Function at 0x10006f90
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x100230d8]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov ecx, 0x10023980
call fcn.10004030
mov ecx, 0x10023968
call fcn.10001eb0
push 0xe9
push 0x10009810
push 0x40e5f7
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10008ee0
push 0x419605
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10008fd0
push 0x408b0c
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10008350
push 0x43840b
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10008460
push 0x4220b1
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10008ae0
push 0x40427d
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10009120
push 0x41248b
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10008c90
push 0x4045e3
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x100086f0
push 0x433343
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10009540
push 0x41f488
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10008a50
push 0x40e0ca
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10008da0
push 0x4302e7
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10008e40
push 0x412341
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10009090
push 0x41ff0f
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10007ef0
push 0x40e4e9
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10008120
push 0x4154d3
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10009420
push 0x433203
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x100094b0
push 0x4166da
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10008bf0
push 0x41ceea
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10008570
push 0x43bd18
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10008640
push 0x407473
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x100089b0
push 0x428358
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10007e00
push 0x4045bb
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x100093d0
push 0x40b89d
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x100092c0
push 0x407d56
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10009310
push 0x404331
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10009390
push 0x40dfe4
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10009350
push 0x436a84
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10009280
push 0x40a1d2
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10009230
push 0x4340d1
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10007e60
push 0x434734
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10007d70
push 0x4059ac
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10005280
push 0x8d456c
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10005270
push 0x8d4703
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x100050b0
push 0x421828
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10005140
push 0x4083c3
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10006f30
push 0x40aa10
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10006f20
push 0x432c40
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x100052a0
push 0x414d58
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10005c80
push 0x40940d
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10007aa0
push 0x4206f8
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10003840
push 0x40a12d
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10007b20
push 0x41740e
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10006540
push 0x40996c
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10006820
push 0x42b6d9
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x10006bb0
push 0x434739
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x100063f0
push 0x42ffb8
call fcn.10001de0
mov ecx, eax
call fcn.10006260
push 0xe9
push 0x100062d0
push 0x410c0d
call fcn.10001de0
mov ecx, eax
call fcn.10006260
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4843e5
call esi
lea eax, [ebp - 8]
mov dword [0x4843e5], 0x100239b8
push eax
push dword [ebp - 8]
push 4
push 0x4843e5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4843fc
call esi
lea eax, [ebp - 8]
mov dword [0x4843fc], 0x100239b8
push eax
push dword [ebp - 8]
push 4
push 0x4843fc
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x48441d
call esi
lea eax, [ebp - 8]
mov dword [0x48441d], 0x100239b8
push eax
push dword [ebp - 8]
push 4
push 0x48441d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x484474
call esi
lea eax, [ebp - 8]
mov dword [0x484474], 0x10023a68
push eax
push dword [ebp - 8]
push 4
push 0x484474
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x484464
call esi
lea eax, [ebp - 8]
mov dword [0x484464], 0x10023b18
push eax
push dword [ebp - 8]
push 4
push 0x484464
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x484893
call esi
lea eax, [ebp - 8]
mov dword [0x484893], 0x10023b18
push eax
push dword [ebp - 8]
push 4
push 0x484893
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4848b5
call esi
lea eax, [ebp - 8]
mov dword [0x4848b5], 0x10023b18
push eax
push dword [ebp - 8]
push 4
push 0x4848b5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x484a1f
call esi
lea eax, [ebp - 8]
mov dword [0x484a1f], 0x10023bc8
push eax
push dword [ebp - 8]
push 4
push 0x484a1f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4bc1a0
call esi
lea eax, [ebp - 8]
mov dword [0x4bc1a0], 0x10023bc8
push eax
push dword [ebp - 8]
push 4
push 0x4bc1a0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4bc23a
call esi
lea eax, [ebp - 8]
mov dword [0x4bc23a], 0x10023bc8
push eax
push dword [ebp - 8]
push 4
push 0x4bc23a
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x484c77
call esi
lea eax, [ebp - 8]
mov dword [0x484c77], 0x10023c78
push eax
push dword [ebp - 8]
push 4
push 0x484c77
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8d4574
call esi
lea eax, [ebp - 8]
mov byte [0x8d4574], 0
push eax
push dword [ebp - 8]
push 1
push 0x8d4574
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8d45ae
call esi
lea eax, [ebp - 8]
mov byte [0x8d45ae], 0
push eax
push dword [ebp - 8]
push 1
push 0x8d45ae
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x10cdf80
call esi
lea eax, [ebp - 8]
mov byte [0x10cdf80], 1
push eax
push dword [ebp - 8]
push 1
push 0x10cdf80
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x87c36f
call esi
lea eax, [ebp - 8]
mov byte [0x87c36f], 0x70
push eax
push dword [ebp - 8]
push 1
push 0x87c36f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4a3b85
call esi
lea eax, [ebp - 8]
mov byte [0x4a3b85], 0xb7
push eax
push dword [ebp - 8]
push 1
push 0x4a3b85
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8d46fc
call esi
lea eax, [ebp - 8]
mov byte [0x8d46fc], 0x2f
push eax
push dword [ebp - 8]
push 1
push 0x8d46fc
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x484457
call esi
lea eax, [ebp - 8]
mov byte [0x484457], 0x2f
push eax
push dword [ebp - 8]
push 1
push 0x484457
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x6ce7ce
call esi
lea eax, [ebp - 8]
mov dword [0x6ce7ce], 0x9013f883
push eax
push dword [ebp - 8]
push 4
push 0x6ce7ce
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x6ce7d2
call esi
lea eax, [ebp - 8]
mov edi, 0x9090
push eax
mov word [0x6ce7d2], di
push dword [ebp - 8]
push 2
push 0x6ce7d2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x6ce4bb
call esi
lea eax, [ebp - 8]
mov dword [0x6ce4bb], 0x9013fb83
push eax
push dword [ebp - 8]
push 4
push 0x6ce4bb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x6ce4bf
call esi
lea eax, [ebp - 8]
mov word [0x6ce4bf], di
push eax
push dword [ebp - 8]
push 2
push 0x6ce4bf
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d45bd
call esi
lea eax, [ebp - 8]
mov edi, 0xb0
push eax
mov word [0x8d45bd], di
push dword [ebp - 8]
push 2
push 0x8d45bd
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d45f8
call esi
lea eax, [ebp - 8]
mov word [0x8d45f8], di
push eax
push dword [ebp - 8]
push 2
push 0x8d45f8
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d45ff
call esi
lea eax, [ebp - 8]
mov edi, 0x160
push eax
mov word [0x8d45ff], di
push dword [ebp - 8]
push 2
push 0x8d45ff
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d463d
call esi
lea eax, [ebp - 8]
mov word [0x8d463d], di
push eax
push dword [ebp - 8]
push 2
push 0x8d463d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d4678
call esi
lea eax, [ebp - 8]
mov edi, 0x210
push eax
mov word [0x8d4678], di
push dword [ebp - 8]
push 2
push 0x8d4678
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d46b3
call esi
lea eax, [ebp - 8]
mov word [0x8d46b3], di
push eax
push dword [ebp - 8]
push 2
push 0x8d46b3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d46ba
call esi
lea eax, [ebp - 8]
mov edi, 0x2c0
push eax
mov word [0x8d46ba], di
push dword [ebp - 8]
push 2
push 0x8d46ba
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d46f5
call esi
lea eax, [ebp - 8]
mov word [0x8d46f5], di
push eax
push dword [ebp - 8]
push 2
push 0x8d46f5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0xb72374
call esi
lea eax, [ebp - 8]
mov byte [0xb72374], 0x14
push eax
push dword [ebp - 8]
push 1
push 0xb72374
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4c66e5
call esi
lea eax, [ebp - 8]
mov byte [0x4c66e5], 0x14
push eax
push dword [ebp - 8]
push 1
push 0x4c66e5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4d8ad4
call esi
lea eax, [ebp - 8]
mov byte [0x4d8ad4], 0x14
push eax
push dword [ebp - 8]
push 1
push 0x4d8ad4
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4b7dae
call esi
lea eax, [ebp - 8]
mov byte [0x4b7dae], 0x14
push eax
push dword [ebp - 8]
push 1
push 0x4b7dae
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8beb47
call esi
lea eax, [ebp - 8]
mov byte [0x8beb47], 0x14
push eax
push dword [ebp - 8]
push 1
push 0x8beb47
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4fe7d0
call esi
lea eax, [ebp - 8]
mov byte [0x4fe7d0], 0x14
push eax
push dword [ebp - 8]
push 1
push 0x4fe7d0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4fe7da
call esi
lea eax, [ebp - 8]
mov dword [0x4fe7da], 0x10023048
push eax
push dword [ebp - 8]
push 4
push 0x4fe7da
call esi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1000a22d
mov esp, ebp
pop ebp
ret