Function at 0x100194d0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
push edi
push 0x10018b70
push 0x4032ab
push 0xe8
mov dword [0x1032a224], 1
call fcn.100cf940
push 0x10018da0
push 0x403320
push 0xe9
call fcn.100cf940
push 0x10018240
push 0x40464e
push 0xe8
call fcn.100cf940
push 0x10018cf0
push 0x4d5ee6
push 0xe8
call fcn.100cf940
push 0x10018b70
push 0x4d712a
push 0xe8
call fcn.100cf940
push 0x100166c0
push 0x62df68
push 0xe8
call fcn.100cf940
mov esi, dword [0x1025c264]
lea eax, [ebp - 4]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x48
push eax
push 0x40
push 4
push 0x4d6c2c
call edi
lea eax, [ebp - 4]
mov dword [0x4d6c2c], esi
push eax
push dword [ebp - 4]
push 4
push 0x4d6c2c
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x483947
call edi
lea eax, [ebp - 4]
mov dword [0x483947], 0xe5ebf8
push eax
push dword [ebp - 4]
push 4
push 0x483947
call edi
push 0x10018d00
push 0x4d7568
push 0xe8
call fcn.100cf940
push 0x10018d00
push 0x4d7534
push 0xe8
call fcn.100cf940
add esp, 0x18
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d7179
call edi
lea eax, [ebp - 4]
mov dword [0x4d7179], 0x1e0
push eax
push dword [ebp - 4]
push 4
push 0x4d7179
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4d7183
call edi
lea eax, [ebp - 4]
mov byte [0x4d7183], 0
push eax
push dword [ebp - 4]
push 1
push 0x4d7183
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41dcc
call edi
lea eax, [ebp - 4]
mov dword [0xd41dcc], 0x460bd800
push eax
push dword [ebp - 4]
push 4
push 0xd41dcc
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41dc8
call edi
lea eax, [ebp - 4]
mov dword [0xd41dc8], 0x4691f000
push eax
push dword [ebp - 4]
push 4
push 0xd41dc8
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41dc4
call edi
lea eax, [ebp - 4]
mov dword [0xd41dc4], 0x460c2800
push eax
push dword [ebp - 4]
push 4
push 0xd41dc4
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41dc0
call edi
lea eax, [ebp - 4]
mov dword [0xd41dc0], 0x4692e000
push eax
push dword [ebp - 4]
push 4
push 0xd41dc0
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41dbc
call edi
lea eax, [ebp - 4]
mov dword [0xd41dbc], 0x460ca000
push eax
push dword [ebp - 4]
push 4
push 0xd41dbc
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41db8
call edi
lea eax, [ebp - 4]
mov dword [0xd41db8], 0x4693bc00
push eax
push dword [ebp - 4]
push 4
push 0xd41db8
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41db4
call edi
lea eax, [ebp - 4]
mov dword [0xd41db4], 0x460c2800
push eax
push dword [ebp - 4]
push 4
push 0xd41db4
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41db0
call edi
lea eax, [ebp - 4]
mov dword [0xd41db0], 0x46949800
push eax
push dword [ebp - 4]
push 4
push 0xd41db0
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41dac
call edi
lea eax, [ebp - 4]
mov dword [0xd41dac], 0x460bd800
push eax
push dword [ebp - 4]
push 4
push 0xd41dac
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd41da8
call edi
lea eax, [ebp - 4]
mov dword [0xd41da8], 0x46958800
push eax
push dword [ebp - 4]
push 4
push 0xd41da8
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 8
push 0xe5ebb8
call edi
movsd xmm0, qword [0x101a3038]
lea eax, [ebp - 4]
push eax
movsd qword [0xe5ebb8], xmm0
push dword [ebp - 4]
push 8
push 0xe5ebb8
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x401e0b
call edi
mov dword [0x401e0b], 0xe5ebb8
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 4
push 0x401e0b
call edi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x401d30
call edi
lea eax, [ebp - 4]
mov dword [0x401d30], 0x6d4
push eax
push dword [ebp - 4]
push 4
push 0x401d30
call edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret