Function at 0x100857a0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp byte [0x101cf00f], 0
push ebx
push esi
mov ebx, ecx
push edi
mov dword [ebp - 8], ebx
jne 0x1008580e
mov ebx, dword [0x101cf040]
cmp dword [0x102a3734], ebx
je 0x1008580c
mov esi, dword [0x102a00d8]
test esi, esi
je 0x100857d2
inc esi
jmp 0x100857d4
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push esi
add ebx, 3
mov dword [ebp - 4], 0
call edi
lea eax, [ebp - 4]
mov dword [esi], ebx
push eax
push dword [ebp - 4]
push 4
push esi
call edi
mov eax, dword [0x101cf040]
mov ebx, dword [ebp - 8]
mov dword [0x102a3734], eax
jmp 0x1008580e
mov ebx, ecx
mov eax, dword [0x1029bbac]
test eax, eax
je 0x10085822
mov al, byte [eax + 0x20]
test al, al
jne 0x10085a24
mov eax, dword [0x1029bd84]
test al, 1
jne 0x10085841
mov ecx, dword [0x1029bd60]
or eax, 1
mov dword [0x1029bd84], eax
mov dword [0x1029bd80], ecx
jmp 0x10085847
mov ecx, dword [0x1029bd80]
mov eax, dword [0x101cf098]
test byte [ecx + eax], 0x40
jne 0x10085a24
mov eax, dword [0x102a395c]
cmp byte [eax + 0x2c], 0
je 0x1008586b
cmp byte [eax + 0x2d], 0
jne 0x100859a0
mov ecx, dword [0x102a3960]
call fcn.1007f2d0
test al, al
jne 0x100859a0
mov eax, dword [0x102a395c]
cmp byte [eax + 0x18], 0
jne 0x10085899
cmp byte [eax + 0x19], 0
je 0x10085899
cmp dword [eax + 0x1c], 0
jle 0x100859a0
cmp byte [0x1028de44], 0
je 0x100859a0
mov ecx, ebx
call fcn.100854a0
mov ecx, dword [0x1029e3e4]
mov edi, eax
movzx esi, byte [0x1028de1c]
mov eax, dword [0x1029e3c0]
test cl, 1
jne 0x100858d9
or ecx, 1
mov edx, eax
mov dword [0x1029e3e4], ecx
mov dword [0x1029e3e0], edx
jmp 0x100858df
mov edx, dword [0x1029e3e0]
test cl, 1
jne 0x100858f5
or ecx, 1
mov edx, eax
mov dword [0x1029e3e4], ecx
mov dword [0x1029e3e0], edx
mov eax, dword [0x101cf098]
movss xmm0, dword [edx + eax + 4]
movss xmm1, dword [edx + eax]
mov eax, dword [0x1028de4c]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm1, xmm0
movss xmm0, dword [0x1019e860]
comiss xmm0, xmm1
seta cl
test al, 1
je 0x1008592c
test cl, cl
jne 0x1008595b
test al, 2
je 0x10085948
test cl, cl
jne 0x10085948
mov ecx, dword [0x102a3944]
call fcn.1009da80
test al, al
jne 0x1008595b
mov eax, dword [0x1028de4c]
test al, 4
je 0x1008595d
mov ecx, dword [0x102a3944]
call fcn.1009da80
test al, al
jne 0x1008595d
mov esi, edi
mov ecx, dword [0x102a3944]
call fcn.1009da80
test al, al
jne 0x100859a9
cmp byte [0x1028de45], al
je 0x100859a9
mov eax, dword [0x1029bb34]
lea ecx, [edi + 1]
mov ebx, dword [eax + 0x1c]
mov eax, dword [0x102a3730]
sub eax, ebx
cdq
xor eax, edx
sub eax, edx
cmp eax, ecx
jle 0x1008599c
mov esi, 1
mov dword [0x102a3730], ebx
jmp 0x100859a9
mov esi, edi
jmp 0x100859a9
mov ecx, ebx
call fcn.100854a0
mov esi, eax
mov ecx, dword [0x102a395c]
cmp byte [ecx + 0x2c], 0
je 0x10085a07
cmp byte [ecx + 0x2d], 0
je 0x10085a07
mov bl, 1
mov al, byte [0x101cf015]
cmp byte [ecx + 0x18], 0
jne 0x10085a24
test esi, esi
je 0x10085a24
test bl, bl
jne 0x100859e3
test al, al
je 0x100859e3
mov ecx, dword [0x102a3960]
call fcn.1007f2d0
test al, al
je 0x10085a24
mov eax, dword [0x101cf0a8]
mov byte [eax], 0
mov eax, dword [0x1029bb8c]
cmp dword [eax + 0x4d30], esi
jl 0x10085a31
mov eax, dword [0x101cf0a8]
pop edi
pop esi
pop ebx
mov byte [eax], 1
mov esp, ebp
pop ebp
ret
xor bl, bl
cmp byte [0x1028de51], bl
jne 0x100859bd
mov ecx, dword [0x102a3944]
call fcn.1009d6e0
mov ecx, dword [0x102a395c]
jmp 0x100859c2
mov eax, dword [0x101cf0a8]
cmp byte [eax], 0
jne 0x10085a31
mov byte [eax], 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret