Function at 0x100ad940
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov dword [0x105b2fe4], 0
lea eax, [ebp - 4]
mov dword [0x105b2fe8], 0
mov dword [0x105b2fec], 0
mov byte [0x105b2ff0], 0
cmp dword [0xe61e18], 0x1e
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
push eax
push 0x40
push 4
push 0xd27bfc
jne 0x100adb09
call esi
lea eax, [ebp - 4]
mov dword [0xd27bfc], 0x420c0000
push eax
push dword [ebp - 4]
push 4
push 0xd27bfc
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x87933d8
call esi
lea eax, [ebp - 4]
mov dword [0x87933d8], 0xc2340000
push eax
push dword [ebp - 4]
push 4
push 0x87933d8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd27b88
call esi
lea eax, [ebp - 4]
mov dword [0xd27b88], 0xc2420000
push eax
push dword [ebp - 4]
push 4
push 0xd27b88
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 8
push 0xd255a0
call esi
movsd xmm0, qword [0x101a2f58]
lea eax, [ebp - 4]
push eax
movsd qword [0xd255a0], xmm0
push dword [ebp - 4]
push 8
push 0xd255a0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 8
push 0xd2c848
call esi
movsd xmm0, qword [0x101a3240]
lea eax, [ebp - 4]
push eax
movsd qword [0xd2c848], xmm0
push dword [ebp - 4]
push 8
push 0xd2c848
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 8
push 0xd2c898
call esi
movsd xmm0, qword [0x101a3208]
lea eax, [ebp - 4]
push eax
movsd qword [0xd2c898], xmm0
push dword [ebp - 4]
push 8
push 0xd2c898
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd2c894
call esi
lea eax, [ebp - 4]
mov dword [0xd2c894], 0x45160000
push eax
push dword [ebp - 4]
push 4
push 0xd2c894
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd2c8a8
call esi
lea eax, [ebp - 4]
mov dword [0xd2c8a8], 0x454e4000
push eax
push dword [ebp - 4]
push 4
push 0xd2c8a8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd2570c
call esi
lea eax, [ebp - 4]
mov dword [0xd2570c], 0x44fa0000
push eax
push dword [ebp - 4]
push 4
push 0xd2570c
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret
movss xmm0, dword [0x105b2f98]
movss dword [ebp - 8], xmm0
mov dword [ebp - 4], 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x100adb4c
mov eax, dword [ebp - 8]
mov dword [0xd27bfc], eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 4]
mov dword [ebp - 0x10], 0
push 4
push 0xd27bfc
call esi
test eax, eax
jne 0x100adb4e
call edi
movss xmm0, dword [0x105b2f9c]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd27b88
movss dword [ebp - 0x10], xmm0
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x100adb98
mov eax, dword [ebp - 0x10]
mov dword [0xd27b88], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 4
push 0xd27b88
call esi
test eax, eax
jne 0x100adb9a
call edi
movss xmm0, dword [0x105b2fa0]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x87933d8
movss dword [ebp - 0x10], xmm0
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x100adbe4
mov eax, dword [ebp - 0x10]
mov dword [0x87933d8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 4
push 0x87933d8
call esi
test eax, eax
jne 0x100adbe6
call edi
movss xmm0, dword [0x105b2fa4]
lea eax, [ebp - 4]
push eax
cvtps2pd xmm0, xmm0
push 0x40
push 8
push 0xd255a0
mov dword [ebp - 4], 0
movsd qword [ebp - 0xc], xmm0
call esi
test eax, eax
je 0x100adc3c
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov dword [0xd255a0], eax
lea eax, [ebp - 0x10]
push eax
mov dword [0xd255a4], ecx
push dword [ebp - 4]
mov dword [ebp - 0x10], 0
push 8
push 0xd255a0
call esi
test eax, eax
jne 0x100adc3e
call edi
movsd xmm0, qword [0x105b2fa8]
lea eax, [ebp - 4]
addsd xmm0, qword [0x101a3198]
push eax
push 0x40
push 8
push 0xd2c848
movsd qword [ebp - 0xc], xmm0
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x100adc99
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov dword [0xd2c848], eax
lea eax, [ebp - 0x10]
push eax
mov dword [0xd2c84c], ecx
push dword [ebp - 4]
mov dword [ebp - 0x10], 0
push 8
push 0xd2c848
call esi
test eax, eax
jne 0x100adc9b
call edi
movss xmm0, dword [0x105b2fd0]
lea eax, [ebp - 4]
addss xmm0, dword [0x101a359c]
push eax
push 0x40
push 4
push 0xd2570c
movss dword [ebp - 0x10], xmm0
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x100adced
mov eax, dword [ebp - 0x10]
mov dword [0xd2570c], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 4
push 0xd2570c
call esi
test eax, eax
jne 0x100adcef
call edi
movss xmm0, dword [0x105b2fb0]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd2c894
movss dword [ebp - 0x10], xmm0
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x100add39
mov eax, dword [ebp - 0x10]
mov dword [0xd2c894], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 4
push 0xd2c894
call esi
test eax, eax
jne 0x100add3b
call edi
movsd xmm0, qword [0x105b2fb8]
lea eax, [ebp - 4]
push eax
push 0x40
push 8
push 0xd2c8b8
movsd qword [ebp - 0xc], xmm0
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x100add8e
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov dword [0xd2c8b8], eax
lea eax, [ebp - 0x10]
push eax
mov dword [0xd2c8bc], ecx
push dword [ebp - 4]
mov dword [ebp - 0x10], 0
push 8
push 0xd2c8b8
call esi
test eax, eax
jne 0x100add90
call edi
movsd xmm0, qword [0x105b2fc0]
lea eax, [ebp - 4]
push eax
push 0x40
push 8
push 0xd2c878
movsd qword [ebp - 0xc], xmm0
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x100adde3
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov dword [0xd2c878], eax
lea eax, [ebp - 0x10]
push eax
mov dword [0xd2c87c], ecx
push dword [ebp - 4]
mov dword [ebp - 0x10], 0
push 8
push 0xd2c878
call esi
test eax, eax
jne 0x100adde5
call edi
movss xmm0, dword [0x105b2fc8]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd2c880
movss dword [ebp - 0x10], xmm0
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x100ade2f
mov eax, dword [ebp - 0x10]
mov dword [0xd2c880], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 4
push 0xd2c880
call esi
test eax, eax
jne 0x100ade31
call edi
movss xmm0, dword [0x105b2fcc]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd2b94c
movss dword [ebp - 0x10], xmm0
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x100ade7b
mov eax, dword [ebp - 0x10]
mov dword [0xd2b94c], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 4
push 0xd2b94c
call esi
test eax, eax
jne 0x100ade7d
call edi
movss xmm0, dword [0xd27bfc]
divss xmm0, dword [0x101a27b4]
pop edi
pop esi
movss dword [0x105b2f90], xmm0
mov esp, ebp
pop ebp
ret