Function at 0x10001480
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp dword [0x6b8d48], 0x1e
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
jne 0x100015c9
mov eax, dword [0x101da5b0]
fld dword [eax]
mov edi, dword [0x101da5b4]
fsubr qword [0x10011b30]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
fstp dword [ebp - 8]
push edi
call esi
fld dword [ebp - 8]
mov eax, dword [ebp - 4]
fstp dword [edi]
lea edx, [ebp - 4]
push edx
push eax
push 4
push edi
call esi
mov ecx, dword [0x101da5a0]
fld dword [ecx]
mov edi, dword [0x101da5b8]
fsub qword [0x10011b28]
lea edx, [ebp - 4]
push edx
push 0x40
fstp dword [ebp - 8]
push 4
fld dword [ebp - 8]
push edi
fabs
fstp dword [ebp - 8]
fld dword [ebp - 8]
fstp dword [ebp - 8]
call esi
fld dword [ebp - 8]
mov ecx, dword [ebp - 4]
fmul qword [0x10011b20]
lea eax, [ebp - 4]
push eax
push ecx
fadd qword [0x10011b18]
push 4
push edi
fadd qword [0x10011b10]
fstp dword [edi]
call esi
mov edx, dword [0x101da5a0]
fld dword [edx]
mov edi, dword [0x101da5bc]
fsub qword [0x10011b28]
lea eax, [ebp - 4]
push eax
push 0x40
fstp dword [ebp - 8]
push 4
fld dword [ebp - 8]
push edi
fabs
fstp dword [ebp - 8]
fld dword [ebp - 8]
fstp dword [ebp - 8]
call esi
fld dword [ebp - 8]
mov edx, dword [ebp - 4]
fmul qword [0x10011b20]
lea ecx, [ebp - 4]
push ecx
push edx
fadd qword [0x10011b08]
push 4
push edi
fadd qword [0x10011b10]
fstp dword [edi]
call esi
mov eax, dword [0x101da5a0]
fld dword [eax]
fsub qword [0x10011b28]
fstp dword [ebp - 8]
fld dword [ebp - 8]
mov edi, dword [0x101da5c0]
fabs
lea ecx, [ebp - 4]
fstp dword [ebp - 8]
fld dword [ebp - 8]
push ecx
push 0x40
fstp dword [ebp - 8]
push 4
push edi
call esi
fld dword [ebp - 8]
fmul qword [0x10011b20]
mov eax, dword [ebp - 4]
lea edx, [ebp - 4]
push edx
fadd qword [0x10011b00]
push eax
push 4
push edi
fadd qword [0x10011af8]
fstp dword [edi]
call esi
mov ecx, dword [0x101da5b0]
fld dword [ecx]
mov edi, dword [0x101da5a4]
fsubr qword [0x10011b30]
lea edx, [ebp - 4]
push edx
push 0x40
push 4
fstp dword [ebp - 8]
push edi
call esi
fld dword [ebp - 8]
mov ecx, dword [ebp - 4]
fstp dword [edi]
lea eax, [ebp - 4]
push eax
push ecx
push 4
push edi
call esi
mov edx, dword [0x101da5a0]
fld dword [edx]
mov edi, dword [0x101da5a8]
fsub qword [0x10011b28]
lea eax, [ebp - 4]
push eax
push 0x40
fstp dword [ebp - 8]
push 4
fld dword [ebp - 8]
push edi
fabs
fstp dword [ebp - 8]
fld dword [ebp - 8]
fstp dword [ebp - 8]
call esi
fld dword [ebp - 8]
mov edx, dword [ebp - 4]
fmul qword [0x10011b20]
lea ecx, [ebp - 4]
push ecx
push edx
fadd qword [0x10011b18]
push 4
push edi
fadd qword [0x10011b10]
fstp dword [edi]
call esi
mov eax, dword [0x101da5a0]
fld dword [eax]
mov edi, dword [0x101da5ac]
fsub qword [0x10011b28]
lea ecx, [ebp - 4]
push ecx
push 0x40
fstp dword [ebp - 8]
push 4
fld dword [ebp - 8]
push edi
fabs
fstp dword [ebp - 8]
fld dword [ebp - 8]
fstp dword [ebp - 8]
call esi
fld dword [ebp - 8]
mov eax, dword [ebp - 4]
fmul qword [0x10011b20]
lea edx, [ebp - 4]
push edx
push eax
fadd qword [0x10011b08]
push 4
push edi
fadd qword [0x10011b10]
fstp dword [edi]
call esi
mov ecx, dword [0x101da5a0]
fld dword [ecx]
fsub qword [0x10011b28]
fstp dword [ebp - 8]
fld dword [ebp - 8]
mov edi, dword [0x101da5b0]
fabs
lea edx, [ebp - 4]
fstp dword [ebp - 8]
fld dword [ebp - 8]
push edx
push 0x40
fstp dword [ebp - 8]
push 4
push edi
call esi
fld dword [ebp - 8]
fmul qword [0x10011b20]
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
fadd qword [0x10011b00]
push ecx
push 4
push edi
fadd qword [0x10011af8]
fstp dword [edi]
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret