Function at 0x1000be00
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x50f6cf
call esi
mov edi, 0x10038cac
lea ecx, [ebp - 4]
push ecx
mov dword [0x50f6cf], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x50f6cf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f89fb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f89fb], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f89fb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x505c19
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x505c19], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x505c19
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x505c70
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x505c70], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x505c70
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x505dd1
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x505dd1], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x505dd1
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x529a46
call esi
mov dword [0x529a46], edi
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x529a46
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x529ea5
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x529ea5], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x529ea5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x52a06b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x52a06b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x52a06b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x40ff3b
call esi
mov edi, 0x10038ccc
lea ecx, [ebp - 4]
push ecx
mov dword [0x40ff3b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x40ff3b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x410919
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x410919], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x410919
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x478c2e
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x478c2e], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x478c2e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x479711
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x479711], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x479711
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x47f4f1
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x47f4f1], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x47f4f1
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x47f619
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x47f619], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x47f619
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f89f4
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f89f4], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f89f4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x40ff23
call esi
mov edi, 0x10038cd0
lea ecx, [ebp - 4]
push ecx
mov dword [0x40ff23], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x40ff23
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4107c6
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4107c6], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4107c6
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x410901
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x410901], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x410901
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x410b9f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x410b9f], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x410b9f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x47850b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x47850b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x47850b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x478c42
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x478c42], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x478c42
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x479702
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x479702], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x479702
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x47f41d
call esi
lea ecx, [ebp - 4]
mov dword [0x47f41d], edi
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x47f41d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x47f4d9
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x47f4d9], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x47f4d9
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x47f601
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x47f601], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x47f601
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f8298
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f8298], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f8298
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x409faf
call esi
mov edi, 0x10038cd4
lea ecx, [ebp - 4]
push ecx
mov dword [0x409faf], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x409faf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x40a03f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x40a03f], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x40a03f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x40a79a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x40a79a], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x40a79a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x40a7f1
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x40a7f1], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x40a7f1
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x40ff48
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x40ff48], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x40ff48
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x441067
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x441067], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x441067
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x44109a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x44109a], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x44109a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4416c6
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4416c6], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4416c6
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4416fe
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4416fe], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4416fe
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x478c37
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x478c37], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x478c37
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x479562
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x479562], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x479562
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x47f4fe
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x47f4fe], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x47f4fe
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x511f15
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x511f15], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x511f15
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x47f4c1
call esi
mov edi, 0x10038cd8
lea ecx, [ebp - 4]
push ecx
mov dword [0x47f4c1], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x47f4c1
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5114a3
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5114a3], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5114a3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x40f706
call esi
mov edi, 0x10038ce0
lea ecx, [ebp - 4]
push ecx
mov dword [0x40f706], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x40f706
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x40fe90
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x40fe90], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x40fe90
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x40ff1d
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x40ff1d], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x40ff1d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x47f436
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x47f436], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x47f436
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x47f4d3
call esi
lea ecx, [ebp - 4]
mov dword [0x47f4d3], edi
push ecx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x47f4d3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f8284
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f8284], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f8284
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x52a062
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x52a062], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x52a062
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f0105
call esi
mov edi, 0x1003943c
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f0105], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f0105
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f036c
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f036c], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f036c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f0114
call esi
mov edi, 0x10039440
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f0114], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f0114
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f037a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f037a], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f037a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f0284
call esi
mov edi, 0x10039444
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f0284], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f0284
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f0420
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f0420], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f0420
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f026b
call esi
mov edi, 0x10039448
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f026b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f026b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f0407
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f0407], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f0407
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f0125
call esi
mov edi, 0x10039450
lea ecx, [ebp - 4]
mov dword [0x4f0125], edi
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x4f0125
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f027d
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f027d], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f027d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f038b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f038b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f038b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f0419
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f0419], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f0419
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f7e01
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4f7e01], 0x10039454
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4f7e01
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4c106f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4c106f], 0x1003947c
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4c106f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x50cb5b
call esi
lea ecx, [ebp - 4]
mov dword [0x50cb5b], 0x10039ae4
push ecx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x50cb5b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x50cb61
call esi
mov edi, 0x10039d14
lea ecx, [ebp - 4]
push ecx
mov dword [0x50cb61], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x50cb61
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x50cba7
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x50cba7], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x50cba7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x50cbf1
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x50cbf1], 0x1003a1e4
mov edx, dword [ebp - 4]
push edx
push 4
push 0x50cbf1
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret