Function at 0x1001f730
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea ecx, [ebp - 4]
push ecx
push 0x40
mov eax, 0x1001ea10
push 5
sub eax, 0x520ed4
mov bl, 0xe8
xor esi, esi
push 0x520ecf
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], eax
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001f791
mov edx, dword [ebp - 0x10]
mov cl, byte [ebp - 0xc]
mov eax, 0x520ecf
mov dword [eax], edx
mov byte [eax + 4], cl
mov eax, dword [ebp - 4]
lea edx, [ebp - 8]
push edx
push eax
push 5
push 0x520ecf
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001f797
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 4]
push edx
push 0x40
mov ecx, 0x1001ea10
push 5
sub ecx, 0x520f24
push 0x520f1f
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], ecx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001f7e6
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x520f1f
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x520f1f
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001f7ec
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x1001ea10
push 5
sub edx, 0x63e748
push 0x63e743
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001f83b
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x63e743
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x63e743
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001f841
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x1001ea10
push 5
sub edx, 0x640eb7
push 0x640eb2
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001f890
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x640eb2
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x640eb2
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001f896
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x1001ea10
push 5
sub edx, 0x7d2dde
push 0x7d2dd9
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001f8e5
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x7d2dd9
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x7d2dd9
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001f8eb
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x1001ea10
push 5
sub edx, 0x7e6c14
push 0x7e6c0f
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001f93a
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x7e6c0f
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x7e6c0f
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001f940
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x1001ea10
push 5
sub edx, 0x84aefc
push 0x84aef7
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001f98f
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x84aef7
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x84aef7
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001f995
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, 0x83
mov ebx, 0x47fc85
call fcn.100533c0
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x1001ea40
push 5
sub edx, 0x47fc8a
xor esi, esi
push ebx
mov byte [ebp - 0x10], 0xe9
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001f9eb
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, ebx
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push ebx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001f9f1
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push 0x62ebf8
mov bl, 0xeb
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001fa24
mov eax, 0x62ebf8
mov byte [eax], bl
mov edx, dword [ebp - 4]
lea ecx, [ebp - 8]
push ecx
push edx
push 1
push eax
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001fa2a
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x62ebfe
mov bl, 0xeb
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001fa5d
mov ecx, 0x62ebfe
mov byte [ecx], bl
mov eax, dword [ebp - 4]
lea edx, [ebp - 8]
push edx
push eax
push 1
push ecx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001fa63
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x62ee42
mov bl, 0xeb
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001fa96
mov edx, 0x62ee42
mov byte [edx], bl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 1
push edx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001fa9c
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push 0x62ee48
mov bl, 0xeb
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001facf
mov eax, 0x62ee48
mov byte [eax], bl
mov edx, dword [ebp - 4]
lea ecx, [ebp - 8]
push ecx
push edx
push 1
push eax
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001fad5
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x62eee5
mov bl, 0xeb
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001fb08
mov ecx, 0x62eee5
mov byte [ecx], bl
mov eax, dword [ebp - 4]
lea edx, [ebp - 8]
push edx
push eax
push 1
push ecx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001fb0e
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x62eeeb
mov bl, 0xeb
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001fb41
mov edx, 0x62eeeb
mov byte [edx], bl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 1
push edx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001fb47
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push 0x62ebf7
mov bl, 0x69
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001fb7a
mov eax, 0x62ebf7
mov byte [eax], bl
mov edx, dword [ebp - 4]
lea ecx, [ebp - 8]
push ecx
push edx
push 1
push eax
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001fb80
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x62ee41
mov bl, 0x69
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001fbb3
mov ecx, 0x62ee41
mov byte [ecx], bl
mov eax, dword [ebp - 4]
lea edx, [ebp - 8]
push edx
push eax
push 1
push ecx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001fbb9
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x62eee4
mov bl, 0x69
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001fbec
mov edx, 0x62eee4
mov byte [edx], bl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 1
push edx
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001fbf2
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x1001f4c0
push 5
sub edx, 0x4dada9
push 0x4dada4
mov byte [ebp - 0x10], 0xe8
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], esi
call edi
test eax, eax
je 0x1001fc42
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x4dada4
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x4dada4
mov dword [ebp - 8], esi
call edi
test eax, eax
jne 0x1001fc48
call dword [sym.imp.KERNEL32.dll_GetLastError]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret