Function at 0x10005750
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1001022d], 0
je 0x10006121
cmp dword [0x1001023c], 0
push esi
mov esi, dword [sym.imp.ntdll.dll_NtProtectVirtualMemory]
mov byte [0x1001022b], 1
mov byte [0x1001022d], 0
je 0x100057d5
mov eax, dword [0x10010234]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x10
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010234]
movups xmm0, xmmword [0x10010240]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x1001023c], 0
cmp dword [0x1001029c], 0
je 0x10005832
mov eax, dword [0x10010294]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010294]
movups xmm0, xmmword [0x100102a0]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x1001029c], 0
cmp dword [0x100102fc], 0
je 0x1000588f
mov eax, dword [0x100102f4]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x100102f4]
movups xmm0, xmmword [0x10010300]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x100102fc], 0
cmp dword [0x1001035c], 0
je 0x100058ec
mov eax, dword [0x10010354]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010354]
movups xmm0, xmmword [0x10010360]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x1001035c], 0
cmp dword [0x100103bc], 0
je 0x10005949
mov eax, dword [0x100103b4]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x100103b4]
movups xmm0, xmmword [0x100103c0]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x100103bc], 0
cmp dword [0x1001041c], 0
je 0x100059a6
mov eax, dword [0x10010414]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010414]
movups xmm0, xmmword [0x10010420]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x1001041c], 0
cmp dword [0x1001047c], 0
je 0x10005a03
mov eax, dword [0x10010474]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010474]
movups xmm0, xmmword [0x10010480]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x1001047c], 0
cmp dword [0x100104dc], 0
je 0x10005a60
mov eax, dword [0x100104d4]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x100104d4]
movups xmm0, xmmword [0x100104e0]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x100104dc], 0
cmp dword [0x100106bc], 0
je 0x10005abd
mov eax, dword [0x100106b4]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x100106b4]
movups xmm0, xmmword [0x100106c0]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x100106bc], 0
cmp dword [0x1001071c], 0
je 0x10005b1a
mov eax, dword [0x10010714]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010714]
movups xmm0, xmmword [0x10010720]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x1001071c], 0
cmp dword [0x1001077c], 0
je 0x10005b77
mov eax, dword [0x10010774]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010774]
movups xmm0, xmmword [0x10010780]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x1001077c], 0
cmp dword [0x100107dc], 0
je 0x10005bd4
mov eax, dword [0x100107d4]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x100107d4]
movups xmm0, xmmword [0x100107e0]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x100107dc], 0
cmp dword [0x1001059c], 0
je 0x10005c31
mov eax, dword [0x10010594]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010594]
movups xmm0, xmmword [0x100105a0]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x1001059c], 0
cmp dword [0x1001053c], 0
je 0x10005c8e
mov eax, dword [0x10010534]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010534]
movups xmm0, xmmword [0x10010540]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x1001053c], 0
cmp dword [0x100105fc], 0
je 0x10005ceb
mov eax, dword [0x100105f4]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x100105f4]
movups xmm0, xmmword [0x10010600]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x100105fc], 0
cmp dword [0x1001065c], 0
je 0x10005d48
mov eax, dword [0x10010654]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010654]
movups xmm0, xmmword [0x10010660]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x1001065c], 0
cmp dword [0x1001083c], 0
je 0x10005da5
mov eax, dword [0x10010834]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010834]
movups xmm0, xmmword [0x10010840]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x1001083c], 0
cmp dword [0x1001089c], 0
je 0x10005e02
mov eax, dword [0x10010894]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010894]
movups xmm0, xmmword [0x100108a0]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x1001089c], 0
cmp dword [0x100108fc], 0
je 0x10005e5f
mov eax, dword [0x100108f4]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x100108f4]
movups xmm0, xmmword [0x10010900]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x100108fc], 0
cmp dword [0x100109bc], 0
je 0x10005ebc
mov eax, dword [0x100109b4]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x100109b4]
movups xmm0, xmmword [0x100109c0]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x100109bc], 0
cmp dword [0x1001095c], 0
je 0x10005f19
mov eax, dword [0x10010954]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010954]
movups xmm0, xmmword [0x10010960]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x1001095c], 0
cmp dword [0x10010a1c], 0
je 0x10005f76
mov eax, dword [0x10010a14]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010a14]
movups xmm0, xmmword [0x10010a20]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x10010a1c], 0
cmp dword [0x10010a7c], 0
je 0x10005fd3
mov eax, dword [0x10010a74]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010a74]
movups xmm0, xmmword [0x10010a80]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x10010a7c], 0
cmp dword [0x10010adc], 0
je 0x10006030
mov eax, dword [0x10010ad4]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x10
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
push 0xffffffffffffffff
call esi
mov eax, dword [0x10010ad4]
movups xmm0, xmmword [0x10010ae0]
movups xmmword [eax], xmm0
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
call esi
mov dword [0x10010adc], 0
mov esi, dword [0x10010b90]
mov dword [0x10010b90], 0
test esi, esi
je 0x10006070
mov ecx, esi
call fcn.10006970
mov ecx, dword [esi + 0x2c]
lea eax, [ecx + 1]
cmp eax, 1
jbe 0x1000605d
push ecx
call dword [sym.imp.ntdll.dll_NtClose]
lea ecx, [esi + 0x18]
call fcn.10006880
push 0x68
push esi
call fcn.10001f60
add esp, 8
mov esi, dword [0x10010b94]
mov dword [0x10010b94], 0
test esi, esi
je 0x1000610d
mov ecx, esi
call fcn.10004bb0
mov ecx, dword [esi + 0x3720]
lea eax, [ecx + 1]
cmp eax, 1
jbe 0x100060a4
push ecx
call dword [sym.imp.ntdll.dll_NtClose]
mov edx, dword [esi + 0x2a18]
cmp edx, dword [esi + 0x2a1c]
jbe 0x100060c7
mov ecx, dword [esi + 0x2a10]
call fcn.100088d0
mov dword [esi + 0x2a18], 0
lea eax, [esi + 0x2a20]
mov dword [esi + 0x2a14], 0
mov dword [esi + 0x2a10], eax
mov edx, dword [esi + 8]
cmp edx, dword [esi + 0xc]
jbe 0x100060f3
mov ecx, dword [esi]
call fcn.100088d0
mov dword [esi + 8], 0
lea eax, [esi + 0x10]
mov dword [esi + 4], 0
push 0x3738
push esi
mov dword [esi], eax
call fcn.10001f60
add esp, 8
push 0x10012790
push str._s_Disabled_n
call dword [fcn.10010bf8]
add esp, 8
pop esi
xor eax, eax
mov esp, ebp
pop ebp
ret