Function at 0x10083620
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ae8f6
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xf8
mov eax, dword [0x100c3040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x10214940]
test al, 1
jne 0x10083734
or eax, 1
mov dword [0x10214940], eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xac]
push 0x22
xorps xmm0, xmm0
mov dword [ebp - 0x9c], 0
push str.B8_________3B_F0_0F_4F_F0_89_5D_FC
movups xmmword [ebp - 0xac], xmm0
mov dword [ebp - 0x98], 0
call fcn.10026170
mov byte [ebp - 4], 1
mov edx, dword [0x1020e8f4]
test edx, edx
je 0x100836c0
mov edx, dword [edx + 0x50]
jmp 0x100836c2
xor edx, edx
mov eax, dword [0x1020e8ec]
test eax, eax
je 0x100836d0
mov eax, dword [eax + 0x18]
jmp 0x100836d2
xor eax, eax
lea ecx, [ebp - 0xac]
push ecx
push eax
call fcn.10080e80
mov byte [ebp - 4], 0
add esp, 8
mov ecx, dword [ebp - 0x98]
cmp ecx, 0xf
jbe 0x10083720
mov edx, dword [ebp - 0xac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10083716
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100839f8
push ecx
push edx
call fcn.100a63f4
add esp, 8
push 0x100b0d10
call fcn.100a63df
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov edi, dword [0x101fb52c]
cmp dword [0x10214890], edi
je 0x1008378f
mov eax, dword [0x1021493c]
test eax, eax
je 0x1008374e
inc eax
jmp 0x10083750
xor eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
push 4
push eax
mov dword [ebp - 0x84], eax
add edi, 3
mov dword [ebp - 0x18], 0
call esi
mov eax, dword [ebp - 0x84]
lea ecx, [ebp - 0x18]
push ecx
mov dword [eax], edi
push dword [ebp - 0x18]
push 4
push eax
call esi
mov eax, dword [0x101fb52c]
mov dword [0x10214890], eax
mov eax, dword [0x101fb53c]
cmp byte [eax], 0
jne 0x100837a1
mov eax, dword [0x101fb538]
mov byte [eax], 0
mov eax, dword [0x1020e9a8]
mov eax, dword [eax + 0x4cb0]
mov dword [ebp - 0x94], eax
cvttss2si eax, dword [0x101fe9e0]
mov dword [ebp - 0x84], eax
test eax, eax
je 0x10083dee
mov ecx, dword [0x1020e930]
mov esi, dword [0x1020e9c0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x68]
call eax
test al, al
je 0x100837f0
mov eax, dword [esi]
test eax, eax
je 0x100837f0
mov al, byte [eax + 0x20]
test al, al
jne 0x10083dee
test byte [0x101f81b0], 0x40
jne 0x10083dee
cmp byte [0x101fe80c], 0
je 0x10083a08
cvttss2si edi, dword [0x101fe9e0]
mov ecx, dword [0x1020eb48]
cmp dword [0x101fb52c], edi
cmovl edi, dword [0x101fb52c]
add ecx, 0xffffffdc
xor ecx, 0x5a3701a0
add ecx, dword [0x101f81a4]
cmp dword [0x101fb5e0], 0
movq xmm0, qword [ecx]
mov eax, dword [ecx + 8]
movq qword [ebp - 0x24], xmm0
mov dword [ebp - 0x1c], eax
je 0x10083864
mov ecx, dword [0x101fb5d8]
mov eax, dword [0x101fb5d4]
dec ecx
and ecx, dword [0x101fb5dc]
mov ecx, dword [eax + ecx*4]
add ecx, 4
movq xmm0, qword [ecx]
movss xmm2, dword [ebp - 0x24]
mov eax, dword [ecx + 8]
lea ecx, [ebp - 0x24]
movss xmm1, dword [ebp - 0x1c]
movq qword [ebp - 0x90], xmm0
movss xmm0, dword [ebp - 0x20]
subss xmm2, dword [ebp - 0x90]
subss xmm0, dword [ebp - 0x8c]
mov dword [ebp - 0x88], eax
subss xmm1, dword [ebp - 0x88]
push 0x101fe8c0
mulss xmm2, xmm2
mov dword [ebp - 0x1c], 0
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
movq qword [ebp - 0x24], xmm0
addss xmm2, xmm1
movss dword [ebp - 0x18], xmm2
call fcn.10024ed0
mov dword [ebp - 4], 2
mov esi, dword [ebp - 0x24]
mov eax, esi
cmp eax, dword [ebp - 0x20]
je 0x100839cb
mov edx, dword [0x1020ec20]
movss xmm2, dword [0x101fb63c]
add edx, 0xffffffa6
movss xmm0, dword [0x100b8478]
xor edx, 0x5a3701d6
movss xmm1, dword [ebp - 0x18]
nop
mov ecx, dword [eax]
test ecx, ecx
jne 0x10083941
comiss xmm1, xmm0
jbe 0x10083968
comiss xmm2, xmm0
jbe 0x10083968
mov eax, dword [0x101fe968]
test eax, eax
je 0x100839b3
cmp eax, 1
jne 0x10083972
movss xmm0, dword [0x100b8644]
comiss xmm0, xmm1
jae 0x100839b3
jmp 0x100839bb
cmp ecx, 1
jne 0x10083957
test byte [0x101fb56c], 2
jne 0x10083920
test byte [0x101f81b0], cl
je 0x10083920
cmp ecx, 2
jne 0x10083968
mov ecx, dword [0x101f81a4]
cmp byte [edx + ecx], 0
jne 0x10083920
add eax, 4
cmp eax, dword [ebp - 0x20]
jne 0x10083910
jmp 0x100839cb
cmp eax, 2
jne 0x10083998
mov eax, dword [0x101fb530]
cmp eax, dword [0x1020f5b8]
jl 0x100839b3
mov eax, dword [0x1020ea70]
push edi
push 2
call eax
add esp, 8
mov dword [0x1020f5b8], eax
jmp 0x100839bb
cmp eax, 3
jne 0x100839bb
cmp byte [0x1020f5b4], 0
je 0x100839b3
movss xmm0, dword [0x100b8644]
comiss xmm0, xmm1
jb 0x100839bb
mov eax, dword [0x101fb538]
mov byte [eax], 0
cmp dword [0x101fb530], edi
jl 0x100839cb
mov eax, dword [0x101fb538]
mov byte [eax], 1
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x10083a08
mov ecx, dword [ebp - 0x1c]
mov eax, esi
sub ecx, esi
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x100839fe
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100839fe
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.100a63f4
add esp, 8
cmp byte [0x101fea98], 0
jne 0x10083c34
mov ecx, dword [0x1020eb48]
mov edx, dword [0x101f81a4]
add ecx, 0xffffffdc
xor ecx, 0x5a3701a0
push 0x30
push 0
mov eax, dword [ecx + edx + 8]
movq xmm0, qword [ecx + edx]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x1c], eax
mov eax, dword [0x1020eb54]
add eax, 0xffffffd9
movq qword [ebp - 0xa0], xmm0
xor eax, 0x5a3701a3
movq xmm0, xmm0
movq qword [ebp - 0x24], xmm0
movq xmm0, qword [eax + edx]
mov eax, dword [eax + edx + 8]
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x5c]
push eax
movq qword [ebp - 0x90], xmm0
mov dword [ebp - 0x28], 0x100b7888
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [0x1020e9e0]
xorps xmm0, xmm0
movups xmmword [ebp - 0x80], xmm0
mov dword [ebp - 0x60], 0
add esp, 0xc
movups xmmword [ebp - 0x70], xmm0
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x18], eax
call dword [ebp - 0x18]
mov eax, dword [0x1020e994]
movss xmm2, dword [ebp - 0x88]
movss xmm4, dword [ebp - 0x90]
movss xmm3, dword [ebp - 0x8c]
movss xmm1, dword [eax + 0x20]
movss xmm5, dword [ebp - 0xa0]
movaps xmm0, xmm1
movss xmm6, dword [ebp - 0x9c]
fstp dword [ebp - 0x18]
mulss xmm0, dword [ebp - 0x18]
mov dword [ebp - 0xe4], 0
mulss xmm3, xmm1
mov byte [ebp - 0xbb], 1
subss xmm2, xmm0
mulss xmm4, xmm1
addss xmm3, dword [ebp - 0x20]
xorps xmm0, xmm0
addss xmm4, dword [ebp - 0x24]
mulss xmm2, xmm1
movss xmm1, dword [ebp - 0x98]
subss xmm3, xmm6
addss xmm2, dword [ebp - 0x1c]
subss xmm4, xmm5
movss dword [ebp - 0xec], xmm3
mulss xmm3, xmm3
subss xmm2, dword [0x100b8534]
movss dword [ebp - 0xf0], xmm4
mulss xmm4, xmm4
subss xmm2, xmm1
addss xmm3, xmm4
movss dword [ebp - 0xe8], xmm2
mulss xmm2, xmm2
addss xmm3, xmm2
ucomiss xmm3, xmm0
lahf
test ah, 0x44
jp 0x10083b73
mov byte [ebp - 0xbb], 0
mov ecx, dword [0x1020e94c]
lea edx, [ebp - 0x80]
push edx
mov dword [ebp - 0xc0], 0
lea edx, [ebp - 0x28]
mov byte [ebp - 0xbc], 1
movss dword [ebp - 0x100], xmm5
movss dword [ebp - 0xfc], xmm6
movss dword [ebp - 0xf8], xmm1
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xd0], 0
mov eax, dword [ecx]
push edx
push 0x200400b
lea edx, [ebp - 0x100]
mov eax, dword [eax + 0x14]
push edx
call eax
movss xmm0, dword [ebp - 0x54]
ucomiss xmm0, dword [0x100b84fc]
lahf
test ah, 0x44
jnp 0x10083c34
movss xmm0, dword [ebp - 0x60]
comiss xmm0, dword [0x100b84d8]
jbe 0x10083c34
test byte [0x101f81b0], 1
jne 0x10083c34
mov eax, dword [0x101fb538]
mov byte [eax], 1
mov eax, dword [0x1020277c]
cmp eax, 0xffffffff
je 0x10083c54
lea eax, [eax + eax*2]
mov al, byte [eax*4 + 0x1020bc00]
test al, al
je 0x10083c54
mov eax, dword [0x101fb538]
mov byte [eax], 0
mov esi, dword [0x101fb508]
test esi, esi
je 0x10083dc3
mov eax, dword [0x101fb564]
mov edi, dword [eax + 0x30]
mov eax, dword [0x1020ec94]
and edi, 0x801
add eax, 0xffffff89
xor eax, 0x5a3701f3
movzx ecx, word [eax + esi]
mov eax, ecx
cmp ax, 0x31
je 0x10083dc3
cmp ax, 4
je 0x10083c99
cmp ax, 0xa
jne 0x10083ced
mov eax, dword [0x1020ecac]
add eax, 0xffffff83
xor eax, 0x5a3701f9
cmp dword [eax + esi], 0
jle 0x10083ced
mov ecx, dword [0x1020ebe0]
mov eax, dword [0x101f81a4]
add ecx, 0xffffffb6
xor ecx, 0x5a3701c6
movd xmm0, dword [ecx + eax]
mov eax, dword [0x1020e994]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax + 0x20]
mov eax, dword [0x1020ecbc]
add eax, 0xffffff7f
xor eax, 0x5a3701fd
comiss xmm0, dword [eax + esi]
setae al
jmp 0x10083d9f
lea eax, [ecx - 0x2b]
cmp ax, 5
ja 0x10083d5d
mov eax, dword [0x1020ecf8]
add eax, 0xffffff70
xor eax, 0x5a37020c
cmp byte [eax + esi], 0
jne 0x10083dc3
mov eax, dword [0x1020ecfc]
add eax, 0xffffff6f
xor eax, 0x5a37020d
movss xmm1, dword [eax + esi]
comiss xmm1, dword [0x100b8428]
jbe 0x10083dc3
mov ecx, dword [0x1020ebe0]
mov eax, dword [0x101f81a4]
add ecx, 0xffffffb6
xor ecx, 0x5a3701c6
movd xmm0, dword [ecx + eax]
mov eax, dword [0x1020e994]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax + 0x20]
comiss xmm0, xmm1
jbe 0x10083dc3
jmp 0x10083da3
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x6f8]
call eax
cmp dword [eax + 0xc8], 0
jne 0x10083d8d
mov eax, dword [0x1020ec94]
add eax, 0xffffff89
xor eax, 0x5a3701f3
cmp dword [eax + esi], 0x1f
je 0x10083d8d
test edi, edi
je 0x10083dc3
push 0
jmp 0x10083d9a
mov eax, dword [0x101fb564]
test byte [eax + 0x30], 1
je 0x10083dc3
push 1
call fcn.1002e8f0
test al, al
je 0x10083dc3
mov eax, dword [0x1020277c]
cmp eax, 0xffffffff
je 0x10083dbb
lea eax, [eax + eax*2]
mov al, byte [eax*4 + 0x1020bc00]
test al, al
jne 0x10083dc3
mov eax, dword [0x101fb538]
mov byte [eax], 1
mov esi, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x84]
test esi, esi
jle 0x10083dea
mov eax, dword [0x1020e994]
mov eax, dword [eax + 0x1c]
sub eax, dword [0x101fb540]
cdq
xor eax, edx
sub eax, edx
cmp eax, ecx
jg 0x10083dee
cmp esi, ecx
jl 0x10083df6
mov eax, dword [0x101fb538]
mov byte [eax], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100a5f76
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret