Function at 0x1000f3b0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x10042fd0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push esi
push edi
mov dword [ebp - 0x1c], eax
call fcn.10026900
call fcn.10017d90
call fcn.10030b40
call fcn.10014a10
mov ecx, dword [str.Arial]
mov dx, word [0x1003bf50]
mov edi, dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_]
push 0xe2c
mov dword [ebp - 0xc], ecx
mov word [ebp - 8], dx
call edi
add esp, 4
test eax, eax
je 0x1000f41c
push 0
push 8
lea ecx, [ebp - 0xc]
push ecx
xor edx, edx
mov ecx, 0x190
mov esi, eax
call fcn.10034300
jmp 0x1000f41e
xor eax, eax
push 0xe2c
mov dword [0x101df558], eax
call edi
add esp, 4
test eax, eax
je 0x1000f449
push 0
push 0xc
lea edx, [ebp - 0xc]
push edx
xor edx, edx
mov ecx, 0x190
mov esi, eax
call fcn.10034300
jmp 0x1000f44b
xor eax, eax
push 0xe2c
mov dword [0x101df560], eax
call edi
add esp, 4
test eax, eax
je 0x1000f476
push 0
push 0xe
lea ecx, [ebp - 0xc]
push ecx
xor edx, edx
mov ecx, 0x190
mov esi, eax
call fcn.10034300
jmp 0x1000f478
xor eax, eax
push 0xe2c
mov dword [0x101df564], eax
call edi
add esp, 4
test eax, eax
je 0x1000f4a3
push 0
push 0xf
lea edx, [ebp - 0xc]
push edx
xor edx, edx
mov ecx, 0x190
mov esi, eax
call fcn.10034300
jmp 0x1000f4a5
xor eax, eax
push 0xe2c
mov dword [0x101df568], eax
call edi
add esp, 4
test eax, eax
je 0x1000f4d0
push 0
push 0x10
lea ecx, [ebp - 0xc]
push ecx
xor edx, edx
mov ecx, 0x190
mov esi, eax
call fcn.10034300
jmp 0x1000f4d2
xor eax, eax
push 0xe2c
mov dword [0x101df56c], eax
call edi
add esp, 4
test eax, eax
je 0x1000f4fd
push 0
push 0xa
lea edx, [ebp - 0xc]
push edx
xor edx, edx
mov ecx, 0x2bc
mov esi, eax
call fcn.10034300
jmp 0x1000f4ff
xor eax, eax
push 0xe2c
mov dword [0x101df570], eax
call edi
add esp, 4
test eax, eax
je 0x1000f52a
push 0
push 0xc
lea ecx, [ebp - 0xc]
push ecx
xor edx, edx
mov ecx, 0x2bc
mov esi, eax
call fcn.10034300
jmp 0x1000f52c
xor eax, eax
push 0xe2c
mov dword [0x101df574], eax
call edi
add esp, 4
test eax, eax
je 0x1000f557
push 0
push 0xe
lea edx, [ebp - 0xc]
push edx
xor edx, edx
mov ecx, 0x2bc
mov esi, eax
call fcn.10034300
jmp 0x1000f559
xor eax, eax
push 0xe2c
mov dword [0x101df578], eax
call edi
add esp, 4
test eax, eax
je 0x1000f584
push 0
push 0xf
lea ecx, [ebp - 0xc]
push ecx
xor edx, edx
mov ecx, 0x2bc
mov esi, eax
call fcn.10034300
jmp 0x1000f586
xor eax, eax
push 0xe2c
mov dword [0x101df57c], eax
call edi
add esp, 4
test eax, eax
je 0x1000f5b1
push 0
push 0x10
lea edx, [ebp - 0xc]
push edx
xor edx, edx
mov ecx, 0x2bc
mov esi, eax
call fcn.10034300
jmp 0x1000f5b3
xor eax, eax
push 0xe2c
mov dword [0x101df580], eax
call edi
add esp, 4
test eax, eax
je 0x1000f5de
push 1
push 0xa
lea ecx, [ebp - 0xc]
push ecx
xor edx, edx
mov ecx, 0x190
mov esi, eax
call fcn.10034300
jmp 0x1000f5e0
xor eax, eax
push 0xe2c
mov dword [0x101df584], eax
call edi
add esp, 4
test eax, eax
je 0x1000f60b
push 1
push 0xc
lea edx, [ebp - 0xc]
push edx
xor edx, edx
mov ecx, 0x190
mov esi, eax
call fcn.10034300
jmp 0x1000f60d
xor eax, eax
push 0xe2c
mov dword [0x101df588], eax
call edi
add esp, 4
test eax, eax
je 0x1000f638
push 1
push 0xe
lea ecx, [ebp - 0xc]
push ecx
xor edx, edx
mov ecx, 0x190
mov esi, eax
call fcn.10034300
jmp 0x1000f63a
xor eax, eax
push 0xe2c
mov dword [0x101df58c], eax
call edi
add esp, 4
test eax, eax
je 0x1000f665
push 1
push 0xf
lea edx, [ebp - 0xc]
push edx
xor edx, edx
mov ecx, 0x190
mov esi, eax
call fcn.10034300
jmp 0x1000f667
xor eax, eax
push 0xe2c
mov dword [0x101df590], eax
call edi
add esp, 4
test eax, eax
je 0x1000f692
push 1
push 0x10
lea ecx, [ebp - 0xc]
push ecx
xor edx, edx
mov ecx, 0x190
mov esi, eax
call fcn.10034300
jmp 0x1000f694
xor eax, eax
push 0xe2c
mov dword [0x101df594], eax
call edi
add esp, 4
test eax, eax
je 0x1000f6c2
push 0
push 8
lea edx, [ebp - 0xc]
push edx
mov edx, 1
mov ecx, 0x190
mov esi, eax
call fcn.10034300
jmp 0x1000f6c4
xor eax, eax
push 0xe2c
mov dword [0x101df598], eax
call edi
add esp, 4
test eax, eax
je 0x1000f6f2
push 0
push 0xc
lea ecx, [ebp - 0xc]
push ecx
mov edx, 1
mov ecx, 0x190
mov esi, eax
call fcn.10034300
jmp 0x1000f6f4
xor eax, eax
push 0xe2c
mov dword [0x101df59c], eax
call edi
add esp, 4
test eax, eax
je 0x1000f722
push 0
push 0xe
lea edx, [ebp - 0xc]
push edx
mov edx, 1
mov ecx, 0x190
mov esi, eax
call fcn.10034300
jmp 0x1000f724
xor eax, eax
push 0xe2c
mov dword [0x101df5a0], eax
call edi
add esp, 4
test eax, eax
je 0x1000f752
push 0
push 0xf
lea ecx, [ebp - 0xc]
push ecx
mov edx, 1
mov ecx, 0x190
mov esi, eax
call fcn.10034300
jmp 0x1000f754
xor eax, eax
push 0xe2c
mov dword [0x101df5a4], eax
call edi
add esp, 4
test eax, eax
je 0x1000f782
push 0
push 0x10
lea edx, [ebp - 0xc]
push edx
mov edx, 1
mov ecx, 0x190
mov esi, eax
call fcn.10034300
jmp 0x1000f784
xor eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea ecx, [ebp - 0x18]
push ecx
mov dword [0x101df5a8], eax
push 0x40
mov eax, 0x1000f820
push 5
sub eax, 0x80f6b3
push 0x80f6ae
mov byte [ebp - 0x14], 0xe8
mov dword [ebp - 0x13], eax
mov dword [ebp - 0x18], 0
call esi
test eax, eax
je 0x1000f7e6
mov edx, dword [ebp - 0x14]
mov cl, byte [ebp - 0x10]
mov eax, 0x80f6ae
mov dword [eax], edx
mov byte [eax + 4], cl
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
push edx
push eax
push 5
push 0x80f6ae
mov dword [ebp - 0x20], 0
call esi
test eax, eax
jne 0x1000f7ec
call dword [sym.imp.KERNEL32.dll_GetLastError]
call fcn.10022270
mov ecx, dword [ebp - 0x1c]
push 0x65
push 0
push ecx
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 4]
add esp, 0xc
pop edi
xor ecx, ebp
pop esi
call fcn.10036e30
mov esp, ebp
pop ebp
ret 4