Function at 0x100b05d0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x874108
mov ecx, 0x101f48b8
mov dword [ebp - 8], eax
push edi
mov dword [ebp - 4], ecx
nop
mov edi, dword [ecx - 4]
lea ebx, [eax - 0xd]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0xc]
mov dword [ebx], edi
push eax
push dword [ebp - 0xc]
push 4
push ebx
call esi
mov edi, dword [ebp - 4]
lea eax, [ebp - 0x10]
mov ebx, dword [ebp - 8]
push eax
push 0x40
mov edi, dword [edi]
push 4
push ebx
call esi
lea eax, [ebp - 0x10]
mov dword [ebx], edi
push eax
push dword [ebp - 0x10]
push 4
push ebx
call esi
mov eax, dword [ebp - 4]
add ebx, 0xc3
mov edi, dword [eax + 0x34]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0x14]
mov dword [ebx], edi
push eax
push dword [ebp - 0x14]
push 4
push ebx
call esi
mov eax, dword [ebp - 4]
mov ebx, dword [ebp - 8]
add ebx, 0xd0
mov edi, dword [eax + 0x38]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0x18]
mov dword [ebx], edi
push eax
push dword [ebp - 0x18]
push 4
push ebx
call esi
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 8]
add ecx, 8
add eax, 0x1a
mov dword [ebp - 4], ecx
mov dword [ebp - 8], eax
cmp ecx, 0x101f48f0
jl 0x100b05f0
mov eax, 0x877c18
mov ecx, 0x101f4928
mov dword [ebp - 8], eax
mov dword [ebp - 4], ecx
nop dword [eax + eax]
mov edi, dword [ecx - 4]
lea ebx, [eax - 0xd]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0x18]
mov dword [ebx], edi
push eax
push dword [ebp - 0x18]
push 4
push ebx
call esi
mov edi, dword [ebp - 4]
lea eax, [ebp - 0x14]
mov ebx, dword [ebp - 8]
push eax
push 0x40
mov edi, dword [edi]
push 4
push ebx
call esi
lea eax, [ebp - 0x14]
mov dword [ebx], edi
push eax
push dword [ebp - 0x14]
push 4
push ebx
call esi
mov eax, dword [ebp - 4]
add ebx, 0xa9
mov edi, dword [eax + 0x2c]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0x10]
mov dword [ebx], edi
push eax
push dword [ebp - 0x10]
push 4
push ebx
call esi
mov eax, dword [ebp - 4]
mov ebx, dword [ebp - 8]
add ebx, 0xb6
mov edi, dword [eax + 0x30]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0xc]
mov dword [ebx], edi
push eax
push dword [ebp - 0xc]
push 4
push ebx
call esi
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 8]
add ecx, 8
add eax, 0x1a
mov dword [ebp - 4], ecx
mov dword [ebp - 8], eax
cmp ecx, 0x101f4958
jl 0x100b06b0
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x30
push 0xd457c8
call esi
push 0x30
push 0x101f4984
push 0xd457c8
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x30
push 0xd457c8
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x30
push 0xd457f8
call esi
push 0x30
push 0x101f49b4
push 0xd457f8
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x30
push 0xd457f8
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x38
push 0xd4dcf0
call esi
push 0x38
push 0x101f49e4
push 0xd4dcf0
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x38
push 0xd4dcf0
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x38
push 0xd4dd28
call esi
push 0x38
push 0x101f4a1c
push 0xd4dd28
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x38
push 0xd4dd28
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x14
push 0xd48eac
call esi
mov eax, dword [0x101f4a54]
mov ecx, 0xd48eac
mov dword [ecx], eax
mov eax, dword [0x101f4a58]
mov dword [ecx + 4], eax
mov eax, dword [0x101f4a5c]
mov dword [ecx + 8], eax
mov eax, dword [0x101f4a60]
mov dword [ecx + 0xc], eax
mov eax, dword [0x101f4a64]
mov dword [ecx + 0x10], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x14
push ecx
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x14
push 0xd48ec0
call esi
mov eax, dword [0x101f4a68]
mov ecx, 0xd48ec0
mov dword [ecx], eax
mov eax, dword [0x101f4a6c]
mov dword [ecx + 4], eax
mov eax, dword [0x101f4a70]
mov dword [ecx + 8], eax
mov eax, dword [0x101f4a74]
mov dword [ecx + 0xc], eax
mov eax, dword [0x101f4a78]
mov dword [ecx + 0x10], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x14
push ecx
call esi
mov edi, dword [0x101f4898]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x7e4bb8
call esi
lea eax, [ebp - 0x18]
mov dword [0x7e4bb8], edi
push eax
push dword [ebp - 0x18]
push 4
push 0x7e4bb8
call esi
mov edi, dword [0x101f4898]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x8ff543
call esi
lea eax, [ebp - 0x18]
mov dword [0x8ff543], edi
push eax
push dword [ebp - 0x18]
push 4
push 0x8ff543
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret