Function at 0x10009d90
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x573851
call esi
mov byte [0x573851], 0xe9
mov eax, 0x10008c40
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
add eax, 0xffa8c7aa
mov dword [0x573852], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x573851
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push 0x573856
call esi
mov eax, 0x573856
mov dword [eax], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 4
push 0x573856
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x57385f
call esi
mov byte [0x57385f], 0xe9
mov eax, 0x10008f20
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
add eax, 0xffa8c79c
mov dword [0x573860], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x57385f
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push 0x573864
call esi
mov eax, 0x573864
mov dword [eax], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 4
push 0x573864
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x575957
call esi
mov byte [0x575957], 0xe9
mov eax, 0x10008d30
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
add eax, 0xffa8a6a4
mov dword [0x575958], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x575957
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push 0x57595c
call esi
mov eax, 0x57595c
mov dword [eax], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 4
push 0x57595c
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x572217
call esi
mov byte [0x572217], 0xe9
mov eax, 0x10008e20
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
add eax, 0xffa8dde4
mov dword [0x572218], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x572217
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push 0x57221c
call esi
mov eax, 0x57221c
mov dword [eax], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 4
push 0x57221c
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x5ce860
call esi
mov byte [0x5ce860], 0xe9
mov eax, 0x10008fc0
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
add eax, 0xffa3179b
mov dword [0x5ce861], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x5ce860
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push 0x5ce865
call esi
mov eax, 0x5ce865
mov dword [eax], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 4
push 0x5ce865
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x4c17bc
call esi
mov byte [0x4c17bc], 0xe9
mov eax, 0x10009b00
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
add eax, 0xffb3e83f
mov dword [0x4c17bd], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x4c17bc
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push 0x4c17c1
call esi
mov eax, 0x4c17c1
mov byte [eax], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 1
push 0x4c17c1
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x4c1811
call esi
mov byte [0x4c1811], 0xe9
mov eax, 0x10009bc0
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
add eax, 0xffb3e7ea
mov dword [0x4c1812], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x4c1811
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push 0x4c1816
call esi
mov eax, 0x4c1816
mov byte [eax], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 1
push 0x4c1816
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x4c1861
call esi
mov byte [0x4c1861], 0xe9
mov eax, 0x10009c80
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
add eax, 0xffb3e79a
mov dword [0x4c1862], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x4c1861
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push 0x4c1866
call esi
mov eax, 0x4c1866
mov byte [eax], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 1
push 0x4c1866
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x4c1791
call esi
mov byte [0x4c1791], 0xe9
mov eax, 0x10009100
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
add eax, 0xffb3e86a
mov dword [0x4c1792], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x4c1791
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 3
push 0x4c1796
call esi
mov eax, 0x4c1796
mov ecx, 0x90909090
mov word [eax], cx
mov byte [eax + 2], cl
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 3
push 0x4c1796
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x55559a
call esi
mov byte [0x55559a], 0xe9
mov eax, 0x10009d40
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
add eax, 0xffaaaa61
mov dword [0x55559b], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x55559a
call esi
pop esi
mov esp, ebp
pop ebp
ret