Function at 0x100aa1f0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x1013e00c]
xor eax, ebp
mov dword [ebp - 4], eax
mov cl, byte [0x101eb19f]
mov eax, dword [0x101eb0a8]
mov dword [0x10541580], 0
cmp cl, 1
jne 0x100aa269
mov dword [0x1054157c], 1
cmp eax, 2
je 0x100aa23f
mov dword [0x10541568], 0x75
mov dword [0x1054156c], 0x57
jmp 0x100aa287
mov dword [0x10541568], 0x8c
mov dword [0x1054156c], 0xc5
mov dword [0x10541570], 0x22
mov dword [0x10541574], 0x22
jmp 0x100aa29b
mov dword [0x10541568], 0x38
mov dword [0x1054156c], 0x2c
mov dword [0x1054157c], 0
mov dword [0x10541574], 0x16
mov dword [0x10541570], 0x16
cmp byte [0x101eb1a0], 1
mov dword [0x10541588], 0x73
mov dword [0x1054158c], 0x16
mov dword [0x10541590], 0x16
mov dword [0x1054159c], 0
jne 0x100aa2e7
mov dword [0x10541598], 1
cmp eax, 2
jne 0x100aa2f1
mov dword [0x10541584], 0x37
jmp 0x100aa2fb
mov dword [0x10541598], 0
mov dword [0x10541584], 0x38
cmp dword [0x101eb198], 2
jne 0x100aa334
mov dword [0x105415b4], 1
cmp eax, 2
jne 0x100aa33e
mov dword [0x105415b8], 0
cmp cl, 1
jne 0x100aa32b
movaps xmm0, xmmword [0x101361e0]
jmp 0x100aa34f
movaps xmm0, xmmword [0x10136250]
jmp 0x100aa34f
mov dword [0x105415b4], 0
movaps xmm0, xmmword [0x101361c0]
mov dword [0x105415b8], 0
cmp byte [0x101eb1a1], 1
movaps xmmword [0x105415a0], xmm0
mov dword [0x105415c0], 0x73
mov dword [0x105415c4], 0x16
mov dword [0x105415c8], 0x16
mov dword [0x105415d4], 0
jne 0x100aa3a2
mov dword [0x105415d0], 1
cmp eax, 2
jne 0x100aa3ac
mov dword [0x105415bc], 0x74
jmp 0x100aa3b6
mov dword [0x105415d0], 0
mov dword [0x105415bc], 0x75
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 0xd
push 0x83503c
call esi
mov eax, 0x83503c
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov byte [eax + 0xc], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xd
push 0x83503c
call esi
push 0x100aa6d0
push 0x83503c
push 0xe9
call fcn.100c88d0
push 0x100aa850
push 0x8373a0
push 0xe9
call fcn.100c88d0
push 0x100aabf0
push 0x8373c0
push 0xe9
call fcn.100c88d0
add esp, 0x24
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x83b879
call esi
mov eax, 0x83b879
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x83b879
call esi
push 0x100aad40
push 0x83b879
push 0xe9
call fcn.100c88d0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x8353d9
call esi
mov eax, 0x8353d9
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push 0x8353d9
call esi
push 0x100ab110
push 0x8353d9
push 0xe9
call fcn.100c88d0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x833b26
call esi
mov eax, 0x833b26
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push 0x833b26
call esi
push 0x100ab230
push 0x833b26
push 0xe9
call fcn.100c88d0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x8380da
call esi
mov eax, 0x8380da
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x8380da
call esi
push 0x100ab450
push 0x8380da
push 0xe9
call fcn.100c88d0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x7dd2c6
call esi
mov eax, 0x7dd2c6
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push 0x7dd2c6
call esi
push 0x100ab640
push 0x7dd2c6
push 0xe9
call fcn.100c88d0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x837b4f
call esi
mov eax, 0x837b4f
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x837b4f
call esi
push 0x100ab710
push 0x837b4f
push 0xe9
call fcn.100c88d0
add esp, 0xc
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d7712
mov esp, ebp
pop ebp
ret