Function at 0x10042be0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push edi
push eax
push 0x40
push 5
push 0x5b993a
call esi
mov eax, 0x5b993a
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 5
push 0x5b993a
call esi
push 0x10041580
push 0x5edda9
push 0xe8
call fcn.100cfb50
push 0x100424a0
push 0x4d7eb1
push 0xe8
call fcn.100cfb50
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
add esp, 0x18
cmp dword [0x1025c268], 4
jne 0x10042d49
mov ebx, dword [0x1025c26c]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d75f0
dec ebx
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x10042c9d
lea eax, [ebp - 8]
mov dword [0x4d75f0], ebx
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 4
push 0x4d75f0
call esi
test eax, eax
jne 0x10042c9f
call edi
push 0x100413a0
push 0x4d76fb
push 0xe8
call fcn.100cfb50
push 0x100413a0
push 0x4d79c3
push 0xe8
call fcn.100cfb50
add esp, 0x18
mov dword [ebp - 4], 0
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d7a0e
call esi
test eax, eax
je 0x10042d09
lea eax, [ebp - 8]
mov dword [0x4d7a0e], 0x1e0
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 4
push 0x4d7a0e
call esi
test eax, eax
jne 0x10042d0b
call edi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x4d7a18
call esi
test eax, eax
je 0x10042d47
lea eax, [ebp - 8]
mov byte [0x4d7a18], 0
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x4d7a18
call esi
test eax, eax
jne 0x10042d49
call edi
cmp dword [0x1025c270], 4
jne 0x10042ef7
mov ebx, dword [0x1025c274]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d6c2c
dec ebx
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x10042d98
lea eax, [ebp - 8]
mov dword [0x4d6c2c], ebx
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 4
push 0x4d6c2c
call esi
test eax, eax
jne 0x10042d9a
call edi
push 0x100413a0
push 0x4d712a
push 0xe8
call fcn.100cfb50
push 0x10042690
push 0x57f020
push 0xe9
call fcn.100cfb50
push 0x10042950
push 0x48e504
push 0xe8
call fcn.100cfb50
push 0x10042950
push 0x503986
push 0xe8
call fcn.100cfb50
add esp, 0x30
mov dword [ebp - 4], 0
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d7179
call esi
test eax, eax
je 0x10042e2c
lea eax, [ebp - 8]
mov dword [0x4d7179], 0x1e0
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 4
push 0x4d7179
call esi
test eax, eax
jne 0x10042e2e
call edi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x4d7183
call esi
test eax, eax
je 0x10042e6a
lea eax, [ebp - 8]
mov byte [0x4d7183], 0
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x4d7183
call esi
test eax, eax
jne 0x10042e6c
call edi
push 0xe9
mov edx, 0x100423e0
mov ecx, 0x4d87c8
call fcn.100cf230
push 0xe9
mov edx, 0x10042400
mov ecx, 0x4d87fc
call fcn.100cf230
push 0xe9
mov edx, 0x10042420
mov ecx, 0x5db52b
call fcn.100cf230
add esp, 8
mov edx, 5
mov ecx, 0x63d1ce
call fcn.100cf2a0
push 0xe9
mov edx, 0x10042440
mov ecx, 0x63d1ce
call fcn.100cf230
add esp, 4
mov edx, 5
mov ecx, 0x63d40f
call fcn.100cf2a0
push 0xe9
mov edx, 0x10042470
mov ecx, 0x63d40f
call fcn.100cf230
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret