Function at 0x1006d6e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x1019a06c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [0x1024207c]
lea eax, [ebp - 8]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push 0x4d6c2c
call edi
lea eax, [ebp - 8]
mov dword [0x4d6c2c], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d6c2c
call edi
push 5
call fcn.100e3b3e
push 5
mov edx, eax
mov ecx, 0x4d8af0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100bf160
push 0xe9
mov edx, 0x1006d470
mov ecx, 0x4d8af0
call fcn.100bf280
push 5
call fcn.100e3b3e
push 5
mov edx, eax
mov ecx, 0x63d1ce
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100bf160
push 0xe9
mov edx, 0x1006d500
mov ecx, 0x63d1ce
call fcn.100bf280
push 5
call fcn.100e3b3e
push 5
mov edx, eax
mov ecx, 0x63d40f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100bf160
push 0xe9
mov edx, 0x1006d530
mov ecx, 0x63d40f
call fcn.100bf280
push 5
call fcn.100e3b3e
push 5
mov edx, eax
mov ecx, 0x63d1eb
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100bf160
push 0xe9
mov edx, 0x1006d560
mov ecx, 0x63d1eb
call fcn.100bf280
push 5
call fcn.100e3b3e
push 5
mov edx, eax
mov ecx, 0x63d42c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100bf160
push 0xe9
mov edx, 0x1006d590
mov ecx, 0x63d42c
call fcn.100bf280
push 5
call fcn.100e3b3e
add esp, 0x40
mov dword [eax], 0x90909090
mov edx, eax
push 5
mov ecx, 0x63d208
mov byte [eax + 4], 0x90
call fcn.100bf160
push 0xe9
mov edx, 0x1006d5c0
mov ecx, 0x63d208
call fcn.100bf280
push 5
call fcn.100e3b3e
push 5
mov edx, eax
mov ecx, 0x63d449
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100bf160
push 0xe9
mov edx, 0x1006d5f0
mov ecx, 0x63d449
call fcn.100bf280
push 5
call fcn.100e3b3e
push 5
mov edx, eax
mov ecx, 0x63d225
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100bf160
push 0xe9
mov edx, 0x1006d620
mov ecx, 0x63d225
call fcn.100bf280
push 5
call fcn.100e3b3e
push 5
mov edx, eax
mov ecx, 0x63d466
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100bf160
push 0xe9
mov edx, 0x1006d650
mov ecx, 0x63d466
call fcn.100bf280
push 5
call fcn.100e3b3e
push 5
mov edx, eax
mov ecx, 0x63d242
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100bf160
push 0xe9
mov edx, 0x1006d680
mov ecx, 0x63d242
call fcn.100bf280
push 5
call fcn.100e3b3e
push 5
mov edx, eax
mov ecx, 0x63d483
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100bf160
add esp, 0x40
mov edx, 0x1006d6b0
mov ecx, 0x63d483
push 0xe9
call fcn.100bf280
add esp, 4
mov dword [ebp - 8], 0
lea eax, [ebp - 8]
mov bl, 0xe9
push eax
push 0x40
push 1
push 0x57f0fc
call edi
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
je 0x1006d9a2
mov eax, 0x57f0fc
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0fc
call edi
test eax, eax
jne 0x1006d9a4
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f0fd
mov bl, 0x4a
call edi
test eax, eax
je 0x1006d9e2
mov eax, 0x57f0fd
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0fd
call edi
test eax, eax
jne 0x1006d9e4
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f0fe
mov bl, 1
call edi
test eax, eax
je 0x1006da22
mov eax, 0x57f0fe
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0fe
call edi
test eax, eax
jne 0x1006da24
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f0ff
xor bl, bl
call edi
test eax, eax
je 0x1006da62
mov eax, 0x57f0ff
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0ff
call edi
test eax, eax
jne 0x1006da64
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f100
xor bl, bl
call edi
test eax, eax
je 0x1006daa2
mov eax, 0x57f100
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f100
call edi
test eax, eax
jne 0x1006daa4
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f101
mov bl, 0x90
call edi
test eax, eax
je 0x1006dae2
mov eax, 0x57f101
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f101
call edi
test eax, eax
jne 0x1006dae4
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x503834
mov bl, 0xeb
call edi
test eax, eax
je 0x1006db22
mov eax, 0x503834
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x503834
call edi
test eax, eax
jne 0x1006db24
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100e34d0
mov esp, ebp
pop ebp
ret