Function at 0x10011b30
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100a900c]
xor eax, ebp
mov dword [ebp - 4], eax
mov al, byte [0x100b00e8]
mov byte [0x100b00e9], al
test al, al
je 0x10011ec8
mov ecx, dword [0x100cab48]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 0xd
lea eax, [ecx + 0x8fa40]
add ecx, 0x8f9b5
mov dword [0x100b9a6c], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 0xd
push ecx
mov dword [ebp - 0x10], ecx
call esi
mov eax, dword [ebp - 0x10]
mov ecx, 0xe857
mov word [eax], cx
mov ecx, 0x100708d0
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
mov eax, dword [ebp - 0x10]
mov dword [eax + 9], 0x10c48328
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x90269
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call esi
mov eax, dword [ebp - 0x10]
mov ecx, 0x10070a40
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call esi
cmp byte [0x100b00bc], 0
je 0x10011ec7
cmp byte [0x100b02b8], 0
je 0x10011ec7
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push edi
push ecx
push 0x40
add eax, 0xba5a0
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call esi
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x10070c00
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call esi
mov ecx, dword [0x100cab48]
mov dword [ebp - 0xc], 0x2c2
mov eax, dword [ecx + 0xba58c]
mov dword [eax + 4], 0xffffb1e0
mov eax, dword [ecx + 0xba5e4]
lea ecx, [ebp - 8]
push ecx
push 0x40
push 0x2c2
mov eax, dword [eax + 8]
mov dword [eax + 4], 0xfffff060
mov eax, dword [0x100cab48]
add eax, 0x8fd2c
push eax
mov dword [ebp - 0x10], eax
call esi
mov ecx, dword [0x100b003c]
mov edx, 0x8f0f
mov eax, dword [ebp - 0x10]
mov edi, 0xe1d9
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
mov eax, dword [0x100b003c]
mov dword [eax], 0x9c047983
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov word [eax], dx
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 2
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x8fbf4
mov dword [ecx], eax
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov byte [eax], 0xe9
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
inc ecx
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x8fd2c
mov dword [ecx], eax
add dword [0x100b003c], 4
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x1ac], 0xe9
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 0x1b1
mov dword [eax + 0x1ad], ecx
mov eax, dword [ebp - 0x10]
mov word [eax + 0x1b1], di
mov eax, dword [0x100b003c]
mov dword [eax], 0xda0440db
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov dword [eax], 0xe93c244c
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 4
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x8fed9
mov dword [ecx], eax
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x10]
add ecx, 4
mov dword [0x100b003c], ecx
sub ecx, eax
sub ecx, 0x285
mov dword [eax + 0x281], ecx
mov eax, dword [0x100b003c]
mov dword [eax], 0x9c047983
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov word [eax], dx
mov edx, 0x10070bb0
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 2
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x8fbf4
mov dword [ecx], eax
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov byte [eax], 0xe9
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
inc ecx
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x8ffad
mov dword [ecx], eax
add dword [0x100b003c], 4
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x2bb], 0xe9
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 0x2c0
mov dword [eax + 0x2bc], ecx
mov eax, dword [ebp - 0x10]
mov word [eax + 0x2c0], di
mov eax, dword [0x100b003c]
mov dword [eax], 0xda0441db
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov dword [eax], 0xe93c244c
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 4
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x8ffe8
mov dword [ecx], eax
mov ecx, edx
mov eax, dword [ebp - 0x10]
sub ecx, eax
add dword [0x100b003c], 4
sub ecx, 0x78
mov dword [eax + 0x74], ecx
mov ecx, edx
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 0x95
mov dword [eax + 0x91], ecx
mov ecx, edx
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 0x104
mov dword [eax + 0x100], ecx
mov eax, dword [ebp - 0x10]
sub edx, eax
sub edx, 0x178
mov dword [eax + 0x174], edx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call esi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007491a
mov esp, ebp
pop ebp
ret