Function at 0x10001680
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 8
cmp dword [0x6b8d48], 0x1e
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
jne 0x100017ec
mov eax, dword [0x101d9834]
fld dword [eax]
mov edi, dword [0x101d9838]
fsubr qword [0x10014bf8]
lea ecx, [esp + 8]
push ecx
push 0x40
push 4
fstp dword [esp + 0x18]
push edi
call esi
fld dword [esp + 0xc]
mov eax, dword [esp + 8]
fstp dword [edi]
lea edx, [esp + 8]
push edx
push eax
push 4
push edi
call esi
mov ecx, dword [0x101d9824]
fld dword [ecx]
mov edi, dword [0x101d983c]
fsub qword [0x10014bf0]
lea edx, [esp + 8]
push edx
push 0x40
fstp dword [esp + 0x14]
push 4
fld dword [esp + 0x18]
push edi
fabs
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp + 0x1c]
call esi
fld dword [esp + 0xc]
mov ecx, dword [esp + 8]
fmul qword [0x10014b30]
lea eax, [esp + 8]
push eax
push ecx
fadd qword [0x10014be8]
push 4
push edi
fadd qword [0x10014be0]
fstp dword [edi]
call esi
mov edx, dword [0x101d9824]
fld dword [edx]
mov edi, dword [0x101d9840]
fsub qword [0x10014bf0]
lea eax, [esp + 8]
push eax
push 0x40
fstp dword [esp + 0x14]
push 4
fld dword [esp + 0x18]
push edi
fabs
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp + 0x1c]
call esi
fld dword [esp + 0xc]
mov edx, dword [esp + 8]
fmul qword [0x10014b30]
lea ecx, [esp + 8]
push ecx
push edx
fadd qword [0x10014bd8]
push 4
push edi
fadd qword [0x10014be0]
fstp dword [edi]
call esi
mov eax, dword [0x101d9824]
fld dword [eax]
fsub qword [0x10014bf0]
fstp dword [esp + 0xc]
fld dword [esp + 0xc]
mov edi, dword [0x101d9844]
fabs
lea ecx, [esp + 8]
fstp dword [esp + 0xc]
fld dword [esp + 0xc]
push ecx
push 0x40
fstp dword [esp + 0x14]
push 4
push edi
call esi
fld dword [esp + 0xc]
fmul qword [0x10014b30]
mov eax, dword [esp + 8]
lea edx, [esp + 8]
push edx
fadd qword [0x10014bd0]
push eax
push 4
push edi
fadd qword [0x10014bc8]
fstp dword [edi]
call esi
mov ecx, dword [0x101d9834]
fld dword [ecx]
mov edi, dword [0x101d9828]
fsubr qword [0x10014bf8]
lea edx, [esp + 8]
push edx
push 0x40
push 4
fstp dword [esp + 0x18]
push edi
call esi
fld dword [esp + 0xc]
mov ecx, dword [esp + 8]
fstp dword [edi]
lea eax, [esp + 8]
push eax
push ecx
push 4
push edi
call esi
mov edx, dword [0x101d9824]
fld dword [edx]
mov edi, dword [0x101d982c]
fsub qword [0x10014bf0]
lea eax, [esp + 8]
push eax
push 0x40
fstp dword [esp + 0x14]
push 4
fld dword [esp + 0x18]
push edi
fabs
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp + 0x1c]
call esi
fld dword [esp + 0xc]
mov edx, dword [esp + 8]
fmul qword [0x10014b30]
lea ecx, [esp + 8]
push ecx
push edx
fadd qword [0x10014be8]
push 4
push edi
fadd qword [0x10014be0]
fstp dword [edi]
call esi
mov eax, dword [0x101d9824]
fld dword [eax]
mov edi, dword [0x101d9830]
fsub qword [0x10014bf0]
lea ecx, [esp + 8]
push ecx
push 0x40
fstp dword [esp + 0x14]
push 4
fld dword [esp + 0x18]
push edi
fabs
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp + 0x1c]
call esi
fld dword [esp + 0xc]
mov eax, dword [esp + 8]
fmul qword [0x10014b30]
lea edx, [esp + 8]
push edx
push eax
fadd qword [0x10014bd8]
push 4
push edi
fadd qword [0x10014be0]
fstp dword [edi]
call esi
mov ecx, dword [0x101d9824]
fld dword [ecx]
fsub qword [0x10014bf0]
fstp dword [esp + 0xc]
fld dword [esp + 0xc]
mov edi, dword [0x101d9834]
fabs
lea edx, [esp + 8]
fstp dword [esp + 0xc]
fld dword [esp + 0xc]
push edx
push 0x40
fstp dword [esp + 0x14]
push 4
push edi
call esi
fld dword [esp + 0xc]
fmul qword [0x10014b30]
mov ecx, dword [esp + 8]
lea eax, [esp + 8]
push eax
fadd qword [0x10014bd0]
push ecx
push 4
push edi
fadd qword [0x10014bc8]
fstp dword [edi]
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret