Function at 0x10007940
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
sub esp, 0x1c
sub dword [esp + 0x24], 1
push ebx
push ebp
push esi
push edi
jne 0x10007b71
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x10066e9c], eax
call fcn.100110e0
push str.zh_cn
push 0
call fcn.100472b0
mov ecx, dword [esp + 0x38]
add esp, 8
call fcn.10006bb0
mov ecx, dword [0x10066e9c]
push 0x1c
mov eax, dword [ecx + 0x3c]
mov ebx, dword [eax + ecx + 0x50]
lea eax, [esp + 0x14]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
neg eax
sbb edi, edi
add ebx, 0xfffffff5
and edi, dword [esp + 0x14]
add ebx, edi
cmp edi, ebx
jae 0x10007b8a
mov esi, 0x1005a418
sub esi, edi
xor ecx, ecx
mov eax, edi
mov dl, byte [esi + eax]
cmp dl, 0x2a
je 0x100079c7
cmp dl, byte [eax]
jne 0x10007a8f
inc ecx
inc eax
cmp ecx, 0xb
jb 0x100079b7
test edi, edi
je 0x10007b8a
mov ebp, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 0x34]
push eax
push 0x40
push 1
add edi, 9
push edi
call ebp
test eax, eax
je 0x10007b94
lea eax, [esp + 0x34]
mov byte [edi], 0xc8
push eax
push dword [esp + 0x38]
push 1
push edi
call ebp
mov ecx, dword [0x10066e9c]
push 0x1c
mov eax, dword [ecx + 0x3c]
mov ebx, dword [eax + ecx + 0x50]
lea eax, [esp + 0x14]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
neg eax
sbb edi, edi
add ebx, 0xfffffff5
and edi, dword [esp + 0x14]
add ebx, edi
cmp edi, ebx
jae 0x10007aa4
mov esi, str.steam_yes_
sub esi, edi
xor ecx, ecx
mov eax, edi
nop dword [eax + eax]
mov dl, byte [esi + eax]
cmp dl, 0x2a
je 0x10007a4c
cmp dl, byte [eax]
jne 0x10007a9e
inc ecx
inc eax
cmp ecx, 0xb
jb 0x10007a40
test edi, edi
je 0x10007aa4
lea eax, [esp + 0x34]
push eax
push 0x40
push 0xc
push edi
call ebp
test eax, eax
je 0x10007b94
movq xmm0, qword [str.sbeam_yes_]
movq qword [edi], xmm0
mov eax, dword [0x1005a174]
mov dword [edi + 8], eax
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x38]
push 0xc
push edi
call ebp
jmp 0x10007ab1
inc edi
dec esi
cmp edi, ebx
jae 0x10007b8a
jmp 0x100079b3
inc edi
dec esi
cmp edi, ebx
jb 0x10007a37
push str._WARN_Failed_to_find_signature__n
call fcn.100012b0
add esp, 4
call fcn.10006680
mov ecx, dword [0x10066e9c]
mov dword [0x10066ea8], 0x10006930
push 0x1c
mov eax, dword [ecx + 0x3c]
mov ebx, dword [eax + ecx + 0x50]
lea eax, [esp + 0x14]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
neg eax
sbb edi, edi
add ebx, 0xfffffff1
and edi, dword [esp + 0x14]
add ebx, edi
cmp edi, ebx
jae 0x10007b8a
mov esi, 0x1005a190
sub esi, edi
xor ecx, ecx
mov eax, edi
nop dword [eax + eax]
mov dl, byte [esi + eax]
cmp dl, 0x2a
je 0x10007b0c
cmp dl, byte [eax]
jne 0x10007b80
inc ecx
inc eax
cmp ecx, 0xf
jb 0x10007b00
test edi, edi
je 0x10007b8a
lea eax, [esp + 0x34]
add edi, 0xf
push eax
push 0x40
push 4
push edi
call ebp
test eax, eax
je 0x10007b94
lea eax, [esp + 0x34]
mov dword [edi], 0x10066ea8
push eax
push dword [esp + 0x38]
push 4
push edi
call ebp
mov eax, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [0x10066ea4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov ecx, eax
call fcn.10010740
call fcn.10010290
sub esp, 0xc
mov edx, 0x10007910
mov ecx, 0x10066ea4
call fcn.100107b0
call fcn.10010310
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0xc
inc edi
dec esi
cmp edi, ebx
jb 0x10007af7
push str.Failed_to_find_signature__n
call fcn.1000f960
push edi
push str.Failed_to_modify_protection_at__08X__
call fcn.1000f960
int3