Function at 0x1000e990
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100a900c]
xor eax, ebp
mov dword [ebp - 4], eax
mov al, byte [0x100b052c]
mov byte [0x100b052d], al
test al, al
je 0x1000ed46
mov ecx, dword [0x100cab48]
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ecx + 0x1e0fa4]
mov dword [ebp - 0xc], 5
mov dword [0x100b9afc], eax
lea eax, [ecx + 0xa4058]
mov dword [0x100b9a8c], eax
lea eax, [ecx + 0x1e0fa8]
mov dword [0x100b9a80], eax
lea eax, [ecx + 0x244e08]
mov dword [0x100b9a4c], eax
lea eax, [ecx + 0x244e10]
mov dword [0x100b9a48], eax
lea eax, [ecx + 0x244e14]
mov dword [0x100b9acc], eax
lea eax, [ecx + 0x1a5310]
mov dword [0x100b9ae4], eax
lea eax, [ecx + 0x244e0c]
mov dword [0x100b9a84], eax
lea eax, [ecx + 0x244e1c]
mov dword [0x100b9a44], eax
lea eax, [ecx + 0x167d88]
mov dword [0x100b9a78], eax
lea eax, [ecx + 0x1a532c]
mov dword [0x100b9b0c], eax
lea eax, [ecx + 0x14d4b4]
mov dword [0x100b9a58], eax
lea eax, [ecx + 0x2363a8]
mov dword [0x100b9a94], eax
lea eax, [ecx + 0x91f60]
mov dword [0x100b9aa0], eax
lea eax, [ecx + 0x8d490]
mov dword [0x100b9b14], eax
lea eax, [ecx + 0x2ba60]
mov dword [0x100b9a34], eax
lea eax, [ecx + 0x8d174]
lea ecx, [ebp - 8]
mov dword [ebp - 0x10], eax
push ecx
push 0x40
push 5
push eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0x1000e880
mov byte [eax], 0xe9
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov esi, dword [0x100cab48]
lea eax, [ebp - 8]
push eax
push 0x40
add esi, 0x8d140
mov dword [ebp - 0xc], 5
push 5
push esi
mov dword [ebp - 0x10], esi
call edi
mov eax, 0x10072280
mov byte [esi], 0xe9
sub eax, esi
sub eax, 5
mov dword [esi + 1], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
add eax, 0x8d290
lea ecx, [ebp - 8]
mov dword [ebp - 0x10], eax
push ecx
push 0x40
push 5
push eax
mov dword [ebp - 0xc], 5
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0x100722d0
mov byte [eax], 0xe8
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x8d4a9
mov dword [ebp - 0xc], 5
push 5
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0x10072350
mov byte [eax], 0xe8
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x8d4c5
mov dword [ebp - 0xc], 6
push 6
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov byte [eax], 0x66
mov eax, dword [ebp - 0x10]
mov byte [eax + 1], 0xf
mov eax, dword [ebp - 0x10]
mov byte [eax + 2], 0x1f
mov eax, dword [ebp - 0x10]
mov byte [eax + 3], 0x44
mov eax, dword [ebp - 0x10]
mov byte [eax + 4], 0
mov eax, dword [ebp - 0x10]
mov byte [eax + 5], 0
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x8d723
mov dword [ebp - 0xc], 2
push 2
mov dword [ebp - 0x10], eax
push eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0x15eb
mov word [eax], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x8d73a
mov dword [ebp - 0xc], 5
push 5
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0x10072490
mov byte [eax], 0xe8
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x8d21a
mov dword [ebp - 0xc], 6
push 6
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0xe857
mov word [eax], cx
mov ecx, 0x1000e830
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x8d220
mov dword [ebp - 0xc], 2
push 2
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0xdeb
mov word [eax], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
add eax, 0x8d23b
mov dword [ebp - 0xc], 2
mov dword [ebp - 0x10], eax
push ecx
push 0x40
push 2
push eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0x99eb
mov word [eax], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x2ba85
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0x100724b0
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007491a
mov esp, ebp
pop ebp
ret