Function at 0x10079ca0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x38
push esi
mov esi, dword [0x1013cf00]
lea eax, [esp + 4]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push 0x42c945
call edi
lea eax, [esp + 8]
mov dword [0x42c945], esi
push eax
push dword [esp + 0xc]
push 4
push 0x42c945
call edi
mov esi, dword [0x1013cf04]
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x42c94f
call edi
lea eax, [esp + 8]
mov dword [0x42c94f], esi
push eax
push dword [esp + 0xc]
push 4
push 0x42c94f
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x42ca39
call edi
mov eax, 0x10079c60
sub eax, 0x42ca3d
mov dword [0x42ca39], eax
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 4
push 0x42ca39
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 2
push 0x42ca21
call edi
mov eax, 0x9009
mov word [0x42ca21], ax
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 2
push 0x42ca21
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 5
push 0x42caae
call edi
mov eax, 0x10079c90
mov byte [0x42caae], 0xe8
sub eax, 0x42cab3
mov dword [0x42caaf], eax
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 5
push 0x42caae
call edi
mov dword [esp + 0x1c], 0x42ca18
mov dword [esp + 0x20], 0x42cb1c
mov dword [esp + 0x24], 0x42cb79
mov dword [esp + 0x28], 0x42cba8
mov dword [esp + 0x2c], 0x42cbcb
mov ecx, dword [0x1013cf04]
lea eax, [esp + 0x40]
push eax
lea edx, [esp + 0x20]
mov dword [esp + 0x34], 0x42cbec
mov dword [esp + 0x38], 0x42ccd9
mov dword [esp + 0x3c], 0x42cd1d
mov dword [esp + 0x40], 0x42cd55
call fcn.10011f50
mov ecx, dword [0x1013cf04]
lea eax, [esp + 0x1c]
imul ecx, dword [0x1013cf00]
lea edx, [esp + 0xc]
push eax
mov dword [esp + 0x10], 0x42c98b
mov dword [esp + 0x14], 0x42c9ab
mov dword [esp + 0x18], 0x42ca4d
mov esi, ecx
mov dword [esp + 0x1c], 0x42ca68
sub esi, dword [0x1013cf04]
call fcn.10011f50
lea eax, [esp + 0x1c]
mov dword [esp + 0xc], 0x42cb22
push eax
lea edx, [esp + 0x10]
mov dword [esp + 0x14], 0x42cc22
mov ecx, esi
mov dword [esp + 0x18], 0x42cd23
mov dword [esp + 0x1c], 0x42cd3d
call fcn.10011f50
mov ecx, dword [0x1013cf04]
lea eax, [esp + 0x18]
push eax
lea edx, [esp + 0x10]
mov dword [esp + 0x10], 0x42cae6
mov dword [esp + 0x14], 0x42cadc
mov dword [esp + 0x18], 0x42cacf
call fcn.10011f50
mov esi, dword [0x1013cf00]
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x42cae1
call edi
lea eax, [esp + 8]
mov dword [0x42cae1], esi
push eax
push dword [esp + 0xc]
push 4
push 0x42cae1
call edi
mov ecx, dword [0x1013cf04]
lea eax, [esp + 0x18]
push eax
lea edx, [esp + 0x10]
mov dword [esp + 0x10], 0x42cc76
mov dword [esp + 0x14], 0x42cc6c
mov dword [esp + 0x18], 0x42cc5f
call fcn.10011f50
mov esi, dword [0x1013cf00]
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x42cc71
call edi
lea eax, [esp + 8]
mov dword [0x42cc71], esi
push eax
push dword [esp + 0xc]
push 4
push 0x42cc71
call edi
mov ecx, dword [0x1013cf04]
lea eax, [esp + 0x18]
mov dword [esp + 0xc], 0x42cc9b
lea edx, [esp + 0xc]
mov dword [esp + 0x10], 0x42cc91
mov dword [esp + 0x14], 0x42cc8b
push eax
call fcn.10011f50
mov esi, dword [0x1013cf00]
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x42cc96
call edi
lea eax, [esp + 8]
mov dword [0x42cc96], esi
push eax
push dword [esp + 0xc]
push 4
push 0x42cc96
call edi
mov ecx, dword [0x1013cf04]
lea eax, [esp + 0x18]
push eax
lea edx, [esp + 0x10]
mov dword [esp + 0x10], 0x42cd7a
mov dword [esp + 0x14], 0x42cd70
mov dword [esp + 0x18], 0x42cd63
call fcn.10011f50
mov esi, dword [0x1013cf00]
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x42cd75
call edi
lea eax, [esp + 8]
mov dword [0x42cd75], esi
push eax
push dword [esp + 0xc]
push 4
push 0x42cd75
call edi
mov ecx, dword [0x1013cf04]
lea eax, [esp + 0x18]
push eax
lea edx, [esp + 0x10]
mov dword [esp + 0x10], 0x42cda6
mov dword [esp + 0x14], 0x42cd9c
mov dword [esp + 0x18], 0x42cd8f
call fcn.10011f50
mov esi, dword [0x1013cf00]
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x42cda1
call edi
lea eax, [esp + 8]
mov dword [0x42cda1], esi
push eax
push dword [esp + 0xc]
push 4
push 0x42cda1
call edi
mov esi, dword [0x1013cf00]
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x42cddc
call edi
lea eax, [esp + 8]
mov dword [0x42cddc], esi
push eax
push dword [esp + 0xc]
push 4
push 0x42cddc
call edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret