Function at 0x100629c0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push edi
push eax
push 0x40
push 0x12
mov ebx, 0xa364
mov dword [0x105f5f38], 0
mov edi, 0xe0ff
mov byte [0x105f5f3c], 0
push 0x105f5f68
mov dword [0x105f5f60], 0x100656d0
mov dword [0x105f5f64], 0x105f5f38
mov byte [0x105f5f68], 0xb8
mov dword [0x105f5f69], 0
mov word [0x105f5f6d], bx
mov dword [0x105f5f6f], 0x14
mov byte [0x105f5f73], 0xb8
mov dword [0x105f5f74], 0
mov word [0x105f5f78], di
mov dword [ebp - 4], 0
call esi
lea eax, [ebp - 4]
mov dword [0x105f5f69], 0x105f5f60
push eax
push 0x40
push 0x12
push 0x105f5f84
mov dword [0x105f5f74], 0x10065b00
mov dword [0x105f5f7c], 0x10063640
mov dword [0x105f5f80], 0x105f5f38
mov byte [0x105f5f84], 0xb8
mov dword [0x105f5f85], 0
mov word [0x105f5f89], bx
mov dword [0x105f5f8b], 0x14
mov byte [0x105f5f8f], 0xb8
mov dword [0x105f5f90], 0
mov word [0x105f5f94], di
mov dword [ebp - 4], 0
call esi
lea eax, [ebp - 4]
mov dword [0x105f5f85], 0x105f5f7c
push eax
push 0x40
push 0x12
push 0x105f5fc0
mov dword [0x105f5f90], 0x10065ae0
mov dword [0x105f5f9c], 0x7d5f98
mov dword [0x105f5fa0], 0x105f5f84
mov dword [0x105f5fac], 0
mov dword [0x105f5fb0], 0
mov dword [0x105f5fb4], 0
mov byte [0x105f5f98], 0xe8
mov dword [0x105f5fa4], 0
mov word [0x105f5fa8], 0
mov dword [0x105f5fb8], 0x100636c0
mov dword [0x105f5fbc], 0x105f5f38
mov byte [0x105f5fc0], 0xb8
mov dword [0x105f5fc1], 0
mov word [0x105f5fc5], bx
mov dword [0x105f5fc7], 0x14
mov byte [0x105f5fcb], 0xb8
mov dword [0x105f5fcc], 0
mov word [0x105f5fd0], di
mov dword [ebp - 4], 0
call esi
mov dword [0x105f5fc1], 0x105f5fb8
mov dword [0x105f5fcc], 0x10065ae0
mov dword [0x105f5fd8], 0x55cf28
mov dword [0x105f5fdc], 0x105f5fc0
mov dword [0x105f5fe8], 0
mov dword [0x105f5fec], 0
mov dword [0x105f5ff0], 0
mov byte [0x105f5fd4], 0xe8
mov dword [0x105f5fe0], 0
mov word [0x105f5fe4], 0
mov dword [0x105f5ff4], 0x10063720
mov dword [0x105f5ff8], 0x105f5f38
mov byte [0x105f5ffc], 0xb8
lea eax, [ebp - 4]
mov dword [0x105f5ffd], 0
push eax
push 0x40
push 0x12
push 0x105f5ffc
mov word [0x105f6001], bx
mov dword [0x105f6003], 0x14
mov byte [0x105f6007], 0xb8
mov dword [0x105f6008], 0
mov word [0x105f600c], di
mov dword [ebp - 4], 0
call esi
lea eax, [ebp - 4]
mov dword [0x105f5ffd], 0x105f5ff4
push eax
push 0x40
push 0x12
push 0x105f6038
mov dword [0x105f6008], 0x10065ab0
mov dword [0x105f6014], 0x7d53ba
mov dword [0x105f6018], 0x105f5ffc
mov dword [0x105f6024], 0
mov dword [0x105f6028], 0
mov dword [0x105f602c], 0
mov byte [0x105f6010], 0xe8
mov dword [0x105f601c], 0
mov word [0x105f6020], 0
mov dword [0x105f6030], 0x10063790
mov dword [0x105f6034], 0x105f5f38
mov byte [0x105f6038], 0xb8
mov dword [0x105f6039], 0
mov word [0x105f603d], bx
mov dword [0x105f603f], 0x14
mov byte [0x105f6043], 0xb8
mov dword [0x105f6044], 0
mov word [0x105f6048], di
mov dword [ebp - 4], 0
call esi
pop edi
pop esi
mov dword [0x105f6039], 0x105f6030
mov eax, 0x105f5f38
mov dword [0x105f6044], 0x10065a90
mov dword [0x105f6050], 0x97cbc2
mov dword [0x105f6054], 0x105f6038
mov dword [0x105f6060], 0
mov dword [0x105f6064], 0
mov dword [0x105f6068], 0
mov byte [0x105f604c], 0xe8
mov dword [0x105f6058], 0
mov word [0x105f605c], 0
pop ebx
mov esp, ebp
pop ebp
ret