Function at 0x10013a60
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d0ab9
call esi
lea eax, [ebp - 4]
mov byte [0x6d0ab9], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d0ab9
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d0bb3
call esi
lea eax, [ebp - 4]
mov byte [0x6d0bb3], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d0bb3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d0ccd
call esi
lea eax, [ebp - 4]
mov byte [0x6d0ccd], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d0ccd
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d0dc3
call esi
lea eax, [ebp - 4]
mov byte [0x6d0dc3], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d0dc3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d0ee0
call esi
lea eax, [ebp - 4]
mov byte [0x6d0ee0], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d0ee0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d101a
call esi
lea eax, [ebp - 4]
mov byte [0x6d101a], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d101a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d138f
call esi
lea eax, [ebp - 4]
mov byte [0x6d138f], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d138f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d14ac
call esi
lea eax, [ebp - 4]
mov byte [0x6d14ac], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d14ac
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d15ea
call esi
lea eax, [ebp - 4]
mov byte [0x6d15ea], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d15ea
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d172b
call esi
lea eax, [ebp - 4]
mov byte [0x6d172b], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d172b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d188c
call esi
lea eax, [ebp - 4]
mov byte [0x6d188c], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d188c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d1a19
call esi
lea eax, [ebp - 4]
mov byte [0x6d1a19], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d1a19
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d1bae
call esi
lea eax, [ebp - 4]
mov byte [0x6d1bae], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d1bae
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d1d44
call esi
lea eax, [ebp - 4]
mov byte [0x6d1d44], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d1d44
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d211e
call esi
lea eax, [ebp - 4]
mov byte [0x6d211e], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d211e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d225a
call esi
lea eax, [ebp - 4]
mov byte [0x6d225a], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d225a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d2396
call esi
lea eax, [ebp - 4]
mov byte [0x6d2396], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d2396
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d24e0
call esi
lea eax, [ebp - 4]
mov byte [0x6d24e0], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d24e0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d2638
call esi
mov byte [0x6d2638], 0xc3
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 1
push 0x6d2638
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d2711
call esi
lea eax, [ebp - 4]
mov byte [0x6d2711], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d2711
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d2869
call esi
lea eax, [ebp - 4]
mov byte [0x6d2869], 0xc3
push eax
push dword [ebp - 4]
push 1
push 0x6d2869
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 7
push 0x4d6942
call esi
mov eax, 0x4d6942
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 7
push 0x4d6942
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 7
push 0x6d292f
call esi
mov eax, 0x6d292f
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 7
push 0x6d292f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 7
push 0xad19baf
call esi
mov eax, 0xad19baf
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 7
push 0xad19baf
call esi
push 0xa2a86ef
push 0x4e0a7c
push 0xff
call fcn.10085ba0
push 0xa2a86ef
push 0x4de068
push 0xff
call fcn.10085ba0
push 0xa2a86ef
push 0x4de767
push 0xff
call fcn.10085ba0
push 0xa61cf19
push 0x4de479
push 0xff
call fcn.10085ba0
push 0xa61cf19
push 0x4ddbe2
push 0xff
call fcn.10085ba0
push 0xa61cf19
push 0x4e05fb
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0xa2a2c77
push 0x638032
push 0xff
call fcn.10085ba0
push 0xa2a2c77
push 0x644f3d
push 0xff
call fcn.10085ba0
push 0xa5d51b8
push 0x5a0db9
push 0xff
call fcn.10085ba0
push 0xa5d51b8
push 0x5a0de7
push 0xff
call fcn.10085ba0
push 0x9d67f23
push 0x4e1293
push 0xff
call fcn.10085ba0
push 0xa2de6ef
push 0x664b56
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0xa273d1e
push 0x4e0600
push 0xff
call fcn.10085ba0
push 0xacbda84
push 0x8fc0b0
push 0xff
call fcn.10085ba0
push 0xa571ad3
push 0x4e12a7
push 0xff
call fcn.10085ba0
push 0x9e57a4b
push 0x664b48
push 0xff
call fcn.10085ba0
push 0x9cfba90
push 0x66672e
push 0xff
call fcn.10085ba0
push 0xa714401
push 0x664975
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0xacbce0d
push 0x66495b
push 0xff
call fcn.10085ba0
push 0xa713af4
push 0x4e03f0
push 0xff
call fcn.10085ba0
push 0xa443df0
push 0x6658c5
push 0xff
call fcn.10085ba0
push 0xadd3732
push 0x6660b8
push 0xff
call fcn.10085ba0
push 0xa789228
push 0x664e28
push 0xff
call fcn.10085ba0
push 0x9d6996b
push 0x98226c
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0xa48d5e5
push 0x6646bf
push 0xff
call fcn.10085ba0
push 0xa78a8d5
push 0x8fc088
push 0xff
call fcn.10085ba0
push 0xa6ddf0d
push 0x666e34
push 0xff
call fcn.10085ba0
push 0xa732638
push 0x6668eb
push 0xff
call fcn.10085ba0
push 0xa064795
push 0x665a31
push 0xff
call fcn.10085ba0
push 0x9d5429d
push 0x665a4d
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0xae589a9
push 0x665a3f
push 0xff
call fcn.10085ba0
push 0xa4db895
push 0x8fc0e2
push 0xff
call fcn.10085ba0
push 0xa81d205
push 0x8fc0c9
push 0xff
call fcn.10085ba0
push 0xa99ccdc
push 0x8fc0fb
push 0xff
call fcn.10085ba0
push 0xad4461b
push 0x66493c
push 0xff
call fcn.10085ba0
push 0xa391923
push 0x66494a
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0xa278cd5
push 0x6658d0
push 0xff
call fcn.10085ba0
push 0xadd670d
push 0x666e0a
push 0xff
call fcn.10085ba0
push 0xa29b623
push 0x666e26
push 0xff
call fcn.10085ba0
push 0x9e5091d
push 0x6665b2
push 0xff
call fcn.10085ba0
push 0xa6e491c
push 0x666610
push 0xff
call fcn.10085ba0
push 0x9e22b98
push 0x6666bd
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0xae5881c
push 0x665639
push 0xff
call fcn.10085ba0
push 0xabf83fb
push 0x66656d
push 0xff
call fcn.10085ba0
push 0xa425daa
push 0x6665c8
push 0xff
call fcn.10085ba0
push 0xadd76e0
push 0x6664e1
push 0xff
call fcn.10085ba0
push 0xa7368df
push 0x666ae9
push 0xff
call fcn.10085ba0
push 0xa6e56ba
push 0x666b15
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0xaa1c555
push 0x666b0a
push 0xff
call fcn.10085ba0
push 0xabcfa67
push 0x666af4
push 0xff
call fcn.10085ba0
push 0x9d738a3
push 0x6668a9
push 0xff
call fcn.10085ba0
push 0xab847b3
push 0x6668b4
push 0xff
call fcn.10085ba0
push 0x9d4aef5
push 0x6668d5
push 0xff
call fcn.10085ba0
push 0xa78c9d2
push 0x6668e0
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0xaa1a247
push 0x6668bf
push 0xff
call fcn.10085ba0
push 0xabc703a
push 0x6668ca
push 0xff
call fcn.10085ba0
push 0xa2ed520
push 0x6664d3
push 0xff
call fcn.10085ba0
push 0xa986173
push 0x666602
push 0xff
call fcn.10085ba0
push 0xa1c8c3e
push 0x6664fd
push 0xff
call fcn.10085ba0
push 0x9e43f3b
push 0x666519
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0x9e24ff3
push 0x6666c8
push 0xff
call fcn.10085ba0
push 0xa6db4f0
push 0x66657b
push 0xff
call fcn.10085ba0
push 0xa4302f3
push 0x66662c
push 0xff
call fcn.10085ba0
push 0x9d64540
push 0x6665d3
push 0xff
call fcn.10085ba0
push 0xacbd4e0
push 0x6665e9
push 0xff
call fcn.10085ba0
push 0xa570a4e
push 0x6665a7
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0xa61b78e
push 0x66659c
push 0xff
call fcn.10085ba0
push 0xaeabac4
push 0x6665bd
push 0xff
call fcn.10085ba0
push 0xa425197
push 0x66650b
push 0xff
call fcn.10085ba0
push 0xab86794
push 0x66655f
push 0xff
call fcn.10085ba0
push 0x9cf818c
push 0x66661e
push 0xff
call fcn.10085ba0
push 0xa56e08b
push 0x6664ef
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0xa2a2b15
push 0x6667af
push 0xff
call fcn.10085ba0
add esp, 0xc
pop esi
mov esp, ebp
pop ebp
ret