Function at 0x1007cd70
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x64e139
call edi
mov bl, 5
lea ecx, [ebp - 4]
push ecx
mov byte [0x64e139], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x64e139
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x64e158
call edi
lea ecx, [ebp - 4]
push ecx
mov byte [0x64e158], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x64e158
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x64e12f
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x64e12f], 6
mov edx, dword [ebp - 4]
push edx
push 4
push 0x64e12f
call edi
push 0x1007cd50
push 0x5b84c2
mov bl, 0xe8
call fcn.10110d60
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd47d2c
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0xd47d2c], 0x1007b480
mov edx, dword [ebp - 4]
push edx
push 4
push 0xd47d2c
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd47d34
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0xd47d34], 0x1007b4d0
mov edx, dword [ebp - 4]
push edx
push 4
push 0xd47d34
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd47c74
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0xd47c74], 0x1007b790
mov edx, dword [ebp - 4]
push edx
push 4
push 0xd47c74
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd47c7c
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0xd47c7c], 0x1007b730
mov edx, dword [ebp - 4]
push edx
push 4
push 0xd47c7c
call edi
mov esi, 5
mov ebx, 0x5b85b0
call fcn.1010cff0
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x51c3d6
call edi
mov esi, 0x116dcb58
lea ecx, [ebp - 4]
push ecx
mov dword [0x51c3d6], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x51c3d6
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x51c4d7
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x51c4d7], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x51c4d7
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x51c62b
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x51c62b], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x51c62b
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x578dc2
call edi
mov dword [0x578dc2], esi
lea ecx, [ebp - 4]
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x578dc2
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5a7b4d
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5a7b4d], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5a7b4d
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5b7c04
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5b7c04], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5b7c04
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5b7f65
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5b7f65], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5b7f65
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5ba7b9
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5ba7b9], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5ba7b9
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x64e173
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x64e173], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x64e173
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x64e242
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x64e242], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x64e242
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x64e398
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x64e398], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x64e398
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x64e3b1
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x64e3b1], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x64e3b1
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x78f28b
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x78f28b], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x78f28b
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84a33d
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84a33d], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84a33d
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84a35e
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84a35e], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84a35e
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84a6fb
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84a6fb], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84a6fb
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84a711
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84a711], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84a711
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84a732
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84a732], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84a732
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bb82
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bb82], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bb82
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bba3
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bba3], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bba3
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bc84
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bc84], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bc84
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c24b
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c24b], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c24b
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c301
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c301], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c301
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c3d9
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c3d9], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c3d9
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c3fb
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c3fb], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c3fb
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c48f
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c48f], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c48f
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x91cced
call edi
lea ecx, [ebp - 4]
mov dword [0x91cced], esi
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x91cced
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84b122
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84b122], 0x116dcb63
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84b122
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84baa6
call edi
mov esi, 0x116dcb74
lea ecx, [ebp - 4]
push ecx
mov dword [0x84baa6], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84baa6
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84baef
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84baef], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84baef
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bb0f
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bb0f], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bb0f
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bc3b
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bc3b], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bc3b
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bd9f
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bd9f], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bd9f
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bef9
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bef9], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bef9
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bf9c
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bf9c], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bf9c
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c18c
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c18c], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c18c
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c28e
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c28e], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c28e
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x95feac
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x95feac], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x95feac
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x95ff93
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x95ff93], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x95ff93
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c340
call edi
mov esi, 0x116dcb70
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c340], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c340
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c35b
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c35b], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c35b
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x95fedc
call edi
lea ecx, [ebp - 4]
push ecx
mov dword [0x95fedc], esi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x95fedc
call edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret