Function at 0x10073510
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x78566b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x78566b], 0x10136c10
mov edx, dword [ebp - 4]
push edx
push 4
push 0x78566b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x78568b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x78568b], 0x10136c2c
mov edx, dword [ebp - 4]
push edx
push 4
push 0x78568b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x85a0a3
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x85a0a3], 0
mov edx, dword [ebp - 4]
push edx
push 1
push 0x85a0a3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x78ab37
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x78ab37], 0xa
mov edx, dword [ebp - 4]
push edx
push 1
push 0x78ab37
call esi
push 0x10072470
push 0x78ab0e
mov bl, 0xe9
call fcn.10110d60
push 0x10072460
push 0x78b67a
call fcn.10110d60
push 0x10072480
push 0x78a7aa
mov bl, 0xe8
call fcn.10110d60
push 0x10073010
push 0x78b09a
call fcn.10110d60
push 0x10073170
push 0x78b0cf
call fcn.10110d60
add esp, 0x28
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x78595b
call esi
mov bl, 0x1a
lea ecx, [ebp - 4]
push ecx
mov byte [0x78595b], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x78595b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x785d27
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x785d27], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x785d27
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x785a56
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x785a56], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x785a56
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x785d46
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x785d46], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x785d46
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd43848
call esi
fld dword [0x10141168]
lea ecx, [ebp - 4]
fstp dword [0xd43848]
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0xd43848
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x85a42b
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x85a42b], 0x14
mov edx, dword [ebp - 4]
push edx
push 1
push 0x85a42b
call esi
mov bl, byte [0x10170bcc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x785c70
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x785c70], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x785c70
call esi
mov bl, byte [0x10170bcc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x785c72
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x785c72], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x785c72
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x785c81
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x785c81], 0xf6
mov edx, dword [ebp - 4]
push edx
push 4
push 0x785c81
call esi
mov bl, byte [0x10170bcc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x785cad
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x785cad], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x785cad
call esi
mov bl, byte [0x10170bcc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x785caf
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x785caf], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x785caf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x785cbf
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x785cbf], 0x109
mov edx, dword [ebp - 4]
push edx
push 4
push 0x785cbf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x786243
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x786243], 0
mov edx, dword [ebp - 4]
push edx
push 1
push 0x786243
call esi
mov bl, byte [0x10170bcc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7862cb
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x7862cb], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x7862cb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7862cd
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x7862cd], 0x1e
mov edx, dword [ebp - 4]
push edx
push 1
push 0x7862cd
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7862da
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x7862da], 0x20
mov edx, dword [ebp - 4]
push edx
push 1
push 0x7862da
call esi
mov bl, byte [0x10170bcc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x786333
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x786333], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x786333
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x786335
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x786335], 0x1e
mov edx, dword [ebp - 4]
push edx
push 1
push 0x786335
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x786345
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x786345], 0x7d
mov edx, dword [ebp - 4]
push edx
push 1
push 0x786345
call esi
mov bl, byte [0x10170bcc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x786392
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x786392], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x786392
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x786394
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x786394], 0x1e
mov edx, dword [ebp - 4]
push edx
push 1
push 0x786394
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7863a3
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7863a3], 0xa0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7863a3
call esi
mov bl, byte [0x10170bcc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x786408
call esi
lea ecx, [ebp - 4]
mov byte [0x786408], bl
mov edx, dword [ebp - 4]
push ecx
push edx
push 1
push 0x786408
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x78640a
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x78640a], 0x1e
mov edx, dword [ebp - 4]
push edx
push 1
push 0x78640a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x786419
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x786419], 0xc0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x786419
call esi
mov bl, byte [0x10170bcc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x78649c
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x78649c], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x78649c
call esi
mov bl, byte [0x10170bcc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x78649e
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x78649e], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x78649e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7864ae
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7864ae], 0xe0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7864ae
call esi
push 0x10072430
push 0x7865ba
mov bl, 0xe8
call fcn.10110d60
push 0x10072640
push 0x787794
call fcn.10110d60
push 0x100726c0
push 0x787628
call fcn.10110d60
push 0x10072f90
push 0x85f56f
call fcn.10110d60
push 0x10072fd0
push 0x860225
call fcn.10110d60
add esp, 0x28
pop esi
pop ebx
mov esp, ebp
pop ebp
ret