Function at 0x100075e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [0x10059898]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [ebp - 0x10]
push 0
push 1
push eax
push 0x522384
mov byte [ebp - 0x10], 4
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x51a3b7
call esi
cmp byte [ebp + 8], 0
mov byte [0x51a3b7], 0xe9
je 0x100076c7
mov eax, 0x100091b0
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
add eax, 0xffae5c44
mov dword [0x51a3b8], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 5
push 0x51a3b7
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x45283f
call esi
mov byte [0x45283f], 0xe9
mov eax, 0x1000abd0
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
add eax, 0xffbad7bc
mov dword [0x452840], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 5
push 0x45283f
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x452844
call esi
mov eax, 0x452844
mov byte [eax], 0x90
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 1
push 0x452844
call esi
jmp 0x10007764
mov eax, 0x10009f20
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
add eax, 0xffae5c44
mov dword [0x51a3b8], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 5
push 0x51a3b7
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x45283f
call esi
mov byte [0x45283f], 0xe9
mov eax, 0x1000ac00
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
add eax, 0xffbad7bc
mov dword [0x452840], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 5
push 0x45283f
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x452844
call esi
mov eax, 0x452844
mov byte [eax], 0x90
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 1
push 0x452844
call esi
push 0
push 1
lea eax, [ebp - 0x10]
mov byte [ebp - 0x10], 0x66
push eax
push 0x522386
call edi
push eax
call ebx
push 0
push 5
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x52236868
push eax
push 0x522351
mov byte [ebp - 8], 0
call edi
push eax
call ebx
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x522356
call esi
mov byte [0x522356], 0xe9
mov eax, 0x1000e400
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
add eax, 0xffaddca5
mov dword [0x522357], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 5
push 0x522356
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x51fbf5
call esi
mov eax, 0x51fbf5
mov byte [eax], 0x90
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 1
push 0x51fbf5
call esi
push 0
push 1
lea eax, [ebp - 0x10]
mov byte [ebp - 0x10], 0xeb
push eax
push 0x51fbbd
call edi
push eax
call ebx
push 0
push 1
lea eax, [ebp - 0x10]
mov byte [ebp - 0x10], 0x52
push eax
push 0x51fbbe
call edi
push eax
call ebx
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x5252bb
call esi
mov byte [0x5252bb], 0xe9
mov eax, 0x10010f90
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
add eax, 0xffadad40
mov dword [0x5252bc], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 5
push 0x5252bb
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
xor ecx, ebp
call fcn.1002f2fb
mov esp, ebp
pop ebp
ret