Function at 0x1005e280
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x68
mov eax, dword [0x1013e00c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 0x48
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
je 0x1005e2c4
mov eax, dword [0x1051c598]
mov byte [eax + 0x29], 0
mov eax, dword [0x1051c598]
cmp byte [eax + 0x29], 0
jne 0x1005e2e4
xor al, al
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d7712
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x2c
mov ecx, 0x10150cf0
call fcn.10042d90
push eax
push dword [0x1051c598]
push 0x102e59ac
call fcn.10010280
mov ecx, dword [0x1051c598]
add esp, 0xc
mov byte [ebp - 0x23], al
movss xmm0, dword [ecx + 4]
addss xmm0, dword [0x10135b18]
push 0x1012f457
sub esp, 8
movss dword [esp + 4], xmm0
movss xmm0, dword [ecx]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x101357e0]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push dword [0x1051c590]
push 0x102e59ac
call fcn.10010c60
add esp, 0x14
test al, al
je 0x1005e360
mov eax, dword [0x1051c598]
mov byte [eax + 0x29], 0
push 0x4e
mov ecx, 0x10150cf0
call fcn.10042d90
push 0x4f
mov ecx, 0x10150cf0
mov dword [ebp - 0x68], eax
call fcn.10042d90
push 0x50
mov ecx, 0x10150cf0
mov dword [ebp - 0x64], eax
call fcn.10042d90
push 0x51
mov ecx, 0x10150cf0
mov dword [ebp - 0x60], eax
call fcn.10042d90
push 0x52
mov ecx, 0x10150cf0
mov dword [ebp - 0x5c], eax
call fcn.10042d90
push 0x5b
mov ecx, 0x10150cf0
mov dword [ebp - 0x58], eax
call fcn.10042d90
push 0x57
mov ecx, 0x10150cf0
mov dword [ebp - 0x54], eax
call fcn.10042d90
push 0x54
mov ecx, 0x10150cf0
mov dword [ebp - 0x50], eax
call fcn.10042d90
push 0x55
mov ecx, 0x10150cf0
mov dword [ebp - 0x4c], eax
call fcn.10042d90
push 0x56
mov ecx, 0x10150cf0
mov dword [ebp - 0x48], eax
call fcn.10042d90
push 0x58
mov ecx, 0x10150cf0
mov dword [ebp - 0x44], eax
call fcn.10042d90
push 0x5c
mov ecx, 0x10150cf0
mov dword [ebp - 0x40], eax
call fcn.10042d90
push 0x5d
mov ecx, 0x10150cf0
mov dword [ebp - 0x3c], eax
call fcn.10042d90
push 0x59
mov ecx, 0x10150cf0
mov dword [ebp - 0x38], eax
call fcn.10042d90
push 0x5a
mov ecx, 0x10150cf0
mov dword [ebp - 0x34], eax
call fcn.10042d90
push 0x157
mov ecx, 0x10150cf0
mov dword [ebp - 0x30], eax
call fcn.10042d90
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
xor cl, cl
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x21], cl
movsx ecx, cl
push dword [ebp + ecx*4 - 0x68]
lea eax, [ecx + ecx*4]
shl eax, 2
sub esp, 8
movd xmm1, eax
mov eax, dword [0x1051c598]
cvtdq2ps xmm1, xmm1
movss xmm0, dword [eax + 4]
addss xmm0, dword [0x10135ba8]
addss xmm1, xmm0
movss xmm0, dword [eax]
addss xmm0, dword [0x10135b00]
movss dword [esp + 4], xmm1
movss dword [esp], xmm0
push dword [ecx*4 + 0x1051c59c]
push 0x102e59ac
call fcn.1000fd10
mov cl, byte [ebp - 0x21]
add esp, 0x14
test al, al
je 0x1005e8ff
test cl, cl
jne 0x1005e4dd
cmp byte [0x1013ee4c], cl
sete byte [0x1013ee4c]
jmp 0x1005e8ff
cmp cl, 1
jne 0x1005e4f7
xor eax, eax
cmp dword [0x102b7880], eax
sete al
mov dword [0x102b7880], eax
jmp 0x1005e8ff
cmp cl, 2
jne 0x1005e50f
cmp byte [0x10188c3d], 1
setne byte [0x10188c3d]
jmp 0x1005e8ff
cmp cl, 3
jne 0x1005e529
xor eax, eax
cmp dword [0x102b78b0], eax
sete al
mov dword [0x102b78b0], eax
jmp 0x1005e8ff
cmp cl, 4
jne 0x1005e541
cmp byte [0x1018903d], 1
setne byte [0x1018903d]
jmp 0x1005e8ff
cmp cl, 5
jne 0x1005e5af
cmp dword [0x102b78ac], 0
je 0x1005e572
push 0xe8
mov edx, 0x6097b0
mov ecx, 0x57655b
call fcn.100c7ff0
add esp, 4
xor eax, eax
mov dword [0x102b78ac], eax
jmp 0x1005e8fc
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x57655b
call esi
mov eax, 0x57655b
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push 5
push 0x57655b
call esi
mov eax, 1
mov dword [0x102b78ac], eax
jmp 0x1005e8fc
cmp cl, 6
jne 0x1005e64a
cmp dword [0x102b78a8], 0
lea eax, [ebp - 8]
push eax
push 0x40
push 1
mov dword [ebp - 8], 0
push 0x5de2b2
je 0x1005e60e
mov byte [ebp - 0x22], 0
call esi
test eax, eax
je 0x1005e600
mov al, byte [ebp - 0x22]
mov ecx, 0x5de2b2
mov byte [ecx], al
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 8]
mov dword [ebp - 0x1c], 0
push 1
push ecx
call esi
test eax, eax
jne 0x1005e602
call edi
xor eax, eax
mov dword [0x102b78a8], eax
jmp 0x1005e8fc
mov byte [ebp - 0x22], 1
call esi
test eax, eax
je 0x1005e639
mov al, byte [ebp - 0x22]
mov ecx, 0x5de2b2
mov byte [ecx], al
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 8]
mov dword [ebp - 0x20], 0
push 1
push ecx
call esi
test eax, eax
jne 0x1005e63b
call edi
mov eax, 1
mov dword [0x102b78a8], eax
jmp 0x1005e8fc
cmp cl, 7
jne 0x1005e6a6
cmp dword [0x102b78a4], 0
je 0x1005e680
push 0x1002e830
push 0x60b36a
push 0xe9
call fcn.100c88d0
add esp, 0xc
call fcn.1002e8f0
xor eax, eax
mov dword [0x102b78a4], eax
jmp 0x1005e8fc
push 0x1002e6e0
push 0x60b36a
push 0xe9
call fcn.100c88d0
mov eax, 1
add esp, 0xc
mov dword [0x102b78a4], eax
jmp 0x1005e8fc
cmp cl, 8
jne 0x1005e6d9
cmp dword [0x102b78a0], 0
je 0x1005e6c5
call fcn.1002ea30
xor eax, eax
mov dword [0x102b78a0], eax
jmp 0x1005e8fc
call fcn.1002e9a0
mov eax, 1
mov dword [0x102b78a0], eax
jmp 0x1005e8fc
cmp cl, 9
jne 0x1005e747
cmp dword [0x102b789c], 0
je 0x1005e70a
push 0xe8
mov edx, 0x5655c0
mov ecx, 0x588661
call fcn.100c7ff0
add esp, 4
xor eax, eax
mov dword [0x102b789c], eax
jmp 0x1005e8fc
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x588661
call esi
mov eax, 0x588661
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x10]
push 5
push 0x588661
call esi
mov eax, 1
mov dword [0x102b789c], eax
jmp 0x1005e8fc
cmp cl, 0xa
jne 0x1005e78c
cmp dword [0x102b7898], 0
je 0x1005e75e
xor edi, edi
mov eax, 0x1002eaf0
jmp 0x1005e768
mov edi, 1
mov eax, 0x1002eae0
push eax
push 0x57d278
push 0xe9
call fcn.100c88d0
mov dword [0x102b7898], edi
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1005e8fc
cmp cl, 0xb
jne 0x1005e7d1
cmp dword [0x102b7894], 0
je 0x1005e7a3
xor edi, edi
mov eax, 0x1002eb50
jmp 0x1005e7ad
mov edi, 1
mov eax, 0x1002eb40
push eax
push 0x771328
push 0xe9
call fcn.100c88d0
mov dword [0x102b7894], edi
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1005e8fc
cmp cl, 0xc
jne 0x1005e816
cmp dword [0x102b7890], 0
je 0x1005e7e8
xor edi, edi
mov eax, 0x1002eb70
jmp 0x1005e7f2
mov edi, 1
mov eax, 0x1002eb60
push eax
push 0x74cd50
push 0xe9
call fcn.100c88d0
mov dword [0x102b7890], edi
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1005e8fc
cmp cl, 0xd
jne 0x1005e888
cmp dword [0x102b788c], 0
je 0x1005e856
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x54a270
call esi
lea eax, [ebp - 0x14]
mov byte [0x54a270], 0x55
push eax
push dword [ebp - 0x14]
push 1
push 0x54a270
call esi
xor eax, eax
mov dword [0x102b788c], eax
jmp 0x1005e8fc
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x54a270
call esi
lea eax, [ebp - 0x18]
mov byte [0x54a270], 0xc3
push eax
push dword [ebp - 0x18]
push 1
push 0x54a270
call esi
mov eax, 1
mov dword [0x102b788c], eax
jmp 0x1005e8fc
cmp cl, 0xe
jne 0x1005e8b5
cmp dword [0x102b7888], 0
je 0x1005e8a4
call fcn.1002eca0
xor eax, eax
mov dword [0x102b7888], eax
jmp 0x1005e8fc
call fcn.1002ec20
mov eax, 1
mov dword [0x102b7888], eax
jmp 0x1005e8fc
cmp cl, 0xf
jne 0x1005e8ff
cmp dword [0x102b78dc], 0
mov ecx, 0x5f8924
je 0x1005e8e3
push 0xe8
mov edx, 0x95a1e0
call fcn.100c7ff0
mov dword [0x102b78dc], 0
jmp 0x1005e8f9
push 5
mov edx, 0x90
call fcn.100c8990
mov dword [0x102b78dc], 1
add esp, 4
mov cl, byte [ebp - 0x21]
inc cl
mov byte [ebp - 0x21], cl
cmp cl, 0x10
jl 0x1005e464
mov ecx, dword [ebp - 4]
mov al, byte [ebp - 0x23]
xor ecx, ebp
pop edi
pop esi
call fcn.100d7712
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret