Function at 0x1007ba10
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x1013c018]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4030d4
call esi
lea eax, [ebp - 8]
mov byte [0x4030d4], 4
push eax
push dword [ebp - 8]
push 1
push 0x4030d4
call esi
push 0x1007b9d0
push 0x77ec59
push 0xe8
call fcn.100866a0
push 0x1007b9c0
push 0x77ebb0
push 0xe8
call fcn.100866a0
push 0x1007b9e0
push 0x77ece2
push 0xe9
call fcn.100866a0
push 0x1007b9f0
push 0x836a23
push 0xe9
call fcn.100866a0
push 0x1007ba00
push 0x856fd2
push 0xe9
call fcn.100866a0
add esp, 0x3c
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d37a2
call esi
lea eax, [ebp - 8]
mov byte [0x7d37a2], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d37a2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3af2
call esi
lea eax, [ebp - 8]
mov byte [0x7d3af2], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d3af2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3c6c
call esi
lea eax, [ebp - 8]
mov byte [0x7d3c6c], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d3c6c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3a9f
call esi
lea eax, [ebp - 8]
mov byte [0x7d3a9f], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d3a9f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d4001
call esi
lea eax, [ebp - 8]
mov byte [0x7d4001], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d4001
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d4110
call esi
lea eax, [ebp - 8]
mov byte [0x7d4110], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d4110
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x52
push 0x8684f0
call esi
push 0x52
push 0x90
push 0x8684f0
call fcn.100d9980
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x52
push 0x8684f0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x25
push 0x7c5a68
call esi
mov eax, 0x7c5a68
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
mov byte [eax + 0x24], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x25
push 0x7c5a68
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x159
push 0x7c4430
call esi
push 0x159
push 0x90
push 0x7c4430
call fcn.100d9980
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x159
push 0x7c4430
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7c5ad2
call esi
mov eax, 0x7c5ad2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7c5ad2
call esi
push 0x856fd2
push 0x856faa
push 0xe9
call fcn.100866a0
push 0x7d3725
push 0x7d371e
push 0xe9
call fcn.100866a0
push 0x836a23
push 0x8369fa
push 0xe9
call fcn.100866a0
push 0x7d36bf
push 0x7d36b8
push 0xe9
call fcn.100866a0
push 0x7d3fa3
push 0x7d3f9c
push 0xe9
call fcn.100866a0
add esp, 0x3c
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0xd46c8c
call esi
mov eax, 0xd46c8c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0xd46c8c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0xd46c84
call esi
mov eax, 0xd46c84
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0xd46c84
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa3ba
call esi
mov eax, 0x7aa3ba
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa3ba
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa39c
call esi
mov eax, 0x7aa39c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa39c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa9b3
call esi
mov eax, 0x7aa9b3
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa9b3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7aa2f6
call esi
lea eax, [ebp - 8]
mov dword [0x7aa2f6], 0xbe
push eax
push dword [ebp - 8]
push 4
push 0x7aa2f6
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7aa294
call esi
lea eax, [ebp - 8]
mov byte [0x7aa294], 0x78
push eax
push dword [ebp - 8]
push 1
push 0x7aa294
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7aa66b
call esi
lea eax, [ebp - 8]
mov byte [0x7aa66b], 0x32
push eax
push dword [ebp - 8]
push 1
push 0x7aa66b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d568d
call esi
lea eax, [ebp - 8]
mov dword [0x4d568d], 0x1013235c
push eax
push dword [ebp - 8]
push 4
push 0x4d568d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x6310f7
call esi
lea eax, [ebp - 8]
mov dword [0x6310f7], 0x10132920
push eax
push dword [ebp - 8]
push 4
push 0x6310f7
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x6310d7
call esi
lea eax, [ebp - 8]
mov dword [0x6310d7], 0x10132948
push eax
push dword [ebp - 8]
push 4
push 0x6310d7
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x868e5b
call esi
lea eax, [ebp - 8]
mov dword [0x868e5b], 0x10132968
push eax
push dword [ebp - 8]
push 4
push 0x868e5b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x868e7b
call esi
lea eax, [ebp - 8]
mov dword [0x868e7b], 0x1013298c
push eax
push dword [ebp - 8]
push 4
push 0x868e7b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x868e9b
call esi
lea eax, [ebp - 8]
mov dword [0x868e9b], 0x101329b0
push eax
push dword [ebp - 8]
push 4
push 0x868e9b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7aa2bf
call esi
lea eax, [ebp - 8]
mov dword [0x7aa2bf], 0x8454d
push eax
push dword [ebp - 8]
push 4
push 0x7aa2bf
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7aa324
call esi
lea eax, [ebp - 8]
mov dword [0x7aa324], 0x8454d
push eax
push dword [ebp - 8]
push 4
push 0x7aa324
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7aa38f
call esi
lea eax, [ebp - 8]
mov dword [0x7aa38f], 0x8454d
push eax
push dword [ebp - 8]
push 4
push 0x7aa38f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7aa42d
call esi
lea eax, [ebp - 8]
mov dword [0x7aa42d], 0x8454e
push eax
push dword [ebp - 8]
push 4
push 0x7aa42d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x6311b7
call esi
lea eax, [ebp - 8]
mov dword [0x6311b7], 0x1013235c
push eax
push dword [ebp - 8]
push 4
push 0x6311b7
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x6311d7
call esi
lea eax, [ebp - 8]
mov dword [0x6311d7], 0x1013235c
push eax
push dword [ebp - 8]
push 4
push 0x6311d7
call esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.1008b7da
mov esp, ebp
pop ebp
ret