Function at 0x10001700
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp dword [0x101da5c4], 0
je 0x1000193a
fld dword [0x101da5c8]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
fstp dword [ebp - 8]
push edi
mov edi, dword [0x101da594]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push edi
call esi
fld dword [ebp - 8]
mov edx, dword [ebp - 4]
fstp dword [edi]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push edi
call esi
fld dword [0x101da5cc]
mov edi, dword [0x101da598]
fstp dword [ebp - 8]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push edi
call esi
fld dword [ebp - 8]
mov edx, dword [ebp - 4]
fstp dword [edi]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push edi
call esi
fld dword [0x101da5d0]
mov edi, dword [0x101da59c]
fstp dword [ebp - 8]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push edi
call esi
fld dword [ebp - 8]
mov edx, dword [ebp - 4]
fstp dword [edi]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push edi
call esi
fld dword [0x101da5d4]
mov edi, dword [0x101da5a0]
fstp dword [ebp - 8]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push edi
call esi
fld dword [ebp - 8]
mov edx, dword [ebp - 4]
fstp dword [edi]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push edi
call esi
fld dword [0x101da5d8]
mov edi, dword [0x101da5a4]
fstp dword [ebp - 8]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push edi
call esi
fld dword [ebp - 8]
mov edx, dword [ebp - 4]
fstp dword [edi]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push edi
call esi
fld dword [0x101da5dc]
mov edi, dword [0x101da5a8]
fstp dword [ebp - 8]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push edi
call esi
fld dword [ebp - 8]
mov edx, dword [ebp - 4]
fstp dword [edi]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push edi
call esi
fld dword [0x101da5e0]
mov edi, dword [0x101da5ac]
fstp dword [ebp - 8]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push edi
call esi
fld dword [ebp - 8]
mov edx, dword [ebp - 4]
fstp dword [edi]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push edi
call esi
fld dword [0x101da5e4]
mov edi, dword [0x101da5b0]
fstp dword [ebp - 8]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push edi
call esi
fld dword [ebp - 8]
mov edx, dword [ebp - 4]
fstp dword [edi]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push edi
call esi
cmp dword [0x6b8d48], 0x1e
jne 0x10001938
mov edi, dword [0x101da5b4]
fld dword [0x101da5e8]
lea eax, [ebp - 4]
fstp dword [ebp - 8]
push eax
push 0x40
push 4
push edi
call esi
fld dword [ebp - 8]
mov edx, dword [ebp - 4]
fstp dword [edi]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push edi
call esi
fld dword [0x101da5ec]
mov edi, dword [0x101da5b8]
fstp dword [ebp - 8]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push edi
call esi
fld dword [ebp - 8]
mov edx, dword [ebp - 4]
fstp dword [edi]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push edi
call esi
fld dword [0x101da5f0]
mov edi, dword [0x101da5bc]
fstp dword [ebp - 8]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push edi
call esi
fld dword [ebp - 8]
mov edx, dword [ebp - 4]
fstp dword [edi]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push edi
call esi
fld dword [0x101da5f4]
mov edi, dword [0x101da5c0]
fstp dword [ebp - 8]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push edi
call esi
fld dword [ebp - 8]
mov edx, dword [ebp - 4]
fstp dword [edi]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push edi
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret