Function at 0x100b5490
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x100b6710
push 0x84c8b0
push 0xe9
call fcn.100ceb10
add esp, 0xc
cmp dword [0x102df934], 0
je 0x100b5cba
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x51c3d6
call esi
mov eax, 0x51c3d6
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x51c3d6
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x51c4d7
call esi
mov eax, 0x51c4d7
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x51c4d7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x51c62b
call esi
mov eax, 0x51c62b
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x51c62b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x578dc2
call esi
mov eax, 0x578dc2
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x578dc2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5a7b4d
call esi
mov eax, 0x5a7b4d
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x5a7b4d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5b7c04
call esi
mov eax, 0x5b7c04
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x5b7c04
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5b7f65
call esi
mov eax, 0x5b7f65
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x5b7f65
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5ba7b9
call esi
mov eax, 0x5ba7b9
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x5ba7b9
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x64e173
call esi
mov eax, 0x64e173
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x64e173
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x64e242
call esi
mov eax, 0x64e242
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x64e242
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x64e398
call esi
mov eax, 0x64e398
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x64e398
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x64e3b1
call esi
mov eax, 0x64e3b1
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x64e3b1
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x78f28b
call esi
mov eax, 0x78f28b
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x78f28b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84a33d
call esi
mov eax, 0x84a33d
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84a33d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84a35e
call esi
mov eax, 0x84a35e
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84a35e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84a6fb
call esi
mov eax, 0x84a6fb
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84a6fb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84a711
call esi
mov eax, 0x84a711
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84a711
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84a732
call esi
mov eax, 0x84a732
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84a732
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bb82
call esi
mov eax, 0x84bb82
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84bb82
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bba3
call esi
mov eax, 0x84bba3
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84bba3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bc84
call esi
mov eax, 0x84bc84
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84bc84
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c24b
call esi
mov eax, 0x84c24b
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84c24b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c301
call esi
mov eax, 0x84c301
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84c301
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c3d9
call esi
mov eax, 0x84c3d9
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84c3d9
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c3fb
call esi
mov eax, 0x84c3fb
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84c3fb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c48f
call esi
mov eax, 0x84c48f
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84c48f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x91cced
call esi
mov eax, 0x91cced
mov edx, 0x102df374
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x91cced
call esi
lea eax, [ebp - 4]
mov dword [ebp - 8], 0x102df37f
push eax
push 0x40
push 4
push 0x84b122
call esi
mov eax, 0x84b122
mov edx, dword [ebp - 8]
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84b122
call esi
lea eax, [ebp - 4]
mov dword [ebp - 8], 0x102df38c
push eax
push 0x40
push 4
push 0x84c340
call esi
mov eax, 0x84c340
mov edx, dword [ebp - 8]
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84c340
call esi
lea eax, [ebp - 4]
mov dword [ebp - 8], 0x102df38c
push eax
push 0x40
push 4
push 0x84c35b
call esi
mov eax, 0x84c35b
mov edx, dword [ebp - 8]
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84c35b
call esi
lea eax, [ebp - 4]
mov dword [ebp - 8], 0x102df38c
push eax
push 0x40
push 4
push 0x95fedc
call esi
mov eax, 0x95fedc
mov edx, dword [ebp - 8]
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x95fedc
call esi
lea eax, [ebp - 4]
mov dword [ebp - 8], 0x102df390
push eax
push 0x40
push 4
push 0x84baa6
call esi
mov eax, 0x84baa6
mov edx, dword [ebp - 8]
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84baa6
call esi
lea eax, [ebp - 4]
mov dword [ebp - 8], 0x102df390
push eax
push 0x40
push 4
push 0x84baef
call esi
mov eax, 0x84baef
mov edx, dword [ebp - 8]
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84baef
call esi
lea eax, [ebp - 4]
mov dword [ebp - 8], 0x102df390
push eax
push 0x40
push 4
push 0x84bb0f
call esi
mov eax, 0x84bb0f
mov edx, dword [ebp - 8]
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84bb0f
call esi
lea eax, [ebp - 4]
mov dword [ebp - 8], 0x102df390
push eax
push 0x40
push 4
push 0x84bc3b
call esi
mov eax, 0x84bc3b
mov edx, dword [ebp - 8]
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84bc3b
call esi
lea eax, [ebp - 4]
mov dword [ebp - 8], 0x102df390
push eax
push 0x40
push 4
push 0x84bd9f
call esi
mov eax, 0x84bd9f
mov edx, dword [ebp - 8]
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84bd9f
call esi
lea eax, [ebp - 4]
mov dword [ebp - 8], 0x102df390
push eax
push 0x40
push 4
push 0x84bef9
call esi
mov eax, 0x84bef9
mov edx, dword [ebp - 8]
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84bef9
call esi
lea eax, [ebp - 4]
mov dword [ebp - 8], 0x102df390
push eax
push 0x40
push 4
push 0x84bf9c
call esi
mov eax, 0x84bf9c
mov edx, dword [ebp - 8]
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84bf9c
call esi
lea eax, [ebp - 4]
mov dword [ebp - 8], 0x102df390
push eax
push 0x40
push 4
push 0x84c18c
call esi
mov eax, 0x84c18c
mov edx, dword [ebp - 8]
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84c18c
call esi
lea eax, [ebp - 4]
mov dword [ebp - 8], 0x102df390
push eax
push 0x40
push 4
push 0x84c28e
call esi
mov eax, 0x84c28e
mov edx, dword [ebp - 8]
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x84c28e
call esi
lea eax, [ebp - 4]
mov dword [ebp - 8], 0x102df390
push eax
push 0x40
push 4
push 0x95feac
call esi
mov eax, 0x95feac
mov edx, dword [ebp - 8]
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x95feac
call esi
lea eax, [ebp - 4]
mov dword [ebp - 8], 0x102df390
push eax
push 0x40
push 4
push 0x95ff93
call esi
mov eax, 0x95ff93
mov edx, dword [ebp - 8]
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x95ff93
call esi
push 0x100b5cd0
push 0x84ad10
push 0xe9
call fcn.100ceb10
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 0x7c
push 0x84bab0
call esi
push 0x7c
push 0x90
push 0x84bab0
call fcn.100d2b30
add esp, 0xc
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x7c
push 0x84bab0
call esi
push 0x84bbee
push 0x84bb77
push 0xe9
call fcn.100ceb10
push 0x84a3a3
push 0x84a2fd
push 0xe9
call fcn.100ceb10
add esp, 0x18
pop esi
mov esp, ebp
pop ebp
ret