Function at 0x1007ae60
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push edi
push 0x1007ae00
push 0x5914ab
push 0xe8
call fcn.100c9bf0
push 0x1007ae00
push 0x5914c7
push 0xe8
call fcn.100c9bf0
push 0x1007ae00
push 0x5a0652
push 0xe8
call fcn.100c9bf0
push 0x1007ae00
push 0x5a0775
push 0xe8
call fcn.100c9bf0
push 0x1007ae00
push 0x5b6cf4
push 0xe8
call fcn.100c9bf0
push 0x1007ae00
push 0x7e05a8
push 0xe8
call fcn.100c9bf0
add esp, 0x44
mov edx, 6
mov ecx, 0x74a128
call fcn.100c9340
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 4
mov eax, 0x1007a490
mov byte [ebp - 0x10], 0xe9
sub eax, 0x74a12d
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x74a128
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1007af53
mov eax, dword [ebp - 0x10]
mov ecx, 0x74a128
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1007af55
call ebx
push ecx
mov edx, 6
mov ecx, 0x5cc8e4
call fcn.100c9340
add esp, 4
mov byte [ebp - 0x10], 0xe9
mov eax, 0x1007a5f0
mov dword [ebp - 4], 0
sub eax, 0x5cc8e9
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x5cc8e4
call edi
test eax, eax
je 0x1007afba
mov eax, dword [ebp - 0x10]
mov ecx, 0x5cc8e4
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1007afbc
call ebx
push esi
mov esi, 0x56595e
mov ebx, 6
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push esi
call edi
lea eax, [ebp - 4]
mov byte [esi], 0x90
push eax
push dword [ebp - 4]
push 1
push esi
call edi
inc esi
sub ebx, 1
jne 0x1007afc7
push 7
call fcn.100d890b
mov esi, eax
mov dword [ebp - 4], ebx
mov eax, 0x90909090
add esp, 4
mov dword [esi], eax
mov word [esi + 4], ax
mov byte [esi + 6], al
lea eax, [ebp - 4]
push eax
push 0x40
push 7
push 0x566178
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1007b04b
mov eax, dword [esi]
mov ecx, 0x566178
mov dword [ecx], eax
mov ax, word [esi + 4]
mov word [ecx + 4], ax
mov al, byte [esi + 6]
mov byte [ecx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 7
push ecx
call edi
test eax, eax
jne 0x1007b04d
call ebx
mov eax, 0x1007a6b0
mov byte [ebp - 0x10], 0xe9
sub eax, 0x56617d
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x566178
call edi
test eax, eax
je 0x1007b09f
mov eax, dword [ebp - 0x10]
mov ecx, 0x566178
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1007b0a1
call ebx
push 6
call fcn.100d890b
mov esi, eax
mov dword [ebp - 4], 0
add esp, 4
mov eax, 0x90909090
mov dword [esi], eax
mov word [esi + 4], ax
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x749dcc
call edi
test eax, eax
je 0x1007b0fa
mov eax, dword [esi]
mov ecx, 0x749dcc
mov dword [ecx], eax
mov ax, word [esi + 4]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call edi
test eax, eax
jne 0x1007b0fc
call ebx
mov eax, 0x1007a540
mov byte [ebp - 0x10], 0xe9
sub eax, 0x749dd1
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x749dcc
call edi
test eax, eax
je 0x1007b14e
mov eax, dword [ebp - 0x10]
mov ecx, 0x749dcc
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1007b150
call ebx
push 6
call fcn.100d890b
mov esi, eax
mov dword [ebp - 4], 0
add esp, 4
mov eax, 0x90909090
mov dword [esi], eax
mov word [esi + 4], ax
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x56595e
call edi
test eax, eax
je 0x1007b1a9
mov eax, dword [esi]
mov ecx, 0x56595e
mov dword [ecx], eax
mov ax, word [esi + 4]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call edi
test eax, eax
jne 0x1007b1ab
call ebx
mov eax, 0x1007ad80
mov byte [ebp - 0x10], 0xe9
sub eax, 0x565963
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x56595e
call edi
pop esi
test eax, eax
je 0x1007b1fe
mov eax, dword [ebp - 0x10]
mov ecx, 0x56595e
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1007b200
call ebx
pop edi
pop ebx
mov esp, ebp
pop ebp
ret