Function at 0x1001b720
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100ef0f8]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x42e19a
call edi
mov eax, 0x1001b000
mov byte [0x42e19a], 0xe8
sub eax, 0x42e19f
mov dword [0x42e19b], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x42e19a
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x42ec71
call edi
mov eax, 0x1001b190
mov byte [0x42ec71], 0xe8
sub eax, 0x42ec76
mov dword [0x42ec72], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x42ec71
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x47c4bc
call edi
mov esi, 0x1001b510
mov byte [0x47c4bc], 0xe8
lea eax, [esi - 0x47c4c1]
mov dword [0x47c4bd], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x47c4bc
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x47c64c
call edi
lea eax, [ebp - 0xc]
mov byte [0x47c64c], 0xe8
push eax
sub esi, 0x47c651
mov dword [0x47c64d], esi
push dword [ebp - 8]
push 5
push 0x47c64c
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x43c061
call edi
mov esi, 0x1001b6b0
mov byte [0x43c061], 0xe8
lea eax, [esi - 0x43c066]
mov dword [0x43c062], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x43c061
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x47c172
call edi
mov byte [0x47c172], 0xe8
lea eax, [esi - 0x47c177]
mov dword [0x47c173], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x47c172
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x47c17e
call edi
lea eax, [ebp - 0xc]
mov byte [0x47c17e], 0xe8
push eax
sub esi, 0x47c183
mov dword [0x47c17f], esi
push dword [ebp - 8]
push 5
push 0x47c17e
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x5dfe64
call edi
mov eax, 0x1001b700
mov byte [0x5dfe64], 0xe9
sub eax, 0x5dfe69
mov dword [0x5dfe65], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x5dfe64
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x47c3b8
call edi
mov eax, 0x1001b290
mov byte [0x47c3b8], 0xe9
sub eax, 0x47c3bd
mov dword [0x47c3b9], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x47c3b8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x47c9a2
call edi
mov esi, 0x1001b400
mov byte [0x47c9a2], 0xe8
lea eax, [esi - 0x47c9a7]
mov dword [0x47c9a3], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 5
push 0x47c9a2
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x47d35a
call edi
lea eax, [ebp - 0xc]
mov byte [0x47d35a], 0xe8
push eax
sub esi, 0x47d35f
mov dword [0x47d35b], esi
push dword [ebp - 8]
push 5
push 0x47d35a
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x407b0b
call edi
mov byte [0x407b0b], 0xe8
mov eax, 0x1001b6a0
sub eax, 0x407b10
mov dword [0x407b0c], eax
lea eax, [ebp - 0xc]
push eax
mov byte [0x407b10], 0x90
push dword [ebp - 8]
push 6
push 0x407b0b
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.10084864
mov esp, ebp
pop ebp
ret