Function at 0x1005aac0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
push edi
push 0x1005a870
push 0x84a91a
push 0xe8
call fcn.100d5c50
push 0x1005a860
push 0x84a6d7
push 0xe9
call fcn.100d5c50
push 0x1005a4d0
push 0x84bcb0
push 0xe9
call fcn.100d5c50
push 0x10059aa0
push 0x84bdb0
push 0xe9
call fcn.100d5c50
push 0x10059a50
push 0x84bd50
push 0xe9
call fcn.100d5c50
push 0x10059660
push 0x664568
push 0xe8
call fcn.100d5c50
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x48
mov eax, 0x10059700
mov byte [ebp - 0x10], 0xe8
sub eax, 0x66458f
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x66458a
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1005aba1
mov eax, dword [ebp - 0x10]
mov ecx, 0x66458a
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005aba3
call edi
lea eax, [ebp - 4]
mov word [ebp - 0x10], 0xc281
push eax
push 0x40
push 6
push 0x51c629
mov dword [ebp - 0xe], 0x101907dc
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005abf3
mov eax, dword [ebp - 0x10]
mov ecx, 0x51c629
mov dword [ecx], eax
mov ax, word [ebp - 0xc]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call esi
test eax, eax
jne 0x1005abf5
call edi
lea eax, [ebp - 4]
mov byte [ebp - 0x10], 0x68
push eax
push 0x40
push 5
push 0x78f28a
mov dword [ebp - 0xf], 0x101907dc
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005ac41
mov eax, dword [ebp - 0x10]
mov ecx, 0x78f28a
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005ac43
call edi
lea eax, [ebp - 4]
mov word [ebp - 0x10], 0xb60f
push eax
push 0x40
push 7
push 0x95fed9
mov byte [ebp - 0xe], 0x89
mov dword [ebp - 0xd], 0x1019091c
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005ac9d
mov eax, dword [ebp - 0x10]
mov ecx, 0x95fed9
mov dword [ecx], eax
mov ax, word [ebp - 0xc]
mov word [ecx + 4], ax
mov al, byte [ebp - 0xa]
mov byte [ecx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 7
push ecx
call esi
test eax, eax
jne 0x1005ac9f
call edi
lea eax, [ebp - 4]
mov word [ebp - 0x10], 0x918b
push eax
push 0x40
push 6
push 0x95ff91
mov dword [ebp - 0xe], 0x10190a5c
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005acef
mov eax, dword [ebp - 0x10]
mov ecx, 0x95ff91
mov dword [ecx], eax
mov ax, word [ebp - 0xc]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call esi
test eax, eax
jne 0x1005acf1
call edi
lea eax, [ebp - 4]
mov word [ebp - 0x10], 0x3d83
push eax
push 0x40
push 6
push 0x95e6b7
mov dword [ebp - 0xe], 0x101907c4
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005ad41
mov eax, dword [ebp - 0x10]
mov ecx, 0x95e6b7
mov dword [ecx], eax
mov ax, word [ebp - 0xc]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call esi
test eax, eax
jne 0x1005ad43
call edi
lea eax, [ebp - 4]
mov word [ebp - 0x10], 0x583
push eax
push 0x40
push 6
push 0x95e70d
mov dword [ebp - 0xe], 0x101907c4
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005ad93
mov eax, dword [ebp - 0x10]
mov ecx, 0x95e70d
mov dword [ecx], eax
mov ax, word [ebp - 0xc]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call esi
test eax, eax
jne 0x1005ad95
call edi
lea eax, [ebp - 4]
mov word [ebp - 0x10], 0x53b
push eax
push 0x40
push 6
push 0x95fe98
mov dword [ebp - 0xe], 0x101907c4
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005ade5
mov eax, dword [ebp - 0x10]
mov ecx, 0x95fe98
mov dword [ecx], eax
mov ax, word [ebp - 0xc]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call esi
test eax, eax
jne 0x1005ade7
call edi
lea eax, [ebp - 4]
mov word [ebp - 0x10], 0x53b
push eax
push 0x40
push 6
push 0x95ff7f
mov dword [ebp - 0xe], 0x101907c4
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005ae37
mov eax, dword [ebp - 0x10]
mov ecx, 0x95ff7f
mov dword [ecx], eax
mov ax, word [ebp - 0xc]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call esi
test eax, eax
jne 0x1005ae39
call edi
lea eax, [ebp - 4]
mov word [ebp - 0x10], 0xd3b
push eax
push 0x40
push 6
push 0x51c61b
mov dword [ebp - 0xe], 0x101907c4
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005ae89
mov eax, dword [ebp - 0x10]
mov ecx, 0x51c61b
mov dword [ecx], eax
mov ax, word [ebp - 0xc]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call esi
test eax, eax
jne 0x1005ae8b
call edi
lea eax, [ebp - 4]
mov word [ebp - 0x10], 0x5c7
push eax
push 0x40
push 6
push 0x64e2cc
mov dword [ebp - 0xe], 0x101907c4
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005aedb
mov eax, dword [ebp - 0x10]
mov ecx, 0x64e2cc
mov dword [ecx], eax
mov ax, word [ebp - 0xc]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call esi
test eax, eax
jne 0x1005aedd
call edi
lea eax, [ebp - 4]
mov word [ebp - 0x10], 0x3d83
push eax
push 0x40
push 6
push 0x5c60cb
mov dword [ebp - 0xe], 0x101907c4
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005af2d
mov eax, dword [ebp - 0x10]
mov ecx, 0x5c60cb
mov dword [ecx], eax
mov ax, word [ebp - 0xc]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call esi
test eax, eax
jne 0x1005af2f
call edi
lea eax, [ebp - 4]
mov word [ebp - 0x10], 0x3d83
push eax
push 0x40
push 6
push 0x814033
mov dword [ebp - 0xe], 0x101907c4
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005af7f
mov eax, dword [ebp - 0x10]
mov ecx, 0x814033
mov dword [ecx], eax
mov ax, word [ebp - 0xc]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call esi
test eax, eax
jne 0x1005af81
call edi
lea eax, [ebp - 4]
mov word [ebp - 0x10], 0x3d83
push eax
push 0x40
push 6
push 0x5ad1b2
mov dword [ebp - 0xe], 0x101907c4
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005afd1
mov eax, dword [ebp - 0x10]
mov ecx, 0x5ad1b2
mov dword [ecx], eax
mov ax, word [ebp - 0xc]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call esi
test eax, eax
jne 0x1005afd3
call edi
lea eax, [ebp - 4]
mov word [ebp - 0x10], 0x3d83
push eax
push 0x40
push 6
push 0x78f274
mov dword [ebp - 0xe], 0x101907c4
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005b023
mov eax, dword [ebp - 0x10]
mov ecx, 0x78f274
mov dword [ecx], eax
mov ax, word [ebp - 0xc]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call esi
test eax, eax
jne 0x1005b025
call edi
lea eax, [ebp - 4]
mov word [ebp - 0x10], 0xaf0f
push eax
push 0x40
push 7
push 0x84ba51
mov byte [ebp - 0xe], 0xd
mov dword [ebp - 0xd], 0x101907c4
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005b07f
mov eax, dword [ebp - 0x10]
mov ecx, 0x84ba51
mov dword [ecx], eax
mov ax, word [ebp - 0xc]
mov word [ecx + 4], ax
mov al, byte [ebp - 0xa]
mov byte [ecx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 7
push ecx
call esi
test eax, eax
jne 0x1005b081
call edi
lea eax, [ebp - 4]
mov word [ebp - 0x10], 0x3d83
push eax
push 0x40
push 6
push 0x84a47b
mov dword [ebp - 0xe], 0x101907c4
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x1005b0d1
mov eax, dword [ebp - 0x10]
mov ecx, 0x84a47b
mov dword [ecx], eax
mov ax, word [ebp - 0xc]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call esi
test eax, eax
jne 0x1005b0d3
call edi
push 0x10059a30
push 0x5b8395
push 0xe8
call fcn.100d5c50
push 0x10059a30
push 0x5b83ad
push 0xe8
call fcn.100d5c50
push 0x10059a30
push 0x5b83c5
push 0xe8
call fcn.100d5c50
push 0x10059a30
push 0x5b84eb
push 0xe8
call fcn.100d5c50
push 0x10059a30
push 0x5b8506
push 0xe8
call fcn.100d5c50
push 0x10059a30
push 0x5b851e
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x10059a20
push 0x5b83ee
push 0xe8
call fcn.100d5c50
push 0x10059a20
push 0x5b84d3
push 0xe8
call fcn.100d5c50
push 0x10059a20
push 0x5b856c
push 0xe8
call fcn.100d5c50
push 0x10059a20
push 0x5b857a
push 0xe8
call fcn.100d5c50
add esp, 0x30
pop edi
pop esi
mov esp, ebp
pop ebp
ret