Function at 0x10001140
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x1000c040]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1000c624]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x1000c648]
cmp eax, dword [ecx + 4]
jle 0x100011a3
push 0x1000c648
call fcn.10007175
add esp, 4
cmp dword [0x1000c648], 0xffffffff
jne 0x100011a3
push 0x10008150
mov dword [0x1000c64c], 0x10009370
call fcn.100074de
push 0x1000c648
call fcn.10007124
add esp, 8
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x547605
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x100011de
lea eax, [ebp - 8]
mov dword [0x547605], 0x320
push eax
push dword [ebp - 8]
push 4
push 0x547605
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x54760f
call esi
test eax, eax
je 0x10001212
lea eax, [ebp - 8]
mov dword [0x54760f], 0x258
push eax
push dword [ebp - 8]
push 4
push 0x54760f
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547619
call esi
test eax, eax
je 0x10001246
lea eax, [ebp - 8]
mov dword [0x547619], 0x20
push eax
push dword [ebp - 8]
push 4
push 0x547619
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547623
call esi
test eax, eax
je 0x1000127a
lea eax, [ebp - 8]
mov dword [0x547623], 0x400
push eax
push dword [ebp - 8]
push 4
push 0x547623
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x54762d
call esi
test eax, eax
je 0x100012ae
lea eax, [ebp - 8]
mov dword [0x54762d], 0x300
push eax
push dword [ebp - 8]
push 4
push 0x54762d
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547637
call esi
test eax, eax
je 0x100012e2
lea eax, [ebp - 8]
mov dword [0x547637], 0x20
push eax
push dword [ebp - 8]
push 4
push 0x547637
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547641
call esi
test eax, eax
je 0x10001316
lea eax, [ebp - 8]
mov dword [0x547641], 0x500
push eax
push dword [ebp - 8]
push 4
push 0x547641
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x54764b
call esi
test eax, eax
je 0x1000134a
lea eax, [ebp - 8]
mov dword [0x54764b], 0x2d0
push eax
push dword [ebp - 8]
push 4
push 0x54764b
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547655
call esi
test eax, eax
je 0x1000137e
lea eax, [ebp - 8]
mov dword [0x547655], 0x20
push eax
push dword [ebp - 8]
push 4
push 0x547655
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x54765f
call esi
test eax, eax
je 0x100013b2
lea eax, [ebp - 8]
mov dword [0x54765f], 0x500
push eax
push dword [ebp - 8]
push 4
push 0x54765f
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547669
call esi
test eax, eax
je 0x100013e6
lea eax, [ebp - 8]
mov dword [0x547669], 0x320
push eax
push dword [ebp - 8]
push 4
push 0x547669
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547673
call esi
test eax, eax
je 0x1000141a
lea eax, [ebp - 8]
mov dword [0x547673], 0x20
push eax
push dword [ebp - 8]
push 4
push 0x547673
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x54767d
call esi
test eax, eax
je 0x1000144e
lea eax, [ebp - 8]
mov dword [0x54767d], 0x500
push eax
push dword [ebp - 8]
push 4
push 0x54767d
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547687
call esi
test eax, eax
je 0x10001482
lea eax, [ebp - 8]
mov dword [0x547687], 0x3c0
push eax
push dword [ebp - 8]
push 4
push 0x547687
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547691
call esi
test eax, eax
je 0x100014b6
lea eax, [ebp - 8]
mov dword [0x547691], 0x20
push eax
push dword [ebp - 8]
push 4
push 0x547691
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x54769b
call esi
test eax, eax
je 0x100014ea
lea eax, [ebp - 8]
mov dword [0x54769b], 0x500
push eax
push dword [ebp - 8]
push 4
push 0x54769b
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x5476a5
call esi
test eax, eax
je 0x1000151e
lea eax, [ebp - 8]
mov dword [0x5476a5], 0x400
push eax
push dword [ebp - 8]
push 4
push 0x5476a5
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x5476b9
call esi
test eax, eax
je 0x10001552
lea eax, [ebp - 8]
mov dword [0x5476b9], 0x5a0
push eax
push dword [ebp - 8]
push 4
push 0x5476b9
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x5476c3
call esi
test eax, eax
je 0x10001586
lea eax, [ebp - 8]
mov dword [0x5476c3], 0x384
push eax
push dword [ebp - 8]
push 4
push 0x5476c3
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x5476d7
call esi
test eax, eax
je 0x100015ba
lea eax, [ebp - 8]
mov dword [0x5476d7], 0x640
push eax
push dword [ebp - 8]
push 4
push 0x5476d7
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x5476e1
call esi
test eax, eax
je 0x100015ee
lea eax, [ebp - 8]
mov dword [0x5476e1], 0x384
push eax
push dword [ebp - 8]
push 4
push 0x5476e1
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x5476f5
call esi
test eax, eax
je 0x10001622
lea eax, [ebp - 8]
mov dword [0x5476f5], 0x640
push eax
push dword [ebp - 8]
push 4
push 0x5476f5
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x5476ff
call esi
test eax, eax
je 0x10001656
lea eax, [ebp - 8]
mov dword [0x5476ff], 0x400
push eax
push dword [ebp - 8]
push 4
push 0x5476ff
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547713
call esi
test eax, eax
je 0x1000168a
lea eax, [ebp - 8]
mov dword [0x547713], 0x780
push eax
push dword [ebp - 8]
push 4
push 0x547713
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x54771d
call esi
test eax, eax
je 0x100016be
lea eax, [ebp - 8]
mov dword [0x54771d], 0x438
push eax
push dword [ebp - 8]
push 4
push 0x54771d
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547fb6
call esi
test eax, eax
je 0x100016f2
lea eax, [ebp - 8]
mov dword [0x547fb6], 0x320
push eax
push dword [ebp - 8]
push 4
push 0x547fb6
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547fc2
call esi
test eax, eax
je 0x10001726
lea eax, [ebp - 8]
mov dword [0x547fc2], 0xc
push eax
push dword [ebp - 8]
push 4
push 0x547fc2
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547fde
call esi
test eax, eax
je 0x1000175a
lea eax, [ebp - 8]
mov dword [0x547fde], 0x400
push eax
push dword [ebp - 8]
push 4
push 0x547fde
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547fea
call esi
test eax, eax
je 0x1000178e
lea eax, [ebp - 8]
mov dword [0x547fea], 0xc
push eax
push dword [ebp - 8]
push 4
push 0x547fea
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x548003
call esi
test eax, eax
je 0x100017c2
lea eax, [ebp - 8]
mov dword [0x548003], 0x500
push eax
push dword [ebp - 8]
push 4
push 0x548003
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x54800f
call esi
test eax, eax
je 0x100017f6
lea eax, [ebp - 8]
mov dword [0x54800f], 0xe
push eax
push dword [ebp - 8]
push 4
push 0x54800f
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x548028
call esi
test eax, eax
je 0x1000182a
lea eax, [ebp - 8]
mov dword [0x548028], 0x5a0
push eax
push dword [ebp - 8]
push 4
push 0x548028
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x548034
call esi
test eax, eax
je 0x1000185e
lea eax, [ebp - 8]
mov dword [0x548034], 0x12
push eax
push dword [ebp - 8]
push 4
push 0x548034
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x54804a
call esi
test eax, eax
je 0x10001892
lea eax, [ebp - 8]
mov dword [0x54804a], 0x12
push eax
push dword [ebp - 8]
push 4
push 0x54804a
call esi
mov ecx, dword [ebp - 4]
mov al, 1
xor ecx, ebp
pop esi
call fcn.10007116
mov esp, ebp
pop ebp
ret