Function at 0x10062d80
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Set console window title

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100fdc40
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push ebx
push esi
push edi
push 0
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push 0x105f5f68
push 1
mov dword [0x105f5f44], eax
call dword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
mov dword [0x105f5f48], eax
mov ecx, 0x105f5f98
mov eax, dword [0x345562c]
mov dword [0x105f5f4c], eax
mov dword [0x345562c], 0xc0001337
call fcn.100cf480
mov ecx, 0x105f6010
call fcn.100cf480
mov ecx, 0x105f604c
call fcn.100cf480
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 4
push 0x693970
mov dword [ebp - 0x10], 0x40
call ebx
lea eax, [ebp - 0x10]
mov dword [0x693970], 0xc301b0
push eax
push dword [ebp - 0x10]
push 4
push 0x693970
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 4
push 0x693970
call edi
mov esi, dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
push eax
call esi
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x40
push eax
push 0x40
push 4
push 0x480850
call ebx
lea eax, [ebp - 0x10]
mov dword [0x480850], 0xc300b0
push eax
push dword [ebp - 0x10]
push 4
push 0x480850
call ebx
push 4
push 0x480850
call edi
push eax
call esi
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x40
push eax
push 0x40
push 4
push 0x6096c0
call ebx
lea eax, [ebp - 0x10]
mov dword [0x6096c0], 0xc300b0
push eax
push dword [ebp - 0x10]
push 4
push 0x6096c0
call ebx
push 4
push 0x6096c0
call edi
push eax
call esi
mov dword [ebp - 0x10], 0x40
lea eax, [ebp - 0x10]
push eax
push 0x40
push 4
push 0x94ade0
call ebx
lea eax, [ebp - 0x10]
mov dword [0x94ade0], 0xc300b0
push eax
push dword [ebp - 0x10]
push 4
push 0x94ade0
call ebx
push 4
push 0x94ade0
call edi
push eax
call esi
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x40
push eax
push 0x40
push 4
push 0x6bbdf0
call ebx
lea eax, [ebp - 0x10]
mov dword [0x6bbdf0], 0xc301b0
push eax
push dword [ebp - 0x10]
push 4
push 0x6bbdf0
call ebx
push 4
push 0x6bbdf0
call edi
push eax
call esi
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x40
push eax
push 0x40
push 8
push 0x405040
call ebx
lea eax, [ebp - 0x10]
mov dword [0x405040], 0xffffffb8
push eax
mov dword [0x405044], 0xc3ff
push dword [ebp - 0x10]
push 8
push 0x405040
call ebx
push 8
push 0x405040
call edi
push eax
call esi
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x40
push eax
push 0x40
push 8
push 0x6414f0
call ebx
lea eax, [ebp - 0x10]
mov dword [0x6414f0], 0xffffffb8
push eax
mov dword [0x6414f4], 0xc3ff
push dword [ebp - 0x10]
push 8
push 0x6414f0
call ebx
push 8
push 0x6414f0
call edi
push eax
call esi
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x40
push eax
push 0x40
push 4
push 0x949690
call ebx
lea eax, [ebp - 0x10]
mov dword [0x949690], 0xc300b0
push eax
push dword [ebp - 0x10]
push 4
push 0x949690
call ebx
push 4
push 0x949690
call edi
push eax
call esi
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x40
push eax
push 0x40
push 8
push 0x6f4be0
call ebx
lea eax, [ebp - 0x10]
mov dword [0x6f4be0], 0xab8
push eax
mov dword [0x6f4be4], 0xc300
push dword [ebp - 0x10]
push 8
push 0x6f4be0
call ebx
push 8
push 0x6f4be0
call edi
push eax
call esi
call fcn.100d0fd0
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentThread]
call esi
push eax
call fcn.100d14a0
push 0x100637a0
push 0x105e6dec
call fcn.100d0850
call fcn.100d1030
call fcn.100d0fd0
call esi
push eax
call fcn.100d14a0
push 0x10063810
push 0x105e6dd8
call fcn.100d0850
call fcn.100d1030
call fcn.100d0fd0
call esi
push eax
call fcn.100d14a0
push 0x10063890
push 0x105e6df8
call fcn.100d0850
call fcn.100d1030
call fcn.100d0fd0
call esi
push eax
call fcn.100d14a0
push 0x10063a80
push 0x105e6e04
call fcn.100d0850
call fcn.100d1030
call fcn.100d0fd0
call esi
push eax
call fcn.100d14a0
push 0x10063b60
push 0x105e6de0
call fcn.100d0850
call fcn.100d1030
call fcn.100d0fd0
call esi
push eax
call fcn.100d14a0
push 0x10063d10
push 0x105e6df0
call fcn.100d0850
call fcn.100d1030
call fcn.100d0fd0
call esi
push eax
call fcn.100d14a0
push 0x10064080
push 0x105e6ddc
call fcn.100d0850
call fcn.100d1030
call fcn.100d0fd0
call esi
push eax
call fcn.100d14a0
push 0x10064130
push 0x105e6dd0
call fcn.100d0850
call fcn.100d1030
call fcn.100d0fd0
call esi
push eax
call fcn.100d14a0
push 0x10064a00
push 0x105e6de8
call fcn.100d0850
call fcn.100d1030
call fcn.100d0fd0
call esi
push eax
call fcn.100d14a0
push method.std::codecvt_char__char__struct__Mbstatet_.virtual_16
push 0x105e6e08
call fcn.100d0850
call fcn.100d1030
call fcn.100d0fd0
call esi
push eax
call fcn.100d14a0
push method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_52
push 0x105e6dd4
call fcn.100d0850
call fcn.100d1030
call fcn.100d0fd0
call esi
push eax
call fcn.100d14a0
push 0x10064b80
push 0x105e6de4
call fcn.100d0850
call fcn.100d1030
call fcn.100d0fd0
call esi
push eax
call fcn.100d14a0
push 0x10064e40
push 0x105e6e00
call fcn.100d0850
call fcn.100d1030
call fcn.100d0fd0
call esi
push eax
call fcn.100d14a0
push 0x10064ee0
push 0x105e6dfc
call fcn.100d0850
call fcn.100d1030
call fcn.100d0fd0
call esi
push eax
call fcn.100d14a0
push 0x10064f70
push 0x105e6df4
call fcn.100d0850
call fcn.100d1030
mov dword [ebp - 0x28], 0
push 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 4], 0xffffffff
push str.Serbware
lea ecx, [ebp - 0x28]
call fcn.1001fa30
call dword [sym.imp.KERNEL32.dll_AllocConsole]
push 0
call fcn.100ddf54
add esp, 4
push eax
push 0x105cfb7c
push str.CONIN_
call fcn.100e536d
add esp, 0xc
push 1
call fcn.100ddf54
add esp, 4
push eax
push 0x105cfb98
push str.CONOUT_
call fcn.100e536d
add esp, 0xc
push 2
call fcn.100ddf54
add esp, 4
push eax
push 0x105cfb98
push str.CONOUT_
call fcn.100e536d
add esp, 0xc
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 0x10
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x100632fa
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100632f0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006330b
push edx
push ecx
call fcn.100d5613
add esp, 8
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.100d9eff
int3