Function at 0x10002640
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [ebp - 4]
push esi
push edi
push eax
push 0x40
push 1
push 0x7f2f71
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push eax
call edi
push 0
push 1
push 0x1004b120
push 0x7f2f71
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7f3c34
call ebx
push eax
call edi
push 0
push 1
push 0x1004b120
push 0x7f3c34
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0xaa2d80
call ebx
push eax
call edi
push 0
push 1
push 0x1004b124
push 0xaa2d80
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x87ae3f
call ebx
push eax
call edi
push 0
push 2
push 0x1004b0e8
push 0x87ae3f
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x8263d6
call ebx
push eax
call edi
push 0
push 2
push 0x1004b128
push 0x8263d6
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x2e397a8
call ebx
push eax
call edi
push 0
push 4
push 0x1004b12c
push 0x2e397a8
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x971f8a
call ebx
push eax
call edi
push 0
push 2
push 0x1004b108
push 0x971f8a
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x9781ad
call ebx
push eax
call edi
push 0
push 2
push 0x1004b108
push 0x9781ad
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x8fc607
call ebx
push eax
call edi
push 0
push 2
push 0x1004b0e0
push 0x8fc607
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x8fc253
call ebx
push eax
call edi
push 0
push 2
push 0x1004b0e0
push 0x8fc253
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x971d4a
call ebx
push eax
call edi
push 0
push 2
push 0x1004b108
push 0x971d4a
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x999ea3
call ebx
push eax
call edi
push 0
push 2
push 0x1004b108
push 0x999ea3
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x969b71
call ebx
push eax
call edi
push 0
push 2
push 0x1004b0e0
push 0x969b71
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x98a7d5
call ebx
push eax
call edi
push 0
push 2
push 0x1004b0e8
push 0x98a7d5
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x2d39fd8
call ebx
push eax
call edi
push 0
push 1
push 0x1004b134
push 0x2d39fd8
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7efa69
call ebx
push eax
call edi
push 0
push 1
push 0x1004b120
push 0x7efa69
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7efa92
call ebx
push eax
call edi
push 0
push 1
push 0x1004b120
push 0x7efa92
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7efabf
call ebx
push eax
call edi
push 0
push 1
push 0x1004b120
push 0x7efabf
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x96df62
call ebx
push eax
call edi
push 0
push 1
push 0x1004b120
push 0x96df62
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x96df66
call ebx
push eax
call edi
push 0
push 6
push 0x1004b138
push 0x96df66
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x978c4b
call ebx
push eax
call edi
push 0
push 3
push 0x1004b140
push 0x978c4b
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x977594
call ebx
push eax
call edi
push 0
push 1
push 0x1004b144
push 0x977594
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x9775f9
call ebx
push eax
call edi
push 0
push 1
push 0x1004b144
push 0x9775f9
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x977561
call ebx
push eax
call edi
push 0
push 1
push 0x1004b148
push 0x977561
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x9775c6
call ebx
push eax
call edi
push 0
push 1
push 0x1004b148
push 0x9775c6
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9773a2
call ebx
push eax
call edi
push 0
push 3
push 0x1004b14c
push 0x9773a2
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9773c3
call ebx
push eax
call edi
push 0
push 3
push 0x1004b150
push 0x9773c3
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x978802
call ebx
push eax
call edi
push 0
push 3
push 0x1004b154
push 0x978802
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9787ce
call ebx
push eax
call edi
push 0
push 3
push 0x1004b158
push 0x9787ce
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x978831
call ebx
push eax
call edi
push 0
push 3
push 0x1004b15c
push 0x978831
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x978865
call ebx
push eax
call edi
push 0
push 3
push 0x1004b15c
push 0x978865
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x973f15
call ebx
push eax
call edi
push 0
push 2
push 0x1004b0e8
push 0x973f15
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x973ce5
call ebx
push eax
call edi
push 0
push 2
push 0x1004b108
push 0x973ce5
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x972752
call ebx
push eax
call edi
push 0
push 1
push 0x1004b160
push 0x972752
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x97156a
call ebx
push eax
call edi
push 0
push 3
push 0x1004b164
push 0x97156a
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x971565
call ebx
push eax
call edi
push 0
push 3
push 0x1004b168
push 0x971565
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x9715bf
call ebx
push eax
call edi
push 0
push 1
push 0x1004b16c
push 0x9715bf
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x97169a
call ebx
push eax
call edi
push 0
push 3
push 0x1004b170
push 0x97169a
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9761af
call ebx
push eax
call edi
push 0
push 3
push 0x1004b174
push 0x9761af
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x976204
call ebx
push eax
call edi
push 0
push 3
push 0x1004b174
push 0x976204
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x971049
call ebx
push eax
call edi
push 0
push 3
push 0x1004b174
push 0x971049
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9710a7
call ebx
push eax
call edi
push 0
push 3
push 0x1004b174
push 0x9710a7
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x97100b
call ebx
push eax
call edi
push 0
push 3
push 0x1004b174
push 0x97100b
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x97607f
call ebx
push eax
call edi
push 0
push 1
push 0x1004b178
push 0x97607f
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9713a1
call ebx
push eax
call edi
push 0
push 3
push 0x1004b17c
push 0x9713a1
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x97762f
call ebx
push eax
call edi
push 0
push 3
push 0x1004b17c
push 0x97762f
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x97137b
call ebx
push eax
call edi
push 0
push 3
push 0x1004b180
push 0x97137b
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x977650
call ebx
push eax
call edi
push 0
push 3
push 0x1004b180
push 0x977650
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x97136f
call ebx
push eax
call edi
push 0
push 3
push 0x1004b184
push 0x97136f
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x977671
call ebx
push eax
call edi
push 0
push 3
push 0x1004b184
push 0x977671
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x97768d
call ebx
push eax
call edi
push 0
push 3
push 0x1004b188
push 0x97768d
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9776ae
call ebx
push eax
call edi
push 0
push 3
push 0x1004b188
push 0x9776ae
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9776cf
call ebx
push eax
call edi
push 0
push 3
push 0x1004b188
push 0x9776cf
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9785ac
call ebx
push eax
call edi
push 0
push 3
push 0x1004b174
push 0x9785ac
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9785f7
call ebx
push eax
call edi
push 0
push 3
push 0x1004b174
push 0x9785f7
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x9786f4
call ebx
push eax
call edi
push 0
push 1
push 0x1004b16c
push 0x9786f4
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x978568
call ebx
push eax
call edi
push 0
push 3
push 0x1004b18c
push 0x978568
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x97852a
call ebx
push eax
call edi
push 0
push 3
push 0x1004b190
push 0x97852a
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x97855e
call ebx
push eax
call edi
push 0
push 4
push 0x1004b194
push 0x97855e
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x972374
call ebx
push eax
call edi
push 0
push 3
push 0x1004b19c
push 0x972374
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x97243b
call ebx
push eax
call edi
push 0
push 3
push 0x1004b1a0
push 0x97243b
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x972503
call ebx
push eax
call edi
push 0
push 3
push 0x1004b1a0
push 0x972503
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x972433
call ebx
push eax
call edi
push 0
push 3
push 0x1004b1a4
push 0x972433
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9724fb
call ebx
push eax
call edi
push 0
push 3
push 0x1004b1a4
push 0x9724fb
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x971320
call ebx
push eax
call edi
push 0
push 3
push 0x1004b17c
push 0x971320
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x971302
call ebx
push eax
call edi
push 0
push 3
push 0x1004b180
push 0x971302
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9712e4
call ebx
push eax
call edi
push 0
push 3
push 0x1004b184
push 0x9712e4
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x970f46
call ebx
push eax
call edi
push 0
push 3
push 0x1004b1a8
push 0x970f46
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x970f4b
call ebx
push eax
call edi
push 0
push 3
push 0x1004b1ac
push 0x970f4b
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9718e4
call ebx
push eax
call edi
push 0
push 3
push 0x1004b1ac
push 0x9718e4
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9718d8
call ebx
push eax
call edi
push 0
push 3
push 0x1004b1ac
push 0x9718d8
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9718cc
call ebx
push eax
call edi
push 0
push 3
push 0x1004b1ac
push 0x9718cc
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9725ac
call ebx
push eax
call edi
push 0
push 3
push 0x1004b1b0
push 0x9725ac
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x9725b1
call ebx
push eax
call edi
push 0
push 3
push 0x1004b1b4
push 0x9725b1
call ebx
push eax
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 3
push 0x972632
call ebx
push eax
call edi
push 0
push 3
push 0x1004b1b8
push 0x972632
call ebx
push eax
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret