Function at 0x1000b540
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [0x100a9114]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [0x100aa24c]
lea ecx, [ebp - 0xc]
add ebx, 0x6526a2
push esi
push edi
lea eax, [ebx + 1]
push eax
call fcn.100030c0
mov esi, dword [ebp - 0xc]
lea eax, [ebp - 0x14]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
mov ecx, dword [esi]
mov dword [ebp - 8], ecx
test eax, eax
je 0x1000b5ae
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0xc]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
push dword [ebp - 0x1c]
call edi
mov ecx, dword [ebp - 8]
push 1
push ecx
mov eax, esp
add esi, 4
push ecx
add esi, ecx
mov ecx, esp
push ebx
mov dword [eax], 0x1000b9b0
call fcn.100030c0
lea eax, [ebp - 8]
push eax
call fcn.1000b9c0
mov ebx, dword [0x100aa24c]
lea ecx, [ebp - 8]
add ebx, 0x65104d
mov dword [0x100aa2e4], esi
add esp, 0x10
lea eax, [ebx + 1]
push eax
call fcn.100030c0
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
mov ecx, dword [esi]
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x1000b62e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
mov ecx, dword [ebp - 0xc]
push 1
push ecx
mov eax, esp
add esi, 4
push ecx
add esi, ecx
mov ecx, esp
push ebx
mov dword [eax], 0x1000b960
call fcn.100030c0
lea eax, [ebp - 0xc]
push eax
call fcn.1000b9c0
mov ebx, dword [0x100aa24c]
lea ecx, [ebp - 8]
add ebx, 0x64d227
mov dword [0x100aa2e8], esi
add esp, 0x10
lea eax, [ebx + 1]
push eax
call fcn.100030c0
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
mov ecx, dword [esi]
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x1000b6ae
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
mov ecx, dword [ebp - 0xc]
push 1
push ecx
mov eax, esp
add esi, 4
push ecx
add esi, ecx
mov ecx, esp
push ebx
mov dword [eax], 0x1000b990
call fcn.100030c0
lea eax, [ebp - 0xc]
push eax
call fcn.1000b9c0
mov ebx, dword [0x100aa24c]
lea ecx, [ebp - 8]
add ebx, 0x650770
mov dword [0x100aa2ec], esi
add esp, 0x10
lea eax, [ebx + 1]
push eax
call fcn.100030c0
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
mov ecx, dword [esi]
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x1000b72e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
mov ecx, dword [ebp - 0xc]
push 1
push ecx
mov eax, esp
add esi, 4
push ecx
add esi, ecx
mov ecx, esp
push ebx
mov dword [eax], 0x1000b980
call fcn.100030c0
lea eax, [ebp - 0xc]
push eax
call fcn.1000b9c0
mov ebx, dword [0x100aa24c]
lea ecx, [ebp - 8]
add ebx, 0x64d411
mov dword [0x100aa2f0], esi
add esp, 0x10
lea eax, [ebx + 1]
push eax
call fcn.100030c0
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
mov ecx, dword [esi]
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x1000b7ae
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
mov ecx, dword [ebp - 0xc]
push 1
push ecx
mov eax, esp
add esi, 4
push ecx
add esi, ecx
mov ecx, esp
push ebx
mov dword [eax], 0x1000b9a0
call fcn.100030c0
lea eax, [ebp - 0xc]
push eax
call fcn.1000b9c0
mov edi, dword [0x100aa24c]
add esp, 0x10
add edi, 0x64d40a
mov dword [0x100aa2f4], esi
push 1
push 4
push ecx
lea eax, [edi + 1]
mov ecx, esp
push eax
call fcn.100030c0
lea eax, [ebp - 8]
push eax
call fcn.1000bd50
add esp, 0x10
mov esi, dword [eax]
push 1
push ecx
mov eax, esp
push ecx
mov ecx, esp
push edi
mov dword [eax], 0x1000b970
call fcn.100030c0
lea eax, [ebp - 0xc]
push eax
call fcn.1000b9c0
mov edi, dword [0x100aa24c]
add esp, 0x10
add edi, 0x65264c
mov dword [0x100aa2f8], esi
push 1
push 4
push ecx
lea eax, [edi + 1]
mov ecx, esp
push eax
call fcn.100030c0
lea eax, [ebp - 8]
push eax
call fcn.1000bd50
add esp, 0x10
mov esi, dword [eax]
push 1
push ecx
mov eax, esp
push ecx
mov ecx, esp
push edi
mov dword [eax], 0x1000b950
call fcn.100030c0
lea eax, [ebp - 0xc]
push eax
call fcn.1000b9c0
mov edi, dword [0x100aa24c]
add esp, 0x10
add edi, 0xb9d499
mov dword [0x100aa2fc], esi
push 1
push 4
push ecx
lea eax, [edi + 1]
mov ecx, esp
push eax
call fcn.100030c0
lea eax, [ebp - 8]
push eax
call fcn.1000bd50
mov esi, dword [eax]
add esp, 0x10
push 1
push ecx
mov eax, esp
push ecx
mov ecx, esp
push edi
mov dword [eax], 0x1000b930
call fcn.100030c0
lea eax, [ebp - 0xc]
push eax
call fcn.1000b9c0
mov edi, dword [0x100aa24c]
add esp, 0x10
add edi, 0xb9d0fa
mov dword [0x100aa300], esi
push 1
push 4
push ecx
lea eax, [edi + 1]
mov ecx, esp
push eax
call fcn.100030c0
lea eax, [ebp - 8]
push eax
call fcn.1000bd50
add esp, 0x10
mov esi, dword [eax]
push 1
push ecx
mov eax, esp
push ecx
mov ecx, esp
push edi
mov dword [eax], 0x1000b940
call fcn.100030c0
lea eax, [ebp - 0xc]
push eax
call fcn.1000b9c0
mov ecx, dword [ebp - 4]
add esp, 0x10
mov dword [0x100aa304], esi
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.10040e3d
mov esp, ebp
pop ebp
ret