Function at 0x10015f00
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
push 0x100132d0
push 0x895600
mov bl, 0xe9
call fcn.10053c00
push 0x100132d0
push 0x895600
call fcn.10053c00
push 0x10013300
push 0x810f45
mov bl, 0xe8
call fcn.10053c00
push 0x10013300
push 0x8117ee
call fcn.10053c00
push 0x100159a0
push 0x8119e6
call fcn.10053c00
push 0x100159a0
push 0x811b1a
call fcn.10053c00
push 0x100159a0
push 0x811b61
call fcn.10053c00
push 0x100131c0
push 0x80f250
call fcn.10053c00
add esp, 0x40
push 0x10014cc0
push 0x80f8e0
mov bl, 0xe9
call fcn.10053c00
push 0x10015940
push 0x810fe7
mov bl, 0xe8
call fcn.10053c00
push 0x10015940
push 0x811890
call fcn.10053c00
push 0x100153e0
push 0x80f855
call fcn.10053c00
push 0x10015650
push 0x80f84d
call fcn.10053c00
push 0x10014f00
push 0x80f845
call fcn.10053c00
push 0x10015a20
push 0x614aef
call fcn.10053c00
push 0x10015a20
push 0x772460
call fcn.10053c00
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x40
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ef6b
call esi
mov edi, str.CustomInterfaceS2_none.tga
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ef6b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ef6b
call esi
push 0x80f852
push 0x80f84a
mov bl, 0xe9
call fcn.10053c00
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ef0b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ef0b], 0x1005ac9c
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ef0b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ef4b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ef4b], 0x1005acc0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ef4b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ef2b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ef2b], 0x1005ace4
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ef2b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ef8b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ef8b], 0x1005ad08
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ef8b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80efab
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80efab], 0x1005ad2c
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80efab
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80efcb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80efcb], 0x1005ad50
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80efcb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80efeb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80efeb], 0x1005ad70
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80efeb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f00b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f00b], 0x1005ad90
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f00b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f06b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f06b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f06b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f08b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f08b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f08b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f0ab
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f0ab], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f0ab
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f0cb
call esi
lea ecx, [ebp - 4]
mov dword [0x80f0cb], edi
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x80f0cb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f0eb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f0eb], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f0eb
call esi
push 0x10015d00
push 0x7db308
call fcn.10053c00
push 0x10015d20
push 0x7db5d0
mov bl, 0xe8
call fcn.10053c00
add esp, 0x10
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x8137b2
call esi
xor bl, bl
lea ecx, [ebp - 4]
push ecx
mov byte [0x8137b2], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x8137b2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x812ad5
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x812ad5], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x812ad5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x81517b
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x81517b], 2
mov edx, dword [ebp - 4]
push edx
push 1
push 0x81517b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x815242
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x815242], 2
mov edx, dword [ebp - 4]
push edx
push 1
push 0x815242
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x815321
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x815321], 2
mov edx, dword [ebp - 4]
push edx
push 1
push 0x815321
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x815400
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x815400], 2
mov edx, dword [ebp - 4]
push edx
push 1
push 0x815400
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x8154df
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x8154df], 2
mov edx, dword [ebp - 4]
push edx
push 1
push 0x8154df
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7f041d
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x7f041d], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x7f041d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x82c6fd
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x82c6fd], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x82c6fd
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x83513d
call esi
lea ecx, [ebp - 4]
mov byte [0x83513d], bl
mov edx, dword [ebp - 4]
push ecx
push edx
push 1
push 0x83513d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x842493
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x842493], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x842493
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x847055
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x847055], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x847055
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x84f9f5
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x84f9f5], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x84f9f5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x8575e4
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x8575e4], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x8575e4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x8578aa
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x8578aa], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x8578aa
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x8642ba
call esi
mov byte [0x8642ba], bl
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push 0x8642ba
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x8642d6
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x8642d6], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x8642d6
call esi
push 0x10015a50
push 0x779a02
mov bl, 0xe8
call fcn.10053c00
push 0x10014c50
push 0x80f5bb
call fcn.10053c00
push 0x10014b60
push 0x80f2e8
call fcn.10053c00
push 0x10014bf0
push 0x80f4c7
call fcn.10053c00
push 0x10014c60
push 0x80f6af
call fcn.10053c00
push 0x10014b90
push 0x80f3d3
call fcn.10053c00
push 0x10015c30
push 0x836ef6
call fcn.10053c00
push 0x10015cf0
push 0x836f2a
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x836f67
call fcn.10053c00
push 0x10015cf0
push 0x836fb0
call fcn.10053c00
push 0x10015cf0
push 0x836fef
call fcn.10053c00
push 0x10015cf0
push 0x892d64
call fcn.10053c00
push 0x10015c30
push 0x894226
call fcn.10053c00
push 0x10015cf0
push 0x89425a
call fcn.10053c00
push 0x10015cf0
push 0x894297
call fcn.10053c00
push 0x10015cf0
push 0x89431f
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x8942e0
call fcn.10053c00
push 0x10015c30
push 0x893102
call fcn.10053c00
push 0x10015cf0
push 0x89313c
call fcn.10053c00
push 0x10015cf0
push 0x893185
call fcn.10053c00
push 0x10015cf0
push 0x8931e0
call fcn.10053c00
push 0x10015cf0
push 0x89322b
call fcn.10053c00
push 0x10015c30
push 0x884512
call fcn.10053c00
push 0x10015cf0
push 0x88454c
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x884595
call fcn.10053c00
push 0x10015cf0
push 0x8845f0
call fcn.10053c00
push 0x10015cf0
push 0x88463b
call fcn.10053c00
push 0x10015c30
push 0x882f52
call fcn.10053c00
push 0x10015cf0
push 0x882f8c
call fcn.10053c00
push 0x10015cf0
push 0x882fd5
call fcn.10053c00
push 0x10015cf0
push 0x883030
call fcn.10053c00
push 0x10015cf0
push 0x88307b
call fcn.10053c00
add esp, 0x40
push 0x10015c30
push 0x8812a2
call fcn.10053c00
push 0x10015cf0
push 0x8812dc
call fcn.10053c00
push 0x10015cf0
push 0x881325
call fcn.10053c00
push 0x10015cf0
push 0x881380
call fcn.10053c00
push 0x10015cf0
push 0x8813cb
call fcn.10053c00
push 0x10015c30
push 0x87f886
call fcn.10053c00
push 0x10015cf0
push 0x87f8ba
call fcn.10053c00
push 0x10015cf0
push 0x87f8f7
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x87f940
call fcn.10053c00
push 0x10015cf0
push 0x87f97f
call fcn.10053c00
push 0x10015c30
push 0x879ee2
call fcn.10053c00
push 0x10015cf0
push 0x879f1c
call fcn.10053c00
push 0x10015cf0
push 0x879f65
call fcn.10053c00
push 0x10015cf0
push 0x879fc0
call fcn.10053c00
push 0x10015cf0
push 0x87a00b
call fcn.10053c00
push 0x10015c30
push 0x8781bc
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x8781f0
call fcn.10053c00
push 0x10015cf0
push 0x878230
call fcn.10053c00
push 0x10015cf0
push 0x878282
call fcn.10053c00
push 0x10015cf0
push 0x8782c8
call fcn.10053c00
push 0x10015c30
push 0x868052
call fcn.10053c00
push 0x10015cf0
push 0x86808c
call fcn.10053c00
push 0x10015cf0
push 0x8680d5
call fcn.10053c00
push 0x10015cf0
push 0x868130
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x86817b
call fcn.10053c00
push 0x10015c30
push 0x8643b6
call fcn.10053c00
push 0x10015cf0
push 0x8643ea
call fcn.10053c00
push 0x10015cf0
push 0x864427
call fcn.10053c00
push 0x10015cf0
push 0x864470
call fcn.10053c00
push 0x10015cf0
push 0x8644af
call fcn.10053c00
push 0x10015c30
push 0x857946
call fcn.10053c00
push 0x10015cf0
push 0x85797a
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x8579b7
call fcn.10053c00
push 0x10015cf0
push 0x857a00
call fcn.10053c00
push 0x10015cf0
push 0x857a3f
call fcn.10053c00
push 0x10015c30
push 0x8567e6
call fcn.10053c00
push 0x10015cf0
push 0x85681a
call fcn.10053c00
push 0x10015cf0
push 0x856857
call fcn.10053c00
push 0x10015cf0
push 0x8568a0
call fcn.10053c00
push 0x10015cf0
push 0x8568df
call fcn.10053c00
add esp, 0x40
push 0x10015c30
push 0x8540b6
call fcn.10053c00
push 0x10015cf0
push 0x8540ea
call fcn.10053c00
push 0x10015cf0
push 0x854127
call fcn.10053c00
push 0x10015cf0
push 0x854170
call fcn.10053c00
push 0x10015cf0
push 0x8541af
call fcn.10053c00
push 0x10015cf0
push 0x8525b7
call fcn.10053c00
push 0x10015c30
push 0x852476
call fcn.10053c00
push 0x10015cf0
push 0x8524aa
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x8524e7
call fcn.10053c00
push 0x10015cf0
push 0x852530
call fcn.10053c00
push 0x10015cf0
push 0x85256f
call fcn.10053c00
push 0x10015cf0
push 0x850aa7
call fcn.10053c00
push 0x10015c30
push 0x850966
call fcn.10053c00
push 0x10015cf0
push 0x85099a
call fcn.10053c00
push 0x10015cf0
push 0x8509d7
call fcn.10053c00
push 0x10015cf0
push 0x850a20
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x850a5f
call fcn.10053c00
push 0x10015c30
push 0x84f406
call fcn.10053c00
push 0x10015cf0
push 0x84f43a
call fcn.10053c00
push 0x10015cf0
push 0x84f477
call fcn.10053c00
push 0x10015cf0
push 0x84f4c0
call fcn.10053c00
push 0x10015cf0
push 0x84f4ff
call fcn.10053c00
push 0x10015c30
push 0x84d01a
call fcn.10053c00
push 0x10015cf0
push 0x84d05a
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x84d0ac
call fcn.10053c00
push 0x10015cf0
push 0x84d116
call fcn.10053c00
push 0x10015cf0
push 0x84d16e
call fcn.10053c00
push 0x10015c30
push 0x84a546
call fcn.10053c00
push 0x10015cf0
push 0x84a57a
call fcn.10053c00
push 0x10015cf0
push 0x84a5ba
call fcn.10053c00
push 0x10015cf0
push 0x84a60c
call fcn.10053c00
push 0x10015cf0
push 0x84a652
call fcn.10053c00
add esp, 0x40
push 0x10015c30
push 0x8470a6
call fcn.10053c00
push 0x10015cf0
push 0x8470da
call fcn.10053c00
push 0x10015cf0
push 0x847117
call fcn.10053c00
push 0x10015cf0
push 0x847160
call fcn.10053c00
push 0x10015cf0
push 0x84719f
call fcn.10053c00
push 0x10015c30
push 0x845956
call fcn.10053c00
push 0x10015cf0
push 0x84598a
call fcn.10053c00
push 0x10015cf0
push 0x8459c7
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x845a10
call fcn.10053c00
push 0x10015cf0
push 0x845a4f
call fcn.10053c00
push 0x10015c30
push 0x843826
call fcn.10053c00
push 0x10015cf0
push 0x84385a
call fcn.10053c00
push 0x10015cf0
push 0x843897
call fcn.10053c00
push 0x10015cf0
push 0x8438e0
call fcn.10053c00
push 0x10015cf0
push 0x84391f
call fcn.10053c00
push 0x10015c30
push 0x841e49
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x841e7d
call fcn.10053c00
push 0x10015cf0
push 0x841eba
call fcn.10053c00
push 0x10015cf0
push 0x841f03
call fcn.10053c00
push 0x10015cf0
push 0x841f42
call fcn.10053c00
push 0x10015c30
push 0x83ea46
call fcn.10053c00
push 0x10015cf0
push 0x83ea7a
call fcn.10053c00
push 0x10015cf0
push 0x83eab7
call fcn.10053c00
push 0x10015cf0
push 0x83eb00
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x83eb3f
call fcn.10053c00
push 0x10015c30
push 0x82ca22
call fcn.10053c00
push 0x10015cf0
push 0x82ca5c
call fcn.10053c00
push 0x10015cf0
push 0x82caa5
call fcn.10053c00
push 0x10015cf0
push 0x82cb00
call fcn.10053c00
push 0x10015cf0
push 0x82cb4b
call fcn.10053c00
push 0x10015c30
push 0x80c848
call fcn.10053c00
push 0x10015cf0
push 0x80c87c
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x80c8bc
call fcn.10053c00
push 0x10015cf0
push 0x80c90e
call fcn.10053c00
push 0x10015cf0
push 0x80c954
call fcn.10053c00
push 0x10015c30
push 0x7f65a6
call fcn.10053c00
push 0x10015cf0
push 0x7f65e6
call fcn.10053c00
push 0x10015cf0
push 0x7f6638
call fcn.10053c00
push 0x10015cf0
push 0x7f66a2
call fcn.10053c00
push 0x10015cf0
push 0x7f66fa
call fcn.10053c00
add esp, 0x40
push 0x10015c30
push 0x7d55a6
call fcn.10053c00
push 0x10015cf0
push 0x7d55da
call fcn.10053c00
push 0x10015cf0
push 0x7d5617
call fcn.10053c00
push 0x10015cf0
push 0x7d5660
call fcn.10053c00
push 0x10015cf0
push 0x7d569f
call fcn.10053c00
push 0x10015c30
push 0x7d1786
call fcn.10053c00
push 0x10015cf0
push 0x7d17ba
call fcn.10053c00
push 0x10015cf0
push 0x7d17f7
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x7d1840
call fcn.10053c00
push 0x10015cf0
push 0x7d187f
call fcn.10053c00
push 0x10015c30
push 0x7cb6f6
call fcn.10053c00
push 0x10015cf0
push 0x7cb72a
call fcn.10053c00
push 0x10015cf0
push 0x7cb767
call fcn.10053c00
push 0x10015cf0
push 0x7cb7b0
call fcn.10053c00
push 0x10015cf0
push 0x7cb7ef
call fcn.10053c00
push 0x10015c30
push 0x7c7d0c
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x7c7d46
call fcn.10053c00
push 0x10015cf0
push 0x7c7d89
call fcn.10053c00
push 0x10015cf0
push 0x7c7dd8
call fcn.10053c00
push 0x10015cf0
push 0x7c7e1d
call fcn.10053c00
push 0x10015c30
push 0x7c6bcc
call fcn.10053c00
push 0x10015cf0
push 0x7c6c06
call fcn.10053c00
push 0x10015cf0
push 0x7c6c49
call fcn.10053c00
push 0x10015cf0
push 0x7c6c98
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x7c6cdd
call fcn.10053c00
push 0x10015c30
push 0x7c46e6
call fcn.10053c00
push 0x10015cf0
push 0x7c471a
call fcn.10053c00
push 0x10015cf0
push 0x7c4757
call fcn.10053c00
push 0x10015cf0
push 0x7c47a0
call fcn.10053c00
push 0x10015cf0
push 0x7c47df
call fcn.10053c00
push 0x10015c30
push 0x7c2676
call fcn.10053c00
push 0x10015cf0
push 0x7c26aa
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x7c26ea
call fcn.10053c00
push 0x10015cf0
push 0x7c273c
call fcn.10053c00
push 0x10015cf0
push 0x7c2782
call fcn.10053c00
push 0x10015c30
push 0x7c1872
call fcn.10053c00
push 0x10015cf0
push 0x7c18ac
call fcn.10053c00
push 0x10015cf0
push 0x7c18f5
call fcn.10053c00
push 0x10015cf0
push 0x7c1950
call fcn.10053c00
push 0x10015cf0
push 0x7c199b
call fcn.10053c00
add esp, 0x40
push 0x10015c30
push 0x78e6d6
call fcn.10053c00
push 0x10015cf0
push 0x78e70a
call fcn.10053c00
push 0x10015cf0
push 0x78e74a
call fcn.10053c00
push 0x10015cf0
push 0x78e79c
call fcn.10053c00
push 0x10015cf0
push 0x78e7e2
call fcn.10053c00
push 0x10015c30
push 0x77f209
call fcn.10053c00
push 0x10015cf0
push 0x77f23d
call fcn.10053c00
push 0x10015cf0
push 0x77f27a
call fcn.10053c00
add esp, 0x40
push 0x10015cf0
push 0x77f2c3
call fcn.10053c00
push 0x10015cf0
push 0x77f302
call fcn.10053c00
add esp, 0x10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret