Function at 0x100125e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [ebp - 0x1c]
push esi
push edi
push eax
push 1
lea eax, [ebp - 0xd]
mov byte [ebp - 0xd], 0xe9
push eax
push 0x4cb90c
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call edi
mov eax, 0x100120e0
sub eax, 0x4cb911
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
push 0x4cb90d
call ebx
push eax
call edi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4cb911
call esi
mov eax, 0x4cb911
mov byte [eax], 0x90
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 1
push 0x4cb911
call esi
lea eax, [ebp - 0x14]
mov byte [ebp - 0xd], 0xe9
push eax
push 1
lea eax, [ebp - 0xd]
push eax
push 0x4cbaed
call ebx
push eax
call edi
mov eax, 0x10012120
sub eax, 0x4cbaf2
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x14]
push eax
push 4
lea eax, [ebp - 0x1c]
push eax
push 0x4cbaee
call ebx
push eax
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 2
push 0x4cbaf2
call esi
mov eax, 0x4cbaf2
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 2
push 0x4cbaf2
call esi
mov byte [ebp - 0xd], 0xe9
lea eax, [ebp - 0x14]
push eax
push 1
lea eax, [ebp - 0xd]
push eax
push 0x4cbd23
call ebx
push eax
call edi
mov eax, 0x100121a0
sub eax, 0x4cbd28
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x14]
push eax
push 4
lea eax, [ebp - 0x1c]
push eax
push 0x4cbd24
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
mov byte [ebp - 0xd], 0xe9
push eax
push 1
lea eax, [ebp - 0xd]
push eax
push 0x527df4
call ebx
push eax
call edi
mov eax, 0x10012160
sub eax, 0x527df9
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x14]
push eax
push 4
lea eax, [ebp - 0x1c]
push eax
push 0x527df5
call ebx
push eax
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x527df9
call esi
mov eax, 0x527df9
mov byte [eax], 0x90
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 1
push 0x527df9
call esi
lea eax, [ebp - 0x14]
mov byte [ebp - 0xd], 0xe9
push eax
push 1
lea eax, [ebp - 0xd]
push eax
push 0x4cbe92
call ebx
push eax
call edi
mov eax, 0x100121e0
sub eax, 0x4cbe97
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x14]
push eax
push 4
lea eax, [ebp - 0x1c]
push eax
push 0x4cbe93
call ebx
push eax
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4cbe97
call esi
mov eax, 0x4cbe97
mov byte [eax], 0x90
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 1
push 0x4cbe97
call esi
push 0
push 6
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x90909090
push eax
push 0x527ec0
mov word [ebp - 8], 0x9090
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
mov byte [ebp - 0xd], 0xe9
push eax
push 1
lea eax, [ebp - 0xd]
push eax
push 0x4400d3
call ebx
push eax
call edi
mov eax, 0x10012240
sub eax, 0x4400d8
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x14]
push eax
push 4
lea eax, [ebp - 0x1c]
push eax
push 0x4400d4
call ebx
push eax
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4400d8
call esi
mov eax, 0x4400d8
mov byte [eax], 0x90
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 1
push 0x4400d8
call esi
lea eax, [ebp - 0x14]
mov byte [ebp - 0xd], 0xe9
push eax
push 1
lea eax, [ebp - 0xd]
push eax
push 0x4d251d
call ebx
push eax
call edi
mov eax, 0x100124f0
sub eax, 0x4d2522
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x14]
push eax
push 4
lea eax, [ebp - 0x1c]
push eax
push 0x4d251e
call ebx
push eax
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4d2522
call esi
mov eax, 0x4d2522
mov byte [eax], 0x90
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 1
push 0x4d2522
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1002063c
mov esp, ebp
pop ebp
ret