Function at 0x100bd090
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x101a306c]
xor eax, ebp
mov dword [ebp - 4], eax
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
push esi
push edi
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10196450]
movss dword [0x105aa1fc], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10196460]
movss dword [0x105aa200], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10196328]
movss dword [0x105aa204], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10196568]
movss dword [0x105aa208], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101962d0]
movss dword [0x105aa20c], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10196564]
movss dword [0x105aa210], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10196548]
movss dword [0x105aa214], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10196324]
movss dword [0x105aa218], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1019655c]
movss dword [0x105aa21c], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10196230]
movss dword [0x105aa220], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101961bc]
movss dword [0x105aa224], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101963ac]
movss dword [0x105aa228], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1019658c]
movss dword [0x105aa22c], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x101964d0]
movss dword [0x105aa230], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10196528]
movss dword [0x105aa234], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10196348]
movss dword [0x105aa238], xmm0
lea eax, [ebp - 8]
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push 0x86a4b8
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10196500]
movss dword [0x105aa23c], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10196264]
movss dword [0x105aa240], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10196178]
movss dword [0x105aa244], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101963c4]
movss dword [0x105aa248], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x101962f8]
movss dword [0x105aa24c], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10196294]
movss dword [0x105aa250], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x101962b0]
movss dword [0x105aa254], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x101962c4]
movss dword [0x105aa258], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101965f0]
mulss xmm0, dword [0x101956b0]
movss dword [0x105aa25c], xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86a4b8], 0x105aa25c
push eax
push dword [ebp - 8]
push 4
push 0x86a4b8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86a4fb
call edi
lea eax, [ebp - 8]
mov dword [0x86a4fb], 0x105aa25c
push eax
push dword [ebp - 8]
push 4
push 0x86a4fb
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e98c
call edi
mov dword [0x86e98c], 0x105aa228
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x86e98c
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e995
call edi
lea eax, [ebp - 8]
mov dword [0x86e995], 0x105aa22c
push eax
push dword [ebp - 8]
push 4
push 0x86e995
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea15
call edi
lea eax, [ebp - 8]
mov dword [0x86ea15], 0x105aa228
push eax
push dword [ebp - 8]
push 4
push 0x86ea15
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea1e
call edi
lea eax, [ebp - 8]
mov dword [0x86ea1e], 0x105aa230
push eax
push dword [ebp - 8]
push 4
push 0x86ea1e
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea84
call edi
lea eax, [ebp - 8]
mov dword [0x86ea84], 0x105aa228
push eax
push dword [ebp - 8]
push 4
push 0x86ea84
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea8d
call edi
lea eax, [ebp - 8]
mov dword [0x86ea8d], 0x105aa234
push eax
push dword [ebp - 8]
push 4
push 0x86ea8d
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f255
call edi
lea eax, [ebp - 8]
mov dword [0x86f255], 0x105aa238
push eax
push dword [ebp - 8]
push 4
push 0x86f255
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f291
call edi
lea eax, [ebp - 8]
mov dword [0x86f291], 0x105aa240
push eax
push dword [ebp - 8]
push 4
push 0x86f291
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f2cd
call edi
lea eax, [ebp - 8]
mov dword [0x86f2cd], 0x105aa244
push eax
push dword [ebp - 8]
push 4
push 0x86f2cd
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f24b
call edi
lea eax, [ebp - 8]
mov dword [0x86f24b], 0x105aa23c
push eax
push dword [ebp - 8]
push 4
push 0x86f24b
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f287
call edi
lea eax, [ebp - 8]
mov dword [0x86f287], 0x105aa23c
push eax
push dword [ebp - 8]
push 4
push 0x86f287
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f2c3
call edi
lea eax, [ebp - 8]
mov dword [0x86f2c3], 0x105aa23c
push eax
push dword [ebp - 8]
push 4
push 0x86f2c3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e66a
call edi
lea eax, [ebp - 8]
mov dword [0x86e66a], 0x105aa248
push eax
push dword [ebp - 8]
push 4
push 0x86e66a
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e673
call edi
lea eax, [ebp - 8]
mov dword [0x86e673], 0x105aa24c
push eax
push dword [ebp - 8]
push 4
push 0x86e673
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e6f3
call edi
lea eax, [ebp - 8]
mov dword [0x86e6f3], 0x105aa250
push eax
push dword [ebp - 8]
push 4
push 0x86e6f3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e6fc
call edi
lea eax, [ebp - 8]
mov dword [0x86e6fc], 0x105aa254
push eax
push dword [ebp - 8]
push 4
push 0x86e6fc
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e7f8
call edi
lea eax, [ebp - 8]
mov dword [0x86e7f8], 0x105aa250
push eax
push dword [ebp - 8]
push 4
push 0x86e7f8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e801
call edi
lea eax, [ebp - 8]
mov dword [0x86e801], 0x105aa258
push eax
push dword [ebp - 8]
push 4
push 0x86e801
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e89a
call edi
lea eax, [ebp - 8]
mov dword [0x86e89a], 0x105aa250
push eax
push dword [ebp - 8]
push 4
push 0x86e89a
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e8a3
call edi
lea eax, [ebp - 8]
mov dword [0x86e8a3], 0x105aa258
push eax
push dword [ebp - 8]
push 4
push 0x86e8a3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86bda8
call edi
lea eax, [ebp - 8]
mov dword [0x86bda8], 0x105aa1fc
push eax
push dword [ebp - 8]
push 4
push 0x86bda8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86bdb1
call edi
lea eax, [ebp - 8]
mov dword [0x86bdb1], 0x105aa200
push eax
push dword [ebp - 8]
push 4
push 0x86bdb1
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86df69
call edi
lea eax, [ebp - 8]
mov dword [0x86df69], 0x105aa204
push eax
push dword [ebp - 8]
push 4
push 0x86df69
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86df72
call edi
lea eax, [ebp - 8]
mov dword [0x86df72], 0x105aa208
push eax
push dword [ebp - 8]
push 4
push 0x86df72
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e119
call edi
lea eax, [ebp - 8]
mov dword [0x86e119], 0x105aa20c
push eax
push dword [ebp - 8]
push 4
push 0x86e119
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e122
call edi
lea eax, [ebp - 8]
mov dword [0x86e122], 0x105aa210
push eax
push dword [ebp - 8]
push 4
push 0x86e122
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e184
call edi
lea eax, [ebp - 8]
mov dword [0x86e184], 0x105aa20c
push eax
push dword [ebp - 8]
push 4
push 0x86e184
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e18d
call edi
lea eax, [ebp - 8]
mov dword [0x86e18d], 0x105aa214
push eax
push dword [ebp - 8]
push 4
push 0x86e18d
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e1ef
call edi
lea eax, [ebp - 8]
mov dword [0x86e1ef], 0x105aa218
push eax
push dword [ebp - 8]
push 4
push 0x86e1ef
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e1f8
call edi
lea eax, [ebp - 8]
mov dword [0x86e1f8], 0x105aa21c
push eax
push dword [ebp - 8]
push 4
push 0x86e1f8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e3b7
call edi
lea eax, [ebp - 8]
mov dword [0x86e3b7], 0x105aa220
push eax
push dword [ebp - 8]
push 4
push 0x86e3b7
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e3c0
call edi
lea eax, [ebp - 8]
mov dword [0x86e3c0], 0x105aa21c
push eax
push dword [ebp - 8]
push 4
push 0x86e3c0
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e4de
call edi
lea eax, [ebp - 8]
mov dword [0x86e4de], 0x105aa224
push eax
push dword [ebp - 8]
push 4
push 0x86e4de
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e4e7
call edi
lea eax, [ebp - 8]
mov dword [0x86e4e7], 0x105aa21c
push eax
push dword [ebp - 8]
push 4
push 0x86e4e7
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85b31b
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10196320]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85b31b], esi
push eax
push dword [ebp - 8]
push 4
push 0x85b31b
call edi
movd xmm0, dword [0xe61e5c]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86d5b4
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10196518]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86d5b4], esi
push eax
push dword [ebp - 8]
push 4
push 0x86d5b4
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86d5b9
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101963a8]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86d5b9], esi
push eax
push dword [ebp - 8]
push 4
push 0x86d5b9
call edi
movd xmm0, dword [0xe61e5c]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86dcf3
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1019658c]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86dcf3], esi
push eax
push dword [ebp - 8]
push 4
push 0x86dcf3
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86dcf8
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101963ac]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86dcf8], esi
push eax
push dword [ebp - 8]
push 4
push 0x86dcf8
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85b602
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10196360]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85b602], esi
push eax
push dword [ebp - 8]
push 4
push 0x85b602
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85b287
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101964f4]
mulss xmm0, dword [0x101956b0]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85b287], esi
push eax
push dword [ebp - 8]
push 4
push 0x85b287
call edi
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101964f4]
mulss xmm0, dword [0x101956b0]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x85bcc5
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85bcc5], esi
push eax
push dword [ebp - 8]
push 4
push 0x85bcc5
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85bdea
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101964f4]
mulss xmm0, dword [0x101956b0]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85bdea], esi
push eax
push dword [ebp - 8]
push 4
push 0x85bdea
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.100ed713
mov esp, ebp
pop ebp
ret