Function at 0x10018490
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0xe61144
call edi
lea eax, [ebp - 4]
mov byte [0xe61144], 0xa0
push eax
push dword [ebp - 4]
push 1
push 0xe61144
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d1e69
call edi
lea eax, [ebp - 4]
mov byte [0x4d1e69], 0xeb
push eax
push dword [ebp - 4]
push 1
push 0x4d1e69
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d228d
call edi
lea eax, [ebp - 4]
mov byte [0x4d228d], 0xe9
push eax
push dword [ebp - 4]
push 1
push 0x4d228d
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d228e
call edi
lea eax, [ebp - 4]
mov byte [0x4d228e], 0x8b
push eax
push dword [ebp - 4]
push 1
push 0x4d228e
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d228f
call edi
lea eax, [ebp - 4]
mov byte [0x4d228f], 0
push eax
push dword [ebp - 4]
push 1
push 0x4d228f
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d2290
call edi
lea eax, [ebp - 4]
mov byte [0x4d2290], 0
push eax
push dword [ebp - 4]
push 1
push 0x4d2290
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d2291
call edi
lea eax, [ebp - 4]
mov byte [0x4d2291], 0
push eax
push dword [ebp - 4]
push 1
push 0x4d2291
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d559c
call edi
lea eax, [ebp - 4]
mov byte [0x4d559c], 0xeb
push eax
push dword [ebp - 4]
push 1
push 0x4d559c
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x633f7a
call edi
lea eax, [ebp - 4]
mov byte [0x633f7a], 0xeb
push eax
push dword [ebp - 4]
push 1
push 0x633f7a
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x634403
call edi
lea eax, [ebp - 4]
mov byte [0x634403], 0xeb
push eax
push dword [ebp - 4]
push 1
push 0x634403
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x63e6c4
call edi
lea eax, [ebp - 4]
mov byte [0x63e6c4], 0xeb
push eax
push dword [ebp - 4]
push 1
push 0x63e6c4
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d2246
call edi
lea eax, [ebp - 4]
mov byte [0x4d2246], 0xeb
push eax
push dword [ebp - 4]
push 1
push 0x4d2246
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x501163
call edi
lea eax, [ebp - 4]
mov byte [0x501163], 0xeb
push eax
push dword [ebp - 4]
push 1
push 0x501163
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x40af0a
call edi
lea eax, [ebp - 4]
mov byte [0x40af0a], 0
push eax
push dword [ebp - 4]
push 1
push 0x40af0a
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x40b4bc
call edi
lea eax, [ebp - 4]
mov byte [0x40b4bc], 0x50
push eax
push dword [ebp - 4]
push 1
push 0x40b4bc
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x40b4c5
call edi
lea eax, [ebp - 4]
mov byte [0x40b4c5], 0x50
push eax
push dword [ebp - 4]
push 1
push 0x40b4c5
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x40b4cf
call edi
lea eax, [ebp - 4]
mov byte [0x40b4cf], 0x18
push eax
push dword [ebp - 4]
push 1
push 0x40b4cf
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x40af0a
call edi
lea eax, [ebp - 4]
mov byte [0x40af0a], 0
push eax
push dword [ebp - 4]
push 1
push 0x40af0a
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x40afd5
call edi
lea eax, [ebp - 4]
mov byte [0x40afd5], 0xeb
push eax
push dword [ebp - 4]
push 1
push 0x40afd5
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x777fd6
call edi
lea eax, [ebp - 4]
mov byte [0x777fd6], 0x70
push eax
push dword [ebp - 4]
push 1
push 0x777fd6
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x777fd7
call edi
lea eax, [ebp - 4]
mov byte [0x777fd7], 0x17
push eax
push dword [ebp - 4]
push 1
push 0x777fd7
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4ebec7
call edi
lea eax, [ebp - 4]
mov byte [0x4ebec7], 0x3c
push eax
push dword [ebp - 4]
push 1
push 0x4ebec7
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x5c4004
call edi
lea eax, [ebp - 4]
mov byte [0x5c4004], 0x3c
push eax
push dword [ebp - 4]
push 1
push 0x5c4004
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7e40bb
call edi
lea eax, [ebp - 4]
mov byte [0x7e40bb], 0x3c
push eax
push dword [ebp - 4]
push 1
push 0x7e40bb
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x81b546
call edi
mov byte [0x81b546], 0x3c
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 1
push 0x81b546
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x81b58d
call edi
lea eax, [ebp - 4]
mov byte [0x81b58d], 0x3c
push eax
push dword [ebp - 4]
push 1
push 0x81b58d
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x86e284
call edi
lea eax, [ebp - 4]
mov byte [0x86e284], 0x3c
push eax
push dword [ebp - 4]
push 1
push 0x86e284
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x86e44c
call edi
lea eax, [ebp - 4]
mov byte [0x86e44c], 0x3c
push eax
push dword [ebp - 4]
push 1
push 0x86e44c
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x86e573
call edi
lea eax, [ebp - 4]
mov byte [0x86e573], 0x3c
push eax
push dword [ebp - 4]
push 1
push 0x86e573
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x86f8fc
call edi
lea eax, [ebp - 4]
mov byte [0x86f8fc], 0x3c
push eax
push dword [ebp - 4]
push 1
push 0x86f8fc
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7da373
call edi
lea eax, [ebp - 4]
mov byte [0x7da373], 0xb7
push eax
push dword [ebp - 4]
push 1
push 0x7da373
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7e1c44
call edi
lea eax, [ebp - 4]
mov byte [0x7e1c44], 0xb7
push eax
push dword [ebp - 4]
push 1
push 0x7e1c44
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x52100d
call edi
lea eax, [ebp - 4]
mov byte [0x52100d], 0xeb
push eax
push dword [ebp - 4]
push 1
push 0x52100d
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x9543c4
call edi
lea eax, [ebp - 4]
mov byte [0x9543c4], 0
push eax
push dword [ebp - 4]
push 1
push 0x9543c4
call edi
push 0x4d1dc2
push 0x4d1cf0
push 0xe9
call fcn.10027910
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 0x1b
push 0xd20170
call edi
mov eax, 0xd20170
mov ecx, 0x90909090
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov word [eax + 0x18], cx
mov byte [eax + 0x1a], cl
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x1b
push 0xd20170
call edi
cmp dword [0x10192800], 0
mov eax, 0xeb
mov ebx, 0x75
cmove ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x64cbd1
call edi
lea eax, [ebp - 4]
mov byte [0x64cbd1], bl
push eax
push dword [ebp - 4]
push 1
push 0x64cbd1
call edi
mov bl, byte [0x10192804]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x64cbd0
call edi
lea eax, [ebp - 4]
mov byte [0x64cbd0], bl
push eax
push dword [ebp - 4]
push 1
push 0x64cbd0
call edi
mov bl, byte [0x10192804]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x95ceef
call edi
lea eax, [ebp - 4]
mov byte [0x95ceef], bl
push eax
push dword [ebp - 4]
push 1
push 0x95ceef
call edi
mov bl, byte [0x10192804]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x95cf14
call edi
lea eax, [ebp - 4]
mov byte [0x95cf14], bl
push eax
push dword [ebp - 4]
push 1
push 0x95cf14
call edi
mov bl, byte [0x101925e8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0xe61f68
inc bl
call edi
lea eax, [ebp - 4]
mov byte [0xe61f68], bl
push eax
push dword [ebp - 4]
push 1
push 0xe61f68
call edi
mov bl, byte [0x101925ea]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0xe61f69
add bl, 2
call edi
lea eax, [ebp - 4]
mov byte [0xe61f69], bl
push eax
push dword [ebp - 4]
push 1
push 0xe61f69
call edi
mov bl, byte [0x101925eb]
lea eax, [ebp - 4]
push eax
add bl, 3
push 0x40
push 1
push 0xe61f6a
call edi
lea eax, [ebp - 4]
mov byte [0xe61f6a], bl
push eax
push dword [ebp - 4]
push 1
push 0xe61f6a
call edi
mov bl, byte [0x101925ed]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0xe61f6b
add bl, 4
call edi
lea eax, [ebp - 4]
mov byte [0xe61f6b], bl
push eax
push dword [ebp - 4]
push 1
push 0xe61f6b
call edi
mov bl, byte [0x101925ee]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0xe61f6c
add bl, 5
call edi
lea eax, [ebp - 4]
mov byte [0xe61f6c], bl
push eax
push dword [ebp - 4]
push 1
push 0xe61f6c
call edi
movzx esi, word [0x101925e6]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0xe609e4
call edi
lea eax, [ebp - 4]
mov word [0xe609e4], si
push eax
push dword [ebp - 4]
push 2
push 0xe609e4
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d0e09
call edi
lea eax, [ebp - 4]
mov dword [0x4d0e09], 0x10192601
push eax
push dword [ebp - 4]
push 4
push 0x4d0e09
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d9f55
call edi
lea eax, [ebp - 4]
mov dword [0x4d9f55], 0x10192621
push eax
push dword [ebp - 4]
push 4
push 0x4d9f55
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x5c914e
call edi
lea eax, [ebp - 4]
mov byte [0x5c914e], 0
push eax
push dword [ebp - 4]
push 1
push 0x5c914e
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 0x14
push 0x63e908
call edi
mov eax, 0x63e908
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x14
push 0x63e908
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 0x20
push 0xe611b2
call edi
push 0x20
push 0x101925c5
push 0xe611b2
call fcn.1008ab30
add esp, 0xc
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x20
push 0xe611b2
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 0x11
push 0xe61f70
call edi
mov eax, dword [0x101925f0]
mov ecx, 0xe61f70
mov dword [ecx], eax
mov eax, dword [0x101925f4]
mov dword [ecx + 4], eax
mov eax, dword [0x101925f8]
mov dword [ecx + 8], eax
mov eax, dword [0x101925fc]
mov dword [ecx + 0xc], eax
mov al, byte [0x10192600]
mov byte [ecx + 0x10], al
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x11
push ecx
call edi
push 0x100238a0
push 0x65fd79
push 0xff
call fcn.10027910
mov edx, 0xc
mov ecx, 0x4d9d39
call fcn.10027950
mov edx, 7
mov ecx, 0x4d9d45
call fcn.10027950
mov edx, 0xf
mov ecx, 0x4d9efc
call fcn.10027950
mov edx, 8
mov ecx, 0x4dac5c
call fcn.10027950
mov edx, 5
mov ecx, 0x5451f7
call fcn.10027950
mov edx, 8
mov ecx, 0x545230
call fcn.10027950
mov edx, 8
mov ecx, 0x5a52e9
call fcn.10027950
mov edx, 0x1026a380
mov ecx, 0x6a
call fcn.100279d0
mov edx, 0x1026a290
mov ecx, 0x6b
call fcn.100279d0
mov edx, 0x1026a470
mov ecx, 0x6c
call fcn.100279d0
push 0x100173c0
push 0x5b96e8
push 0xe8
call fcn.10027910
add esp, 0x18
push 0
push ecx
push str.DataEnc1.dat
call fcn.1001d4f0
push 1
push ecx
push str.DataDec2.dat
call fcn.1001d4f0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret