Function at 0x100359c0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa0
mov eax, dword [0x10075368]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x10075c50], 0
mov ecx, 0x4aa440
push ebx
push esi
push edi
mov edi, 0x1006ece8
mov dword [ebp - 0x30], 0x4aa440
mov dword [ebp - 0x2c], 0x6df1bf
mov dword [ebp - 0x28], 0x6df1c4
mov dword [ebp - 0x24], 0x6df1c9
mov dword [ebp - 0x20], 0x6df20d
mov dword [ebp - 0x1c], 0x6ded1b
mov dword [ebp - 0x18], 0x6ded20
mov dword [ebp - 0x14], 0x6ded25
mov dword [ebp - 0x10], 0x5458e1
mov dword [ebp - 0xc], 0x49f57e
mov dword [ebp - 8], 0x49f4a5
mov dword [ebp - 0x5c], 0x1006ecdc
mov dword [ebp - 0x58], 0x1006ece0
mov dword [ebp - 0x54], 0x1006ece0
mov dword [ebp - 0x50], 0x1006ece0
mov dword [ebp - 0x4c], 0x1006ece0
mov dword [ebp - 0x48], 0x1006ece0
mov dword [ebp - 0x44], 0x1006ece0
mov dword [ebp - 0x40], 0x1006ece0
mov dword [ebp - 0x3c], 0x1006ece4
mov dword [ebp - 0x38], 0x1006ece4
mov dword [ebp - 0x34], 0x1006ece4
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x84], 0x1006ece0
mov dword [ebp - 0x80], 0x1006ece0
mov dword [ebp - 0x7c], 0x1006ece0
mov dword [ebp - 0x78], 0x1006ece0
mov dword [ebp - 0x74], 0x1006ecec
mov dword [ebp - 0x70], 0x1006ece0
mov dword [ebp - 0x6c], 0x1006ecf4
mov dword [ebp - 0x68], 0x1006ecf8
mov dword [ebp - 0x64], 0x1006ecf8
mov dword [ebp - 0x60], 0x1006ecf8
je 0x10035c8a
call fcn.10036670
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0x8c]
lea eax, [ebp - 0xa0]
push eax
call fcn.100363c0
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x98], 3
mov esi, dword [eax]
lea eax, [ebp - 0x94]
push eax
push 0x40
push 3
push esi
mov dword [ebp - 0x9c], esi
call ebx
test eax, eax
mov ax, word [0x1006ecdc]
setne byte [ebp - 0x90]
mov word [esi], ax
mov al, byte [0x1006ecde]
mov byte [esi + 2], al
cmp byte [ebp - 0x90], 0
je 0x10035b5e
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x8c]
push ecx
push eax
push dword [ebp - 0x98]
mov dword [ebp - 0x8c], eax
push dword [ebp - 0x9c]
call ebx
xor edi, edi
mov ecx, dword [ebp + edi - 0x2c]
call fcn.10036670
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0x8c]
lea eax, [ebp - 0xa0]
push eax
call fcn.100363c0
mov dword [ebp - 0x98], 2
mov esi, dword [eax]
lea eax, [ebp - 0x94]
push eax
push 0x40
push 2
push esi
mov dword [ebp - 0x9c], esi
call ebx
test eax, eax
mov eax, dword [ebp + edi - 0x58]
setne byte [ebp - 0x90]
mov ax, word [eax]
mov word [esi], ax
cmp byte [ebp - 0x90], 0
je 0x10035bdf
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x8c]
push ecx
push eax
push dword [ebp - 0x98]
mov dword [ebp - 0x8c], eax
push dword [ebp - 0x9c]
call ebx
add edi, 4
cmp edi, 0x1c
jl 0x10035b60
xor edi, edi
nop dword [eax]
mov ecx, dword [ebp + edi - 0x10]
call fcn.10036670
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0x8c]
lea eax, [ebp - 0xa0]
push eax
call fcn.100363c0
mov dword [ebp - 0x98], 1
mov esi, dword [eax]
lea eax, [ebp - 0x94]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x9c], esi
call ebx
test eax, eax
mov eax, dword [ebp + edi - 0x3c]
setne byte [ebp - 0x90]
mov al, byte [eax]
mov byte [esi], al
cmp byte [ebp - 0x90], 0
je 0x10035c6d
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x8c]
push ecx
push eax
push dword [ebp - 0x98]
mov dword [ebp - 0x8c], eax
push dword [ebp - 0x9c]
call ebx
add edi, 4
cmp edi, 0xc
jl 0x10035bf0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100398ff
mov esp, ebp
pop ebp
ret
call fcn.10036670
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0x8c]
lea eax, [ebp - 0xa0]
push eax
call fcn.100363c0
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x98], 3
mov esi, dword [eax]
lea eax, [ebp - 0x94]
push eax
push 0x40
push 3
push esi
mov dword [ebp - 0x9c], esi
call ebx
test eax, eax
mov ax, word [edi]
setne byte [ebp - 0x90]
mov word [esi], ax
mov al, byte [edi + 2]
mov byte [esi + 2], al
cmp byte [ebp - 0x90], 0
je 0x10035d0d
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x8c]
push ecx
push eax
push dword [ebp - 0x98]
mov dword [ebp - 0x8c], eax
push dword [ebp - 0x9c]
call ebx
mov ecx, 0x6ded1b
call fcn.10036670
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0x8c]
lea eax, [ebp - 0xa0]
push eax
call fcn.100363c0
mov dword [ebp - 0x98], 7
mov esi, dword [eax]
lea eax, [ebp - 0x94]
push eax
push 0x40
push 7
push esi
mov dword [ebp - 0x9c], esi
call ebx
test eax, eax
mov eax, dword [0x1006ecec]
setne byte [ebp - 0x90]
mov dword [esi], eax
mov ax, word [0x1006ecf0]
mov word [esi + 4], ax
mov al, byte [0x1006ecf2]
mov byte [esi + 6], al
cmp byte [ebp - 0x90], 0
je 0x10035d9c
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x8c]
push ecx
push eax
push dword [ebp - 0x98]
mov dword [ebp - 0x8c], eax
push dword [ebp - 0x9c]
call ebx
mov ecx, 0x6ded20
call fcn.10036670
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0x8c]
lea eax, [ebp - 0xa0]
push eax
call fcn.100363c0
mov dword [ebp - 0x98], 2
mov esi, dword [eax]
lea eax, [ebp - 0x94]
push eax
push 0x40
push 2
push esi
mov dword [ebp - 0x9c], esi
call ebx
test eax, eax
setne byte [ebp - 0x90]
xor eax, eax
mov word [esi], ax
cmp byte [ebp - 0x90], al
je 0x10035e16
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x8c]
push ecx
push eax
push dword [ebp - 0x98]
mov dword [ebp - 0x8c], eax
push dword [ebp - 0x9c]
call ebx
mov ecx, 0x6ded25
call fcn.10036670
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0x8c]
lea eax, [ebp - 0xa0]
push eax
call fcn.100363c0
mov dword [ebp - 0x98], 2
mov esi, dword [eax]
lea eax, [ebp - 0x94]
push eax
push 0x40
push 2
push esi
mov dword [ebp - 0x9c], esi
call ebx
test eax, eax
mov eax, 0x3333
setne byte [ebp - 0x90]
mov word [esi], ax
cmp byte [ebp - 0x90], 0
je 0x10035e94
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x8c]
push ecx
push eax
push dword [ebp - 0x98]
mov dword [ebp - 0x8c], eax
push dword [ebp - 0x9c]
call ebx
xor edi, edi
mov ecx, dword [ebp + edi - 0x2c]
call fcn.10036670
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0x8c]
lea eax, [ebp - 0xa0]
push eax
call fcn.100363c0
mov dword [ebp - 0x98], 2
mov esi, dword [eax]
lea eax, [ebp - 0x94]
push eax
push 0x40
push 2
push esi
mov dword [ebp - 0x9c], esi
call ebx
test eax, eax
mov eax, dword [ebp + edi - 0x84]
setne byte [ebp - 0x90]
mov ax, word [eax]
mov word [esi], ax
cmp byte [ebp - 0x90], 0
je 0x10035f18
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x8c]
push ecx
push eax
push dword [ebp - 0x98]
mov dword [ebp - 0x8c], eax
push dword [ebp - 0x9c]
call ebx
add edi, 4
cmp edi, 0xc
jl 0x10035e96
xor edi, edi
mov ecx, dword [ebp + edi - 0x10]
call fcn.10036670
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0x8c]
lea eax, [ebp - 0xa0]
push eax
call fcn.100363c0
mov dword [ebp - 0x98], 2
mov esi, dword [eax]
lea eax, [ebp - 0x94]
push eax
push 0x40
push 2
push esi
mov dword [ebp - 0x9c], esi
call ebx
test eax, eax
mov eax, dword [ebp + edi - 0x68]
setne byte [ebp - 0x90]
mov ax, word [eax]
mov word [esi], ax
cmp byte [ebp - 0x90], 0
je 0x10035fa5
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x8c]
push ecx
push eax
push dword [ebp - 0x98]
mov dword [ebp - 0x8c], eax
push dword [ebp - 0x9c]
call ebx
add edi, 4
cmp edi, 0xc
jl 0x10035f26
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100398ff
mov esp, ebp
pop ebp
ret