Function at 0x1000ce40
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
push 0x1000cb50
push 0x78633c
mov bl, 0xe9
call fcn.100b6700
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 8
lea ecx, [ebp - 4]
push ecx
push 0x40
mov eax, 0x1000cb70
push 5
sub eax, 0x85a42a
xor edi, edi
push 0x85a425
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], eax
mov dword [ebp - 4], edi
call esi
test eax, eax
je 0x1000ceb3
mov edx, dword [ebp - 0x10]
mov cl, byte [ebp - 0xc]
mov eax, 0x85a425
mov dword [eax], edx
mov byte [eax + 4], cl
mov eax, dword [ebp - 4]
lea edx, [ebp - 8]
push edx
push eax
push 5
push 0x85a425
mov dword [ebp - 8], edi
call esi
test eax, eax
jne 0x1000ceb9
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 4]
push edx
push 0x40
mov ecx, 0x1000cc40
push 5
sub ecx, 0x85a0a2
push 0x85a09d
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], ecx
mov dword [ebp - 4], edi
call esi
test eax, eax
je 0x1000cf08
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x85a09d
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x85a09d
mov dword [ebp - 8], edi
call esi
test eax, eax
jne 0x1000cf0e
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x1000cce0
push 5
sub edx, 0x785a59
push 0x785a54
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], edi
call esi
test eax, eax
je 0x1000cf5d
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x785a54
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x785a54
mov dword [ebp - 8], edi
call esi
test eax, eax
jne 0x1000cf63
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x1000cb40
push 0x787ba0
call fcn.100b6700
push 0x1000cb30
push 0x78b0f0
mov bl, 0xe9
call fcn.100b6700
push 0x1000c9d0
push 0x787748
mov bl, 0xe8
call fcn.100b6700
push 0x1000ca90
push 0x787847
call fcn.100b6700
add esp, 0x20
cmp dword [0x102ee018], 1
jne 0x1000d003
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x7856eb
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x7856eb], 0x100c8d64
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x7856eb
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x78566b
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x78566b], 0x100c8d98
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x78566b
call esi
cmp dword [0x102ee018], 2
jne 0x1000d060
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x7856eb
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x7856eb], 0x100c8dc8
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x7856eb
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x78566b
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x78566b], 0x100c8dfc
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x78566b
call esi
cmp dword [0x102ee018], 3
jne 0x1000d0bd
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x7856eb
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x7856eb], 0x100c8e2c
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x7856eb
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x78566b
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x78566b], 0x100c8e60
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x78566b
call esi
push 0x1000a6b0
push 0x78b09a
call fcn.100b6700
push 0x7867b3
push 0x7867a5
mov bl, 0xe9
call fcn.100b6700
push 0x1000ab20
push 0x78b0cf
mov bl, 0xe8
call fcn.100b6700
add esp, 0x18
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x788a2d
mov ebx, 0x13a
mov dword [ebp - 4], edi
call esi
test eax, eax
je 0x1000d127
mov eax, 0x788a2d
mov dword [eax], ebx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 8]
push ecx
push edx
push 4
push eax
mov dword [ebp - 8], edi
call esi
test eax, eax
jne 0x1000d12d
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
push 0x23a
push 0x787960
call esi
push 0x23a
push 0x90
push 0x787960
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 4]
add esp, 0xc
lea ecx, [ebp - 4]
push ecx
push edx
push 0x23a
push 0x787960
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x787c7d
call esi
mov eax, 0x90909090
mov ecx, 0x787c7d
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x787c7d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x7863a8
call esi
mov eax, 0x90909090
mov ecx, 0x7863a8
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x7863a8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x78641e
call esi
mov eax, 0x90909090
mov ecx, 0x78641e
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x78641e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x7864b3
call esi
mov ecx, 0x7864b3
mov eax, 0x90909090
mov dword [ecx], eax
mov byte [ecx + 4], al
lea ecx, [ebp - 4]
push ecx
mov edx, dword [ebp - 4]
push edx
push 5
push 0x7864b3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x7862e2
call esi
mov eax, 0x90909090
mov ecx, 0x7862e2
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x7862e2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x78653e
call esi
mov eax, 0x90909090
mov ecx, 0x78653e
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x78653e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x786574
call esi
mov eax, 0x90909090
mov ecx, 0x786574
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x786574
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x7877fe
call esi
mov eax, 0x90909090
mov ecx, 0x7877fe
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x7877fe
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x787893
call esi
mov eax, 0x90909090
mov ecx, 0x787893
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x787893
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x7878de
call esi
mov eax, 0x90909090
mov ecx, 0x7878de
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x7878de
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x787931
call esi
mov eax, 0x90909090
mov ecx, 0x787931
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x787931
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x785c6a
call esi
mov eax, 0x90909090
mov ecx, 0x785c6a
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x785c6a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x785ca7
call esi
mov eax, 0x90909090
mov ecx, 0x785ca7
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x785ca7
call esi
lea eax, [ebp - 4]
mov bl, 6
mov dword [ebp - 4], edi
push eax
push 0x40
push 1
push 0x785965
call esi
test eax, eax
je 0x1000d400
mov ecx, 0x785965
mov byte [ecx], bl
mov eax, dword [ebp - 4]
lea edx, [ebp - 8]
push edx
push eax
push 1
push ecx
mov dword [ebp - 8], edi
call esi
test eax, eax
jne 0x1000d406
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x78595b
mov bl, 9
mov dword [ebp - 4], edi
call esi
test eax, eax
je 0x1000d439
mov edx, 0x78595b
mov byte [edx], bl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 1
push edx
mov dword [ebp - 8], edi
call esi
test eax, eax
jne 0x1000d43f
call dword [sym.imp.KERNEL32.dll_GetLastError]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret