Function at 0x10010eb0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x10052434]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10098480]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10098f80]
cmp eax, dword [ecx + 4]
jle 0x10010f13
push 0x10098f80
call fcn.100195b8
add esp, 4
cmp dword [0x10098f80], 0xffffffff
jne 0x10010f13
push 0x1003c230
mov dword [0x10098f84], 0x1004a704
call fcn.10019993
push 0x10098f80
call fcn.1001956e
add esp, 8
push ebx
push esi
push edi
push 0x1003eff2
push 0xa
mov dword [ebp - 8], 0
call fcn.100199a8
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov esi, eax
mov ebx, dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
add esp, 8
test esi, esi
je 0x10010fab
lea eax, [ebp - 8]
mov byte [esi], 0xe9
push eax
push 0x40
mov ecx, 0x10011270
sub ecx, 0x547cc1
mov dword [esi + 1], ecx
push 0xa
mov dword [esi + 5], 0x90909090
push 0x547cbc
mov byte [esi + 9], 0x90
call edi
test eax, eax
je 0x10010fab
movq xmm0, qword [esi]
mov ecx, 0x547cbc
movq qword [ecx], xmm0
mov ax, word [esi + 8]
mov word [ecx + 8], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xa
push ecx
call edi
test eax, eax
je 0x10010fab
push 0xa
push 0x547cbc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
push esi
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
mov esi, eax
add esp, 8
test esi, esi
je 0x10011029
lea eax, [ebp - 8]
mov byte [esi], 0xe9
push eax
push 0x40
mov ecx, 0x100112a0
sub ecx, 0x547f04
push 6
mov dword [esi + 1], ecx
push 0x547eff
mov byte [esi + 5], 0x90
call edi
test eax, eax
je 0x10011029
mov eax, dword [esi]
mov ecx, 0x547eff
mov dword [ecx], eax
mov ax, word [esi + 4]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push ecx
call edi
test eax, eax
je 0x10011029
push 6
push 0x547eff
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
push esi
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
mov esi, eax
add esp, 8
test esi, esi
je 0x100110a7
lea eax, [ebp - 8]
mov byte [esi], 0xe9
push eax
push 0x40
mov ecx, 0x10011350
sub ecx, 0x547f85
push 6
mov dword [esi + 1], ecx
push 0x547f80
mov byte [esi + 5], 0x90
call edi
test eax, eax
je 0x100110a7
mov eax, dword [esi]
mov ecx, 0x547f80
mov dword [ecx], eax
mov ax, word [esi + 4]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push ecx
call edi
test eax, eax
je 0x100110a7
push 6
push 0x547f80
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
push esi
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 7
mov dword [ebp - 8], 0
call fcn.100199a8
mov esi, eax
add esp, 8
test esi, esi
je 0x10011130
mov ecx, 0x100113d0
mov byte [esi], 0xe9
sub ecx, 0x547fb8
mov eax, 0x90909090
mov dword [esi + 1], ecx
mov word [esi + 5], ax
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x547fb3
call edi
test eax, eax
je 0x10011130
mov eax, dword [esi]
mov ecx, 0x547fb3
mov dword [ecx], eax
mov ax, word [esi + 4]
mov word [ecx + 4], ax
mov al, byte [esi + 6]
mov byte [ecx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push ecx
call edi
test eax, eax
je 0x10011130
push 7
push 0x547fb3
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
push esi
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 5
mov dword [ebp - 8], 0
call fcn.100199a8
mov esi, eax
add esp, 8
test esi, esi
je 0x100111a8
lea eax, [ebp - 8]
mov byte [esi], 0xe9
push eax
push 0x40
mov ecx, 0x100113f0
push 5
sub ecx, 0x47db84
push 0x47db7f
mov dword [esi + 1], ecx
call edi
test eax, eax
je 0x100111a8
mov eax, dword [esi]
mov ecx, 0x47db7f
mov dword [ecx], eax
mov al, byte [esi + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push ecx
call edi
test eax, eax
je 0x100111a8
push 5
push 0x47db7f
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
push esi
call fcn.1001941f
add esp, 4
mov ecx, dword [ebp - 4]
mov al, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10019411
mov esp, ebp
pop ebp
ret