Function at 0x10005e50
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10047910
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x1007c040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.100046c0
call fcn.100052d0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x10005e30
sub eax, 0x10b08795
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 5
push 0x10b08790
call esi
mov edi, dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
test eax, eax
je 0x10005ee6
mov eax, dword [ebp - 0x38]
mov byte [0x10b08790], 0xe9
mov dword [0x10b08791], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 5
push 0x10b08790
call esi
test eax, eax
je 0x10005ee6
push 5
push 0x10b08790
call ebx
push eax
call edi
mov eax, 0x10005e00
sub eax, 0x10b83875
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x10b83870
call esi
test eax, eax
je 0x10005f35
mov eax, dword [ebp - 0x38]
mov byte [0x10b83870], 0xe9
mov dword [0x10b83871], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x10b83870
call esi
test eax, eax
je 0x10005f35
push 5
push 0x10b83870
call ebx
push eax
call edi
mov eax, 0x10004790
sub eax, 0x10ab8daf
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x10ab8daa
call esi
test eax, eax
je 0x10005f84
mov eax, dword [ebp - 0x38]
mov byte [0x10ab8daa], 0xe9
mov dword [0x10ab8dab], eax
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
push 5
push 0x10ab8daa
call esi
test eax, eax
je 0x10005f84
push 5
push 0x10ab8daa
call ebx
push eax
call edi
mov eax, 0x10005970
sub eax, 0x10af0448
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x20]
push eax
push 0x40
push 5
push 0x10af0443
call esi
test eax, eax
je 0x10005fd3
mov eax, dword [ebp - 0x38]
mov byte [0x10af0443], 0xe9
mov dword [0x10af0444], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 5
push 0x10af0443
call esi
test eax, eax
je 0x10005fd3
push 5
push 0x10af0443
call ebx
push eax
call edi
mov edx, 0x10005990
mov ecx, 0x10bfac14
call fcn.10004360
mov eax, 0x100046b0
sub eax, 0x109adfb8
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x24]
push eax
push 0x40
push 5
push 0x109adfb3
call esi
test eax, eax
je 0x10006031
mov eax, dword [ebp - 0x38]
mov byte [0x109adfb3], 0xe9
mov dword [0x109adfb4], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
push 5
push 0x109adfb3
call esi
test eax, eax
je 0x10006031
push 5
push 0x109adfb3
call ebx
push eax
call edi
mov eax, 0x10005030
sub eax, 0x109f1fc8
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x28]
push eax
push 0x40
push 5
push 0x109f1fc3
call esi
test eax, eax
je 0x10006080
mov eax, dword [ebp - 0x38]
mov byte [0x109f1fc3], 0xe9
mov dword [0x109f1fc4], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
push 5
push 0x109f1fc3
call esi
test eax, eax
je 0x10006080
push 5
push 0x109f1fc3
call ebx
push eax
call edi
mov eax, 0x100058d0
sub eax, 0x10912905
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2c]
push eax
push 0x40
push 5
push 0x10912900
call esi
test eax, eax
je 0x100060cf
mov eax, dword [ebp - 0x38]
mov byte [0x10912900], 0xe9
mov dword [0x10912901], eax
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x2c]
push 5
push 0x10912900
call esi
test eax, eax
je 0x100060cf
push 5
push 0x10912900
call ebx
push eax
call edi
mov edx, 0x10004b30
mov ecx, 0x10c02c58
call fcn.10004360
mov edx, 0x10004b30
mov ecx, 0x10c02d08
call fcn.10004360
mov eax, 0x10004cf0
sub eax, 0x10a6674b
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x30]
push eax
push 0x40
push 5
push 0x10a66746
call esi
test eax, eax
je 0x1000613c
mov eax, dword [ebp - 0x38]
mov byte [0x10a66746], 0xe9
mov dword [0x10a66747], eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x30]
push 5
push 0x10a66746
call esi
test eax, eax
je 0x1000613c
push 5
push 0x10a66746
call ebx
push eax
call edi
mov eax, 0x10004be0
sub eax, 0x10aef54b
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push 0x40
push 5
push 0x10aef546
call esi
test eax, eax
je 0x1000618b
mov eax, dword [ebp - 0x38]
mov byte [0x10aef546], 0xe9
mov dword [0x10aef547], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x34]
push 5
push 0x10aef546
call esi
test eax, eax
je 0x1000618b
push 5
push 0x10aef546
call ebx
push eax
call edi
mov edx, 0x10005af0
mov ecx, 0x10aaaa32
call fcn.100044c0
mov edx, 0x10005b60
mov ecx, 0x1099b222
call fcn.100044c0
mov edx, 0x10005c20
mov ecx, 0x10a96327
call fcn.100044c0
mov edx, 0x10005c60
mov ecx, 0x10a963e3
call fcn.100044c0
mov edx, 0x10005ce0
mov ecx, 0x10ab2df0
call fcn.100044c0
mov edx, 0x10005d10
mov ecx, 0x10ab4015
call fcn.100044c0
mov edx, 0x10005d30
mov ecx, 0x10ab35e7
call fcn.100044c0
mov edx, 0x10005db0
mov ecx, 0x10ab3b9f
call fcn.100044c0
cmp byte [0x10080355], 0
je 0x10006230
mov edx, 0x100050a0
mov ecx, 0x10b2d1c0
call fcn.100044c0
push ecx
lea edx, [ebp - 0x39]
mov byte [ebp - 0x39], 0xeb
mov ecx, 0x10b2ce1b
call fcn.10004200
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10046167
mov esp, ebp
pop ebp
ret