Function at 0x100017e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 8
cmp dword [0x6b8d48], 0x1e
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
jne 0x1000194c
mov eax, dword [0x101df3fc]
fld dword [eax]
mov edi, dword [0x101df400]
fsubr qword [0x10016cd0]
lea ecx, [esp + 8]
push ecx
push 0x40
push 4
fstp dword [esp + 0x18]
push edi
call esi
fld dword [esp + 0xc]
mov eax, dword [esp + 8]
fstp dword [edi]
lea edx, [esp + 8]
push edx
push eax
push 4
push edi
call esi
mov ecx, dword [0x101df3ec]
fld dword [ecx]
mov edi, dword [0x101df404]
fsub qword [0x10016cc8]
lea edx, [esp + 8]
push edx
push 0x40
fstp dword [esp + 0x14]
push 4
fld dword [esp + 0x18]
push edi
fabs
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp + 0x1c]
call esi
fld dword [esp + 0xc]
mov ecx, dword [esp + 8]
fmul qword [0x10016c08]
lea eax, [esp + 8]
push eax
push ecx
fadd qword [0x10016cc0]
push 4
push edi
fadd qword [0x10016cb8]
fstp dword [edi]
call esi
mov edx, dword [0x101df3ec]
fld dword [edx]
mov edi, dword [0x101df408]
fsub qword [0x10016cc8]
lea eax, [esp + 8]
push eax
push 0x40
fstp dword [esp + 0x14]
push 4
fld dword [esp + 0x18]
push edi
fabs
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp + 0x1c]
call esi
fld dword [esp + 0xc]
mov edx, dword [esp + 8]
fmul qword [0x10016c08]
lea ecx, [esp + 8]
push ecx
push edx
fadd qword [0x10016cb0]
push 4
push edi
fadd qword [0x10016cb8]
fstp dword [edi]
call esi
mov eax, dword [0x101df3ec]
fld dword [eax]
fsub qword [0x10016cc8]
fstp dword [esp + 0xc]
fld dword [esp + 0xc]
mov edi, dword [0x101df40c]
fabs
lea ecx, [esp + 8]
fstp dword [esp + 0xc]
fld dword [esp + 0xc]
push ecx
push 0x40
fstp dword [esp + 0x14]
push 4
push edi
call esi
fld dword [esp + 0xc]
fmul qword [0x10016c08]
mov eax, dword [esp + 8]
lea edx, [esp + 8]
push edx
fadd qword [0x10016ca8]
push eax
push 4
push edi
fadd qword [0x10016ca0]
fstp dword [edi]
call esi
mov ecx, dword [0x101df3fc]
fld dword [ecx]
mov edi, dword [0x101df3f0]
fsubr qword [0x10016cd0]
lea edx, [esp + 8]
push edx
push 0x40
push 4
fstp dword [esp + 0x18]
push edi
call esi
fld dword [esp + 0xc]
mov ecx, dword [esp + 8]
fstp dword [edi]
lea eax, [esp + 8]
push eax
push ecx
push 4
push edi
call esi
mov edx, dword [0x101df3ec]
fld dword [edx]
mov edi, dword [0x101df3f4]
fsub qword [0x10016cc8]
lea eax, [esp + 8]
push eax
push 0x40
fstp dword [esp + 0x14]
push 4
fld dword [esp + 0x18]
push edi
fabs
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp + 0x1c]
call esi
fld dword [esp + 0xc]
mov edx, dword [esp + 8]
fmul qword [0x10016c08]
lea ecx, [esp + 8]
push ecx
push edx
fadd qword [0x10016cc0]
push 4
push edi
fadd qword [0x10016cb8]
fstp dword [edi]
call esi
mov eax, dword [0x101df3ec]
fld dword [eax]
mov edi, dword [0x101df3f8]
fsub qword [0x10016cc8]
lea ecx, [esp + 8]
push ecx
push 0x40
fstp dword [esp + 0x14]
push 4
fld dword [esp + 0x18]
push edi
fabs
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp + 0x1c]
call esi
fld dword [esp + 0xc]
mov eax, dword [esp + 8]
fmul qword [0x10016c08]
lea edx, [esp + 8]
push edx
push eax
fadd qword [0x10016cb0]
push 4
push edi
fadd qword [0x10016cb8]
fstp dword [edi]
call esi
mov ecx, dword [0x101df3ec]
fld dword [ecx]
fsub qword [0x10016cc8]
fstp dword [esp + 0xc]
fld dword [esp + 0xc]
mov edi, dword [0x101df3fc]
fabs
lea edx, [esp + 8]
fstp dword [esp + 0xc]
fld dword [esp + 0xc]
push edx
push 0x40
fstp dword [esp + 0x14]
push 4
push edi
call esi
fld dword [esp + 0xc]
fmul qword [0x10016c08]
mov ecx, dword [esp + 8]
lea eax, [esp + 8]
push eax
fadd qword [0x10016ca8]
push ecx
push 4
push edi
fadd qword [0x10016ca0]
fstp dword [edi]
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret