Function at 0x10005db0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10058e40
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x1008d040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.100045c0
call fcn.100051d0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x10005d90
sub eax, 0x10b08795
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 5
push 0x10b08790
call esi
mov edi, dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
test eax, eax
je 0x10005e46
mov eax, dword [ebp - 0x38]
mov byte [0x10b08790], 0xe9
mov dword [0x10b08791], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 5
push 0x10b08790
call esi
test eax, eax
je 0x10005e46
push 5
push 0x10b08790
call ebx
push eax
call edi
mov eax, 0x10005d60
sub eax, 0x10b83875
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x10b83870
call esi
test eax, eax
je 0x10005e95
mov eax, dword [ebp - 0x38]
mov byte [0x10b83870], 0xe9
mov dword [0x10b83871], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x10b83870
call esi
test eax, eax
je 0x10005e95
push 5
push 0x10b83870
call ebx
push eax
call edi
mov eax, 0x10004690
sub eax, 0x10ab8daf
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x10ab8daa
call esi
test eax, eax
je 0x10005ee4
mov eax, dword [ebp - 0x38]
mov byte [0x10ab8daa], 0xe9
mov dword [0x10ab8dab], eax
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
push 5
push 0x10ab8daa
call esi
test eax, eax
je 0x10005ee4
push 5
push 0x10ab8daa
call ebx
push eax
call edi
mov eax, 0x100058d0
sub eax, 0x10af0448
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x20]
push eax
push 0x40
push 5
push 0x10af0443
call esi
test eax, eax
je 0x10005f33
mov eax, dword [ebp - 0x38]
mov byte [0x10af0443], 0xe9
mov dword [0x10af0444], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 5
push 0x10af0443
call esi
test eax, eax
je 0x10005f33
push 5
push 0x10af0443
call ebx
push eax
call edi
mov edx, 0x100058f0
mov ecx, 0x10bfac14
call fcn.10004260
mov eax, 0x100045b0
sub eax, 0x109adfb8
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x24]
push eax
push 0x40
push 5
push 0x109adfb3
call esi
test eax, eax
je 0x10005f91
mov eax, dword [ebp - 0x38]
mov byte [0x109adfb3], 0xe9
mov dword [0x109adfb4], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
push 5
push 0x109adfb3
call esi
test eax, eax
je 0x10005f91
push 5
push 0x109adfb3
call ebx
push eax
call edi
mov eax, 0x10004f30
sub eax, 0x109f1fc8
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x28]
push eax
push 0x40
push 5
push 0x109f1fc3
call esi
test eax, eax
je 0x10005fe0
mov eax, dword [ebp - 0x38]
mov byte [0x109f1fc3], 0xe9
mov dword [0x109f1fc4], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
push 5
push 0x109f1fc3
call esi
test eax, eax
je 0x10005fe0
push 5
push 0x109f1fc3
call ebx
push eax
call edi
mov eax, 0x10005830
sub eax, 0x10912905
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2c]
push eax
push 0x40
push 5
push 0x10912900
call esi
test eax, eax
je 0x1000602f
mov eax, dword [ebp - 0x38]
mov byte [0x10912900], 0xe9
mov dword [0x10912901], eax
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x2c]
push 5
push 0x10912900
call esi
test eax, eax
je 0x1000602f
push 5
push 0x10912900
call ebx
push eax
call edi
mov edx, 0x10004a30
mov ecx, 0x10c02c58
call fcn.10004260
mov edx, 0x10004a30
mov ecx, 0x10c02d08
call fcn.10004260
mov eax, 0x10004bf0
sub eax, 0x10a6674b
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x30]
push eax
push 0x40
push 5
push 0x10a66746
call esi
test eax, eax
je 0x1000609c
mov eax, dword [ebp - 0x38]
mov byte [0x10a66746], 0xe9
mov dword [0x10a66747], eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x30]
push 5
push 0x10a66746
call esi
test eax, eax
je 0x1000609c
push 5
push 0x10a66746
call ebx
push eax
call edi
mov eax, 0x10004ae0
sub eax, 0x10aef54b
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push 0x40
push 5
push 0x10aef546
call esi
test eax, eax
je 0x100060eb
mov eax, dword [ebp - 0x38]
mov byte [0x10aef546], 0xe9
mov dword [0x10aef547], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x34]
push 5
push 0x10aef546
call esi
test eax, eax
je 0x100060eb
push 5
push 0x10aef546
call ebx
push eax
call edi
mov edx, 0x10005a50
mov ecx, 0x10aaaa32
call fcn.100043c0
mov edx, 0x10005ac0
mov ecx, 0x1099b222
call fcn.100043c0
mov edx, 0x10005b80
mov ecx, 0x10a96327
call fcn.100043c0
mov edx, 0x10005bc0
mov ecx, 0x10a963e3
call fcn.100043c0
mov edx, 0x10005c40
mov ecx, 0x10ab2df0
call fcn.100043c0
mov edx, 0x10005c70
mov ecx, 0x10ab4015
call fcn.100043c0
mov edx, 0x10005c90
mov ecx, 0x10ab35e7
call fcn.100043c0
mov edx, 0x10005d10
mov ecx, 0x10ab3b9f
call fcn.100043c0
cmp byte [0x1009058d], 0
je 0x10006190
mov edx, 0x10004fa0
mov ecx, 0x10b2d1c0
call fcn.100043c0
push ecx
lea edx, [ebp - 0x39]
mov byte [ebp - 0x39], 0xeb
mov ecx, 0x10b2ce1b
call fcn.10004100
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100574bd
mov esp, ebp
pop ebp
ret