Function at 0x10005a0f
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
call fcn.10005e2c
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0x12c
call fcn.10006ee3
mov dword [ebp - 4], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10005a52
push 6
call fcn.1001283c
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0x40
push 0x1000
push 0x64
push 0
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x10005a8b
push 6
call fcn.1001283c
add esp, 4
mov dword [0x1003765a], eax
push dword [0x1003765e]
call fcn.100071e5
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0x12c
call fcn.10006ee3
mov dword [ebp - 4], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10005ad0
push 6
call fcn.1001283c
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0x40
push 0x1000
push 0x64
push 0
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x10005b09
push 6
call fcn.1001283c
add esp, 4
mov dword [0x10037662], eax
push 0x98b05a
call fcn.100089fe
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov eax, 0x100355e7
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.10003403
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10005b48
push ebx
call fcn.10012848
add esp, 4
push 1
push dword [ebp - 0xc]
push 0x10037666
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov dword [0x1003766a], 0x120f32a
call fcn.10008caa
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x70
push 0x1000b558
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x71
push 0x1000bde9
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x72
push 0x1000c0f1
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x73
push 0x1000cab8
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x74
push 0x1000dd5e
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x75
push 0x1000e631
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x76
push 0x1000f077
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x77
push 0x1000f3f6
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0xc0
push 0x1000fd9b
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x56
push 0x100103b8
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x42
push 0x100107ee
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x26
push 0x100112d5
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x28
push 0x100114d5
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x25
push 0x100116d5
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 1
push 0x27
push 0x100118d5
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x26
push 0x100118e1
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x28
push 0x100118ed
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x25
push 0x100118f9
call fcn.10004c77
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 1
push 2
push 0x27
push 0x10011905
call fcn.10004c77
mov esp, ebp
pop ebp
ret