Function at 0x1006f520
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x101a506c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [0x102529e4]
lea eax, [ebp - 8]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push 0x4d6c2c
call edi
lea eax, [ebp - 8]
mov dword [0x4d6c2c], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d6c2c
call edi
push 5
call fcn.100eea5f
push 5
mov edx, eax
mov ecx, 0x4d8af0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9f30
push 0xe9
mov edx, 0x1006f2b0
mov ecx, 0x4d8af0
call fcn.100ca050
push 5
call fcn.100eea5f
push 5
mov edx, eax
mov ecx, 0x63d1ce
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9f30
push 0xe9
mov edx, 0x1006f340
mov ecx, 0x63d1ce
call fcn.100ca050
push 5
call fcn.100eea5f
push 5
mov edx, eax
mov ecx, 0x63d40f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9f30
push 0xe9
mov edx, 0x1006f370
mov ecx, 0x63d40f
call fcn.100ca050
push 5
call fcn.100eea5f
push 5
mov edx, eax
mov ecx, 0x63d1eb
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9f30
push 0xe9
mov edx, 0x1006f3a0
mov ecx, 0x63d1eb
call fcn.100ca050
push 5
call fcn.100eea5f
push 5
mov edx, eax
mov ecx, 0x63d42c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9f30
push 0xe9
mov edx, 0x1006f3d0
mov ecx, 0x63d42c
call fcn.100ca050
push 5
call fcn.100eea5f
add esp, 0x40
mov dword [eax], 0x90909090
mov edx, eax
push 5
mov ecx, 0x63d208
mov byte [eax + 4], 0x90
call fcn.100c9f30
push 0xe9
mov edx, 0x1006f400
mov ecx, 0x63d208
call fcn.100ca050
push 5
call fcn.100eea5f
push 5
mov edx, eax
mov ecx, 0x63d449
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9f30
push 0xe9
mov edx, 0x1006f430
mov ecx, 0x63d449
call fcn.100ca050
push 5
call fcn.100eea5f
push 5
mov edx, eax
mov ecx, 0x63d225
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9f30
push 0xe9
mov edx, 0x1006f460
mov ecx, 0x63d225
call fcn.100ca050
push 5
call fcn.100eea5f
push 5
mov edx, eax
mov ecx, 0x63d466
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9f30
push 0xe9
mov edx, 0x1006f490
mov ecx, 0x63d466
call fcn.100ca050
push 5
call fcn.100eea5f
push 5
mov edx, eax
mov ecx, 0x63d242
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9f30
push 0xe9
mov edx, 0x1006f4c0
mov ecx, 0x63d242
call fcn.100ca050
push 5
call fcn.100eea5f
push 5
mov edx, eax
mov ecx, 0x63d483
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100c9f30
add esp, 0x40
mov edx, 0x1006f4f0
mov ecx, 0x63d483
push 0xe9
call fcn.100ca050
add esp, 4
mov dword [ebp - 8], 0
lea eax, [ebp - 8]
mov bl, 0xe9
push eax
push 0x40
push 1
push 0x57f0fc
call edi
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
je 0x1006f7e2
mov eax, 0x57f0fc
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0fc
call edi
test eax, eax
jne 0x1006f7e4
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f0fd
mov bl, 0x4a
call edi
test eax, eax
je 0x1006f822
mov eax, 0x57f0fd
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0fd
call edi
test eax, eax
jne 0x1006f824
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f0fe
mov bl, 1
call edi
test eax, eax
je 0x1006f862
mov eax, 0x57f0fe
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0fe
call edi
test eax, eax
jne 0x1006f864
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f0ff
xor bl, bl
call edi
test eax, eax
je 0x1006f8a2
mov eax, 0x57f0ff
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0ff
call edi
test eax, eax
jne 0x1006f8a4
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f100
xor bl, bl
call edi
test eax, eax
je 0x1006f8e2
mov eax, 0x57f100
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f100
call edi
test eax, eax
jne 0x1006f8e4
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f101
mov bl, 0x90
call edi
test eax, eax
je 0x1006f922
mov eax, 0x57f101
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f101
call edi
test eax, eax
jne 0x1006f924
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x503834
mov bl, 0xeb
call edi
test eax, eax
je 0x1006f962
mov eax, 0x503834
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x503834
call edi
test eax, eax
jne 0x1006f964
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100ee3f1
mov esp, ebp
pop ebp
ret