Function at 0x1000fdd0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ecx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x4caedc
call esi
mov eax, 0x1003d6a0
mov byte [0x4caedc], 0xe9
sub eax, 0x4caee1
mov dword [0x4caedd], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x4caedc
call esi
call fcn.100416e0
call fcn.10040a20
call fcn.1003a170
call fcn.1003af50
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x48099c
call esi
mov eax, 0x1003b890
mov byte [0x48099c], 0xe9
sub eax, 0x4809a1
mov dword [0x48099d], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x48099c
call esi
call fcn.1003bb50
call fcn.1003d040
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x444384
call esi
mov eax, 0x10070000
mov byte [0x444384], 0xe9
sub eax, 0x444389
mov dword [0x444385], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x444384
call esi
call fcn.1006ff80
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x4a386c
call esi
mov eax, 0x1003bc30
mov byte [0x4a386c], 0xe9
sub eax, 0x4a3871
mov dword [0x4a386d], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x4a386c
call esi
call fcn.1003cc60
call fcn.1003c050
call fcn.1006a920
call fcn.1006a1c0
call fcn.1002edb0
call fcn.10074570
mov ecx, 0x5023c8
call fcn.1003d6b0
lea eax, [esp + 4]
push eax
push 0x40
push 4
push 0x4425cc
call esi
mov eax, 0x1003d9d0
sub eax, 0x4425d0
mov dword [0x4425cc], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 4
push 0x4425cc
call esi
call fcn.1002d1c0
call fcn.1006ccd0
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x451604
call esi
mov eax, 0x1006f5c0
mov byte [0x451604], 0xe9
sub eax, 0x451609
mov dword [0x451605], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x451604
call esi
call fcn.10032880
call fcn.10033980
call fcn.10037260
call fcn.1006b130
call fcn.1003dcc0
call fcn.1001d0b0
call fcn.10052140
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x499a24
call esi
mov eax, 0x1006e7a0
mov byte [0x499a24], 0xe9
sub eax, 0x499a29
mov dword [0x499a25], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x499a24
call esi
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x44acfc
call esi
mov eax, 0x1005c460
mov byte [0x44acfc], 0xe9
sub eax, 0x44ad01
mov dword [0x44acfd], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x44acfc
call esi
call fcn.1005cc50
call fcn.1005c010
call fcn.10056b90
call fcn.10044b30
call fcn.10044380
call fcn.10049600
call fcn.10075ce0
call fcn.100767f0
call fcn.10070d60
call fcn.10023a30
call fcn.10029bc0
call fcn.1002a510
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x42a518
call esi
mov eax, 0x1002a770
mov byte [0x42a518], 0xe9
sub eax, 0x42a51d
mov dword [0x42a519], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x42a518
call esi
call fcn.1002c020
call fcn.1006dc40
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x495ea8
call esi
mov eax, 0x1006dcb0
mov byte [0x495ea8], 0xe9
sub eax, 0x495ead
mov dword [0x495ea9], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x495ea8
call esi
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x418378
call esi
mov eax, 0x1002f360
mov byte [0x418378], 0xe9
sub eax, 0x41837d
mov dword [0x418379], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x418378
call esi
call fcn.10018e70
call fcn.10021370
call fcn.1001f0b0
call fcn.10024120
call fcn.10024f80
call fcn.100207a0
call fcn.10026ee0
call fcn.10073e10
call fcn.10078680
call fcn.1006f2c0
pop esi
add esp, 4
jmp fcn.10066f10