Function at 0x100a5dc0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x101a506c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4fa27b
call esi
lea eax, [ebp - 8]
mov dword [0x4fa27b], 0xa0000001
push eax
push dword [ebp - 8]
push 4
push 0x4fa27b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7828cf
call esi
lea eax, [ebp - 8]
mov dword [0x7828cf], 0xa0000002
push eax
push dword [ebp - 8]
push 4
push 0x7828cf
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84d782
call esi
lea eax, [ebp - 8]
mov dword [0x84d782], 0xa0000003
push eax
push dword [ebp - 8]
push 4
push 0x84d782
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84dbd6
call esi
lea eax, [ebp - 8]
mov dword [0x84dbd6], 0xa0000004
push eax
push dword [ebp - 8]
push 4
push 0x84dbd6
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4fa240
call esi
lea eax, [ebp - 8]
mov dword [0x4fa240], 0xa0000001
push eax
push dword [ebp - 8]
push 4
push 0x4fa240
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x78154e
call esi
lea eax, [ebp - 8]
mov dword [0x78154e], 0xa0000002
push eax
push dword [ebp - 8]
push 4
push 0x78154e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x78158d
call esi
lea eax, [ebp - 8]
mov dword [0x78158d], 0xa0000003
push eax
push dword [ebp - 8]
push 4
push 0x78158d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84d705
call esi
lea eax, [ebp - 8]
mov dword [0x84d705], 0xa0000004
push eax
push dword [ebp - 8]
push 4
push 0x84d705
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84db89
call esi
lea eax, [ebp - 8]
mov dword [0x84db89], 0xa0000005
push eax
push dword [ebp - 8]
push 4
push 0x84db89
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x80ff79
call esi
lea eax, [ebp - 8]
mov dword [0x80ff79], 0xa0000001
push eax
push dword [ebp - 8]
push 4
push 0x80ff79
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84d563
call esi
lea eax, [ebp - 8]
mov dword [0x84d563], 0xa0000002
push eax
push dword [ebp - 8]
push 4
push 0x84d563
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84d9f3
call esi
lea eax, [ebp - 8]
mov dword [0x84d9f3], 0xa0000003
push eax
push dword [ebp - 8]
push 4
push 0x84d9f3
call esi
push 0x100a6d50
push 0x77fb09
push 0xe9
call fcn.100ca7d0
push 0x100a6d90
push 0x77fb3e
push 0xe9
call fcn.100ca7d0
push 0x100a6dd0
push 0x80fcf0
push 0xe9
call fcn.100ca7d0
push 0x100a6e20
push 0x80fefd
push 0xe9
call fcn.100ca7d0
push 0x100a6e60
push 0x80fd27
push 0xe9
call fcn.100ca7d0
push 0x100a6eb0
push 0x810090
push 0xe9
call fcn.100ca7d0
add esp, 0x48
push 0x100a6ef0
push 0x81025b
push 0xe9
call fcn.100ca7d0
push 0x100a6f40
push 0x810361
push 0xe9
call fcn.100ca7d0
push 0x100a6f80
push 0x81052b
push 0xe9
call fcn.100ca7d0
push 0x100a6fd0
push 0x810631
push 0xe9
call fcn.100ca7d0
push 0x100a7010
push 0x64c934
push 0xe9
call fcn.100ca7d0
push 0x100a7030
push 0x64c9e4
push 0xe9
call fcn.100ca7d0
add esp, 0x48
push 0x100a7060
push 0x65158a
push 0xe9
call fcn.100ca7d0
push 0x100a7090
push 0x65164d
push 0xe9
call fcn.100ca7d0
push 0x100a70d0
push 0x402327
push 0xe9
call fcn.100ca7d0
push 0x100a7110
push 0x593b53
push 0xe9
call fcn.100ca7d0
push 0x100a7170
push 0x595ea1
push 0xe9
call fcn.100ca7d0
push 0x100a7190
push 0x596142
push 0xe9
call fcn.100ca7d0
add esp, 0x48
push 0x100a71b0
push 0x7801ad
push 0xe9
call fcn.100ca7d0
push 0x100a71d0
push 0x7818f2
push 0xe9
call fcn.100ca7d0
push 0x100a71f0
push 0x782ce9
push 0xe9
call fcn.100ca7d0
push 0x100a7210
push 0x7830c3
push 0xe9
call fcn.100ca7d0
push 0x100a7230
push 0x784b4f
push 0xe9
call fcn.100ca7d0
push 0x100a6410
push 0x510feb
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x100a6410
push 0x51100d
push 0xe8
call fcn.100ca7d0
push 0x100a63d0
push 0x51107b
push 0xe8
call fcn.100ca7d0
push 0x100a63d0
push 0x5428a4
push 0xe8
call fcn.100ca7d0
push 0x100a63d0
push 0x6439a1
push 0xe8
call fcn.100ca7d0
push 0x100a63d0
push 0x643bad
push 0xe8
call fcn.100ca7d0
push 0x100a63d0
push 0x643d29
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x100a63f0
push 0x643d91
push 0xe8
call fcn.100ca7d0
push 0x100a63d0
push 0x6441b6
push 0xe8
call fcn.100ca7d0
push 0x100a63d0
push 0x64422f
push 0xe8
call fcn.100ca7d0
push 0x100a63d0
push 0x644291
push 0xe8
call fcn.100ca7d0
push 0x100a63d0
push 0x6442cf
push 0xe8
call fcn.100ca7d0
push 0x100a63d0
push 0x64435a
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x100a63d0
push 0x6443cb
push 0xe8
call fcn.100ca7d0
push 0x100a63d0
push 0x6443f1
push 0xe8
call fcn.100ca7d0
push 0x100a63f0
push 0x644465
push 0xe8
call fcn.100ca7d0
push 0x100a63d0
push 0x64a4ab
push 0xe8
call fcn.100ca7d0
push 0x100a63d0
push 0x64a71d
push 0xe8
call fcn.100ca7d0
push 0x100a63d0
push 0x64a779
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x100a63d0
push 0x64aac0
push 0xe8
call fcn.100ca7d0
push 0x100a63d0
push 0x64ab1c
push 0xe8
call fcn.100ca7d0
push 0x100a6390
push 0x77fb20
push 0xe8
call fcn.100ca7d0
push 0x100a6390
push 0x77fb60
push 0xe8
call fcn.100ca7d0
mov ecx, dword [ebp - 4]
add esp, 0x30
xor ecx, ebp
pop esi
call fcn.100ee3f1
mov esp, ebp
pop ebp
ret