Function at 0x100782e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
push 0x10078030
push 0x95e121
push 0xe9
call fcn.100eb560
push 0x100780b0
push 0x95e1c4
push 0xe9
call fcn.100eb560
push 0x10078170
push 0x95f9b0
push 0xe9
call fcn.100eb560
push 0x892a88
push 0x892a5f
push 0xe9
call fcn.100eb560
push 0x892b04
push 0x892adb
push 0xe9
call fcn.100eb560
push 0x58811f
push 0x5880f0
push 0xe9
call fcn.100eb560
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
add esp, 0x48
push eax
push 0x40
push 4
push 0x588447
call esi
lea eax, [ebp - 4]
mov dword [0x588447], 0xfff
push eax
push dword [ebp - 4]
push 4
push 0x588447
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x5c914e
call esi
lea eax, [ebp - 4]
mov byte [0x5c914e], 0
push eax
push dword [ebp - 4]
push 1
push 0x5c914e
call esi
push 0x644537
push 0x64452a
push 0xe9
call fcn.100eb560
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6505fb
call esi
mov eax, 0x6505fb
mov dword [eax], 0x90909090
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x6505fb
call esi
push 0x782ca0
push 0x782c1f
push 0xe9
call fcn.100eb560
push 0x5db408
push 0x5db322
push 0xe9
call fcn.100eb560
add esp, 0x18
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x597694
call esi
lea eax, [ebp - 4]
mov byte [0x597694], 0xdd
push eax
push dword [ebp - 4]
push 1
push 0x597694
call esi
push 0x10077f30
push 0x62f69a
push 0xe9
call fcn.100eb560
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 8
push 0xd2c8a0
call esi
movsd xmm0, qword [0x10120310]
lea eax, [ebp - 4]
push eax
movsd qword [0xd2c8a0], xmm0
push dword [ebp - 4]
push 8
push 0xd2c8a0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 0x55
push 0x8553d0
call esi
push 0x55
push 0x90
push 0x8553d0
call fcn.100f06a0
add esp, 0xc
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x55
push 0x8553d0
call esi
push 0x10077f50
push 0x64bdcb
push 0xe8
call fcn.100eb560
push 0x10077f80
push 0x40fac5
push 0xe8
call fcn.100eb560
add esp, 0x18
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x840989
call esi
lea eax, [ebp - 4]
mov byte [0x840989], 0x13
push eax
push dword [ebp - 4]
push 1
push 0x840989
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x842a12
call esi
lea eax, [ebp - 4]
mov byte [0x842a12], 0x12
push eax
push dword [ebp - 4]
push 1
push 0x842a12
call esi
push 0x100781b0
push 0x819e66
push 0xe9
mov dword [0x11351c20], 0
mov dword [0x11351c24], 0
mov dword [0x11351c28], 0
call fcn.100eb560
push 0x10078220
push 0x81a9c6
push 0xe8
call fcn.100eb560
push 0x10078240
push 0x81aa1d
push 0xe8
call fcn.100eb560
push 0x10078260
push 0x81aa77
push 0xe8
call fcn.100eb560
push 0x10078280
push 0x8133c4
push 0xe8
call fcn.100eb560
push 0x100782b0
push 0x508e7d
push 0xe8
call fcn.100eb560
add esp, 0x48
push 0x640983
push 0x640912
push 0xe9
call fcn.100eb560
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5c21cf
call esi
lea eax, [ebp - 4]
mov dword [0x5c21cf], 0x1c00
push eax
push dword [ebp - 4]
push 4
push 0x5c21cf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5f308d
call esi
mov eax, 0x5f308d
mov edx, 0x106ff760
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x5f308d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6f8101
call esi
mov eax, 0x6f8101
mov edx, 0x106ff760
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x6f8101
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x72d1e4
call esi
mov eax, 0x72d1e4
mov edx, 0x106ff760
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x72d1e4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735e90
call esi
mov eax, 0x735e90
mov edx, 0x106ff760
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x735e90
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735f3c
call esi
mov eax, 0x735f3c
mov edx, 0x106ff760
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x735f3c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735f9c
call esi
mov eax, 0x735f9c
mov edx, 0x106ff760
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x735f9c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x747d2c
call esi
mov eax, 0x747d2c
mov edx, 0x106ff760
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x747d2c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x747d93
call esi
mov eax, 0x747d93
mov edx, 0x106ff760
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x747d93
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x747d1b
call esi
lea eax, [ebp - 4]
mov dword [0x747d1b], 0x1388
push eax
push dword [ebp - 4]
push 4
push 0x747d1b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x72d1cf
call esi
lea eax, [ebp - 4]
mov dword [0x72d1cf], 0x1388
push eax
push dword [ebp - 4]
push 4
push 0x72d1cf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735f8b
call esi
lea eax, [ebp - 4]
mov dword [0x735f8b], 0x1388
push eax
push dword [ebp - 4]
push 4
push 0x735f8b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735f2b
call esi
lea eax, [ebp - 4]
mov dword [0x735f2b], 0x1388
push eax
push dword [ebp - 4]
push 4
push 0x735f2b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735e7b
call esi
lea eax, [ebp - 4]
mov dword [0x735e7b], 0x1388
push eax
push dword [ebp - 4]
push 4
push 0x735e7b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5f307c
call esi
lea eax, [ebp - 4]
mov dword [0x5f307c], 0x1388
push eax
push dword [ebp - 4]
push 4
push 0x5f307c
call esi
pop esi
mov esp, ebp
pop ebp
ret