Function at 0x10009937
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 8], 0x40
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x508a06
mov eax, 0x1003bc20
add eax, 6
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
mov byte [edx], 0xe9
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ecx], edx
lea eax, [ebp - 8]
push eax
push 0x40
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x442f7a
mov eax, 0x1003bc57
add eax, 6
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
mov byte [edx], 0xe9
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ecx], edx
mov eax, dword [ebp - 4]
add eax, 5
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov word [ecx], 0x9090
lea edx, [ebp - 8]
push edx
push 0x40
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x50aa2d
mov edx, 0x1003bc86
add edx, 6
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 4]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
mov byte [ecx], 0xe9
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [eax], ecx
mov edx, dword [ebp - 4]
add edx, 5
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov word [eax], 0x9090
lea ecx, [ebp - 8]
push ecx
push 0x40
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x44348c
mov ecx, 0x1003bcb8
add ecx, 6
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 4]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 4]
mov byte [eax], 0xe9
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [edx], eax
mov ecx, dword [ebp - 4]
add ecx, 5
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
mov word [edx], 0x9090
lea eax, [ebp - 8]
push eax
push 0x40
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x5ad3a1
mov eax, 0x1003bce7
add eax, 6
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
mov byte [edx], 0xe9
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ecx], edx
mov eax, dword [ebp - 4]
add eax, 5
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov byte [ecx], 0x90
lea edx, [ebp - 8]
push edx
push 0x40
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x5b5311
mov edx, 0x1003bd09
add edx, 6
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 4]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
mov byte [ecx], 0xe9
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [eax], ecx
lea edx, [ebp - 8]
push edx
push 0x40
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x504d2c
mov edx, 0x1003bd30
add edx, 6
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 4]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
mov byte [ecx], 0xe9
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [eax], ecx
mov edx, dword [ebp - 4]
add edx, 5
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov word [eax], 0x9090
lea ecx, [ebp - 8]
push ecx
push 0x40
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x596daa
mov ecx, 0x1003bd68
add ecx, 6
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 4]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 4]
mov byte [eax], 0xe9
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [edx], eax
mov ecx, dword [ebp - 4]
add ecx, 5
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
mov byte [edx], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x4781f6
mov eax, 0x1003bdaa
add eax, 6
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
mov byte [edx], 0xe9
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ecx], edx
lea eax, [ebp - 8]
push eax
push 0x40
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x478224
mov eax, 0x1003bdfe
add eax, 6
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
mov byte [edx], 0xe9
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ecx], edx
lea eax, [ebp - 8]
push eax
push 0x40
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x47868b
mov eax, 0x1003be33
add eax, 6
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
mov byte [edx], 0xe9
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ecx], edx
lea eax, [ebp - 8]
push eax
push 0x40
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x516536
mov eax, 0x1003c8a0
add eax, 9
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
mov byte [edx], 0xe9
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ecx], edx
mov eax, dword [ebp - 4]
add eax, 5
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov byte [ecx], 0x90
lea edx, [ebp - 8]
push edx
push 0x40
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x508c20
mov edx, 0x1003be90
add edx, 6
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 4]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
mov byte [ecx], 0xe9
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [eax], ecx
mov edx, dword [ebp - 4]
add edx, 5
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov byte [eax], 0x90
lea ecx, [ebp - 8]
push ecx
push 0x40
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x508f84
mov ecx, 0x1003c174
add ecx, 6
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 4]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 4]
mov byte [eax], 0xe9
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [edx], eax
lea ecx, [ebp - 8]
push ecx
push 0x40
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x5089b2
mov ecx, 0x1003c536
add ecx, 6
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 4]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 4]
mov byte [eax], 0xe9
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [edx], eax
mov ecx, dword [ebp - 4]
add ecx, 5
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
mov byte [edx], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xc], 5
mov dword [ebp - 4], 0x50af51
mov eax, 0x1003c7b6
add eax, 6
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
mov byte [edx], 0xe9
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ecx], edx
lea eax, [ebp - 8]
push eax
push 0x40
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov esp, ebp
pop ebp
ret