Function at 0x10064110
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x10139040]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push 0x100640e0
push 0x84ada8
push 0xe9
call fcn.1006c3c0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0xc
push eax
push 0x40
push 1
push 0x64e1e0
call esi
lea eax, [ebp - 8]
mov byte [0x64e1e0], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x64e1e0
call esi
push 0x10063c00
push 0x84b6ca
push 0xe9
call fcn.1006c3c0
push 0x10063c30
push 0x84bab0
push 0xe9
call fcn.1006c3c0
push 0x10063bf0
push 0x84b7d3
push 0xe8
call fcn.1006c3c0
push 0x10063c90
push 0x84a3ba
push 0xe8
call fcn.1006c3c0
push 0x10063f60
push 0x84a757
push 0xe8
call fcn.1006c3c0
push 0x10064050
push 0x84b816
push 0xe9
call fcn.1006c3c0
add esp, 0x48
push 0x10064060
push 0x84b854
push 0xe9
call fcn.1006c3c0
push 0x10064070
push 0x84b93c
push 0xe9
call fcn.1006c3c0
push 0x10064090
push 0x84ba01
push 0xe9
call fcn.1006c3c0
push 0x100640b0
push 0x84bbbd
push 0xe9
call fcn.1006c3c0
push 0x100640c0
push 0x84c417
push 0xe9
call fcn.1006c3c0
push 0x10064030
push 0x84b647
push 0xe9
call fcn.1006c3c0
add esp, 0x48
push 0x10064040
push 0x84b764
push 0xe9
call fcn.1006c3c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84ae08
call esi
lea eax, [ebp - 8]
mov dword [0x84ae08], 0x1014bf08
push eax
push dword [ebp - 8]
push 4
push 0x84ae08
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84adfe
call esi
lea eax, [ebp - 8]
mov dword [0x84adfe], 0x1014bf04
push eax
push dword [ebp - 8]
push 4
push 0x84adfe
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84a19b
call esi
lea eax, [ebp - 8]
mov byte [0x84a19b], 0xb
push eax
push dword [ebp - 8]
push 1
push 0x84a19b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84a19d
call esi
lea eax, [ebp - 8]
mov byte [0x84a19d], 0xb
push eax
push dword [ebp - 8]
push 1
push 0x84a19d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84b1e3
call esi
lea eax, [ebp - 8]
mov byte [0x84b1e3], 0xb
push eax
push dword [ebp - 8]
push 1
push 0x84b1e3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84b1e5
call esi
lea eax, [ebp - 8]
mov byte [0x84b1e5], 0xb
push eax
push dword [ebp - 8]
push 1
push 0x84b1e5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84b641
call esi
lea eax, [ebp - 8]
mov byte [0x84b641], 0xa
push eax
push dword [ebp - 8]
push 1
push 0x84b641
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84b6c4
call esi
lea eax, [ebp - 8]
mov byte [0x84b6c4], 0xa
push eax
push dword [ebp - 8]
push 1
push 0x84b6c4
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84b75e
call esi
lea eax, [ebp - 8]
mov byte [0x84b75e], 0xa
push eax
push dword [ebp - 8]
push 1
push 0x84b75e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84b7ed
call esi
lea eax, [ebp - 8]
mov byte [0x84b7ed], 0xa
push eax
push dword [ebp - 8]
push 1
push 0x84b7ed
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84b904
call esi
lea eax, [ebp - 8]
mov byte [0x84b904], 0xa
push eax
push dword [ebp - 8]
push 1
push 0x84b904
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84b9bc
call esi
lea eax, [ebp - 8]
mov byte [0x84b9bc], 0xa
push eax
push dword [ebp - 8]
push 1
push 0x84b9bc
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x51c3d6
call esi
lea eax, [ebp - 8]
mov dword [0x51c3d6], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x51c3d6
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x51c4d7
call esi
lea eax, [ebp - 8]
mov dword [0x51c4d7], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x51c4d7
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x51c62b
call esi
lea eax, [ebp - 8]
mov dword [0x51c62b], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x51c62b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x578dc2
call esi
lea eax, [ebp - 8]
mov dword [0x578dc2], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x578dc2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5a7b4d
call esi
lea eax, [ebp - 8]
mov dword [0x5a7b4d], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x5a7b4d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5b7c04
call esi
lea eax, [ebp - 8]
mov dword [0x5b7c04], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x5b7c04
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5b7f65
call esi
lea eax, [ebp - 8]
mov dword [0x5b7f65], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x5b7f65
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5ba7b9
call esi
lea eax, [ebp - 8]
mov dword [0x5ba7b9], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x5ba7b9
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x64e173
call esi
lea eax, [ebp - 8]
mov dword [0x64e173], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x64e173
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x64e242
call esi
lea eax, [ebp - 8]
mov dword [0x64e242], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x64e242
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x64e398
call esi
lea eax, [ebp - 8]
mov dword [0x64e398], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x64e398
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x64e3b1
call esi
lea eax, [ebp - 8]
mov dword [0x64e3b1], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x64e3b1
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x78f28b
call esi
lea eax, [ebp - 8]
mov dword [0x78f28b], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x78f28b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84a33d
call esi
lea eax, [ebp - 8]
mov dword [0x84a33d], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x84a33d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84a35e
call esi
lea eax, [ebp - 8]
mov dword [0x84a35e], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x84a35e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84a6fb
call esi
lea eax, [ebp - 8]
mov dword [0x84a6fb], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x84a6fb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84a711
call esi
lea eax, [ebp - 8]
mov dword [0x84a711], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x84a711
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84a732
call esi
lea eax, [ebp - 8]
mov dword [0x84a732], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x84a732
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84bb82
call esi
lea eax, [ebp - 8]
mov dword [0x84bb82], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x84bb82
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84bba3
call esi
mov dword [0x84bba3], 0x1014e3d0
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x84bba3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84bc84
call esi
lea eax, [ebp - 8]
mov dword [0x84bc84], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x84bc84
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84c24b
call esi
lea eax, [ebp - 8]
mov dword [0x84c24b], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x84c24b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84c301
call esi
lea eax, [ebp - 8]
mov dword [0x84c301], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x84c301
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84c3d9
call esi
lea eax, [ebp - 8]
mov dword [0x84c3d9], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x84c3d9
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84c3fb
call esi
lea eax, [ebp - 8]
mov dword [0x84c3fb], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x84c3fb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84c48f
call esi
lea eax, [ebp - 8]
mov dword [0x84c48f], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x84c48f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x91cced
call esi
lea eax, [ebp - 8]
mov dword [0x91cced], 0x1014e3d0
push eax
push dword [ebp - 8]
push 4
push 0x91cced
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84baa6
call esi
lea eax, [ebp - 8]
mov dword [0x84baa6], 0x1014e3ec
push eax
push dword [ebp - 8]
push 4
push 0x84baa6
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84baef
call esi
lea eax, [ebp - 8]
mov dword [0x84baef], 0x1014e3ec
push eax
push dword [ebp - 8]
push 4
push 0x84baef
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84bb0f
call esi
lea eax, [ebp - 8]
mov dword [0x84bb0f], 0x1014e3ec
push eax
push dword [ebp - 8]
push 4
push 0x84bb0f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84bc3b
call esi
lea eax, [ebp - 8]
mov dword [0x84bc3b], 0x1014e3ec
push eax
push dword [ebp - 8]
push 4
push 0x84bc3b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84bd9f
call esi
lea eax, [ebp - 8]
mov dword [0x84bd9f], 0x1014e3ec
push eax
push dword [ebp - 8]
push 4
push 0x84bd9f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84bef9
call esi
lea eax, [ebp - 8]
mov dword [0x84bef9], 0x1014e3ec
push eax
push dword [ebp - 8]
push 4
push 0x84bef9
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84bf9c
call esi
lea eax, [ebp - 8]
mov dword [0x84bf9c], 0x1014e3ec
push eax
push dword [ebp - 8]
push 4
push 0x84bf9c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84c18c
call esi
lea eax, [ebp - 8]
mov dword [0x84c18c], 0x1014e3ec
push eax
push dword [ebp - 8]
push 4
push 0x84c18c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84c28e
call esi
lea eax, [ebp - 8]
mov dword [0x84c28e], 0x1014e3ec
push eax
push dword [ebp - 8]
push 4
push 0x84c28e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x95feac
call esi
lea eax, [ebp - 8]
mov dword [0x95feac], 0x1014e3ec
push eax
push dword [ebp - 8]
push 4
push 0x95feac
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x95ff93
call esi
lea eax, [ebp - 8]
mov dword [0x95ff93], 0x1014e3ec
push eax
push dword [ebp - 8]
push 4
push 0x95ff93
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84c340
call esi
lea eax, [ebp - 8]
mov dword [0x84c340], 0x1014e3e8
push eax
push dword [ebp - 8]
push 4
push 0x84c340
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84c35b
call esi
lea eax, [ebp - 8]
mov dword [0x84c35b], 0x1014e3e8
push eax
push dword [ebp - 8]
push 4
push 0x84c35b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x95fedc
call esi
lea eax, [ebp - 8]
mov dword [0x95fedc], 0x1014e3e8
push eax
push dword [ebp - 8]
push 4
push 0x95fedc
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84b122
call esi
lea eax, [ebp - 8]
mov dword [0x84b122], 0x1014e3db
push eax
push dword [ebp - 8]
push 4
push 0x84b122
call esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.100890df
mov esp, ebp
pop ebp
ret