Function at 0x1000fdd0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ecx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x4caedc
call esi
mov eax, 0x1003d6b0
mov byte [0x4caedc], 0xe9
sub eax, 0x4caee1
mov dword [0x4caedd], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x4caedc
call esi
call fcn.100416f0
call fcn.10040a30
call fcn.1003a180
call fcn.1003af60
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x48099c
call esi
mov eax, 0x1003b8a0
mov byte [0x48099c], 0xe9
sub eax, 0x4809a1
mov dword [0x48099d], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x48099c
call esi
call fcn.1003bb60
call fcn.1003d050
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x444384
call esi
mov eax, 0x10070020
mov byte [0x444384], 0xe9
sub eax, 0x444389
mov dword [0x444385], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x444384
call esi
call fcn.1006ffa0
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x4a386c
call esi
mov eax, 0x1003bc40
mov byte [0x4a386c], 0xe9
sub eax, 0x4a3871
mov dword [0x4a386d], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x4a386c
call esi
call fcn.1003cc70
call fcn.1003c060
call fcn.1006a8f0
mov dword [0x51946c], 0x1006a1d0
mov dword [0x519470], 0x1006a1e0
mov dword [0x519494], 0x1006a1f0
call fcn.1002edc0
call fcn.10074590
mov ecx, 0x5023c8
call fcn.1003d6c0
lea eax, [esp + 4]
push eax
push 0x40
push 4
push 0x4425cc
call esi
mov eax, 0x1003d9e0
sub eax, 0x4425d0
mov dword [0x4425cc], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 4
push 0x4425cc
call esi
call fcn.1002d1d0
call fcn.1006cca0
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x451604
call esi
mov eax, 0x1006f5e0
mov byte [0x451604], 0xe9
sub eax, 0x451609
mov dword [0x451605], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x451604
call esi
call fcn.10032890
call fcn.10033990
call fcn.10037270
call fcn.1006b100
call fcn.1003dcd0
call fcn.1001d0c0
call fcn.10052150
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x499a24
call esi
mov eax, 0x1006e770
mov byte [0x499a24], 0xe9
sub eax, 0x499a29
mov dword [0x499a25], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x499a24
call esi
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x44acfc
call esi
mov eax, 0x1005c470
mov byte [0x44acfc], 0xe9
sub eax, 0x44ad01
mov dword [0x44acfd], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x44acfc
call esi
call fcn.1005cc60
call fcn.1005c020
call fcn.10056ba0
call fcn.10044b40
call fcn.10044390
call fcn.10049610
call fcn.10075d00
call fcn.10076810
call fcn.10070d80
call fcn.10023a40
call fcn.10029bd0
call fcn.1002a520
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x42a518
call esi
mov eax, 0x1002a780
mov byte [0x42a518], 0xe9
sub eax, 0x42a51d
mov dword [0x42a519], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x42a518
call esi
call fcn.1002c030
call fcn.1006dc10
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x495ea8
call esi
mov eax, 0x1006dc80
mov byte [0x495ea8], 0xe9
sub eax, 0x495ead
mov dword [0x495ea9], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x495ea8
call esi
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x418378
call esi
mov eax, 0x1002f370
mov byte [0x418378], 0xe9
sub eax, 0x41837d
mov dword [0x418379], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x418378
call esi
call fcn.10018e80
call fcn.10021380
call fcn.1001f0c0
call fcn.10024130
call fcn.10024f90
call fcn.100207b0
call fcn.10026ef0
call fcn.10073e30
call fcn.100786a0
call fcn.1006f290
pop esi
add esp, 4
jmp fcn.10066f50