Function at 0x10076510
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x1013c018]
xor eax, ebp
mov dword [ebp - 4], eax
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
push esi
push edi
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132e9c]
movss dword [0x10308044], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10132eac]
movss dword [0x10308048], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132e10]
movss dword [0x1030804c], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10132f5c]
movss dword [0x10308050], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132dcc]
movss dword [0x10308054], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10132f58]
movss dword [0x10308058], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10132f40]
movss dword [0x1030805c], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132e0c]
movss dword [0x10308060], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10132f50]
movss dword [0x10308064], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132d6c]
movss dword [0x10308068], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132d14]
movss dword [0x1030806c], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132e54]
movss dword [0x10308070], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10132f80]
movss dword [0x10308074], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10132edc]
movss dword [0x10308078], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10132f1c]
movss dword [0x1030807c], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132e1c]
movss dword [0x10308080], xmm0
lea eax, [ebp - 8]
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push 0x86a4b8
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10132ef8]
movss dword [0x10308084], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132da0]
movss dword [0x10308088], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132cf8]
movss dword [0x1030808c], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132e6c]
movss dword [0x10308090], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10132de8]
movss dword [0x10308094], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132dac]
movss dword [0x10308098], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10132db8]
movss dword [0x1030809c], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10132dc0]
movss dword [0x103080a0], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132fc8]
mulss xmm0, dword [0x10132b60]
movss dword [0x103080a4], xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86a4b8], 0x103080a4
push eax
push dword [ebp - 8]
push 4
push 0x86a4b8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86a4fb
call edi
lea eax, [ebp - 8]
mov dword [0x86a4fb], 0x103080a4
push eax
push dword [ebp - 8]
push 4
push 0x86a4fb
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e98c
call edi
mov dword [0x86e98c], 0x10308070
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x86e98c
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e995
call edi
lea eax, [ebp - 8]
mov dword [0x86e995], 0x10308074
push eax
push dword [ebp - 8]
push 4
push 0x86e995
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea15
call edi
lea eax, [ebp - 8]
mov dword [0x86ea15], 0x10308070
push eax
push dword [ebp - 8]
push 4
push 0x86ea15
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea1e
call edi
lea eax, [ebp - 8]
mov dword [0x86ea1e], 0x10308078
push eax
push dword [ebp - 8]
push 4
push 0x86ea1e
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea84
call edi
lea eax, [ebp - 8]
mov dword [0x86ea84], 0x10308070
push eax
push dword [ebp - 8]
push 4
push 0x86ea84
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea8d
call edi
lea eax, [ebp - 8]
mov dword [0x86ea8d], 0x1030807c
push eax
push dword [ebp - 8]
push 4
push 0x86ea8d
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f255
call edi
lea eax, [ebp - 8]
mov dword [0x86f255], 0x10308080
push eax
push dword [ebp - 8]
push 4
push 0x86f255
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f291
call edi
lea eax, [ebp - 8]
mov dword [0x86f291], 0x10308088
push eax
push dword [ebp - 8]
push 4
push 0x86f291
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f2cd
call edi
lea eax, [ebp - 8]
mov dword [0x86f2cd], 0x1030808c
push eax
push dword [ebp - 8]
push 4
push 0x86f2cd
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f24b
call edi
lea eax, [ebp - 8]
mov dword [0x86f24b], 0x10308084
push eax
push dword [ebp - 8]
push 4
push 0x86f24b
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f287
call edi
lea eax, [ebp - 8]
mov dword [0x86f287], 0x10308084
push eax
push dword [ebp - 8]
push 4
push 0x86f287
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f2c3
call edi
lea eax, [ebp - 8]
mov dword [0x86f2c3], 0x10308084
push eax
push dword [ebp - 8]
push 4
push 0x86f2c3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e66a
call edi
lea eax, [ebp - 8]
mov dword [0x86e66a], 0x10308090
push eax
push dword [ebp - 8]
push 4
push 0x86e66a
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e673
call edi
lea eax, [ebp - 8]
mov dword [0x86e673], 0x10308094
push eax
push dword [ebp - 8]
push 4
push 0x86e673
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e6f3
call edi
lea eax, [ebp - 8]
mov dword [0x86e6f3], 0x10308098
push eax
push dword [ebp - 8]
push 4
push 0x86e6f3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e6fc
call edi
lea eax, [ebp - 8]
mov dword [0x86e6fc], 0x1030809c
push eax
push dword [ebp - 8]
push 4
push 0x86e6fc
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e7f8
call edi
lea eax, [ebp - 8]
mov dword [0x86e7f8], 0x10308098
push eax
push dword [ebp - 8]
push 4
push 0x86e7f8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e801
call edi
lea eax, [ebp - 8]
mov dword [0x86e801], 0x103080a0
push eax
push dword [ebp - 8]
push 4
push 0x86e801
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e89a
call edi
lea eax, [ebp - 8]
mov dword [0x86e89a], 0x10308098
push eax
push dword [ebp - 8]
push 4
push 0x86e89a
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e8a3
call edi
lea eax, [ebp - 8]
mov dword [0x86e8a3], 0x103080a0
push eax
push dword [ebp - 8]
push 4
push 0x86e8a3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86bda8
call edi
lea eax, [ebp - 8]
mov dword [0x86bda8], 0x10308044
push eax
push dword [ebp - 8]
push 4
push 0x86bda8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86bdb1
call edi
lea eax, [ebp - 8]
mov dword [0x86bdb1], 0x10308048
push eax
push dword [ebp - 8]
push 4
push 0x86bdb1
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86df69
call edi
lea eax, [ebp - 8]
mov dword [0x86df69], 0x1030804c
push eax
push dword [ebp - 8]
push 4
push 0x86df69
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86df72
call edi
lea eax, [ebp - 8]
mov dword [0x86df72], 0x10308050
push eax
push dword [ebp - 8]
push 4
push 0x86df72
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e119
call edi
lea eax, [ebp - 8]
mov dword [0x86e119], 0x10308054
push eax
push dword [ebp - 8]
push 4
push 0x86e119
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e122
call edi
lea eax, [ebp - 8]
mov dword [0x86e122], 0x10308058
push eax
push dword [ebp - 8]
push 4
push 0x86e122
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e184
call edi
lea eax, [ebp - 8]
mov dword [0x86e184], 0x10308054
push eax
push dword [ebp - 8]
push 4
push 0x86e184
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e18d
call edi
lea eax, [ebp - 8]
mov dword [0x86e18d], 0x1030805c
push eax
push dword [ebp - 8]
push 4
push 0x86e18d
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e1ef
call edi
lea eax, [ebp - 8]
mov dword [0x86e1ef], 0x10308060
push eax
push dword [ebp - 8]
push 4
push 0x86e1ef
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e1f8
call edi
lea eax, [ebp - 8]
mov dword [0x86e1f8], 0x10308064
push eax
push dword [ebp - 8]
push 4
push 0x86e1f8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e3b7
call edi
lea eax, [ebp - 8]
mov dword [0x86e3b7], 0x10308068
push eax
push dword [ebp - 8]
push 4
push 0x86e3b7
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e3c0
call edi
lea eax, [ebp - 8]
mov dword [0x86e3c0], 0x10308064
push eax
push dword [ebp - 8]
push 4
push 0x86e3c0
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e4de
call edi
lea eax, [ebp - 8]
mov dword [0x86e4de], 0x1030806c
push eax
push dword [ebp - 8]
push 4
push 0x86e4de
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e4e7
call edi
lea eax, [ebp - 8]
mov dword [0x86e4e7], 0x10308064
push eax
push dword [ebp - 8]
push 4
push 0x86e4e7
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85b31b
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132e08]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85b31b], esi
push eax
push dword [ebp - 8]
push 4
push 0x85b31b
call edi
movd xmm0, dword [0xe61e5c]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86d5b4
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10132f10]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86d5b4], esi
push eax
push dword [ebp - 8]
push 4
push 0x86d5b4
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86d5b9
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132e50]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86d5b9], esi
push eax
push dword [ebp - 8]
push 4
push 0x86d5b9
call edi
movd xmm0, dword [0xe61e5c]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86dcf3
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10132f80]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86dcf3], esi
push eax
push dword [ebp - 8]
push 4
push 0x86dcf3
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86dcf8
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132e54]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86dcf8], esi
push eax
push dword [ebp - 8]
push 4
push 0x86dcf8
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85b602
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132e24]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85b602], esi
push eax
push dword [ebp - 8]
push 4
push 0x85b602
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85b287
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132ef4]
mulss xmm0, dword [0x10132b60]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85b287], esi
push eax
push dword [ebp - 8]
push 4
push 0x85b287
call edi
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132ef4]
mulss xmm0, dword [0x10132b60]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x85bcc5
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85bcc5], esi
push eax
push dword [ebp - 8]
push 4
push 0x85bcc5
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85bdea
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10132ef4]
mulss xmm0, dword [0x10132b60]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85bdea], esi
push eax
push dword [ebp - 8]
push 4
push 0x85bdea
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1008b7da
mov esp, ebp
pop ebp
ret