Function at 0x1006cf50
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x10138018]
xor eax, ebp
mov dword [ebp - 4], eax
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
push esi
push edi
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e17c]
movss dword [0x1033ac2c], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012e184]
movss dword [0x1033ac44], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e0e8]
movss dword [0x1033ac68], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012e22c]
movss dword [0x1033ac20], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e0b0]
movss dword [0x1033ac8c], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012e228]
movss dword [0x1033ac6c], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012e210]
movss dword [0x1033ac60], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e0e4]
movss dword [0x1033ac40], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012e220]
movss dword [0x1033ac98], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e050]
movss dword [0x1033acac], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012dffc]
movss dword [0x1033ac78], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e128]
movss dword [0x1033ac88], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012e254]
movss dword [0x1033ac94], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012e1b0]
movss dword [0x1033ac9c], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012e1ec]
movss dword [0x1033aca8], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e0f4]
movss dword [0x1033ac84], xmm0
lea eax, [ebp - 8]
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push 0x86a4b8
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012e1cc]
movss dword [0x1033ac5c], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e084]
movss dword [0x1033ac90], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012dfe0]
movss dword [0x1033ac7c], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e140]
movss dword [0x1033aca4], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012e0c0]
movss dword [0x1033ac70], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e090]
movss dword [0x1033ac80], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012e09c]
movss dword [0x1033acb0], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012e0a4]
movss dword [0x1033acb4], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e294]
mulss xmm0, dword [0x1012de1c]
movss dword [0x1033ac24], xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86a4b8], 0x1033ac24
push eax
push dword [ebp - 8]
push 4
push 0x86a4b8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86a4fb
call edi
lea eax, [ebp - 8]
mov dword [0x86a4fb], 0x1033ac24
push eax
push dword [ebp - 8]
push 4
push 0x86a4fb
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e98c
call edi
mov dword [0x86e98c], 0x1033ac88
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x86e98c
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e995
call edi
lea eax, [ebp - 8]
mov dword [0x86e995], 0x1033ac94
push eax
push dword [ebp - 8]
push 4
push 0x86e995
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea15
call edi
lea eax, [ebp - 8]
mov dword [0x86ea15], 0x1033ac88
push eax
push dword [ebp - 8]
push 4
push 0x86ea15
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea1e
call edi
lea eax, [ebp - 8]
mov dword [0x86ea1e], 0x1033ac9c
push eax
push dword [ebp - 8]
push 4
push 0x86ea1e
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea84
call edi
lea eax, [ebp - 8]
mov dword [0x86ea84], 0x1033ac88
push eax
push dword [ebp - 8]
push 4
push 0x86ea84
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea8d
call edi
lea eax, [ebp - 8]
mov dword [0x86ea8d], 0x1033aca8
push eax
push dword [ebp - 8]
push 4
push 0x86ea8d
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f255
call edi
lea eax, [ebp - 8]
mov dword [0x86f255], 0x1033ac84
push eax
push dword [ebp - 8]
push 4
push 0x86f255
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f291
call edi
lea eax, [ebp - 8]
mov dword [0x86f291], 0x1033ac90
push eax
push dword [ebp - 8]
push 4
push 0x86f291
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f2cd
call edi
lea eax, [ebp - 8]
mov dword [0x86f2cd], 0x1033ac7c
push eax
push dword [ebp - 8]
push 4
push 0x86f2cd
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f24b
call edi
lea eax, [ebp - 8]
mov dword [0x86f24b], 0x1033ac5c
push eax
push dword [ebp - 8]
push 4
push 0x86f24b
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f287
call edi
lea eax, [ebp - 8]
mov dword [0x86f287], 0x1033ac5c
push eax
push dword [ebp - 8]
push 4
push 0x86f287
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f2c3
call edi
lea eax, [ebp - 8]
mov dword [0x86f2c3], 0x1033ac5c
push eax
push dword [ebp - 8]
push 4
push 0x86f2c3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e66a
call edi
lea eax, [ebp - 8]
mov dword [0x86e66a], 0x1033aca4
push eax
push dword [ebp - 8]
push 4
push 0x86e66a
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e673
call edi
lea eax, [ebp - 8]
mov dword [0x86e673], 0x1033ac70
push eax
push dword [ebp - 8]
push 4
push 0x86e673
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e6f3
call edi
lea eax, [ebp - 8]
mov dword [0x86e6f3], 0x1033ac80
push eax
push dword [ebp - 8]
push 4
push 0x86e6f3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e6fc
call edi
lea eax, [ebp - 8]
mov dword [0x86e6fc], 0x1033acb0
push eax
push dword [ebp - 8]
push 4
push 0x86e6fc
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e7f8
call edi
lea eax, [ebp - 8]
mov dword [0x86e7f8], 0x1033ac80
push eax
push dword [ebp - 8]
push 4
push 0x86e7f8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e801
call edi
lea eax, [ebp - 8]
mov dword [0x86e801], 0x1033acb4
push eax
push dword [ebp - 8]
push 4
push 0x86e801
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e89a
call edi
lea eax, [ebp - 8]
mov dword [0x86e89a], 0x1033ac80
push eax
push dword [ebp - 8]
push 4
push 0x86e89a
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e8a3
call edi
lea eax, [ebp - 8]
mov dword [0x86e8a3], 0x1033acb4
push eax
push dword [ebp - 8]
push 4
push 0x86e8a3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86bda8
call edi
lea eax, [ebp - 8]
mov dword [0x86bda8], 0x1033ac2c
push eax
push dword [ebp - 8]
push 4
push 0x86bda8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86bdb1
call edi
lea eax, [ebp - 8]
mov dword [0x86bdb1], 0x1033ac44
push eax
push dword [ebp - 8]
push 4
push 0x86bdb1
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86df69
call edi
lea eax, [ebp - 8]
mov dword [0x86df69], 0x1033ac68
push eax
push dword [ebp - 8]
push 4
push 0x86df69
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86df72
call edi
lea eax, [ebp - 8]
mov dword [0x86df72], 0x1033ac20
push eax
push dword [ebp - 8]
push 4
push 0x86df72
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e119
call edi
lea eax, [ebp - 8]
mov dword [0x86e119], 0x1033ac8c
push eax
push dword [ebp - 8]
push 4
push 0x86e119
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e122
call edi
lea eax, [ebp - 8]
mov dword [0x86e122], 0x1033ac6c
push eax
push dword [ebp - 8]
push 4
push 0x86e122
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e184
call edi
lea eax, [ebp - 8]
mov dword [0x86e184], 0x1033ac8c
push eax
push dword [ebp - 8]
push 4
push 0x86e184
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e18d
call edi
lea eax, [ebp - 8]
mov dword [0x86e18d], 0x1033ac60
push eax
push dword [ebp - 8]
push 4
push 0x86e18d
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e1ef
call edi
lea eax, [ebp - 8]
mov dword [0x86e1ef], 0x1033ac40
push eax
push dword [ebp - 8]
push 4
push 0x86e1ef
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e1f8
call edi
lea eax, [ebp - 8]
mov dword [0x86e1f8], 0x1033ac98
push eax
push dword [ebp - 8]
push 4
push 0x86e1f8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e3b7
call edi
lea eax, [ebp - 8]
mov dword [0x86e3b7], 0x1033acac
push eax
push dword [ebp - 8]
push 4
push 0x86e3b7
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e3c0
call edi
lea eax, [ebp - 8]
mov dword [0x86e3c0], 0x1033ac98
push eax
push dword [ebp - 8]
push 4
push 0x86e3c0
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e4de
call edi
lea eax, [ebp - 8]
mov dword [0x86e4de], 0x1033ac78
push eax
push dword [ebp - 8]
push 4
push 0x86e4de
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e4e7
call edi
lea eax, [ebp - 8]
mov dword [0x86e4e7], 0x1033ac98
push eax
push dword [ebp - 8]
push 4
push 0x86e4e7
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85b31b
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e0e0]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85b31b], esi
push eax
push dword [ebp - 8]
push 4
push 0x85b31b
call edi
movd xmm0, dword [0xe61e5c]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86d5b4
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012e1e4]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86d5b4], esi
push eax
push dword [ebp - 8]
push 4
push 0x86d5b4
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86d5b9
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e124]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86d5b9], esi
push eax
push dword [ebp - 8]
push 4
push 0x86d5b9
call edi
movd xmm0, dword [0xe61e5c]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86dcf3
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012e254]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86dcf3], esi
push eax
push dword [ebp - 8]
push 4
push 0x86dcf3
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86dcf8
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e128]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86dcf8], esi
push eax
push dword [ebp - 8]
push 4
push 0x86dcf8
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85b602
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e100]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85b602], esi
push eax
push dword [ebp - 8]
push 4
push 0x85b602
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85b287
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e1c8]
mulss xmm0, dword [0x1012de1c]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85b287], esi
push eax
push dword [ebp - 8]
push 4
push 0x85b287
call edi
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e1c8]
mulss xmm0, dword [0x1012de1c]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x85bcc5
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85bcc5], esi
push eax
push dword [ebp - 8]
push 4
push 0x85bcc5
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85bdea
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012e1c8]
mulss xmm0, dword [0x1012de1c]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85bdea], esi
push eax
push dword [ebp - 8]
push 4
push 0x85bdea
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1008500c
mov esp, ebp
pop ebp
ret