Function at 0x10001750
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x10010040]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esi, 0x364bf3
push eax
push 0x40
push 4
push esi
mov dword [ebp - 8], 0
call edi
push 0
push dword [ebp - 8]
mov dword [esi], 0x2a9b49
push 4
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x5a3b1c
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 1
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x3c639c
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x3d
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x3c63a1
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x76
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x3cb872
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x74
push 1
push esi
call edi
mov esi, dword [0x10010718]
add esi, 0x34dda2
mov dword [ebp - 8], 0
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push esi
call edi
mov eax, dword [0x1000d358]
push 0
push dword [ebp - 8]
mov dword [esi], eax
movzx eax, word [0x1000d35c]
push 6
push esi
mov word [esi + 4], ax
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 6
add esi, 0x34ddaa
mov dword [ebp - 8], 0
push esi
call edi
mov eax, dword [0x1000d360]
push 0
push dword [ebp - 8]
mov dword [esi], eax
movzx eax, word [0x1000d364]
push 6
push esi
mov word [esi + 4], ax
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 2
add esi, 0x35fa4a
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov eax, 0x8eb
push 2
push esi
mov word [esi], ax
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x2851b2
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x75
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 2
add esi, 0x282a5c
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov eax, 0xccc3
push 2
push esi
mov word [esi], ax
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
add esi, 0x399a98
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x74
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 2
add esi, 0x3a159b
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov eax, 0xca23
push 2
push esi
mov word [esi], ax
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x361176
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x75
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x36143c
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 1
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x43ee96
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x85
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
add esi, 0x43ee99
mov dword [ebp - 8], 0
push 0x40
push 1
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x84
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x43eea9
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x85
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x43eeac
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x84
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x38e9f1
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 4
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 2
add esi, 0x4b7d3
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov eax, 0x5b74
push 2
push esi
mov word [esi], ax
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
add esi, 0x3a14db
mov dword [ebp - 8], 0
push 1
push esi
call edi
mov byte [esi], 0x75
push 0
push dword [ebp - 8]
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 6
add esi, 0x2026dc
mov dword [ebp - 8], 0
push esi
call edi
mov eax, dword [0x1000d368]
push 0
push dword [ebp - 8]
mov dword [esi], eax
movzx eax, word [0x1000d36c]
push 6
push esi
mov word [esi + 4], ax
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0xc838d
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x84
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add esi, 0x28e1de
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 0x75
push 1
push esi
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
push 2
add esi, 0x34f2a8
mov dword [ebp - 8], 0
push esi
call edi
push 0
push dword [ebp - 8]
mov eax, 0x874
push 2
push esi
mov word [esi], ax
call edi
mov esi, dword [0x10010718]
lea eax, [ebp - 8]
push eax
push 0x40
add esi, 0x34f2e9
mov dword [ebp - 8], 0
push 1
push esi
call edi
push 0
push dword [ebp - 8]
mov byte [esi], 8
push 1
push esi
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1000b66a
mov esp, ebp
pop ebp
ret