Function at 0x10018c00
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x101ac06c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 0x10018490
push 0x4032ab
push 0xe8
mov dword [0x10327a34], 1
call fcn.100cf570
push 0x10017ca0
push 0x40464e
push 0xe8
call fcn.100cf570
push 0x10018610
push 0x4d5ee6
push 0xe8
call fcn.100cf570
push 0x10018490
push 0x4d712a
push 0xe8
call fcn.100cf570
push 0x100163f0
push 0x62df68
push 0xe8
call fcn.100cf570
mov esi, dword [0x102599e4]
lea eax, [ebp - 8]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x3c
push eax
push 0x40
push 4
push 0x4d6c2c
call edi
lea eax, [ebp - 8]
mov dword [0x4d6c2c], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d6c2c
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x483947
call edi
lea eax, [ebp - 8]
mov dword [0x483947], 0xe5ebf8
push eax
push dword [ebp - 8]
push 4
push 0x483947
call edi
push 0x10018620
push 0x4d7568
push 0xe8
call fcn.100cf570
push 0x10018620
push 0x4d7534
push 0xe8
call fcn.100cf570
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7179
call edi
lea eax, [ebp - 8]
mov dword [0x4d7179], 0x1e0
push eax
push dword [ebp - 8]
push 4
push 0x4d7179
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4d7183
call edi
mov byte [0x4d7183], 0
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 1
push 0x4d7183
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd41dcc
call edi
lea eax, [ebp - 8]
mov dword [0xd41dcc], 0x460bd800
push eax
push dword [ebp - 8]
push 4
push 0xd41dcc
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd41dc8
call edi
lea eax, [ebp - 8]
mov dword [0xd41dc8], 0x4691f000
push eax
push dword [ebp - 8]
push 4
push 0xd41dc8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd41dc4
call edi
lea eax, [ebp - 8]
mov dword [0xd41dc4], 0x460c2800
push eax
push dword [ebp - 8]
push 4
push 0xd41dc4
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd41dc0
call edi
lea eax, [ebp - 8]
mov dword [0xd41dc0], 0x4692e000
push eax
push dword [ebp - 8]
push 4
push 0xd41dc0
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd41dbc
call edi
lea eax, [ebp - 8]
mov dword [0xd41dbc], 0x460ca000
push eax
push dword [ebp - 8]
push 4
push 0xd41dbc
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd41db8
call edi
lea eax, [ebp - 8]
mov dword [0xd41db8], 0x4693bc00
push eax
push dword [ebp - 8]
push 4
push 0xd41db8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd41db4
call edi
lea eax, [ebp - 8]
mov dword [0xd41db4], 0x460c2800
push eax
push dword [ebp - 8]
push 4
push 0xd41db4
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd41db0
call edi
lea eax, [ebp - 8]
mov dword [0xd41db0], 0x46949800
push eax
push dword [ebp - 8]
push 4
push 0xd41db0
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd41dac
call edi
lea eax, [ebp - 8]
mov dword [0xd41dac], 0x460bd800
push eax
push dword [ebp - 8]
push 4
push 0xd41dac
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd41da8
call edi
lea eax, [ebp - 8]
mov dword [0xd41da8], 0x46958800
push eax
push dword [ebp - 8]
push 4
push 0xd41da8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push 0xe5ebb8
call edi
movsd xmm0, qword [0x1019e348]
lea eax, [ebp - 8]
push eax
movsd qword [0xe5ebb8], xmm0
push dword [ebp - 8]
push 8
push 0xe5ebb8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x401e0b
call edi
lea eax, [ebp - 8]
mov dword [0x401e0b], 0xe5ebb8
push eax
push dword [ebp - 8]
push 4
push 0x401e0b
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x401d30
call edi
lea eax, [ebp - 8]
mov dword [0x401d30], 0x6d4
push eax
push dword [ebp - 8]
push 4
push 0x401d30
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.100f4653
mov esp, ebp
pop ebp
ret