Function at 0x10010290
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10141040]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x101542b0], 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
mov byte [ebp - 0x14], 0xe8
mov dword [ebp - 8], 0
jne 0x10010425
mov eax, 0x10010530
sub eax, 0x78b0c1
mov dword [ebp - 0x13], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x78b0bc
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1001030d
mov eax, dword [ebp - 0x14]
mov ecx, 0x78b0bc
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1001030f
call edi
mov eax, 0x10010230
mov byte [ebp - 0x14], 0xe9
sub eax, 0x78976c
mov dword [ebp - 8], 0
mov dword [ebp - 0x13], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x789767
call esi
test eax, eax
je 0x10010361
mov eax, dword [ebp - 0x14]
mov ecx, 0x789767
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x10010363
call edi
mov eax, 0x10010250
mov byte [ebp - 0x14], 0xe9
sub eax, 0x789a68
mov dword [ebp - 8], 0
mov dword [ebp - 0x13], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x789a63
call esi
test eax, eax
je 0x100103b5
mov eax, dword [ebp - 0x14]
mov ecx, 0x789a63
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100103b7
call edi
mov eax, 0x10010270
mov byte [ebp - 0x14], 0xe9
sub eax, 0x789db1
mov dword [ebp - 8], 0
mov dword [ebp - 0x13], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x789dac
call esi
test eax, eax
je 0x10010409
mov eax, dword [ebp - 0x14]
mov ecx, 0x789dac
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1001040b
call edi
pop edi
mov dword [0x101542b0], 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007a529
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 8]
mov dword [ebp - 0x13], 0x246959
push eax
push 0x40
push 5
push 0x789767
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1001046c
mov eax, dword [ebp - 0x14]
mov ecx, 0x789767
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1001046e
call edi
lea eax, [ebp - 8]
mov byte [ebp - 0x14], 0xe8
push eax
push 0x40
push 5
push 0x789a63
mov dword [ebp - 0x13], 0x24665d
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x100104ba
mov eax, dword [ebp - 0x14]
mov ecx, 0x789a63
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100104bc
call edi
lea eax, [ebp - 8]
mov byte [ebp - 0x14], 0xe8
push eax
push 0x40
push 5
push 0x789dac
mov dword [ebp - 0x13], 0x246314
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x10010508
mov eax, dword [ebp - 0x14]
mov ecx, 0x789dac
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1001050a
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
mov dword [0x101542b0], 0
pop esi
call fcn.1007a529
mov esp, ebp
pop ebp
ret