Function at 0x10005310
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Resume thread

Disassembly:
sub esp, 0x868
mov eax, dword [0x1006d004]
xor eax, esp
mov dword [esp + 0x864], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0x878]
mov eax, edx
push edi
mov edi, ecx
mov dword [esp + 0x24], eax
xorps xmm0, xmm0
mov dword [esp + 0x2c], 0
lea edx, [esp + 0x18]
movlpd qword [esp + 0x18], xmm0
mov ecx, eax
mov dword [esp + 0x28], 0
xor ebx, ebx
call fcn.10006930
test eax, eax
je 0x10005548
lea ecx, [esp + 0x28]
mov dword [esp + 0x58], 1
push ecx
lea ecx, [esp + 0x30]
mov dword [esp + 0x34], 0x280
push ecx
lea ecx, [esp + 0x38]
mov dword [esp + 0x3c], 0x1e0
push ecx
xorps xmm0, xmm0
mov dword [esp + 0x4c], 0x1c
push eax
mov ecx, esi
movlpd qword [esp + 0x54], xmm0
movlpd qword [esp + 0x74], xmm0
mov dword [esp + 0x48], 0x3c
mov dword [esp + 0x4c], 1
mov dword [esp + 0x64], 0x20
mov dword [esp + 0x5c], 1
mov dword [esp + 0x60], ebx
mov dword [esp + 0x70], 1
mov dword [esp + 0x6c], edi
call dword [0x100572e4]
call esi
add esp, 0x10
test eax, eax
je 0x10005548
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
mov edi, dword [eax + 0x20]
mov dword [esp + 0x18], edi
test edi, edi
je 0x1000551a
lea edx, [esp + 0x10]
mov dword [esp + 0x10], ebx
lea ecx, [esp + 0x70]
call fcn.1000a100
cmp dword [0x1006f090], ebx
mov eax, 0x10065bd0
mov edx, 0x1006630c
mov dword [0x1006f094], ebx
push 0x1006f094
cmove edx, eax
mov ecx, edi
push 5
call fcn.10005be0
add esp, 8
mov dword [esp + 0x6c], eax
cmp eax, 1
jne 0x1000548f
lea eax, [esp + 0x6c]
mov dword [0x1006f098], edi
push eax
push 0x40
push 5
push edi
mov dword [esp + 0x7c], ebx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x10005465
lea eax, [ebx + 4]
jmp 0x1000548b
push 0
push dword [esp + 0x70]
lea ecx, [edi + 1]
mov byte [edi], 0xe9
mov eax, 0x10004cc0
sub eax, ecx
push 5
sub eax, 4
push edi
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 1
mov dword [esp + 0x6c], eax
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x14], eax
test ebp, ebp
je 0x100054fa
xor ebx, ebx
xor esi, esi
test ebp, ebp
je 0x100054c4
mov edi, dword [esp + esi*4 + 0x70]
push edi
call dword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
je 0x100054b4
inc ebx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
inc esi
cmp esi, ebp
jb 0x100054a3
mov edi, dword [esp + 0x18]
cmp ebx, ebp
je 0x100054e6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x23c
push str._assertion_failed:_resumed__suspendedThreadCount__line__i__err__i
push 0xc8
call fcn.10009530
add esp, 0x10
push ebp
push ebx
push str.ResumeAllThreads:_resumed__i_threads__max_count__i
push 0xc8
call fcn.10009530
add esp, 0x10
push edi
push dword [esp + 0x70]
push dword [esp + 0x2c]
push str.DirectX10::HookD3DVersion__:__S_hook_swapchain_present_d__pSCPresent_p_
push 0x64
call fcn.10009530
mov ecx, dword [esp + 0x3c]
add esp, 0x14
mov ebx, dword [esp + 0x14]
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x100572e4]
call esi
mov eax, dword [esp + 0x2c]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x100572e4]
call esi
dec ebx
neg ebx
sbb ebx, ebx
lea eax, [ebx + 4]
jmp 0x1000554d
mov eax, 3
mov ecx, dword [esp + 0x874]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.1000dfef
add esp, 0x868
ret