Function at 0x1000e110
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ecx
cmp byte [0x100b3b0c], 0
jne 0x1000e136
cmp byte [0x100b3b5c], 0
jne 0x1000e136
cmp byte [0x100b3b34], 0
jne 0x1000e136
mov ecx, 0x100b4020
call fcn.10001650
cmp byte [0x100b413c], 0
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push esi
push edi
je 0x1000e182
mov esi, dword [0x100b4128]
lea eax, [esp + 0xc]
mov edi, dword [0x100b411c]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b412c
push edi
call fcn.100560d0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b413c], 0
cmp byte [0x100b4088], 0
je 0x1000e1c5
mov esi, dword [0x100b4074]
lea eax, [esp + 0xc]
mov edi, dword [0x100b4068]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b4078
push edi
call fcn.100560d0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b4088], 0
cmp byte [0x100b40ac], 0
je 0x1000e208
mov esi, dword [0x100b4098]
lea eax, [esp + 0xc]
mov edi, dword [0x100b408c]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b409c
push edi
call fcn.100560d0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b40ac], 0
cmp byte [0x100b3b0c], 0
jne 0x1000e22d
cmp byte [0x100b3b5c], 0
jne 0x1000e22d
cmp byte [0x100b3b34], 0
jne 0x1000e22d
mov ecx, 0x100b4020
call fcn.10001650
cmp byte [0x100b4184], 0
je 0x1000e270
mov esi, dword [0x100b4170]
lea eax, [esp + 0xc]
mov edi, dword [0x100b4164]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b4174
push edi
call fcn.100560d0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b4184], 0
cmp byte [0x100b4160], 0
je 0x1000e2b3
mov esi, dword [0x100b414c]
lea eax, [esp + 0xc]
mov edi, dword [0x100b4140]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b4150
push edi
call fcn.100560d0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b4160], 0
cmp byte [0x100b4118], 0
je 0x1000e2f6
mov esi, dword [0x100b4104]
lea eax, [esp + 0xc]
mov edi, dword [0x100b40f8]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b4108
push edi
call fcn.100560d0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b4118], 0
cmp byte [0x100b3b0c], 0
jne 0x1000e31b
cmp byte [0x100b3b5c], 0
jne 0x1000e31b
cmp byte [0x100b3b34], 0
jne 0x1000e31b
mov ecx, 0x100b4020
call fcn.10001650
cmp byte [0x100b40f4], 0
je 0x1000e35e
mov esi, dword [0x100b40e0]
lea eax, [esp + 0xc]
mov edi, dword [0x100b40d4]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b40e4
push edi
call fcn.100560d0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b40f4], 0
cmp byte [0x100b40d0], 0
je 0x1000e3a1
mov esi, dword [0x100b40bc]
lea eax, [esp + 0xc]
mov edi, dword [0x100b40b0]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b40c0
push edi
call fcn.100560d0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b40d0], 0
cmp byte [0x100b3ff8], 0
je 0x1000e3e4
mov esi, dword [0x100b3fe4]
lea eax, [esp + 0xc]
mov edi, dword [0x100b3fd8]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b3fe8
push edi
call fcn.100560d0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b3ff8], 0
mov ecx, 0x100b3ffc
call fcn.10001650
mov ecx, 0x100b4020
call fcn.10001650
call fcn.1000ff50
call fcn.1000e020
mov ecx, dword [0x100b6b38]
test ecx, ecx
je 0x1000e413
mov al, byte [0x100b3a57]
mov byte [ecx], al
mov ecx, dword [0x100b6b34]
test ecx, ecx
je 0x1000e424
mov al, byte [0x100b3a56]
mov byte [ecx], al
mov eax, dword [0x100b6978]
test eax, eax
je 0x1000e448
mov eax, dword [eax]
test eax, eax
je 0x1000e448
mov eax, dword [eax + 0x68]
test eax, eax
je 0x1000e448
mov eax, dword [eax + 0x54]
test eax, eax
je 0x1000e448
mov dword [eax + 0x28], 0x3f800000
cmp byte [0x100b4214], 0
je 0x1000e48b
mov esi, dword [0x100b4200]
lea eax, [esp + 0xc]
mov edi, dword [0x100b41f4]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b4204
push edi
call fcn.100560d0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b4214], 0
cmp byte [0x100b41a8], 0
je 0x1000e4ce
mov esi, dword [0x100b4194]
lea eax, [esp + 0xc]
mov edi, dword [0x100b4188]
push eax
push 0x40
push esi
push edi
call ebx
push esi
push 0x100b4198
push edi
call fcn.100560d0
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push esi
push edi
call ebx
mov byte [0x100b41a8], 0
call fcn.10010160
call fcn.1000e020
mov ecx, 0x100b41ac
call fcn.10001650
mov eax, dword [0x100b6a38]
test eax, eax
je 0x1000e51f
cmp dword [0x100b69e4], 0
je 0x1000e51f
lea ecx, [esp + 0xc]
push ecx
push 0x40
push 5
push eax
call ebx
mov ecx, dword [0x100b6a38]
mov eax, dword [0x100b69e4]
mov byte [ecx], 0xe9
mov dword [ecx + 1], eax
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push 5
push ecx
call ebx
pop edi
pop esi
pop ebx
pop ecx
ret