Function at 0x1000e310
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push edi
push eax
push 4
push 4
push 0x5b8610
call esi
lea eax, [ebp - 8]
mov dword [0x5b8610], 0x1000c8d0
push eax
push dword [ebp - 4]
push 4
push 0x5b8610
call esi
lea eax, [ebp - 4]
push eax
push 4
push 4
push 0x5b8574
call esi
lea eax, [ebp - 8]
mov dword [0x5b8574], 0x1000c850
push eax
push dword [ebp - 4]
push 4
push 0x5b8574
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov esi, eax
lea eax, [ebp - 0xc]
push eax
push 4
push 5
push 0x4c6e87
push esi
call ebx
lea eax, [ebp - 0x10]
mov byte [0x4c6e87], 0xe8
push eax
mov dword [0x4c6e88], 0xffff2854
push dword [ebp - 0xc]
push 5
push 0x4c6e87
push esi
call ebx
call edi
mov esi, eax
lea eax, [ebp - 0xc]
push eax
push 4
push 4
push 0x5bd9c0
push esi
call ebx
lea eax, [ebp - 0x10]
mov dword [0x5bd9c0], 0x1000d240
push eax
push dword [ebp - 0xc]
push 4
push 0x5bd9c0
push esi
call ebx
call edi
mov esi, eax
lea eax, [ebp - 0xc]
push eax
push 4
push 5
push 0x453283
push esi
call ebx
mov ecx, 0x1000cf30
mov byte [0x453283], 0xe8
sub ecx, 0x453288
lea eax, [ebp - 0x10]
mov dword [0x453284], ecx
push eax
push dword [ebp - 0xc]
push 5
push 0x453283
push esi
call ebx
call edi
mov esi, eax
lea eax, [ebp - 0xc]
push eax
push 4
push 5
push 0x45cab6
push esi
call ebx
mov ecx, 0x1000c910
mov byte [0x45cab6], 0xe8
lea eax, [ebp - 0x10]
sub ecx, 0x45cabb
push eax
mov dword [0x45cab7], ecx
push dword [ebp - 0xc]
push 5
push 0x45cab6
push esi
call ebx
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0xc]
push eax
push 0x80
push 4
mov esi, 0x1000e0f0
push 0x45a34b
sub esi, 0x45a34f
call ebx
mov eax, dword [0x45a34b]
add eax, 0x45a34f
mov dword [0x1001b7b4], eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
mov dword [0x45a34b], esi
push 5
push 0x45a34b
call ebx
lea eax, [ebp - 4]
push eax
push 0x40
push 0x238000
push 0x401000
call ebx
mov byte [0x50bca4], 0xeb
mov byte [0x415fcd], 5
mov byte [0x41695c], 5
call fcn.1000b670
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
push 0x238000
push 0x401000
call ebx
push 0x140
call fcn.10012bad
mov edi, eax
mov dword [ebp - 0xc], eax
mov ecx, 0x4d
mov esi, str.109120132967399429278860960508995541528237502902798129123468757937266291492576446330739696001110603907230888610072655818825358503429057592827629436413108566029093628212635953836686562675849720620786279431090218017681061521755056710823876476444260558147179707119674283982419152118103759076030616683978566631413
rep movsd dword es:[edi], dword [esi]
add esp, 4
movsb byte es:[edi], byte [esi]
mov byte [eax + 0x135], 0
lea eax, [ebp - 4]
push eax
push 0x40
push 0x135
push 0x5b8980
call ebx
mov esi, dword [ebp - 0xc]
mov edx, 0x5b8980
mov eax, esi
sub edx, esi
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x1000e527
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
push 0x135
push 0x5b8980
call ebx
push 0x140
push esi
call fcn.10012bdd
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret