Function at 0x10003720
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x100096e0]
mov edx, dword [0x100096e4]
lea ecx, [eax*2 + 0x100096e8]
inc eax
mov dword [0x100096e4], ecx
cmp dword [0x100b93c8], 0x1fa
mov dword [0x100096e0], eax
mov ax, word [edx]
mov word [ecx], ax
jae 0x1000377f
push 0x866c
call fcn.10005615
push 0x866c
push 0
push eax
mov dword [0x100b93bc], eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x10
inc dword [0x10009658]
lea eax, [ebp - 8]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
mov edi, dword [0x100b93bc]
push eax
push 0x40
push 4
push 0x4c6518
call esi
mov dword [0x4c6518], edi
test eax, eax
je 0x100037bc
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c6518
call esi
mov edi, dword [0x100b93bc]
lea eax, [ebp - 8]
inc dword [0x10009658]
push eax
push 0x40
push 4
push 0x4c652f
call esi
mov dword [0x4c652f], edi
test eax, eax
je 0x100037f1
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c652f
call esi
mov edi, dword [0x100b93bc]
lea eax, [ebp - 8]
inc dword [0x10009658]
push eax
push 0x40
push 4
push 0x4c660a
call esi
mov dword [0x4c660a], edi
test eax, eax
je 0x10003826
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c660a
call esi
mov edi, dword [0x100b93bc]
lea eax, [ebp - 8]
inc dword [0x10009658]
push eax
push 0x40
push 4
push 0x4c67a1
call esi
mov dword [0x4c67a1], edi
test eax, eax
je 0x1000385b
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c67a1
call esi
mov edi, dword [0x100b93bc]
lea eax, [ebp - 8]
inc dword [0x10009658]
push eax
push 0x40
push 4
push 0x4c67b3
call esi
mov dword [0x4c67b3], edi
test eax, eax
je 0x10003890
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c67b3
call esi
mov edi, dword [0x100b93bc]
lea eax, [ebp - 8]
inc dword [0x10009658]
push eax
push 0x40
push 4
push 0x4c6859
call esi
mov dword [0x4c6859], edi
test eax, eax
je 0x100038c5
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c6859
call esi
mov edi, dword [0x100b93bc]
lea eax, [ebp - 8]
inc dword [0x10009658]
push eax
push 0x40
push 4
push 0x84bcf1
call esi
mov dword [0x84bcf1], edi
test eax, eax
je 0x100038fa
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x84bcf1
call esi
mov edi, dword [0x100b93bc]
lea eax, [ebp - 8]
inc dword [0x10009658]
push eax
push 0x40
push 4
push 0x8562b1
call esi
mov dword [0x8562b1], edi
test eax, eax
je 0x1000392f
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x8562b1
call esi
mov edi, dword [0x100b93bc]
lea eax, [ebp - 8]
inc dword [0x10009658]
add edi, 4
push eax
push 0x40
push 4
push 0x4c6523
call esi
mov dword [0x4c6523], edi
test eax, eax
je 0x10003967
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c6523
call esi
mov edi, dword [0x100b93bc]
lea eax, [ebp - 8]
inc dword [0x10009658]
add edi, 4
push eax
push 0x40
push 4
push 0x4c67ad
call esi
mov dword [0x4c67ad], edi
test eax, eax
je 0x1000399f
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c67ad
call esi
inc dword [0x10009658]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4c67dc
call esi
mov dword [0x4c67dc], 0x1fa
test eax, eax
je 0x100039d2
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c67dc
call esi
inc dword [0x10009658]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4c6396
call esi
mov dword [0x4c6396], 0x1fa
test eax, eax
je 0x10003a05
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push 4
push 0x4c6396
call esi
mov eax, dword [0x100096e0]
dec eax
mov dword [0x100b93c8], 0x1fa
mov dword [0x100096e0], eax
pop edi
pop esi
test eax, eax
jle 0x10003a3c
lea eax, [eax*2 + 0x100096e6]
mov dword [0x100096e4], eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100055a1
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov dword [0x100096e4], 0
call fcn.100055a1
mov esp, ebp
pop ebp
ret 4