Function at 0x1005da70
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [0x102df850], 1
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
jne 0x1005e4c3
movaps xmm0, xmmword [0x10102700]
movups xmmword [0x102be560], xmm0
mov dword [0x102be578], 0
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102be5c0], xmm0
mov word [0x102be57c], 0
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102be620], xmm0
mov dword [0x102be55c], 0xc942
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102be680], xmm0
mov dword [0x102be570], 0x43980000
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102be6e0], xmm0
mov dword [0x102be574], 0x43a40000
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102be740], xmm0
mov byte [0x102be57e], 0
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102be7a0], xmm0
mov dword [0x102be5d8], 0
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102be800], xmm0
mov word [0x102be5dc], 0
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102be860], xmm0
mov dword [0x102be5bc], 0xc93f
movaps xmm0, xmmword [0x10102870]
mov dword [0x102be5d0], 0x43150000
mov dword [0x102be5d4], 0x42080000
mov byte [0x102be5de], 0
mov dword [0x102be638], 0
mov word [0x102be63c], 0
mov dword [0x102be61c], 0xc940
mov dword [0x102be630], 0x43150000
mov dword [0x102be634], 0x42080000
mov byte [0x102be63e], 0
mov dword [0x102be698], 0
mov word [0x102be69c], 0
mov dword [0x102be67c], 0xc941
mov dword [0x102be690], 0x43150000
mov dword [0x102be694], 0x42080000
mov byte [0x102be69e], 0
mov dword [0x102be6f8], 0
mov word [0x102be6fc], 0
mov dword [0x102be6dc], 0xc93f
mov dword [0x102be6f0], 0x43150000
mov dword [0x102be6f4], 0x42080000
mov byte [0x102be6fe], 0
mov dword [0x102be758], 0
mov word [0x102be75c], 0
mov dword [0x102be73c], 0xc940
mov dword [0x102be750], 0x43150000
mov dword [0x102be754], 0x42080000
mov byte [0x102be75e], 0
mov dword [0x102be7b8], 0
mov word [0x102be7bc], 0
mov dword [0x102be79c], 0xc941
mov dword [0x102be7b0], 0x43150000
mov dword [0x102be7b4], 0x42080000
mov byte [0x102be7be], 0
mov dword [0x102be818], 0
mov word [0x102be81c], 0
mov dword [0x102be7fc], 0xc93f
mov dword [0x102be810], 0x43150000
mov dword [0x102be814], 0x42080000
mov byte [0x102be81e], 0
mov dword [0x102be878], 0
mov word [0x102be87c], 0
mov dword [0x102be85c], 0xc940
mov dword [0x102be870], 0x43150000
mov dword [0x102be874], 0x42080000
mov byte [0x102be87e], 0
mov dword [0x102be8d8], 0
mov word [0x102be8dc], 0
mov dword [0x102be8bc], 0xc941
movups xmmword [0x102be8c0], xmm0
mov dword [0x102be8d0], 0x43150000
mov dword [0x102be8d4], 0x42080000
mov byte [0x102be8de], 0
mov dword [0x102be938], 0
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102be920], xmm0
mov word [0x102be93c], 0
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102be980], xmm0
mov dword [0x102be91c], 0xc93f
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102be9e0], xmm0
mov dword [0x102be930], 0x43150000
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102bea40], xmm0
mov dword [0x102be934], 0x42080000
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102beaa0], xmm0
mov byte [0x102be93e], 0
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102beb00], xmm0
mov dword [0x102be998], 0
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102beb60], xmm0
mov word [0x102be99c], 0
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102bebc0], xmm0
mov dword [0x102be97c], 0xc940
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102bec20], xmm0
mov dword [0x102be990], 0x43150000
movaps xmm0, xmmword [0x10102870]
mov dword [0x102be994], 0x42080000
mov byte [0x102be99e], 0
mov dword [0x102be9f8], 0
mov word [0x102be9fc], 0
mov dword [0x102be9dc], 0xc941
mov dword [0x102be9f0], 0x43150000
mov dword [0x102be9f4], 0x42080000
mov byte [0x102be9fe], 0
mov dword [0x102bea58], 0
mov word [0x102bea5c], 0
mov dword [0x102bea3c], 0xc93f
mov dword [0x102bea50], 0x43150000
mov dword [0x102bea54], 0x42080000
mov byte [0x102bea5e], 0
mov dword [0x102beab8], 0
mov word [0x102beabc], 0
mov dword [0x102bea9c], 0xc940
mov dword [0x102beab0], 0x43150000
mov dword [0x102beab4], 0x42080000
mov byte [0x102beabe], 0
mov dword [0x102beb18], 0
mov word [0x102beb1c], 0
mov dword [0x102beafc], 0xc941
mov dword [0x102beb10], 0x43150000
mov dword [0x102beb14], 0x42080000
mov byte [0x102beb1e], 0
mov dword [0x102beb78], 0
mov word [0x102beb7c], 0
mov dword [0x102beb5c], 0xc93f
mov dword [0x102beb70], 0x43150000
mov dword [0x102beb74], 0x42080000
mov byte [0x102beb7e], 0
mov dword [0x102bebd8], 0
mov word [0x102bebdc], 0
mov dword [0x102bebbc], 0xc940
mov dword [0x102bebd0], 0x43150000
mov dword [0x102bebd4], 0x42080000
mov byte [0x102bebde], 0
mov dword [0x102bec38], 0
mov word [0x102bec3c], 0
mov dword [0x102bec1c], 0xc941
mov dword [0x102bec30], 0x43150000
mov dword [0x102bec34], 0x42080000
mov byte [0x102bec3e], 0
mov dword [0x102bec98], 0
mov word [0x102bec9c], 0
mov dword [0x102bec7c], 0xc93f
movups xmmword [0x102bec80], xmm0
mov dword [0x102bec90], 0x43150000
mov dword [0x102bec94], 0x42080000
mov byte [0x102bec9e], 0
mov dword [0x102becf8], 0
mov word [0x102becfc], 0
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102bece0], xmm0
mov dword [0x102becdc], 0xc940
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102bed40], xmm0
mov dword [0x102becf0], 0x43150000
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102beda0], xmm0
mov dword [0x102becf4], 0x42080000
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102bee00], xmm0
mov byte [0x102becfe], 0
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102bee60], xmm0
mov dword [0x102bed58], 0
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102beec0], xmm0
mov word [0x102bed5c], 0
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102bef20], xmm0
mov dword [0x102bed3c], 0xc941
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102bef80], xmm0
mov dword [0x102bed50], 0x43150000
movaps xmm0, xmmword [0x10102870]
movups xmmword [0x102befe0], xmm0
mov dword [0x102bed54], 0x42080000
movaps xmm0, xmmword [0x10102870]
mov byte [0x102bed5e], 0
mov dword [0x102bedb8], 0
mov word [0x102bedbc], 0
mov dword [0x102bed9c], 0xc93f
mov dword [0x102bedb0], 0x43150000
mov dword [0x102bedb4], 0x42080000
mov byte [0x102bedbe], 0
mov dword [0x102bee18], 0
mov word [0x102bee1c], 0
mov dword [0x102bedfc], 0xc940
mov dword [0x102bee10], 0x43150000
mov dword [0x102bee14], 0x42080000
mov byte [0x102bee1e], 0
mov dword [0x102bee78], 0
mov word [0x102bee7c], 0
mov dword [0x102bee5c], 0xc941
mov dword [0x102bee70], 0x43150000
mov dword [0x102bee74], 0x42080000
mov byte [0x102bee7e], 0
mov dword [0x102beed8], 0
mov word [0x102beedc], 0
mov dword [0x102beebc], 0xc93f
mov dword [0x102beed0], 0x43150000
mov dword [0x102beed4], 0x42080000
mov byte [0x102beede], 0
mov dword [0x102bef38], 0
mov word [0x102bef3c], 0
mov dword [0x102bef1c], 0xc940
mov dword [0x102bef30], 0x43150000
mov dword [0x102bef34], 0x42080000
mov byte [0x102bef3e], 0
mov dword [0x102bef98], 0
mov word [0x102bef9c], 0
mov dword [0x102bef7c], 0xc941
mov dword [0x102bef90], 0x43150000
mov dword [0x102bef94], 0x42080000
mov byte [0x102bef9e], 0
mov dword [0x102beff8], 0
mov word [0x102beffc], 0
mov dword [0x102befdc], 0xc93f
mov dword [0x102beff0], 0x43150000
mov dword [0x102beff4], 0x42080000
mov byte [0x102beffe], 0
mov dword [0x102bf058], 0
mov word [0x102bf05c], 0
mov dword [0x102bf03c], 0xc940
movups xmmword [0x102bf040], xmm0
mov dword [0x102bf050], 0x43150000
mov dword [0x102bf054], 0x42080000
mov byte [0x102bf05e], 0
mov dword [0x102bf0b8], 0
mov word [0x102bf0bc], 0
mov dword [0x102bf09c], 0xc941
movaps xmm0, xmmword [0x10102870]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d7179
movups xmmword [0x102bf0a0], xmm0
mov dword [0x102bf0b0], 0x43150000
mov dword [0x102bf0b4], 0x42080000
mov byte [0x102bf0be], 0
call esi
lea eax, [ebp - 4]
mov dword [0x4d7179], 0x1e0
push eax
push dword [ebp - 4]
push 4
push 0x4d7179
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d7183
call esi
lea eax, [ebp - 4]
mov byte [0x4d7183], 0
push eax
push dword [ebp - 4]
push 1
push 0x4d7183
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d6c73
call esi
lea eax, [ebp - 4]
mov dword [0x4d6c73], 0
push eax
push dword [ebp - 4]
push 4
push 0x4d6c73
call esi
push 0x4d70cb
push 0x4d70b3
push 0xe9
call fcn.100ce900
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
add esp, 0xc
push eax
push 0x40
push 1
push 0x4057e5
call esi
lea eax, [ebp - 4]
mov byte [0x4057e5], bl
push eax
push dword [ebp - 4]
push 1
push 0x4057e5
call esi
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x405881
call esi
lea eax, [ebp - 4]
mov byte [0x405881], bl
push eax
push dword [ebp - 4]
push 1
push 0x405881
call esi
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d6f66
call esi
lea eax, [ebp - 4]
mov byte [0x4d6f66], bl
push eax
push dword [ebp - 4]
push 1
push 0x4d6f66
call esi
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d7075
dec bl
call esi
lea eax, [ebp - 4]
mov byte [0x4d7075], bl
push eax
push dword [ebp - 4]
push 1
push 0x4d7075
call esi
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d70b0
dec bl
call esi
lea eax, [ebp - 4]
mov byte [0x4d70b0], bl
push eax
push dword [ebp - 4]
push 1
push 0x4d70b0
call esi
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d71e0
call esi
lea eax, [ebp - 4]
mov byte [0x4d71e0], bl
push eax
push dword [ebp - 4]
push 1
push 0x4d71e0
call esi
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d72c7
call esi
lea eax, [ebp - 4]
mov byte [0x4d72c7], bl
push eax
push dword [ebp - 4]
push 1
push 0x4d72c7
call esi
push 0x100603f0
push 0x40cd8c
push 0xe8
call fcn.100ce900
push 0x100603f0
push 0x483a0c
push 0xe8
call fcn.100ce900
push 0x100603f0
push 0x63d582
push 0xe8
call fcn.100ce900
push 0x1005ef50
push 0x4d5ee6
push 0xff
call fcn.100ce900
mov bl, byte [0x1027e68c]
lea eax, [ebp - 4]
add esp, 0x30
push eax
push 0x40
push 1
push 0x4d6c2c
call esi
lea eax, [ebp - 4]
mov byte [0x4d6c2c], bl
push eax
push dword [ebp - 4]
push 1
push 0x4d6c2c
call esi
push 0x1005d9f0
push 0x4d8af0
push 0xe9
call fcn.100ce900
push 0x100605f0
push 0x4849c0
push 0xe8
call fcn.100ce900
push 0x10060e70
push 0x4d6c3e
push 0xe8
call fcn.100ce900
push 0x10061260
push 0x405b10
push 0xe9
call fcn.100ce900
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
add esp, 0x30
push eax
push 0x40
push 1
push 0x4029e9
call esi
lea eax, [ebp - 4]
mov byte [0x4029e9], bl
push eax
push dword [ebp - 4]
push 1
push 0x4029e9
call esi
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4029f8
call esi
lea eax, [ebp - 4]
mov byte [0x4029f8], bl
push eax
push dword [ebp - 4]
push 1
push 0x4029f8
call esi
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x402a47
call esi
lea eax, [ebp - 4]
mov byte [0x402a47], bl
push eax
push dword [ebp - 4]
push 1
push 0x402a47
call esi
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4057e5
call esi
lea eax, [ebp - 4]
mov byte [0x4057e5], bl
push eax
push dword [ebp - 4]
push 1
push 0x4057e5
call esi
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x405881
call esi
lea eax, [ebp - 4]
mov byte [0x405881], bl
push eax
push dword [ebp - 4]
push 1
push 0x405881
call esi
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d6f66
call esi
lea eax, [ebp - 4]
mov byte [0x4d6f66], bl
push eax
push dword [ebp - 4]
push 1
push 0x4d6f66
call esi
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d7075
dec bl
call esi
lea eax, [ebp - 4]
mov byte [0x4d7075], bl
push eax
push dword [ebp - 4]
push 1
push 0x4d7075
call esi
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d70b0
dec bl
call esi
lea eax, [ebp - 4]
mov byte [0x4d70b0], bl
push eax
push dword [ebp - 4]
push 1
push 0x4d70b0
call esi
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d71e0
call esi
lea eax, [ebp - 4]
mov byte [0x4d71e0], bl
push eax
push dword [ebp - 4]
push 1
push 0x4d71e0
call esi
mov bl, byte [0x102df8b0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d72c7
call esi
lea eax, [ebp - 4]
mov byte [0x4d72c7], bl
push eax
push dword [ebp - 4]
push 1
push 0x4d72c7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4029c8
call esi
lea eax, [ebp - 4]
mov byte [0x4029c8], 0x68
push eax
push dword [ebp - 4]
push 1
push 0x4029c8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4029c9
call esi
lea eax, [ebp - 4]
mov byte [0x4029c9], 0xe
push eax
push dword [ebp - 4]
push 1
push 0x4029c9
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x403784
call esi
lea eax, [ebp - 4]
mov byte [0x403784], 1
push eax
push dword [ebp - 4]
push 1
push 0x403784
call esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret