Function at 0x10081a90
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp byte [0x1019e00e], 0
push ebx
push esi
mov ebx, ecx
push edi
mov dword [ebp - 8], ebx
jne 0x10081afe
mov ebx, dword [0x1019e03c]
cmp dword [0x102d2f54], ebx
je 0x10081afc
mov esi, dword [0x102cf934]
test esi, esi
je 0x10081ac2
inc esi
jmp 0x10081ac4
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push esi
add ebx, 3
mov dword [ebp - 4], 0
call edi
lea eax, [ebp - 4]
mov dword [esi], ebx
push eax
push dword [ebp - 4]
push 4
push esi
call edi
mov eax, dword [0x1019e03c]
mov ebx, dword [ebp - 8]
mov dword [0x102d2f54], eax
jmp 0x10081afe
mov ebx, ecx
mov eax, dword [0x102cef1c]
test eax, eax
je 0x10081b12
mov al, byte [eax + 0x20]
test al, al
jne 0x10081d14
mov eax, dword [0x102cf0c4]
test al, 1
jne 0x10081b31
mov ecx, dword [0x102cf0a0]
or eax, 1
mov dword [0x102cf0c4], eax
mov dword [0x102cf0c0], ecx
jmp 0x10081b37
mov ecx, dword [0x102cf0c0]
mov eax, dword [0x1019e080]
test byte [ecx + eax], 0x40
jne 0x10081d14
mov eax, dword [0x102d314c]
cmp byte [eax + 0x2c], 0
je 0x10081b5b
cmp byte [eax + 0x2d], 0
jne 0x10081c90
mov ecx, dword [0x102d3150]
call fcn.1007b730
test al, al
jne 0x10081c90
mov eax, dword [0x102d314c]
cmp byte [eax + 0x18], 0
jne 0x10081b89
cmp byte [eax + 0x19], 0
je 0x10081b89
cmp dword [eax + 0x1c], 0
jle 0x10081c90
cmp byte [0x102c05a8], 0
je 0x10081c90
mov ecx, ebx
call fcn.10081740
mov ecx, dword [0x102cfec4]
mov edi, eax
movzx esi, byte [0x102c0580]
mov eax, dword [0x102cfba4]
test cl, 1
jne 0x10081bc9
or ecx, 1
mov edx, eax
mov dword [0x102cfec4], ecx
mov dword [0x102cfec0], edx
jmp 0x10081bcf
mov edx, dword [0x102cfec0]
test cl, 1
jne 0x10081be5
or ecx, 1
mov edx, eax
mov dword [0x102cfec4], ecx
mov dword [0x102cfec0], edx
mov eax, dword [0x1019e080]
movss xmm0, dword [edx + eax]
movss xmm1, dword [edx + eax + 4]
mov eax, dword [0x102c05b0]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm1, xmm0
movss xmm0, dword [0x10174708]
comiss xmm0, xmm1
seta cl
test al, 1
je 0x10081c1c
test cl, cl
jne 0x10081c4b
test al, 2
je 0x10081c38
test cl, cl
jne 0x10081c38
mov ecx, dword [0x102d3134]
call fcn.1009f000
test al, al
jne 0x10081c4b
mov eax, dword [0x102c05b0]
test al, 4
je 0x10081c4d
mov ecx, dword [0x102d3134]
call fcn.1009f000
test al, al
jne 0x10081c4d
mov esi, edi
mov ecx, dword [0x102d3134]
call fcn.1009f000
test al, al
jne 0x10081c99
cmp byte [0x102c05a9], al
je 0x10081c99
mov eax, dword [0x102ceea4]
lea ecx, [edi + 1]
mov ebx, dword [eax + 0x1c]
mov eax, dword [0x102d2f50]
sub eax, ebx
cdq
xor eax, edx
sub eax, edx
cmp eax, ecx
jle 0x10081c8c
mov esi, 1
mov dword [0x102d2f50], ebx
jmp 0x10081c99
mov esi, edi
jmp 0x10081c99
mov ecx, ebx
call fcn.10081740
mov esi, eax
mov ecx, dword [0x102d314c]
cmp byte [ecx + 0x2c], 0
je 0x10081cf7
cmp byte [ecx + 0x2d], 0
je 0x10081cf7
mov bl, 1
mov al, byte [0x1019e014]
cmp byte [ecx + 0x18], 0
jne 0x10081d14
test esi, esi
je 0x10081d14
test bl, bl
jne 0x10081cd3
test al, al
je 0x10081cd3
mov ecx, dword [0x102d3150]
call fcn.1007b730
test al, al
je 0x10081d14
mov eax, dword [0x1019e090]
mov byte [eax], 0
mov eax, dword [0x102ceefc]
cmp dword [eax + 0x4d30], esi
jl 0x10081d21
mov eax, dword [0x1019e090]
pop edi
pop esi
pop ebx
mov byte [eax], 1
mov esp, ebp
pop ebp
ret
xor bl, bl
cmp byte [0x102c05b5], bl
jne 0x10081cad
mov ecx, dword [0x102d3134]
call fcn.1009ec80
mov ecx, dword [0x102d314c]
jmp 0x10081cb2
mov eax, dword [0x1019e090]
cmp byte [eax], 0
jne 0x10081d21
mov byte [eax], 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret