - 0xc], eax
call edi
mov eax, dword [ebp - 0xc]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
push 0x40
add eax, 0x8d75b
mov dword [ebp - 8], 4
push 4
push eax
mov dword [ebp - 0xc], eax
call edi
mov eax, dword [ebp - 0xc]
sub esi, eax
sub esi, 4
mov dword [eax], esi
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
add eax, 0x41ade
mov dword [ebp - 8], 4
mov dword [ebp - 0xc], eax
push ecx
push 0x40
push 4
push eax
call edi
mov eax, dword [ebp - 0xc]
mov ecx, 0x1006d9f0
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
push 0x40
add eax, 0x41ae9
mov dword [ebp - 8], 4
push 4
push eax
mov dword [ebp - 0xc], eax
call edi
mov eax, dword [ebp - 0xc]
mov ecx, 0x1006da20
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 4]
push ecx
push 0x40
add eax, 0x2ceb7
mov dword [ebp - 8], 4
push 4
push eax
mov dword [ebp - 0xc], eax
call edi
mov eax, dword [ebp - 0xc]
mov ecx, 0x1006da60
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
call edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret