Function at 0x100175d0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
push 0x10017080
push 0x4d76fb
push 0xe8
call fcn.10063f10
push 0x10017080
push 0x4d79c3
push 0xe8
call fcn.10063f10
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
add esp, 0x18
push eax
push 0x40
push 4
push 0x4d75f0
call esi
lea eax, [ebp - 4]
mov dword [0x4d75f0], 0x63
push eax
push dword [ebp - 4]
push 4
push 0x4d75f0
call esi
push 0x10017140
push 0x5edda9
push 0xe8
call fcn.10063f10
push 0x10016cb0
push 0x4032ab
push 0xe8
mov dword [0x101f5264], 1
call fcn.10063f10
push 0x10016eb0
push 0x403320
push 0xe9
call fcn.10063f10
push 0x100164c0
push 0x40464e
push 0xe8
call fcn.10063f10
push 0x10016e30
push 0x4d5ec3
push 0xe8
call fcn.10063f10
push 0x10016cb0
push 0x4d712a
push 0xe8
call fcn.10063f10
add esp, 0x48
push 0x10014c60
push 0x62df68
push 0xe8
call fcn.10063f10
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d6c2c
call esi
lea eax, [ebp - 4]
mov dword [0x4d6c2c], 0xffffffff
push eax
push dword [ebp - 4]
push 4
push 0x4d6c2c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x483947
call esi
lea eax, [ebp - 4]
mov dword [0x483947], 0xe5ebf8
push eax
push dword [ebp - 4]
push 4
push 0x483947
call esi
push 0x10016e40
push 0x4d7568
push 0xe8
call fcn.10063f10
push 0x10016e40
push 0x4d7534
push 0xe8
call fcn.10063f10
add esp, 0x18
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d7179
call esi
lea eax, [ebp - 4]
mov dword [0x4d7179], 0x1e0
push eax
push dword [ebp - 4]
push 4
push 0x4d7179
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d7183
call esi
lea eax, [ebp - 4]
mov byte [0x4d7183], 0
push eax
push dword [ebp - 4]
push 1
push 0x4d7183
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41dcc
call esi
lea eax, [ebp - 4]
mov dword [0xd41dcc], 0x460bd800
push eax
push dword [ebp - 4]
push 4
push 0xd41dcc
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41dc8
call esi
lea eax, [ebp - 4]
mov dword [0xd41dc8], 0x4691f000
push eax
push dword [ebp - 4]
push 4
push 0xd41dc8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41dc4
call esi
lea eax, [ebp - 4]
mov dword [0xd41dc4], 0x460c2800
push eax
push dword [ebp - 4]
push 4
push 0xd41dc4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41dc0
call esi
mov dword [0xd41dc0], 0x4692e000
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0xd41dc0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41dbc
call esi
lea eax, [ebp - 4]
mov dword [0xd41dbc], 0x460ca000
push eax
push dword [ebp - 4]
push 4
push 0xd41dbc
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41db8
call esi
lea eax, [ebp - 4]
mov dword [0xd41db8], 0x4693bc00
push eax
push dword [ebp - 4]
push 4
push 0xd41db8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41db4
call esi
lea eax, [ebp - 4]
mov dword [0xd41db4], 0x460c2800
push eax
push dword [ebp - 4]
push 4
push 0xd41db4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41db0
call esi
lea eax, [ebp - 4]
mov dword [0xd41db0], 0x46949800
push eax
push dword [ebp - 4]
push 4
push 0xd41db0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41dac
call esi
lea eax, [ebp - 4]
mov dword [0xd41dac], 0x460bd800
push eax
push dword [ebp - 4]
push 4
push 0xd41dac
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41da8
call esi
lea eax, [ebp - 4]
mov dword [0xd41da8], 0x46958800
push eax
push dword [ebp - 4]
push 4
push 0xd41da8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 8
push 0xe5ebb8
call esi
movsd xmm0, qword [0x1008e430]
lea eax, [ebp - 4]
push eax
movsd qword [0xe5ebb8], xmm0
push dword [ebp - 4]
push 8
push 0xe5ebb8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x401e0b
call esi
lea eax, [ebp - 4]
mov dword [0x401e0b], 0xe5ebb8
push eax
push dword [ebp - 4]
push 4
push 0x401e0b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x401d30
call esi
lea eax, [ebp - 4]
mov dword [0x401d30], 0x6d4
push eax
push dword [ebp - 4]
push 4
push 0x401d30
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 0x20d
push 0x405380
call esi
push 0x20d
push 0x90
push 0x405380
call fcn.10066f50
add esp, 0xc
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x20d
push 0x405380
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x4d74ce
call esi
mov eax, 0x4d74ce
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 5
push 0x4d74ce
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x4d7568
call esi
mov eax, 0x4d7568
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 5
push 0x4d7568
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x4d7465
call esi
mov eax, 0x4d7465
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 5
push 0x4d7465
call esi
pop esi
mov esp, ebp
pop ebp
ret