Function at 0x10005cf0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100540b0
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x10087040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.100045c0
call fcn.100051d0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x10004690
sub eax, 0x10ab8daf
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 5
push 0x10ab8daa
call esi
mov edi, dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
test eax, eax
je 0x10005d86
mov eax, dword [ebp - 0x38]
mov byte [0x10ab8daa], 0xe9
mov dword [0x10ab8dab], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 5
push 0x10ab8daa
call esi
test eax, eax
je 0x10005d86
push 5
push 0x10ab8daa
call ebx
push eax
call edi
mov eax, 0x10005870
sub eax, 0x10af0448
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x10af0443
call esi
test eax, eax
je 0x10005dd5
mov eax, dword [ebp - 0x38]
mov byte [0x10af0443], 0xe9
mov dword [0x10af0444], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x10af0443
call esi
test eax, eax
je 0x10005dd5
push 5
push 0x10af0443
call ebx
push eax
call edi
mov edx, 0x10005890
mov ecx, 0x10bfac14
call fcn.10004260
mov eax, 0x100045b0
sub eax, 0x109adfb8
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x109adfb3
call esi
test eax, eax
je 0x10005e33
mov eax, dword [ebp - 0x38]
mov byte [0x109adfb3], 0xe9
mov dword [0x109adfb4], eax
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
push 5
push 0x109adfb3
call esi
test eax, eax
je 0x10005e33
push 5
push 0x109adfb3
call ebx
push eax
call edi
mov eax, 0x10004f30
sub eax, 0x109f1fc8
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x20]
push eax
push 0x40
push 5
push 0x109f1fc3
call esi
test eax, eax
je 0x10005e82
mov eax, dword [ebp - 0x38]
mov byte [0x109f1fc3], 0xe9
mov dword [0x109f1fc4], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 5
push 0x109f1fc3
call esi
test eax, eax
je 0x10005e82
push 5
push 0x109f1fc3
call ebx
push eax
call edi
mov eax, 0x100057d0
sub eax, 0x10912905
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x24]
push eax
push 0x40
push 5
push 0x10912900
call esi
test eax, eax
je 0x10005ed1
mov eax, dword [ebp - 0x38]
mov byte [0x10912900], 0xe9
mov dword [0x10912901], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
push 5
push 0x10912900
call esi
test eax, eax
je 0x10005ed1
push 5
push 0x10912900
call ebx
push eax
call edi
mov edx, 0x10004a30
mov ecx, 0x10c02c58
call fcn.10004260
mov edx, 0x10004a30
mov ecx, 0x10c02d08
call fcn.10004260
mov eax, 0x10004bf0
sub eax, 0x10a6674b
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x28]
push eax
push 0x40
push 5
push 0x10a66746
call esi
test eax, eax
je 0x10005f3e
mov eax, dword [ebp - 0x38]
mov byte [0x10a66746], 0xe9
mov dword [0x10a66747], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
push 5
push 0x10a66746
call esi
test eax, eax
je 0x10005f3e
push 5
push 0x10a66746
call ebx
push eax
call edi
mov eax, 0x10004ae0
sub eax, 0x10aef54b
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2c]
push eax
push 0x40
push 5
push 0x10aef546
call esi
test eax, eax
je 0x10005f8d
mov eax, dword [ebp - 0x38]
mov byte [0x10aef546], 0xe9
mov dword [0x10aef547], eax
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x2c]
push 5
push 0x10aef546
call esi
test eax, eax
je 0x10005f8d
push 5
push 0x10aef546
call ebx
push eax
call edi
mov eax, 0x100059f0
sub eax, 0x10aaaa37
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x30]
push eax
push 0x40
push 5
push 0x10aaaa32
call esi
test eax, eax
je 0x10005fdc
mov eax, dword [ebp - 0x38]
mov byte [0x10aaaa32], 0xe9
mov dword [0x10aaaa33], eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x30]
push 5
push 0x10aaaa32
call esi
test eax, eax
je 0x10005fdc
push 5
push 0x10aaaa32
call ebx
push eax
call edi
mov eax, 0x10005a60
sub eax, 0x1099b227
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push 0x40
push 5
push 0x1099b222
call esi
test eax, eax
je 0x1000602b
mov eax, dword [ebp - 0x38]
mov byte [0x1099b222], 0xe9
mov dword [0x1099b223], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x34]
push 5
push 0x1099b222
call esi
test eax, eax
je 0x1000602b
push 5
push 0x1099b222
call ebx
push eax
call edi
mov edx, 0x10005b20
mov ecx, 0x10a96327
call fcn.100043c0
mov edx, 0x10005b60
mov ecx, 0x10a963e3
call fcn.100043c0
mov edx, 0x10005be0
mov ecx, 0x10ab2df0
call fcn.100043c0
mov edx, 0x10005c10
mov ecx, 0x10ab4015
call fcn.100043c0
mov edx, 0x10005c30
mov ecx, 0x10ab35e7
call fcn.100043c0
mov edx, 0x10005cb0
mov ecx, 0x10ab3b9f
call fcn.100043c0
cmp byte [0x1008a56d], 0
je 0x100060b2
mov edx, 0x10004fa0
mov ecx, 0x10b2d1c0
call fcn.100043c0
push ecx
lea edx, [ebp - 0x39]
mov byte [ebp - 0x39], 0xeb
mov ecx, 0x10b2ce1b
call fcn.10004100
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10052757
mov esp, ebp
pop ebp
ret