Function at 0x10020ef0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
mov ebx, 0x1001fb20
mov byte [ebp - 0x10], 0xe8
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebx - 0x520ed4]
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x520ecf
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x10020f58
mov eax, dword [ebp - 0x10]
mov ecx, 0x520ecf
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10020f5a
call esi
lea eax, [ebx - 0x520f24]
mov byte [ebp - 0x10], 0xe8
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x520f1f
mov dword [ebp - 4], 0
call edi
test eax, eax
je 0x10020fa8
mov eax, dword [ebp - 0x10]
mov ecx, 0x520f1f
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10020faa
call esi
lea eax, [ebx - 0x63e748]
mov byte [ebp - 0x10], 0xe8
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63e743
mov dword [ebp - 4], 0
call edi
test eax, eax
je 0x10020ff8
mov eax, dword [ebp - 0x10]
mov ecx, 0x63e743
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10020ffa
call esi
lea eax, [ebx - 0x640eb7]
mov byte [ebp - 0x10], 0xe8
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x640eb2
mov dword [ebp - 4], 0
call edi
test eax, eax
je 0x10021048
mov eax, dword [ebp - 0x10]
mov ecx, 0x640eb2
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1002104a
call esi
lea eax, [ebx - 0x7d2dde]
mov byte [ebp - 0x10], 0xe8
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x7d2dd9
mov dword [ebp - 4], 0
call edi
test eax, eax
je 0x10021098
mov eax, dword [ebp - 0x10]
mov ecx, 0x7d2dd9
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1002109a
call esi
lea eax, [ebx - 0x7e6c14]
mov byte [ebp - 0x10], 0xe8
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x7e6c0f
mov dword [ebp - 4], 0
call edi
test eax, eax
je 0x100210e8
mov eax, dword [ebp - 0x10]
mov ecx, 0x7e6c0f
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100210ea
call esi
lea eax, [ebp - 4]
mov byte [ebp - 0x10], 0xe8
push eax
push 0x40
push 5
sub ebx, 0x84aefc
mov dword [ebp - 4], 0
push 0x84aef7
mov dword [ebp - 0xf], ebx
call edi
test eax, eax
je 0x10021138
mov eax, dword [ebp - 0x10]
mov ecx, 0x84aef7
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1002113a
call esi
push ecx
mov edx, 0x83
mov ecx, 0x47fc85
call fcn.10063b20
add esp, 4
mov byte [ebp - 0x10], 0xe9
mov eax, 0x1001fb50
mov dword [ebp - 4], 0
sub eax, 0x47fc8a
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x47fc85
call edi
test eax, eax
je 0x1002119f
mov eax, dword [ebp - 0x10]
mov ecx, 0x47fc85
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100211a1
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62ebf8
mov bl, 0xeb
call edi
test eax, eax
je 0x100211df
mov eax, 0x62ebf8
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62ebf8
call edi
test eax, eax
jne 0x100211e1
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62ebfe
mov bl, 0xeb
call edi
test eax, eax
je 0x1002121f
mov eax, 0x62ebfe
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62ebfe
call edi
test eax, eax
jne 0x10021221
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62ee42
mov bl, 0xeb
call edi
test eax, eax
je 0x1002125f
mov eax, 0x62ee42
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62ee42
call edi
test eax, eax
jne 0x10021261
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62ee48
mov bl, 0xeb
call edi
test eax, eax
je 0x1002129f
mov eax, 0x62ee48
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62ee48
call edi
test eax, eax
jne 0x100212a1
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62eee5
mov bl, 0xeb
call edi
test eax, eax
je 0x100212df
mov eax, 0x62eee5
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62eee5
call edi
test eax, eax
jne 0x100212e1
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62eeeb
mov bl, 0xeb
call edi
test eax, eax
je 0x1002131f
mov eax, 0x62eeeb
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62eeeb
call edi
test eax, eax
jne 0x10021321
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62ebf7
mov bl, 0x69
call edi
test eax, eax
je 0x1002135f
mov eax, 0x62ebf7
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62ebf7
call edi
test eax, eax
jne 0x10021361
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62ee41
mov bl, 0x69
call edi
test eax, eax
je 0x1002139f
mov eax, 0x62ee41
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62ee41
call edi
test eax, eax
jne 0x100213a1
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x62eee4
mov bl, 0x69
call edi
test eax, eax
je 0x100213df
mov eax, 0x62eee4
mov byte [eax], bl
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x62eee4
call edi
test eax, eax
jne 0x100213e1
call esi
mov eax, 0x10020b70
mov byte [ebp - 0x10], 0xe8
sub eax, 0x4dada9
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x4dada4
call edi
test eax, eax
je 0x10021433
mov eax, dword [ebp - 0x10]
mov ecx, 0x4dada4
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10021435
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret