Function at 0x1007a790
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x8c
push ebx
push esi
push edi
lea eax, [esp + 0x94]
mov dword [esp + 0x28], 0x447201
push eax
lea edx, [esp + 0x2c]
mov dword [esp + 0x30], 0x447248
mov dword [esp + 0x34], 0x4459f0
mov dword [esp + 0x38], 0x445a0c
mov dword [esp + 0x3c], 0x445da7
mov dword [esp + 0x40], 0x445dd1
mov dword [esp + 0x44], 0x447e43
mov dword [esp + 0x48], 0x447e75
mov dword [esp + 0x4c], 0x447ee2
mov dword [esp + 0x50], 0x447efe
mov dword [esp + 0x54], 0x447db5
mov dword [esp + 0x58], 0x44a705
mov dword [esp + 0x5c], 0x44aa28
mov dword [esp + 0x60], 0x448354
mov dword [esp + 0x64], 0x4485ac
mov dword [esp + 0x68], 0x4487ff
mov dword [esp + 0x6c], 0x448ca0
mov dword [esp + 0x70], 0x4497a0
mov dword [esp + 0x74], 0x449aa0
mov dword [esp + 0x78], 0x449c2c
mov dword [esp + 0x7c], 0x44ab4c
mov dword [esp + 0x80], 0x44ab6a
mov dword [esp + 0x84], 0x44ac23
mov dword [esp + 0x88], 0x4753c1
mov dword [esp + 0x8c], 0x475400
mov dword [esp + 0x90], 0x47559f
mov dword [esp + 0x94], 0x4755f5
call fcn.1007ac60
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 0x10]
push eax
push 0x40
push 4
push 0x447190
call edi
mov eax, 0x1007a3b0
sub eax, 0x447194
mov dword [0x447190], eax
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x14]
push 4
push 0x447190
call edi
lea eax, [esp + 0x28]
mov dword [esp + 0x14], 0x445997
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], 0x44a6e4
push eax
push ecx
mov ecx, 0x1007a470
mov dword [esp + 0x24], 0x448333
mov dword [esp + 0x28], 0x4487ce
mov dword [esp + 0x2c], 0x44976f
call fcn.100122b0
cmp byte [0x1017503f], 0
mov ecx, 0x64
mov esi, dword [0x1013cf00]
mov eax, 0xc8
cmovne eax, ecx
sub esi, eax
lea eax, [esp + 0x10]
push eax
push 0x40
push 4
push 0x44a03e
call edi
lea eax, [esp + 0x10]
mov dword [0x44a03e], esi
push eax
push dword [esp + 0x14]
push 4
push 0x44a03e
call edi
mov esi, dword [0x1013cf04]
lea eax, [esp + 0x10]
push eax
push 0x40
push 4
push 0x44a02a
call edi
lea eax, [esp + 0x10]
mov dword [0x44a02a], esi
push eax
push dword [esp + 0x14]
push 4
push 0x44a02a
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 4
push 0x4462a8
call edi
mov esi, 0x1007a490
lea eax, [esi - 0x4462ac]
mov dword [0x4462a8], eax
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x14]
push 4
push 0x4462a8
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 4
push 0x446388
call edi
lea eax, [esp + 0x10]
sub esi, 0x44638c
push eax
push dword [esp + 0x14]
mov dword [0x446388], esi
push 4
push 0x446388
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 4
push 0x447901
call edi
mov eax, 0x1007a4d0
sub eax, 0x447905
mov dword [0x447901], eax
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x14]
push 4
push 0x447901
call edi
lea eax, [esp + 0x14]
mov dword [esp + 0x10], 0x449661
lea ecx, [esp + 0x10]
push eax
push ecx
mov ecx, 0x1007a4b0
call fcn.100122b0
cmp byte [0x1017503f], 0
je 0x1007aa66
lea eax, [esp + 0x10]
push eax
push 0x40
push 4
push 0x4472d9
call edi
mov eax, 0x1007a460
sub eax, 0x4472dd
mov dword [0x4472d9], eax
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x14]
push 4
push 0x4472d9
call edi
cmp byte [0x1013cef4], 0
je 0x1007ac39
lea eax, [esp + 0x10]
push eax
push 0x40
push 4
push 0x44ab7a
call edi
mov eax, 0x1007a6a0
sub eax, 0x44ab7e
mov dword [0x44ab7a], eax
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x14]
push 4
push 0x44ab7a
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 2
push 0x447255
call edi
mov eax, 0xd269
mov word [0x447255], ax
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x14]
push 2
push 0x447255
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 4
push 0x447257
call edi
lea eax, [esp + 0x10]
mov dword [0x447257], 0x13
push eax
push dword [esp + 0x14]
push 4
push 0x447257
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x44725b
call edi
lea eax, [esp + 0x10]
mov byte [0x44725b], 0x90
push eax
push dword [esp + 0x14]
push 1
push 0x44725b
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 2
push 0x44725c
call edi
mov eax, 0x3eb
mov word [0x44725c], ax
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x14]
push 2
push 0x44725c
call edi
mov dword [0x1013d3d8], 0x13
xor ecx, ecx
mov dword [0x1013d3e0], 0xdb
mov eax, 0x518754
nop
test ecx, ecx
js 0x1007ab79
cmp ecx, 8
jl 0x1007ab7a
int3
add dword [eax - 8], 5
test ecx, ecx
js 0x1007ab87
cmp ecx, 8
jl 0x1007ab88
int3
add dword [eax], 5
inc ecx
add eax, 0x10
cmp eax, 0x5187d4
jb 0x1007ab70
add dword [0x1013ceec], 5
sub esp, 0x28
mov eax, esp
mov ecx, 0x1007a700
mov dword [eax + 0x24], 0
test ecx, ecx
je 0x1007abc2
mov dword [eax], 0x101218c8
mov dword [eax + 4], 0x1007a700
mov dword [eax + 0x24], eax
lea eax, [esp + 0x3c]
mov ecx, 0x10154dc4
push eax
call fcn.1001d210
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x1007ac39
push dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
push ecx
call fcn.1000fa00
mov ecx, dword [esp + 0x1c]
mov eax, 0x66666667
mov ebx, dword [esp + 0x14]
sub ecx, ebx
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 0x6666666
ja 0x1007ac40
lea eax, [eax + eax*4]
shl eax, 3
cmp eax, 0x1000
jb 0x1007ac30
test bl, 0x1f
jne 0x1007ac45
mov eax, dword [ebx - 4]
cmp eax, ebx
jae 0x1007ac4a
sub ebx, eax
cmp ebx, 4
jb 0x1007ac4f
cmp ebx, 0x23
ja 0x1007ac54
mov ebx, eax
push ebx
call fcn.100e9b9e
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.100efe1d
call fcn.100efe1d
call fcn.100efe1d
call fcn.100efe1d
call fcn.100efe1d
int3