Function at 0x1007b460
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
mov eax, dword [0x10138018]
xor eax, esp
mov dword [esp + 0x28], eax
cmp byte [0xe609e8], 5
push esi
jne 0x1007ba6f
cmp dword [0x10149f78], 0
jne 0x1007b49a
call fcn.1007b360
mov dword [0x10149f78], 1
push 0x7a
mov esi, 0x791050
call esi
add esp, 4
test al, al
je 0x1007b4b1
xor dword [0x10339480], 1
push 0x79
call esi
add esp, 4
test al, al
je 0x1007b4c1
call fcn.1007b360
cmp dword [0x10339480], 0
je 0x1007ba6f
mov eax, dword [0x879337c]
test eax, eax
je 0x1007b522
movss xmm2, dword [0x1033948c]
xorps xmm0, xmm0
jle 0x1007b4eb
comiss xmm0, xmm2
ja 0x1007b4f2
test eax, eax
jns 0x1007b4f5
comiss xmm2, xmm0
jbe 0x1007b4f5
xorps xmm2, xmm2
movd xmm1, eax
cvtdq2pd xmm1, xmm1
cvtps2pd xmm0, xmm2
mulsd xmm1, qword [0x1012deb0]
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
movss dword [0x1033948c], xmm0
mov dword [0x879337c], 0
push 4
mov eax, 0x791090
call eax
add esp, 4
test al, al
je 0x1007b5b0
cmp byte [0x10339498], 0
je 0x1007b58f
movsx ecx, word [0x1033949a]
mov eax, dword [0x879340c]
cmp eax, ecx
je 0x1007b564
sub eax, ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10339490]
movss dword [0x10339490], xmm0
movsx ecx, word [0x1033949c]
mov eax, dword [0x8793410]
cmp eax, ecx
je 0x1007b596
sub eax, ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10339494]
movss dword [0x10339494], xmm0
jmp 0x1007b596
mov byte [0x10339498], 1
movzx eax, word [0x879340c]
mov word [0x1033949a], ax
movzx eax, word [0x8793410]
mov word [0x1033949c], ax
push 4
call esi
movzx ecx, byte [0x10339498]
xor edx, edx
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 4
test al, al
cmovne ecx, edx
mov byte [0x10339498], cl
movsd xmm0, qword [0xd255a0]
movss xmm1, dword [0x87933d8]
movss xmm2, dword [0xd27bfc]
movss xmm3, dword [0xd27b88]
movsd qword [esp + 0x18], xmm0
movss xmm0, dword [0x1012e424]
comiss xmm0, xmm1
movss dword [esp + 0x10], xmm2
movss dword [esp + 0x20], xmm1
movss dword [esp + 0x14], xmm3
jbe 0x1007b64e
lea eax, [esp + 0x28]
push eax
push 0x40
push 4
push 0x87933d8
call esi
lea eax, [esp + 0x28]
mov dword [0x87933d8], 0xc2340000
push eax
push dword [esp + 0x2c]
push 4
push 0x87933d8
call esi
movss xmm2, dword [esp + 0x10]
movss xmm3, dword [esp + 0x14]
comiss xmm3, dword [0x1012e418]
xorps xmm1, xmm1
jbe 0x1007b667
movss xmm0, dword [0x10339494]
comiss xmm0, xmm1
ja 0x1007b67d
movss xmm0, dword [0x1012e41c]
comiss xmm0, xmm3
jbe 0x1007b687
comiss xmm1, dword [0x10339494]
jbe 0x1007b687
mov dword [0x10339494], 0
comiss xmm2, dword [0x1012e08c]
movss xmm5, dword [0x1033948c]
jb 0x1007b69d
comiss xmm5, xmm1
ja 0x1007b6af
movss xmm0, dword [0x1012dfe8]
comiss xmm0, xmm2
jb 0x1007b6ba
comiss xmm1, xmm5
jbe 0x1007b6ba
xorps xmm5, xmm5
movss dword [0x1033948c], xmm5
movss xmm0, dword [0x5ef5a18]
divss xmm0, dword [0x1012e040]
movss xmm3, dword [0x1012e560]
cvtps2pd xmm4, xmm0
movaps xmm0, xmm5
divss xmm0, dword [0x1012e004]
movaps xmm1, xmm4
mulsd xmm4, qword [0x1012de80]
mulsd xmm1, qword [0x1012de60]
andps xmm0, xmm3
cvtps2pd xmm0, xmm0
maxsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
movaps xmm1, xmm4
movss dword [esp + 0xc], xmm0
movss xmm0, dword [0x10339490]
divss xmm0, dword [0x1012e064]
andps xmm0, xmm3
cvtps2pd xmm0, xmm0
maxsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
movss dword [esp + 0x28], xmm0
movss xmm0, dword [0x10339494]
divss xmm0, dword [0x1012e064]
andps xmm0, xmm3
cvtps2pd xmm0, xmm0
maxsd xmm4, xmm0
cvtpd2ps xmm0, xmm4
movss dword [esp + 8], xmm0
xorps xmm0, xmm0
comiss xmm5, xmm0
jbe 0x1007b7ba
lea eax, [esp + 0x24]
push eax
push 0x40
push 4
push 0xd27bfc
call esi
movss xmm0, dword [esp + 0xc]
lea eax, [esp + 0x24]
addss xmm0, dword [esp + 0x10]
push eax
movss dword [0xd27bfc], xmm0
push dword [esp + 0x28]
push 4
push 0xd27bfc
call esi
movss xmm0, dword [0x1033948c]
subss xmm0, dword [esp + 0xc]
movss dword [0x1033948c], xmm0
call fcn.1000c9d0
movss xmm0, dword [esp + 0xc]
comiss xmm0, dword [0x1033948c]
jmp 0x1007b81d
comiss xmm0, xmm5
jbe 0x1007b82c
lea eax, [esp + 0x24]
push eax
push 0x40
push 4
push 0xd27bfc
call esi
movss xmm1, dword [esp + 0x10]
lea eax, [esp + 0x24]
subss xmm1, dword [esp + 0xc]
push eax
movss dword [0xd27bfc], xmm1
push dword [esp + 0x28]
push 4
push 0xd27bfc
call esi
movss xmm0, dword [esp + 0xc]
addss xmm0, dword [0x1033948c]
movss dword [0x1033948c], xmm0
call fcn.1000c9d0
movss xmm0, dword [0x1033948c]
comiss xmm0, dword [esp + 0xc]
xorps xmm0, xmm0
jbe 0x1007b82c
mov dword [0x1033948c], 0
movss xmm1, dword [0x10339490]
comiss xmm1, xmm0
jbe 0x1007b886
lea eax, [esp + 0x24]
push eax
push 0x40
push 4
push 0x87933d8
call esi
movss xmm0, dword [esp + 0x28]
lea eax, [esp + 0x24]
addss xmm0, dword [esp + 0x20]
push eax
movss dword [0x87933d8], xmm0
push dword [esp + 0x28]
push 4
push 0x87933d8
call esi
movss xmm1, dword [esp + 0x28]
movss xmm0, dword [0x10339490]
subss xmm0, xmm1
comiss xmm1, xmm0
jmp 0x1007b8d4
comiss xmm0, xmm1
jbe 0x1007b8eb
lea eax, [esp + 0x24]
push eax
push 0x40
push 4
push 0x87933d8
call esi
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0x24]
subss xmm0, dword [esp + 0x28]
push eax
movss dword [0x87933d8], xmm0
push dword [esp + 0x28]
push 4
push 0x87933d8
call esi
movss xmm0, dword [esp + 0x28]
addss xmm0, dword [0x10339490]
comiss xmm0, dword [esp + 0x28]
movss dword [0x10339490], xmm0
xorps xmm0, xmm0
jbe 0x1007b8eb
mov dword [0x10339490], 0
movss xmm1, dword [0x10339494]
comiss xmm1, xmm0
jbe 0x1007b9a4
lea eax, [esp + 0x20]
push eax
push 0x40
push 4
push 0xd27b88
call esi
movss xmm0, dword [esp + 8]
lea eax, [esp + 0x20]
addss xmm0, dword [esp + 0x14]
push eax
movss dword [0xd27b88], xmm0
push dword [esp + 0x24]
push 4
push 0xd27b88
call esi
lea eax, [esp + 0x20]
push eax
push 0x40
push 8
push 0xd255a0
call esi
movss xmm0, dword [esp + 8]
lea eax, [esp + 0x20]
mulss xmm0, dword [0x1012dfd4]
push eax
movsd xmm1, qword [esp + 0x1c]
cvtps2pd xmm0, xmm0
subsd xmm1, xmm0
movsd qword [0xd255a0], xmm1
push dword [esp + 0x24]
push 8
push 0xd255a0
call esi
movss xmm0, dword [0x10339494]
subss xmm0, dword [esp + 8]
movss dword [0x10339494], xmm0
call fcn.1000c9d0
movss xmm0, dword [esp + 8]
comiss xmm0, dword [0x10339494]
jmp 0x1007ba4c
comiss xmm0, xmm1
jbe 0x1007ba58
lea eax, [esp + 0x20]
push eax
push 0x40
push 4
push 0xd27b88
call esi
movss xmm0, dword [esp + 0x14]
lea eax, [esp + 0x20]
subss xmm0, dword [esp + 8]
push eax
movss dword [0xd27b88], xmm0
push dword [esp + 0x24]
push 4
push 0xd27b88
call esi
lea eax, [esp + 0x20]
push eax
push 0x40
push 8
push 0xd255a0
call esi
movss xmm0, dword [esp + 8]
lea eax, [esp + 0x20]
mulss xmm0, dword [0x1012dfd4]
push eax
cvtps2pd xmm0, xmm0
addsd xmm0, qword [esp + 0x1c]
movsd qword [0xd255a0], xmm0
push dword [esp + 0x24]
push 8
push 0xd255a0
call esi
movss xmm0, dword [esp + 8]
addss xmm0, dword [0x10339494]
movss dword [0x10339494], xmm0
call fcn.1000c9d0
movss xmm0, dword [0x10339494]
comiss xmm0, dword [esp + 8]
jbe 0x1007ba58
mov dword [0x10339494], 0
push 0x1007bb00
push 0x63764c
push 0xe9
call fcn.1007f420
add esp, 0xc
mov ecx, dword [esp + 0x2c]
pop esi
xor ecx, esp
call fcn.1008500c
mov esp, ebp
pop ebp
ret