Function at 0x1005c970
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp dword [0x101f66a8], 1
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
jne 0x1005ca3e
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x57fccf
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x1005c9e8
mov eax, dword [ebx]
mov ecx, 0x57fccf
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005c9ea
call edi
mov eax, 0x1005cdf0
mov byte [ebp - 0x10], 0xe9
sub eax, 0x57fcd4
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x57fccf
call esi
test eax, eax
je 0x1005ca3c
mov eax, dword [ebp - 0x10]
mov ecx, 0x57fccf
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005ca3e
call edi
cmp dword [0x101f66bc], 1
jne 0x1005caf7
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x5842b1
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x1005caa1
mov eax, dword [ebx]
mov ecx, 0x5842b1
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005caa3
call edi
mov eax, 0x1005cf80
mov byte [ebp - 0x10], 0xe9
sub eax, 0x5842b6
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x5842b1
call esi
test eax, eax
je 0x1005caf5
mov eax, dword [ebp - 0x10]
mov ecx, 0x5842b1
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005caf7
call edi
cmp dword [0x101f66d0], 1
jne 0x1005cbb0
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x5852e4
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x1005cb5a
mov eax, dword [ebx]
mov ecx, 0x5852e4
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005cb5c
call edi
mov eax, 0x1005d110
mov byte [ebp - 0x10], 0xe9
sub eax, 0x5852e9
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x5852e4
call esi
test eax, eax
je 0x1005cbae
mov eax, dword [ebp - 0x10]
mov ecx, 0x5852e4
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005cbb0
call edi
cmp dword [0x101f66e4], 1
jne 0x1005cc69
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x584a4e
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x1005cc13
mov eax, dword [ebx]
mov ecx, 0x584a4e
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005cc15
call edi
mov eax, 0x1005d2a0
mov byte [ebp - 0x10], 0xe9
sub eax, 0x584a53
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x584a4e
call esi
test eax, eax
je 0x1005cc67
mov eax, dword [ebp - 0x10]
mov ecx, 0x584a4e
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005cc69
call edi
cmp dword [0x101f66f8], 1
jne 0x1005cd22
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x584b82
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x1005cccc
mov eax, dword [ebx]
mov ecx, 0x584b82
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005ccce
call edi
mov eax, 0x1005d3e0
mov byte [ebp - 0x10], 0xe9
sub eax, 0x584b87
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x584b82
call esi
test eax, eax
je 0x1005cd20
mov eax, dword [ebp - 0x10]
mov ecx, 0x584b82
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005cd22
call edi
cmp dword [0x101f6708], 1
jne 0x1005cddb
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x582fe6
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x1005cd85
mov eax, dword [ebx]
mov ecx, 0x582fe6
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005cd87
call edi
mov eax, 0x1005d4f0
mov byte [ebp - 0x10], 0xe9
sub eax, 0x582feb
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x582fe6
call esi
test eax, eax
je 0x1005cdd9
mov eax, dword [ebp - 0x10]
mov ecx, 0x582fe6
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005cddb
call edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret