Function at 0x100095e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
mov ebx, 4
push ebx
push 0x78566b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x78566b], 0x1005d84c
mov edx, dword [ebp - 4]
push edx
push ebx
push 0x78566b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x785965
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x785965], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x785965
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x785d31
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x785d31], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x785d31
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x78595b
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x78595b], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x78595b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x785d27
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x785d27], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x785d27
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x785a56
call esi
mov byte [0x785a56], bl
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push 0x785a56
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x785d46
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x785d46], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x785d46
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push ebx
push 0x85a09e
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x85a09e], 0x19c
mov edx, dword [ebp - 4]
push edx
push ebx
push 0x85a09e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x786243
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x786243], 0
mov edx, dword [ebp - 4]
push edx
push 1
push 0x786243
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7862c7
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x7862c7], 0
mov edx, dword [ebp - 4]
push edx
push 1
push 0x7862c7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push ebx
push 0x7887de
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7887de], 0xfe
mov edx, dword [ebp - 4]
push edx
push ebx
push 0x7887de
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push ebx
push 0x78b5a0
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x78b5a0], 0xfe
mov edx, dword [ebp - 4]
push edx
push ebx
push 0x78b5a0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push ebx
push 0x78a5c3
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x78a5c3], 0xfe
mov edx, dword [ebp - 4]
push edx
push ebx
push 0x78a5c3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push ebx
push 0x78b2c3
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x78b2c3], 0xef
mov edx, dword [ebp - 4]
push edx
push ebx
push 0x78b2c3
call esi
push 0x78762d
push 0x787625
mov bl, 0xe9
call fcn.10056900
push 0x785b49
push 0x785b41
call fcn.10056900
push 0x10008eb0
push 0x7865ba
mov bl, 0xe8
call fcn.10056900
push 0x100351d0
push 0x7863a8
call fcn.10056900
push 0x100351d0
push 0x78641e
call fcn.10056900
push 0x100351d0
push 0x7864b3
call fcn.10056900
push 0x10008a40
push 0x787794
call fcn.10056900
push 0x10008840
push 0x85a448
call fcn.10056900
add esp, 0x40
push 0x100088a0
push 0x785a68
call fcn.10056900
push 0x100088a0
push 0x785d58
call fcn.10056900
push 0x100095d0
push 0x787c7d
call fcn.10056900
push 0x100091d0
push 0x7867ae
call fcn.10056900
push 0x100093a0
push 0x78b0cf
call fcn.10056900
push 0x100091e0
push 0x78b09a
call fcn.10056900
add esp, 0x30
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7854d2
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7854d2], 0x7d
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7854d2
call esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret