Function at 0x100140f0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
call fcn.10012760
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
test al, al
je 0x1001423a
push 0x1000ff90
push 0x4bd382
call fcn.10014630
add esp, 8
mov byte [ebp - 1], 0xe8
lea eax, [ebp - 8]
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x4bbedb
call edi
push eax
call esi
mov eax, 0x1000c270
sub eax, 0x4bbee0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0x10]
push eax
push 0x4bbedc
call edi
push eax
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x4bd38a
call edi
push eax
call esi
mov eax, 0x1000e9a0
sub eax, 0x4bd38f
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x4bd38b
call edi
push eax
call esi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x4bd38f
call ebx
mov eax, 0x4bd38f
mov byte [eax], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 1
push 0x4bd38f
call ebx
lea eax, [ebp - 0x10]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x523062
call edi
push eax
call esi
mov eax, 0x1000b3e0
sub eax, 0x523067
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x523063
call edi
push eax
call esi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x523067
call ebx
mov eax, 0x523067
mov dword [eax], 0x90909090
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 4
push 0x523067
call ebx
push 0x1000e960
push 0x51d1f6
call fcn.10014630
add esp, 8
jmp 0x1001423f
call fcn.10012520
lea eax, [ebp - 0x10]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x527c13
call edi
push eax
call esi
mov eax, 0x1000cf40
sub eax, 0x527c18
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x527c14
call edi
push eax
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x51e605
call edi
push eax
call esi
mov eax, 0x1000cf90
sub eax, 0x51e60a
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x51e606
call edi
push eax
call esi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 2
push 0x51e60a
call ebx
mov eax, 0x51e60a
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 2
push 0x51e60a
call ebx
lea eax, [ebp - 0x10]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x603d4b
call edi
push eax
call esi
mov eax, 0x1000e300
sub eax, 0x603d50
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x603d4c
call edi
push eax
call esi
call fcn.1000b580
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x43aff0
call ebx
mov byte [0x43aff0], 0xe9
mov eax, 0x1000aa50
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add eax, 0xffbc500b
mov dword [0x43aff1], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x43aff0
call ebx
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x43cf4c
call ebx
mov byte [0x43cf4c], 0xe9
mov eax, 0x1000aa20
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add eax, 0xffbc30af
mov dword [0x43cf4d], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x43cf4c
call ebx
push dword [ebp + 8]
call fcn.10014440
add esp, 4
lea eax, [ebp - 0x14]
push eax
push 0x40
push 0xb
push 0x42fc2c
call ebx
mov eax, 0x42fc2c
mov ecx, 0x90909090
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov word [eax + 8], cx
mov byte [eax + 0xa], cl
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 0xb
push 0x42fc2c
call ebx
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x42fc83
call ebx
mov byte [0x42fc83], 0xe9
mov eax, 0x10010f50
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add eax, 0xffbd0378
mov dword [0x42fc84], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x42fc83
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x42fc88
call ebx
mov eax, 0x42fc88
mov byte [eax], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 1
push 0x42fc88
call ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret