Function at 0x10066f10
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x10135018]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push 0x10066e90
push 0x4d0b70
push 0xe8
call fcn.10066a00
push 0x10066e90
push 0x4d2642
push 0xe8
call fcn.10066a00
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0x18
push eax
push 0x40
push 6
push 0x547539
call esi
mov eax, 0x547539
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x547539
call esi
push 0x10066d80
push 0x547539
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5476b6
call esi
mov eax, 0x5476b6
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5476b6
call esi
push 0x10066ce0
push 0x5476b6
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x547720
call esi
mov eax, 0x547720
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x547720
call esi
push 0x10066ce0
push 0x547720
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5477ab
call esi
mov ecx, 0x90909090
mov eax, 0x5477ab
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5477ab
call esi
push 0x10066ce0
push 0x5477ab
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x547854
call esi
mov eax, 0x547854
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x547854
call esi
push 0x10066ce0
push 0x547854
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5478fd
call esi
mov eax, 0x5478fd
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5478fd
call esi
push 0x10066ce0
push 0x5478fd
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5476fb
call esi
mov eax, 0x5476fb
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5476fb
call esi
push 0x10066d10
push 0x5476fb
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x547756
call esi
mov eax, 0x547756
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x547756
call esi
push 0x10066d10
push 0x547756
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5477e1
call esi
mov eax, 0x5477e1
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5477e1
call esi
push 0x10066d10
push 0x5477e1
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x54788a
call esi
mov eax, 0x54788a
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x54788a
call esi
push 0x10066d10
push 0x54788a
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x547933
call esi
mov eax, 0x547933
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x547933
call esi
push 0x10066d10
push 0x547933
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x547654
call esi
mov eax, 0x547654
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x547654
call esi
push 0x10066cb0
push 0x547654
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x54766f
call esi
mov eax, 0x54766f
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x54766f
call esi
push 0x10066cb0
push 0x54766f
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x547786
call esi
mov eax, 0x547786
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x547786
call esi
push 0x10066cb0
push 0x547786
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x54782f
call esi
mov eax, 0x54782f
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x54782f
call esi
push 0x10066cb0
push 0x54782f
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5478d8
call esi
mov eax, 0x5478d8
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5478d8
call esi
push 0x10066cb0
push 0x5478d8
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5479a3
call esi
mov eax, 0x5479a3
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5479a3
call esi
push 0x10066cb0
push 0x5479a3
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x547a80
call esi
mov eax, 0x547a80
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x547a80
call esi
push 0x10066d50
push 0x547a80
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x547b7e
call esi
mov eax, 0x547b7e
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x547b7e
call esi
push 0x10066d50
push 0x547b7e
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x547b9d
call esi
mov eax, 0x547b9d
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x547b9d
call esi
push 0x10066d50
push 0x547b9d
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x547bad
call esi
mov eax, 0x547bad
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x547bad
call esi
push 0x10066db0
push 0x547bad
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x546860
call esi
lea eax, [ebp - 8]
mov byte [0x546860], 0xc3
push eax
push dword [ebp - 8]
push 1
push 0x546860
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x546880
call esi
lea eax, [ebp - 8]
mov byte [0x546880], 0xc3
push eax
push dword [ebp - 8]
push 1
push 0x546880
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5da034
call esi
mov ecx, 0x90909090
mov eax, 0x5da034
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5da034
call esi
push 0x10066d80
push 0x5da034
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5da04e
call esi
mov eax, 0x5da04e
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5da04e
call esi
push 0x10066cb0
push 0x5da04e
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5da089
call esi
mov eax, 0x5da089
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5da089
call esi
push 0x10066cb0
push 0x5da089
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5da0c2
call esi
mov eax, 0x5da0c2
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5da0c2
call esi
push 0x10066cb0
push 0x5da0c2
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5da0fd
call esi
mov eax, 0x5da0fd
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5da0fd
call esi
push 0x10066cb0
push 0x5da0fd
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5da064
call esi
mov eax, 0x5da064
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5da064
call esi
push 0x10066ce0
push 0x5da064
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5da09d
call esi
mov eax, 0x5da09d
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5da09d
call esi
push 0x10066ce0
push 0x5da09d
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5da0d8
call esi
mov eax, 0x5da0d8
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5da0d8
call esi
push 0x10066ce0
push 0x5da0d8
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5da113
call esi
mov eax, 0x5da113
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5da113
call esi
push 0x10066ce0
push 0x5da113
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5da06f
call esi
mov eax, 0x5da06f
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5da06f
call esi
push 0x10066d50
push 0x5da06f
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5da0a8
call esi
mov eax, 0x5da0a8
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5da0a8
call esi
push 0x10066d50
push 0x5da0a8
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5da0e3
call esi
mov eax, 0x5da0e3
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5da0e3
call esi
push 0x10066d50
push 0x5da0e3
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5da11e
call esi
mov eax, 0x5da11e
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5da11e
call esi
push 0x10066d50
push 0x5da11e
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5da124
call esi
mov eax, 0x5da124
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5da124
call esi
push 0x10066db0
push 0x5da124
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5da9e5
call esi
mov eax, 0x5da9e5
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5da9e5
call esi
push 0x10066d80
push 0x5da9e5
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5daa2a
call esi
mov eax, 0x5daa2a
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5daa2a
call esi
push 0x10066ce0
push 0x5daa2a
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5daa63
call esi
mov eax, 0x5daa63
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5daa63
call esi
push 0x10066d10
push 0x5daa63
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5daa8a
call esi
mov eax, 0x5daa8a
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5daa8a
call esi
push 0x10066cb0
push 0x5daa8a
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5daa9d
call esi
mov eax, 0x5daa9d
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5daa9d
call esi
push 0x10066d50
push 0x5daa9d
push 0xe8
call fcn.10066a00
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5daaa8
call esi
mov eax, 0x5daaa8
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x5daaa8
call esi
push 0x10066db0
push 0x5daaa8
push 0xe8
call fcn.10066a00
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
pop esi
call fcn.1008118f
mov esp, ebp
pop ebp
ret