Function at 0x10062700
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x1018b06c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [0x101ee9c8]
lea eax, [ebp - 8]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push 0x4d6c2c
call edi
lea eax, [ebp - 8]
mov dword [0x4d6c2c], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d6c2c
call edi
push 5
call fcn.100d591e
push 5
mov edx, eax
mov ecx, 0x4d8af0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100b0de0
push 0xe9
mov edx, 0x10062490
mov ecx, 0x4d8af0
call fcn.100b0f00
push 5
call fcn.100d591e
push 5
mov edx, eax
mov ecx, 0x63d1ce
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100b0de0
push 0xe9
mov edx, 0x10062520
mov ecx, 0x63d1ce
call fcn.100b0f00
push 5
call fcn.100d591e
push 5
mov edx, eax
mov ecx, 0x63d40f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100b0de0
push 0xe9
mov edx, 0x10062550
mov ecx, 0x63d40f
call fcn.100b0f00
push 5
call fcn.100d591e
push 5
mov edx, eax
mov ecx, 0x63d1eb
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100b0de0
push 0xe9
mov edx, 0x10062580
mov ecx, 0x63d1eb
call fcn.100b0f00
push 5
call fcn.100d591e
push 5
mov edx, eax
mov ecx, 0x63d42c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100b0de0
push 0xe9
mov edx, 0x100625b0
mov ecx, 0x63d42c
call fcn.100b0f00
push 5
call fcn.100d591e
add esp, 0x40
mov dword [eax], 0x90909090
mov edx, eax
push 5
mov ecx, 0x63d208
mov byte [eax + 4], 0x90
call fcn.100b0de0
push 0xe9
mov edx, 0x100625e0
mov ecx, 0x63d208
call fcn.100b0f00
push 5
call fcn.100d591e
push 5
mov edx, eax
mov ecx, 0x63d449
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100b0de0
push 0xe9
mov edx, 0x10062610
mov ecx, 0x63d449
call fcn.100b0f00
push 5
call fcn.100d591e
push 5
mov edx, eax
mov ecx, 0x63d225
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100b0de0
push 0xe9
mov edx, 0x10062640
mov ecx, 0x63d225
call fcn.100b0f00
push 5
call fcn.100d591e
push 5
mov edx, eax
mov ecx, 0x63d466
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100b0de0
push 0xe9
mov edx, 0x10062670
mov ecx, 0x63d466
call fcn.100b0f00
push 5
call fcn.100d591e
push 5
mov edx, eax
mov ecx, 0x63d242
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100b0de0
push 0xe9
mov edx, 0x100626a0
mov ecx, 0x63d242
call fcn.100b0f00
push 5
call fcn.100d591e
push 5
mov edx, eax
mov ecx, 0x63d483
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100b0de0
add esp, 0x40
mov edx, 0x100626d0
mov ecx, 0x63d483
push 0xe9
call fcn.100b0f00
add esp, 4
mov dword [ebp - 8], 0
lea eax, [ebp - 8]
mov bl, 0xe9
push eax
push 0x40
push 1
push 0x57f0fc
call edi
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
je 0x100629c2
mov eax, 0x57f0fc
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0fc
call edi
test eax, eax
jne 0x100629c4
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f0fd
mov bl, 0x4a
call edi
test eax, eax
je 0x10062a02
mov eax, 0x57f0fd
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0fd
call edi
test eax, eax
jne 0x10062a04
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f0fe
mov bl, 1
call edi
test eax, eax
je 0x10062a42
mov eax, 0x57f0fe
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0fe
call edi
test eax, eax
jne 0x10062a44
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f0ff
xor bl, bl
call edi
test eax, eax
je 0x10062a82
mov eax, 0x57f0ff
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0ff
call edi
test eax, eax
jne 0x10062a84
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f100
xor bl, bl
call edi
test eax, eax
je 0x10062ac2
mov eax, 0x57f100
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f100
call edi
test eax, eax
jne 0x10062ac4
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f101
mov bl, 0x90
call edi
test eax, eax
je 0x10062b02
mov eax, 0x57f101
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f101
call edi
test eax, eax
jne 0x10062b04
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x503834
mov bl, 0xeb
call edi
test eax, eax
je 0x10062b42
mov eax, 0x503834
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x503834
call edi
test eax, eax
jne 0x10062b44
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100d52b0
mov esp, ebp
pop ebp
ret