Function at 0x10075950
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x10155018]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x104db774], 0
jne 0x10075d58
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4d1e33
mov byte [0x104db774], 1
call esi
lea eax, [ebp - 8]
mov byte [0x4d1e33], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x4d1e33
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4d1e69
call esi
lea eax, [ebp - 8]
mov byte [0x4d1e69], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x4d1e69
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4cfa8f
call esi
lea eax, [ebp - 8]
mov byte [0x4cfa8f], 0x5b
push eax
push dword [ebp - 8]
push 1
push 0x4cfa8f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4cfa90
call esi
lea eax, [ebp - 8]
mov byte [0x4cfa90], 0x2f
push eax
push dword [ebp - 8]
push 1
push 0x4cfa90
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x60d985
call esi
lea eax, [ebp - 8]
mov byte [0x60d985], 0x5b
push eax
push dword [ebp - 8]
push 1
push 0x60d985
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x60d986
call esi
lea eax, [ebp - 8]
mov byte [0x60d986], 0x2f
push eax
push dword [ebp - 8]
push 1
push 0x60d986
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x60f356
call esi
lea eax, [ebp - 8]
mov byte [0x60f356], 0x5b
push eax
push dword [ebp - 8]
push 1
push 0x60f356
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x60f357
call esi
lea eax, [ebp - 8]
mov byte [0x60f357], 0x2f
push eax
push dword [ebp - 8]
push 1
push 0x60f357
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x6103ee
call esi
lea eax, [ebp - 8]
mov byte [0x6103ee], 0x5b
push eax
push dword [ebp - 8]
push 1
push 0x6103ee
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x6103ef
call esi
lea eax, [ebp - 8]
mov byte [0x6103ef], 0x2f
push eax
push dword [ebp - 8]
push 1
push 0x6103ef
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x969c60
call esi
lea eax, [ebp - 8]
mov byte [0x969c60], 0x5b
push eax
push dword [ebp - 8]
push 1
push 0x969c60
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x969c61
call esi
lea eax, [ebp - 8]
mov byte [0x969c61], 0x2f
push eax
push dword [ebp - 8]
push 1
push 0x969c61
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x5cf1d2
call esi
lea eax, [ebp - 8]
mov byte [0x5cf1d2], 0x5c
push eax
push dword [ebp - 8]
push 1
push 0x5cf1d2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x5cf1d3
call esi
lea eax, [ebp - 8]
mov byte [0x5cf1d3], 0x2f
push eax
push dword [ebp - 8]
push 1
push 0x5cf1d3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x6103fd
call esi
lea eax, [ebp - 8]
mov byte [0x6103fd], 0x5c
push eax
push dword [ebp - 8]
push 1
push 0x6103fd
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x6103fe
call esi
lea eax, [ebp - 8]
mov byte [0x6103fe], 0x2f
push eax
push dword [ebp - 8]
push 1
push 0x6103fe
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x969b3f
call esi
lea eax, [ebp - 8]
mov byte [0x969b3f], 0x70
push eax
push dword [ebp - 8]
push 1
push 0x969b3f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x969b40
call esi
lea eax, [ebp - 8]
mov byte [0x969b40], 0x28
push eax
push dword [ebp - 8]
push 1
push 0x969b40
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x969b41
call esi
lea eax, [ebp - 8]
mov byte [0x969b41], 0x34
push eax
push dword [ebp - 8]
push 1
push 0x969b41
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x969b60
call esi
lea eax, [ebp - 8]
mov byte [0x969b60], 0x5b
push eax
push dword [ebp - 8]
push 1
push 0x969b60
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x969b61
call esi
lea eax, [ebp - 8]
mov byte [0x969b61], 0x33
push eax
push dword [ebp - 8]
push 1
push 0x969b61
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x969b6f
call esi
lea eax, [ebp - 8]
mov byte [0x969b6f], 0x5b
push eax
push dword [ebp - 8]
push 1
push 0x969b6f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x969b70
call esi
lea eax, [ebp - 8]
mov byte [0x969b70], 0x33
push eax
push dword [ebp - 8]
push 1
push 0x969b70
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x969bad
call esi
lea eax, [ebp - 8]
mov byte [0x969bad], 0x6c
push eax
push dword [ebp - 8]
push 1
push 0x969bad
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x969bae
call esi
lea eax, [ebp - 8]
mov byte [0x969bae], 0x28
push eax
push dword [ebp - 8]
push 1
push 0x969bae
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x969baf
call esi
lea eax, [ebp - 8]
mov byte [0x969baf], 0x34
push eax
push dword [ebp - 8]
push 1
push 0x969baf
call esi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100a3a28
mov esp, ebp
pop ebp
ret