Function at 0x10097fa0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
push 0x10097f70
push 0x84ada8
mov bl, 0xe9
call fcn.100b6700
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x64e1e0
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x64e1e0], 0x18
mov edx, dword [ebp - 4]
push edx
push 1
push 0x64e1e0
call esi
push 0x10097a00
push 0x84b6ca
call fcn.100b6700
push 0x10097a30
push 0x84bab0
call fcn.100b6700
push 0x100979f0
push 0x84b7d3
mov bl, 0xe8
call fcn.100b6700
push 0x10097a90
push 0x84a3ba
call fcn.100b6700
push 0x10097dd0
push 0x84a757
call fcn.100b6700
push 0x10097ee0
push 0x84b816
mov bl, 0xe9
call fcn.100b6700
push 0x10097ef0
push 0x84b854
call fcn.100b6700
push 0x10097f00
push 0x84b93c
call fcn.100b6700
add esp, 0x40
push 0x10097f20
push 0x84ba01
call fcn.100b6700
push 0x10097f40
push 0x84bbbd
call fcn.100b6700
push 0x10097f50
push 0x84c417
call fcn.100b6700
push 0x10097ec0
push 0x84b647
call fcn.100b6700
push 0x10097ed0
push 0x84b764
call fcn.100b6700
add esp, 0x28
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84ae08
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84ae08], 0x1039f350
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84ae08
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84adfe
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84adfe], 0x1039f354
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84adfe
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x84a19b
call esi
mov bl, 0xb
lea ecx, [ebp - 4]
push ecx
mov byte [0x84a19b], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x84a19b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x84a19d
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x84a19d], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x84a19d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x84b1e3
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x84b1e3], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x84b1e3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x84b1e5
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x84b1e5], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x84b1e5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x84b641
call esi
mov bl, 0xa
lea ecx, [ebp - 4]
mov byte [0x84b641], bl
mov edx, dword [ebp - 4]
push ecx
push edx
push 1
push 0x84b641
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x84b6c4
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x84b6c4], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x84b6c4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x84b75e
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x84b75e], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x84b75e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x84b7ed
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x84b7ed], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x84b7ed
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x84b904
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x84b904], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x84b904
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x84b9bc
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x84b9bc], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x84b9bc
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x51c3d6
call esi
mov edi, 0x103a78b8
lea ecx, [ebp - 4]
push ecx
mov dword [0x51c3d6], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x51c3d6
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x51c4d7
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x51c4d7], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x51c4d7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x51c62b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x51c62b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x51c62b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x578dc2
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x578dc2], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x578dc2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5a7b4d
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5a7b4d], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5a7b4d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5b7c04
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5b7c04], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5b7c04
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5b7f65
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5b7f65], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5b7f65
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5ba7b9
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5ba7b9], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5ba7b9
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x64e173
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x64e173], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x64e173
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x64e242
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x64e242], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x64e242
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x64e398
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x64e398], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x64e398
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x64e3b1
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x64e3b1], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x64e3b1
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x78f28b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x78f28b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x78f28b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84a33d
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84a33d], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84a33d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84a35e
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84a35e], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84a35e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84a6fb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84a6fb], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84a6fb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84a711
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84a711], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84a711
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84a732
call esi
lea ecx, [ebp - 4]
mov dword [0x84a732], edi
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x84a732
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bb82
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bb82], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bb82
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bba3
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bba3], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bba3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bc84
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bc84], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bc84
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c24b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c24b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c24b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c301
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c301], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c301
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c3d9
call esi
mov dword [0x84c3d9], edi
lea ecx, [ebp - 4]
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x84c3d9
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c3fb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c3fb], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c3fb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c48f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c48f], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c48f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x91cced
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x91cced], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x91cced
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84baa6
call esi
mov edi, 0x103a78d4
lea ecx, [ebp - 4]
push ecx
mov dword [0x84baa6], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84baa6
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84baef
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84baef], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84baef
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bb0f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bb0f], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bb0f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bc3b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bc3b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bc3b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bd9f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bd9f], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bd9f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bef9
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bef9], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bef9
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84bf9c
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84bf9c], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84bf9c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c18c
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c18c], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c18c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c28e
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c28e], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c28e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x95feac
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x95feac], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x95feac
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x95ff93
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x95ff93], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x95ff93
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c340
call esi
mov edi, 0x103a78d0
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c340], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c340
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84c35b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84c35b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84c35b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x95fedc
call esi
lea ecx, [ebp - 4]
mov dword [0x95fedc], edi
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x95fedc
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x84b122
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x84b122], 0x103a78c3
mov edx, dword [ebp - 4]
push edx
push 4
push 0x84b122
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret