Function at 0x1007dcb0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a4346
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xf8
mov eax, dword [0x100b700c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x1020883c]
test al, 1
jne 0x1007ddc4
or eax, 1
mov dword [0x1020883c], eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xac]
push 0x22
xorps xmm0, xmm0
mov dword [ebp - 0x9c], 0
push str.B8_________3B_F0_0F_4F_F0_89_5D_FC
movups xmmword [ebp - 0xac], xmm0
mov dword [ebp - 0x98], 0
call fcn.100214a0
mov byte [ebp - 4], 1
mov edx, dword [0x1020285c]
test edx, edx
je 0x1007dd50
mov edx, dword [edx + 0x50]
jmp 0x1007dd52
xor edx, edx
mov eax, dword [0x10202854]
test eax, eax
je 0x1007dd60
mov eax, dword [eax + 0x18]
jmp 0x1007dd62
xor eax, eax
lea ecx, [ebp - 0xac]
push ecx
push eax
call fcn.1007b550
mov byte [ebp - 4], 0
add esp, 8
mov ecx, dword [ebp - 0x98]
cmp ecx, 0x10
jb 0x1007ddb0
mov edx, dword [ebp - 0xac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1007dda6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007e08e
push ecx
push edx
call fcn.1009bdfb
add esp, 8
push 0x100a64c0
call fcn.1009bde6
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov edi, dword [0x101ef4c4]
cmp dword [0x10208798], edi
je 0x1007de1f
mov eax, dword [0x10208838]
test eax, eax
je 0x1007ddde
inc eax
jmp 0x1007dde0
xor eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
push 4
push eax
mov dword [ebp - 0x84], eax
add edi, 3
mov dword [ebp - 0x18], 0
call esi
mov eax, dword [ebp - 0x84]
lea ecx, [ebp - 0x18]
push ecx
mov dword [eax], edi
push dword [ebp - 0x18]
push 4
push eax
call esi
mov eax, dword [0x101ef4c4]
mov dword [0x10208798], eax
mov eax, dword [0x101ef4d4]
cmp byte [eax], 0
jne 0x1007de31
mov eax, dword [0x101ef4d0]
mov byte [eax], 0
mov eax, dword [0x10202910]
mov eax, dword [eax + 0x4cb0]
mov dword [ebp - 0x94], eax
cvttss2si eax, dword [0x101f2960]
mov dword [ebp - 0x84], eax
test eax, eax
je 0x1007e484
mov ecx, dword [0x10202898]
mov esi, dword [0x10202928]
mov eax, dword [ecx]
mov eax, dword [eax + 0x68]
call eax
test al, al
je 0x1007de80
mov eax, dword [esi]
test eax, eax
je 0x1007de80
mov al, byte [eax + 0x20]
test al, al
jne 0x1007e484
test byte [0x101ec148], 0x40
jne 0x1007e484
cmp byte [0x101f278c], 0
je 0x1007e09e
cvttss2si edi, dword [0x101f2960]
mov ecx, dword [0x10202ab0]
cmp dword [0x101ef4c4], edi
cmovl edi, dword [0x101ef4c4]
add ecx, 0xffffffdc
xor ecx, 0x57186d1a
add ecx, dword [0x101ec13c]
cmp dword [0x101ef578], 0
movq xmm0, qword [ecx]
mov eax, dword [ecx + 8]
movq qword [ebp - 0x24], xmm0
mov dword [ebp - 0x1c], eax
je 0x1007def4
mov ecx, dword [0x101ef570]
mov eax, dword [0x101ef56c]
dec ecx
and ecx, dword [0x101ef574]
mov ecx, dword [eax + ecx*4]
add ecx, 4
movq xmm0, qword [ecx]
movss xmm2, dword [ebp - 0x24]
mov eax, dword [ecx + 8]
lea ecx, [ebp - 0x24]
movss xmm1, dword [ebp - 0x1c]
movq qword [ebp - 0x90], xmm0
movss xmm0, dword [ebp - 0x20]
subss xmm2, dword [ebp - 0x90]
subss xmm0, dword [ebp - 0x8c]
mov dword [ebp - 0x88], eax
subss xmm1, dword [ebp - 0x88]
push 0x101f2840
mulss xmm2, xmm2
mov dword [ebp - 0x1c], 0
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
movq qword [ebp - 0x24], xmm0
addss xmm2, xmm1
movss dword [ebp - 0x18], xmm2
call fcn.10020250
mov dword [ebp - 4], 2
mov esi, dword [ebp - 0x24]
mov eax, esi
cmp eax, dword [ebp - 0x20]
je 0x1007e061
movss xmm2, dword [0x101ef5d4]
movss xmm0, dword [0x100ad36c]
movss xmm1, dword [ebp - 0x18]
nop
mov ecx, dword [eax]
test ecx, ecx
jne 0x1007dfc8
comiss xmm1, xmm0
jbe 0x1007dffe
comiss xmm2, xmm0
jbe 0x1007dffe
mov eax, dword [0x101f28e8]
test eax, eax
je 0x1007e049
cmp eax, 1
jne 0x1007e008
movss xmm0, dword [0x100ad548]
comiss xmm0, xmm1
jae 0x1007e049
jmp 0x1007e051
cmp ecx, 1
jne 0x1007dfde
test byte [0x101ef504], 2
jne 0x1007dfa0
test byte [0x101ec148], cl
je 0x1007dfa0
cmp ecx, 2
jne 0x1007dffe
mov edx, dword [0x10202b88]
mov ecx, dword [0x101ec13c]
add edx, 0xffffffa6
xor edx, 0x57186d50
cmp byte [edx + ecx], 0
jne 0x1007dfa0
add eax, 4
cmp eax, dword [ebp - 0x20]
jne 0x1007df90
jmp 0x1007e061
cmp eax, 2
jne 0x1007e02e
mov eax, dword [0x101ef4c8]
cmp eax, dword [0x10203528]
jl 0x1007e049
mov eax, dword [0x102029d8]
push edi
push 2
call eax
add esp, 8
mov dword [0x10203528], eax
jmp 0x1007e051
cmp eax, 3
jne 0x1007e051
cmp byte [0x10203524], 0
je 0x1007e049
movss xmm0, dword [0x100ad548]
comiss xmm0, xmm1
jb 0x1007e051
mov eax, dword [0x101ef4d0]
mov byte [eax], 0
cmp dword [0x101ef4c8], edi
jl 0x1007e061
mov eax, dword [0x101ef4d0]
mov byte [eax], 1
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x1007e09e
mov ecx, dword [ebp - 0x1c]
mov eax, esi
sub ecx, esi
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x1007e094
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007e094
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.1009bdfb
add esp, 8
cmp byte [0x101f2a18], 0
jne 0x1007e2ca
mov ecx, dword [0x10202ab0]
mov edx, dword [0x101ec13c]
add ecx, 0xffffffdc
xor ecx, 0x57186d1a
push 0x30
push 0
mov eax, dword [ecx + edx + 8]
movq xmm0, qword [ecx + edx]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x1c], eax
mov eax, dword [0x10202abc]
add eax, 0xffffffd9
movq qword [ebp - 0xa0], xmm0
xor eax, 0x57186d1d
movq xmm0, xmm0
movq qword [ebp - 0x24], xmm0
movq xmm0, qword [eax + edx]
mov eax, dword [eax + edx + 8]
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x5c]
push eax
movq qword [ebp - 0x90], xmm0
mov dword [ebp - 0x28], 0x100ac7bc
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [0x10202948]
xorps xmm0, xmm0
movups xmmword [ebp - 0x80], xmm0
mov dword [ebp - 0x60], 0
add esp, 0xc
movups xmmword [ebp - 0x70], xmm0
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x18], eax
call dword [ebp - 0x18]
mov eax, dword [0x102028fc]
movss xmm2, dword [ebp - 0x88]
movss xmm4, dword [ebp - 0x90]
movss xmm3, dword [ebp - 0x8c]
movss xmm1, dword [eax + 0x20]
movss xmm5, dword [ebp - 0xa0]
movaps xmm0, xmm1
movss xmm6, dword [ebp - 0x9c]
fstp dword [ebp - 0x18]
mulss xmm0, dword [ebp - 0x18]
mov dword [ebp - 0xe4], 0
mulss xmm3, xmm1
mov byte [ebp - 0xbb], 1
subss xmm2, xmm0
mulss xmm4, xmm1
addss xmm3, dword [ebp - 0x20]
xorps xmm0, xmm0
addss xmm4, dword [ebp - 0x24]
mulss xmm2, xmm1
movss xmm1, dword [ebp - 0x98]
subss xmm3, xmm6
addss xmm2, dword [ebp - 0x1c]
subss xmm4, xmm5
movss dword [ebp - 0xec], xmm3
mulss xmm3, xmm3
subss xmm2, dword [0x100ad42c]
movss dword [ebp - 0xf0], xmm4
mulss xmm4, xmm4
subss xmm2, xmm1
addss xmm3, xmm4
movss dword [ebp - 0xe8], xmm2
mulss xmm2, xmm2
addss xmm3, xmm2
ucomiss xmm3, xmm0
lahf
test ah, 0x44
jp 0x1007e209
mov byte [ebp - 0xbb], 0
mov ecx, dword [0x102028b4]
lea edx, [ebp - 0x80]
push edx
mov dword [ebp - 0xc0], 0
lea edx, [ebp - 0x28]
mov byte [ebp - 0xbc], 1
movss dword [ebp - 0x100], xmm5
movss dword [ebp - 0xfc], xmm6
movss dword [ebp - 0xf8], xmm1
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xd0], 0
mov eax, dword [ecx]
push edx
push 0x200400b
lea edx, [ebp - 0x100]
mov eax, dword [eax + 0x14]
push edx
call eax
movss xmm0, dword [ebp - 0x54]
ucomiss xmm0, dword [0x100ad3f4]
lahf
test ah, 0x44
jnp 0x1007e2ca
movss xmm0, dword [ebp - 0x60]
comiss xmm0, dword [0x100ad3d0]
jbe 0x1007e2ca
test byte [0x101ec148], 1
jne 0x1007e2ca
mov eax, dword [0x101ef4d0]
mov byte [eax], 1
mov eax, dword [0x101f66fc]
cmp eax, 0xffffffff
je 0x1007e2ea
lea eax, [eax + eax*2]
mov al, byte [eax*4 + 0x101ffb80]
test al, al
je 0x1007e2ea
mov eax, dword [0x101ef4d0]
mov byte [eax], 0
mov esi, dword [0x101ef4a0]
test esi, esi
je 0x1007e459
mov eax, dword [0x101ef4fc]
mov edi, dword [eax + 0x30]
mov eax, dword [0x10202bfc]
and edi, 0x801
add eax, 0xffffff89
xor eax, 0x57186d6d
movzx ecx, word [eax + esi]
mov eax, ecx
cmp ax, 0x31
je 0x1007e459
cmp ax, 4
je 0x1007e32f
cmp ax, 0xa
jne 0x1007e383
mov eax, dword [0x10202c14]
add eax, 0xffffff83
xor eax, 0x57186d73
cmp dword [eax + esi], 0
jle 0x1007e383
mov ecx, dword [0x10202b48]
mov eax, dword [0x101ec13c]
add ecx, 0xffffffb6
xor ecx, 0x57186d40
movd xmm0, dword [ecx + eax]
mov eax, dword [0x102028fc]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax + 0x20]
mov eax, dword [0x10202c24]
add eax, 0xffffff7f
xor eax, 0x57186d77
comiss xmm0, dword [eax + esi]
setae al
jmp 0x1007e435
lea eax, [ecx - 0x2b]
cmp ax, 5
ja 0x1007e3f3
mov eax, dword [0x10202c60]
add eax, 0xffffff70
xor eax, 0x57186d86
cmp byte [eax + esi], 0
jne 0x1007e459
mov eax, dword [0x10202c64]
add eax, 0xffffff6f
xor eax, 0x57186d87
movss xmm1, dword [eax + esi]
comiss xmm1, dword [0x100ad324]
jbe 0x1007e459
mov ecx, dword [0x10202b48]
mov eax, dword [0x101ec13c]
add ecx, 0xffffffb6
xor ecx, 0x57186d40
movd xmm0, dword [ecx + eax]
mov eax, dword [0x102028fc]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax + 0x20]
comiss xmm0, xmm1
jbe 0x1007e459
jmp 0x1007e439
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x6f8]
call eax
cmp dword [eax + 0xc8], 0
jne 0x1007e423
mov eax, dword [0x10202bfc]
add eax, 0xffffff89
xor eax, 0x57186d6d
cmp dword [eax + esi], 0x1f
je 0x1007e423
test edi, edi
je 0x1007e459
push 0
jmp 0x1007e430
mov eax, dword [0x101ef4fc]
test byte [eax + 0x30], 1
je 0x1007e459
push 1
call fcn.10029cf0
test al, al
je 0x1007e459
mov eax, dword [0x101f66fc]
cmp eax, 0xffffffff
je 0x1007e451
lea eax, [eax + eax*2]
mov al, byte [eax*4 + 0x101ffb80]
test al, al
jne 0x1007e459
mov eax, dword [0x101ef4d0]
mov byte [eax], 1
mov esi, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x84]
test esi, esi
jle 0x1007e480
mov eax, dword [0x102028fc]
mov eax, dword [eax + 0x1c]
sub eax, dword [0x101ef4d8]
cdq
xor eax, edx
sub eax, edx
cmp eax, ecx
jg 0x1007e484
cmp esi, ecx
jl 0x1007e48c
mov eax, dword [0x101ef4d0]
mov byte [eax], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1009b980
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret