Function at 0x100022c0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
push 0x10002730
push 0x4d9d0e
mov bl, 0xe8
call fcn.10016440
push 0x10002910
push 0x40b154
mov bl, 0xe9
call fcn.10016440
push 0x10002990
push 0x64a79a
or bl, 0xff
call fcn.10016440
push 0x10002990
push 0x64a85f
or bl, 0xff
call fcn.10016440
push 0x10002990
push 0x656e03
or bl, 0xff
call fcn.10016440
push 0x10002990
push 0x64ab3d
or bl, 0xff
call fcn.10016440
push 0x10002990
push 0x64ac02
or bl, 0xff
call fcn.10016440
push 0x10002990
push 0x63ddf2
or bl, 0xff
call fcn.10016440
add esp, 0x40
push 0x10002990
push 0x63df89
or bl, 0xff
call fcn.10016440
push 0x10002990
push 0x63ea4c
or bl, 0xff
call fcn.10016440
push 0x10002990
push 0x64ca0c
or bl, 0xff
call fcn.10016440
push 0x10002990
push 0x77faf9
or bl, 0xff
call fcn.10016440
push 0x10002990
push 0x81071b
or bl, 0xff
call fcn.10016440
push 0x10002990
push 0x81079b
or bl, 0xff
call fcn.10016440
push 0x10002850
push 0x47fe31
or bl, 0xff
call fcn.10016440
push 0x10002850
push 0x59890d
or bl, 0xff
call fcn.10016440
add esp, 0x40
push 0x10002850
push 0x59a399
or bl, 0xff
call fcn.10016440
push 0x10002850
push 0x59a93c
or bl, 0xff
call fcn.10016440
push 0x10002850
push 0x59b13b
or bl, 0xff
call fcn.10016440
push 0x10002850
push 0x5a4261
or bl, 0xff
call fcn.10016440
push 0x10002850
push 0x5a4d52
or bl, 0xff
call fcn.10016440
push 0x10002850
push 0x5b6117
or bl, 0xff
call fcn.10016440
push 0x10002850
push 0x65a6ce
or bl, 0xff
call fcn.10016440
push 0x10002850
push 0x727987
or bl, 0xff
call fcn.10016440
add esp, 0x40
push 0x10002850
push 0x7861f1
or bl, 0xff
call fcn.10016440
push 0x10002850
push 0x7d32fa
or bl, 0xff
call fcn.10016440
push 0x10002850
push 0x7d3b0d
or bl, 0xff
call fcn.10016440
push 0x100028d0
push 0x7d2b0c
mov bl, 0xe8
call fcn.10016440
push 0x100029c0
push 0x8317bd
mov bl, 0xe9
call fcn.10016440
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x28
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d9d3b
call esi
mov edi, 0x1013dac0
lea ecx, [ebp - 4]
push ecx
mov dword [0x4d9d3b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4d9d3b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4dac60
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4dac60], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4dac60
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7b55338
call esi
lea ecx, [ebp - 4]
mov dword [0x7b55338], 0xa
push ecx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7b55338
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d597b
call esi
mov edi, 0x1013dac4
lea ecx, [ebp - 4]
push ecx
mov dword [0x4d597b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4d597b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4da289
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4da289], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4da289
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4da297
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4da297], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4da297
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4da3a2
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4da3a2], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4da3a2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4da3ce
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4da3ce], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4da3ce
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4da3d9
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4da3d9], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4da3d9
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x63d326
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x63d326], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x63d326
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x642112
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x642112], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x642112
call esi
push 0x100029f0
push 0x4da280
call fcn.10016440
push 0x10002a20
push 0x4da3a1
call fcn.10016440
push 0x59b00e
push 0x59affa
mov bl, 0xe8
call fcn.10016440
push 0x720894
push 0x71ae92
mov bl, 0xe9
call fcn.10016440
push 0x720894
push 0x71b1a3
call fcn.10016440
push 0x58811f
push 0x5880f0
call fcn.10016440
add esp, 0x30
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x588447
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x588447], 0xfff
mov edx, dword [ebp - 4]
push edx
push 4
push 0x588447
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret