Function at 0x10003ab0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x100096e0]
mov edx, dword [0x100096e4]
lea ecx, [eax*2 + 0x100096e8]
inc eax
mov dword [0x100096e4], ecx
cmp dword [0x100b93cc], 0x33
mov dword [0x100096e0], eax
mov ax, word [edx]
mov word [ecx], ax
jae 0x10003b0c
push 0x7fc
call fcn.10005615
push 0x7fc
push 0
push eax
mov dword [0x100b93c0], eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x10
inc dword [0x10009658]
lea eax, [ebp - 8]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
mov edi, dword [0x100b93c0]
push eax
push 0x40
push 4
push 0x4c64a5
call esi
mov dword [0x4c64a5], edi
test eax, eax
je 0x10003b49
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c64a5
call esi
mov edi, dword [0x100b93c0]
lea eax, [ebp - 8]
inc dword [0x10009658]
push eax
push 0x40
push 4
push 0x4c64bc
call esi
mov dword [0x4c64bc], edi
test eax, eax
je 0x10003b7e
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c64bc
call esi
mov edi, dword [0x100b93c0]
lea eax, [ebp - 8]
inc dword [0x10009658]
push eax
push 0x40
push 4
push 0x4c65f8
call esi
mov dword [0x4c65f8], edi
test eax, eax
je 0x10003bb3
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c65f8
call esi
mov edi, dword [0x100b93c0]
lea eax, [ebp - 8]
inc dword [0x10009658]
push eax
push 0x40
push 4
push 0x4c6711
call esi
mov dword [0x4c6711], edi
test eax, eax
je 0x10003be8
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c6711
call esi
mov edi, dword [0x100b93c0]
lea eax, [ebp - 8]
inc dword [0x10009658]
push eax
push 0x40
push 4
push 0x4c6722
call esi
mov dword [0x4c6722], edi
test eax, eax
je 0x10003c1d
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c6722
call esi
mov edi, dword [0x100b93c0]
lea eax, [ebp - 8]
inc dword [0x10009658]
push eax
push 0x40
push 4
push 0x4c6847
call esi
mov dword [0x4c6847], edi
test eax, eax
je 0x10003c52
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c6847
call esi
mov edi, dword [0x100b93c0]
lea eax, [ebp - 8]
inc dword [0x10009658]
push eax
push 0x40
push 4
push 0x84bc91
call esi
mov dword [0x84bc91], edi
test eax, eax
je 0x10003c87
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x84bc91
call esi
mov edi, dword [0x100b93c0]
lea eax, [ebp - 8]
inc dword [0x10009658]
push eax
push 0x40
push 4
push 0x856281
call esi
mov dword [0x856281], edi
test eax, eax
je 0x10003cbc
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x856281
call esi
mov edi, dword [0x100b93c0]
lea eax, [ebp - 8]
inc dword [0x10009658]
add edi, 4
push eax
push 0x40
push 4
push 0x4c64b0
call esi
mov dword [0x4c64b0], edi
test eax, eax
je 0x10003cf4
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c64b0
call esi
mov edi, dword [0x100b93c0]
lea eax, [ebp - 8]
inc dword [0x10009658]
add edi, 4
push eax
push 0x40
push 4
push 0x4c671d
call esi
mov dword [0x4c671d], edi
test eax, eax
je 0x10003d2c
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c671d
call esi
mov edx, 0x10003a60
mov ecx, 0x4c5e90
call section..text
mov edx, 0x10003a90
mov ecx, 0x4c58e0
call section..text
mov eax, dword [0x100096e0]
dec eax
mov dword [0x100b93cc], 0x33
mov dword [0x100096e0], eax
pop edi
pop esi
test eax, eax
jle 0x10003d81
lea eax, [eax*2 + 0x100096e6]
mov dword [0x100096e4], eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100055a1
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov dword [0x100096e4], 0
call fcn.100055a1
mov esp, ebp
pop ebp
ret 4