Function at 0x1000dd90
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x1004a434]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10081438]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10081f18]
cmp eax, dword [ecx + 4]
jle 0x1000ddf3
push 0x10081f18
call fcn.10014ed2
add esp, 4
cmp dword [0x10081f18], 0xffffffff
jne 0x1000ddf3
push 0x10035720
mov dword [0x10081f30], 0x10043494
call fcn.10014d54
push 0x10081f18
call fcn.10014e88
add esp, 8
push ebx
push esi
push edi
push 0x10037f02
push 0xa
mov dword [ebp - 8], 0
call fcn.10014fa8
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov esi, eax
mov ebx, dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
add esp, 8
test esi, esi
je 0x1000de8b
lea eax, [ebp - 8]
mov byte [esi], 0xe9
push eax
push 0x40
mov ecx, 0x1000e150
sub ecx, 0x547cc1
mov dword [esi + 1], ecx
push 0xa
mov dword [esi + 5], 0x90909090
push 0x547cbc
mov byte [esi + 9], 0x90
call edi
test eax, eax
je 0x1000de8b
movq xmm0, qword [esi]
mov ecx, 0x547cbc
movq qword [ecx], xmm0
mov ax, word [esi + 8]
mov word [ecx + 8], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xa
push ecx
call edi
test eax, eax
je 0x1000de8b
push 0xa
push 0x547cbc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
push esi
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
mov esi, eax
add esp, 8
test esi, esi
je 0x1000df09
lea eax, [ebp - 8]
mov byte [esi], 0xe9
push eax
push 0x40
mov ecx, 0x1000e180
sub ecx, 0x547f04
push 6
mov dword [esi + 1], ecx
push 0x547eff
mov byte [esi + 5], 0x90
call edi
test eax, eax
je 0x1000df09
mov eax, dword [esi]
mov ecx, 0x547eff
mov dword [ecx], eax
mov ax, word [esi + 4]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push ecx
call edi
test eax, eax
je 0x1000df09
push 6
push 0x547eff
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
push esi
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
mov esi, eax
add esp, 8
test esi, esi
je 0x1000df87
lea eax, [ebp - 8]
mov byte [esi], 0xe9
push eax
push 0x40
mov ecx, 0x1000e230
sub ecx, 0x547f85
push 6
mov dword [esi + 1], ecx
push 0x547f80
mov byte [esi + 5], 0x90
call edi
test eax, eax
je 0x1000df87
mov eax, dword [esi]
mov ecx, 0x547f80
mov dword [ecx], eax
mov ax, word [esi + 4]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push ecx
call edi
test eax, eax
je 0x1000df87
push 6
push 0x547f80
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
push esi
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 7
mov dword [ebp - 8], 0
call fcn.10014fa8
mov esi, eax
add esp, 8
test esi, esi
je 0x1000e010
mov ecx, 0x1000e2b0
mov byte [esi], 0xe9
sub ecx, 0x547fb8
mov eax, 0x90909090
mov dword [esi + 1], ecx
mov word [esi + 5], ax
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x547fb3
call edi
test eax, eax
je 0x1000e010
mov eax, dword [esi]
mov ecx, 0x547fb3
mov dword [ecx], eax
mov ax, word [esi + 4]
mov word [ecx + 4], ax
mov al, byte [esi + 6]
mov byte [ecx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push ecx
call edi
test eax, eax
je 0x1000e010
push 7
push 0x547fb3
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
push esi
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 5
mov dword [ebp - 8], 0
call fcn.10014fa8
mov esi, eax
add esp, 8
test esi, esi
je 0x1000e088
lea eax, [ebp - 8]
mov byte [esi], 0xe9
push eax
push 0x40
mov ecx, 0x1000e2d0
push 5
sub ecx, 0x47db84
push 0x47db7f
mov dword [esi + 1], ecx
call edi
test eax, eax
je 0x1000e088
mov eax, dword [esi]
mov ecx, 0x47db7f
mov dword [ecx], eax
mov al, byte [esi + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push ecx
call edi
test eax, eax
je 0x1000e088
push 5
push 0x47db7f
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
push esi
call fcn.10014d9a
add esp, 4
mov ecx, dword [ebp - 4]
mov al, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100148fc
mov esp, ebp
pop ebp
ret