Function at 0x10012cd0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [0x10059898]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x44]
push esi
push edi
push eax
push 0x40
push 5
push 0x5a3b82
call ebx
mov byte [0x5a3b82], 0xe9
mov eax, 0x10013090
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffa5c479
mov dword [0x5a3b83], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x5a3b82
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 5
push 0x5a3b9c
call ebx
mov byte [0x5a3b9c], 0xe9
mov eax, 0x100130a0
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffa5c45f
mov dword [0x5a3b9d], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x5a3b9c
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 5
push 0x5a3ba9
call ebx
mov byte [0x5a3ba9], 0xe9
mov eax, 0x100130b0
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffa5c452
mov dword [0x5a3baa], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x5a3ba9
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 5
push 0x40a7b6
call ebx
mov byte [0x40a7b6], 0xe9
mov eax, 0x100130c0
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffbf5845
mov dword [0x40a7b7], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x40a7b6
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 5
push 0x432bac
call ebx
mov byte [0x432bac], 0xe9
mov eax, 0x10013120
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffbcd44f
mov dword [0x432bad], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x432bac
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 1
push 0x432bb1
call ebx
mov eax, 0x432bb1
mov byte [eax], 0x90
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 1
push 0x432bb1
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 5
push 0x468d00
call ebx
mov byte [0x468d00], 0xe9
mov eax, 0x10013160
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffb972fb
mov dword [0x468d01], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x468d00
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 2
push 0x468d05
call ebx
mov eax, 0x468d05
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 2
push 0x468d05
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [ebp - 0x3c]
push 0
push 0x24
push eax
push 0x4324b1
mov dword [ebp - 0x3c], 0xa6f981
mov dword [ebp - 0x38], 0x19720000
mov dword [ebp - 0x34], 0x17c8e8d
mov dword [ebp - 0x30], 0x41890000
mov dword [ebp - 0x2c], 0x38c031fc
mov dword [ebp - 0x28], 0x1940f01
mov dword [ebp - 0x24], 0x41380774
mov dword [ebp - 0x20], 0x41940f01
mov dword [ebp - 0x1c], 0x204e8b01
call edi
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call esi
lea eax, [ebp - 0x44]
push eax
push 0x40
push 5
push 0x432c69
call ebx
mov byte [0x432c69], 0xe9
mov eax, 0x10013180
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffbcd392
mov dword [0x432c6a], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x432c69
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 5
push 0x5a3c5f
call ebx
mov byte [0x5a3c5f], 0xe9
mov eax, 0x100131c0
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffa5c39c
mov dword [0x5a3c60], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x5a3c5f
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 1
push 0x5a3c64
call ebx
mov eax, 0x5a3c64
mov byte [eax], 0x90
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 1
push 0x5a3c64
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 1
push 0x432c87
call ebx
lea eax, [ebp - 0x40]
mov byte [0x432c87], 6
push eax
push dword [ebp - 0x44]
push 1
push 0x432c87
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 1
push 0x432bb3
call ebx
lea eax, [ebp - 0x40]
mov byte [0x432bb3], 3
push eax
push dword [ebp - 0x44]
push 1
push 0x432bb3
call ebx
push 0
push 8
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x17c868a
push eax
push 0x4328b5
mov dword [ebp - 8], 0xc0840000
call edi
push eax
call esi
push 0
push 8
lea eax, [ebp - 0xc]
push eax
push 0x432913
call edi
push eax
call esi
push 0
push 8
lea eax, [ebp - 0xc]
push eax
push 0x432ebd
call edi
push eax
call esi
push 0
push 8
lea eax, [ebp - 0xc]
push eax
push 0x432ef7
call edi
push eax
call esi
push 0
push 0xa
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0x17c878a
push eax
push 0x433606
mov dword [ebp - 0x14], 0x6a0000
mov word [ebp - 0x10], 0xc084
call edi
push eax
call esi
push 0
push 0xa
lea eax, [ebp - 0x18]
push eax
push 0x433649
call edi
push eax
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1002f2fb
mov esp, ebp
pop ebp
ret