Function at 0x100082d0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x508680
call esi
mov ebx, 0xa0000001
lea ecx, [ebp - 4]
push ecx
mov dword [0x508680], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x508680
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x973aaa
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x973aaa], 0xa0000002
mov edx, dword [ebp - 4]
push edx
push 4
push 0x973aaa
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x508649
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x508649], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x508649
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x9721d2
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x9721d2], 0xa0000002
mov edx, dword [ebp - 4]
push edx
push 4
push 0x9721d2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x972210
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x972210], 0xa0000003
mov edx, dword [ebp - 4]
push edx
push 4
push 0x972210
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x97391d
call esi
mov ecx, 0x97391d
lea edx, [ebp - 4]
push edx
mov byte [ecx], 0xeb
mov eax, dword [ebp - 4]
push eax
push 1
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x97253f
call esi
mov edx, 0x97253f
lea eax, [ebp - 4]
push eax
mov byte [edx], 0xeb
mov ecx, dword [ebp - 4]
push ecx
push 1
push edx
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push 0x973d80
call esi
mov eax, 0x973d80
lea ecx, [ebp - 4]
push ecx
mov byte [eax], 0xeb
mov edx, dword [ebp - 4]
push edx
push 1
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x973c20
call esi
mov edx, 0x973c20
mov ecx, 0x90909090
lea eax, [ebp - 4]
push eax
mov word [edx], cx
mov ecx, dword [ebp - 4]
push ecx
push 2
push edx
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push 0x972402
call esi
mov eax, 0x972402
lea ecx, [ebp - 4]
push ecx
mov byte [eax], 0xeb
mov edx, dword [ebp - 4]
push edx
push 1
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x9755fd
call esi
mov ecx, 0x9755fd
lea edx, [ebp - 4]
mov byte [ecx], 0xeb
mov eax, dword [ebp - 4]
push edx
push eax
push 1
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x976012
call esi
mov edx, 0x976012
lea eax, [ebp - 4]
push eax
mov byte [edx], 0xeb
mov ecx, dword [ebp - 4]
push ecx
push 1
push edx
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push 0x96fef6
call esi
mov ecx, 0x96fef6
mov eax, 0x90909090
lea edx, [ebp - 4]
push edx
mov word [ecx], ax
mov eax, dword [ebp - 4]
push eax
push 2
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push 0x9945bd
call esi
mov eax, 0x9945bd
mov edx, 0x90909090
lea ecx, [ebp - 4]
push ecx
mov word [eax], dx
mov edx, dword [ebp - 4]
push edx
push 2
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x9945cc
call esi
mov edx, 0x9945cc
mov ecx, 0x90909090
lea eax, [ebp - 4]
push eax
mov word [edx], cx
mov ecx, dword [ebp - 4]
push ecx
push 2
push edx
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push 0x994614
call esi
mov eax, 0x90909090
mov ecx, 0x994614
lea edx, [ebp - 4]
push edx
mov word [ecx], ax
mov eax, dword [ebp - 4]
push eax
push 2
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push 0x994623
call esi
mov eax, 0x994623
mov edx, 0x90909090
lea ecx, [ebp - 4]
push ecx
mov word [eax], dx
mov edx, dword [ebp - 4]
push edx
push 2
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x994874
call esi
mov edx, 0x994874
mov ecx, 0x90909090
lea eax, [ebp - 4]
push eax
mov word [edx], cx
mov ecx, dword [ebp - 4]
push ecx
push 2
push edx
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push 0x994883
call esi
mov ecx, 0x994883
mov eax, 0x90909090
lea edx, [ebp - 4]
push edx
mov word [ecx], ax
mov eax, dword [ebp - 4]
push eax
push 2
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push 0x994744
call esi
mov eax, 0x994744
mov edx, 0x90909090
lea ecx, [ebp - 4]
push ecx
mov word [eax], dx
mov edx, dword [ebp - 4]
push edx
push 2
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x994753
call esi
mov edx, 0x994753
mov ecx, 0x90909090
lea eax, [ebp - 4]
push eax
mov word [edx], cx
mov ecx, dword [ebp - 4]
push ecx
push 2
push edx
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 6
push 0x9702e4
call esi
mov eax, 0x90909090
mov ecx, 0x9702e4
mov dword [ecx], eax
mov word [ecx + 4], ax
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ecx
push 6
push 0x9702e4
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 6
push 0x9703e2
call esi
mov eax, 0x90909090
mov ecx, 0x9703e2
mov dword [ecx], eax
mov word [ecx + 4], ax
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ecx
push 6
push 0x9703e2
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 6
push 0x9704e0
call esi
mov eax, 0x90909090
mov ecx, 0x9704e0
mov dword [ecx], eax
mov word [ecx + 4], ax
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ecx
push 6
push 0x9704e0
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 6
push 0x97064e
call esi
mov eax, 0x90909090
mov ecx, 0x97064e
mov dword [ecx], eax
mov word [ecx + 4], ax
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ecx
push 6
push 0x97064e
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 6
push 0x97076e
call esi
mov eax, 0x90909090
mov ecx, 0x97076e
mov dword [ecx], eax
mov word [ecx + 4], ax
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ecx
push 6
push 0x97076e
call esi
push 0x10009520
push 0x96ff0a
mov bl, 0xe9
call fcn.1000d250
push 0x10009530
push 0x9945e8
call fcn.1000d250
push 0x10009550
push 0x99463f
call fcn.1000d250
push 0x10009570
push 0x99489f
call fcn.1000d250
push 0x10009590
push 0x99476f
call fcn.1000d250
push 0x100095b0
push 0xad4a73d
call fcn.1000d250
push 0x100095d0
push 0x9d63a17
call fcn.1000d250
push 0x10009600
push 0x64b98f
call fcn.1000d250
add esp, 0x40
push 0x10009630
push 0x64ba4a
call fcn.1000d250
push 0x10009670
push 0x436d38
call fcn.1000d250
push 0x100096b0
push 0x59b695
call fcn.1000d250
push 0x100096d0
push 0x59b90b
call fcn.1000d250
push 0x100096f0
push 0x970358
call fcn.1000d250
push 0x10009710
push 0x970456
call fcn.1000d250
push 0x10009730
push 0x9705be
call fcn.1000d250
push 0x10009750
push 0x9706c5
call fcn.1000d250
add esp, 0x40
push 0x10009770
push 0x9707e5
call fcn.1000d250
push 0x10009790
push 0x97c4f4
call fcn.1000d250
push 0x100097c0
push 0x97c546
call fcn.1000d250
push 0x100097d0
push 0x97c746
call fcn.1000d250
push 0x10009800
push 0x97c7bf
call fcn.1000d250
push 0x10008a50
push 0x78693b
mov bl, 0xe8
call fcn.1000d250
push 0x10008a50
push 0x8de66b
call fcn.1000d250
push 0x10008b30
push 0x51dd27
call fcn.1000d250
add esp, 0x40
push 0x10008b30
push 0x51dd7a
call fcn.1000d250
push 0x10008ab0
push 0x51dddc
call fcn.1000d250
push 0x10008ab0
push 0x51de3e
call fcn.1000d250
push 0x10008b30
push 0x51deb5
call fcn.1000d250
push 0x10008ab0
push 0x51def3
call fcn.1000d250
push 0x10008b30
push 0x51df1b
call fcn.1000d250
push 0x10008ab0
push 0x547a0c
call fcn.1000d250
push 0x10008ab0
push 0x63cf1d
call fcn.1000d250
add esp, 0x40
push 0x10008ab0
push 0x63d13f
call fcn.1000d250
push 0x10008ab0
push 0x63d2b6
call fcn.1000d250
push 0x10008af0
push 0x63d324
call fcn.1000d250
push 0x10008ab0
push 0x63d79c
call fcn.1000d250
push 0x10008ab0
push 0x63d81f
call fcn.1000d250
push 0x10008ab0
push 0x63d88b
call fcn.1000d250
push 0x10008ab0
push 0x63d8d3
call fcn.1000d250
push 0x10008ab0
push 0x63d93a
call fcn.1000d250
add esp, 0x40
push 0x10008ab0
push 0x63d9b1
call fcn.1000d250
push 0x10008ab0
push 0x63da28
call fcn.1000d250
push 0x10008ab0
push 0x63dabf
call fcn.1000d250
push 0x10008ab0
push 0x63db0c
call fcn.1000d250
push 0x10008ab0
push 0x63db39
call fcn.1000d250
push 0x10008af0
push 0x63dbb3
call fcn.1000d250
push 0x10008ab0
push 0x63dd80
call fcn.1000d250
push 0x10008b90
push 0x63dda9
call fcn.1000d250
add esp, 0x40
push 0x10008ab0
push 0x64397d
call fcn.1000d250
push 0x10008ab0
push 0x643bce
call fcn.1000d250
push 0x10008ab0
push 0x643c3e
call fcn.1000d250
push 0x10008ab0
push 0x643f67
call fcn.1000d250
push 0x10008ab0
push 0x643fc4
call fcn.1000d250
add esp, 0x28
pop esi
pop ebx
mov esp, ebp
pop ebp
ret