Function at 0x1001f320
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x404c79
call ebx
mov byte [0x404c79], 0xe9
mov eax, 0x1001e3c0
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffbfb382
mov dword [0x404c7a], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x404c79
call ebx
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x4e8faf
call ebx
mov byte [0x4e8faf], 0xe9
mov eax, 0x1001e320
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffb1704c
mov dword [0x4e8fb0], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x4e8faf
call ebx
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x4ea443
call ebx
mov byte [0x4ea443], 0xe9
mov eax, 0x1001b410
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffb15bb8
mov dword [0x4ea444], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x4ea443
call ebx
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x4793fa
call ebx
mov byte [0x4793fa], 0xe9
mov eax, 0x1001e750
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffb86c01
mov dword [0x4793fb], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x4793fa
call ebx
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x512234
call ebx
mov byte [0x512234], 0xe9
mov eax, 0x1001e7a0
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffaeddc7
mov dword [0x512235], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x512234
call ebx
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x51224f
call ebx
mov byte [0x51224f], 0xe9
mov eax, 0x1001e6d0
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffaeddac
mov dword [0x512250], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x51224f
call ebx
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x51225b
call ebx
mov byte [0x51225b], 0xe9
mov eax, 0x1001e6f0
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffaedda0
mov dword [0x51225c], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x51225b
call ebx
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x511f4d
call ebx
mov byte [0x511f4d], 0xe9
mov eax, 0x1001e7c0
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffaee0ae
mov dword [0x511f4e], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x511f4d
call ebx
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x4e991a
call ebx
mov byte [0x4e991a], 0xe9
mov eax, 0x1001e7e0
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffb166e1
mov dword [0x4e991b], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x4e991a
call ebx
lea eax, [ebp - 8]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x4e5707
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, 0x1001d1d0
sub eax, 0x4e570c
mov dword [ebp - 0xc], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4e5708
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 2
push 0x4e570c
call ebx
mov eax, 0x4e570c
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 2
push 0x4e570c
call ebx
pop ebx
mov esp, ebp
pop ebp
ret