Function at 0x1009cdb0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword [0x102c719c]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 3
jne 0x1009cdf0
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4030d4
call esi
lea eax, [ebp - 4]
mov byte [0x4030d4], 6
push eax
push dword [ebp - 4]
push 1
push 0x4030d4
call esi
mov eax, dword [0x102c719c]
cmp eax, 2
jne 0x1009ce20
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4030d4
call esi
lea eax, [ebp - 4]
mov byte [0x4030d4], 5
push eax
push dword [ebp - 4]
push 1
push 0x4030d4
call esi
mov eax, dword [0x102c719c]
cmp eax, 1
jne 0x1009ce50
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4030d4
call esi
lea eax, [ebp - 4]
mov byte [0x4030d4], 4
push eax
push dword [ebp - 4]
push 1
push 0x4030d4
call esi
mov eax, dword [0x102c719c]
cmp eax, 4
jne 0x1009ce7b
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4030d4
call esi
lea eax, [ebp - 4]
mov byte [0x4030d4], 3
push eax
push dword [ebp - 4]
push 1
push 0x4030d4
call esi
mov eax, dword [0x102c7250]
test eax, eax
je 0x1009ce89
cmp eax, 2
jne 0x1009cee5
lea eax, [ebp - 4]
push eax
push 0x40
push 0x2f7
push 0x7d25c0
call esi
push 0x2f7
push 0x90
push 0x7d25c0
call fcn.100c2c10
add esp, 0xc
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x2f7
push 0x7d25c0
call esi
cmp dword [0x102c7250], 0
jne 0x1009cee5
push 0x7d4161
push 0x7d4000
push 0xe9
call fcn.100bec40
add esp, 0xc
cmp dword [0x102c71a4], 1
jne 0x1009cf41
lea eax, [ebp - 4]
push eax
push 0x40
push 0xc8
push 0x8193f0
call esi
push 0xc8
push 0x90
push 0x8193f0
call fcn.100c2c10
add esp, 0xc
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0xc8
push 0x8193f0
call esi
push 0x77ed20
push 0x77ec97
push 0xe9
call fcn.100bec40
add esp, 0xc
cmp dword [0x102c7264], 1
jne 0x1009cf7d
lea eax, [ebp - 4]
push eax
push 0x40
push 0x52
push 0x830b70
call esi
push 0x52
push 0x90
push 0x830b70
call fcn.100c2c10
add esp, 0xc
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x52
push 0x830b70
call esi
cmp dword [0x102c7268], 1
jne 0x1009cfc2
lea eax, [ebp - 4]
push eax
push 0x40
push 0x69d
push 0x6097b0
call esi
push 0x69d
push 0x90
push 0x6097b0
call fcn.100c2c10
add esp, 0xc
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x69d
push 0x6097b0
call esi
cmp dword [0x102c7280], 1
jne 0x1009d05e
push 0x7d3f45
push 0x7d3d63
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 0x15e
push 0x944e50
call esi
push 0x15e
push 0x90
push 0x944e50
call fcn.100c2c10
add esp, 0xc
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x15e
push 0x944e50
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 0x145
push 0x661700
call esi
push 0x145
push 0x90
push 0x661700
call fcn.100c2c10
add esp, 0xc
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x145
push 0x661700
call esi
cmp dword [0x102c7284], 1
jne 0x1009d09a
lea eax, [ebp - 4]
push eax
push 0x40
push 0x5a
push 0x78dc20
call esi
push 0x5a
push 0x90
push 0x78dc20
call fcn.100c2c10
add esp, 0xc
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x5a
push 0x78dc20
call esi
cmp dword [0x102c7288], 1
jne 0x1009d0ba
push 0x62f8a6
push 0x62f870
push 0xe9
call fcn.100bec40
add esp, 0xc
cmp dword [0x102c728c], 1
jne 0x1009d0ee
push 0x7d39d8
push 0x7d399f
push 0xe9
call fcn.100bec40
push 0x77ec0e
push 0x77eb65
push 0xe9
call fcn.100bec40
add esp, 0x18
cmp dword [0x102c7290], 1
jne 0x1009d10e
push 0x77ec97
push 0x77ec0e
push 0xe9
call fcn.100bec40
add esp, 0xc
cmp dword [0x102c7294], 1
jne 0x1009d16b
push 0x83288f
push 0x83285a
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x830cb8
call esi
lea eax, [ebp - 4]
mov byte [0x830cb8], 0x30
push eax
push dword [ebp - 4]
push 1
push 0x830cb8
call esi
push 0x7d3f9c
push 0x7d3f45
push 0xe9
call fcn.100bec40
add esp, 0xc
cmp dword [0x102c7298], 1
jne 0x1009d19f
push 0x7d3902
push 0x7d37a1
push 0xe9
call fcn.100bec40
push 0x85f992
push 0x85ec8a
push 0xe9
call fcn.100bec40
add esp, 0x18
cmp dword [0x102c729c], 1
jne 0x1009d1e7
push 0x7d371e
push 0x7d36b8
push 0xe9
call fcn.100bec40
push 0x7d4000
push 0x7d3f9c
push 0xe9
call fcn.100bec40
push 0x836a58
push 0x8369e4
push 0xe9
call fcn.100bec40
add esp, 0x24
cmp dword [0x102c72a0], 1
jne 0x1009d22f
push 0x7d377f
push 0x7d371e
push 0xe9
call fcn.100bec40
push 0x857007
push 0x856f94
push 0xe9
call fcn.100bec40
push 0x8572a5
push 0x85727c
push 0xe9
call fcn.100bec40
add esp, 0x24
cmp dword [0x102c72a4], 1
jne 0x1009d263
push 0x8369e4
push 0x836971
push 0xe9
call fcn.100bec40
push 0x834fc9
push 0x834e23
push 0xe9
call fcn.100bec40
add esp, 0x18
mov eax, dword [0x102c724c]
dec eax
cmp eax, 2
ja 0x1009d2aa
lea eax, [ebp - 4]
push eax
push 0x40
push 0x198
push 0x7a8330
call esi
push 0x198
push 0x90
push 0x7a8330
call fcn.100c2c10
add esp, 0xc
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x198
push 0x7a8330
call esi
cmp dword [0x102c72c4], 1
jne 0x1009d3b2
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x8742ee
call esi
lea eax, [ebp - 4]
mov byte [0x8742ee], 7
push eax
push dword [ebp - 4]
push 1
push 0x8742ee
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x8743ff
call esi
lea eax, [ebp - 4]
mov byte [0x8743ff], 7
push eax
push dword [ebp - 4]
push 1
push 0x8743ff
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x87454f
call esi
lea eax, [ebp - 4]
mov byte [0x87454f], 7
push eax
push dword [ebp - 4]
push 1
push 0x87454f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x877dce
call esi
lea eax, [ebp - 4]
mov byte [0x877dce], 6
push eax
push dword [ebp - 4]
push 1
push 0x877dce
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x877edf
call esi
lea eax, [ebp - 4]
mov byte [0x877edf], 6
push eax
push dword [ebp - 4]
push 1
push 0x877edf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x878032
call esi
lea eax, [ebp - 4]
mov byte [0x878032], 6
push eax
push dword [ebp - 4]
push 1
push 0x878032
call esi
push 0x7e4d16
push 0x7e4ca4
push 0xe9
call fcn.100bec40
add esp, 0xc
cmp dword [0x102c72c8], 1
jne 0x1009d3e6
push 0x6284c4
push 0x6284ab
push 0xe9
call fcn.100bec40
push 0x7128b5
push 0x71273b
push 0xe9
call fcn.100bec40
add esp, 0x18
cmp dword [0x102c72d4], 1
jne 0x1009d41a
push 0x7aa9b1
push 0x7aa93e
push 0xe9
call fcn.100bec40
push 0x7aa3bf
push 0x7aa354
push 0xe9
call fcn.100bec40
add esp, 0x18
cmp dword [0x102c72cc], 1
jne 0x1009d451
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0xd46c84
call esi
mov eax, 0xd46c84
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 5
push 0xd46c84
call esi
cmp dword [0x102c72d0], 1
jne 0x1009d488
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0xd46c8c
call esi
mov eax, 0xd46c8c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 5
push 0xd46c8c
call esi
pop esi
mov esp, ebp
pop ebp
ret