Function at 0x1006d510
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x1012800c]
xor eax, ebp
mov dword [ebp - 4], eax
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
push esi
push edi
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10120258]
movss dword [0x102ee38c], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10120268]
movss dword [0x102ee390], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101201d0]
movss dword [0x102ee394], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10120318]
movss dword [0x102ee398], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10120194]
movss dword [0x102ee39c], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10120314]
movss dword [0x102ee3a0], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x101202fc]
movss dword [0x102ee3a4], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101201cc]
movss dword [0x102ee3a8], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012030c]
movss dword [0x102ee3ac], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10120134]
movss dword [0x102ee3b0], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101200e0]
movss dword [0x102ee3b4], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10120210]
movss dword [0x102ee3b8], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012033c]
movss dword [0x102ee3bc], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10120298]
movss dword [0x102ee3c0], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x101202d8]
movss dword [0x102ee3c4], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101201dc]
movss dword [0x102ee3c8], xmm0
lea eax, [ebp - 8]
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push 0x86a4b8
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x101202b4]
movss dword [0x102ee3cc], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10120168]
movss dword [0x102ee3d0], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101200c4]
movss dword [0x102ee3d4], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10120228]
movss dword [0x102ee3d8], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x101201a8]
movss dword [0x102ee3dc], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10120174]
movss dword [0x102ee3e0], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10120180]
movss dword [0x102ee3e4], xmm0
movd xmm0, dword [0xe61e5c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10120188]
movss dword [0x102ee3e8], xmm0
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012037c]
mulss xmm0, dword [0x1011ff40]
movss dword [0x102ee3ec], xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86a4b8], 0x102ee3ec
push eax
push dword [ebp - 8]
push 4
push 0x86a4b8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86a4fb
call edi
lea eax, [ebp - 8]
mov dword [0x86a4fb], 0x102ee3ec
push eax
push dword [ebp - 8]
push 4
push 0x86a4fb
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e98c
call edi
mov dword [0x86e98c], 0x102ee3b8
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x86e98c
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e995
call edi
lea eax, [ebp - 8]
mov dword [0x86e995], 0x102ee3bc
push eax
push dword [ebp - 8]
push 4
push 0x86e995
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea15
call edi
lea eax, [ebp - 8]
mov dword [0x86ea15], 0x102ee3b8
push eax
push dword [ebp - 8]
push 4
push 0x86ea15
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea1e
call edi
lea eax, [ebp - 8]
mov dword [0x86ea1e], 0x102ee3c0
push eax
push dword [ebp - 8]
push 4
push 0x86ea1e
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea84
call edi
lea eax, [ebp - 8]
mov dword [0x86ea84], 0x102ee3b8
push eax
push dword [ebp - 8]
push 4
push 0x86ea84
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86ea8d
call edi
lea eax, [ebp - 8]
mov dword [0x86ea8d], 0x102ee3c4
push eax
push dword [ebp - 8]
push 4
push 0x86ea8d
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f255
call edi
lea eax, [ebp - 8]
mov dword [0x86f255], 0x102ee3c8
push eax
push dword [ebp - 8]
push 4
push 0x86f255
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f291
call edi
lea eax, [ebp - 8]
mov dword [0x86f291], 0x102ee3d0
push eax
push dword [ebp - 8]
push 4
push 0x86f291
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f2cd
call edi
lea eax, [ebp - 8]
mov dword [0x86f2cd], 0x102ee3d4
push eax
push dword [ebp - 8]
push 4
push 0x86f2cd
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f24b
call edi
lea eax, [ebp - 8]
mov dword [0x86f24b], 0x102ee3cc
push eax
push dword [ebp - 8]
push 4
push 0x86f24b
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f287
call edi
lea eax, [ebp - 8]
mov dword [0x86f287], 0x102ee3cc
push eax
push dword [ebp - 8]
push 4
push 0x86f287
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86f2c3
call edi
lea eax, [ebp - 8]
mov dword [0x86f2c3], 0x102ee3cc
push eax
push dword [ebp - 8]
push 4
push 0x86f2c3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e66a
call edi
lea eax, [ebp - 8]
mov dword [0x86e66a], 0x102ee3d8
push eax
push dword [ebp - 8]
push 4
push 0x86e66a
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e673
call edi
lea eax, [ebp - 8]
mov dword [0x86e673], 0x102ee3dc
push eax
push dword [ebp - 8]
push 4
push 0x86e673
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e6f3
call edi
lea eax, [ebp - 8]
mov dword [0x86e6f3], 0x102ee3e0
push eax
push dword [ebp - 8]
push 4
push 0x86e6f3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e6fc
call edi
lea eax, [ebp - 8]
mov dword [0x86e6fc], 0x102ee3e4
push eax
push dword [ebp - 8]
push 4
push 0x86e6fc
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e7f8
call edi
lea eax, [ebp - 8]
mov dword [0x86e7f8], 0x102ee3e0
push eax
push dword [ebp - 8]
push 4
push 0x86e7f8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e801
call edi
lea eax, [ebp - 8]
mov dword [0x86e801], 0x102ee3e8
push eax
push dword [ebp - 8]
push 4
push 0x86e801
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e89a
call edi
lea eax, [ebp - 8]
mov dword [0x86e89a], 0x102ee3e0
push eax
push dword [ebp - 8]
push 4
push 0x86e89a
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e8a3
call edi
lea eax, [ebp - 8]
mov dword [0x86e8a3], 0x102ee3e8
push eax
push dword [ebp - 8]
push 4
push 0x86e8a3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86bda8
call edi
lea eax, [ebp - 8]
mov dword [0x86bda8], 0x102ee38c
push eax
push dword [ebp - 8]
push 4
push 0x86bda8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86bdb1
call edi
lea eax, [ebp - 8]
mov dword [0x86bdb1], 0x102ee390
push eax
push dword [ebp - 8]
push 4
push 0x86bdb1
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86df69
call edi
lea eax, [ebp - 8]
mov dword [0x86df69], 0x102ee394
push eax
push dword [ebp - 8]
push 4
push 0x86df69
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86df72
call edi
lea eax, [ebp - 8]
mov dword [0x86df72], 0x102ee398
push eax
push dword [ebp - 8]
push 4
push 0x86df72
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e119
call edi
lea eax, [ebp - 8]
mov dword [0x86e119], 0x102ee39c
push eax
push dword [ebp - 8]
push 4
push 0x86e119
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e122
call edi
lea eax, [ebp - 8]
mov dword [0x86e122], 0x102ee3a0
push eax
push dword [ebp - 8]
push 4
push 0x86e122
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e184
call edi
lea eax, [ebp - 8]
mov dword [0x86e184], 0x102ee39c
push eax
push dword [ebp - 8]
push 4
push 0x86e184
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e18d
call edi
lea eax, [ebp - 8]
mov dword [0x86e18d], 0x102ee3a4
push eax
push dword [ebp - 8]
push 4
push 0x86e18d
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e1ef
call edi
lea eax, [ebp - 8]
mov dword [0x86e1ef], 0x102ee3a8
push eax
push dword [ebp - 8]
push 4
push 0x86e1ef
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e1f8
call edi
lea eax, [ebp - 8]
mov dword [0x86e1f8], 0x102ee3ac
push eax
push dword [ebp - 8]
push 4
push 0x86e1f8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e3b7
call edi
lea eax, [ebp - 8]
mov dword [0x86e3b7], 0x102ee3b0
push eax
push dword [ebp - 8]
push 4
push 0x86e3b7
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e3c0
call edi
lea eax, [ebp - 8]
mov dword [0x86e3c0], 0x102ee3ac
push eax
push dword [ebp - 8]
push 4
push 0x86e3c0
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e4de
call edi
lea eax, [ebp - 8]
mov dword [0x86e4de], 0x102ee3b4
push eax
push dword [ebp - 8]
push 4
push 0x86e4de
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x86e4e7
call edi
lea eax, [ebp - 8]
mov dword [0x86e4e7], 0x102ee3ac
push eax
push dword [ebp - 8]
push 4
push 0x86e4e7
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85b31b
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101201c8]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85b31b], esi
push eax
push dword [ebp - 8]
push 4
push 0x85b31b
call edi
movd xmm0, dword [0xe61e5c]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86d5b4
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x101202cc]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86d5b4], esi
push eax
push dword [ebp - 8]
push 4
push 0x86d5b4
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86d5b9
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x1012020c]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86d5b9], esi
push eax
push dword [ebp - 8]
push 4
push 0x86d5b9
call edi
movd xmm0, dword [0xe61e5c]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86dcf3
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x1012033c]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86dcf3], esi
push eax
push dword [ebp - 8]
push 4
push 0x86dcf3
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x86dcf8
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x10120210]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x86dcf8], esi
push eax
push dword [ebp - 8]
push 4
push 0x86dcf8
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85b602
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101201e4]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85b602], esi
push eax
push dword [ebp - 8]
push 4
push 0x85b602
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85b287
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101202b0]
mulss xmm0, dword [0x1011ff40]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85b287], esi
push eax
push dword [ebp - 8]
push 4
push 0x85b287
call edi
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101202b0]
mulss xmm0, dword [0x1011ff40]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x85bcc5
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85bcc5], esi
push eax
push dword [ebp - 8]
push 4
push 0x85bcc5
call edi
movd xmm0, dword [0xe61e58]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x85bdea
divss xmm0, dword [0xe7c3d4]
subss xmm0, dword [0x101202b0]
mulss xmm0, dword [0x1011ff40]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x85bdea], esi
push eax
push dword [ebp - 8]
push 4
push 0x85bdea
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1007ff35
mov esp, ebp
pop ebp
ret