Function at 0x10060610
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x1013e00c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x1005f370
push 0x7e3e5a
push 0xe9
call fcn.100c88d0
push 0x10061200
push 0x4e8b80
push 0xe9
call fcn.100c88d0
push 0x6e00
push 0
push 0x105246d4
call sub.VCRUNTIME140.dll_memset
push 0xd
mov dword [0x105246b0], 0x105246d4
mov dword [0x105246b4], 0x4e957b
call fcn.100d7d9e
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x28
mov ebx, eax
mov dword [ebp - 8], 0
lea eax, [ebp - 8]
push eax
push 0x40
mov dword [ebx], 0x90909090
mov dword [ebx + 4], 0x90909090
push 0xd
mov dword [ebx + 8], 0x90909090
push 0x4e956e
mov byte [ebx + 0xc], 0x90
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x100606ec
mov eax, dword [ebx]
mov ecx, 0x4e956e
mov dword [ecx], eax
mov eax, dword [ebx + 4]
mov dword [ecx + 4], eax
mov eax, dword [ebx + 8]
mov dword [ecx + 8], eax
mov al, byte [ebx + 0xc]
mov byte [ecx + 0xc], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0xd
push ecx
call esi
test eax, eax
jne 0x100606ee
call edi
push 0xe9
mov edx, 0x10061500
mov ecx, 0x4e956e
call fcn.100c7ff0
push 0xa
mov dword [0x105246b8], 0x4e9275
call fcn.100d7d9e
mov ebx, eax
mov dword [ebp - 8], 0
mov eax, 0x90909090
add esp, 8
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov word [ebx + 8], ax
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x4e926b
call esi
test eax, eax
je 0x1006076e
mov eax, dword [ebx]
mov ecx, 0x4e926b
mov dword [ecx], eax
mov eax, dword [ebx + 4]
mov dword [ecx + 4], eax
mov ax, word [ebx + 8]
mov word [ecx + 8], ax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0xa
push ecx
call esi
test eax, eax
jne 0x10060770
call edi
push 0xe9
mov edx, 0x10061510
mov ecx, 0x4e926b
call fcn.100c7ff0
mov eax, dword [0x101eb0f0]
add esp, 4
sub eax, 0
je 0x100608b8
sub eax, 1
je 0x10060852
sub eax, 1
jne 0x10060951
push 0x10060600
push 0x5bfad8
push 0xe9
call fcn.100c88d0
push 0x100605c0
push 0x4ebc06
push 0xe9
call fcn.100c88d0
push 0x100605f0
push 0x5c0000
push 0xe9
call fcn.100c88d0
push 0x1005f8c0
push 0x7e5cb6
push 0xe8
call fcn.100c88d0
push fcn.1005f3f0
push 0x5bfc9b
push 0xe8
call fcn.100c88d0
push 0x1005f330
push 0x5bfec6
push 0xe9
call fcn.100c88d0
add esp, 0x48
push 0x1005f3b0
push 0x5bfe5f
push 0xe9
call fcn.100c88d0
push 0x10060c00
push 0x4ec410
push 0xe9
call fcn.100c88d0
add esp, 0x18
jmp 0x10060951
push 0x1005f8c0
push 0x7e5cb6
push 0xe8
call fcn.100c88d0
push fcn.1005f3f0
push 0x5bfc9b
push 0xe8
call fcn.100c88d0
push 0x1005f330
push 0x5bfec6
push 0xe9
call fcn.100c88d0
push 0x1005f3b0
push 0x5bfe5f
push 0xe9
call fcn.100c88d0
push 0xa
mov dword [0x105246bc], 0x4ec4ce
call fcn.100d7d9e
add esp, 0x34
jmp 0x100608cc
push 0xa
mov dword [0x105246bc], 0x4ec4ce
call fcn.100d7d9e
add esp, 4
mov ebx, eax
mov dword [ebp - 8], 0
mov eax, 0x90909090
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov word [ebx + 8], ax
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x4ec4c4
call esi
test eax, eax
je 0x10060924
mov eax, dword [ebx]
mov ecx, 0x4ec4c4
mov dword [ecx], eax
mov eax, dword [ebx + 4]
mov dword [ecx + 4], eax
mov ax, word [ebx + 8]
mov word [ecx + 8], ax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0xa
push ecx
call esi
test eax, eax
jne 0x10060926
call edi
push 0xe9
mov edx, 0x10061520
mov ecx, 0x4ec4c4
call fcn.100c7ff0
push 0x10060510
push 0x7e5ca2
push 0xe9
call fcn.100c88d0
add esp, 0x10
push 0xa
mov dword [0x105246c0], 0x4ec2af
call fcn.100d7d9e
mov ebx, eax
mov dword [ebp - 8], 0
mov eax, 0x90909090
add esp, 4
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov word [ebx + 8], ax
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x4ec2a5
call esi
test eax, eax
je 0x100609bd
mov eax, dword [ebx]
mov ecx, 0x4ec2a5
mov dword [ecx], eax
mov eax, dword [ebx + 4]
mov dword [ecx + 4], eax
mov ax, word [ebx + 8]
mov word [ecx + 8], ax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0xa
push ecx
call esi
test eax, eax
jne 0x100609bf
call edi
push 0xe9
mov edx, 0x10061530
mov ecx, 0x4ec2a5
call fcn.100c7ff0
push 0xa
mov dword [0x105246c4], 0x4ec3b3
call fcn.100d7d9e
mov ebx, eax
mov dword [ebp - 8], 0
mov eax, 0x90909090
add esp, 8
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov word [ebx + 8], ax
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x4ec3a9
call esi
test eax, eax
je 0x10060a3f
mov eax, dword [ebx]
mov ecx, 0x4ec3a9
mov dword [ecx], eax
mov eax, dword [ebx + 4]
mov dword [ecx + 4], eax
mov ax, word [ebx + 8]
mov word [ecx + 8], ax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0xa
push ecx
call esi
test eax, eax
jne 0x10060a41
call edi
push 0xe9
mov edx, 0x10061540
mov ecx, 0x4ec3a9
call fcn.100c7ff0
push 0xd
mov dword [0x105246c8], 0x4ebd8c
call fcn.100d7d9e
add esp, 8
mov dword [ebp - 8], 0
mov ebx, eax
lea eax, [ebp - 8]
push eax
push 0x40
mov dword [ebx], 0x90909090
mov dword [ebx + 4], 0x90909090
push 0xd
mov dword [ebx + 8], 0x90909090
push 0x4ebd7f
mov byte [ebx + 0xc], 0x90
call esi
test eax, eax
je 0x10060acf
mov eax, dword [ebx]
mov ecx, 0x4ebd7f
mov dword [ecx], eax
mov eax, dword [ebx + 4]
mov dword [ecx + 4], eax
mov eax, dword [ebx + 8]
mov dword [ecx + 8], eax
mov al, byte [ebx + 0xc]
mov byte [ecx + 0xc], al
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0xd
push ecx
call esi
test eax, eax
jne 0x10060ad1
call edi
push 0xe9
mov edx, 0x10061550
mov ecx, 0x4ebd7f
call fcn.100c7ff0
push 0xa
mov dword [0x105246cc], 0x4ebef3
call fcn.100d7d9e
mov ebx, eax
mov dword [ebp - 8], 0
mov eax, 0x90909090
add esp, 8
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov word [ebx + 8], ax
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x4ebee9
call esi
test eax, eax
je 0x10060b51
mov eax, dword [ebx]
mov ecx, 0x4ebee9
mov dword [ecx], eax
mov eax, dword [ebx + 4]
mov dword [ecx + 4], eax
mov ax, word [ebx + 8]
mov word [ecx + 8], ax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0xa
push ecx
call esi
test eax, eax
jne 0x10060b53
call edi
push 0xe9
mov edx, 0x10061560
mov ecx, 0x4ebee9
call fcn.100c7ff0
push 0xa
mov dword [0x105246d0], 0x4ecab4
call fcn.100d7d9e
mov ebx, eax
mov dword [ebp - 8], 0
mov eax, 0x90909090
add esp, 8
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov word [ebx + 8], ax
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x4ecaaa
call esi
test eax, eax
je 0x10060bd3
mov eax, dword [ebx]
mov ecx, 0x4ecaaa
mov dword [ecx], eax
mov eax, dword [ebx + 4]
mov dword [ecx + 4], eax
mov ax, word [ebx + 8]
mov word [ecx + 8], ax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0xa
push ecx
call esi
test eax, eax
jne 0x10060bd5
call edi
push 0xe9
mov edx, 0x10061570
mov ecx, 0x4ecaaa
call fcn.100c7ff0
mov ecx, dword [ebp - 4]
add esp, 4
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.100d7712
mov esp, ebp
pop ebp
ret