Function at 0x100b0d90
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [0x1032c498], 0
mov al, byte [0x1025e32f]
push esi
mov esi, dword [0x1025e238]
mov dword [0x105b4ce0], 0
jne 0x100b0f69
cmp al, 1
jne 0x100b0e0a
mov dword [0x105b4cdc], 1
cmp esi, 2
je 0x100b0de0
mov dword [0x105b4cc8], 0x75
mov dword [0x105b4ccc], 0x57
jmp 0x100b0e28
mov dword [0x105b4cc8], 0x68
mov dword [0x105b4ccc], 0xc5
mov dword [0x105b4cd0], 0x22
mov dword [0x105b4cd4], 0x22
jmp 0x100b0e3c
mov dword [0x105b4cc8], 0x38
mov dword [0x105b4ccc], 0x2c
mov dword [0x105b4cdc], 0
mov dword [0x105b4cd4], 0x16
mov dword [0x105b4cd0], 0x16
cmp byte [0x1025e330], 1
mov dword [0x105b4ce8], 0x73
mov dword [0x105b4cec], 0x16
mov dword [0x105b4cf0], 0x16
mov dword [0x105b4cfc], 0
jne 0x100b0e88
mov dword [0x105b4cf8], 1
cmp esi, 2
jne 0x100b0e92
mov dword [0x105b4ce4], 0x26
jmp 0x100b0e9c
mov dword [0x105b4cf8], 0
mov dword [0x105b4ce4], 0x38
cmp dword [0x1025e328], 2
jne 0x100b0ef0
cmp esi, 2
je 0x100b0eb6
mov dword [0x105b4d14], 1
jmp 0x100b0efa
push ecx
mov ecx, 2
push 1
cmp al, 1
jne 0x100b0ed8
push 0x16
push 0x16
push 0xd2
lea edx, [ecx + 0x50]
call fcn.100b0d40
add esp, 0x14
jmp 0x100b0f12
push 0x22
push 0x22
push 0xc5
mov edx, 0x64
call fcn.100b0d40
add esp, 0x14
jmp 0x100b0f12
mov dword [0x105b4d14], 0
movaps xmm0, xmmword [0x101a5a50]
mov dword [0x105b4d18], 0
movaps xmmword [0x105b4d00], xmm0
cmp byte [0x1025e331], 1
jne 0x100b1110
mov dword [0x105b4d20], 0x73
mov dword [0x105b4d24], 0x16
mov dword [0x105b4d28], 0x16
mov dword [0x105b4d30], 1
mov dword [0x105b4d34], 0
cmp esi, 2
jne 0x100b1142
mov dword [0x105b4d1c], 0x54
jmp 0x100b114c
cmp al, 1
jne 0x100b0fbc
mov dword [0x105b4cdc], 1
cmp esi, 2
je 0x100b0f92
mov dword [0x105b4cc8], 0x75
mov dword [0x105b4ccc], 0x57
jmp 0x100b0fda
mov dword [0x105b4cc8], 0x8c
mov dword [0x105b4ccc], 0xc5
mov dword [0x105b4cd0], 0x22
mov dword [0x105b4cd4], 0x22
jmp 0x100b0fee
mov dword [0x105b4cc8], 0x38
mov dword [0x105b4ccc], 0x2c
mov dword [0x105b4cdc], 0
mov dword [0x105b4cd4], 0x16
mov dword [0x105b4cd0], 0x16
cmp byte [0x1025e330], 1
mov dword [0x105b4ce8], 0x73
mov dword [0x105b4cec], 0x16
mov dword [0x105b4cf0], 0x16
mov dword [0x105b4cfc], 0
jne 0x100b103a
mov dword [0x105b4cf8], 1
cmp esi, 2
jne 0x100b1044
mov dword [0x105b4ce4], 0x37
jmp 0x100b104e
mov dword [0x105b4cf8], 0
mov dword [0x105b4ce4], 0x38
cmp dword [0x1025e328], 2
jne 0x100b10a2
cmp esi, 2
je 0x100b1068
mov dword [0x105b4d14], 1
jmp 0x100b10ac
push ecx
mov ecx, 2
push 1
cmp al, 1
jne 0x100b108a
push 0x16
push 0x16
push 0xd2
lea edx, [ecx + 0x72]
call fcn.100b0d40
add esp, 0x14
jmp 0x100b10c4
push 0x22
push 0x22
push 0xc5
mov edx, 0x8c
call fcn.100b0d40
add esp, 0x14
jmp 0x100b10c4
mov dword [0x105b4d14], 0
movaps xmm0, xmmword [0x101a5a50]
mov dword [0x105b4d18], 0
movaps xmmword [0x105b4d00], xmm0
cmp byte [0x1025e331], 1
jne 0x100b1110
mov dword [0x105b4d20], 0x73
mov dword [0x105b4d24], 0x16
mov dword [0x105b4d28], 0x16
mov dword [0x105b4d30], 1
mov dword [0x105b4d34], 0
cmp esi, 2
jne 0x100b1142
mov dword [0x105b4d1c], 0x74
jmp 0x100b114c
mov dword [0x105b4d34], 0
mov dword [0x105b4d30], 0
mov dword [0x105b4d28], 0x16
mov dword [0x105b4d24], 0x16
mov dword [0x105b4d20], 0x73
mov dword [0x105b4d1c], 0x75
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 0xd
push 0x83503c
call esi
mov eax, 0x83503c
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov byte [eax + 0xc], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0xd
push 0x83503c
call esi
push 0x100b1440
push 0x83503c
push 0xe9
call fcn.100d0420
push 0x100b15c0
push 0x8373a0
push 0xe9
call fcn.100d0420
push 0x100b1950
push 0x8373c0
push 0xe9
call fcn.100d0420
add esp, 0x24
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x83b879
call esi
mov eax, 0x83b879
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 6
push 0x83b879
call esi
push 0x100b1aa0
push 0x83b879
push 0xe9
call fcn.100d0420
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 7
push 0x8353d9
call esi
mov eax, 0x8353d9
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 7
push 0x8353d9
call esi
push 0x100b1e40
push 0x8353d9
push 0xe9
call fcn.100d0420
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 7
push 0x833b26
call esi
mov ecx, 0x90909090
mov eax, 0x833b26
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 7
push 0x833b26
call esi
push 0x100b1f60
push 0x833b26
push 0xe9
call fcn.100d0420
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x8380da
call esi
mov eax, 0x8380da
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 6
push 0x8380da
call esi
push 0x100b2170
push 0x8380da
push 0xe9
call fcn.100d0420
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 7
push 0x7dd2c6
call esi
mov eax, 0x7dd2c6
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 7
push 0x7dd2c6
call esi
push 0x100b2390
push 0x7dd2c6
push 0xe9
call fcn.100d0420
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x837b4f
call esi
mov eax, 0x837b4f
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 6
push 0x837b4f
call esi
push 0x100b2460
push 0x837b4f
push 0xe9
call fcn.100d0420
add esp, 0xc
pop esi
mov esp, ebp
pop ebp
ret