Function at 0x100108b0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10144040]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 0x10010580
push 0x789084
push 0xe9
call fcn.100792c0
push 0x100104f0
push 0x7890c6
push 0xe9
call fcn.100792c0
push 0x100105c0
push 0x787748
push 0xe8
call fcn.100792c0
push 0x10010600
push 0x787847
push 0xe8
call fcn.100792c0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0x30
push eax
push 0x40
push 4
push 0x7856eb
call esi
lea eax, [ebp - 8]
mov dword [0x7856eb], 0x101355c0
push eax
push dword [ebp - 8]
push 4
push 0x7856eb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x78566b
call esi
lea eax, [ebp - 8]
mov dword [0x78566b], 0x101355f4
push eax
push dword [ebp - 8]
push 4
push 0x78566b
call esi
push 0x1000f980
push 0x78b09a
push 0xe8
call fcn.100792c0
push 0x7867b3
push 0x7867a5
push 0xe9
call fcn.100792c0
push 0x1000fbc0
push 0x78b0cf
push 0xe8
call fcn.100792c0
add esp, 0x24
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x788a2d
call esi
lea eax, [ebp - 8]
mov dword [0x788a2d], 0x13a
push eax
push dword [ebp - 8]
push 4
push 0x788a2d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x23a
push 0x787960
call esi
push 0x23a
push 0x90
push 0x787960
call fcn.100e08c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x23a
push 0x787960
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x787c7d
call esi
mov eax, 0x787c7d
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x787c7d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7863a8
call esi
mov eax, 0x7863a8
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7863a8
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x78641e
call esi
mov eax, 0x78641e
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x78641e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7864b3
call esi
mov eax, 0x7864b3
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7864b3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7862e2
call esi
mov eax, 0x7862e2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7862e2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x78653e
call esi
mov eax, 0x78653e
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x78653e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x786574
call esi
mov eax, 0x786574
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x786574
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7877fe
call esi
mov eax, 0x7877fe
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7877fe
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x787893
call esi
mov eax, 0x787893
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x787893
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7878de
call esi
mov eax, 0x7878de
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7878de
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x787931
call esi
mov eax, 0x787931
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x787931
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x785c6a
call esi
mov eax, 0x785c6a
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x785c6a
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x785ca7
call esi
mov eax, 0x785ca7
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x785ca7
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x785965
call esi
lea eax, [ebp - 8]
mov byte [0x785965], 6
push eax
push dword [ebp - 8]
push 1
push 0x785965
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x78595b
call esi
lea eax, [ebp - 8]
mov byte [0x78595b], 9
push eax
push dword [ebp - 8]
push 1
push 0x78595b
call esi
push 0x100106c0
push 0x78633c
push 0xe9
call fcn.100792c0
add esp, 0xc
mov byte [ebp - 0x14], 0xe9
mov eax, 0x100106e0
mov dword [ebp - 8], 0
sub eax, 0x85a42a
mov dword [ebp - 0x13], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x85a425
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x10010d22
mov eax, dword [ebp - 0x14]
mov ecx, 0x85a425
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x10010d24
call edi
mov eax, 0x10010720
mov byte [ebp - 0x14], 0xe9
sub eax, 0x85a0a2
mov dword [ebp - 8], 0
mov dword [ebp - 0x13], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x85a09d
call esi
test eax, eax
je 0x10010d76
mov eax, dword [ebp - 0x14]
mov ecx, 0x85a09d
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x10010d78
call edi
mov eax, 0x10010750
mov byte [ebp - 0x14], 0xe9
sub eax, 0x785a59
mov dword [ebp - 8], 0
mov dword [ebp - 0x13], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x785a54
call esi
test eax, eax
je 0x10010dca
mov eax, dword [ebp - 0x14]
mov ecx, 0x785a54
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x10010dcc
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1007c089
mov esp, ebp
pop ebp
ret