Function at 0x100082e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x10048400]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x55edc4
mov dword [ebp - 0xc], 0x55edc4
call esi
test eax, eax
je 0x1000834b
mov eax, dword [ebp - 0xc]
mov edx, 0x90909090
mov ecx, 0x10008220
sub ecx, eax
sub ecx, 5
mov dword [eax], edx
mov eax, dword [ebp - 0xc]
mov word [eax + 4], dx
mov eax, dword [ebp - 0xc]
mov byte [eax], 0xe9
inc dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov dword [eax], ecx
dec dword [ebp - 0xc]
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push dword [ebp - 0xc]
call esi
push edi
lea eax, [ebp - 8]
mov dword [ebp - 0xc], 0x55dfcb
push eax
push 0x40
push 5
push 0x55dfcb
call esi
mov edi, 0x10008240
test eax, eax
je 0x100083a1
mov eax, dword [ebp - 0xc]
mov ecx, edi
sub ecx, eax
sub ecx, 5
mov dword [eax], 0x90909090
mov eax, dword [ebp - 0xc]
mov byte [eax + 4], 0x90
mov eax, dword [ebp - 0xc]
mov byte [eax], 0xe9
inc dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov dword [eax], ecx
dec dword [ebp - 0xc]
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push dword [ebp - 0xc]
call esi
lea eax, [ebp - 8]
mov dword [ebp - 0xc], 0x55dfcb
push eax
push 0x40
push 5
push 0x55dfcb
call esi
test eax, eax
je 0x100083ef
mov eax, dword [ebp - 0xc]
sub edi, eax
sub edi, 5
mov dword [eax], 0x90909090
mov eax, dword [ebp - 0xc]
mov byte [eax + 4], 0x90
mov eax, dword [ebp - 0xc]
mov byte [eax], 0xe9
inc dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov dword [eax], edi
dec dword [ebp - 0xc]
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push dword [ebp - 0xc]
call esi
lea eax, [ebp - 8]
mov dword [ebp - 0xc], 0x749636
push eax
push 0x40
push 0xa
push 0x749636
call esi
pop edi
test eax, eax
je 0x1000844a
mov eax, dword [ebp - 0xc]
mov edx, 0x90909090
mov ecx, 0x10008260
sub ecx, eax
sub ecx, 5
mov dword [eax], edx
mov eax, dword [ebp - 0xc]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0xc]
mov word [eax + 8], dx
mov eax, dword [ebp - 0xc]
mov byte [eax], 0xe9
inc dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov dword [eax], ecx
dec dword [ebp - 0xc]
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xa
push dword [ebp - 0xc]
call esi
lea eax, [ebp - 8]
mov dword [ebp - 0xc], 0x6a25d9
push eax
push 0x40
push 5
push 0x6a25d9
call esi
test eax, eax
je 0x1000849d
mov eax, dword [ebp - 0xc]
mov ecx, 0x10008280
sub ecx, eax
sub ecx, 5
mov dword [eax], 0x90909090
mov eax, dword [ebp - 0xc]
mov byte [eax + 4], 0x90
mov eax, dword [ebp - 0xc]
mov byte [eax], 0xe9
inc dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov dword [eax], ecx
dec dword [ebp - 0xc]
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push dword [ebp - 0xc]
call esi
lea eax, [ebp - 8]
mov dword [ebp - 0xc], 0x51ee4b
push eax
push 0x40
push 6
push 0x51ee4b
call esi
test eax, eax
je 0x100084f1
mov eax, dword [ebp - 0xc]
mov edx, 0x90909090
mov ecx, 0x100082a0
sub ecx, eax
sub ecx, 5
mov dword [eax], edx
mov eax, dword [ebp - 0xc]
mov word [eax + 4], dx
mov eax, dword [ebp - 0xc]
mov byte [eax], 0xe9
inc dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov dword [eax], ecx
dec dword [ebp - 0xc]
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push dword [ebp - 0xc]
call esi
lea eax, [ebp - 8]
mov dword [ebp - 0xc], 0x66ce20
push eax
push 0x40
push 9
push 0x66ce20
call esi
test eax, eax
je 0x1000854e
mov eax, dword [ebp - 0xc]
mov ecx, 0x100082c0
sub ecx, eax
sub ecx, 5
mov dword [eax], 0x90909090
mov eax, dword [ebp - 0xc]
mov dword [eax + 4], 0x90909090
mov eax, dword [ebp - 0xc]
mov byte [eax + 8], 0x90
mov eax, dword [ebp - 0xc]
mov byte [eax], 0xe9
inc dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov dword [eax], ecx
dec dword [ebp - 0xc]
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push dword [ebp - 0xc]
call esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.10017809
mov esp, ebp
pop ebp
ret