Function at 0x1003b640
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
fild dword [0xe61e58]
push esi
push edi
fdiv dword [0xe7c3d4]
fsub qword [0x1005c638]
fstp dword [0x101db12c]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005c630]
fstp dword [0x101db128]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005c628]
fstp dword [0x101db124]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005c620]
fstp dword [0x101db120]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005c618]
fstp dword [0x101db11c]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005c610]
fstp dword [0x101db118]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005c608]
fstp dword [0x101db114]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005c480]
fstp dword [0x101db110]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005c600]
fstp dword [0x101db10c]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005c5f8]
fstp dword [0x101db108]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005c5f0]
fstp dword [0x101db104]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005c5e8]
fstp dword [0x101db100]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005c5e0]
fstp dword [0x101db0fc]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005c5d8]
fstp dword [0x101db0f8]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005c5d0]
fstp dword [0x101db0f4]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005c5c8]
fstp dword [0x101db0f0]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005c5c0]
fstp dword [0x101db0ec]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005c5b8]
fstp dword [0x101db0e8]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005c5b0]
fstp dword [0x101db0e4]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005c5a8]
fstp dword [0x101db0e0]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
fild dword [0xe61e5c]
lea eax, [ebp - 4]
push eax
push 0x40
fdiv dword [0xe7c3d8]
push 4
push 0x86a4b8
fsub qword [0x1005c5a0]
fstp dword [0x101db0dc]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005c598]
fstp dword [0x101db0d8]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005c590]
fstp dword [0x101db0d4]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005c588]
fstp dword [0x101db0d0]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005c580]
fmul qword [0x1005c460]
fstp dword [0x101db0cc]
call esi
mov edi, 0x101db0cc
lea ecx, [ebp - 4]
push ecx
mov dword [0x86a4b8], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86a4b8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86a4fb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86a4fb], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86a4fb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e98c
call esi
mov edi, 0x101db100
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e98c], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e98c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e995
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e995], 0x101db0fc
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e995
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86ea15
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86ea15], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86ea15
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86ea1e
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86ea1e], 0x101db0f8
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86ea1e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86ea84
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86ea84], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86ea84
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86ea8d
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86ea8d], 0x101db0f4
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86ea8d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86f255
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86f255], 0x101db0f0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86f255
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86f291
call esi
lea ecx, [ebp - 4]
mov dword [0x86f291], 0x101db0e8
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x86f291
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86f2cd
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86f2cd], 0x101db0e4
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86f2cd
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86f24b
call esi
mov edi, 0x101db0ec
lea ecx, [ebp - 4]
push ecx
mov dword [0x86f24b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86f24b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86f287
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86f287], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86f287
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86f2c3
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86f2c3], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86f2c3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e66a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e66a], 0x101db0e0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e66a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e673
call esi
mov dword [0x86e673], 0x101db0dc
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x86e673
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e6f3
call esi
mov edi, 0x101db0d8
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e6f3], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e6f3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e6fc
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e6fc], 0x101db0d4
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e6fc
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e7f8
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e7f8], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e7f8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e801
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e801], 0x101db0d0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e801
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e89a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e89a], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e89a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e8a3
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e8a3], 0x101db0d0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e8a3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86bda8
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86bda8], 0x101db12c
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86bda8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86bdb1
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86bdb1], 0x101db128
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86bdb1
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86df69
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86df69], 0x101db124
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86df69
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86df72
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86df72], 0x101db120
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86df72
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e119
call esi
mov edi, 0x101db11c
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e119], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e119
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e122
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e122], 0x101db118
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e122
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e184
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e184], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e184
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e18d
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e18d], 0x101db114
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e18d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e1ef
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e1ef], 0x101db110
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e1ef
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e1f8
call esi
mov edi, 0x101db10c
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e1f8], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e1f8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e3b7
call esi
lea ecx, [ebp - 4]
mov dword [0x86e3b7], 0x101db108
push ecx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e3b7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e3c0
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e3c0], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e3c0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e4de
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e4de], 0x101db104
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e4de
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e4e7
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e4e7], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e4e7
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x85b31b
fsub qword [0x1005c578]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x85b31b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x85b31b
call esi
fild dword [0xe61e5c]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d8]
or eax, 0xc00
mov dword [ebp - 8], eax
fsub qword [0x1005c570]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86d5b4
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86d5b4], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86d5b4
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86d5b9
fsub qword [0x1005c568]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86d5b9], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86d5b9
call esi
fild dword [0xe61e5c]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d8]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86dcf3
fsub qword [0x1005c5e0]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86dcf3], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86dcf3
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
fsub qword [0x1005c5e8]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
push 0x86dcf8
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86dcf8], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86dcf8
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x85b602
fsub qword [0x1005c560]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x85b602], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x85b602
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x85b287
fsub qword [0x1005c558]
fmul qword [0x1005c460]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x85b287], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x85b287
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x85bcc5
fsub qword [0x1005c558]
fmul qword [0x1005c460]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
mov dword [0x85bcc5], edi
lea ecx, [ebp - 4]
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x85bcc5
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x85bdea
fsub qword [0x1005c558]
fmul qword [0x1005c460]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x85bdea], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x85bdea
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret