Function at 0x1008ce80
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x10155018]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push 0x10038c50
push 0x4d7c0d
push 0xe8
call fcn.10087110
push 0x10038c50
push 0x4d7c98
push 0xe8
call fcn.10087110
push 0x1008b3a0
push 0x4d2180
push 0xe8
call fcn.10087110
push 0x1008cc60
push 0x857746
push 0xe8
call fcn.10087110
push 0x1008cc00
push 0x85676e
push 0xe8
call fcn.10087110
push 0x1008cb40
push 0x841e49
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1008cdb0
push 0x7d5e42
push 0xe8
call fcn.10087110
push 0x1008cde0
push 0x7d5df4
push 0xe8
call fcn.10087110
push 0x1008ca20
push 0x7d591d
push 0xe8
call fcn.10087110
push 0x1008c850
push 0x85f0cd
push 0xe8
call fcn.10087110
push 0x1008c850
push 0x85efe0
push 0xe8
call fcn.10087110
push 0x1008c840
push 0x78b0f0
push 0xe9
call fcn.10087110
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0x48
push eax
push 0x40
push 4
push 0x4d9749
call esi
lea eax, [ebp - 8]
mov dword [0x4d9749], 0x1e0
push eax
push dword [ebp - 8]
push 4
push 0x4d9749
call esi
push 0x1008c830
push 0x40f2e9
push 0xe8
call fcn.10087110
push 0x1008c830
push 0x4d714e
push 0xe8
call fcn.10087110
push 0x1008c830
push 0x4d79e7
push 0xe8
call fcn.10087110
push 0x1008c830
push 0x4d9756
push 0xe8
call fcn.10087110
push 0x1008c830
push 0x5db4d5
push 0xe8
call fcn.10087110
push 0x1008c830
push 0x5db1aa
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1008c830
push 0x5db22f
push 0xe8
call fcn.10087110
push 0x1008c830
push 0x5db322
push 0xe8
call fcn.10087110
push 0x1008c830
push 0x5db3a7
push 0xe8
call fcn.10087110
push 0x1008c830
push 0x5db46d
push 0xe8
call fcn.10087110
push 0x1008c830
push 0x5db4ad
push 0xe8
call fcn.10087110
push 0x1008c830
push 0x5db534
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1008c830
push 0x5db5c4
push 0xe8
call fcn.10087110
push 0x1008c830
push 0x5db628
push 0xe8
call fcn.10087110
push 0x1008c830
push 0x5db68c
push 0xe8
call fcn.10087110
push 0x1008c830
push 0x5db6ed
push 0xe8
call fcn.10087110
push 0x1008c520
push 0x5c6e80
push 0xe9
call fcn.10087110
push 0x1008c4a0
push 0x779ccd
push 0xe9
call fcn.10087110
add esp, 0x48
push 0x1008c450
push 0x59792d
push 0xe9
call fcn.10087110
push 0x1008c400
push 0x635b55
push 0xe9
call fcn.10087110
push 0x1008c3a0
push 0x4d06a1
push 0xe9
call fcn.10087110
push 0x1008c3c0
push 0x4d06f4
push 0xe9
call fcn.10087110
push 0x1008b310
push 0x6359b6
push 0xe9
call fcn.10087110
push 0x1008b280
push 0x636420
push 0xe9
call fcn.10087110
add esp, 0x48
push 0x1008c380
push 0x7c57b9
push 0xe8
call fcn.10087110
push 0x1008ccc0
push 0x8240a9
push 0xe8
call fcn.10087110
push 0x1008cd40
push 0x945114
push 0xe8
call fcn.10087110
push 0x1008cd20
push 0x945180
push 0xe8
call fcn.10087110
push 0x1008ce30
push 0x8240a9
push 0xe8
call fcn.10087110
push 0x1008ce10
push 0x856486
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1008ce10
push 0x85f1b9
push 0xe8
call fcn.10087110
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x85af21
call esi
lea eax, [ebp - 8]
mov byte [0x85af21], 5
push eax
push dword [ebp - 8]
push 1
push 0x85af21
call esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.100a3a28
mov esp, ebp
pop ebp
ret