Function at 0x100019c0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10018040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x2e
mov edx, 0xa63ff3
mov ecx, 0x10001980
call fcn.1000d950
push 6
mov edx, 0x5f6994
mov ecx, 0x10001970
call fcn.1000d950
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 8
push eax
push 0x40
push 1
push 0x5f6b89
call edi
lea eax, [ebp - 8]
mov byte [0x5f6b89], 8
push eax
push dword [ebp - 8]
push 1
push 0x5f6b89
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x5f6ba2
call edi
lea eax, [ebp - 8]
mov byte [0x5f6ba2], 0xa0
push eax
push dword [ebp - 8]
push 1
push 0x5f6ba2
call edi
mov dword [ebp - 0x10], 0x900c75ff
mov esi, 0x5f6ba4
mov word [ebp - 0xc], 0x9090
mov ebx, 7
mov byte [ebp - 0xa], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push esi
call edi
mov al, byte [ebp + esi - 0x5f6bb4]
mov byte [esi], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 1
push esi
call edi
inc esi
sub ebx, 1
jne 0x10001a65
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x496634
call edi
lea eax, [ebp - 8]
mov byte [0x496634], 0x47
push eax
push dword [ebp - 8]
push 1
push 0x496634
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x9f1c04
call edi
mov eax, 0x9f1c04
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x9f1c04
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x9f242f
call edi
lea eax, [ebp - 8]
mov byte [0x9f242f], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x9f242f
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x9f6edc
call edi
lea eax, [ebp - 8]
mov byte [0x9f6edc], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x9f6edc
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x9f74ed
call edi
lea eax, [ebp - 8]
mov byte [0x9f74ed], 0xf
push eax
push dword [ebp - 8]
push 1
push 0x9f74ed
call edi
push 7
mov edx, 0x9f753c
mov ecx, 0x10001590
call fcn.1000d950
add esp, 4
lea eax, [ebp - 8]
push eax
push 0x40
push 0x15
push 0xc08459
call edi
mov eax, 0xc08459
mov dword [eax], 0x20202020
mov dword [eax + 4], 0x20202020
mov dword [eax + 8], 0x20202020
mov dword [eax + 0xc], 0x20202020
mov dword [eax + 0x10], 0x20202020
mov byte [eax + 0x14], 0x20
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x15
push 0xc08459
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0xc08459
call edi
lea eax, [ebp - 8]
mov byte [0xc08459], 0x22
push eax
push dword [ebp - 8]
push 1
push 0xc08459
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0xc0845a
call edi
movq xmm0, qword [str.asInvoker]
mov ecx, 0xc0845a
movq qword [ecx], xmm0
mov al, byte [0x1001357c]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0xc08463
call edi
lea eax, [ebp - 8]
mov byte [0xc08463], 0x22
push eax
push dword [ebp - 8]
push 1
push 0xc08463
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x49c2ce
call edi
lea eax, [ebp - 8]
mov byte [0x49c2ce], 1
push eax
push dword [ebp - 8]
push 1
push 0x49c2ce
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x49cfe9
call edi
lea eax, [ebp - 8]
mov byte [0x49cfe9], 1
push eax
push dword [ebp - 8]
push 1
push 0x49cfe9
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x49d399
call edi
lea eax, [ebp - 8]
mov byte [0x49d399], 1
push eax
push dword [ebp - 8]
push 1
push 0x49d399
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x2e
push 0xafe084
call edi
push 0x2e
push ebx
push 0xafe084
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x2e
push 0xafe084
call edi
cmp dword [0x10019028], 0xf
mov ebx, 0x10019014
cmova ebx, dword [0x10019014]
mov esi, ebx
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x10001ce8
lea eax, [ebp - 8]
sub esi, ecx
push eax
push 0x40
push esi
push 0xafe084
call edi
push esi
push ebx
push 0xafe084
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push esi
push 0xafe084
call edi
mov esi, ebx
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x10001d22
lea eax, [ebp - 8]
sub esi, ecx
push eax
push 0x40
push esi
push 0xafe094
call edi
push esi
push ebx
push 0xafe094
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push esi
push 0xafe094
call edi
mov esi, ebx
lea ecx, [esi + 1]
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x10001d60
lea eax, [ebp - 8]
sub esi, ecx
push eax
push 0x40
push esi
push 0xafe0a4
call edi
push esi
push ebx
push 0xafe0a4
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push esi
push 0xafe0a4
call edi
cmp byte [0x10018e68], 0
je 0x10001dca
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x485c32
call edi
mov eax, 0x485c32
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 2
push 0x485c32
call edi
movsd xmm0, qword [0x100180d0]
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push 0xafe8a0
movsd qword [ebp - 0x10], xmm0
call edi
movsd xmm0, qword [ebp - 0x10]
lea eax, [ebp - 8]
push eax
movsd qword [0xafe8a0], xmm0
push dword [ebp - 8]
push 8
push 0xafe8a0
call edi
movsd xmm1, qword [0x100180d0]
xorps xmm0, xmm0
comisd xmm0, xmm1
jbe 0x10001e1e
subsd xmm1, qword [0x10014e30]
jmp 0x10001e26
addsd xmm1, qword [0x10014e30]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8c3305
cvttsd2si esi, xmm1
call edi
lea eax, [ebp - 8]
mov dword [0x8c3305], esi
push eax
push dword [ebp - 8]
push 4
push 0x8c3305
call edi
mov esi, dword [0x100180c8]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x780746
call edi
lea eax, [ebp - 8]
mov dword [0x780746], esi
push eax
push dword [ebp - 8]
push 4
push 0x780746
call edi
mov esi, dword [0x100180c8]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8c4287
call edi
lea eax, [ebp - 8]
mov dword [0x8c4287], esi
push eax
push dword [ebp - 8]
push 4
push 0x8c4287
call edi
mov esi, dword [0x100180c8]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x94d91f
call edi
lea eax, [ebp - 8]
mov dword [0x94d91f], esi
push eax
push dword [ebp - 8]
push 4
push 0x94d91f
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x40013e
call edi
lea eax, [ebp - 8]
mov byte [0x40013e], 0x2f
push eax
push dword [ebp - 8]
push 1
push 0x40013e
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10010b59
mov esp, ebp
pop ebp
ret