Function at 0x10006390
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [0x100beb60]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x100bfd04]
lea ecx, [ebp - 8]
push esi
push edi
add eax, 0x9466fd
push eax
call fcn.10002c20
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 0x74
cmp byte [ebp - 0xc], 0
je 0x100063f5
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 8], eax
push dword [ebp - 0x18]
call edi
mov eax, dword [0x100bfd04]
lea ecx, [ebp - 8]
add eax, 0x946793
push eax
call fcn.10002c20
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 0xc1
cmp byte [ebp - 0xc], 0
je 0x10006442
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 8], eax
push dword [ebp - 0x18]
call edi
mov eax, dword [0x100bfd04]
lea ecx, [ebp - 8]
add eax, 0x1ca3df
push eax
call fcn.10002c20
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 0x74
cmp byte [ebp - 0xc], 0
je 0x1000648f
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 8], eax
push dword [ebp - 0x18]
call edi
mov eax, dword [0x100bfd04]
lea ecx, [ebp - 8]
add eax, 0x694673
push eax
call fcn.10002c20
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 0x74
cmp byte [ebp - 0xc], 0
je 0x100064dc
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 8], eax
push dword [ebp - 0x18]
call edi
mov eax, dword [0x100bfd04]
lea ecx, [ebp - 8]
add eax, 0x946704
push eax
call fcn.10002c20
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 0x74
cmp byte [ebp - 0xc], 0
je 0x10006529
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 8], eax
push dword [ebp - 0x18]
call edi
mov eax, dword [0x100bfd04]
lea ecx, [ebp - 8]
add eax, 0x1ca3e6
push eax
call fcn.10002c20
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 0x74
cmp byte [ebp - 0xc], 0
je 0x10006576
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 8], eax
push dword [ebp - 0x18]
call edi
mov eax, dword [0x100bfd04]
lea ecx, [ebp - 8]
add eax, 0x69467a
push eax
call fcn.10002c20
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 0x74
cmp byte [ebp - 0xc], 0
je 0x100065c3
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 8], eax
push dword [ebp - 0x18]
call edi
mov eax, dword [0x100bfd04]
lea ecx, [ebp - 8]
add eax, 0x9467b3
push eax
call fcn.10002c20
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 0xc1
cmp byte [ebp - 0xc], 0
je 0x10006610
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 8], eax
push dword [ebp - 0x18]
call edi
mov eax, dword [0x100bfd04]
lea ecx, [ebp - 8]
add eax, 0x82c670
push eax
call fcn.10002c20
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 0x74
cmp byte [ebp - 0xc], 0
je 0x1000665d
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 8], eax
push dword [ebp - 0x18]
call edi
mov eax, dword [0x100bfd04]
lea ecx, [ebp - 8]
add eax, 0x82c62c
push eax
call fcn.10002c20
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 0x74
cmp byte [ebp - 0xc], 0
je 0x100066aa
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 8], eax
push dword [ebp - 0x18]
call edi
mov eax, dword [0x100bfd04]
lea ecx, [ebp - 8]
add eax, 0x82c615
push eax
call fcn.10002c20
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 0x74
cmp byte [ebp - 0xc], 0
je 0x100066f7
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 8], eax
push dword [ebp - 0x18]
call edi
mov eax, dword [0x100bfd04]
lea ecx, [ebp - 8]
add eax, 0x82c659
push eax
call fcn.10002c20
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 0x74
cmp byte [ebp - 0xc], 0
je 0x10006744
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 8], eax
push dword [ebp - 0x18]
call edi
mov eax, dword [0x100bfd04]
push 1
push 2
push 0x10082b8c
push ecx
add eax, 0x6e46f1
mov ecx, esp
push eax
call fcn.10002c20
call fcn.10007cc0
mov eax, dword [0x100bfd04]
add esp, 0x10
add eax, 0x9c6bd2
push 1
push 2
push 0x10082b90
push ecx
mov ecx, esp
push eax
call fcn.10002c20
call fcn.10007cc0
mov eax, dword [0x100bfd04]
add esp, 0x10
add eax, 0x9c6be0
push 1
push 2
push 0x10082b90
push ecx
mov ecx, esp
push eax
call fcn.10002c20
call fcn.10007cc0
mov edx, dword [0x100bfd04]
add esp, 0x10
push 1
lea eax, [edx + 0x6c3b40]
push eax
push ecx
lea eax, [edx + 0x129eeb8]
mov ecx, esp
push eax
call fcn.10002c20
call fcn.100019d0
mov edx, dword [0x100bfd04]
add esp, 0xc
push 1
lea eax, [edx + 0x6c38f0]
push eax
push ecx
lea eax, [edx + 0x129ea88]
mov ecx, esp
push eax
call fcn.10002c20
call fcn.100019d0
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
pop edi
pop esi
call fcn.1004e12b
mov esp, ebp
pop ebp
ret