Function at 0x10008260
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov ecx, dword [0x10020210]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push ebx
push esi
mov esi, dword [0x1001ed74]
push edi
push 0x100262d0
push 0x1001ef5c
mov dword [ebp - 4], esi
call edx
mov ecx, dword [ebp + 8]
push eax
push esi
call fcn.10007e70
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [0x100262d0]
add esp, 0xc
xor edi, edi
mov dword [ebp - 8], edi
cmp dword [eax + edi*4], 0
je 0x10008324
mov eax, dword [eax + edi*4]
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1000831f
mov ecx, dword [0x100262d0]
lea ebx, [ecx + edi*4]
mov ecx, dword [0x10020210]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push 0x1001ef5c
call eax
mov ecx, dword [ebx]
cmp dword [ecx], eax
jne 0x1000831f
mov edx, dword [0x100262d0]
mov ecx, dword [0x10020210]
mov eax, dword [ecx]
lea ebx, [edx + edi*4]
mov edx, dword [eax + 4]
push 0x1001ef5c
call edx
mov ebx, dword [ebx]
mov edi, eax
add edi, dword [0x100222f4]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push ebx
call esi
mov edx, dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
push ecx
push edx
push 4
push ebx
mov dword [ebx], edi
call esi
mov edi, dword [ebp - 8]
mov eax, dword [0x100262d0]
mov ecx, dword [0x100262d4]
sub ecx, eax
inc edi
sar ecx, 2
mov dword [ebp - 8], edi
cmp edi, ecx
jbe 0x100082a6
mov eax, dword [0x1002279c]
mov edx, dword [ebp - 4]
mov ecx, dword [ebp + 8]
push 0x10026240
push eax
push edx
mov dword [0x100227ac], eax
call fcn.10007e70
mov eax, dword [0x10026240]
add esp, 0xc
xor ebx, ebx
mov dword [ebp - 8], ebx
cmp dword [eax + ebx*4], 0
je 0x100083b7
mov eax, dword [eax + ebx*4]
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
mov eax, dword [0x10026240]
jne 0x100083b7
mov edi, dword [eax + ebx*4]
mov ecx, dword [0x100227ac]
cmp dword [edi], ecx
jne 0x100083b7
mov edx, dword [0x100222f4]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push edi
lea ebx, [ecx + edx]
call esi
mov edx, dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
push ecx
push edx
push 4
push edi
mov dword [edi], ebx
call esi
mov eax, dword [0x10026240]
mov ebx, dword [ebp - 8]
mov ecx, dword [0x10026244]
sub ecx, eax
inc ebx
sar ecx, 2
mov dword [ebp - 8], ebx
cmp ebx, ecx
jbe 0x10008364
mov eax, dword [0x100227a0]
mov edx, dword [ebp - 4]
mov ecx, dword [ebp + 8]
push 0x10026180
push eax
push edx
mov dword [0x1001ef78], eax
call fcn.10007e70
mov eax, dword [0x10026180]
add esp, 0xc
xor ebx, ebx
mov dword [ebp - 8], ebx
cmp dword [eax + ebx*4], 0
je 0x10008446
mov eax, dword [eax + ebx*4]
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
mov eax, dword [0x10026180]
jne 0x10008446
mov edi, dword [eax + ebx*4]
mov ecx, dword [0x1001ef78]
cmp dword [edi], ecx
jne 0x10008446
mov edx, dword [0x100222f4]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push edi
lea ebx, [ecx + edx]
call esi
mov edx, dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
push ecx
push edx
push 4
push edi
mov dword [edi], ebx
call esi
mov eax, dword [0x10026180]
mov ebx, dword [ebp - 8]
mov ecx, dword [0x10026184]
sub ecx, eax
inc ebx
sar ecx, 2
mov dword [ebp - 8], ebx
cmp ebx, ecx
jbe 0x100083f3
mov edx, dword [0x10020420]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp + 8]
push 0x1002630c
push edx
push eax
call fcn.10007e70
mov eax, dword [0x1002630c]
add esp, 0xc
xor ebx, ebx
mov dword [ebp - 8], ebx
mov edi, edi
cmp dword [eax + ebx*4], 0
je 0x100084d3
mov ecx, dword [eax + ebx*4]
push 4
push ecx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
mov eax, dword [0x1002630c]
jne 0x100084d3
mov edi, dword [eax + ebx*4]
mov ecx, dword [0x10020420]
cmp dword [edi], ecx
jne 0x100084d3
mov edx, dword [0x100222f4]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push edi
lea ebx, [ecx + edx]
call esi
mov edx, dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
push ecx
push edx
push 4
push edi
mov dword [edi], ebx
call esi
mov eax, dword [0x1002630c]
mov ebx, dword [ebp - 8]
mov ecx, dword [0x10026310]
sub ecx, eax
inc ebx
sar ecx, 2
mov dword [ebp - 8], ebx
cmp ebx, ecx
jbe 0x10008480
mov ecx, dword [0x10020210]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push 0x100262ec
push 0x10022d5c
call eax
mov ecx, dword [ebp - 4]
push eax
push ecx
mov ecx, dword [ebp + 8]
call fcn.10007e70
mov eax, dword [0x100262ec]
add esp, 0xc
xor edi, edi
mov dword [ebp - 8], edi
cmp dword [eax + edi*4], 0
je 0x10008594
mov edx, dword [eax + edi*4]
push 4
push edx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1000858f
mov eax, dword [0x100262ec]
mov ecx, dword [0x10020210]
mov edx, dword [ecx]
lea ebx, [eax + edi*4]
mov eax, dword [edx + 4]
push 0x10022d5c
call eax
mov ecx, dword [ebx]
cmp dword [ecx], eax
jne 0x1000858f
mov edx, dword [0x100262ec]
mov ecx, dword [0x10020210]
mov eax, dword [ecx]
lea ebx, [edx + edi*4]
mov edx, dword [eax + 4]
push 0x10022d5c
call edx
mov ebx, dword [ebx]
mov edi, eax
add edi, dword [0x100222f4]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push ebx
call esi
mov edx, dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
push ecx
push edx
push 4
push ebx
mov dword [ebx], edi
call esi
mov edi, dword [ebp - 8]
mov eax, dword [0x100262ec]
mov ecx, dword [0x100262f0]
sub ecx, eax
inc edi
sar ecx, 2
mov dword [ebp - 8], edi
cmp edi, ecx
jbe 0x10008517
mov ecx, dword [0x10020210]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push 0x100262a0
push 0x10021a1c
call eax
mov ecx, dword [ebp - 4]
push eax
push ecx
mov ecx, dword [ebp + 8]
call fcn.10007e70
mov eax, dword [0x100262a0]
add esp, 0xc
xor edi, edi
mov dword [ebp - 8], edi
lea esp, [esp]
cmp dword [eax + edi*4], 0
je 0x1000865d
mov edx, dword [eax + edi*4]
push 4
push edx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10008658
mov eax, dword [0x100262a0]
mov ecx, dword [0x10020210]
mov edx, dword [ecx]
lea ebx, [eax + edi*4]
mov eax, dword [edx + 4]
push 0x10021a1c
call eax
mov ecx, dword [ebx]
cmp dword [ecx], eax
jne 0x10008658
mov edx, dword [0x100262a0]
mov ecx, dword [0x10020210]
mov eax, dword [ecx]
lea ebx, [edx + edi*4]
mov edx, dword [eax + 4]
push 0x10021a1c
call edx
mov ebx, dword [ebx]
mov edi, eax
add edi, dword [0x100222f4]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push ebx
call esi
mov edx, dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
push ecx
push edx
push 4
push ebx
mov dword [ebx], edi
call esi
mov edi, dword [ebp - 8]
mov eax, dword [0x100262a0]
mov ecx, dword [0x100262a4]
sub ecx, eax
inc edi
sar ecx, 2
mov dword [ebp - 8], edi
cmp edi, ecx
jbe 0x100085e0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret