Function at 0x10082250
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x10151040]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push 0x1007e4a0
push 0x5edda9
push 0xe8
call fcn.100863f0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0xc
push eax
push 0x40
push 4
push 0x4d75f0
call esi
lea eax, [ebp - 8]
mov dword [0x4d75f0], 0x5e
push eax
push dword [ebp - 8]
push 4
push 0x4d75f0
call esi
push 0x1007e3c0
push 0x4d76fb
push 0xe8
call fcn.100863f0
push 0x1007e3c0
push 0x4d79c3
push 0xe8
call fcn.100863f0
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7a0e
call esi
lea eax, [ebp - 8]
mov dword [0x4d7a0e], 0x1e0
push eax
push dword [ebp - 8]
push 4
push 0x4d7a0e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4d7a18
call esi
lea eax, [ebp - 8]
mov byte [0x4d7a18], 0
push eax
push dword [ebp - 8]
push 1
push 0x4d7a18
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x40a7ef
call esi
mov eax, 0x40a7ef
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x40a7ef
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x40a87e
call esi
mov eax, 0x40a87e
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x40a87e
call esi
push 0x1007f100
push 0x4d7eb1
push 0xe8
call fcn.100863f0
push 0x1007ee70
push 0x414086
push 0xe8
call fcn.100863f0
push 0x1007ee70
push 0x4140d9
push 0xe8
call fcn.100863f0
push 0x1007ee70
push 0x41412e
push 0xe8
call fcn.100863f0
push 0x1007ee70
push 0x4141ba
push 0xe8
call fcn.100863f0
push 0x1007ee70
push 0x4141eb
push 0xe8
call fcn.100863f0
add esp, 0x48
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x414239
call esi
lea eax, [ebp - 8]
mov byte [0x414239], 0
push eax
push dword [ebp - 8]
push 1
push 0x414239
call esi
push 0x1007ee90
push 0x4d7534
push 0xe8
call fcn.100863f0
push 0x1007ee90
push 0x4d7568
push 0xe8
call fcn.100863f0
push 0x1007ef00
push 0x401e49
push 0xe8
call fcn.100863f0
push 0x1007ef50
push 0x4d712a
push 0xe8
call fcn.100863f0
add esp, 0x30
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d6c73
call esi
lea eax, [ebp - 8]
mov dword [0x4d6c73], 0
push eax
push dword [ebp - 8]
push 4
push 0x4d6c73
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x402106
call esi
lea eax, [ebp - 8]
mov byte [0x402106], 0
push eax
push dword [ebp - 8]
push 1
push 0x402106
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4053a3
call esi
lea eax, [ebp - 8]
mov dword [0x4053a3], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x4053a3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x401d30
call esi
lea eax, [ebp - 8]
mov dword [0x401d30], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x401d30
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7530
call esi
lea eax, [ebp - 8]
mov dword [0x4d7530], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x4d7530
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7564
call esi
lea eax, [ebp - 8]
mov dword [0x4d7564], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x4d7564
call esi
push 0x1007f240
push 0x663e8c
push 0xe8
call fcn.100863f0
push 0x1007f3c0
push 0x663e9d
push 0xe8
call fcn.100863f0
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 0x40
push 0x20d
push 0x405380
call esi
push 0x20d
push 0x90
push 0x405380
call fcn.100ed9a0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x20d
push 0x405380
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4d74ce
call esi
mov eax, 0x4d74ce
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x4d74ce
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4d7568
call esi
mov eax, 0x4d7568
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x4d7568
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4d7465
call esi
mov eax, 0x4d7465
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x4d7465
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4d7183
call esi
lea eax, [ebp - 8]
mov byte [0x4d7183], 0
push eax
push dword [ebp - 8]
push 1
push 0x4d7183
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x401d30
call esi
lea eax, [ebp - 8]
mov dword [0x401d30], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x401d30
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7179
call esi
lea eax, [ebp - 8]
mov dword [0x4d7179], 0x1e0
push eax
push dword [ebp - 8]
push 4
push 0x4d7179
call esi
push 0x1007efb0
push 0x57f159
push 0xe9
call fcn.100863f0
push 0x1007efe0
push 0x57f148
push 0xe9
call fcn.100863f0
push 0x1007f010
push 0x57f16a
push 0xe9
call fcn.100863f0
push 0x1007f040
push 0x57f137
push 0xe9
call fcn.100863f0
push 0x1007f070
push 0x57f17b
push 0xe9
call fcn.100863f0
push 0x1007f0a0
push 0x57f18c
push 0xe9
call fcn.100863f0
add esp, 0x48
push 0x1007f0d0
push 0x57f19d
push 0xe9
call fcn.100863f0
push 0x1007f6f0
push 0x4d5ee6
push 0xe8
call fcn.100863f0
mov ecx, dword [ebp - 4]
add esp, 0x18
xor ecx, ebp
pop esi
call fcn.10089049
mov esp, ebp
pop ebp
ret