Function at 0x10067200
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x10137018]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x78566b
call esi
lea eax, [ebp - 8]
mov dword [0x78566b], 0x1012ca00
push eax
push dword [ebp - 8]
push 4
push 0x78566b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x785965
call esi
lea eax, [ebp - 8]
mov byte [0x785965], 4
push eax
push dword [ebp - 8]
push 1
push 0x785965
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x785d31
call esi
lea eax, [ebp - 8]
mov byte [0x785d31], 4
push eax
push dword [ebp - 8]
push 1
push 0x785d31
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x78595b
call esi
lea eax, [ebp - 8]
mov byte [0x78595b], 4
push eax
push dword [ebp - 8]
push 1
push 0x78595b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x785d27
call esi
lea eax, [ebp - 8]
mov byte [0x785d27], 4
push eax
push dword [ebp - 8]
push 1
push 0x785d27
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x785a56
call esi
lea eax, [ebp - 8]
mov byte [0x785a56], 4
push eax
push dword [ebp - 8]
push 1
push 0x785a56
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x785d46
call esi
lea eax, [ebp - 8]
mov byte [0x785d46], 4
push eax
push dword [ebp - 8]
push 1
push 0x785d46
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x85a09e
call esi
lea eax, [ebp - 8]
mov dword [0x85a09e], 0x19c
push eax
push dword [ebp - 8]
push 4
push 0x85a09e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x786243
call esi
lea eax, [ebp - 8]
mov byte [0x786243], 0
push eax
push dword [ebp - 8]
push 1
push 0x786243
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7862c7
call esi
lea eax, [ebp - 8]
mov byte [0x7862c7], 0
push eax
push dword [ebp - 8]
push 1
push 0x7862c7
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7887de
call esi
lea eax, [ebp - 8]
mov dword [0x7887de], 0xfe
push eax
push dword [ebp - 8]
push 4
push 0x7887de
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x78b5a0
call esi
lea eax, [ebp - 8]
mov dword [0x78b5a0], 0xfe
push eax
push dword [ebp - 8]
push 4
push 0x78b5a0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x78a5c3
call esi
lea eax, [ebp - 8]
mov dword [0x78a5c3], 0xfe
push eax
push dword [ebp - 8]
push 4
push 0x78a5c3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x78b2c3
call esi
lea eax, [ebp - 8]
mov dword [0x78b2c3], 0xef
push eax
push dword [ebp - 8]
push 4
push 0x78b2c3
call esi
push 0x78762d
push 0x787625
push 0xe9
call fcn.1007da60
push 0x785b49
push 0x785b41
push 0xe9
call fcn.1007da60
push 0x100668b0
push 0x7865ba
push 0xe8
call fcn.1007da60
push 0x10066b80
push 0x7863a8
push 0xe8
call fcn.1007da60
push 0x10066b80
push 0x78641e
push 0xe8
call fcn.1007da60
push 0x10066b80
push 0x7864b3
push 0xe8
call fcn.1007da60
add esp, 0x48
push 0x10065eb0
push 0x787794
push 0xe8
call fcn.1007da60
push 0x10065e30
push 0x85a448
push 0xe8
call fcn.1007da60
push 0x10065e90
push 0x785a68
push 0xe8
call fcn.1007da60
push 0x10065e90
push 0x785d58
push 0xe8
call fcn.1007da60
push 0x100671f0
push 0x787c7d
push 0xe8
call fcn.1007da60
push 0x10066b90
push 0x7867ae
push 0xe8
call fcn.1007da60
add esp, 0x48
push 0x10066e30
push 0x78b0cf
push 0xe8
call fcn.1007da60
push 0x10066ba0
push 0x78b09a
push 0xe8
call fcn.1007da60
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7854d2
call esi
lea eax, [ebp - 8]
mov dword [0x7854d2], 0x7d
push eax
push dword [ebp - 8]
push 4
push 0x7854d2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x786797
call esi
lea eax, [ebp - 8]
mov dword [0x786797], 0x74
push eax
push dword [ebp - 8]
push 4
push 0x786797
call esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.100849bc
mov esp, ebp
pop ebp
ret