Function at 0x10075bd0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x10144040]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push 0x100716a0
push 0x5edda9
push 0xe8
call fcn.10079560
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0xc
push eax
push 0x40
push 4
push 0x4d75f0
call esi
lea eax, [ebp - 8]
mov dword [0x4d75f0], 0x5e
push eax
push dword [ebp - 8]
push 4
push 0x4d75f0
call esi
push 0x100715c0
push 0x4d76fb
push 0xe8
call fcn.10079560
push 0x100715c0
push 0x4d79c3
push 0xe8
call fcn.10079560
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7a0e
call esi
lea eax, [ebp - 8]
mov dword [0x4d7a0e], 0x1e0
push eax
push dword [ebp - 8]
push 4
push 0x4d7a0e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4d7a18
call esi
lea eax, [ebp - 8]
mov byte [0x4d7a18], 0
push eax
push dword [ebp - 8]
push 1
push 0x4d7a18
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x40a7ef
call esi
mov eax, 0x40a7ef
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x40a7ef
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x40a87e
call esi
mov eax, 0x40a87e
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x40a87e
call esi
push 0x10072c90
push 0x4d7eb1
push 0xe8
call fcn.10079560
push 0x10072950
push 0x414086
push 0xe8
call fcn.10079560
push 0x10072950
push 0x4140d9
push 0xe8
call fcn.10079560
push 0x10072950
push 0x41412e
push 0xe8
call fcn.10079560
push 0x10072950
push 0x4141ba
push 0xe8
call fcn.10079560
push 0x10072950
push 0x4141eb
push 0xe8
call fcn.10079560
add esp, 0x48
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x414239
call esi
lea eax, [ebp - 8]
mov byte [0x414239], 0
push eax
push dword [ebp - 8]
push 1
push 0x414239
call esi
push 0x10072970
push 0x4d7534
push 0xe8
call fcn.10079560
push 0x10072970
push 0x4d7568
push 0xe8
call fcn.10079560
push 0x100729e0
push 0x401e49
push 0xe8
call fcn.10079560
push 0x10072a30
push 0x40464e
push 0xe8
call fcn.10079560
push 0x403243
push 0x403126
push 0xe9
call fcn.10079560
push 0x100720b0
push 0x403fa0
push 0xe9
call fcn.10079560
add esp, 0x48
push 0x10072ae0
push 0x4d712a
push 0xe8
call fcn.10079560
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d6c73
call esi
lea eax, [ebp - 8]
mov dword [0x4d6c73], 0
push eax
push dword [ebp - 8]
push 4
push 0x4d6c73
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x402106
call esi
lea eax, [ebp - 8]
mov byte [0x402106], 0
push eax
push dword [ebp - 8]
push 1
push 0x402106
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4053a3
call esi
lea eax, [ebp - 8]
mov dword [0x4053a3], 0xc942
push eax
push dword [ebp - 8]
push 4
push 0x4053a3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x401d30
call esi
lea eax, [ebp - 8]
mov dword [0x401d30], 0xc942
push eax
push dword [ebp - 8]
push 4
push 0x401d30
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7530
call esi
lea eax, [ebp - 8]
mov dword [0x4d7530], 0xc942
push eax
push dword [ebp - 8]
push 4
push 0x4d7530
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7564
call esi
lea eax, [ebp - 8]
mov dword [0x4d7564], 0xc942
push eax
push dword [ebp - 8]
push 4
push 0x4d7564
call esi
push 0x10072dd0
push 0x663e8c
push 0xe8
call fcn.10079560
push 0x10072f50
push 0x663e9d
push 0xe8
call fcn.10079560
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 0x40
push 0x20d
push 0x405380
call esi
push 0x20d
push 0x90
push 0x405380
call fcn.100e0b50
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x20d
push 0x405380
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4d74ce
call esi
mov eax, 0x4d74ce
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x4d74ce
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4d7568
call esi
mov eax, 0x4d7568
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x4d7568
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4d7465
call esi
mov eax, 0x4d7465
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x4d7465
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4d7183
call esi
lea eax, [ebp - 8]
mov byte [0x4d7183], 0
push eax
push dword [ebp - 8]
push 1
push 0x4d7183
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x401d30
call esi
lea eax, [ebp - 8]
mov dword [0x401d30], 0xc942
push eax
push dword [ebp - 8]
push 4
push 0x401d30
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7179
call esi
lea eax, [ebp - 8]
mov dword [0x4d7179], 0x1e0
push eax
push dword [ebp - 8]
push 4
push 0x4d7179
call esi
push 0x10072b40
push 0x57f159
push 0xe9
call fcn.10079560
push 0x10072b70
push 0x57f148
push 0xe9
call fcn.10079560
push 0x10072ba0
push 0x57f16a
push 0xe9
call fcn.10079560
push 0x10072bd0
push 0x57f137
push 0xe9
call fcn.10079560
push 0x10072c00
push 0x57f17b
push 0xe9
call fcn.10079560
push 0x10072c30
push 0x57f18c
push 0xe9
call fcn.10079560
add esp, 0x48
push 0x10072c60
push 0x57f19d
push 0xe9
call fcn.10079560
push 0x10073270
push 0x4d5ee6
push 0xe8
call fcn.10079560
mov ecx, dword [ebp - 4]
add esp, 0x18
xor ecx, ebp
pop esi
call fcn.1007c329
mov esp, ebp
pop ebp
ret