Function at 0x1000fb70
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x1014e040]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x101612e8], 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
mov byte [ebp - 0x14], 0xe8
mov dword [ebp - 8], 0
jne 0x1000fd05
mov eax, 0x1000fe10
sub eax, 0x78b0c1
mov dword [ebp - 0x13], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x78b0bc
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1000fbed
mov eax, dword [ebp - 0x14]
mov ecx, 0x78b0bc
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1000fbef
call edi
mov eax, 0x1000fb10
mov byte [ebp - 0x14], 0xe9
sub eax, 0x78976c
mov dword [ebp - 8], 0
mov dword [ebp - 0x13], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x789767
call esi
test eax, eax
je 0x1000fc41
mov eax, dword [ebp - 0x14]
mov ecx, 0x789767
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1000fc43
call edi
mov eax, 0x1000fb30
mov byte [ebp - 0x14], 0xe9
sub eax, 0x789a68
mov dword [ebp - 8], 0
mov dword [ebp - 0x13], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x789a63
call esi
test eax, eax
je 0x1000fc95
mov eax, dword [ebp - 0x14]
mov ecx, 0x789a63
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1000fc97
call edi
mov eax, 0x1000fb50
mov byte [ebp - 0x14], 0xe9
sub eax, 0x789db1
mov dword [ebp - 8], 0
mov dword [ebp - 0x13], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x789dac
call esi
test eax, eax
je 0x1000fce9
mov eax, dword [ebp - 0x14]
mov ecx, 0x789dac
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1000fceb
call edi
pop edi
mov dword [0x101612e8], 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085d09
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 8]
mov dword [ebp - 0x13], 0x246959
push eax
push 0x40
push 5
push 0x789767
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1000fd4c
mov eax, dword [ebp - 0x14]
mov ecx, 0x789767
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1000fd4e
call edi
lea eax, [ebp - 8]
mov byte [ebp - 0x14], 0xe8
push eax
push 0x40
push 5
push 0x789a63
mov dword [ebp - 0x13], 0x24665d
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x1000fd9a
mov eax, dword [ebp - 0x14]
mov ecx, 0x789a63
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1000fd9c
call edi
lea eax, [ebp - 8]
mov byte [ebp - 0x14], 0xe8
push eax
push 0x40
push 5
push 0x789dac
mov dword [ebp - 0x13], 0x246314
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x1000fde8
mov eax, dword [ebp - 0x14]
mov ecx, 0x789dac
mov dword [ecx], eax
mov al, byte [ebp - 0x10]
mov byte [ecx + 4], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1000fdea
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
mov dword [0x101612e8], 0
pop esi
call fcn.10085d09
mov esp, ebp
pop ebp
ret