Function at 0x10071510
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x10139040]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push 0x10071130
push 0x7a9ec7
push 0xe8
call fcn.1006c3c0
push 0x100714f0
push 0x41003b
push 0xe8
call fcn.1006c3c0
push 0x100714f0
push 0x41008a
push 0xe8
call fcn.1006c3c0
push 0x100714f0
push 0x4101cb
push 0xe8
call fcn.1006c3c0
push 0x100714f0
push 0x41011f
push 0xe8
call fcn.1006c3c0
push 0x100714f0
push 0x410154
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x100714d0
push 0x7c57b9
push 0xe8
call fcn.1006c3c0
push 0x10070af0
push 0x81aa9c
push 0xe8
call fcn.1006c3c0
push 0x10070af0
push 0x81aa42
push 0xe8
call fcn.1006c3c0
push 0x10070af0
push 0x81a9e8
push 0xe8
call fcn.1006c3c0
push 0x10070af0
push 0x81a977
push 0xe8
call fcn.1006c3c0
push 0x10070af0
push 0x81a944
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x10070af0
push 0x81a73d
push 0xe8
call fcn.1006c3c0
push 0x10070af0
push 0x81a6f4
push 0xe8
call fcn.1006c3c0
push 0x10070b10
push 0x4287f7
push 0xe8
call fcn.1006c3c0
push 0x10070b10
push 0x428835
push 0xe8
call fcn.1006c3c0
push 0x10070b10
push 0x428873
push 0xe8
call fcn.1006c3c0
push 0x10070b10
push 0x4288b1
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x10071420
push 0x4286ed
push 0xe8
call fcn.1006c3c0
push 0x10071370
push 0x82aec0
push 0xe8
call fcn.1006c3c0
push 0x10071370
push 0x82af87
push 0xe8
call fcn.1006c3c0
push 0x100712e0
push 0x82b1fa
push 0xe8
call fcn.1006c3c0
push 0x100712e0
push 0x82b18b
push 0xe8
call fcn.1006c3c0
push 0x10071260
push 0x82b005
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x10071260
push 0x82b08b
push 0xe8
call fcn.1006c3c0
push 0x10071260
push 0x82b100
push 0xe8
call fcn.1006c3c0
push 0x10071260
push 0x82b25d
push 0xe8
call fcn.1006c3c0
push 0x10071260
push 0x82b2cb
push 0xe8
call fcn.1006c3c0
push 0x10071260
push 0x82b339
push 0xe8
call fcn.1006c3c0
push 0x10071260
push 0x82b3b7
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x10071180
push 0x934286
push 0xe8
call fcn.1006c3c0
push 0x10071180
push 0x855868
push 0xe8
call fcn.1006c3c0
push 0x10071180
push 0x85589f
push 0xe8
call fcn.1006c3c0
push 0x10071180
push 0x88643f
push 0xe8
call fcn.1006c3c0
push 0x10071180
push 0x8863f9
push 0xe8
call fcn.1006c3c0
push 0x10071160
push 0x7919b8
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x10071160
push 0x791982
push 0xe8
call fcn.1006c3c0
push 0x10071160
push 0x778f05
push 0xe8
call fcn.1006c3c0
push 0x10070af0
push 0x9481eb
push 0xe8
call fcn.1006c3c0
push 0x10070af0
push 0x94823e
push 0xe8
call fcn.1006c3c0
push 0x10070af0
push 0x948298
push 0xe8
call fcn.1006c3c0
push 0x10070af0
push 0x9482d5
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x10070af0
push 0x948312
push 0xe8
call fcn.1006c3c0
push 0x10070af0
push 0x94839e
push 0xe8
call fcn.1006c3c0
push 0x100710e0
push 0x947edd
push 0xe8
call fcn.1006c3c0
push 0x100710e0
push 0x947f64
push 0xe8
call fcn.1006c3c0
push 0x10071210
push 0x947fe5
push 0xe8
call fcn.1006c3c0
push 0x10071210
push 0x94801a
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x10071210
push 0x94807d
push 0xe8
call fcn.1006c3c0
push 0x10071210
push 0x9480be
push 0xe8
call fcn.1006c3c0
push 0x10071210
push 0x948102
push 0xe8
call fcn.1006c3c0
push 0x10071210
push 0x948151
push 0xe8
call fcn.1006c3c0
push 0x10071480
push 0x8863f9
push 0xe8
call fcn.1006c3c0
push 0x10071480
push 0x88643f
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x10071480
push 0x886270
push 0xe8
call fcn.1006c3c0
push 0x10071480
push 0x886318
push 0xe8
call fcn.1006c3c0
push 0x10071480
push 0x886367
push 0xe8
call fcn.1006c3c0
push 0x10071480
push 0x8863a2
push 0xe8
call fcn.1006c3c0
push 0x10071170
push 0x85ecb1
push 0xe8
call fcn.1006c3c0
push 0x100709a0
push 0x63764c
push 0xe9
call fcn.1006c3c0
add esp, 0x48
push 0x100709e0
push 0x4d7c98
push 0xe8
call fcn.1006c3c0
push 0x100709e0
push 0x4d7c0d
push 0xe8
call fcn.1006c3c0
push 0x100709c0
push 0x40464e
push 0xe8
call fcn.1006c3c0
push 0x1006ead0
push 0x4d2180
push 0xe8
call fcn.1006c3c0
push 0x100708c0
push 0x857746
push 0xe8
call fcn.1006c3c0
push 0x10070860
push 0x85676e
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x100707a0
push 0x841e49
push 0xe8
call fcn.1006c3c0
push 0x10070680
push 0x7d591d
push 0xe8
call fcn.1006c3c0
push 0x100704b0
push 0x85f0cd
push 0xe8
call fcn.1006c3c0
push 0x100704b0
push 0x85efe0
push 0xe8
call fcn.1006c3c0
push 0x100704a0
push 0x78b0f0
push 0xe9
call fcn.1006c3c0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0x3c
push eax
push 0x40
push 4
push 0x4d9749
call esi
lea eax, [ebp - 8]
mov dword [0x4d9749], 0x1e0
push eax
push dword [ebp - 8]
push 4
push 0x4d9749
call esi
push 0x10070490
push 0x40f2e9
push 0xe8
call fcn.1006c3c0
push 0x10070490
push 0x4d714e
push 0xe8
call fcn.1006c3c0
push 0x10070490
push 0x4d79e7
push 0xe8
call fcn.1006c3c0
push 0x10070490
push 0x4d9756
push 0xe8
call fcn.1006c3c0
push 0x10070490
push 0x5db4d5
push 0xe8
call fcn.1006c3c0
push 0x10070490
push 0x5db1aa
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x10070490
push 0x5db22f
push 0xe8
call fcn.1006c3c0
push 0x10070490
push 0x5db322
push 0xe8
call fcn.1006c3c0
push 0x10070490
push 0x5db3a7
push 0xe8
call fcn.1006c3c0
push 0x10070490
push 0x5db46d
push 0xe8
call fcn.1006c3c0
push 0x10070490
push 0x5db4ad
push 0xe8
call fcn.1006c3c0
push 0x10070490
push 0x5db534
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x10070490
push 0x5db5c4
push 0xe8
call fcn.1006c3c0
push 0x10070490
push 0x5db628
push 0xe8
call fcn.1006c3c0
push 0x10070490
push 0x5db68c
push 0xe8
call fcn.1006c3c0
push 0x10070490
push 0x5db6ed
push 0xe8
call fcn.1006c3c0
push 0x10070180
push 0x5c6e80
push 0xe9
call fcn.1006c3c0
push 0x10070100
push 0x779ccd
push 0xe9
call fcn.1006c3c0
add esp, 0x48
push 0x100700b0
push 0x59792d
push 0xe9
call fcn.1006c3c0
push 0x10070060
push 0x635b55
push 0xe9
call fcn.1006c3c0
push 0x10070000
push 0x4d06a1
push 0xe9
call fcn.1006c3c0
push 0x10070020
push 0x4d06f4
push 0xe9
call fcn.1006c3c0
push 0x1006ffb0
push 0x6359b6
push 0xe9
call fcn.1006c3c0
push 0x1006ff20
push 0x636420
push 0xe9
call fcn.1006c3c0
add esp, 0x48
push 0x10070a70
push 0x5b97dc
push 0xe8
call fcn.1006c3c0
push 0x10070a70
push 0x5b984c
push 0xe8
call fcn.1006c3c0
push 0x10070a70
push 0x5b9904
push 0xe8
call fcn.1006c3c0
push 0x10070a70
push 0x8c2e0f
push 0xe8
call fcn.1006c3c0
push 0x10070a70
push 0x8c2e7f
push 0xe8
call fcn.1006c3c0
push 0x10070a70
push 0x8cc713
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x10070a70
push 0x8cc788
push 0xe8
call fcn.1006c3c0
push 0x10070a70
push 0x8d99b8
push 0xe8
call fcn.1006c3c0
push 0x10070a70
push 0x8d9a2d
push 0xe8
call fcn.1006c3c0
push 0x10070a70
push 0x8ef47b
push 0xe8
call fcn.1006c3c0
push 0x10070a70
push 0x8ef4ed
push 0xe8
call fcn.1006c3c0
push 0x10070a70
push 0x8ef5c5
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x10070a70
push 0x8ef65a
push 0xe8
call fcn.1006c3c0
push 0x10070a70
push 0x914fc9
push 0xe8
call fcn.1006c3c0
push 0x10070a70
push 0x91503e
push 0xe8
call fcn.1006c3c0
push 0x10070060
push 0x635b55
push 0xe9
call fcn.1006c3c0
push 0x10070000
push 0x4d06a1
push 0xe9
call fcn.1006c3c0
push 0x1006ffb0
push 0x6359b6
push 0xe9
call fcn.1006c3c0
add esp, 0x48
push 0x10070b30
push 0x81a146
push 0xe8
call fcn.1006c3c0
push 0x10070b30
push 0x81a199
push 0xe8
call fcn.1006c3c0
push 0x10070b70
push 0x819415
push 0xe8
call fcn.1006c3c0
push 0x10070bc0
push 0x85cc50
push 0xe8
call fcn.1006c3c0
push 0x10070c60
push 0x85c446
push 0xe8
call fcn.1006c3c0
push 0x10070cb0
push 0x943d7f
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x10070bf0
push 0x8240a9
push 0xe8
call fcn.1006c3c0
push 0x10070d30
push 0x945114
push 0xe8
call fcn.1006c3c0
push 0x10070da0
push 0x945180
push 0xe8
call fcn.1006c3c0
push 0x10070dc0
push 0x5c6e80
push 0xe9
call fcn.1006c3c0
add esp, 0x30
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4d128f
call esi
lea eax, [ebp - 8]
mov byte [0x4d128f], 0x1d
push eax
push dword [ebp - 8]
push 1
push 0x4d128f
call esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.100890df
mov esp, ebp
pop ebp
ret