Function at 0x10079660
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x1012e010]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x40a7ef
call esi
mov eax, 0x40a7ef
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x40a7ef
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x40a87e
call esi
mov eax, 0x40a87e
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x40a87e
call esi
push 0x10079570
push 0x414086
push 0xe8
call fcn.1007da80
push 0x10079570
push 0x4140d9
push 0xe8
call fcn.1007da80
push 0x10079570
push 0x41412e
push 0xe8
call fcn.1007da80
push 0x10079570
push 0x4141ba
push 0xe8
call fcn.1007da80
push 0x10079570
push 0x4141eb
push 0xe8
call fcn.1007da80
add esp, 0x3c
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x414239
call esi
lea eax, [ebp - 8]
mov byte [0x414239], 0
push eax
push dword [ebp - 8]
push 1
push 0x414239
call esi
push 0x10079590
push 0x4d7534
push 0xe8
call fcn.1007da80
push 0x10079590
push 0x4d7568
push 0xe8
call fcn.1007da80
push 0x10079600
push 0x4d712a
push 0xe8
call fcn.1007da80
add esp, 0x24
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d6c73
call esi
lea eax, [ebp - 8]
mov dword [0x4d6c73], 0
push eax
push dword [ebp - 8]
push 4
push 0x4d6c73
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x402106
call esi
lea eax, [ebp - 8]
mov byte [0x402106], 0
push eax
push dword [ebp - 8]
push 1
push 0x402106
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4053a3
call esi
lea eax, [ebp - 8]
mov dword [0x4053a3], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x4053a3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7530
call esi
lea eax, [ebp - 8]
mov dword [0x4d7530], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x4d7530
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7564
call esi
lea eax, [ebp - 8]
mov dword [0x4d7564], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x4d7564
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x20d
push 0x405380
call esi
push 0x20d
push 0x90
push 0x405380
call fcn.100cf9f0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x20d
push 0x405380
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4d74ce
call esi
mov eax, 0x4d74ce
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x4d74ce
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4d7568
call esi
mov eax, 0x4d7568
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x4d7568
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4d7465
call esi
mov eax, 0x4d7465
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x4d7465
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4d7183
call esi
lea eax, [ebp - 8]
mov byte [0x4d7183], 0
push eax
push dword [ebp - 8]
push 1
push 0x4d7183
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x401d30
call esi
lea eax, [ebp - 8]
mov dword [0x401d30], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x401d30
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7179
call esi
lea eax, [ebp - 8]
mov dword [0x4d7179], 0x1e0
push eax
push dword [ebp - 8]
push 4
push 0x4d7179
call esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.100819bc
mov esp, ebp
pop ebp
ret