Function at 0x10017510
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [ebp - 0xc]
push esi
push edi
push eax
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xe8
push eax
push 0x538617
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call edi
mov esi, 0x10020760
lea eax, [esi - 0x53861c]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 0x10]
push eax
push 0x538618
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe8
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x53bd3d
call ebx
push eax
call edi
lea eax, [esi - 0x53bd42]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x53bd3e
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe8
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x53864b
call ebx
push eax
call edi
lea eax, [esi - 0x538650]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x53864c
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe8
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x4b4082
call ebx
push eax
call edi
lea eax, [esi - 0x4b4087]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4b4083
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe8
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x4b40be
call ebx
push eax
call edi
lea eax, [esi - 0x4b40c3]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4b40bf
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe8
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x4b5476
call ebx
push eax
call edi
lea eax, [esi - 0x4b547b]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4b5477
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe8
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x4b54e5
call ebx
push eax
call edi
lea eax, [esi - 0x4b54ea]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4b54e6
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe8
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x53b285
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
sub esi, 0x53b28a
push eax
push 4
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], esi
push eax
push 0x53b286
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x4201cd
call ebx
push eax
call edi
mov eax, 0x10020730
sub eax, 0x4201d2
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4201ce
call ebx
push eax
call edi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x4201d2
call esi
mov eax, 0x4201d2
mov byte [eax], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 1
push 0x4201d2
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x4e92d9
call ebx
push eax
call edi
mov eax, 0x10020cc0
sub eax, 0x4e92de
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4e92da
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x26
push eax
push 0x41f89a
call ebx
push eax
call edi
mov byte [ebp - 4], 0x26
push 0
push 1
lea eax, [ebp - 4]
push eax
push 0x41f8a2
call ebx
push eax
call edi
lea eax, [ebp - 0xc]
mov byte [ebp - 4], 0xf
push eax
push 1
lea eax, [ebp - 4]
mov byte [ebp - 8], 0x87
push eax
push 0x41f8f0
call ebx
push eax
call edi
lea eax, [ebp - 0xc]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x41f8f1
call ebx
push eax
call edi
mov eax, 0x10020e20
sub eax, 0x41f8f6
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 0x10]
push eax
push 0x41f8f2
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 8], 0xe9
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x4e36cb
call ebx
push eax
call edi
mov eax, 0x10020c00
sub eax, 0x4e36d0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4e36cc
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 8], 0xe9
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x4ec32a
call ebx
push eax
call edi
mov eax, 0x10020c40
sub eax, 0x4ec32f
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4ec32b
call ebx
push eax
call edi
lea eax, [ebp - 0xc]
mov byte [ebp - 8], 0xf
push eax
push 1
lea eax, [ebp - 8]
mov byte [ebp - 4], 0x8e
push eax
push 0x4e9017
call ebx
push eax
call edi
lea eax, [ebp - 0xc]
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x4e9018
call ebx
push eax
call edi
mov eax, 0x10020750
sub eax, 0x4e901d
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 0x10]
push eax
push 0x4e9019
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 8], 0xe8
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x4e959d
call ebx
push eax
call edi
mov eax, 0x10020d30
sub eax, 0x4e95a2
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4e959e
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 8], 0xe9
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x4e9392
call ebx
push eax
call edi
mov eax, 0x100208f0
sub eax, 0x4e9397
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4e9393
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x4e9397
call esi
mov eax, 0x4e9397
mov byte [eax], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 1
push 0x4e9397
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 8], 0xe8
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x4e94e8
call ebx
push eax
call edi
mov eax, 0x10021000
sub eax, 0x4e94ed
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4e94e9
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 8], 0xe9
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x4e91fd
call ebx
push eax
call edi
mov eax, 0x10020f90
sub eax, 0x4e9202
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4e91fe
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 8], 0xe9
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x4ed645
call ebx
push eax
call edi
mov eax, 0x100210d0
sub eax, 0x4ed64a
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4ed646
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x4ed64a
call esi
mov eax, 0x4ed64a
mov byte [eax], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 1
push 0x4ed64a
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 8], 0xe9
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x450ce9
call ebx
push eax
call edi
mov eax, 0x10020710
sub eax, 0x450cee
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x450cea
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x450cee
call esi
mov eax, 0x450cee
mov byte [eax], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 1
push 0x450cee
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0xeb
push eax
push 0x450e64
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x2c
push eax
push 0x450e65
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x450e66
call esi
mov eax, 0x450e66
mov dword [eax], 0x90909090
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 4
push 0x450e66
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret