Function at 0x10017e30
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov eax, dword [0x10059898]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [ebp + 0xc], 0
mov eax, dword [ebp + 0x18]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x4c], eax
je 0x10017f79
lea eax, [ebp - 0xc]
push eax
push 0x40
push 2
push 0x41c1de
call edi
mov eax, 0x41c1de
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 2
push 0x41c1de
call edi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push 0x464582
call edi
lea eax, [ebp - 8]
mov byte [0x464582], 3
push eax
push dword [ebp - 0xc]
push 1
push 0x464582
call edi
push 0
push 1
lea eax, [ebp - 0x48]
mov byte [ebp - 0x48], 0x66
push eax
push 0x42093a
call esi
push eax
call ebx
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push 0x42093b
call edi
mov eax, 0x42093b
mov byte [eax], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 1
push 0x42093b
call edi
push 0
push 1
lea eax, [ebp - 0x48]
mov byte [ebp - 0x48], 0x66
push eax
push 0x5f23c8
call esi
push eax
call ebx
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push 0x5f23c9
call edi
mov eax, 0x5f23c9
mov byte [eax], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 1
push 0x5f23c9
call edi
push 0
push 1
lea eax, [ebp - 0x48]
mov byte [ebp - 0x48], 0x66
push eax
push 0x4915fd
call esi
push eax
call ebx
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push 0x4915fe
call edi
mov eax, 0x4915fe
mov byte [eax], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 1
push 0x4915fe
call edi
push str.windmode.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call fcn.10017510
cmp byte [ebp + 0x10], 0
mov dword [ebp - 0x1c], 0xf423c68
mov byte [ebp - 0x18], 0
je 0x10018123
lea eax, [ebp - 0xc]
push eax
push 0x40
push 7
push 0x4ea88e
call edi
mov eax, 0x4ea88e
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 7
push 0x4ea88e
call edi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x4ea88e
call edi
mov byte [0x4ea88e], 0xe9
mov eax, 0x1001e910
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
add eax, 0xffb1576d
mov dword [0x4ea88f], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x4ea88e
call edi
push 0
push 5
lea eax, [ebp - 0x1c]
push eax
push 0x4df85e
call esi
push eax
call ebx
push dword [ebp + 0x14]
call fcn.1001c710
mov eax, dword [0x1004c9f8]
mov edx, 0xf
mov ecx, dword [0x1004c9f4]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x44]
push 0x1004c9f0
mov dword [ebp - 0x44], 0
push eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x44], ecx
mov byte [ebp - 0x3c], 0
call fcn.10038c61
add esp, 0xc
test eax, eax
je 0x10018069
push eax
call fcn.10038d35
add esp, 4
mov byte [ebp - 0x48], 1
jmp 0x1001806d
mov byte [ebp - 0x48], 0
mov ecx, dword [ebp - 0x30]
cmp ecx, 0x10
jb 0x100180a1
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10018097
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018639
push ecx
push edx
call fcn.1002f2ed
add esp, 8
cmp byte [ebp - 0x48], 0
je 0x10018123
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x5c69d1
call edi
mov byte [0x5c69d1], 0xe9
mov eax, 0x1001b040
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
add eax, 0xffa3962a
mov dword [0x5c69d2], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x5c69d1
call edi
push 0
push 5
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0xf423f68
push eax
push 0x455b3a
mov byte [ebp - 0x10], 0
call esi
push eax
call ebx
push 0
push 5
lea eax, [ebp - 0x14]
push eax
push 0x4df52b
call esi
push eax
call ebx
push 0
push 5
lea eax, [ebp - 0x14]
push eax
push 0x51ca23
call esi
push eax
call ebx
push dword [ebp + 8]
call fcn.10018640
add esp, 4
lea eax, [ebp - 0xc]
push eax
push 0x40
push 8
push 0x5101f5
call edi
mov eax, 0x5101f5
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 8
push 0x5101f5
call edi
push 0
push 1
lea eax, [ebp - 0x48]
mov byte [ebp - 0x48], 0xeb
push eax
push 0x4ffa68
call esi
push eax
call ebx
push 0
push 1
lea eax, [ebp - 0x48]
mov byte [ebp - 0x48], 0xeb
push eax
push 0x4ffa68
call esi
push eax
call ebx
push 0
push 1
lea eax, [ebp - 0x48]
mov byte [ebp - 0x48], 0xeb
push eax
push 0x503e24
call esi
push eax
call ebx
call fcn.10017010
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x4f0083
call edi
mov byte [0x4f0083], 0xe9
mov eax, 0x10017ae0
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
add eax, 0xffb0ff78
mov dword [0x4f0084], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x4f0083
call edi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x54a8bb
call edi
mov byte [0x54a8bb], 0xe9
mov eax, 0x10017b30
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
add eax, 0xffab5740
mov dword [0x54a8bc], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x54a8bb
call edi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x4e6b25
call edi
mov byte [0x4e6b25], 0xe9
mov eax, 0x10017b60
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
add eax, 0xffb194d6
mov dword [0x4e6b26], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x4e6b25
call edi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x405bfb
call edi
mov byte [0x405bfb], 0xe9
mov eax, 0x10017cb0
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
add eax, 0xffbfa400
mov dword [0x405bfc], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x405bfb
call edi
push 0
push 1
lea eax, [ebp - 0x48]
mov byte [ebp - 0x48], 0xfa
push eax
push 0x50a212
call esi
push eax
call ebx
lea eax, [ebp - 0x58]
push eax
push 0x40
push 5
push 0x4edb26
call edi
mov byte [0x4edb26], 0xe9
mov eax, 0x1001b2d0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
add eax, 0xffb124d5
mov dword [0x4edb27], eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x58]
push 5
push 0x4edb26
call edi
push 0
push 6
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 0x5489f28b
push eax
push 0x4e635e
mov word [ebp - 0x20], 0x1424
call esi
push eax
call ebx
push 0
push 6
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x5489f631
push eax
push 0x4e636d
mov word [ebp - 0x28], 0x1424
call esi
push eax
call ebx
mov dword [ebp - 0x50], 0xe98bf98b
push 0
push 4
lea eax, [ebp - 0x50]
push eax
push 0x4edb79
call esi
push eax
call ebx
push 0
push 7
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x1bdff31
push eax
push 0x4edb82
mov word [ebp - 8], 0
mov byte [ebp - 6], 0
call esi
push eax
call ebx
call fcn.1001fc40
push 0
call fcn.1001c480
add esp, 4
lea eax, [ebp - 0x58]
push eax
push 0x40
push 5
push 0x5c69f7
call edi
mov byte [0x5c69f7], 0xe9
mov eax, 0x1001ecf0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
add eax, 0xffa39604
mov dword [0x5c69f8], eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x58]
push 5
push 0x5c69f7
call edi
lea eax, [ebp - 0x58]
push eax
push 0x40
push 5
push 0x5c892b
call edi
mov byte [0x5c892b], 0xe9
mov eax, 0x1001ecc0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
add eax, 0xffa376d0
mov dword [0x5c892c], eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x58]
push 5
push 0x5c892b
call edi
push dword [ebp - 0x4c]
call fcn.1001f320
add esp, 4
lea eax, [ebp - 0x58]
push eax
push 0x40
push 5
push 0x508c64
call edi
mov byte [0x508c64], 0xe9
mov eax, 0x1001b5d0
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
add eax, 0xffaf7397
mov dword [0x508c65], eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x58]
push 5
push 0x508c64
call edi
lea eax, [ebp - 0x58]
push eax
push 0x40
push 5
push 0x50281d
call edi
mov byte [0x50281d], 0xe9
mov eax, 0x1001b5a0
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
add eax, 0xffafd7de
mov dword [0x50281e], eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x58]
push 5
push 0x50281d
call edi
lea eax, [ebp - 0x58]
push eax
push 0x40
push 5
push 0x4ecd35
call edi
mov byte [0x4ecd35], 0xe9
mov eax, 0x1001b630
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
add eax, 0xffb132c6
mov dword [0x4ecd36], eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x58]
push 5
push 0x4ecd35
call edi
lea eax, [ebp - 0x4c]
mov byte [ebp - 0x48], 0xe8
push eax
push 1
lea eax, [ebp - 0x48]
push eax
push 0x4e5d02
call esi
push eax
call ebx
mov esi, 0x1001b070
lea eax, [esi - 0x4e5d07]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x4c]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
push 0x4e5d03
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
lea eax, [ebp - 0x4c]
mov byte [ebp - 0x48], 0xe8
push eax
push 1
lea eax, [ebp - 0x48]
push eax
push 0x4e6d47
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
lea eax, [esi - 0x4e6d4c]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x4c]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
push 0x4e6d48
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
lea eax, [ebp - 0x4c]
mov byte [ebp - 0x48], 0xe8
push eax
push 1
lea eax, [ebp - 0x48]
push eax
push 0x4e72a6
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
lea eax, [ebp - 0x4c]
sub esi, 0x4e72ab
push eax
push 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], esi
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
push 0x4e72a7
call esi
push eax
call ebx
lea eax, [ebp - 0x4c]
mov byte [ebp - 0x48], 0xe9
push eax
push 1
lea eax, [ebp - 0x48]
push eax
push 0x4e5ce9
call esi
push eax
call ebx
mov eax, 0x1001fb50
sub eax, 0x4e5cee
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x4c]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
push 0x4e5cea
call esi
push eax
call ebx
lea eax, [ebp - 0x58]
push eax
push 0x40
push 0xb
push 0x5dd81c
call edi
mov eax, 0x5dd81c
mov ecx, 0x90909090
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov word [eax + 8], cx
mov byte [eax + 0xa], cl
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x58]
push 0xb
push 0x5dd81c
call edi
lea eax, [ebp - 0x58]
push eax
push 0x40
push 5
push 0x5dd873
call edi
mov byte [0x5dd873], 0xe9
mov eax, 0x100210f0
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
add eax, 0xffa22788
mov dword [0x5dd874], eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x58]
push 5
push 0x5dd873
call edi
lea eax, [ebp - 0x58]
push eax
push 0x40
push 1
push 0x5dd878
call edi
mov eax, 0x5dd878
mov byte [eax], 0x90
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x58]
push 1
push 0x5dd878
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1002f2fb
mov esp, ebp
pop ebp
ret
call fcn.10032cfe
int3