Function at 0x1006ed20
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x101a306c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [0x102503a4]
lea eax, [ebp - 8]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push 0x4d6c2c
call edi
lea eax, [ebp - 8]
mov dword [0x4d6c2c], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d6c2c
call edi
push 5
call fcn.100edd81
push 5
mov edx, eax
mov ecx, 0x4d8af0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9130
push 0xe9
mov edx, 0x1006eab0
mov ecx, 0x4d8af0
call fcn.100c9250
push 5
call fcn.100edd81
push 5
mov edx, eax
mov ecx, 0x63d1ce
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9130
push 0xe9
mov edx, 0x1006eb40
mov ecx, 0x63d1ce
call fcn.100c9250
push 5
call fcn.100edd81
push 5
mov edx, eax
mov ecx, 0x63d40f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9130
push 0xe9
mov edx, 0x1006eb70
mov ecx, 0x63d40f
call fcn.100c9250
push 5
call fcn.100edd81
push 5
mov edx, eax
mov ecx, 0x63d1eb
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9130
push 0xe9
mov edx, 0x1006eba0
mov ecx, 0x63d1eb
call fcn.100c9250
push 5
call fcn.100edd81
push 5
mov edx, eax
mov ecx, 0x63d42c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9130
push 0xe9
mov edx, 0x1006ebd0
mov ecx, 0x63d42c
call fcn.100c9250
push 5
call fcn.100edd81
add esp, 0x40
mov dword [eax], 0x90909090
mov edx, eax
push 5
mov ecx, 0x63d208
mov byte [eax + 4], 0x90
call fcn.100c9130
push 0xe9
mov edx, 0x1006ec00
mov ecx, 0x63d208
call fcn.100c9250
push 5
call fcn.100edd81
push 5
mov edx, eax
mov ecx, 0x63d449
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9130
push 0xe9
mov edx, 0x1006ec30
mov ecx, 0x63d449
call fcn.100c9250
push 5
call fcn.100edd81
push 5
mov edx, eax
mov ecx, 0x63d225
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9130
push 0xe9
mov edx, 0x1006ec60
mov ecx, 0x63d225
call fcn.100c9250
push 5
call fcn.100edd81
push 5
mov edx, eax
mov ecx, 0x63d466
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9130
push 0xe9
mov edx, 0x1006ec90
mov ecx, 0x63d466
call fcn.100c9250
push 5
call fcn.100edd81
push 5
mov edx, eax
mov ecx, 0x63d242
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9130
push 0xe9
mov edx, 0x1006ecc0
mov ecx, 0x63d242
call fcn.100c9250
push 5
call fcn.100edd81
push 5
mov edx, eax
mov ecx, 0x63d483
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9130
add esp, 0x40
mov edx, 0x1006ecf0
mov ecx, 0x63d483
push 0xe9
call fcn.100c9250
add esp, 4
mov dword [ebp - 8], 0
lea eax, [ebp - 8]
mov bl, 0xe9
push eax
push 0x40
push 1
push 0x57f0fc
call edi
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
je 0x1006efe2
mov eax, 0x57f0fc
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0fc
call edi
test eax, eax
jne 0x1006efe4
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f0fd
mov bl, 0x4a
call edi
test eax, eax
je 0x1006f022
mov eax, 0x57f0fd
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0fd
call edi
test eax, eax
jne 0x1006f024
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f0fe
mov bl, 1
call edi
test eax, eax
je 0x1006f062
mov eax, 0x57f0fe
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0fe
call edi
test eax, eax
jne 0x1006f064
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f0ff
xor bl, bl
call edi
test eax, eax
je 0x1006f0a2
mov eax, 0x57f0ff
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0ff
call edi
test eax, eax
jne 0x1006f0a4
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f100
xor bl, bl
call edi
test eax, eax
je 0x1006f0e2
mov eax, 0x57f100
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f100
call edi
test eax, eax
jne 0x1006f0e4
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f101
mov bl, 0x90
call edi
test eax, eax
je 0x1006f122
mov eax, 0x57f101
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f101
call edi
test eax, eax
jne 0x1006f124
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x503834
mov bl, 0xeb
call edi
test eax, eax
je 0x1006f162
mov eax, 0x503834
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x503834
call edi
test eax, eax
jne 0x1006f164
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100ed713
mov esp, ebp
pop ebp
ret