Function at 0x1003d9f0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
fild dword [0xe61e58]
push esi
push edi
fdiv dword [0xe7c3d4]
fsub qword [0x1005fb38]
fstp dword [0x101de12c]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005fb30]
fstp dword [0x101de128]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005fb28]
fstp dword [0x101de124]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005fb20]
fstp dword [0x101de120]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005fb18]
fstp dword [0x101de11c]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005fb10]
fstp dword [0x101de118]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005fb08]
fstp dword [0x101de114]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005f970]
fstp dword [0x101de110]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005fb00]
fstp dword [0x101de10c]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005faf8]
fstp dword [0x101de108]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005faf0]
fstp dword [0x101de104]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005fae8]
fstp dword [0x101de100]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005fae0]
fstp dword [0x101de0fc]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005fad8]
fstp dword [0x101de0f8]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005fad0]
fstp dword [0x101de0f4]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005fac8]
fstp dword [0x101de0f0]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005fac0]
fstp dword [0x101de0ec]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005fab8]
fstp dword [0x101de0e8]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005fab0]
fstp dword [0x101de0e4]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005faa8]
fstp dword [0x101de0e0]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
fild dword [0xe61e5c]
lea eax, [ebp - 4]
push eax
push 0x40
fdiv dword [0xe7c3d8]
push 4
push 0x86a4b8
fsub qword [0x1005faa0]
fstp dword [0x101de0dc]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005fa98]
fstp dword [0x101de0d8]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005fa90]
fstp dword [0x101de0d4]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005fa88]
fstp dword [0x101de0d0]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub qword [0x1005fa80]
fmul qword [0x1005f950]
fstp dword [0x101de0cc]
call esi
mov edi, 0x101de0cc
lea ecx, [ebp - 4]
push ecx
mov dword [0x86a4b8], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86a4b8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86a4fb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86a4fb], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86a4fb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e98c
call esi
mov edi, 0x101de100
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e98c], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e98c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e995
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e995], 0x101de0fc
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e995
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86ea15
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86ea15], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86ea15
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86ea1e
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86ea1e], 0x101de0f8
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86ea1e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86ea84
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86ea84], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86ea84
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86ea8d
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86ea8d], 0x101de0f4
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86ea8d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86f255
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86f255], 0x101de0f0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86f255
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86f291
call esi
lea ecx, [ebp - 4]
mov dword [0x86f291], 0x101de0e8
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x86f291
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86f2cd
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86f2cd], 0x101de0e4
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86f2cd
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86f24b
call esi
mov edi, 0x101de0ec
lea ecx, [ebp - 4]
push ecx
mov dword [0x86f24b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86f24b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86f287
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86f287], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86f287
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86f2c3
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86f2c3], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86f2c3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e66a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e66a], 0x101de0e0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e66a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e673
call esi
mov dword [0x86e673], 0x101de0dc
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x86e673
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e6f3
call esi
mov edi, 0x101de0d8
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e6f3], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e6f3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e6fc
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e6fc], 0x101de0d4
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e6fc
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e7f8
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e7f8], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e7f8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e801
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e801], 0x101de0d0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e801
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e89a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e89a], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e89a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e8a3
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e8a3], 0x101de0d0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e8a3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86bda8
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86bda8], 0x101de12c
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86bda8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86bdb1
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86bdb1], 0x101de128
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86bdb1
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86df69
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86df69], 0x101de124
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86df69
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86df72
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86df72], 0x101de120
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86df72
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e119
call esi
mov edi, 0x101de11c
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e119], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e119
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e122
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e122], 0x101de118
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e122
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e184
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e184], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e184
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e18d
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e18d], 0x101de114
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e18d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e1ef
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e1ef], 0x101de110
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e1ef
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e1f8
call esi
mov edi, 0x101de10c
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e1f8], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e1f8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e3b7
call esi
lea ecx, [ebp - 4]
mov dword [0x86e3b7], 0x101de108
push ecx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e3b7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e3c0
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e3c0], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e3c0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e4de
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e4de], 0x101de104
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e4de
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86e4e7
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86e4e7], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86e4e7
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x85b31b
fsub qword [0x1005fa78]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x85b31b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x85b31b
call esi
fild dword [0xe61e5c]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d8]
or eax, 0xc00
mov dword [ebp - 8], eax
fsub qword [0x1005fa70]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86d5b4
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86d5b4], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86d5b4
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86d5b9
fsub qword [0x1005fa68]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86d5b9], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86d5b9
call esi
fild dword [0xe61e5c]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d8]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x86dcf3
fsub qword [0x1005fae0]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86dcf3], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86dcf3
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
fsub qword [0x1005fae8]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
push 0x86dcf8
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x86dcf8], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x86dcf8
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x85b602
fsub qword [0x1005fa60]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x85b602], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x85b602
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x85b287
fsub qword [0x1005fa58]
fmul qword [0x1005f950]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x85b287], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x85b287
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x85bcc5
fsub qword [0x1005fa58]
fmul qword [0x1005f950]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
mov dword [0x85bcc5], edi
lea ecx, [ebp - 4]
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x85bcc5
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x85bdea
fsub qword [0x1005fa58]
fmul qword [0x1005f950]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x85bdea], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x85bdea
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret