Function at 0x100609b0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
mov eax, dword [0x101a306c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x48
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
je 0x100609e2
mov eax, dword [0x10582e18]
mov byte [eax + 0x29], 0
mov eax, dword [0x10582e18]
cmp byte [eax + 0x29], 0
jne 0x10060a00
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ed713
mov esp, ebp
pop ebp
ret
push 0x2c
mov ecx, 0x101b5fb0
call fcn.10045600
push eax
push dword [0x10582e18]
push 0x1034c328
call fcn.1000f720
mov ecx, dword [0x10582e18]
add esp, 0xc
mov bh, al
movss xmm0, dword [ecx + 4]
addss xmm0, dword [0x101961c0]
push 0x1018fa3b
sub esp, 8
movss dword [esp + 4], xmm0
movss xmm0, dword [ecx]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x10195e88]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push dword [0x10582e10]
push 0x1034c328
call fcn.10010180
add esp, 0x14
test al, al
je 0x10060a7b
mov eax, dword [0x10582e18]
mov byte [eax + 0x29], 0
push 0x4e
mov ecx, 0x101b5fb0
call fcn.10045600
push 0x4f
mov ecx, 0x101b5fb0
mov dword [ebp - 0x68], eax
call fcn.10045600
push 0x50
mov ecx, 0x101b5fb0
mov dword [ebp - 0x64], eax
call fcn.10045600
push 0x51
mov ecx, 0x101b5fb0
mov dword [ebp - 0x60], eax
call fcn.10045600
push 0x52
mov ecx, 0x101b5fb0
mov dword [ebp - 0x5c], eax
call fcn.10045600
push 0x5b
mov ecx, 0x101b5fb0
mov dword [ebp - 0x58], eax
call fcn.10045600
push 0x57
mov ecx, 0x101b5fb0
mov dword [ebp - 0x54], eax
call fcn.10045600
push 0x54
mov ecx, 0x101b5fb0
mov dword [ebp - 0x50], eax
call fcn.10045600
push 0x55
mov ecx, 0x101b5fb0
mov dword [ebp - 0x4c], eax
call fcn.10045600
push 0x56
mov ecx, 0x101b5fb0
mov dword [ebp - 0x48], eax
call fcn.10045600
push 0x58
mov ecx, 0x101b5fb0
mov dword [ebp - 0x44], eax
call fcn.10045600
push 0x5c
mov ecx, 0x101b5fb0
mov dword [ebp - 0x40], eax
call fcn.10045600
push 0x5d
mov ecx, 0x101b5fb0
mov dword [ebp - 0x3c], eax
call fcn.10045600
push 0x59
mov ecx, 0x101b5fb0
mov dword [ebp - 0x38], eax
call fcn.10045600
push 0x5a
mov ecx, 0x101b5fb0
mov dword [ebp - 0x34], eax
call fcn.10045600
push 0x157
mov ecx, 0x101b5fb0
mov dword [ebp - 0x30], eax
call fcn.10045600
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
xor bl, bl
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x2c], eax
nop dword [eax]
movsx ecx, bl
push dword [ebp + ecx*4 - 0x68]
lea eax, [ecx + ecx*4]
shl eax, 2
sub esp, 8
movd xmm1, eax
mov eax, dword [0x10582e18]
cvtdq2ps xmm1, xmm1
movss xmm0, dword [eax + 4]
addss xmm0, dword [0x1019625c]
addss xmm1, xmm0
movss xmm0, dword [eax]
addss xmm0, dword [0x101961a8]
movss dword [esp + 4], xmm1
movss dword [esp], xmm0
push dword [ecx*4 + 0x10582e1c]
push 0x1034c328
call fcn.1000f1b0
add esp, 0x14
test al, al
je 0x10061015
test bl, bl
jne 0x10060bf6
cmp byte [0x101a4814], bl
sete byte [0x101a4814]
jmp 0x10061015
cmp bl, 1
jne 0x10060c10
xor eax, eax
cmp dword [0x1031e210], eax
sete al
mov dword [0x1031e210], eax
jmp 0x10061015
cmp bl, 2
jne 0x10060c28
cmp byte [0x101ede55], 1
setne byte [0x101ede55]
jmp 0x10061015
cmp bl, 3
jne 0x10060c42
xor eax, eax
cmp dword [0x1031e248], eax
sete al
mov dword [0x1031e248], eax
jmp 0x10061015
cmp bl, 4
jne 0x10060c5a
cmp byte [0x101ee255], 1
setne byte [0x101ee255]
jmp 0x10061015
cmp bl, 5
jne 0x10060cc8
cmp dword [0x1031e244], 0
je 0x10060c8b
push 0xe8
mov edx, 0x6097b0
mov ecx, 0x57655b
call fcn.100c9250
add esp, 4
xor eax, eax
mov dword [0x1031e244], eax
jmp 0x10061015
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x57655b
call esi
mov eax, 0x57655b
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push 5
push 0x57655b
call esi
mov eax, 1
mov dword [0x1031e244], eax
jmp 0x10061015
cmp bl, 6
jne 0x10060d63
cmp dword [0x1031e240], 0
lea eax, [ebp - 8]
push eax
push 0x40
push 1
mov dword [ebp - 8], 0
push 0x5de2b2
je 0x10060d27
mov byte [ebp - 0x21], 0
call esi
test eax, eax
je 0x10060d19
mov al, byte [ebp - 0x21]
mov ecx, 0x5de2b2
mov byte [ecx], al
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 8]
mov dword [ebp - 0x1c], 0
push 1
push ecx
call esi
test eax, eax
jne 0x10060d1b
call edi
xor eax, eax
mov dword [0x1031e240], eax
jmp 0x10061015
mov byte [ebp - 0x21], 1
call esi
test eax, eax
je 0x10060d52
mov al, byte [ebp - 0x21]
mov ecx, 0x5de2b2
mov byte [ecx], al
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 8]
mov dword [ebp - 0x20], 0
push 1
push ecx
call esi
test eax, eax
jne 0x10060d54
call edi
mov eax, 1
mov dword [0x1031e240], eax
jmp 0x10061015
cmp bl, 7
jne 0x10060dbf
cmp dword [0x1031e23c], 0
je 0x10060d99
push 0x10031540
push 0x60b36a
push 0xe9
call fcn.100c9b20
add esp, 0xc
call fcn.10031600
xor eax, eax
mov dword [0x1031e23c], eax
jmp 0x10061015
push 0x100313f0
push 0x60b36a
push 0xe9
call fcn.100c9b20
mov eax, 1
add esp, 0xc
mov dword [0x1031e23c], eax
jmp 0x10061015
cmp bl, 8
jne 0x10060df2
cmp dword [0x1031e238], 0
je 0x10060dde
call fcn.100316d0
xor eax, eax
mov dword [0x1031e238], eax
jmp 0x10061015
call fcn.10031640
mov eax, 1
mov dword [0x1031e238], eax
jmp 0x10061015
cmp bl, 9
jne 0x10060e60
cmp dword [0x1031e234], 0
je 0x10060e23
push 0xe8
mov edx, 0x5655c0
mov ecx, 0x588661
call fcn.100c9250
add esp, 4
xor eax, eax
mov dword [0x1031e234], eax
jmp 0x10061015
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x588661
call esi
mov eax, 0x588661
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x10]
push 5
push 0x588661
call esi
mov eax, 1
mov dword [0x1031e234], eax
jmp 0x10061015
cmp bl, 0xa
jne 0x10060ea5
cmp dword [0x1031e230], 0
je 0x10060e77
xor edi, edi
mov eax, 0x10031790
jmp 0x10060e81
mov edi, 1
mov eax, 0x10031780
push eax
push 0x57d278
push 0xe9
call fcn.100c9b20
mov dword [0x1031e230], edi
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x10061015
cmp bl, 0xb
jne 0x10060eea
cmp dword [0x1031e22c], 0
je 0x10060ebc
xor edi, edi
mov eax, 0x100317f0
jmp 0x10060ec6
mov edi, 1
mov eax, 0x100317e0
push eax
push 0x771328
push 0xe9
call fcn.100c9b20
mov dword [0x1031e22c], edi
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x10061015
cmp bl, 0xc
jne 0x10060f2f
cmp dword [0x1031e228], 0
je 0x10060f01
xor edi, edi
mov eax, 0x10031810
jmp 0x10060f0b
mov edi, 1
mov eax, 0x10031800
push eax
push 0x74cd50
push 0xe9
call fcn.100c9b20
mov dword [0x1031e228], edi
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x10061015
cmp bl, 0xd
jne 0x10060fa1
cmp dword [0x1031e224], 0
je 0x10060f6f
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x54a270
call esi
lea eax, [ebp - 0x14]
mov byte [0x54a270], 0x55
push eax
push dword [ebp - 0x14]
push 1
push 0x54a270
call esi
xor eax, eax
mov dword [0x1031e224], eax
jmp 0x10061015
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x54a270
call esi
lea eax, [ebp - 0x18]
mov byte [0x54a270], 0xc3
push eax
push dword [ebp - 0x18]
push 1
push 0x54a270
call esi
mov eax, 1
mov dword [0x1031e224], eax
jmp 0x10061015
cmp bl, 0xe
jne 0x10060fce
cmp dword [0x1031e220], 0
je 0x10060fbd
call fcn.10031940
xor eax, eax
mov dword [0x1031e220], eax
jmp 0x10061015
call fcn.100318c0
mov eax, 1
mov dword [0x1031e220], eax
jmp 0x10061015
cmp bl, 0xf
jne 0x10061015
cmp dword [0x1031e274], 0
mov ecx, 0x5f8924
je 0x10060ffc
push 0xe8
mov edx, 0x95a1e0
call fcn.100c9250
mov dword [0x1031e274], 0
jmp 0x10061012
push 5
mov edx, 0x90
call fcn.100c9be0
mov dword [0x1031e274], 1
add esp, 4
inc bl
cmp bl, 0x10
jl 0x10060b80
mov ecx, dword [ebp - 4]
mov al, bh
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100ed713
mov esp, ebp
pop ebp
ret