Function at 0x1000fd10
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push edi
push eax
push 0x40
push 1
push 0x62ebf8
mov bl, 0xeb
mov dword [ebp - 4], 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1000fd63
mov eax, 0x62ebf8
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62ebf8
call esi
test eax, eax
jne 0x1000fd65
call edi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62ebfe
mov bl, 0xeb
call esi
test eax, eax
je 0x1000fda3
mov eax, 0x62ebfe
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62ebfe
call esi
test eax, eax
jne 0x1000fda5
call edi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62ee42
mov bl, 0xeb
call esi
test eax, eax
je 0x1000fde3
mov eax, 0x62ee42
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62ee42
call esi
test eax, eax
jne 0x1000fde5
call edi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62ee48
mov bl, 0xeb
call esi
test eax, eax
je 0x1000fe23
mov eax, 0x62ee48
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62ee48
call esi
test eax, eax
jne 0x1000fe25
call edi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62eee5
mov bl, 0xeb
call esi
test eax, eax
je 0x1000fe63
mov eax, 0x62eee5
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62eee5
call esi
test eax, eax
jne 0x1000fe65
call edi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62eeeb
mov bl, 0xeb
call esi
test eax, eax
je 0x1000fea3
mov eax, 0x62eeeb
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62eeeb
call esi
test eax, eax
jne 0x1000fea5
call edi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62ebf7
mov bl, 0x69
call esi
test eax, eax
je 0x1000fee3
mov eax, 0x62ebf7
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62ebf7
call esi
test eax, eax
jne 0x1000fee5
call edi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62ee41
mov bl, 0x69
call esi
test eax, eax
je 0x1000ff23
mov eax, 0x62ee41
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62ee41
call esi
test eax, eax
jne 0x1000ff25
call edi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62eee4
mov bl, 0x69
call esi
test eax, eax
je 0x1000ff63
mov eax, 0x62eee4
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62eee4
call esi
test eax, eax
jne 0x1000ff65
call edi
push 0xf
call fcn.10019470
mov ebx, eax
mov dword [ebp - 4], 0
mov eax, 0x90909090
add esp, 4
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
mov word [ebx + 0xc], ax
mov byte [ebx + 0xe], al
lea eax, [ebp - 4]
push eax
push 0x40
push 0xf
push 0x4d7dad
call esi
test eax, eax
je 0x1000ffd9
mov eax, dword [ebx]
mov ecx, 0x4d7dad
mov dword [ecx], eax
mov eax, dword [ebx + 4]
mov dword [ecx + 4], eax
mov eax, dword [ebx + 8]
mov dword [ecx + 8], eax
mov ax, word [ebx + 0xc]
mov word [ecx + 0xc], ax
mov al, byte [ebx + 0xe]
mov byte [ecx + 0xe], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0xf
push ecx
call esi
test eax, eax
jne 0x1000ffdb
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5b57ed
call esi
lea eax, [ebp - 4]
mov dword [0x5b57ed], 0x400
push eax
push dword [ebp - 4]
push 4
push 0x5b57ed
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x589dbe
call esi
lea eax, [ebp - 4]
mov dword [0x589dbe], 0x400
push eax
push dword [ebp - 4]
push 4
push 0x589dbe
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d2cb2
call esi
lea eax, [ebp - 4]
mov dword [0x4d2cb2], 0x3800
push eax
push dword [ebp - 4]
push 4
push 0x4d2cb2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d2d9c
call esi
lea eax, [ebp - 4]
mov dword [0x4d2d9c], 0x3800
push eax
push dword [ebp - 4]
push 4
push 0x4d2d9c
call esi
mov eax, 0x1000fa60
mov byte [ebp - 0x10], 0xe8
sub eax, 0x4dada9
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x4dada4
call esi
test eax, eax
je 0x100100d1
mov eax, dword [ebp - 0x10]
mov ecx, 0x4dada4
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100100d3
call edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret