Function at 0x1000de50
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ebx, 0x1000e0b0
push edi
mov byte [ebp - 0x10], 0xe8
mov dword [ebp - 4], 0
lea eax, [ebx - 0x4b6561]
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x4b655c
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1000deb8
mov eax, dword [ebp - 0x10]
mov ecx, 0x4b655c
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1000deba
call edi
lea eax, [ebx - 0x4b6ba1]
mov byte [ebp - 0x10], 0xe8
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x4b6b9c
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1000df08
mov eax, dword [ebp - 0x10]
mov ecx, 0x4b6b9c
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1000df0a
call edi
lea eax, [ebx - 0x4b6fae]
mov byte [ebp - 0x10], 0xe8
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x4b6fa9
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1000df58
mov eax, dword [ebp - 0x10]
mov ecx, 0x4b6fa9
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1000df5a
call edi
lea eax, [ebx - 0x4cc15f]
mov byte [ebp - 0x10], 0xe8
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x4cc15a
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1000dfa8
mov eax, dword [ebp - 0x10]
mov ecx, 0x4cc15a
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1000dfaa
call edi
lea eax, [ebx - 0x4fdaae]
mov byte [ebp - 0x10], 0xe8
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x4fdaa9
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1000dff8
mov eax, dword [ebp - 0x10]
mov ecx, 0x4fdaa9
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1000dffa
call edi
lea eax, [ebx - 0x52f415]
mov byte [ebp - 0x10], 0xe8
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x52f410
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1000e048
mov eax, dword [ebp - 0x10]
mov ecx, 0x52f410
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1000e04a
call edi
lea eax, [ebp - 4]
mov byte [ebp - 0x10], 0xe8
push eax
push 0x40
push 5
sub ebx, 0x585e98
mov dword [ebp - 4], 0
push 0x585e93
mov dword [ebp - 0xf], ebx
call esi
test eax, eax
je 0x1000e098
mov eax, dword [ebp - 0x10]
mov ecx, 0x585e93
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1000e09a
call edi
pop edi
pop esi
mov al, 1
pop ebx
mov esp, ebp
pop ebp
ret