Function at 0x1000ec60
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
call fcn.1000dd30
test al, al
je 0x1000ee9f
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [ebp - 8]
push esi
push edi
push eax
push 1
lea eax, [ebp - 1]
mov byte [ebp - 1], 0xe8
push eax
push 0x4bbedb
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call edi
mov eax, 0x1000e740
sub eax, 0x4bbee0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4bbedc
call ebx
push eax
call edi
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x4bd935
call ebx
push eax
call edi
mov eax, 0x1000e830
sub eax, 0x4bd93a
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x4bd936
call ebx
push eax
call edi
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x4bcea5
call ebx
push eax
call edi
mov eax, 0x1000eb10
sub eax, 0x4bceaa
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x4bcea6
call ebx
push eax
call edi
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x4bd38a
call ebx
push eax
call edi
mov eax, 0x1000e8d0
sub eax, 0x4bd38f
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x4bd38b
call ebx
push eax
call edi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push 0x4bd38f
call esi
mov eax, 0x4bd38f
mov byte [eax], 0x90
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 1
push 0x4bd38f
call esi
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x523062
call ebx
push eax
call edi
mov eax, 0x1000ebb0
sub eax, 0x523067
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x523063
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 4
push 0x523067
call esi
mov eax, 0x523067
mov dword [eax], 0x90909090
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 4
push 0x523067
call esi
lea eax, [ebp - 8]
mov byte [ebp - 1], 0xf
push eax
push 1
lea eax, [ebp - 1]
mov byte [ebp - 2], 0x87
push eax
push 0x524471
call ebx
push eax
call edi
lea eax, [ebp - 8]
push eax
push 1
lea eax, [ebp - 2]
push eax
push 0x524472
call ebx
push eax
call edi
mov eax, 0x1000af50
sub eax, 0x524477
mov dword [ebp - 0xc], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x524473
call ebx
push eax
call edi
lea eax, [ebp - 8]
mov byte [ebp - 2], 0xf
push eax
push 1
lea eax, [ebp - 2]
mov byte [ebp - 1], 0x87
push eax
push 0x51d1f6
call ebx
push eax
call edi
lea eax, [ebp - 8]
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x51d1f7
call ebx
push eax
call edi
mov eax, 0x1000b170
sub eax, 0x51d1fc
mov dword [ebp - 0xc], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x51d1f8
call ebx
push eax
call edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
push str.Error_hotkeys_configurations
push str.Fail_to_load_Hotkey.xml__previous_implementation_will_load__
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.1000b1f0
mov esp, ebp
pop ebp
ret