Function at 0x10008e70
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x10048400]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push edi
push eax
push 0x40
push 1
push 0x686cce
mov byte [ebp - 0xd], 0x96
call esi
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
test eax, eax
je 0x10008ed2
push 0
push 1
lea eax, [ebp - 0xd]
push eax
push 0x686cce
call ebx
push eax
call edi
test eax, eax
je 0x10008ed2
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 1
push 0x686cce
call esi
lea eax, [ebp - 8]
mov byte [ebp - 0xe], 0x18
push eax
push 0x40
push 1
push 0x7225af
call esi
test eax, eax
je 0x10008f0f
push 0
push 1
lea eax, [ebp - 0xe]
push eax
push 0x7225af
call ebx
push eax
call edi
test eax, eax
je 0x10008f0f
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 1
push 0x7225af
call esi
lea eax, [ebp - 8]
mov byte [ebp - 0xf], 0x96
push eax
push 0x40
push 1
push 0x5842f4
call esi
test eax, eax
je 0x10008f4c
push 0
push 1
lea eax, [ebp - 0xf]
push eax
push 0x5842f4
call ebx
push eax
call edi
test eax, eax
je 0x10008f4c
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 1
push 0x5842f4
call esi
lea eax, [ebp - 0xc]
mov dword [ebp - 8], 0x721950
push eax
push 0x40
push 6
push 0x721950
call esi
test eax, eax
je 0x10008fa0
mov eax, dword [ebp - 8]
mov edx, 0x90909090
mov ecx, 0x10008bd0
sub ecx, eax
sub ecx, 5
mov dword [eax], edx
mov eax, dword [ebp - 8]
mov word [eax + 4], dx
mov eax, dword [ebp - 8]
mov byte [eax], 0xe9
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [eax], ecx
dec dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push 6
push dword [ebp - 8]
call esi
lea eax, [ebp - 0xc]
mov dword [ebp - 8], 0x721436
push eax
push 0x40
push 8
push 0x721436
call esi
test eax, eax
je 0x10008ff6
mov eax, dword [ebp - 8]
mov ecx, 0x10008bf0
sub ecx, eax
sub ecx, 5
mov dword [eax], 0x90909090
mov eax, dword [ebp - 8]
mov dword [eax + 4], 0x90909090
mov eax, dword [ebp - 8]
mov byte [eax], 0xe9
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [eax], ecx
dec dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push 8
push dword [ebp - 8]
call esi
lea eax, [ebp - 0xc]
mov dword [ebp - 8], 0x722dcc
push eax
push 0x40
push 7
push 0x722dcc
call esi
test eax, eax
je 0x10009050
mov eax, dword [ebp - 8]
mov edx, 0x90909090
mov ecx, 0x10008c10
sub ecx, eax
sub ecx, 5
mov dword [eax], edx
mov eax, dword [ebp - 8]
mov word [eax + 4], dx
mov eax, dword [ebp - 8]
mov byte [eax + 6], dl
mov eax, dword [ebp - 8]
mov byte [eax], 0xe9
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [eax], ecx
dec dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push 7
push dword [ebp - 8]
call esi
lea eax, [ebp - 0xc]
mov dword [ebp - 8], 0x722abe
push eax
push 0x40
push 7
push 0x722abe
call esi
test eax, eax
je 0x100090aa
mov eax, dword [ebp - 8]
mov edx, 0x90909090
mov ecx, 0x10008c30
sub ecx, eax
sub ecx, 5
mov dword [eax], edx
mov eax, dword [ebp - 8]
mov word [eax + 4], dx
mov eax, dword [ebp - 8]
mov byte [eax + 6], dl
mov eax, dword [ebp - 8]
mov byte [eax], 0xe9
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [eax], ecx
dec dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push 7
push dword [ebp - 8]
call esi
lea eax, [ebp - 0xc]
mov dword [ebp - 8], 0x72268b
push eax
push 0x40
push 8
push 0x72268b
call esi
test eax, eax
je 0x10009100
mov eax, dword [ebp - 8]
mov ecx, 0x10008c50
sub ecx, eax
sub ecx, 5
mov dword [eax], 0x90909090
mov eax, dword [ebp - 8]
mov dword [eax + 4], 0x90909090
mov eax, dword [ebp - 8]
mov byte [eax], 0xe9
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [eax], ecx
dec dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push 8
push dword [ebp - 8]
call esi
lea eax, [ebp - 0xc]
mov dword [ebp - 8], 0x7225d7
push eax
push 0x40
push 6
push 0x7225d7
call esi
test eax, eax
je 0x10009154
mov eax, dword [ebp - 8]
mov edx, 0x90909090
mov ecx, 0x10008c70
sub ecx, eax
sub ecx, 5
mov dword [eax], edx
mov eax, dword [ebp - 8]
mov word [eax + 4], dx
mov eax, dword [ebp - 8]
mov byte [eax], 0xe9
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [eax], ecx
dec dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push 6
push dword [ebp - 8]
call esi
lea eax, [ebp - 0xc]
mov dword [ebp - 8], 0x6540ab
push eax
push 0x40
push 5
push 0x6540ab
call esi
test eax, eax
je 0x100091a7
mov eax, dword [ebp - 8]
mov ecx, 0x10008c90
sub ecx, eax
sub ecx, 5
mov dword [eax], 0x90909090
mov eax, dword [ebp - 8]
mov byte [eax + 4], 0x90
mov eax, dword [ebp - 8]
mov byte [eax], 0xe9
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [eax], ecx
dec dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push 5
push dword [ebp - 8]
call esi
lea eax, [ebp - 0xc]
mov dword [ebp - 8], 0x65328e
push eax
push 0x40
push 5
push 0x65328e
call esi
test eax, eax
je 0x100091fa
mov eax, dword [ebp - 8]
mov ecx, 0x10008ca0
sub ecx, eax
sub ecx, 5
mov dword [eax], 0x90909090
mov eax, dword [ebp - 8]
mov byte [eax + 4], 0x90
mov eax, dword [ebp - 8]
mov byte [eax], 0xe9
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [eax], ecx
dec dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push 5
push dword [ebp - 8]
call esi
lea eax, [ebp - 0xc]
mov dword [ebp - 8], 0x654cda
push eax
push 0x40
push 5
push 0x654cda
call esi
test eax, eax
je 0x1000924d
mov eax, dword [ebp - 8]
mov ecx, 0x10008cb0
sub ecx, eax
sub ecx, 5
mov dword [eax], 0x90909090
mov eax, dword [ebp - 8]
mov byte [eax + 4], 0x90
mov eax, dword [ebp - 8]
mov byte [eax], 0xe9
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [eax], ecx
dec dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push 5
push dword [ebp - 8]
call esi
lea eax, [ebp - 0xc]
mov dword [ebp - 8], 0x5a3a9a
push eax
push 0x40
push 5
push 0x5a3a9a
call esi
test eax, eax
je 0x100092a0
mov eax, dword [ebp - 8]
mov ecx, 0x10008cc0
sub ecx, eax
sub ecx, 5
mov dword [eax], 0x90909090
mov eax, dword [ebp - 8]
mov byte [eax + 4], 0x90
mov eax, dword [ebp - 8]
mov byte [eax], 0xe9
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [eax], ecx
dec dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push 5
push dword [ebp - 8]
call esi
lea eax, [ebp - 0xc]
mov dword [ebp - 8], 0x5dcb95
push eax
push 0x40
push 6
push 0x5dcb95
call esi
test eax, eax
je 0x100092f4
mov eax, dword [ebp - 8]
mov edx, 0x90909090
mov ecx, 0x10008d30
sub ecx, eax
sub ecx, 5
mov dword [eax], edx
mov eax, dword [ebp - 8]
mov word [eax + 4], dx
mov eax, dword [ebp - 8]
mov byte [eax], 0xe9
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [eax], ecx
dec dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push 6
push dword [ebp - 8]
call esi
lea eax, [ebp - 0xc]
mov dword [ebp - 8], 0x7212c5
push eax
push 0x40
push 0xa
push 0x7212c5
call esi
test eax, eax
je 0x1000934e
mov eax, dword [ebp - 8]
mov edx, 0x90909090
mov ecx, 0x10008db0
sub ecx, eax
sub ecx, 5
mov dword [eax], edx
mov eax, dword [ebp - 8]
mov dword [eax + 4], edx
mov eax, dword [ebp - 8]
mov word [eax + 8], dx
mov eax, dword [ebp - 8]
mov byte [eax], 0xe9
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [eax], ecx
dec dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push 0xa
push dword [ebp - 8]
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10017809
mov esp, ebp
pop ebp
ret