Function at 0x10009e60
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push esi
push edi
mov ecx, 0x6e0e20
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x14], 6
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 6
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
mov eax, dword [0x100e5d2c]
setne byte [ebp - 0xc]
mov dword [esi], eax
mov ax, word [0x100e5d30]
mov word [esi + 4], ax
cmp byte [ebp - 0xc], 0
je 0x10009ece
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x6e13a4
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 0xa
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 0xa
push esi
mov dword [ebp - 0x18], esi
call edi
movq xmm0, qword [0x100e5d34]
test eax, eax
setne byte [ebp - 0xc]
movq qword [esi], xmm0
mov ax, word [0x100e5d3c]
mov word [esi + 8], ax
cmp byte [ebp - 0xc], 0
je 0x10009f33
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x6e0d01
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 5
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
mov eax, dword [0x100e5d40]
setne byte [ebp - 0xc]
mov dword [esi], eax
mov al, byte [0x100e5d44]
mov byte [esi + 4], al
cmp byte [ebp - 0xc], 0
je 0x10009f91
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x6e0df7
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 5
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
mov eax, dword [0x100e5d48]
setne byte [ebp - 0xc]
mov dword [esi], eax
mov al, byte [0x100e5d4c]
mov byte [esi + 4], al
cmp byte [ebp - 0xc], 0
je 0x10009fef
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x6e219f
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 5
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
mov eax, dword [0x100e5d50]
setne byte [ebp - 0xc]
mov dword [esi], eax
mov al, byte [0x100e5d54]
mov byte [esi + 4], al
cmp byte [ebp - 0xc], 0
je 0x1000a04d
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x6e2297
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 5
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
mov eax, dword [0x100e5d58]
setne byte [ebp - 0xc]
mov dword [esi], eax
mov al, byte [0x100e5d5c]
mov byte [esi + 4], al
cmp byte [ebp - 0xc], 0
je 0x1000a0ab
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x6e253e
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 5
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
mov eax, dword [0x100e5d60]
setne byte [ebp - 0xc]
mov dword [esi], eax
mov al, byte [0x100e5d64]
mov byte [esi + 4], al
cmp byte [ebp - 0xc], 0
je 0x1000a109
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x6e2633
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 5
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
mov eax, dword [0x100e5d68]
setne byte [ebp - 0xc]
mov dword [esi], eax
mov al, byte [0x100e5d6c]
mov byte [esi + 4], al
cmp byte [ebp - 0xc], 0
je 0x1000a167
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x6e15e2
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 5
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
mov eax, dword [0x100e5d70]
setne byte [ebp - 0xc]
mov dword [esi], eax
mov al, byte [0x100e5d74]
mov byte [esi + 4], al
cmp byte [ebp - 0xc], 0
je 0x1000a1c5
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x6e170f
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 5
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
mov eax, dword [0x100e5d78]
setne byte [ebp - 0xc]
mov dword [esi], eax
mov al, byte [0x100e5d7c]
mov byte [esi + 4], al
cmp byte [ebp - 0xc], 0
je 0x1000a223
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x4a930a
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 5
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
mov eax, dword [0x100e5d80]
setne byte [ebp - 0xc]
mov dword [esi], eax
mov al, byte [0x100e5d84]
mov byte [esi + 4], al
cmp byte [ebp - 0xc], 0
je 0x1000a281
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
mov ecx, 0x7208c9
call fcn.1005f880
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 8]
push eax
call fcn.1000ff20
mov dword [ebp - 0x14], 5
mov esi, dword [eax]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push esi
mov dword [ebp - 0x18], esi
call edi
test eax, eax
mov eax, dword [0x100e5d88]
setne byte [ebp - 0xc]
mov dword [esi], eax
mov al, byte [0x100e5d8c]
mov byte [esi + 4], al
cmp byte [ebp - 0xc], 0
je 0x1000a2df
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 4], eax
push dword [ebp - 0x18]
call edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret