Function at 0x10004350
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5f308d
call esi
mov eax, 0x5f308d
mov edx, 0x1062d1d0
mov dword ds:[eax], edx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x5f308d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6f8101
call esi
mov eax, 0x6f8101
mov edx, 0x1062d1d0
mov dword ds:[eax], edx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x6f8101
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x72d1e4
call esi
mov eax, 0x72d1e4
mov edx, 0x1062d1d0
mov dword ds:[eax], edx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x72d1e4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735e90
call esi
mov eax, 0x735e90
mov edx, 0x1062d1d0
mov dword ds:[eax], edx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x735e90
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735f3c
call esi
mov eax, 0x735f3c
mov edx, 0x1062d1d0
mov dword ds:[eax], edx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x735f3c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735f9c
call esi
mov eax, 0x735f9c
mov edx, 0x1062d1d0
mov dword ds:[eax], edx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x735f9c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x747d2c
call esi
mov eax, 0x747d2c
mov edx, 0x1062d1d0
mov dword ds:[eax], edx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x747d2c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x747d93
call esi
mov eax, 0x747d93
mov edx, 0x1062d1d0
mov dword ds:[eax], edx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x747d93
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x747d1b
call esi
mov edi, 0x1388
lea ecx, [ebp - 4]
push ecx
mov dword [0x747d1b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x747d1b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x72d1cf
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x72d1cf], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x72d1cf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735f8b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x735f8b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x735f8b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735f2b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x735f2b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x735f2b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735e7b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x735e7b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x735e7b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5f307c
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5f307c], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5f307c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x550e84
call esi
mov ecx, 0x10004050
mov bl, 0xe9
mov byte [0x550e84], bl
sub ecx, 0x550e89
lea edx, [ebp - 8]
push edx
mov dword [0x550e85], ecx
mov eax, dword [ebp - 4]
push eax
push 5
push 0x550e84
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x550ccb
call esi
mov edx, 0x10004080
mov byte [0x550ccb], bl
sub edx, 0x550cd0
lea eax, [ebp - 8]
push eax
mov dword [0x550ccc], edx
mov ecx, dword [ebp - 4]
push ecx
push 5
push 0x550ccb
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 5
push 0x550b2c
call esi
mov byte [0x550b2c], bl
mov eax, 0x100040b0
sub eax, 0x550b31
lea ecx, [ebp - 8]
push ecx
mov dword [0x550b2d], eax
mov edx, dword [ebp - 4]
push edx
push 5
push 0x550b2c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x551379
call esi
mov ecx, 0x100040e0
mov byte [0x551379], bl
sub ecx, 0x55137e
lea edx, [ebp - 8]
push edx
mov dword [0x55137a], ecx
mov eax, dword [ebp - 4]
push eax
push 5
push 0x551379
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x55787e
call esi
mov edx, 0x10004110
mov byte [0x55787e], bl
sub edx, 0x557883
lea eax, [ebp - 8]
push eax
mov dword [0x55787f], edx
mov ecx, dword [ebp - 4]
push ecx
push 5
push 0x55787e
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 5
push 0x5513a2
call esi
mov eax, 0x10004140
mov byte [0x5513a2], bl
sub eax, 0x5513a7
lea ecx, [ebp - 8]
push ecx
mov dword [0x5513a3], eax
mov edx, dword [ebp - 4]
push edx
push 5
push 0x5513a2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x5513c5
call esi
mov ecx, 0x10004170
mov byte [0x5513c5], bl
sub ecx, 0x5513ca
lea edx, [ebp - 8]
push edx
mov dword [0x5513c6], ecx
mov eax, dword [ebp - 4]
push eax
push 5
push 0x5513c5
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x5a04c0
call esi
mov edx, 0x100041a0
mov byte [0x5a04c0], bl
sub edx, 0x5a04c5
lea eax, [ebp - 8]
push eax
mov dword [0x5a04c1], edx
mov ecx, dword [ebp - 4]
push ecx
push 5
push 0x5a04c0
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 5
push 0x5515b8
call esi
mov eax, 0x100041d0
mov byte [0x5515b8], bl
sub eax, 0x5515bd
lea ecx, [ebp - 8]
push ecx
mov dword [0x5515b9], eax
mov edx, dword [ebp - 4]
push edx
push 5
push 0x5515b8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x551097
call esi
mov ecx, 0x10004200
mov byte [0x551097], bl
sub ecx, 0x55109c
lea edx, [ebp - 8]
push edx
mov dword [0x551098], ecx
mov eax, dword [ebp - 4]
push eax
push 5
push 0x551097
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x550b4c
call esi
mov edx, 0x10004230
mov byte [0x550b4c], bl
sub edx, 0x550b51
lea eax, [ebp - 8]
push eax
mov dword [0x550b4d], edx
mov ecx, dword [ebp - 4]
push ecx
push 5
push 0x550b4c
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 5
push 0x550dec
call esi
mov eax, 0x10004260
mov byte [0x550dec], bl
sub eax, 0x550df1
lea ecx, [ebp - 8]
push ecx
mov dword [0x550ded], eax
mov edx, dword [ebp - 4]
push edx
push 5
push 0x550dec
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x576a63
call esi
mov ecx, 0x10004290
mov byte [0x576a63], bl
sub ecx, 0x576a68
lea edx, [ebp - 8]
push edx
mov dword [0x576a64], ecx
mov eax, dword [ebp - 4]
push eax
push 5
push 0x576a63
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x550c1b
call esi
mov edx, 0x100042c0
mov byte [0x550c1b], bl
sub edx, 0x550c20
lea eax, [ebp - 8]
push eax
mov dword [0x550c1c], edx
mov ecx, dword [ebp - 4]
push ecx
push 5
push 0x550c1b
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 5
push 0x5b55ea
call esi
mov eax, 0x100042f0
mov byte [0x5b55ea], bl
sub eax, 0x5b55ef
lea ecx, [ebp - 8]
push ecx
mov dword [0x5b55eb], eax
mov edx, dword [ebp - 4]
push edx
push 5
push 0x5b55ea
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x5a3c70
call esi
mov ecx, 0x10004330
mov byte [0x5a3c70], bl
sub ecx, 0x5a3c75
lea edx, [ebp - 8]
push edx
mov dword [0x5a3c71], ecx
mov eax, dword [ebp - 4]
push eax
push 5
push 0x5a3c70
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 8
push 0xd23490
call esi
fld qword [0x1001e458]
lea edx, [ebp - 4]
fstp qword [0xd23490]
mov eax, dword [ebp - 4]
push edx
push eax
push 8
push 0xd23490
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 8
push 0xd27af8
call esi
fld qword [0x1001e450]
lea edx, [ebp - 4]
fstp qword [0xd27af8]
mov eax, dword [ebp - 4]
push edx
push eax
push 8
push 0xd27af8
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 8
push 0xd27ef8
call esi
fld qword [0x1001e448]
lea edx, [ebp - 4]
fstp qword [0xd27ef8]
mov eax, dword [ebp - 4]
push edx
push eax
push 8
push 0xd27ef8
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 3
push 0x556d5a
call esi
mov dx, word [0x1001d96c]
mov eax, 0x556d5a
mov word [eax], dx
mov cl, byte [0x1001d96e]
lea edx, [ebp - 4]
push edx
mov byte [eax + 2], cl
mov eax, dword [ebp - 4]
push eax
push 3
push 0x556d5a
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 6
push 0x59ce42
call esi
mov ecx, 0x59ce42
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 4]
push eax
push 6
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 6
push 0x55774d
call esi
mov eax, 0x90909090
mov ecx, 0x55774d
mov dword [ecx], eax
lea edx, [ebp - 4]
mov word [ecx + 4], ax
mov eax, dword [ebp - 4]
push edx
push eax
push 6
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 6
push 0x59e82d
call esi
mov ecx, 0x59e82d
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 4]
push eax
push 6
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 6
push 0x59c702
call esi
mov ecx, 0x59c702
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 4]
push eax
push 6
push ecx
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret