Function at 0x10070aa0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x1013c00c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push 0x1006c5c0
push 0x5edda9
push 0xe8
call fcn.10073d60
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0xc
push eax
push 0x40
push 4
push 0x4d75f0
call esi
lea eax, [ebp - 8]
mov dword [0x4d75f0], 0x5e
push eax
push dword [ebp - 8]
push 4
push 0x4d75f0
call esi
push 0x1006c4e0
push 0x4d76fb
push 0xe8
call fcn.10073d60
push 0x1006c4e0
push 0x4d79c3
push 0xe8
call fcn.10073d60
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7a0e
call esi
lea eax, [ebp - 8]
mov dword [0x4d7a0e], 0x1e0
push eax
push dword [ebp - 8]
push 4
push 0x4d7a0e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4d7a18
call esi
lea eax, [ebp - 8]
mov byte [0x4d7a18], 0
push eax
push dword [ebp - 8]
push 1
push 0x4d7a18
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x40a7ef
call esi
mov eax, 0x40a7ef
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x40a7ef
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x40a87e
call esi
mov eax, 0x40a87e
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x40a87e
call esi
push 0x1006db40
push 0x4d7eb1
push 0xe8
call fcn.10073d60
push 0x1006d800
push 0x414086
push 0xe8
call fcn.10073d60
push 0x1006d800
push 0x4140d9
push 0xe8
call fcn.10073d60
push 0x1006d800
push 0x41412e
push 0xe8
call fcn.10073d60
push 0x1006d800
push 0x4141ba
push 0xe8
call fcn.10073d60
push 0x1006d800
push 0x4141eb
push 0xe8
call fcn.10073d60
add esp, 0x48
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x414239
call esi
lea eax, [ebp - 8]
mov byte [0x414239], 0
push eax
push dword [ebp - 8]
push 1
push 0x414239
call esi
push 0x1006d820
push 0x4d7534
push 0xe8
call fcn.10073d60
push 0x1006d820
push 0x4d7568
push 0xe8
call fcn.10073d60
push 0x1006d890
push 0x401e49
push 0xe8
call fcn.10073d60
push 0x1006d8e0
push 0x40464e
push 0xe8
call fcn.10073d60
push 0x403243
push 0x403126
push 0xe9
call fcn.10073d60
push 0x1006cfe0
push 0x403fa0
push 0xe9
call fcn.10073d60
add esp, 0x48
push 0x1006d990
push 0x4d712a
push 0xe8
call fcn.10073d60
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d6c73
call esi
lea eax, [ebp - 8]
mov dword [0x4d6c73], 0
push eax
push dword [ebp - 8]
push 4
push 0x4d6c73
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x402106
call esi
lea eax, [ebp - 8]
mov byte [0x402106], 0
push eax
push dword [ebp - 8]
push 1
push 0x402106
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4053a3
call esi
lea eax, [ebp - 8]
mov dword [0x4053a3], 0xc942
push eax
push dword [ebp - 8]
push 4
push 0x4053a3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x401d30
call esi
lea eax, [ebp - 8]
mov dword [0x401d30], 0xc942
push eax
push dword [ebp - 8]
push 4
push 0x401d30
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7530
call esi
lea eax, [ebp - 8]
mov dword [0x4d7530], 0xc942
push eax
push dword [ebp - 8]
push 4
push 0x4d7530
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7564
call esi
lea eax, [ebp - 8]
mov dword [0x4d7564], 0xc942
push eax
push dword [ebp - 8]
push 4
push 0x4d7564
call esi
push 0x1006dc80
push 0x663e8c
push 0xe8
call fcn.10073d60
push 0x1006de00
push 0x663e9d
push 0xe8
call fcn.10073d60
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 0x40
push 0x20d
push 0x405380
call esi
push 0x20d
push 0x90
push 0x405380
call fcn.100d9df0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x20d
push 0x405380
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4d74ce
call esi
mov eax, 0x4d74ce
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x4d74ce
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4d7568
call esi
mov eax, 0x4d7568
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x4d7568
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4d7465
call esi
mov eax, 0x4d7465
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x4d7465
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4d7183
call esi
lea eax, [ebp - 8]
mov byte [0x4d7183], 0
push eax
push dword [ebp - 8]
push 1
push 0x4d7183
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x401d30
call esi
lea eax, [ebp - 8]
mov dword [0x401d30], 0xc942
push eax
push dword [ebp - 8]
push 4
push 0x401d30
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7179
call esi
lea eax, [ebp - 8]
mov dword [0x4d7179], 0x1e0
push eax
push dword [ebp - 8]
push 4
push 0x4d7179
call esi
push 0x1006d9f0
push 0x57f159
push 0xe9
call fcn.10073d60
push 0x1006da20
push 0x57f148
push 0xe9
call fcn.10073d60
push 0x1006da50
push 0x57f16a
push 0xe9
call fcn.10073d60
push 0x1006da80
push 0x57f137
push 0xe9
call fcn.10073d60
push 0x1006dab0
push 0x57f17b
push 0xe9
call fcn.10073d60
push 0x1006dae0
push 0x57f18c
push 0xe9
call fcn.10073d60
add esp, 0x48
push 0x1006db10
push 0x57f19d
push 0xe9
call fcn.10073d60
push 0x1006e120
push 0x4d5ee6
push 0xe8
call fcn.10073d60
mov ecx, dword [ebp - 4]
add esp, 0x18
xor ecx, ebp
pop esi
call fcn.10076869
mov esp, ebp
pop ebp
ret