Function at 0x10006750
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Log keystrokes via polling

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
push 0
mov ebp, 4
push ebp
push 0x10205f7c
push 0x2a79b30
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [0x1014b613], 0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
je 0x100067d4
lea eax, [esp + 0x14]
push eax
push 0x40
push 0xa
push 0x679de0
call esi
test eax, eax
je 0x100067cd
mov ecx, dword [0x10108e0c]
mov eax, 0x679de0
mov dword [eax], ecx
mov edx, dword [0x10108e10]
mov dword [eax + 4], edx
mov cx, word [0x10108e14]
lea edx, [esp + 0x14]
push edx
mov word [eax + 8], cx
mov eax, dword [esp + 0x18]
push eax
push 0xa
push 0x679de0
call esi
mov byte [0x1014b613], 0
cmp byte [0x10129e7e], 0
je 0x1000682c
lea ecx, [esp + 0x18]
push ecx
push 0x40
push 0xa
push 0x679de0
call esi
test eax, eax
je 0x10006825
mov edx, dword [0x10108e18]
mov eax, 0x679de0
mov dword [eax], edx
mov ecx, dword [0x10108e1c]
mov dword [eax + 4], ecx
mov dx, word [0x10108e20]
mov word [eax + 8], dx
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x18]
push eax
push ecx
push 0xa
push 0x679de0
call esi
mov byte [0x10129e7e], 0
cmp dword [0x2a33c49], 0x19d9d
jne 0x10006842
mov dword [0x2a33c49], 0x19999
mov ebx, 1
cmp dword [0x29d9d28], ebp
jne 0x100068ba
cmp byte [0x1012737b], 0
mov byte [0x10127387], bl
je 0x10006895
push str.TEXTURE_hud_BeatUp
call dword [0x1012f678]
add esp, 4
push 0x294
push 0x331
call dword [0x1015e07c]
add esp, 8
push 0xffffffffffffffff
call dword [0x1017fd1c]
push str.logo
call dword [0x1017355c]
add esp, 4
push 0x7b
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x100068ba
cmp byte [0x1012737b], 0
push 0x64
sete dl
mov byte [0x1012737b], dl
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.100066a0
call fcn.10006490
call fcn.10011850
mov edi, 2
mov esi, 3
cmp dword [0x29d9d28], edi
je 0x100068e7
cmp dword [0x29d9d28], esi
jne 0x10006b2d
cmp byte [0x1021da59], 0
je 0x100068fa
push str.Please_Register_with_Administrator___nRegister_At_:_https:__www.facebook.com_InfinityPatchLatinoamerica
call fcn.10010630
push str.TEXTURE_hud_BeatUp
call dword [0x1012f678]
add esp, 4
push 0x294
push 0x331
call dword [0x1015e07c]
add esp, 8
push 0xffffffffffffffff
call dword [0x1017fd1c]
push str.logo
call dword [0x1017355c]
add esp, 4
cmp dword [0x29d9d28], esi
jne 0x10006b2d
cmp dword [0x2a33c49], 0x1adad
jne 0x1000694f
mov byte [0x1014b613], bl
cmp byte [0x10127387], 0
je 0x10006989
call fcn.1000b690
call fcn.1000ac20
call fcn.10006360
call fcn.100065b0
xor ebp, ebp
mov dword [0x1021db10], ebp
mov dword [0x10204dc4], ebp
mov dword [0x1012a1b4], ebp
mov byte [0x10127387], 0
jmp 0x1000698b
xor ebp, ebp
push 0x96
push ebp
push 0x10193608
mov dword [0x1020cf5c], ebx
mov byte [0x10123a6b], bl
call fcn.10096460
add esp, 0xc
push str.TEXTURE_hud_button
mov byte [0x10123a6a], bl
mov byte [0x1021daa2], bl
call dword [0x1012f678]
add esp, 4
cmp byte [0x1021da59], 0
jne 0x100069d2
call fcn.10012960
cmp dword [0x1012a1b4], ebx
je 0x100069e2
cmp dword [0x10204dc4], ebx
jne 0x100069e8
mov dword [0x2a33ebc], ebp
cmp byte [0x1021dcce], 0
jne 0x10006a04
call fcn.100105e0
test al, al
jne 0x10006a04
push str.Please_Play_At_FREE_2___CANAL_1_Channel
call fcn.10010630
cmp dword [0x10172330], ebx
jne 0x10006b7b
cmp byte [0x1021da5a], 0
jne 0x10006aee
cmp byte [0x1021db14], 0
jne 0x10006ac7
cmp byte [0x1021da59], 0
jne 0x10006abb
mov eax, dword [0x1021dad8]
push eax
push 0x29f95c0
push str.Im_Playing_Infinity_Patch___
push 0x1021d910
call fcn.10092310
mov ecx, dword [0x1021dd38]
add esp, 0x10
push 0x1021d910
call fcn.10007f50
mov ecx, dword [ebp + 0x101238b0]
add ecx, dword [0x10205f7c]
push 0x10165420
push ebx
lea esi, [ebp + 0x1021db48]
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [esi], 4
jne 0x10006aa8
mov edi, dword [ebp + 0x101238b0]
add edi, dword [0x10205f7c]
push 0x10194554
mov esi, ebx
call fcn.10007d00
add ebp, 4
cmp ebp, 0x18
jl 0x10006a64
mov byte [0x1021daa3], 0
xor ebp, ebp
jmp 0x10006aee
push 0x29f95c0
push str.Im_Playing_Infinity_Patch___
jmp 0x10006ad1
push 0x1012f5f0
push str.__s___Event_ASP_2015_
push 0x1021d910
call fcn.10092310
mov ecx, dword [0x1021dd38]
add esp, 0xc
push 0x1021d910
call fcn.10007f50
xor eax, eax
mov dword [0x1021db60], eax
mov dword [0x1021db64], eax
mov dword [0x1021db68], eax
mov dword [0x1021db6c], eax
mov dword [0x1021db70], eax
mov dword [0x1021db74], eax
mov dword [0x10206ba4], ebp
mov dword [0x1021dc50], ebp
mov dword [0x101723a0], ebp
mov byte [0x1021daa0], al
mov dword [0x10172330], ebp
jmp 0x10006b7b
cmp dword [0x29d9d28], edi
jne 0x10006b65
call fcn.10011590
cmp dword [0x29ff064], 0x5dc
jne 0x10006b57
push 0x1021daa4
mov esi, ebp
mov edi, 0x29ff064
call fcn.10007d00
xor eax, eax
mov dword [0x1021dad8], eax
mov dword [0x1017356c], eax
jmp 0x10006b73
cmp dword [0x29d9d28], ebp
jne 0x10006b79
mov byte [0x10129e7e], bl
mov dword [0x10172330], ebx
xor ebp, ebp
cmp dword [0x29d02cd], ebx
jne 0x10006c63
cmp byte [0x1012f587], 0
je 0x10006c75
cmp dword [0x1021daac], ebp
je 0x10006c75
mov esi, 0x19999
cmp dword [0x2a33c49], esi
jne 0x10006bb2
call fcn.10004ab0
call fcn.100098f0
test al, al
je 0x10006c02
cmp dword [0x10161cd4], ebx
jne 0x10006c75
cmp dword [0x1021da54], ebp
jne 0x10006bee
cmp byte [0x1021da59], 0
jne 0x10006bee
push 0x10123894
mov esi, 0x10
mov edi, 0xace354
call fcn.10007d00
xor ebp, ebp
mov dword [0x1021dc9c], ebp
mov dword [0x10161cd4], ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret
cmp byte [0x1021da59], 0
je 0x10006c14
cmp byte [0x1021da5a], 0
je 0x10006c27
call fcn.100115e0
cmp byte [0x1021da5a], 0
jne 0x10006c27
call fcn.1000fc60
cmp dword [0x2a33c49], esi
jne 0x10006c34
call fcn.1000f860
call fcn.10010430
cmp dword [0x101723a0], eax
jge 0x10006c47
add dword [0x101723a0], ebx
mov edx, dword [0x10163ca4]
cmp edx, dword [0x1021dc50]
jge 0x10006c75
add dword [0x10163ca4], ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret
mov dword [0x10161cd4], ebx
mov dword [0x1021daac], ebp
mov byte [0x1012387a], bl
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret