Function at 0x1000e080
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
cmp byte [0x1013a64e], 0
push esi
push edi
je 0x1000e208
mov ecx, 0x74805a
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x14], 1
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 1
cmp byte [ebp - 0xc], 0
je 0x1000e0ed
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x747fb6
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 1
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 1
cmp byte [ebp - 0xc], 0
je 0x1000e13f
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x74542b
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 8
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 8
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov dword [esi], 0x90909090
mov dword [esi + 4], 0x90909090
cmp byte [ebp - 0xc], 0
je 0x1000e19b
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x53ea88
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 6
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 6
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
mov eax, dword [0x10126fcc]
setne byte [ebp - 0xc]
mov dword [esi], eax
mov ax, word [0x10126fd0]
mov word [esi + 4], ax
cmp byte [ebp - 0xc], 0
je 0x1000e1fb
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov byte [0x10139dfc], 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret
cmp byte [0x10139dfc], 0
je 0x1000e382
mov ecx, 0x74805a
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x14], 1
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 0
cmp byte [ebp - 0xc], 0
je 0x1000e26d
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x747fb6
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 1
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov byte [esi], 0
cmp byte [ebp - 0xc], 0
je 0x1000e2bf
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x74542b
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 8
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 8
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
setne byte [ebp - 0xc]
mov dword [esi], 0x15ff5150
mov dword [esi + 4], 0x858300
cmp byte [ebp - 0xc], 0
je 0x1000e31b
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x53ea88
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 6
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 6
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
mov eax, dword [0x10126fd4]
setne byte [ebp - 0xc]
mov dword [esi], eax
mov ax, word [0x10126fd8]
mov word [esi + 4], ax
cmp byte [ebp - 0xc], 0
je 0x1000e37b
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov byte [0x10139dfc], 0
pop edi
pop esi
mov esp, ebp
pop ebp
ret