Function at 0x10017010
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [0x10059898]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x44]
push esi
push edi
push eax
push 0x40
push 5
push 0x466ed2
call ebx
mov byte [0x466ed2], 0xe9
mov eax, 0x100173d0
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffb99129
mov dword [0x466ed3], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x466ed2
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 5
push 0x466eec
call ebx
mov byte [0x466eec], 0xe9
mov eax, 0x100173e0
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffb9910f
mov dword [0x466eed], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x466eec
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 5
push 0x466ef9
call ebx
mov byte [0x466ef9], 0xe9
mov eax, 0x100173f0
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffb99102
mov dword [0x466efa], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x466ef9
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 5
push 0x5fd2b6
call ebx
mov byte [0x5fd2b6], 0xe9
mov eax, 0x10017400
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffa02d45
mov dword [0x5fd2b7], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x5fd2b6
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 5
push 0x5daea3
call ebx
mov byte [0x5daea3], 0xe9
mov eax, 0x10017460
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffa25158
mov dword [0x5daea4], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x5daea3
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 1
push 0x5daea8
call ebx
mov eax, 0x5daea8
mov byte [eax], 0x90
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 1
push 0x5daea8
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 5
push 0x5a0530
call ebx
mov byte [0x5a0530], 0xe9
mov eax, 0x10017490
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffa5facb
mov dword [0x5a0531], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x5a0530
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 2
push 0x5a0535
call ebx
mov eax, 0x5a0535
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 2
push 0x5a0535
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [ebp - 0x3c]
push 0
push 0x24
push eax
push 0x5da821
mov dword [ebp - 0x3c], 0xa6f981
mov dword [ebp - 0x38], 0x19720000
mov dword [ebp - 0x34], 0x17c8e8d
mov dword [ebp - 0x30], 0x41890000
mov dword [ebp - 0x2c], 0x38c031fc
mov dword [ebp - 0x28], 0x1940f01
mov dword [ebp - 0x24], 0x41380774
mov dword [ebp - 0x20], 0x41940f01
mov dword [ebp - 0x1c], 0x204e8b01
call edi
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call esi
lea eax, [ebp - 0x44]
push eax
push 0x40
push 5
push 0x5daf60
call ebx
mov byte [0x5daf60], 0xe9
mov eax, 0x100174b0
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffa2509b
mov dword [0x5daf61], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x5daf60
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 5
push 0x466faf
call ebx
mov byte [0x466faf], 0xe9
mov eax, 0x100174f0
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffb9904c
mov dword [0x466fb0], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 5
push 0x466faf
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 1
push 0x466fb4
call ebx
mov eax, 0x466fb4
mov byte [eax], 0x90
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x44]
push 1
push 0x466fb4
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 1
push 0x5daf7e
call ebx
lea eax, [ebp - 0x40]
mov byte [0x5daf7e], 6
push eax
push dword [ebp - 0x44]
push 1
push 0x5daf7e
call ebx
lea eax, [ebp - 0x44]
push eax
push 0x40
push 1
push 0x5daeaa
call ebx
lea eax, [ebp - 0x40]
mov byte [0x5daeaa], 3
push eax
push dword [ebp - 0x44]
push 1
push 0x5daeaa
call ebx
push 0
push 8
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x17c868a
push eax
push 0x5dabb5
mov dword [ebp - 8], 0xc0840000
call edi
push eax
call esi
push 0
push 8
lea eax, [ebp - 0xc]
push eax
push 0x5dac13
call edi
push eax
call esi
push 0
push 8
lea eax, [ebp - 0xc]
push eax
push 0x5db1b0
call edi
push eax
call esi
push 0
push 8
lea eax, [ebp - 0xc]
push eax
push 0x5db1ea
call edi
push eax
call esi
push 0
push 0xa
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0x17c878a
push eax
push 0x5db8b6
mov dword [ebp - 0x14], 0x6a0000
mov word [ebp - 0x10], 0xc084
call edi
push eax
call esi
push 0
push 0xa
lea eax, [ebp - 0x18]
push eax
push 0x5db8f9
call edi
push eax
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1002f2fb
mov esp, ebp
pop ebp
ret