Function at 0x1001da80
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [0x1005b00c]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x1005d800], 0
push ebx
mov ebx, ecx
jne 0x1001dc87
push esi
push edi
call fcn.1001d380
mov eax, dword [0x10062560]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea esi, [eax + 0x40]
test esi, esi
je 0x1001dadb
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x2c]
mov dword [esi], fcn.10006d70
push eax
push dword [ebp - 8]
push 4
push esi
call edi
mov eax, dword [0x10062560]
lea esi, [eax + 0x44]
test esi, esi
je 0x1001db04
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x30]
mov dword [esi], fcn.10006d70
push eax
push dword [ebp - 0xc]
push 4
push esi
call edi
mov eax, dword [0x10062560]
lea esi, [eax + 0x48]
test esi, esi
je 0x1001db2d
lea eax, [ebp - 0x10]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x34]
mov dword [esi], fcn.10006d70
push eax
push dword [ebp - 0x10]
push 4
push esi
call edi
mov eax, dword [0x10062560]
lea esi, [eax + 0x4c]
test esi, esi
je 0x1001db56
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x38]
mov dword [esi], fcn.10006d70
push eax
push dword [ebp - 0x14]
push 4
push esi
call edi
mov eax, dword [0x10062560]
lea esi, [eax + 0x50]
test esi, esi
je 0x1001db7f
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x3c]
mov dword [esi], fcn.10006d70
push eax
push dword [ebp - 0x18]
push 4
push esi
call edi
mov eax, dword [0x10062560]
lea esi, [eax + 0x54]
test esi, esi
je 0x1001dba8
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x40]
mov dword [esi], fcn.10006d70
push eax
push dword [ebp - 0x1c]
push 4
push esi
call edi
mov eax, dword [0x10062560]
lea esi, [eax + 0x58]
test esi, esi
je 0x1001dbd1
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x44]
mov dword [esi], fcn.10006d70
push eax
push dword [ebp - 0x20]
push 4
push esi
call edi
mov eax, dword [0x10062560]
cmp dword [0x1005e388], 0
jne 0x1001dc0f
lea esi, [eax + 0x38]
test esi, esi
je 0x1001dc08
mov eax, dword [esi]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x24]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x28]
mov dword [esi], 0x1001d210
push eax
push dword [ebp - 0x24]
push 4
push esi
call edi
mov eax, dword [ebp - 0x48]
jmp 0x1001dc0a
xor eax, eax
mov dword [0x1005e388], eax
cmp dword [0x10062388], 0
jne 0x1001dc7b
mov ecx, dword [0x10061f94]
mov eax, dword [0x1005e718]
add eax, 0x2f8
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov dword [ebp - 0x48], eax
test eax, eax
je 0x1001dc74
push 0xc
call fcn.10040384
add esp, 4
mov esi, eax
lea eax, [ebp - 0x28]
push eax
push 0x40
push 0xc
push esi
call edi
mov edx, dword [ebp - 0x48]
mov ecx, dword [edx]
mov dword [esi], ecx
mov ax, word [edx + 4]
mov word [esi + 4], ax
mov al, byte [edx + 6]
mov byte [esi + 6], al
lea eax, [esi + 7]
sub edx, eax
mov byte [eax], 0xe9
add edx, 2
mov dword [eax + 1], edx
add eax, 0xfffffff9
jmp 0x1001dc76
xor eax, eax
mov dword [0x10062388], eax
pop edi
mov dword [0x1005d800], 1
pop esi
call fcn.100160a0
mov ecx, dword [0x100623d8]
test ecx, ecx
jne 0x1001dca2
mov dword [0x10061cf4], 0x32
jmp 0x1001dcd6
cmp ecx, 1
jne 0x1001dcb3
mov dword [0x10061cf4], 6
jmp 0x1001dcd6
cmp ecx, 2
jne 0x1001dcc4
mov dword [0x10061cf4], 5
jmp 0x1001dcd6
mov eax, dword [0x10061cf4]
xor edx, edx
cmp ecx, 3
cmove eax, edx
mov dword [0x10061cf4], eax
call fcn.10013dd0
call fcn.10013e70
mov ecx, ebx
call fcn.10013fe0
mov ecx, ebx
call fcn.10015d50
call fcn.1001b960
mov ecx, ebx
call fcn.100176e0
mov ecx, ebx
call fcn.10017c60
call fcn.1001a540
call fcn.1001af80
call fcn.1001a650
call fcn.10018d00
call fcn.1001ae90
call fcn.10018de0
call fcn.1001b7b0
call fcn.1001b8a0
call fcn.1001b400
call fcn.1001b0f0
call fcn.1001baa0
call fcn.1001c1a0
call fcn.1001be60
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.1003fb29
mov esp, ebp
pop ebp
ret