Function at 0x1000fdd0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ecx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x4caedc
call esi
mov eax, 0x1003d710
mov byte [0x4caedc], 0xe9
sub eax, 0x4caee1
mov dword [0x4caedd], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x4caedc
call esi
call fcn.100416f0
call fcn.10040a30
call fcn.1003a1e0
call fcn.1003afc0
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x48099c
call esi
mov eax, 0x1003b900
mov byte [0x48099c], 0xe9
sub eax, 0x4809a1
mov dword [0x48099d], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x48099c
call esi
call fcn.1003bbc0
call fcn.1003d0b0
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x444384
call esi
mov eax, 0x10070020
mov byte [0x444384], 0xe9
sub eax, 0x444389
mov dword [0x444385], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x444384
call esi
call fcn.1006ffa0
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x4a386c
call esi
mov eax, 0x1003bca0
mov byte [0x4a386c], 0xe9
sub eax, 0x4a3871
mov dword [0x4a386d], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x4a386c
call esi
call fcn.1003ccd0
call fcn.1003c0c0
call fcn.1006a8f0
mov dword [0x51946c], 0x1006a1d0
mov dword [0x519470], 0x1006a1e0
mov dword [0x519494], 0x1006a1f0
call fcn.1002ee20
call fcn.100745a0
mov ecx, 0x5023c8
call fcn.1003d720
lea eax, [esp + 4]
push eax
push 0x40
push 4
push 0x4425cc
call esi
mov eax, 0x1003da40
sub eax, 0x4425d0
mov dword [0x4425cc], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 4
push 0x4425cc
call esi
call fcn.1002d230
call fcn.1006cca0
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x451604
call esi
mov eax, 0x1006f5e0
mov byte [0x451604], 0xe9
sub eax, 0x451609
mov dword [0x451605], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x451604
call esi
call fcn.100328f0
call fcn.100339f0
call fcn.100372d0
call fcn.1006b100
call fcn.1003dd30
call fcn.1001d0c0
call fcn.10052150
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x499a24
call esi
mov eax, 0x1006e770
mov byte [0x499a24], 0xe9
sub eax, 0x499a29
mov dword [0x499a25], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x499a24
call esi
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x44acfc
call esi
mov eax, 0x1005c470
mov byte [0x44acfc], 0xe9
sub eax, 0x44ad01
mov dword [0x44acfd], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x44acfc
call esi
call fcn.1005cc60
call fcn.1005c020
call fcn.10056ba0
call fcn.10044b40
call fcn.10044390
call fcn.10049610
call fcn.10075d10
call fcn.10076820
call fcn.10070d90
call fcn.10023a40
call fcn.10029c30
call fcn.1002a580
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x42a518
call esi
mov eax, 0x1002a7e0
mov byte [0x42a518], 0xe9
sub eax, 0x42a51d
mov dword [0x42a519], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x42a518
call esi
call fcn.1002c090
call fcn.1006dc10
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x495ea8
call esi
mov eax, 0x1006dc80
mov byte [0x495ea8], 0xe9
sub eax, 0x495ead
mov dword [0x495ea9], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x495ea8
call esi
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x418378
call esi
mov eax, 0x1002f3d0
mov byte [0x418378], 0xe9
sub eax, 0x41837d
mov dword [0x418379], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x418378
call esi
call fcn.10018e80
call fcn.10021380
call fcn.1001f0c0
call fcn.10024190
call fcn.10024ff0
call fcn.100207b0
call fcn.10026f50
call fcn.10073e40
call fcn.100786b0
call fcn.1006f290
pop esi
add esp, 4
jmp fcn.10066f50