Function at 0x100012e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x10010040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esi, 0x5a3b1c
push eax
push 0x40
push 1
push esi
mov dword [ebp - 8], 0
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x3c639c
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0xb8
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x3c63a1
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0xeb
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x3cb872
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0xeb
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
add esi, 0x34dda2
mov dword [ebp - 8], 0
push 6
push esi
call edi
mov eax, dword [0x1000d340]
push 0
push dword [ebp - 8]
mov dword [esi], eax
movzx eax, word [0x1000d344]
push 6
mov word [esi + 4], ax
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 6
add esi, 0x34ddaa
mov dword [ebp - 8], 0
push esi
call edi
mov eax, dword [0x1000d348]
push 0
push dword [ebp - 8]
mov dword [esi], eax
movzx eax, word [0x1000d34c]
push 6
push esi
mov word [esi + 4], ax
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 2
add esi, 0x35fa4a
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov ebx, 0x9090
push 2
push esi
mov word [esi], bx
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 2
add esi, 0x282a5c
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov eax, 0xc340
push 2
push esi
mov word [esi], ax
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x399a98
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0xeb
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 2
add esi, 0x3a159b
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov word [esi], bx
push 2
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x361176
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0xeb
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x36143c
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x43ee96
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x3b
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x43ee99
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x85
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x43eea9
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x3b
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
add esi, 0x43eeac
mov dword [ebp - 8], 0
push 0x40
push 1
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x85
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x38e9f1
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0xff
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 2
add esi, 0x4b7d3
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov word [esi], bx
push 2
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x3a14db
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0xeb
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 6
add esi, 0x2026dc
mov dword [ebp - 8], 0
push esi
call edi
mov eax, dword [0x1000d350]
push 0
push dword [ebp - 8]
mov dword [esi], eax
movzx eax, word [0x1000d354]
push 6
push esi
mov word [esi + 4], ax
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
add esi, 0xc838d
mov dword [ebp - 8], 0
push 1
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x8c
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x28e1de
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0xeb
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 2
add esi, 0x34f2a8
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov word [esi], bx
push 2
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x34f2e9
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0
push 1
push esi
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1000b66a
mov esp, ebp
pop ebp
ret