Function at 0x10005430
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x100248e4]
test al, 1
jne 0x10005468
or eax, 1
mov dword [0x100248e0], 0x1000fd38
push 0x1000edb0
mov dword [0x100248e4], eax
call fcn.1000df04
add esp, 4
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x44e1fc
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x100054a3
lea eax, [ebp - 8]
mov dword [0x44e1fc], 0x10026190
push eax
push dword [ebp - 8]
push 4
push 0x44e1fc
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x47de47
call esi
test eax, eax
je 0x100054d7
lea eax, [ebp - 8]
mov dword [0x47de47], 0x10026190
push eax
push dword [ebp - 8]
push 4
push 0x47de47
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x546b6f
call esi
test eax, eax
je 0x1000550b
lea eax, [ebp - 8]
mov dword [0x546b6f], 0x10026190
push eax
push dword [ebp - 8]
push 4
push 0x546b6f
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x44e1ec
call esi
test eax, eax
je 0x1000553c
lea eax, [ebp - 8]
mov byte [0x44e1ec], 0x32
push eax
push dword [ebp - 8]
push 1
push 0x44e1ec
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x546b64
call esi
test eax, eax
je 0x1000556d
lea eax, [ebp - 8]
mov byte [0x546b64], 0x32
push eax
push dword [ebp - 8]
push 1
push 0x546b64
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x47da39
call esi
test eax, eax
je 0x1000559e
lea eax, [ebp - 8]
mov byte [0x47da39], 0x32
push eax
push dword [ebp - 8]
push 1
push 0x47da39
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x4b8be4
call esi
test eax, eax
je 0x100055cf
lea eax, [ebp - 8]
mov byte [0x4b8be4], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x4b8be4
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x4be4ee
call esi
test eax, eax
je 0x10005600
lea eax, [ebp - 8]
mov byte [0x4be4ee], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x4be4ee
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x4ba5b2
call esi
test eax, eax
je 0x10005631
lea eax, [ebp - 8]
mov byte [0x4ba5b2], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x4ba5b2
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4c42a2
call esi
test eax, eax
je 0x10005665
lea eax, [ebp - 8]
mov dword [0x4c42a2], 0x3e8
push eax
push dword [ebp - 8]
push 4
push 0x4c42a2
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4c453d
call esi
test eax, eax
je 0x10005699
lea eax, [ebp - 8]
mov dword [0x4c453d], 0x3e8
push eax
push dword [ebp - 8]
push 4
push 0x4c453d
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4383c1
call esi
test eax, eax
je 0x100056cd
lea eax, [ebp - 8]
mov dword [0x4383c1], 0x428c0000
push eax
push dword [ebp - 8]
push 4
push 0x4383c1
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4383c6
call esi
test eax, eax
je 0x10005701
lea eax, [ebp - 8]
mov dword [0x4383c6], 0x428c0000
push eax
push dword [ebp - 8]
push 4
push 0x4383c6
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x438606
call esi
test eax, eax
je 0x10005735
lea eax, [ebp - 8]
mov dword [0x438606], 0x428c0000
push eax
push dword [ebp - 8]
push 4
push 0x438606
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x43860b
call esi
test eax, eax
je 0x10005769
lea eax, [ebp - 8]
mov dword [0x43860b], 0x428c0000
push eax
push dword [ebp - 8]
push 4
push 0x43860b
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4384b4
call esi
test eax, eax
je 0x1000579d
lea eax, [ebp - 8]
mov dword [0x4384b4], 0x441d8000
push eax
push dword [ebp - 8]
push 4
push 0x4384b4
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4384c0
call esi
test eax, eax
je 0x100057d1
lea eax, [ebp - 8]
mov dword [0x4384c0], 0x442f0000
push eax
push dword [ebp - 8]
push 4
push 0x4384c0
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4384cc
call esi
test eax, eax
je 0x10005805
lea eax, [ebp - 8]
mov dword [0x4384cc], 0x44408000
push eax
push dword [ebp - 8]
push 4
push 0x4384cc
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4384d8
call esi
test eax, eax
je 0x10005839
lea eax, [ebp - 8]
mov dword [0x4384d8], 0x44520000
push eax
push dword [ebp - 8]
push 4
push 0x4384d8
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4384eb
call esi
test eax, eax
je 0x1000586d
lea eax, [ebp - 8]
mov dword [0x4384eb], 0x428c0000
push eax
push dword [ebp - 8]
push 4
push 0x4384eb
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4384f7
call esi
test eax, eax
je 0x100058a1
lea eax, [ebp - 8]
mov dword [0x4384f7], 0x428c0000
push eax
push dword [ebp - 8]
push 4
push 0x4384f7
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4384fe
call esi
test eax, eax
je 0x100058d5
lea eax, [ebp - 8]
mov dword [0x4384fe], 0x428c0000
push eax
push dword [ebp - 8]
push 4
push 0x4384fe
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x43850a
call esi
test eax, eax
je 0x10005909
lea eax, [ebp - 8]
mov dword [0x43850a], 0x430c0000
push eax
push dword [ebp - 8]
push 4
push 0x43850a
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x438511
call esi
test eax, eax
je 0x1000593d
lea eax, [ebp - 8]
mov dword [0x438511], 0x428c0000
push eax
push dword [ebp - 8]
push 4
push 0x438511
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x43851a
call esi
test eax, eax
je 0x10005971
lea eax, [ebp - 8]
mov dword [0x43851a], 0x43520000
push eax
push dword [ebp - 8]
push 4
push 0x43851a
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x438521
call esi
test eax, eax
je 0x100059a5
lea eax, [ebp - 8]
mov dword [0x438521], 0x428c0000
push eax
push dword [ebp - 8]
push 4
push 0x438521
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x43852a
call esi
test eax, eax
je 0x100059d9
lea eax, [ebp - 8]
mov dword [0x43852a], 0x438c0000
push eax
push dword [ebp - 8]
push 4
push 0x43852a
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x438531
call esi
test eax, eax
je 0x10005a0d
lea eax, [ebp - 8]
mov dword [0x438531], 0x428c0000
push eax
push dword [ebp - 8]
push 4
push 0x438531
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x43853a
call esi
test eax, eax
je 0x10005a41
lea eax, [ebp - 8]
mov dword [0x43853a], 0x43af0000
push eax
push dword [ebp - 8]
push 4
push 0x43853a
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x438541
call esi
test eax, eax
je 0x10005a75
lea eax, [ebp - 8]
mov dword [0x438541], 0x428c0000
push eax
push dword [ebp - 8]
push 4
push 0x438541
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x43854a
call esi
test eax, eax
je 0x10005aa9
lea eax, [ebp - 8]
mov dword [0x43854a], 0x43d20000
push eax
push dword [ebp - 8]
push 4
push 0x43854a
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x438551
call esi
test eax, eax
je 0x10005add
lea eax, [ebp - 8]
mov dword [0x438551], 0x428c0000
push eax
push dword [ebp - 8]
push 4
push 0x438551
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x43855a
call esi
test eax, eax
je 0x10005b11
lea eax, [ebp - 8]
mov dword [0x43855a], 0x43f50000
push eax
push dword [ebp - 8]
push 4
push 0x43855a
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x438561
call esi
test eax, eax
je 0x10005b45
lea eax, [ebp - 8]
mov dword [0x438561], 0x428c0000
push eax
push dword [ebp - 8]
push 4
push 0x438561
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x43856a
call esi
test eax, eax
je 0x10005b79
lea eax, [ebp - 8]
mov dword [0x43856a], 0x440c0000
push eax
push dword [ebp - 8]
push 4
push 0x43856a
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x438571
call esi
test eax, eax
je 0x10005bad
lea eax, [ebp - 8]
mov dword [0x438571], 0x428c0000
push eax
push dword [ebp - 8]
push 4
push 0x438571
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x43857a
call esi
test eax, eax
je 0x10005be1
lea eax, [ebp - 8]
mov dword [0x43857a], 0x441d8000
push eax
push dword [ebp - 8]
push 4
push 0x43857a
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x438581
call esi
test eax, eax
je 0x10005c15
lea eax, [ebp - 8]
mov dword [0x438581], 0x428c0000
push eax
push dword [ebp - 8]
push 4
push 0x438581
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x5bb744
call esi
test eax, eax
je 0x10005c46
lea eax, [ebp - 8]
mov byte [0x5bb744], 0x55
push eax
push dword [ebp - 8]
push 1
push 0x5bb744
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 2
push 0x4890a7
call esi
test eax, eax
je 0x10005c7b
mov eax, 0x164
mov word [0x4890a7], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 2
push 0x4890a7
call esi
sub esp, 8
call fcn.10005360
mov ecx, dword [ebp - 4]
mov al, 1
xor ecx, ebp
pop esi
call fcn.1000dd30
mov esp, ebp
pop ebp
ret