Function at 0x100a8650
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [0x101a506c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push edi
push eax
push 0x40
mov dword [0x105aaa3c], 0
mov dword [0x105aaa40], 0
mov dword [0x105aaa44], 0
mov byte [0x105aaa48], 0
cmp dword [0xe61e18], 0x1e
push 4
push 0xd27bfc
jne 0x100a882d
call esi
lea eax, [ebp - 8]
mov dword [0xd27bfc], 0x420c0000
push eax
push dword [ebp - 8]
push 4
push 0xd27bfc
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x87933d8
call esi
lea eax, [ebp - 8]
mov dword [0x87933d8], 0xc2340000
push eax
push dword [ebp - 8]
push 4
push 0x87933d8
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd27b88
call esi
lea eax, [ebp - 8]
mov dword [0xd27b88], 0xc2420000
push eax
push dword [ebp - 8]
push 4
push 0xd27b88
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push 0xd255a0
call esi
movsd xmm0, qword [0x10197ec0]
lea eax, [ebp - 8]
push eax
movsd qword [0xd255a0], xmm0
push dword [ebp - 8]
push 8
push 0xd255a0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push 0xd2c848
call esi
movsd xmm0, qword [0x10198158]
lea eax, [ebp - 8]
push eax
movsd qword [0xd2c848], xmm0
push dword [ebp - 8]
push 8
push 0xd2c848
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push 0xd2c898
call esi
movsd xmm0, qword [0x10198128]
lea eax, [ebp - 8]
push eax
movsd qword [0xd2c898], xmm0
push dword [ebp - 8]
push 8
push 0xd2c898
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd2c894
call esi
lea eax, [ebp - 8]
mov dword [0xd2c894], 0x45160000
push eax
push dword [ebp - 8]
push 4
push 0xd2c894
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd2c8a8
call esi
lea eax, [ebp - 8]
mov dword [0xd2c8a8], 0x454e4000
push eax
push dword [ebp - 8]
push 4
push 0xd2c8a8
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd2570c
call esi
lea eax, [ebp - 8]
mov dword [0xd2570c], 0x44fa0000
push eax
push dword [ebp - 8]
push 4
push 0xd2570c
call esi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee3f1
mov esp, ebp
pop ebp
ret
movss xmm0, dword [0x105aa9f0]
movss dword [ebp - 0x10], xmm0
mov dword [ebp - 8], 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x100a886e
mov eax, dword [ebp - 0x10]
mov ecx, 0xd27bfc
mov dword [ecx], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push ecx
call esi
test eax, eax
jne 0x100a8870
call edi
movss xmm0, dword [0x105aa9f4]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd27b88
movss dword [ebp - 0xc], xmm0
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x100a88b8
mov eax, dword [ebp - 0xc]
mov ecx, 0xd27b88
mov dword [ecx], eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 8]
mov dword [ebp - 0x10], 0
push 4
push ecx
call esi
test eax, eax
jne 0x100a88ba
call edi
movss xmm0, dword [0x105aa9f8]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x87933d8
movss dword [ebp - 0xc], xmm0
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x100a8902
mov eax, dword [ebp - 0xc]
mov ecx, 0x87933d8
mov dword [ecx], eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 8]
mov dword [ebp - 0x10], 0
push 4
push ecx
call esi
test eax, eax
jne 0x100a8904
call edi
movss xmm0, dword [0x105aa9fc]
lea eax, [ebp - 8]
push eax
cvtps2pd xmm0, xmm0
push 0x40
push 8
push 0xd255a0
mov dword [ebp - 8], 0
movsd qword [ebp - 0x14], xmm0
call esi
test eax, eax
je 0x100a8955
mov eax, dword [ebp - 0x14]
mov ecx, 0xd255a0
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
mov dword [ecx + 4], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 8
push ecx
call esi
test eax, eax
jne 0x100a8957
call edi
movsd xmm0, qword [0x105aaa00]
lea eax, [ebp - 8]
addsd xmm0, qword [0x101980c0]
push eax
push 0x40
push 8
push 0xd2c848
movsd qword [ebp - 0x14], xmm0
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x100a89ad
mov eax, dword [ebp - 0x14]
mov ecx, 0xd2c848
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
mov dword [ecx + 4], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 8
push ecx
call esi
test eax, eax
jne 0x100a89af
call edi
movss xmm0, dword [0x105aaa28]
lea eax, [ebp - 8]
addss xmm0, dword [0x101984dc]
push eax
push 0x40
push 4
push 0xd2570c
movss dword [ebp - 0xc], xmm0
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x100a89ff
mov eax, dword [ebp - 0xc]
mov ecx, 0xd2570c
mov dword [ecx], eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 8]
mov dword [ebp - 0x10], 0
push 4
push ecx
call esi
test eax, eax
jne 0x100a8a01
call edi
movss xmm0, dword [0x105aaa08]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd2c894
movss dword [ebp - 0xc], xmm0
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x100a8a49
mov eax, dword [ebp - 0xc]
mov ecx, 0xd2c894
mov dword [ecx], eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 8]
mov dword [ebp - 0x10], 0
push 4
push ecx
call esi
test eax, eax
jne 0x100a8a4b
call edi
movsd xmm0, qword [0x105aaa10]
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push 0xd2c8b8
movsd qword [ebp - 0x14], xmm0
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x100a8a99
mov eax, dword [ebp - 0x14]
mov ecx, 0xd2c8b8
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
mov dword [ecx + 4], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 8
push ecx
call esi
test eax, eax
jne 0x100a8a9b
call edi
movsd xmm0, qword [0x105aaa18]
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push 0xd2c878
movsd qword [ebp - 0x14], xmm0
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x100a8ae9
mov eax, dword [ebp - 0x14]
mov ecx, 0xd2c878
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
mov dword [ecx + 4], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 8
push ecx
call esi
test eax, eax
jne 0x100a8aeb
call edi
movss xmm0, dword [0x105aaa20]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd2c880
movss dword [ebp - 0xc], xmm0
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x100a8b33
mov eax, dword [ebp - 0xc]
mov ecx, 0xd2c880
mov dword [ecx], eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 8]
mov dword [ebp - 0x10], 0
push 4
push ecx
call esi
test eax, eax
jne 0x100a8b35
call edi
movss xmm0, dword [0x105aaa24]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd2b94c
movss dword [ebp - 0xc], xmm0
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x100a8b7d
mov eax, dword [ebp - 0xc]
mov ecx, 0xd2b94c
mov dword [ecx], eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 8]
mov dword [ebp - 0x10], 0
push 4
push ecx
call esi
test eax, eax
jne 0x100a8b7f
call edi
movss xmm0, dword [0xd27bfc]
divss xmm0, dword [0x1019774c]
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
movss dword [0x105aa9e8], xmm0
call fcn.100ee3f1
mov esp, ebp
pop ebp
ret