Function at 0x10002c80
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
push edi
push 0xe9
push 0x10002c40
push 0x40125d
call fcn.10002bb0
mov ecx, eax
call fcn.10002ab0
push 0xe9
push fcn.10002c50
push 0x41ae29
call fcn.10002bb0
mov ecx, eax
call fcn.10002ab0
push 0xe9
push 0x10001720
push 0x42e843
call fcn.10002bb0
mov ecx, eax
call fcn.10002ab0
push 0xe9
push 0x10001750
push 0x8d456c
call fcn.10002bb0
mov ecx, eax
call fcn.10002ab0
push 0xe9
push 0x10001740
push 0x8d4703
call fcn.10002bb0
mov ecx, eax
call fcn.10002ab0
push 0xe9
push 0x100014b0
push 0x421828
call fcn.10002bb0
mov ecx, eax
call fcn.10002ab0
push 0xe9
push 0x10001550
push 0x4083c3
call fcn.10002bb0
mov ecx, eax
call fcn.10002ab0
push 0xe9
push 0x10001770
push 0x42fcfc
call fcn.10002bb0
mov ecx, eax
call fcn.10002ab0
push 0xe9
push 0x10001a80
push 0x40b956
call fcn.10002bb0
mov ecx, eax
call fcn.10002ab0
push 1
push 0x10015a58
push 5
push 0xe9
push 0x10001620
push 0x431eee
call fcn.10002bb0
mov ecx, eax
call fcn.10002b00
push 1
push 0x10015a4c
push 5
push 0xe9
push 0x10001810
push 0x430431
call fcn.10002bb0
mov ecx, eax
call fcn.10002b00
push 0xe9
push 0x10001670
push 0x429555
call fcn.10002bb0
mov ecx, eax
call fcn.10002ab0
push 0xe9
push 0x10001010
push 0x41e4ed
call fcn.10002bb0
mov ecx, eax
call fcn.10002ab0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x484457
call esi
lea eax, [ebp - 4]
mov byte [0x484457], 0x33
push eax
push dword [ebp - 4]
push 1
push 0x484457
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x8d46fc
call esi
lea eax, [ebp - 4]
mov byte [0x8d46fc], 0x33
push eax
push dword [ebp - 4]
push 1
push 0x8d46fc
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4843e5
call esi
lea eax, [ebp - 4]
mov dword [0x4843e5], 0x10015a60
push eax
push dword [ebp - 4]
push 4
push 0x4843e5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4843fc
call esi
lea eax, [ebp - 4]
mov dword [0x4843fc], 0x10015a60
push eax
push dword [ebp - 4]
push 4
push 0x4843fc
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x48441d
call esi
lea eax, [ebp - 4]
mov dword [0x48441d], 0x10015a60
push eax
push dword [ebp - 4]
push 4
push 0x48441d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x484474
call esi
lea eax, [ebp - 4]
mov dword [0x484474], 0x10015b2c
push eax
push dword [ebp - 4]
push 4
push 0x484474
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x484464
call esi
lea eax, [ebp - 4]
mov dword [0x484464], 0x10015bf8
push eax
push dword [ebp - 4]
push 4
push 0x484464
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x484893
call esi
lea eax, [ebp - 4]
mov dword [0x484893], 0x10015bf8
push eax
push dword [ebp - 4]
push 4
push 0x484893
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4848b5
call esi
lea eax, [ebp - 4]
mov dword [0x4848b5], 0x10015bf8
push eax
push dword [ebp - 4]
push 4
push 0x4848b5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x484a1f
call esi
lea eax, [ebp - 4]
mov dword [0x484a1f], 0x10015cc4
push eax
push dword [ebp - 4]
push 4
push 0x484a1f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4bc1a0
call esi
lea eax, [ebp - 4]
mov dword [0x4bc1a0], 0x10015cc4
push eax
push dword [ebp - 4]
push 4
push 0x4bc1a0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4bc23a
call esi
lea eax, [ebp - 4]
mov dword [0x4bc23a], 0x10015cc4
push eax
push dword [ebp - 4]
push 4
push 0x4bc23a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x484c77
call esi
lea eax, [ebp - 4]
mov dword [0x484c77], 0x10015d90
push eax
push dword [ebp - 4]
push 4
push 0x484c77
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x8d4574
call esi
lea eax, [ebp - 4]
mov byte [0x8d4574], 0
push eax
push dword [ebp - 4]
push 1
push 0x8d4574
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x8d45ae
call esi
lea eax, [ebp - 4]
mov byte [0x8d45ae], 0
push eax
push dword [ebp - 4]
push 1
push 0x8d45ae
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x8d45bd
call esi
lea eax, [ebp - 4]
mov edi, 0xcc
push eax
mov word [0x8d45bd], di
push dword [ebp - 4]
push 2
push 0x8d45bd
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x8d45f8
call esi
lea eax, [ebp - 4]
mov word [0x8d45f8], di
push eax
push dword [ebp - 4]
push 2
push 0x8d45f8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x8d45ff
call esi
lea eax, [ebp - 4]
mov edi, 0x198
push eax
mov word [0x8d45ff], di
push dword [ebp - 4]
push 2
push 0x8d45ff
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x8d463d
call esi
lea eax, [ebp - 4]
mov word [0x8d463d], di
push eax
push dword [ebp - 4]
push 2
push 0x8d463d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x8d4678
call esi
lea eax, [ebp - 4]
mov edi, 0x264
push eax
mov word [0x8d4678], di
push dword [ebp - 4]
push 2
push 0x8d4678
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x8d46b3
call esi
lea eax, [ebp - 4]
mov word [0x8d46b3], di
push eax
push dword [ebp - 4]
push 2
push 0x8d46b3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x8d46ba
call esi
lea eax, [ebp - 4]
mov edi, 0x330
push eax
mov word [0x8d46ba], di
push dword [ebp - 4]
push 2
push 0x8d46ba
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x8d46f5
call esi
lea eax, [ebp - 4]
mov word [0x8d46f5], di
push eax
push dword [ebp - 4]
push 2
push 0x8d46f5
call esi
push 0xe9
push 0x10001af0
push 0x414d58
call fcn.10002bb0
mov ecx, eax
call fcn.10002ab0
push 0xe9
push 0x100024d0
push 0x40940d
call fcn.10002bb0
mov ecx, eax
call fcn.10002ab0
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8f8173
call esi
lea eax, [ebp - 4]
mov dword [0x8f8173], 0x909090c3
push eax
push dword [ebp - 4]
push 4
push 0x8f8173
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x8f8177
call esi
lea eax, [ebp - 4]
mov byte [0x8f8177], 0x90
push eax
push dword [ebp - 4]
push 1
push 0x8f8177
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4bb5c8
call esi
lea eax, [ebp - 4]
mov byte [0x4bb5c8], 0xeb
push eax
push dword [ebp - 4]
push 1
push 0x4bb5c8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4bb609
call esi
lea eax, [ebp - 4]
mov byte [0x4bb609], 0xeb
push eax
push dword [ebp - 4]
push 1
push 0x4bb609
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4f2640
call esi
lea eax, [ebp - 4]
mov dword [0x4f2640], 0xf90004c2
push eax
push dword [ebp - 4]
push 4
push 0x4f2640
call esi
push 0xe9
push 0x10001720
push 0x43d2b7
call fcn.10002bb0
mov ecx, eax
call fcn.10002ab0
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7b9e95
call esi
lea eax, [ebp - 4]
mov dword [0x7b9e95], 0x458d0373
push eax
push dword [ebp - 4]
push 4
push 0x7b9e95
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7b9e99
call esi
lea eax, [ebp - 4]
mov dword [0x7b9e99], 0x600d8bdc
push eax
push dword [ebp - 4]
push 4
push 0x7b9e99
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7b9e9d
call esi
lea eax, [ebp - 4]
mov dword [0x7b9e9d], 0x56010b01
push eax
push dword [ebp - 4]
push 4
push 0x7b9e9d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0xb72374
call esi
lea eax, [ebp - 4]
mov byte [0xb72374], 0xf
push eax
push dword [ebp - 4]
push 1
push 0xb72374
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4c66e5
call esi
lea eax, [ebp - 4]
mov byte [0x4c66e5], 0xf
push eax
push dword [ebp - 4]
push 1
push 0x4c66e5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d8ad4
call esi
lea eax, [ebp - 4]
mov byte [0x4d8ad4], 0xf
push eax
push dword [ebp - 4]
push 1
push 0x4d8ad4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4b7dae
call esi
lea eax, [ebp - 4]
mov byte [0x4b7dae], 0xf
push eax
push dword [ebp - 4]
push 1
push 0x4b7dae
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x8beb47
call esi
lea eax, [ebp - 4]
mov byte [0x8beb47], 0xf
push eax
push dword [ebp - 4]
push 1
push 0x8beb47
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4fe7d0
call esi
lea eax, [ebp - 4]
mov byte [0x4fe7d0], 0xf
push eax
push dword [ebp - 4]
push 1
push 0x4fe7d0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x803ae3
call esi
lea eax, [ebp - 4]
mov byte [0x803ae3], 0xf
push eax
push dword [ebp - 4]
push 1
push 0x803ae3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xacd831
call esi
lea eax, [ebp - 4]
mov dword [0xacd831], 0x83450fc0
push eax
push dword [ebp - 4]
push 4
push 0xacd831
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4feb08
call esi
lea eax, [ebp - 4]
mov dword [0x4feb08], 0x2020202
push eax
push dword [ebp - 4]
push 4
push 0x4feb08
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4feb0c
call esi
lea eax, [ebp - 4]
mov dword [0x4feb0c], 0xcccccc02
push eax
push dword [ebp - 4]
push 4
push 0x4feb0c
call esi
push 0xe9
push 0x10001a50
push 0x40aa10
call fcn.10002bb0
mov ecx, eax
call fcn.10002ab0
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x5daf3a
call esi
lea eax, [ebp - 4]
mov byte [0x5daf3a], 0x18
push eax
push dword [ebp - 4]
push 1
push 0x5daf3a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x5db06c
call esi
lea eax, [ebp - 4]
mov byte [0x5db06c], 0x18
push eax
push dword [ebp - 4]
push 1
push 0x5db06c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x639e60
call esi
lea eax, [ebp - 4]
mov byte [0x639e60], 0x1e
push eax
push dword [ebp - 4]
push 1
push 0x639e60
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x632b40
call esi
lea eax, [ebp - 4]
mov byte [0x632b40], 0xa
push eax
push dword [ebp - 4]
push 1
push 0x632b40
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x638a76
call esi
lea eax, [ebp - 4]
mov byte [0x638a76], 0xa
push eax
push dword [ebp - 4]
push 1
push 0x638a76
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x700339
call esi
lea eax, [ebp - 4]
mov byte [0x700339], 0xa
push eax
push dword [ebp - 4]
push 1
push 0x700339
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6370ad
call esi
lea eax, [ebp - 4]
mov byte [0x6370ad], 0xa
push eax
push dword [ebp - 4]
push 1
push 0x6370ad
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4758e4
call esi
lea eax, [ebp - 4]
mov byte [0x4758e4], 0x90
push eax
push dword [ebp - 4]
push 1
push 0x4758e4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4758e5
call esi
lea eax, [ebp - 4]
mov byte [0x4758e5], 0x90
push eax
push dword [ebp - 4]
push 1
push 0x4758e5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4758e6
call esi
lea eax, [ebp - 4]
mov byte [0x4758e6], 0x90
push eax
push dword [ebp - 4]
push 1
push 0x4758e6
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4758e7
call esi
lea eax, [ebp - 4]
mov byte [0x4758e7], 0x90
push eax
push dword [ebp - 4]
push 1
push 0x4758e7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4758e8
call esi
lea eax, [ebp - 4]
mov byte [0x4758e8], 0x90
push eax
push dword [ebp - 4]
push 1
push 0x4758e8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4758e9
call esi
lea eax, [ebp - 4]
mov byte [0x4758e9], 0x90
push eax
push dword [ebp - 4]
push 1
push 0x4758e9
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x5db7c0
call esi
lea eax, [ebp - 4]
mov byte [0x5db7c0], 0xc
push eax
push dword [ebp - 4]
push 1
push 0x5db7c0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x5d8fe4
call esi
lea eax, [ebp - 4]
mov byte [0x5d8fe4], 0x2e
push eax
push dword [ebp - 4]
push 1
push 0x5d8fe4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x5d4277
call esi
lea eax, [ebp - 4]
mov byte [0x5d4277], 4
push eax
push dword [ebp - 4]
push 1
push 0x5d4277
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x5d4279
call esi
lea eax, [ebp - 4]
mov byte [0x5d4279], 0x95
push eax
push dword [ebp - 4]
push 1
push 0x5d4279
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7cb945
call esi
lea eax, [ebp - 4]
mov dword [0x7cb945], 0x946b60f
push eax
push dword [ebp - 4]
push 4
push 0x7cb945
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7cb949
call esi
lea eax, [ebp - 4]
mov byte [0x7cb949], 0x50
push eax
push dword [ebp - 4]
push 1
push 0x7cb949
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x40f7be
call esi
lea eax, [ebp - 4]
mov dword [0x40f7be], 0x3aa5d3
push eax
push dword [ebp - 4]
push 4
push 0x40f7be
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x41cf72
call esi
lea eax, [ebp - 4]
mov dword [0x41cf72], 0x396a8d
push eax
push dword [ebp - 4]
push 4
push 0x41cf72
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x406c3b
call esi
lea eax, [ebp - 4]
mov dword [0x406c3b], 0x3f6892
push eax
push dword [ebp - 4]
push 4
push 0x406c3b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x702534
call esi
lea eax, [ebp - 4]
mov byte [0x702534], 0xb0
push eax
push dword [ebp - 4]
push 1
push 0x702534
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x736388
call esi
lea eax, [ebp - 4]
mov byte [0x736388], 0xeb
push eax
push dword [ebp - 4]
push 1
push 0x736388
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x4f8449
call esi
mov eax, 0x2ee0
mov word [0x4f8449], ax
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 2
push 0x4f8449
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x4f9044
call esi
mov eax, 0xbb8
mov word [0x4f9044], ax
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 2
push 0x4f9044
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x484f9b
call esi
lea eax, [ebp - 4]
mov dword [0x484f9b], 0x8b444e8b
push eax
push dword [ebp - 4]
push 4
push 0x484f9b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x484f9f
call esi
lea eax, [ebp - 4]
mov dword [0x484f9f], 0x359c81
push eax
push dword [ebp - 4]
push 4
push 0x484f9f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x484fa3
call esi
lea eax, [ebp - 4]
mov dword [0x484fa3], 0x28583900
push eax
push dword [ebp - 4]
push 4
push 0x484fa3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x48502c
call esi
lea eax, [ebp - 4]
mov dword [0x48502c], 0xf994bce8
push eax
push dword [ebp - 4]
push 4
push 0x48502c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x485030
call esi
lea eax, [ebp - 4]
mov dword [0x485030], 0x51eed9ff
push eax
push dword [ebp - 4]
push 4
push 0x485030
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x820bf5
call esi
mov eax, 0xb950
mov word [0x820bf5], ax
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 2
push 0x820bf5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x820bf7
call esi
mov eax, 0x3ca0
mov word [0x820bf7], ax
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 2
push 0x820bf7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x820bf9
call esi
mov eax, 0xba
mov word [0x820bf9], ax
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 2
push 0x820bf9
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret