Function at 0x1001ca10
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100ef0f8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x95f83a
call edi
mov esi, 0x1001c010
mov byte [0x95f83a], 0xe8
lea eax, [esi - 0x95f83f]
mov dword [0x95f83b], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x95f83a
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x95f860
call edi
lea eax, [ebp - 0xc]
mov byte [0x95f860], 0xe8
push eax
sub esi, 0x95f865
mov dword [0x95f861], esi
push dword [ebp - 8]
push 5
push 0x95f860
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x8bae92
call edi
mov eax, 0x1001c040
mov byte [0x8bae92], 0xe8
sub eax, 0x8bae97
mov dword [0x8bae93], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x8bae92
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x8baec5
call edi
mov eax, 0x1001c140
mov byte [0x8baec5], 0xe8
sub eax, 0x8baeca
mov dword [0x8baec6], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x8baec5
call edi
mov bl, byte [0x100efb80]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84ad9f
call edi
lea eax, [ebp - 0xc]
mov byte [0x84ad9f], bl
push eax
push dword [ebp - 8]
push 1
push 0x84ad9f
call edi
mov bl, byte [0x100efb78]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84acda
call edi
lea eax, [ebp - 0xc]
mov byte [0x84acda], bl
push eax
push dword [ebp - 8]
push 1
push 0x84acda
call edi
mov bl, byte [0x100efb78]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84ace9
call edi
lea eax, [ebp - 0xc]
mov byte [0x84ace9], bl
push eax
push dword [ebp - 8]
push 1
push 0x84ace9
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84ad04
call edi
lea eax, [ebp - 0xc]
mov byte [0x84ad04], 0x1a
push eax
push dword [ebp - 8]
push 1
push 0x84ad04
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x84ad97
call edi
mov eax, 0x1001c310
mov byte [0x84ad97], 0xe9
sub eax, 0x84ad9c
mov dword [0x84ad98], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x84ad97
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x84ab93
call edi
mov eax, 0x1001c3b0
mov byte [0x84ab93], 0xe9
sub eax, 0x84ab98
mov dword [0x84ab94], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x84ab93
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x84b303
call edi
mov byte [0x84b303], 0xe9
mov eax, 0x1001c420
sub eax, 0x84b308
mov dword [0x84b304], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x84b303
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x84b4e1
call edi
mov eax, 0x1001c490
mov byte [0x84b4e1], 0xe9
sub eax, 0x84b4e6
mov dword [0x84b4e2], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x84b4e1
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x84c0ac
call edi
mov eax, 0x1001c500
mov byte [0x84c0ac], 0xe9
sub eax, 0x84c0b1
mov dword [0x84c0ad], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x84c0ac
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x84c8a7
call edi
mov eax, 0x1001c570
mov byte [0x84c8a7], 0xe9
sub eax, 0x84c8ac
mov dword [0x84c8a8], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x84c8a7
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x8baeea
call edi
mov eax, 0x1001c5e0
mov byte [0x8baeea], 0xe9
sub eax, 0x8baeef
mov dword [0x8baeeb], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x8baeea
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x5e3d32
call edi
mov eax, 0x1001c650
mov byte [0x5e3d32], 0xe9
sub eax, 0x5e3d37
mov dword [0x5e3d33], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x5e3d32
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x5e15e9
call edi
mov eax, 0x1001c8f0
mov byte [0x5e15e9], 0xe9
sub eax, 0x5e15ee
mov dword [0x5e15ea], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x5e15e9
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x5e7ff6
call edi
mov eax, 0x1001c9e0
mov byte [0x5e7ff6], 0xe9
sub eax, 0x5e7ffb
mov dword [0x5e7ff7], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x5e7ff6
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x84a466
call edi
mov eax, 0x1001c880
mov byte [0x84a466], 0xe9
sub eax, 0x84a46b
mov dword [0x84a467], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x84a466
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x84a53a
call edi
mov eax, 0x1001c8d0
mov byte [0x84a53a], 0xe9
sub eax, 0x84a53f
mov dword [0x84a53b], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x84a53a
call edi
cmp byte [0x100f32b5], 0
je 0x1001d069
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x815340
call edi
lea eax, [ebp - 0xc]
mov dword [0x815340], 0x100f33f4
push eax
push dword [ebp - 8]
push 4
push 0x815340
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x815346
call edi
lea eax, [ebp - 0xc]
mov dword [0x815346], 0x100f33f0
push eax
push dword [ebp - 8]
push 4
push 0x815346
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x830260
call edi
lea eax, [ebp - 0xc]
mov dword [0x830260], 0x100f33f4
push eax
push dword [ebp - 8]
push 4
push 0x830260
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x830266
call edi
lea eax, [ebp - 0xc]
mov dword [0x830266], 0x100f33f0
push eax
push dword [ebp - 8]
push 4
push 0x830266
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x832fef
call edi
lea eax, [ebp - 0xc]
mov dword [0x832fef], 0x100f33f4
push eax
push dword [ebp - 8]
push 4
push 0x832fef
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x832ff5
call edi
lea eax, [ebp - 0xc]
mov dword [0x832ff5], 0x100f33f0
push eax
push dword [ebp - 8]
push 4
push 0x832ff5
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84b15f
call edi
lea eax, [ebp - 0xc]
mov dword [0x84b15f], 0x100f33f4
push eax
push dword [ebp - 8]
push 4
push 0x84b15f
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84b165
call edi
lea eax, [ebp - 0xc]
mov dword [0x84b165], 0x100f33f0
push eax
push dword [ebp - 8]
push 4
push 0x84b165
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84aeef
call edi
lea eax, [ebp - 0xc]
mov dword [0x84aeef], 0x100f33f4
push eax
push dword [ebp - 8]
push 4
push 0x84aeef
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84aef6
call edi
lea eax, [ebp - 0xc]
mov dword [0x84aef6], 0x100f33f0
push eax
push dword [ebp - 8]
push 4
push 0x84aef6
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x829530
call edi
lea eax, [ebp - 0xc]
mov dword [0x829530], 0x100f33f4
push eax
push dword [ebp - 8]
push 4
push 0x829530
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x829536
call edi
lea eax, [ebp - 0xc]
mov dword [0x829536], 0x100f33f0
push eax
push dword [ebp - 8]
push 4
push 0x829536
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84a37b
call edi
lea eax, [ebp - 0xc]
mov dword [0x84a37b], 0x100f33f4
push eax
push dword [ebp - 8]
push 4
push 0x84a37b
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84a382
call edi
lea eax, [ebp - 0xc]
mov dword [0x84a382], 0x100f33f0
push eax
push dword [ebp - 8]
push 4
push 0x84a382
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10084864
mov esp, ebp
pop ebp
ret