Function at 0x10009060
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
push 0x10008f30
push 0x52c101
mov bl, 0xe9
call fcn.10034b90
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x52c148
call edi
lea ecx, [ebp - 4]
push ecx
mov byte [0x52c148], 0xd
mov edx, dword [ebp - 4]
push edx
push 1
push 0x52c148
call edi
push 0x10008b30
push 0x5067a0
call fcn.10034b90
push 0x10008730
push 0x5ca4df
mov bl, 0xe8
call fcn.10034b90
push 0x10008730
push 0x5ca559
call fcn.10034b90
add esp, 0x18
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x5ca560
call edi
mov edx, 0x5ca560
mov ecx, 0x90909090
lea eax, [ebp - 4]
push eax
mov word [edx], cx
mov ecx, dword [ebp - 4]
push ecx
push 2
push edx
call edi
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push 0x5ca4e6
call edi
mov ecx, 0x5ca4e6
mov eax, 0x90909090
lea edx, [ebp - 4]
push edx
mov word [ecx], ax
mov eax, dword [ebp - 4]
push eax
push 2
push ecx
call edi
push 0x10008550
push 0x5ca504
call fcn.10034b90
push 0x100088a0
push 0x63e9a2
call fcn.10034b90
add esp, 0x10
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x533988
call edi
mov bl, 2
mov byte [0x533988], bl
mov eax, dword [ebp - 4]
lea edx, [ebp - 4]
push edx
push eax
push 1
push 0x533988
call edi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x58e218
call edi
lea edx, [ebp - 4]
push edx
mov byte [0x58e218], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x58e218
call edi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x58e6f2
call edi
lea edx, [ebp - 4]
push edx
mov byte [0x58e6f2], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x58e6f2
call edi
push 0x10008a30
push 0x58d6e9
mov bl, 0xe9
call fcn.10034b90
push 0x10008ad0
push 0x58d7d2
call fcn.10034b90
push 0x10008610
push 0x61b298
call fcn.10034b90
push 0x10008780
push 0x49dec8
mov bl, 0xe8
call fcn.10034b90
push 0x10008780
push 0x49de07
call fcn.10034b90
push 0x100087f0
push 0x49e0db
call fcn.10034b90
push 0x100087f0
push 0x49e119
call fcn.10034b90
push 0x100087f0
push 0x49e16c
call fcn.10034b90
add esp, 0x40
push 0x100087f0
push 0x49e1aa
call fcn.10034b90
push 0x10008b80
push 0x52870b
call fcn.10034b90
push 0x10008b80
push 0x62346b
call fcn.10034b90
push 0x100085e0
push 0x66271f
mov bl, 0xe9
call fcn.10034b90
mov esi, 0x59
mov ebx, 0x5bc3dc
call fcn.10034d10
push 0x10008e80
push ebx
mov bl, 0xe8
call fcn.10034b90
push 0x10008fa0
push 0x5430d2
mov bl, 0xe9
call fcn.10034b90
push 0x10008fc0
push 0x581a4c
call fcn.10034b90
push 0x10008fe0
push 0x546cdd
call fcn.10034b90
add esp, 0x40
push 0x10009020
push 0x546dda
call fcn.10034b90
add esp, 8
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x6b3566
call edi
mov ecx, 0x6b3566
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov byte [ecx + 4], al
mov eax, dword [ebp - 4]
push eax
push 5
push ecx
call edi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x6b3598
call edi
lea edx, [ebp - 4]
push edx
mov byte [0x6b3598], 1
mov eax, dword [ebp - 4]
push eax
push 1
push 0x6b3598
call edi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x4c987d
call edi
lea edx, [ebp - 4]
push edx
mov byte [0x4c987d], 0x15
mov eax, dword [ebp - 4]
push eax
push 1
push 0x4c987d
call edi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x4c9887
call edi
lea edx, [ebp - 4]
push edx
mov byte [0x4c9887], 0xb
mov eax, dword [ebp - 4]
push eax
push 1
push 0x4c9887
call edi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x4c98ad
call edi
mov esi, 0x10046da8
lea edx, [ebp - 4]
push edx
mov dword [0x4c98ad], esi
mov eax, dword [ebp - 4]
push eax
push 4
push 0x4c98ad
call edi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x4c98b7
call edi
lea edx, [ebp - 4]
push edx
mov dword [0x4c98b7], esi
mov eax, dword [ebp - 4]
push eax
push 4
push 0x4c98b7
call edi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x4c98f1
call edi
mov esi, 0x10046dfc
lea edx, [ebp - 4]
push edx
mov dword [0x4c98f1], esi
mov eax, dword [ebp - 4]
push eax
push 4
push 0x4c98f1
call edi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x4c9935
call edi
lea edx, [ebp - 4]
push edx
mov dword [0x4c9935], esi
mov eax, dword [ebp - 4]
push eax
push 4
push 0x4c9935
call edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret