Function at 0x10010e10
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10144040]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x10157240], 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
mov byte [ebp - 0x14], 0xe8
mov dword [ebp - 8], 0
jne 0x10010fa5
mov eax, 0x100110b0
sub eax, 0x78b0c1
mov dword [ebp - 0x13], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x78b0bc
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x10010e8d
mov eax, dword [ebp - 0x14]
mov ecx, 0x78b0bc
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x10010e8f
call edi
mov eax, 0x10010db0
mov byte [ebp - 0x14], 0xe9
sub eax, 0x78976c
mov dword [ebp - 8], 0
mov dword [ebp - 0x13], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x789767
call esi
test eax, eax
je 0x10010ee1
mov eax, dword [ebp - 0x14]
mov ecx, 0x789767
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x10010ee3
call edi
mov eax, 0x10010dd0
mov byte [ebp - 0x14], 0xe9
sub eax, 0x789a68
mov dword [ebp - 8], 0
mov dword [ebp - 0x13], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x789a63
call esi
test eax, eax
je 0x10010f35
mov eax, dword [ebp - 0x14]
mov ecx, 0x789a63
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x10010f37
call edi
mov eax, 0x10010df0
mov byte [ebp - 0x14], 0xe9
sub eax, 0x789db1
mov dword [ebp - 8], 0
mov dword [ebp - 0x13], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x789dac
call esi
test eax, eax
je 0x10010f89
mov eax, dword [ebp - 0x14]
mov ecx, 0x789dac
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x10010f8b
call edi
pop edi
mov dword [0x10157240], 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007c329
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 8]
mov dword [ebp - 0x13], 0x246959
push eax
push 0x40
push 5
push 0x789767
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x10010fec
mov eax, dword [ebp - 0x14]
mov ecx, 0x789767
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x10010fee
call edi
lea eax, [ebp - 8]
mov byte [ebp - 0x14], 0xe8
push eax
push 0x40
push 5
push 0x789a63
mov dword [ebp - 0x13], 0x24665d
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x1001103a
mov eax, dword [ebp - 0x14]
mov ecx, 0x789a63
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1001103c
call edi
lea eax, [ebp - 8]
mov byte [ebp - 0x14], 0xe8
push eax
push 0x40
push 5
push 0x789dac
mov dword [ebp - 0x13], 0x246314
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x10011088
mov eax, dword [ebp - 0x14]
mov ecx, 0x789dac
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1001108a
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
mov dword [0x10157240], 0
pop esi
call fcn.1007c329
mov esp, ebp
pop ebp
ret