Function at 0x100300d0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x1018b06c]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x101ee988], 1
jne 0x10030128
push 0x10062f10
push 0x413efe
push 0xe8
call fcn.100b1680
push 0x10062f30
push 0x4140d9
push 0xe8
call fcn.100b1680
push 0x10062f30
push 0x41412e
push 0xe8
call fcn.100b1680
add esp, 0x24
push ebx
push esi
push 0x10030070
push 0x7eea69
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x78e6d6
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x78e70a
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x78e74a
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x78e79c
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x78e7e2
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x1002ffd0
push 0x7f65a6
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7f65e6
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7f6638
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7f66a2
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7f66fa
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x80c848
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x80c87c
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x80c8bc
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x80c90e
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x80c954
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x845956
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x84598a
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x8459c7
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x845a10
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x845a4f
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x7c6bcc
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7c6c06
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7c6c49
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x7c6c98
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7c6cdd
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x7c7d0c
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7c7d46
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7c7d89
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7c7dd8
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x7c7e1d
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x850966
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x85099a
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8509d7
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x850a20
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x850a5f
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x1002ffd0
push 0x852476
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8524aa
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8524e7
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x852530
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x85256f
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x8540b6
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x8540ea
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x854127
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x854170
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8541af
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x868052
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x86808c
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x8680d5
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x868130
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x86817b
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x87f886
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x87f8ba
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x87f8f7
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x87f940
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x87f97f
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x882f52
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x882f8c
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x882fd5
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x883030
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x88307b
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x893102
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x89313c
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x893185
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8931e0
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x89322b
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x1002ffd0
push 0x8812a2
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8812dc
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x881325
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x881380
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8813cb
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x879ee2
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x879f1c
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x879f65
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x879fc0
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x87a00b
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x8747b6
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8747f0
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x87483c
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8748a0
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8748f2
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x8781bc
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8781f0
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x878230
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x878282
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8782c8
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x84d01a
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x84d05a
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x84d0ac
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x84d116
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x84d16e
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x84a546
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x84a57a
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x84a5ba
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x84a60c
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x84a652
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x1002ffd0
push 0x82ca22
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x82cb4b
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x82cb00
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x82caa5
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x82ca5c
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x841e49
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x841e7d
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x841eba
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x841f03
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x841f42
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x84f406
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x84f43a
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x84f477
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x84f4c0
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x84f4ff
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x857946
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x85797a
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8579b7
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x857a00
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x857a3f
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x8567e6
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x85681a
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x856857
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8568a0
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x8568df
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x836ef6
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x836f2a
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x836f67
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x836fb0
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x836fef
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x1002ffd0
push 0x7d55a6
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7d55da
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7d5617
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7d5660
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7d569f
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x8470a6
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x8470da
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x847117
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x847160
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x84719f
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x7d1786
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7d17ba
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x7d17f7
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7d1840
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7d187f
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x7cb6f6
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7cb72a
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7cb767
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x7cb7b0
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x7cb7ef
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x843826
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x84385a
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x843897
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8438e0
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10030020
push 0x84391f
push 0xe8
call fcn.100b1680
push 0x1002ffd0
push 0x83ea46
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x83ea7a
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x83eab7
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x83eb00
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x83eb3f
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x1002ffd0
push 0x8643b6
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8643ea
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x864427
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x864470
push 0xe8
call fcn.100b1680
push 0x10030020
push 0x8644af
push 0xe8
call fcn.100b1680
push 0x1002fb90
push 0x4f9477
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x1002fb90
push 0x5c6680
push 0xe8
call fcn.100b1680
push 0x1002ec90
push 0x8126c0
push 0xe9
call fcn.100b1680
push 0x1002f4b0
push 0x813970
push 0xe9
call fcn.100b1680
push 0x1002ec50
push 0x425468
push 0xe9
call fcn.100b1680
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0x30
push eax
push 0x40
push 4
push 0x7f31c2
call esi
lea eax, [ebp - 8]
mov dword [0x7f31c2], 0x700003
push eax
push dword [ebp - 8]
push 4
push 0x7f31c2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7f3202
call esi
lea eax, [ebp - 8]
mov dword [0x7f3202], 0x700003
push eax
push dword [ebp - 8]
push 4
push 0x7f3202
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7f3242
call esi
mov dword [0x7f3242], 0x700003
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x7f3242
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7f3281
call esi
lea eax, [ebp - 8]
mov dword [0x7f3281], 0x700003
push eax
push dword [ebp - 8]
push 4
push 0x7f3281
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7f32c1
call esi
lea eax, [ebp - 8]
mov dword [0x7f32c1], 0x700003
push eax
push dword [ebp - 8]
push 4
push 0x7f32c1
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7f3301
call esi
lea eax, [ebp - 8]
mov dword [0x7f3301], 0x700003
push eax
push dword [ebp - 8]
push 4
push 0x7f3301
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa3ba
call esi
mov eax, 0x7aa3ba
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa3ba
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa39c
call esi
mov eax, 0x7aa39c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa39c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa9b3
call esi
mov eax, 0x7aa9b3
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa9b3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x40a7ef
call esi
mov eax, 0x40a7ef
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x40a7ef
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x40a87e
call esi
mov eax, 0x40a87e
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x40a87e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x85af21
call esi
lea eax, [ebp - 8]
mov byte [0x85af21], 0x19
push eax
push dword [ebp - 8]
push 1
push 0x85af21
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x78ddf4
call esi
lea eax, [ebp - 8]
mov byte [0x78ddf4], 0x3c
push eax
push dword [ebp - 8]
push 1
push 0x78ddf4
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db7b0
call esi
mov eax, 0x7db7b0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db7b0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db812
call esi
mov eax, 0x7db812
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db812
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db874
call esi
mov eax, 0x7db874
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db874
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db8e0
call esi
mov eax, 0x7db8e0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db8e0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db959
call esi
mov eax, 0x7db959
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db959
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db9a2
call esi
mov eax, 0x7db9a2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db9a2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7dba20
call esi
mov eax, 0x7dba20
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7dba20
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7dba69
call esi
mov eax, 0x7dba69
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7dba69
call esi
push 5
call fcn.100d591e
push 5
mov edx, eax
mov ecx, 0x6e899d
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100b0de0
push 5
call fcn.100d591e
push 5
mov edx, eax
mov ecx, 0x7126fa
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100b0de0
push 5
call fcn.100d591e
push 5
mov edx, eax
mov ecx, 0x5b768f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100b0de0
push 5
call fcn.100d591e
push 5
mov edx, eax
mov ecx, 0x5b770c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100b0de0
add esp, 0x20
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push 0x8583f9
call esi
mov eax, 0x8583f9
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 8
push 0x8583f9
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push 0x858752
call esi
mov eax, 0x858752
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 8
push 0x858752
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0xf6
push 0x85875f
call esi
push 0xf6
push 0x90
push 0x85875f
call fcn.10123cc0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xf6
push 0x85875f
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x832c46
mov bl, 5
call esi
test eax, eax
je 0x1003136f
mov eax, 0x832c46
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x832c46
call esi
test eax, eax
jne 0x10031375
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [0x101ee988], 1
jne 0x100313b1
lea eax, [ebp - 8]
push eax
push 0x40
push 0x52
push 0x8684f0
call esi
push 0x52
push 0x90
push 0x8684f0
call fcn.10123cc0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x52
push 0x8684f0
call esi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.100d52b0
mov esp, ebp
pop ebp
ret