Function at 0x1000d040
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [ebp + 8], 0
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
je 0x1000d5dd
lea eax, [ebp - 4]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x567be5
call edi
push eax
call esi
mov eax, 0x1000fcf0
sub eax, 0x567bea
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x567be6
call edi
push eax
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 2
push 0x567bea
call ebx
mov eax, 0x567bea
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 2
push 0x567bea
call ebx
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x567bf4
call edi
push eax
call esi
mov eax, 0x10012b90
sub eax, 0x567bf9
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x567bf5
call edi
push eax
call esi
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x546c01
call edi
push eax
call esi
mov eax, 0x100131e0
sub eax, 0x546c06
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x546c02
call edi
push eax
call esi
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x1007b5b8], eax
lea eax, [ebp - 8]
push eax
push 1
lea eax, [ebp + 0xb]
mov byte [ebp + 0xb], 0xe9
push eax
push 0x51e8a9
call edi
push eax
call esi
mov eax, 0x10013390
sub eax, 0x51e8ae
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x51e8aa
call edi
push eax
call esi
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x51b182
call edi
push eax
call esi
mov eax, 0x100146a0
sub eax, 0x51b187
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x51b183
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0xeb
push eax
push 0x522bcf
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0xeb
push eax
push 0x522c59
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0xeb
push eax
push 0x522cab
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0xeb
push eax
push 0x522f39
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x43
push eax
push 0x522f3a
call edi
push eax
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push 0x522f3b
call ebx
mov eax, 0x522f3b
mov dword [eax], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 4
push 0x522f3b
call ebx
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x546755
call edi
push eax
call esi
mov eax, 0x10013350
sub eax, 0x54675a
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x546756
call edi
push eax
call esi
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x522c51
call edi
push eax
call esi
mov eax, 0x10013290
sub eax, 0x522c56
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x522c52
call edi
push eax
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push 0x522c56
call ebx
mov eax, 0x522c56
mov byte [eax], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 1
push 0x522c56
call ebx
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x45af93
call edi
push eax
call esi
mov eax, 0x10014090
sub eax, 0x45af98
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x45af94
call edi
push eax
call esi
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x5231a6
call edi
push eax
call esi
mov eax, 0x100132c0
sub eax, 0x5231ab
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x5231a7
call edi
push eax
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push 0x5231ab
call ebx
mov eax, 0x5231ab
mov byte [eax], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 1
push 0x5231ab
call ebx
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x5231bc
call edi
push eax
call esi
mov eax, 0x100132e0
sub eax, 0x5231c1
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x5231bd
call edi
push eax
call esi
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x522fb4
call edi
push eax
call esi
mov eax, 0x10013330
sub eax, 0x522fb9
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x522fb5
call edi
push eax
call esi
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x51e5ee
call edi
push eax
call esi
mov eax, 0x10011b50
sub eax, 0x51e5f3
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x51e5ef
call edi
push eax
call esi
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x45235b
call edi
push eax
call esi
mov eax, 0x10011b70
sub eax, 0x452360
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x45235c
call edi
push eax
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 2
push 0x452360
call ebx
mov eax, 0x452360
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 2
push 0x452360
call ebx
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x522cf8
call edi
push eax
call esi
mov eax, 0x10011b90
sub eax, 0x522cfd
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x522cf9
call edi
push eax
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push 0x522cfd
call ebx
mov eax, 0x522cfd
mov byte [eax], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 1
push 0x522cfd
call ebx
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x544baf
call edi
push eax
call esi
mov eax, 0x10011bb0
sub eax, 0x544bb4
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x544bb0
call edi
push eax
call esi
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x523072
call edi
push eax
call esi
mov eax, 0x10011be0
sub eax, 0x523077
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x523073
call edi
push eax
call esi
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x546d71
call edi
push eax
call esi
mov eax, 0x10013370
sub eax, 0x546d76
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x546d72
call edi
push eax
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push 0x546d76
call ebx
mov eax, 0x546d76
mov byte [eax], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 1
push 0x546d76
call ebx
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0xeb
push eax
push 0x522a76
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x3b
push eax
push 0x51821e
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x42
push eax
push 0x51821f
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0xf
push eax
push 0x518220
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x3e
push eax
push 0x51714a
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x42
push eax
push 0x51714b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0xf
push eax
push 0x51714c
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x3d
push eax
push 0x517063
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x42
push eax
push 0x517064
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0xf
push eax
push 0x517065
call edi
push eax
call esi
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x4528dc
call edi
push eax
call esi
mov eax, 0x1000b280
sub eax, 0x4528e1
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x4528dd
call edi
push eax
call esi
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x555440
call edi
push eax
call esi
mov eax, 0x1000c0e0
sub eax, 0x555445
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x555441
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 1
push eax
push 0x52237d
call edi
push eax
call esi
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x522368
call edi
push eax
call esi
mov eax, 0x1000fd20
sub eax, 0x52236d
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x522369
call edi
push eax
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push 0x52236d
call ebx
mov eax, 0x52236d
mov byte [eax], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 1
push 0x52236d
call ebx
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x66
push eax
push 0x522390
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 2
push eax
push 0x52238e
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 9
push eax
push 0x4529d5
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x1f
push eax
push 0x4529de
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 1
push eax
push 0x4529df
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0xa8
push eax
push 0x452881
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0xff
push eax
push 0x4528a9
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x56
push eax
push 0x4528d2
call edi
push eax
call esi
mov byte [ebp + 8], 0xa
push 0
push 1
lea eax, [ebp + 8]
push eax
push 0x452847
call edi
push eax
call esi
lea eax, [ebp - 8]
mov byte [ebp + 0xb], 0xe9
push eax
push 1
lea eax, [ebp + 0xb]
push eax
push 0x452852
call edi
push eax
call esi
mov eax, 0x10015140
sub eax, 0x452857
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
push 0x452853
call edi
push eax
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret