Function at 0x1006c000
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, dword [0x101ef0e4]
lea eax, [ebp - 4]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push 0x4d6c2c
call edi
lea eax, [ebp - 4]
mov dword [0x4d6c2c], esi
push eax
push dword [ebp - 4]
push 4
push 0x4d6c2c
call edi
push ecx
mov edx, 5
mov ecx, 0x4d8af0
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x10], 0xe9
mov eax, 0x1006bd90
mov dword [ebp - 4], 0
sub eax, 0x4d8af5
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x4d8af0
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1006c0a5
mov eax, dword [ebp - 0x10]
mov ecx, 0x4d8af0
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1006c0a7
call esi
push ecx
mov edx, 5
mov ecx, 0x63d1ce
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x10], 0xe9
mov eax, 0x1006be20
mov dword [ebp - 4], 0
sub eax, 0x63d1d3
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d1ce
call edi
test eax, eax
je 0x1006c10c
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d1ce
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1006c10e
call esi
push ecx
mov edx, 5
mov ecx, 0x63d40f
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x10], 0xe9
mov eax, 0x1006be50
mov dword [ebp - 4], 0
sub eax, 0x63d414
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d40f
call edi
test eax, eax
je 0x1006c173
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d40f
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1006c175
call esi
push ecx
mov edx, 5
mov ecx, 0x63d1eb
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x10], 0xe9
mov eax, 0x1006be80
mov dword [ebp - 4], 0
sub eax, 0x63d1f0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d1eb
call edi
test eax, eax
je 0x1006c1da
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d1eb
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1006c1dc
call esi
push ecx
mov edx, 5
mov ecx, 0x63d42c
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x10], 0xe9
mov eax, 0x1006beb0
mov dword [ebp - 4], 0
sub eax, 0x63d431
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d42c
call edi
test eax, eax
je 0x1006c241
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d42c
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1006c243
call esi
push ecx
mov edx, 5
mov ecx, 0x63d208
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x10], 0xe9
mov eax, 0x1006bee0
mov dword [ebp - 4], 0
sub eax, 0x63d20d
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d208
call edi
test eax, eax
je 0x1006c2a8
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d208
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1006c2aa
call esi
push ecx
mov edx, 5
mov ecx, 0x63d449
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x10], 0xe9
mov eax, 0x1006bf10
mov dword [ebp - 4], 0
sub eax, 0x63d44e
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d449
call edi
test eax, eax
je 0x1006c30f
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d449
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1006c311
call esi
push ecx
mov edx, 5
mov ecx, 0x63d225
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x10], 0xe9
mov eax, 0x1006bf40
mov dword [ebp - 4], 0
sub eax, 0x63d22a
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d225
call edi
test eax, eax
je 0x1006c376
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d225
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1006c378
call esi
push ecx
mov edx, 5
mov ecx, 0x63d466
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x10], 0xe9
mov eax, 0x1006bf70
mov dword [ebp - 4], 0
sub eax, 0x63d46b
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d466
call edi
test eax, eax
je 0x1006c3dd
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d466
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1006c3df
call esi
push ecx
mov edx, 5
mov ecx, 0x63d242
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x10], 0xe9
mov eax, 0x1006bfa0
mov dword [ebp - 4], 0
sub eax, 0x63d247
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d242
call edi
test eax, eax
je 0x1006c444
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d242
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1006c446
call esi
push ecx
mov edx, 5
mov ecx, 0x63d483
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x10], 0xe9
mov eax, 0x1006bfd0
mov dword [ebp - 4], 0
sub eax, 0x63d488
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d483
call edi
test eax, eax
je 0x1006c4ab
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d483
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1006c4ad
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x57f0fc
mov bl, 0xe9
call edi
test eax, eax
je 0x1006c4eb
mov eax, 0x57f0fc
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x57f0fc
call edi
test eax, eax
jne 0x1006c4ed
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x57f0fd
mov bl, 0x4a
call edi
test eax, eax
je 0x1006c52b
mov eax, 0x57f0fd
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x57f0fd
call edi
test eax, eax
jne 0x1006c52d
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x57f0fe
mov bl, 1
call edi
test eax, eax
je 0x1006c56b
mov eax, 0x57f0fe
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x57f0fe
call edi
test eax, eax
jne 0x1006c56d
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x57f0ff
xor bl, bl
call edi
test eax, eax
je 0x1006c5ab
mov eax, 0x57f0ff
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x57f0ff
call edi
test eax, eax
jne 0x1006c5ad
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x57f100
xor bl, bl
call edi
test eax, eax
je 0x1006c5eb
mov eax, 0x57f100
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x57f100
call edi
test eax, eax
jne 0x1006c5ed
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x57f101
mov bl, 0x90
call edi
test eax, eax
je 0x1006c62b
mov eax, 0x57f101
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x57f101
call edi
test eax, eax
jne 0x1006c62d
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x503834
mov bl, 0xeb
call edi
test eax, eax
je 0x1006c66b
mov eax, 0x503834
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x503834
call edi
test eax, eax
jne 0x1006c66d
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret