Function at 0x1000d4b0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push 0xfdf10
push 0
mov esi, 0x100da9e8
push esi
call sub.MSVCR100.dll_memset
mov dword [0x4a982d], 0x488e
mov dword [0x6086ef], esi
mov dword [0x534410], esi
mov dword [0x534a39], esi
mov dword [0x534a48], esi
mov dword [0x5e000d], esi
mov dword [0x5e9780], esi
mov dword [0x5fa7e9], esi
mov dword [0x5fa844], esi
mov dword [0x5fa9bc], esi
mov dword [0x62c4e6], esi
mov dword [0x62c93b], esi
mov dword [0x62cadd], esi
mov dword [0x62cb5c], esi
mov eax, 0x100daa08
mov dword [0x44d909], eax
mov dword [0x44d9ca], eax
mov dword [0x44da8a], eax
mov dword [0x460bb8], eax
mov dword [0x461570], eax
mov dword [0x53d284], eax
mov dword [0x53df56], eax
mov dword [0x5484e4], eax
mov dword [0x5485f6], eax
mov dword [0x636ca2], eax
mov dword [0x636cc0], eax
mov dword [0x636ce9], eax
mov dword [0x636cfe], eax
mov dword [0x5e0006], eax
mov dword [0x5e9779], eax
mov dword [0x630a78], eax
mov dword [0x636d4f], eax
mov dword [0x636f6d], eax
mov dword [0x636fa0], eax
mov eax, 0x100daa0c
mov dword [0x44d923], eax
mov dword [0x44d9b2], eax
mov dword [0x44da74], eax
mov dword [0x460ba0], eax
mov dword [0x46142d], eax
mov dword [0x46155a], eax
mov dword [0x461b06], eax
mov dword [0x53d290], eax
mov dword [0x53df5f], eax
mov dword [0x548403], eax
mov dword [0x5484cc], eax
mov dword [0x5485e0], eax
mov dword [0x5e90d9], eax
mov dword [0x636cb1], eax
mov dword [0x636cd4], eax
mov dword [0x636cf2], eax
mov dword [0x636d0d], eax
mov dword [0x53bace], eax
mov dword [0x636d72], eax
mov dword [0x636fe5], eax
mov dword [0x63701a], eax
mov dword [0x6598d0], eax
mov dword [0x6599b5], eax
mov dword [0x659b2f], eax
mov dword [0x659b69], eax
mov dword [0x659ba2], eax
mov dword [0x659bec], eax
mov dword [0x659c28], eax
mov eax, 0x100daa10
mov dword [0x44d9d7], eax
mov dword [0x451f6b], eax
mov dword [0x451ff3], eax
mov dword [0x4529aa], eax
mov dword [0x4529fe], eax
mov dword [0x460bc5], eax
mov dword [0x4e5487], eax
mov dword [0x4e54d4], eax
add esp, 0xc
mov dword [0x4e606b], eax
mov dword [0x4e60b8], eax
mov dword [0x4e7acd], eax
mov dword [0x4e7b03], eax
mov dword [0x53d2a5], eax
mov dword [0x53dd95], eax
mov dword [0x5484f1], eax
mov dword [0x60d718], eax
mov eax, 0x100daa14
mov dword [0x44d997], eax
mov dword [0x5484b4], eax
mov dword [0x60c935], eax
mov dword [0x60c991], eax
mov dword [0x637259], eax
mov eax, 0x100daa1c
mov dword [0x460b0d], eax
mov dword [0x4631d9], eax
mov dword [0x463209], eax
mov dword [0x60ef87], eax
mov dword [0x44d95f], eax
mov dword [0x44d9ac], eax
mov dword [0x4603ba], eax
mov dword [0x460b9a], eax
mov dword [0x46321e], eax
mov dword [0x548422], eax
mov dword [0x5484c6], eax
mov dword [0x5e90c5], eax
mov dword [0x534407], eax
mov dword [0x62cad4], eax
mov dword [0x62cb53], eax
mov eax, 0x100db178
mov dword [0x5dfdf8], eax
mov dword [0x5e0375], eax
mov eax, 0x100db17c
mov dword [0x5dfe06], eax
mov dword [0x5e0383], eax
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x100db180
mov dword [0x5dff72], eax
mov dword [0x5e0432], eax
mov eax, 0x100db184
mov dword [0x5dff56], eax
mov dword [0x5e0419], eax
mov eax, 0x100db18c
mov dword [0x5dfe16], eax
mov dword [0x5dff68], eax
mov dword [0x5e0393], eax
mov dword [0x5e03cb], eax
mov dword [0x5e042b], eax
mov dword [0x5e8c12], 0x100db190
mov dword [0x59cd95], 0x100db1b8
mov dword [0x6044aa], 0x100db820
mov eax, 0x100dba50
mov dword [0x6044b3], eax
mov dword [0x6044ff], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x5fa7b0
mov dword [0x604552], 0x100dbf20
call esi
mov eax, 0x90909090
mov ecx, 0x5fa7b0
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x5fa7b0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 0x16
push 0x5fe283
mov dword [0x7d16fe8], 0x3a98
call esi
mov eax, 0x90909090
mov ecx, 0x5fe283
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov word [ecx + 0x14], ax
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 0x16
push 0x5fe283
call esi
push 0x1000d810
push 0x5fe283
mov bl, 0xe9
call fcn.1000ded0
add esp, 8
pop esi
pop ebx
mov esp, ebp
pop ebp
ret