Function at 0x1006fda0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
push 0x1006faf0
push 0x95e121
push 0xe9
call fcn.100d0480
push 0x1006fb70
push 0x95e1c4
push 0xe9
call fcn.100d0480
push 0x1006fc30
push 0x95f9b0
push 0xe9
call fcn.100d0480
push 0x892a88
push 0x892a5f
push 0xe9
call fcn.100d0480
push 0x892b04
push 0x892adb
push 0xe9
call fcn.100d0480
push 0x58811f
push 0x5880f0
push 0xe9
call fcn.100d0480
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
add esp, 0x48
push eax
push 0x40
push 4
push 0x588447
call esi
lea eax, [ebp - 4]
mov dword [0x588447], 0xfff
push eax
push dword [ebp - 4]
push 4
push 0x588447
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x5c914e
call esi
lea eax, [ebp - 4]
mov byte [0x5c914e], 0
push eax
push dword [ebp - 4]
push 1
push 0x5c914e
call esi
push 0x644537
push 0x64452a
push 0xe9
call fcn.100d0480
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6505fb
call esi
mov eax, 0x6505fb
mov dword [eax], 0x90909090
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x6505fb
call esi
push 0x782ca0
push 0x782c1f
push 0xe9
call fcn.100d0480
push 0x5db408
push 0x5db322
push 0xe9
call fcn.100d0480
add esp, 0x18
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x597694
call esi
lea eax, [ebp - 4]
mov byte [0x597694], 0xdd
push eax
push dword [ebp - 4]
push 1
push 0x597694
call esi
push 0x1006f9f0
push 0x62f69a
push 0xe9
call fcn.100d0480
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 8
push 0xd2c8a0
call esi
movsd xmm0, qword [0x10102e90]
lea eax, [ebp - 4]
push eax
movsd qword [0xd2c8a0], xmm0
push dword [ebp - 4]
push 8
push 0xd2c8a0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 0x55
push 0x8553d0
call esi
push 0x55
push 0x90
push 0x8553d0
call fcn.100d44a0
add esp, 0xc
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x55
push 0x8553d0
call esi
push 0x1006fa10
push 0x64bdcb
push 0xe8
call fcn.100d0480
push 0x1006fa40
push 0x40fac5
push 0xe8
call fcn.100d0480
add esp, 0x18
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x840989
call esi
lea eax, [ebp - 4]
mov byte [0x840989], 0x13
push eax
push dword [ebp - 4]
push 1
push 0x840989
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x842a12
call esi
lea eax, [ebp - 4]
mov byte [0x842a12], 0x12
push eax
push dword [ebp - 4]
push 1
push 0x842a12
call esi
push 0x1006fc70
push 0x819e66
push 0xe9
mov dword [0x11329ae0], 0
mov dword [0x11329ae4], 0
mov dword [0x11329ae8], 0
call fcn.100d0480
push 0x1006fce0
push 0x81a9c6
push 0xe8
call fcn.100d0480
push 0x1006fd00
push 0x81aa1d
push 0xe8
call fcn.100d0480
push 0x1006fd20
push 0x81aa77
push 0xe8
call fcn.100d0480
push 0x1006fd40
push 0x8133c4
push 0xe8
call fcn.100d0480
push 0x1006fd70
push 0x508e7d
push 0xe8
call fcn.100d0480
add esp, 0x48
push 0x640983
push 0x640912
push 0xe9
call fcn.100d0480
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5c21cf
call esi
lea eax, [ebp - 4]
mov dword [0x5c21cf], 0x1c00
push eax
push dword [ebp - 4]
push 4
push 0x5c21cf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5f308d
call esi
mov eax, 0x5f308d
mov edx, 0x106d7620
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x5f308d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6f8101
call esi
mov eax, 0x6f8101
mov edx, 0x106d7620
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x6f8101
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x72d1e4
call esi
mov eax, 0x72d1e4
mov edx, 0x106d7620
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x72d1e4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735e90
call esi
mov eax, 0x735e90
mov edx, 0x106d7620
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x735e90
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735f3c
call esi
mov eax, 0x735f3c
mov edx, 0x106d7620
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x735f3c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735f9c
call esi
mov eax, 0x735f9c
mov edx, 0x106d7620
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x735f9c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x747d2c
call esi
mov eax, 0x747d2c
mov edx, 0x106d7620
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x747d2c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x747d93
call esi
mov eax, 0x747d93
mov edx, 0x106d7620
mov dword ds:[eax], edx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x747d93
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x747d1b
call esi
lea eax, [ebp - 4]
mov dword [0x747d1b], 0x1388
push eax
push dword [ebp - 4]
push 4
push 0x747d1b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x72d1cf
call esi
lea eax, [ebp - 4]
mov dword [0x72d1cf], 0x1388
push eax
push dword [ebp - 4]
push 4
push 0x72d1cf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735f8b
call esi
lea eax, [ebp - 4]
mov dword [0x735f8b], 0x1388
push eax
push dword [ebp - 4]
push 4
push 0x735f8b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735f2b
call esi
lea eax, [ebp - 4]
mov dword [0x735f2b], 0x1388
push eax
push dword [ebp - 4]
push 4
push 0x735f2b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x735e7b
call esi
lea eax, [ebp - 4]
mov dword [0x735e7b], 0x1388
push eax
push dword [ebp - 4]
push 4
push 0x735e7b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5f307c
call esi
lea eax, [ebp - 4]
mov dword [0x5f307c], 0x1388
push eax
push dword [ebp - 4]
push 4
push 0x5f307c
call esi
pop esi
mov esp, ebp
pop ebp
ret