Function at 0x10001410
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x1006b00c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push str.xx____x____xxx____xxx
mov edx, 0x100584b0
call fcn.100011f0
push str.xxxxxxxxxxxxxxxx
mov edx, 0x100584dc
mov dword [0x100716dc], eax
call fcn.100011f0
sub eax, 0xa
mov edx, 0x100584dc
push str.xxxxxxxxxxxxxxxx
mov dword [0x10071690], eax
call fcn.100011f0
sub eax, 0x29a
mov edx, 0x100584dc
push str.xxxxxxxxxxxxxxxx
mov dword [0x100716cc], eax
call fcn.100011f0
sub eax, 0x299
mov edx, 0x100584dc
push str.xxxxxxxxxxxxxxxx
mov dword [0x100716ac], eax
call fcn.100011f0
sub eax, 0x298
mov edx, 0x100584dc
push str.xxxxxxxxxxxxxxxx
mov dword [0x10071694], eax
call fcn.100011f0
add eax, 6
mov edx, 0x100584fc
push str.xxxxxxxxxx
mov dword [0x10071708], eax
call fcn.100011f0
push str.xxxxxxxxxx
mov edx, 0x10058508
mov dword [0x1007171c], eax
call fcn.100011f0
push str.xxxxx____x
mov edx, 0x10058520
mov dword [0x100716f4], eax
call fcn.100011f0
push str.xxxxxxxxxxxxxxxx
mov edx, 0x1005852c
mov dword [0x100716a8], eax
call fcn.100011f0
push str.xxxxxxxx
mov edx, 0x1005854c
mov dword [0x100716e4], eax
call fcn.100011f0
push str.xxxxxxxxxx
mov edx, 0x10058558
mov dword [0x100716a0], eax
call fcn.100011f0
push str.xx__xxxxxxxxx
mov edx, 0x10058578
mov dword [0x100716b8], eax
call fcn.100011f0
push str.xxxxxxxxx
mov edx, 0x10058594
mov dword [0x100716e0], eax
call fcn.100011f0
push str.xxxxxxxxxx
mov edx, 0x100585a0
mov dword [0x10071710], eax
call fcn.100011f0
push str.xxxxxxxxxx
mov edx, 0x100585ac
mov dword [0x100716f8], eax
call fcn.100011f0
add esp, 0x40
mov dword [0x10071704], eax
mov edx, 0x100585b8
push str.xxxxxxxx
call fcn.100011f0
push str.xxxx__xxx
mov edx, 0x100585d0
mov dword [0x1007169c], eax
call fcn.100011f0
mov dword [0x100716fc], eax
push str.xxxxxxxxxx
mov edx, 0x100585dc
call fcn.100011f0
push str.xxxxxxxxxx
mov edx, 0x100585e8
mov dword [0x1007170c], eax
call fcn.100011f0
push str.xxxxxxxxx
mov edx, 0x100585f4
mov dword [0x100716e8], eax
call fcn.100011f0
push str.xxxxxxxxx
mov edx, 0x10058600
mov dword [0x100716b0], eax
call fcn.100011f0
push str.xxxxxxxxxx
mov edx, 0x1005860c
mov dword [0x100716c8], eax
call fcn.100011f0
mov esi, dword [0x100716b0]
add esp, 0x1c
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [0x100716ec], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 3
push esi
call edi
movzx eax, word [0x10058618]
mov word [esi], ax
movzx eax, byte [0x1005861a]
mov byte [esi + 2], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 3
push esi
call edi
mov esi, dword [0x100716c8]
lea eax, [ebp - 8]
push eax
push 0x40
push 3
push esi
call edi
movzx eax, word [0x1005861c]
mov word [esi], ax
movzx eax, byte [0x1005861e]
mov byte [esi + 2], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 3
push esi
call edi
mov esi, dword [0x100716e0]
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push esi
call edi
mov eax, dword [0x10058620]
mov dword [esi], eax
movzx eax, word [0x10058624]
mov word [esi + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push esi
call edi
mov esi, dword [0x100716ec]
lea eax, [esi + 9]
mov dword [0x100716c4], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push esi
call edi
mov eax, 0x100013f0
mov dword [esi + 5], 0x90909090
sub eax, esi
mov byte [esi], 0xe9
sub eax, 5
mov dword [esi + 1], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 9
push esi
call edi
mov esi, dword [0x100716e8]
lea eax, [esi + 5]
mov dword [0x100716bc], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push esi
call edi
mov eax, 0x100013d0
mov byte [esi], 0xe9
sub eax, esi
sub eax, 5
mov dword [esi + 1], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push esi
call edi
mov esi, dword [0x100716e4]
lea eax, [esi + 6]
mov dword [0x100716f0], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push esi
call edi
mov eax, 0x100012f0
mov byte [esi + 5], 0x90
sub eax, esi
mov byte [esi], 0xe9
sub eax, 5
mov dword [esi + 1], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 6
push esi
call edi
mov esi, dword [0x10071710]
lea eax, [esi + 6]
mov dword [0x10071700], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push esi
call edi
mov eax, 0x10001310
mov byte [esi + 5], 0x90
sub eax, esi
mov byte [esi], 0xe9
sub eax, 5
mov dword [esi + 1], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 6
push esi
call edi
mov esi, dword [0x100716b8]
lea eax, [esi + 6]
mov dword [0x1007168c], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push esi
call edi
mov eax, 0x10001330
mov byte [esi + 5], 0x90
sub eax, esi
mov byte [esi], 0xe9
sub eax, 5
mov dword [esi + 1], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 6
push esi
call edi
mov esi, dword [0x100716f8]
lea eax, [esi + 8]
mov dword [0x100716d8], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push esi
call edi
mov eax, 0x10001350
mov dword [esi], 0x90909090
sub eax, esi
mov dword [esi + 4], 0x90909090
sub eax, 5
mov byte [esi], 0xe9
mov dword [esi + 1], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 8
push esi
call edi
mov esi, dword [0x10071704]
lea eax, [esi + 8]
mov dword [0x100716d4], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push esi
call edi
mov eax, 0x10001370
mov dword [esi], 0x90909090
sub eax, esi
mov dword [esi + 4], 0x90909090
sub eax, 5
mov byte [esi], 0xe9
mov dword [esi + 1], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 8
push esi
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
mov byte [0x10071586], 1
pop esi
call fcn.10055e44
mov esp, ebp
pop ebp
ret