Function at 0x1006f380
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x10151040]
xor eax, ebp
mov dword [ebp - 4], eax
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
push esi
push edi
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145bb0]
movss dword [0x1031fa80], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10145bb8]
movss dword [0x1031fa64], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145b1c]
movss dword [0x1031fa48], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10145c64]
movss dword [0x1031fa54], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145ae8]
movss dword [0x1031fa1c], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10145c60]
movss dword [0x1031fa60], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10145c48]
movss dword [0x1031fa38], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145b18]
movss dword [0x1031fa40], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10145c58]
movss dword [0x1031fa00], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145a84]
movss dword [0x1031fa4c], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145a30]
movss dword [0x1031fa30], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145b60]
movss dword [0x1031fa34], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10145c88]
movss dword [0x1031fa08], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10145be8]
movss dword [0x1031fa14], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10145c24]
movss dword [0x1031fa6c], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145b28]
movss dword [0x1031fa0c], xmm0
lea eax, [ebp - 8]
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push 0x86a4b8
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10145c04]
movss dword [0x1031f9f0], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145ab8]
movss dword [0x1031fa20], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145a14]
movss dword [0x1031fa70], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145b78]
movss dword [0x1031fa74], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10145af8]
movss dword [0x1031fa10], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145ac4]
movss dword [0x1031fa7c], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10145ad4]
movss dword [0x1031fa3c], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10145adc]
movss dword [0x1031fa78], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145cc8]
mulss xmm0, dword [0x10145848]
movss dword [0x1031fa04], xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86a4b8], 0x1031fa04
push eax
push dword [ebp - 8]
push 4
push 0x86a4b8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86a4fb
call edi
lea eax, [ebp - 8]
mov dword [0x86a4fb], 0x1031fa04
push eax
push dword [ebp - 8]
push 4
push 0x86a4fb
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e98c
call edi
mov dword [0x86e98c], 0x1031fa34
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x86e98c
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e995
call edi
lea eax, [ebp - 8]
mov dword [0x86e995], 0x1031fa08
push eax
push dword [ebp - 8]
push 4
push 0x86e995
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea15
call edi
lea eax, [ebp - 8]
mov dword [0x86ea15], 0x1031fa34
push eax
push dword [ebp - 8]
push 4
push 0x86ea15
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea1e
call edi
lea eax, [ebp - 8]
mov dword [0x86ea1e], 0x1031fa14
push eax
push dword [ebp - 8]
push 4
push 0x86ea1e
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea84
call edi
lea eax, [ebp - 8]
mov dword [0x86ea84], 0x1031fa34
push eax
push dword [ebp - 8]
push 4
push 0x86ea84
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea8d
call edi
lea eax, [ebp - 8]
mov dword [0x86ea8d], 0x1031fa6c
push eax
push dword [ebp - 8]
push 4
push 0x86ea8d
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f255
call edi
lea eax, [ebp - 8]
mov dword [0x86f255], 0x1031fa0c
push eax
push dword [ebp - 8]
push 4
push 0x86f255
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f291
call edi
lea eax, [ebp - 8]
mov dword [0x86f291], 0x1031fa20
push eax
push dword [ebp - 8]
push 4
push 0x86f291
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f2cd
call edi
lea eax, [ebp - 8]
mov dword [0x86f2cd], 0x1031fa70
push eax
push dword [ebp - 8]
push 4
push 0x86f2cd
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f24b
call edi
lea eax, [ebp - 8]
mov dword [0x86f24b], 0x1031f9f0
push eax
push dword [ebp - 8]
push 4
push 0x86f24b
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f287
call edi
lea eax, [ebp - 8]
mov dword [0x86f287], 0x1031f9f0
push eax
push dword [ebp - 8]
push 4
push 0x86f287
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f2c3
call edi
lea eax, [ebp - 8]
mov dword [0x86f2c3], 0x1031f9f0
push eax
push dword [ebp - 8]
push 4
push 0x86f2c3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e66a
call edi
lea eax, [ebp - 8]
mov dword [0x86e66a], 0x1031fa74
push eax
push dword [ebp - 8]
push 4
push 0x86e66a
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e673
call edi
lea eax, [ebp - 8]
mov dword [0x86e673], 0x1031fa10
push eax
push dword [ebp - 8]
push 4
push 0x86e673
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e6f3
call edi
lea eax, [ebp - 8]
mov dword [0x86e6f3], 0x1031fa7c
push eax
push dword [ebp - 8]
push 4
push 0x86e6f3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e6fc
call edi
lea eax, [ebp - 8]
mov dword [0x86e6fc], 0x1031fa3c
push eax
push dword [ebp - 8]
push 4
push 0x86e6fc
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e7f8
call edi
lea eax, [ebp - 8]
mov dword [0x86e7f8], 0x1031fa7c
push eax
push dword [ebp - 8]
push 4
push 0x86e7f8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e801
call edi
lea eax, [ebp - 8]
mov dword [0x86e801], 0x1031fa78
push eax
push dword [ebp - 8]
push 4
push 0x86e801
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e89a
call edi
lea eax, [ebp - 8]
mov dword [0x86e89a], 0x1031fa7c
push eax
push dword [ebp - 8]
push 4
push 0x86e89a
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e8a3
call edi
lea eax, [ebp - 8]
mov dword [0x86e8a3], 0x1031fa78
push eax
push dword [ebp - 8]
push 4
push 0x86e8a3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86bda8
call edi
lea eax, [ebp - 8]
mov dword [0x86bda8], 0x1031fa80
push eax
push dword [ebp - 8]
push 4
push 0x86bda8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86bdb1
call edi
lea eax, [ebp - 8]
mov dword [0x86bdb1], 0x1031fa64
push eax
push dword [ebp - 8]
push 4
push 0x86bdb1
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86df69
call edi
lea eax, [ebp - 8]
mov dword [0x86df69], 0x1031fa48
push eax
push dword [ebp - 8]
push 4
push 0x86df69
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86df72
call edi
lea eax, [ebp - 8]
mov dword [0x86df72], 0x1031fa54
push eax
push dword [ebp - 8]
push 4
push 0x86df72
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e119
call edi
lea eax, [ebp - 8]
mov dword [0x86e119], 0x1031fa1c
push eax
push dword [ebp - 8]
push 4
push 0x86e119
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e122
call edi
lea eax, [ebp - 8]
mov dword [0x86e122], 0x1031fa60
push eax
push dword [ebp - 8]
push 4
push 0x86e122
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e184
call edi
lea eax, [ebp - 8]
mov dword [0x86e184], 0x1031fa1c
push eax
push dword [ebp - 8]
push 4
push 0x86e184
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e18d
call edi
lea eax, [ebp - 8]
mov dword [0x86e18d], 0x1031fa38
push eax
push dword [ebp - 8]
push 4
push 0x86e18d
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e1ef
call edi
lea eax, [ebp - 8]
mov dword [0x86e1ef], 0x1031fa40
push eax
push dword [ebp - 8]
push 4
push 0x86e1ef
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e1f8
call edi
lea eax, [ebp - 8]
mov dword [0x86e1f8], 0x1031fa00
push eax
push dword [ebp - 8]
push 4
push 0x86e1f8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e3b7
call edi
lea eax, [ebp - 8]
mov dword [0x86e3b7], 0x1031fa4c
push eax
push dword [ebp - 8]
push 4
push 0x86e3b7
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e3c0
call edi
lea eax, [ebp - 8]
mov dword [0x86e3c0], 0x1031fa00
push eax
push dword [ebp - 8]
push 4
push 0x86e3c0
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e4de
call edi
lea eax, [ebp - 8]
mov dword [0x86e4de], 0x1031fa30
push eax
push dword [ebp - 8]
push 4
push 0x86e4de
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e4e7
call edi
lea eax, [ebp - 8]
mov dword [0x86e4e7], 0x1031fa00
push eax
push dword [ebp - 8]
push 4
push 0x86e4e7
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85b31b
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145b14]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85b31b], esi
push eax
push dword [ebp - 8]
push 4
push 0x85b31b
call edi
movd xmm0, dword [0xe61e5c]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86d5b4
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10145c1c]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86d5b4], esi
push eax
push dword [ebp - 8]
push 4
push 0x86d5b4
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86d5b9
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145b5c]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86d5b9], esi
push eax
push dword [ebp - 8]
push 4
push 0x86d5b9
call edi
movd xmm0, dword [0xe61e5c]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86dcf3
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10145c88]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86dcf3], esi
push eax
push dword [ebp - 8]
push 4
push 0x86dcf3
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86dcf8
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145b60]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86dcf8], esi
push eax
push dword [ebp - 8]
push 4
push 0x86dcf8
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85b602
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145b34]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85b602], esi
push eax
push dword [ebp - 8]
push 4
push 0x85b602
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85b287
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145c00]
mulss xmm0, dword [0x10145848]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85b287], esi
push eax
push dword [ebp - 8]
push 4
push 0x85b287
call edi
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145c00]
mulss xmm0, dword [0x10145848]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x85bcc5
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85bcc5], esi
push eax
push dword [ebp - 8]
push 4
push 0x85bcc5
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85bdea
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10145c00]
mulss xmm0, dword [0x10145848]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85bdea], esi
push eax
push dword [ebp - 8]
push 4
push 0x85bdea
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.10089049
mov esp, ebp
pop ebp
ret