Function at 0x100b5af0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [0x102c32f0], 0
mov cl, byte [0x101f68bf]
movups xmm1, xmmword [0x10144250]
mov eax, dword [0x101f67c8]
mov dword [0x1054bac8], 0
jne 0x100b5c3d
cmp cl, 1
jne 0x100b5b51
mov dword [0x1054bac4], 1
cmp eax, 2
je 0x100b5b41
movaps xmm0, xmmword [0x10144260]
movups xmmword [0x1054bab0], xmm0
jmp 0x100b5b62
movaps xmm0, xmmword [0x10144370]
movups xmmword [0x1054bab0], xmm0
jmp 0x100b5b62
movups xmmword [0x1054bab0], xmm1
mov dword [0x1054bac4], 0
cmp byte [0x101f68c0], 1
mov dword [0x1054bae4], 0
jne 0x100b5b8d
mov dword [0x1054bae0], 1
cmp eax, 2
jne 0x100b5b97
movaps xmm0, xmmword [0x10144270]
jmp 0x100b5b9e
mov dword [0x1054bae0], 0
movaps xmm0, xmmword [0x10144290]
cmp dword [0x101f68b8], 2
movups xmmword [0x1054bacc], xmm0
jne 0x100b5bec
mov dword [0x1054bafc], 1
cmp eax, 2
jne 0x100b5bf6
mov dword [0x1054bb00], 0
cmp cl, 1
jne 0x100b5bdc
movaps xmm0, xmmword [0x101442d0]
movups xmmword [0x1054bae8], xmm0
jmp 0x100b5c07
movaps xmm0, xmmword [str.d__h__]
movups xmmword [0x1054bae8], xmm0
jmp 0x100b5c07
mov dword [0x1054bafc], 0
mov dword [0x1054bb00], 0
movups xmmword [0x1054bae8], xmm1
cmp byte [0x101f68c1], 1
jne 0x100b5d4b
mov dword [0x1054bb18], 1
mov dword [0x1054bb1c], 0
cmp eax, 2
jne 0x100b5d5f
movaps xmm0, xmmword [0x101442a0]
jmp 0x100b5d66
movups xmm2, xmmword [0x10144380]
cmp cl, 1
jne 0x100b5c71
mov dword [0x1054bac4], 1
cmp eax, 2
je 0x100b5c68
movaps xmm0, xmmword [0x10144260]
movups xmmword [0x1054bab0], xmm0
jmp 0x100b5c82
movups xmmword [0x1054bab0], xmm2
jmp 0x100b5c82
movups xmmword [0x1054bab0], xmm1
mov dword [0x1054bac4], 0
cmp byte [0x101f68c0], 1
mov dword [0x1054bae4], 0
jne 0x100b5cad
mov dword [0x1054bae0], 1
cmp eax, 2
jne 0x100b5cb7
movaps xmm0, xmmword [0x10144280]
jmp 0x100b5cbe
mov dword [0x1054bae0], 0
movaps xmm0, xmmword [0x10144290]
cmp dword [0x101f68b8], 2
movups xmmword [0x1054bacc], xmm0
jne 0x100b5d05
mov dword [0x1054bafc], 1
cmp eax, 2
jne 0x100b5d0f
mov dword [0x1054bb00], 0
cmp cl, 1
jne 0x100b5cfc
movaps xmm0, xmmword [0x101442e0]
movups xmmword [0x1054bae8], xmm0
jmp 0x100b5d20
movups xmmword [0x1054bae8], xmm2
jmp 0x100b5d20
mov dword [0x1054bafc], 0
mov dword [0x1054bb00], 0
movups xmmword [0x1054bae8], xmm1
cmp byte [0x101f68c1], 1
jne 0x100b5d4b
mov dword [0x1054bb18], 1
mov dword [0x1054bb1c], 0
cmp eax, 2
jne 0x100b5d5f
movaps xmm0, xmmword [0x101442b0]
jmp 0x100b5d66
mov dword [0x1054bb1c], 0
mov dword [0x1054bb18], 0
movaps xmm0, xmmword [0x101442c0]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 0xd
push 0x83503c
movups xmmword [0x1054bb04], xmm0
call esi
mov eax, 0x83503c
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov byte [eax + 0xc], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0xd
push 0x83503c
call esi
push 0x100b6070
push 0x83503c
push 0xe9
call fcn.100d5c50
push 0x100b61f0
push 0x8373a0
push 0xe9
call fcn.100d5c50
push 0x100b6570
push 0x8373c0
push 0xe9
call fcn.100d5c50
add esp, 0x24
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x83b879
call esi
mov eax, 0x83b879
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 6
push 0x83b879
call esi
push 0x100b66f0
push 0x83b879
push 0xe9
call fcn.100d5c50
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 7
push 0x8353d9
call esi
mov eax, 0x8353d9
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 7
push 0x8353d9
call esi
push 0x100b6a90
push 0x8353d9
push 0xe9
call fcn.100d5c50
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 7
push 0x833b26
call esi
mov eax, 0x833b26
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 7
push 0x833b26
call esi
push 0x100b6ba0
push 0x833b26
push 0xe9
call fcn.100d5c50
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x8380da
call esi
mov eax, 0x8380da
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 6
push 0x8380da
call esi
push 0x100b6de0
push 0x8380da
push 0xe9
call fcn.100d5c50
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 7
push 0x7dd2c6
call esi
mov eax, 0x7dd2c6
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 7
push 0x7dd2c6
call esi
push 0x100b7000
push 0x7dd2c6
push 0xe9
call fcn.100d5c50
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x837b4f
call esi
mov eax, 0x837b4f
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 6
push 0x837b4f
call esi
push 0x100b7100
push 0x837b4f
push 0xe9
call fcn.100d5c50
add esp, 0xc
pop esi
mov esp, ebp
pop ebp
ret