Function at 0x10001940
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [0x1de3cc4], 0x4b0
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push esi
jne case.default.0x10001a3c
mov esi, dword [0x169e534]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x17b8
push esi
call ebx
test eax, eax
je 0x1000198c
mov eax, dword [ebp - 4]
mov cl, byte [0x10042944]
lea edx, [ebp - 4]
push edx
push eax
push 1
push esi
mov byte [esi], cl
call ebx
mov esi, dword [0x169e534]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
add esi, 0x1268
push esi
call ebx
test eax, eax
je 0x100019bc
mov ecx, dword [ebp - 4]
mov dl, byte [0x10042938]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push esi
mov byte [esi], dl
call ebx
cmp dword [0x10050d54], 0
je 0x10001a24
mov esi, dword [0x169e534]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
add esi, 0x348
push esi
call ebx
test eax, eax
je 0x100019f4
mov edx, dword [ebp - 4]
mov al, byte [0x10042940]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push esi
mov byte [esi], al
call ebx
mov esi, dword [0x169e534]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x34c
push esi
call ebx
test eax, eax
je 0x10001a24
mov eax, dword [ebp - 4]
mov cl, byte [0x10042940]
lea edx, [ebp - 4]
push edx
push eax
push 1
push esi
mov byte [esi], cl
call ebx
mov eax, dword [0x100515e4]
test eax, eax
je case.default.0x10001a3c
dec eax
cmp eax, 0x13
ja case.default.0x10001a3c
push edi
jmp dword [eax*4 + 0x10001fe0]
mov ecx, dword [0x1004dcc8]
push ecx
jmp 0x10001af5
mov edx, dword [0x1004dccc]
jmp 0x10001af4
mov eax, dword [0x1004dcd0]
push eax
jmp 0x10001af5
mov ecx, dword [0x1004dcd4]
push ecx
jmp 0x10001af5
mov edx, dword [0x1004dcd8]
jmp 0x10001af4
mov eax, dword [0x1004dcdc]
push eax
jmp 0x10001af5
mov ecx, dword [0x1004dce0]
push ecx
jmp 0x10001af5
mov edx, dword [0x1004dce4]
jmp 0x10001af4
mov eax, dword [0x1004dce8]
push eax
jmp 0x10001af5
mov ecx, dword [0x1004dcec]
push ecx
jmp 0x10001af5
mov edx, dword [0x1004dcf0]
jmp 0x10001af4
mov eax, dword [0x1004dcf4]
push eax
jmp 0x10001af5
mov ecx, dword [0x1004dcf8]
push ecx
jmp 0x10001af5
mov edx, dword [str._r_f_v_n_t_b_a]
jmp 0x10001af4
mov eax, dword [0x1004dd00]
push eax
jmp 0x10001af5
mov ecx, dword [0x1004dd04]
push ecx
jmp 0x10001af5
mov edx, dword [0x1004dd08]
jmp 0x10001af4
mov eax, dword [0x1004dd0c]
push eax
jmp 0x10001af5
mov ecx, dword [0x1004dd10]
push ecx
jmp 0x10001af5
mov edx, dword [0x1004dd14]
push edx
mov edi, dword [0x169e534]
mov esi, 1
add edi, 0x17b0
call fcn.10001570
add esp, 4
pop edi
mov esi, dword [0x10050520]
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push esi
call ebx
test eax, eax
je 0x10001b44
mov cx, word [0x1004308c]
mov word [esi], cx
mov ecx, dword [ebp - 4]
mov dl, byte [0x1004308e]
lea eax, [ebp - 4]
push eax
push ecx
push 3
push esi
mov byte [esi + 2], dl
call ebx
mov esi, dword [0x100515b8]
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push esi
call ebx
test eax, eax
je 0x10001b6f
mov edx, dword [ebp - 4]
mov ax, word [0x10043090]
lea ecx, [ebp - 4]
push ecx
push edx
push 2
push esi
mov word [esi], ax
call ebx
mov esi, dword [0x10050d70]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push esi
call ebx
test eax, eax
je 0x10001b99
mov eax, dword [ebp - 4]
mov cl, byte [0x10043094]
lea edx, [ebp - 4]
push edx
push eax
push 1
push esi
mov byte [esi], cl
call ebx
mov esi, dword [0x100515c8]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push esi
call ebx
test eax, eax
je 0x10001bc3
mov ecx, dword [ebp - 4]
mov dl, byte [0x10043094]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push esi
mov byte [esi], dl
call ebx
lea edx, [ebp - 4]
push edx
push 0x40
push 0x64
push 0x1dea120
call ebx
test eax, eax
je 0x10001bfb
push 0x64
push str.Nida_Hani_Maisa__3__Created_By_:_Dinan
push 0x1dea120
call sub.MSVCR100.dll_memcpy
mov ecx, dword [ebp - 4]
add esp, 0xc
lea eax, [ebp - 4]
push eax
push ecx
push 0x64
push 0x1dea120
call ebx
lea edx, [ebp - 4]
push edx
push 0x40
push 0x24
push 0xb037d8
call ebx
test eax, eax
je 0x10001c33
push 0x24
push str.SIZE_20_FONT_Segoe_Print_BOLD_0_
push 0xb037d8
call sub.MSVCR100.dll_memcpy
mov ecx, dword [ebp - 4]
add esp, 0xc
lea eax, [ebp - 4]
push eax
push ecx
push 0x24
push 0xb037d8
call ebx
mov esi, dword [0x10051630]
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push esi
call ebx
test eax, eax
je 0x10001c5e
mov edx, dword [ebp - 4]
mov ax, word [0x10043088]
lea ecx, [ebp - 4]
push ecx
push edx
push 2
push esi
mov word [esi], ax
call ebx
mov esi, dword [0x10050528]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push esi
call ebx
test eax, eax
je 0x10001c8a
mov eax, dword [ebp - 4]
mov cx, word [0x10043088]
lea edx, [ebp - 4]
push edx
push eax
push 2
push esi
mov word [esi], cx
call ebx
mov esi, dword [0x10050554]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push esi
call ebx
test eax, eax
je 0x10001cb4
mov ecx, dword [ebp - 4]
mov dl, byte [0x1004294c]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push esi
mov byte [esi], dl
call ebx
mov esi, dword [0x10050d9c]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push esi
call ebx
test eax, eax
je 0x10001cdd
mov edx, dword [ebp - 4]
mov al, byte [0x10043094]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push esi
mov byte [esi], al
call ebx
mov esi, dword [0x10051634]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push esi
call ebx
test eax, eax
je 0x10001d07
mov eax, dword [ebp - 4]
mov cl, byte [0x10043094]
lea edx, [ebp - 4]
push edx
push eax
push 1
push esi
mov byte [esi], cl
call ebx
mov esi, dword [0x10050540]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push esi
call ebx
test eax, eax
je 0x10001d31
mov ecx, dword [ebp - 4]
mov dl, byte [0x10043094]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push esi
mov byte [esi], dl
call ebx
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push 0x5d8b1c
call ebx
test eax, eax
je 0x10001d64
mov cx, word [0x10043088]
mov eax, 0x5d8b1c
lea edx, [ebp - 4]
push edx
mov word [eax], cx
mov eax, dword [ebp - 4]
push eax
push 2
push 0x5d8b1c
call ebx
mov esi, dword [0x10050568]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push esi
call ebx
test eax, eax
je 0x10001d90
mov ecx, dword [ebp - 4]
mov dx, word [0x10043088]
lea eax, [ebp - 4]
push eax
push ecx
push 2
push esi
mov word [esi], dx
call ebx
mov esi, dword [0x10051650]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push esi
call ebx
test eax, eax
je 0x10001db9
mov edx, dword [ebp - 4]
mov al, byte [0x100430e8]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push esi
mov byte [esi], al
call ebx
mov esi, dword [0x10050d84]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push esi
call ebx
test eax, eax
je 0x10001de5
mov eax, dword [ebp - 4]
mov cx, word [0x10043088]
lea edx, [ebp - 4]
push edx
push eax
push 2
push esi
mov word [esi], cx
call ebx
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x1df80b8
call ebx
test eax, eax
je 0x10001e15
mov al, byte [0x1004294c]
mov edx, 0x1df80b8
lea ecx, [ebp - 4]
push ecx
mov byte [edx], al
mov edx, dword [ebp - 4]
push edx
push 1
push 0x1df80b8
call ebx
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x55781a
call ebx
test eax, eax
je 0x10001e46
mov dl, byte [0x100430e8]
mov ecx, 0x55781a
lea eax, [ebp - 4]
push eax
mov byte [ecx], dl
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0x55781a
call ebx
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push 0x5cec18
call ebx
test eax, eax
je 0x10001e77
mov cl, byte [0x100430e8]
mov eax, 0x5cec18
lea edx, [ebp - 4]
push edx
mov byte [eax], cl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x5cec18
call ebx
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x4daf63
call ebx
test eax, eax
je 0x10001ea7
mov al, byte [0x100430e8]
mov edx, 0x4daf63
lea ecx, [ebp - 4]
push ecx
mov byte [edx], al
mov edx, dword [ebp - 4]
push edx
push 1
push 0x4daf63
call ebx
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x82fed7
call ebx
test eax, eax
je 0x10001ed8
mov dl, byte [0x100430e8]
mov ecx, 0x82fed7
lea eax, [ebp - 4]
push eax
mov byte [ecx], dl
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0x82fed7
call ebx
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push 0x63a502
call ebx
test eax, eax
je 0x10001f09
mov cl, byte [0x10043094]
mov eax, 0x63a502
lea edx, [ebp - 4]
push edx
mov byte [eax], cl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x63a502
call ebx
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push 0x5ce030
call ebx
test eax, eax
je 0x10001f3b
mov ax, word [0x10043088]
mov edx, 0x5ce030
lea ecx, [ebp - 4]
push ecx
mov word [edx], ax
mov edx, dword [ebp - 4]
push edx
push 2
push 0x5ce030
call ebx
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x7060f3
call ebx
test eax, eax
je 0x10001f6e
mov dx, word [0x10043088]
mov ecx, 0x7060f3
lea eax, [ebp - 4]
push eax
mov word [ecx], dx
mov ecx, dword [ebp - 4]
push ecx
push 2
push 0x7060f3
call ebx
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push 0x76283c
call ebx
test eax, eax
je 0x10001fa1
mov cx, word [0x10043088]
mov eax, 0x76283c
lea edx, [ebp - 4]
push edx
mov word [eax], cx
mov eax, dword [ebp - 4]
push eax
push 2
push 0x76283c
call ebx
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push 0x8951e5
call ebx
test eax, eax
je 0x10001fd3
mov ax, word [0x10043088]
mov edx, 0x8951e5
lea ecx, [ebp - 4]
push ecx
mov word [edx], ax
mov edx, dword [ebp - 4]
push edx
push 2
push 0x8951e5
call ebx
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret