Function at 0x10074de0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push ebx
mov ebx, dword [0x1012f2bc]
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp byte [ebx + 0x1c], 0
je 0x10074e4c
mov edx, dword [0x10122eb8]
cmp edx, 0xffffffff
jne 0x10074e11
call fcn.10055890
mov edx, dword [0x10122eb8]
mov edx, dword [ebx + edx*4 + 8]
mov ecx, dword [ebx]
call fcn.100ac500
mov esi, eax
lea eax, [ebp - 4]
push eax
push 0x40
push dword [ebx + 0x10]
push esi
call edi
mov edx, dword [ebx + 0x10]
mov ecx, esi
push edx
push dword [ebx + 0x18]
call fcn.100ac3f0
add esp, 8
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebx + 0x10]
push esi
call edi
mov byte [ebx + 0x1c], 0
mov ebx, dword [0x1012f2a4]
cmp byte [ebx + 0x1c], 0
je 0x10074ea9
mov edx, dword [0x10122eb8]
cmp edx, 0xffffffff
jne 0x10074e6e
call fcn.10055890
mov edx, dword [0x10122eb8]
mov edx, dword [ebx + edx*4 + 8]
mov ecx, dword [ebx]
call fcn.100ac500
mov esi, eax
lea eax, [ebp - 8]
push eax
push 0x40
push dword [ebx + 0x10]
push esi
call edi
mov edx, dword [ebx + 0x10]
mov ecx, esi
push edx
push dword [ebx + 0x18]
call fcn.100ac3f0
add esp, 8
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebx + 0x10]
push esi
call edi
mov byte [ebx + 0x1c], 0
mov ebx, dword [0x1012f294]
cmp byte [ebx + 0x1c], 0
je 0x10074f06
mov edx, dword [0x10122eb8]
cmp edx, 0xffffffff
jne 0x10074ecb
call fcn.10055890
mov edx, dword [0x10122eb8]
mov edx, dword [ebx + edx*4 + 8]
mov ecx, dword [ebx]
call fcn.100ac500
mov esi, eax
lea eax, [ebp - 0xc]
push eax
push 0x40
push dword [ebx + 0x10]
push esi
call edi
mov edx, dword [ebx + 0x10]
mov ecx, esi
push edx
push dword [ebx + 0x18]
call fcn.100ac3f0
add esp, 8
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push dword [ebx + 0x10]
push esi
call edi
mov byte [ebx + 0x1c], 0
mov ebx, dword [0x1012f2cc]
cmp byte [ebx + 0x1c], 0
je 0x10074f63
mov edx, dword [0x10122eb8]
cmp edx, 0xffffffff
jne 0x10074f28
call fcn.10055890
mov edx, dword [0x10122eb8]
mov edx, dword [ebx + edx*4 + 8]
mov ecx, dword [ebx]
call fcn.100ac500
mov esi, eax
lea eax, [ebp - 0x10]
push eax
push 0x40
push dword [ebx + 0x10]
push esi
call edi
mov edx, dword [ebx + 0x10]
mov ecx, esi
push edx
push dword [ebx + 0x18]
call fcn.100ac3f0
add esp, 8
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x10]
push dword [ebx + 0x10]
push esi
call edi
mov byte [ebx + 0x1c], 0
mov ebx, dword [0x1012f2c4]
cmp byte [ebx + 0x1c], 0
je 0x10074fc0
mov edx, dword [0x10122eb8]
cmp edx, 0xffffffff
jne 0x10074f85
call fcn.10055890
mov edx, dword [0x10122eb8]
mov edx, dword [ebx + edx*4 + 8]
mov ecx, dword [ebx]
call fcn.100ac500
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push dword [ebx + 0x10]
push esi
call edi
mov edx, dword [ebx + 0x10]
mov ecx, esi
push edx
push dword [ebx + 0x18]
call fcn.100ac3f0
add esp, 8
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push dword [ebx + 0x10]
push esi
call edi
mov byte [ebx + 0x1c], 0
mov ebx, dword [0x1012f2a0]
cmp byte [ebx + 0x1c], 0
je 0x1007501d
mov edx, dword [0x10122eb8]
cmp edx, 0xffffffff
jne 0x10074fe2
call fcn.10055890
mov edx, dword [0x10122eb8]
mov edx, dword [ebx + edx*4 + 8]
mov ecx, dword [ebx]
call fcn.100ac500
mov esi, eax
lea eax, [ebp - 0x18]
push eax
push 0x40
push dword [ebx + 0x10]
push esi
call edi
mov edx, dword [ebx + 0x10]
mov ecx, esi
push edx
push dword [ebx + 0x18]
call fcn.100ac3f0
add esp, 8
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebx + 0x10]
push esi
call edi
mov byte [ebx + 0x1c], 0
mov ebx, dword [0x1012f2c0]
cmp byte [ebx + 0x1c], 0
je 0x1007507a
mov edx, dword [0x10122eb8]
cmp edx, 0xffffffff
jne 0x1007503f
call fcn.10055890
mov edx, dword [0x10122eb8]
mov edx, dword [ebx + edx*4 + 8]
mov ecx, dword [ebx]
call fcn.100ac500
mov esi, eax
lea eax, [ebp - 0x1c]
push eax
push 0x40
push dword [ebx + 0x10]
push esi
call edi
mov edx, dword [ebx + 0x10]
mov ecx, esi
push edx
push dword [ebx + 0x18]
call fcn.100ac3f0
add esp, 8
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
push dword [ebx + 0x10]
push esi
call edi
mov byte [ebx + 0x1c], 0
mov ebx, dword [0x1012f2ac]
cmp byte [ebx + 0x1c], 0
je 0x100750d7
mov edx, dword [0x10122eb8]
cmp edx, 0xffffffff
jne 0x1007509c
call fcn.10055890
mov edx, dword [0x10122eb8]
mov edx, dword [ebx + edx*4 + 8]
mov ecx, dword [ebx]
call fcn.100ac500
mov esi, eax
lea eax, [ebp - 0x20]
push eax
push 0x40
push dword [ebx + 0x10]
push esi
call edi
mov edx, dword [ebx + 0x10]
mov ecx, esi
push edx
push dword [ebx + 0x18]
call fcn.100ac3f0
add esp, 8
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push dword [ebx + 0x10]
push esi
call edi
mov byte [ebx + 0x1c], 0
mov ebx, dword [0x1012f2dc]
cmp byte [ebx + 0x1c], 0
je 0x10075134
mov edx, dword [0x10122eb8]
cmp edx, 0xffffffff
jne 0x100750f9
call fcn.10055890
mov edx, dword [0x10122eb8]
mov edx, dword [ebx + edx*4 + 8]
mov ecx, dword [ebx]
call fcn.100ac500
mov esi, eax
lea eax, [ebp - 0x24]
push eax
push 0x40
push dword [ebx + 0x10]
push esi
call edi
mov edx, dword [ebx + 0x10]
mov ecx, esi
push edx
push dword [ebx + 0x18]
call fcn.100ac3f0
add esp, 8
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
push dword [ebx + 0x10]
push esi
call edi
mov byte [ebx + 0x1c], 0
mov ebx, dword [0x1012f2a8]
cmp byte [ebx + 0x1c], 0
je 0x10075191
mov edx, dword [0x10122eb8]
cmp edx, 0xffffffff
jne 0x10075156
call fcn.10055890
mov edx, dword [0x10122eb8]
mov edx, dword [ebx + edx*4 + 8]
mov ecx, dword [ebx]
call fcn.100ac500
mov esi, eax
lea eax, [ebp - 0x28]
push eax
push 0x40
push dword [ebx + 0x10]
push esi
call edi
mov edx, dword [ebx + 0x10]
mov ecx, esi
push edx
push dword [ebx + 0x18]
call fcn.100ac3f0
add esp, 8
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
push dword [ebx + 0x10]
push esi
call edi
mov byte [ebx + 0x1c], 0
mov ebx, dword [0x1012f2b8]
cmp byte [ebx + 0x1c], 0
je 0x100751ee
mov edx, dword [0x10122eb8]
cmp edx, 0xffffffff
jne 0x100751b3
call fcn.10055890
mov edx, dword [0x10122eb8]
mov edx, dword [ebx + edx*4 + 8]
mov ecx, dword [ebx]
call fcn.100ac500
mov esi, eax
lea eax, [ebp - 0x2c]
push eax
push 0x40
push dword [ebx + 0x10]
push esi
call edi
mov edx, dword [ebx + 0x10]
mov ecx, esi
push edx
push dword [ebx + 0x18]
call fcn.100ac3f0
add esp, 8
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x2c]
push dword [ebx + 0x10]
push esi
call edi
mov byte [ebx + 0x1c], 0
mov ebx, dword [0x1012f290]
cmp byte [ebx + 0x1c], 0
je 0x1007524b
mov edx, dword [0x10122eb8]
cmp edx, 0xffffffff
jne 0x10075210
call fcn.10055890
mov edx, dword [0x10122eb8]
mov edx, dword [ebx + edx*4 + 8]
mov ecx, dword [ebx]
call fcn.100ac500
mov esi, eax
lea eax, [ebp - 0x30]
push eax
push 0x40
push dword [ebx + 0x10]
push esi
call edi
mov edx, dword [ebx + 0x10]
mov ecx, esi
push edx
push dword [ebx + 0x18]
call fcn.100ac3f0
add esp, 8
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x30]
push dword [ebx + 0x10]
push esi
call edi
mov byte [ebx + 0x1c], 0
call fcn.1007ea70
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret