Function at 0x10005aa0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
push 0x10005a40
push 0x491f31
or bl, 0xff
call fcn.1000ded0
push 0x10005a40
push 0x4bc6d7
or bl, 0xff
call fcn.1000ded0
push 0x10005a40
push 0x4c1f87
or bl, 0xff
call fcn.1000ded0
push 0x10005a40
push 0x4c2d98
or bl, 0xff
call fcn.1000ded0
push 0x10005a40
push 0x4da13f
or bl, 0xff
call fcn.1000ded0
push 0x10005a40
push 0x4dbe44
or bl, 0xff
call fcn.1000ded0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x30
lea ecx, [ebp - 4]
push ecx
push 0x40
mov eax, 0x10005690
push 5
sub eax, 0x5a5fdb
mov bl, 0xe9
xor edi, edi
push 0x5a5fd6
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], eax
mov dword [ebp - 4], edi
call esi
test eax, eax
je 0x10005b70
mov edx, dword [ebp - 0x10]
mov cl, byte [ebp - 0xc]
mov eax, 0x5a5fd6
mov dword [eax], edx
mov byte [eax + 4], cl
mov eax, dword [ebp - 4]
lea edx, [ebp - 8]
push edx
push eax
push 5
push 0x5a5fd6
mov dword [ebp - 8], edi
call esi
test eax, eax
jne 0x10005b76
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 4]
push edx
push 0x40
mov ecx, 0x100056f0
push 5
sub ecx, 0x5a5315
push 0x5a5310
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], ecx
mov dword [ebp - 4], edi
call esi
test eax, eax
je 0x10005bc5
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x5a5310
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x5a5310
mov dword [ebp - 8], edi
call esi
test eax, eax
jne 0x10005bcb
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x10005eb0
push 5
sub edx, 0x5a2380
push 0x5a237b
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], edi
call esi
test eax, eax
je 0x10005c1a
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x5a237b
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x5a237b
mov dword [ebp - 8], edi
call esi
test eax, eax
jne 0x10005c20
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x10005ee0
push 5
sub edx, 0x5a3943
push 0x5a393e
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], edi
call esi
test eax, eax
je 0x10005c6f
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x5a393e
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x5a393e
mov dword [ebp - 8], edi
call esi
test eax, eax
jne 0x10005c75
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x10005e80
push 5
sub edx, 0x5f9de0
push 0x5f9ddb
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], edi
call esi
test eax, eax
je 0x10005cc4
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x5f9ddb
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x5f9ddb
mov dword [ebp - 8], edi
call esi
test eax, eax
jne 0x10005cca
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x10005f10
push 5
sub edx, 0x5ebdfb
push 0x5ebdf6
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], edi
call esi
test eax, eax
je 0x10005d19
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x5ebdf6
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x5ebdf6
mov dword [ebp - 8], edi
call esi
test eax, eax
jne 0x10005d1f
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x10005f40
push 5
sub edx, 0x5f8745
push 0x5f8740
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], edi
call esi
test eax, eax
je 0x10005d6e
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x5f8740
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x5f8740
mov dword [ebp - 8], edi
call esi
test eax, eax
jne 0x10005d74
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x10005f80
push 5
sub edx, 0x5f87c0
push 0x5f87bb
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], edi
call esi
test eax, eax
je 0x10005dc3
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x5f87bb
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x5f87bb
mov dword [ebp - 8], edi
call esi
test eax, eax
jne 0x10005dc9
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 4]
push eax
push 0x40
mov edx, 0x10005fc0
push 5
sub edx, 0x5c6d34
push 0x5c6d2f
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], edx
mov dword [ebp - 4], edi
call esi
test eax, eax
je 0x10005e18
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0xc]
mov eax, 0x5c6d2f
mov dword [eax], ecx
mov byte [eax + 4], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push ecx
push 5
push 0x5c6d2f
mov dword [ebp - 8], edi
call esi
test eax, eax
jne 0x10005e1e
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push 0x5f872e
call esi
lea eax, [ebp - 4]
push eax
mov byte [0x5f872e], 0x40
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0x5f872e
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push 0x5f8736
call esi
lea eax, [ebp - 4]
push eax
mov byte [0x5f8736], 0x3f
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0x5f8736
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret