Function at 0x10019570
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [ebp - 0xc]
push esi
push edi
push eax
push 1
lea eax, [ebp - 1]
mov byte [ebp - 1], 0xe9
push eax
push 0x467913
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call edi
mov eax, 0x100192d0
sub eax, 0x467918
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 0x10]
push eax
push 0x467914
call ebx
push eax
call edi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 2
push 0x467918
call esi
mov eax, 0x467918
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 2
push 0x467918
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x5571b2
call ebx
push eax
call edi
mov eax, 0x10019310
sub eax, 0x5571b7
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x5571b3
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x4159bb
call ebx
push eax
call edi
mov eax, 0x100193a0
sub eax, 0x4159c0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4159bc
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x4159c0
call esi
mov eax, 0x4159c0
mov byte [eax], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 1
push 0x4159c0
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x4cb1e2
call ebx
push eax
call edi
mov eax, 0x10019490
sub eax, 0x4cb1e7
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4cb1e3
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 3
push 0x4cb1e7
call esi
mov eax, 0x4cb1e7
mov ecx, 0x90909090
mov word [eax], cx
mov byte [eax + 2], cl
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 3
push 0x4cb1e7
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x4b122d
call ebx
push eax
call edi
mov eax, 0x10019500
sub eax, 0x4b1232
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4b122e
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 2
push 0x4b1232
call esi
mov eax, 0x4b1232
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 2
push 0x4b1232
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x52679e
call ebx
push eax
call edi
mov eax, 0x10018dd0
sub eax, 0x5267a3
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x52679f
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x51f534
call ebx
push eax
call edi
mov eax, 0x10019150
sub eax, 0x51f539
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x51f535
call ebx
push eax
call edi
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xf
push eax
push 1
lea eax, [ebp - 1]
mov byte [ebp - 8], 0x87
push eax
push 0x4bd382
call ebx
push eax
call edi
lea eax, [ebp - 0xc]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x4bd383
call ebx
push eax
call edi
mov eax, 0x10019200
sub eax, 0x4bd388
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 0x10]
push eax
push 0x4bd384
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 8], 0xe9
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x5293f7
call ebx
push eax
call edi
mov eax, 0x10019190
sub eax, 0x5293fc
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x5293f8
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x90
push eax
push 0x5293fc
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x90
push eax
push 0x5293fd
call ebx
push eax
call edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret