Function at 0x10075580
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x10151040]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4030d4
call esi
lea eax, [ebp - 8]
mov byte [0x4030d4], 4
push eax
push dword [ebp - 8]
push 1
push 0x4030d4
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3a4b
call esi
lea eax, [ebp - 8]
mov byte [0x7d3a4b], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d3a4b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d37a2
call esi
lea eax, [ebp - 8]
mov byte [0x7d37a2], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d37a2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x6e899d
call esi
mov eax, 0x6e899d
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x6e899d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7126fa
call esi
mov eax, 0x7126fa
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7126fa
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x5b768f
call esi
mov eax, 0x5b768f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x5b768f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x5b770c
call esi
mov eax, 0x5b770c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x5b770c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa3ba
call esi
mov eax, 0x7aa3ba
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa3ba
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa39c
call esi
mov eax, 0x7aa39c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa39c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa9b3
call esi
mov eax, 0x7aa9b3
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa9b3
call esi
push 0x856fd2
push 0x856faa
push 0xe9
call fcn.100863f0
push 0x7d3725
push 0x7d371e
push 0xe9
call fcn.100863f0
push 0x836a23
push 0x8369fa
push 0xe9
call fcn.100863f0
push 0x7d36bf
push 0x7d36b8
push 0xe9
call fcn.100863f0
push 0x7d3fa3
push 0x7d3f9c
push 0xe9
call fcn.100863f0
add esp, 0x3c
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x85b6ac
call esi
mov eax, 0x85b6ac
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x85b6ac
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x85cc50
call esi
mov eax, 0x85cc50
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x85cc50
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7d40a2
call esi
mov eax, 0x7d40a2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7d40a2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db7b0
call esi
mov eax, 0x7db7b0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db7b0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db812
call esi
mov eax, 0x7db812
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db812
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db874
call esi
mov eax, 0x7db874
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db874
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db8e0
call esi
mov eax, 0x7db8e0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db8e0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db959
call esi
mov eax, 0x7db959
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db959
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db9a2
call esi
mov eax, 0x7db9a2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db9a2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7dba20
call esi
mov eax, 0x7dba20
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7dba20
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7dba69
call esi
mov eax, 0x7dba69
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7dba69
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x52
push 0x8684f0
call esi
push 0x52
push 0x90
push 0x8684f0
call fcn.100ed9a0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x52
push 0x8684f0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x25
push 0x7c5a68
call esi
mov eax, 0x7c5a68
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
mov byte [eax + 0x24], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x25
push 0x7c5a68
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x159
push 0x7c4430
call esi
push 0x159
push 0x90
push 0x7c4430
call fcn.100ed9a0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x159
push 0x7c4430
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7c5ad2
call esi
mov eax, 0x7c5ad2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7c5ad2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x784dab
call esi
lea eax, [ebp - 8]
mov dword [0x784dab], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x784dab
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84e79b
call esi
lea eax, [ebp - 8]
mov dword [0x84e79b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x84e79b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x879c0b
call esi
lea eax, [ebp - 8]
mov dword [0x879c0b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x879c0b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8804eb
call esi
lea eax, [ebp - 8]
mov dword [0x8804eb], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x8804eb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x882d2b
call esi
lea eax, [ebp - 8]
mov dword [0x882d2b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x882d2b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x784dcb
call esi
lea eax, [ebp - 8]
mov dword [0x784dcb], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x784dcb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84e7bb
call esi
lea eax, [ebp - 8]
mov dword [0x84e7bb], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x84e7bb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x879c2b
call esi
lea eax, [ebp - 8]
mov dword [0x879c2b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x879c2b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x88050b
call esi
lea eax, [ebp - 8]
mov dword [0x88050b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x88050b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x882d4b
call esi
lea eax, [ebp - 8]
mov dword [0x882d4b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x882d4b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x784deb
call esi
lea eax, [ebp - 8]
mov dword [0x784deb], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x784deb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84e7db
call esi
lea eax, [ebp - 8]
mov dword [0x84e7db], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x84e7db
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x879c4b
call esi
mov dword [0x879c4b], 0x101455fc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x879c4b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x88052b
call esi
lea eax, [ebp - 8]
mov dword [0x88052b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x88052b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x882d6b
call esi
lea eax, [ebp - 8]
mov dword [0x882d6b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x882d6b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x784e0b
call esi
lea eax, [ebp - 8]
mov dword [0x784e0b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x784e0b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84e7fb
call esi
lea eax, [ebp - 8]
mov dword [0x84e7fb], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x84e7fb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x879c6b
call esi
lea eax, [ebp - 8]
mov dword [0x879c6b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x879c6b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x88054b
call esi
lea eax, [ebp - 8]
mov dword [0x88054b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x88054b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x882d8b
call esi
lea eax, [ebp - 8]
mov dword [0x882d8b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x882d8b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x784e4b
call esi
lea eax, [ebp - 8]
mov dword [0x784e4b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x784e4b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7cde0b
call esi
lea eax, [ebp - 8]
mov dword [0x7cde0b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x7cde0b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84b3db
call esi
lea eax, [ebp - 8]
mov dword [0x84b3db], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x84b3db
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84e83b
call esi
lea eax, [ebp - 8]
mov dword [0x84e83b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x84e83b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x879cab
call esi
lea eax, [ebp - 8]
mov dword [0x879cab], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x879cab
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x88058b
call esi
lea eax, [ebp - 8]
mov dword [0x88058b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x88058b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x882dcb
call esi
lea eax, [ebp - 8]
mov dword [0x882dcb], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x882dcb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8842cb
call esi
lea eax, [ebp - 8]
mov dword [0x8842cb], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x8842cb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x784e6b
call esi
lea eax, [ebp - 8]
mov dword [0x784e6b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x784e6b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7cde2b
call esi
lea eax, [ebp - 8]
mov dword [0x7cde2b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x7cde2b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84b3fb
call esi
lea eax, [ebp - 8]
mov dword [0x84b3fb], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x84b3fb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84e85b
call esi
lea eax, [ebp - 8]
mov dword [0x84e85b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x84e85b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x879ccb
call esi
lea eax, [ebp - 8]
mov dword [0x879ccb], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x879ccb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8805ab
call esi
lea eax, [ebp - 8]
mov dword [0x8805ab], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x8805ab
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x882deb
call esi
lea eax, [ebp - 8]
mov dword [0x882deb], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x882deb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8842eb
call esi
lea eax, [ebp - 8]
mov dword [0x8842eb], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x8842eb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x784e8b
call esi
lea eax, [ebp - 8]
mov dword [0x784e8b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x784e8b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7cde4b
call esi
lea eax, [ebp - 8]
mov dword [0x7cde4b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x7cde4b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84b41b
call esi
lea eax, [ebp - 8]
mov dword [0x84b41b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x84b41b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84e87b
call esi
lea eax, [ebp - 8]
mov dword [0x84e87b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x84e87b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x879ceb
call esi
lea eax, [ebp - 8]
mov dword [0x879ceb], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x879ceb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8805cb
call esi
lea eax, [ebp - 8]
mov dword [0x8805cb], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x8805cb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x882e0b
call esi
lea eax, [ebp - 8]
mov dword [0x882e0b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x882e0b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x88430b
call esi
lea eax, [ebp - 8]
mov dword [0x88430b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x88430b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x784e2b
call esi
lea eax, [ebp - 8]
mov dword [0x784e2b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x784e2b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7cddeb
call esi
lea eax, [ebp - 8]
mov dword [0x7cddeb], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x7cddeb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84b3bb
call esi
lea eax, [ebp - 8]
mov dword [0x84b3bb], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x84b3bb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84e81b
call esi
lea eax, [ebp - 8]
mov dword [0x84e81b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x84e81b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x879c8b
call esi
lea eax, [ebp - 8]
mov dword [0x879c8b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x879c8b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x88056b
call esi
lea eax, [ebp - 8]
mov dword [0x88056b], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x88056b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x882dab
call esi
lea eax, [ebp - 8]
mov dword [0x882dab], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x882dab
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8842ab
call esi
lea eax, [ebp - 8]
mov dword [0x8842ab], 0x101455fc
push eax
push dword [ebp - 8]
push 4
push 0x8842ab
call esi
push ecx
mov edx, 5
mov ecx, 0x6e899d
call fcn.100866a0
mov edx, 5
mov ecx, 0x7126fa
call fcn.100866a0
mov edx, 5
mov ecx, 0x5b768f
call fcn.100866a0
mov edx, 5
mov ecx, 0x5b770c
call fcn.100866a0
push 0x10075380
push 0x4d5ec3
push 0xe8
call fcn.100863f0
push 0x10075340
push 0x857746
push 0xe8
call fcn.100863f0
push 0x10075550
push 0x7818d4
push 0xe8
call fcn.100863f0
push 0x10075550
push 0x7801a8
push 0xe8
call fcn.100863f0
push 0x10075550
push 0x782ce4
push 0xe8
call fcn.100863f0
add esp, 0x40
push 0x10075550
push 0x7830be
push 0xe8
call fcn.100863f0
push 0x10075550
push 0x784b4a
push 0xe8
call fcn.100863f0
push 0x10075550
push 0x77fcad
push 0xe8
call fcn.100863f0
add esp, 0x24
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3c6c
call esi
mov byte [0x7d3c6c], 0xff
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 1
push 0x7d3c6c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d568d
call esi
lea eax, [ebp - 8]
mov dword [0x4d568d], 0x101439b8
push eax
push dword [ebp - 8]
push 4
push 0x4d568d
call esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.10089049
mov esp, ebp
pop ebp
ret