Function at 0x10005d80
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100471b0
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x1007c040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.100045e0
call fcn.100051f0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x10005d50
sub eax, 0x10b08795
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 5
push 0x10b08790
call esi
mov edi, dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
test eax, eax
je 0x10005e16
mov eax, dword [ebp - 0x38]
mov byte [0x10b08790], 0xe9
mov dword [0x10b08791], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 5
push 0x10b08790
call esi
test eax, eax
je 0x10005e16
push 5
push 0x10b08790
call ebx
push eax
call edi
mov eax, 0x10005d20
sub eax, 0x10b83875
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x10b83870
call esi
test eax, eax
je 0x10005e65
mov eax, dword [ebp - 0x38]
mov byte [0x10b83870], 0xe9
mov dword [0x10b83871], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x10b83870
call esi
test eax, eax
je 0x10005e65
push 5
push 0x10b83870
call ebx
push eax
call edi
mov eax, 0x100046b0
sub eax, 0x10ab8daf
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x10ab8daa
call esi
test eax, eax
je 0x10005eb4
mov eax, dword [ebp - 0x38]
mov byte [0x10ab8daa], 0xe9
mov dword [0x10ab8dab], eax
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
push 5
push 0x10ab8daa
call esi
test eax, eax
je 0x10005eb4
push 5
push 0x10ab8daa
call ebx
push eax
call edi
mov eax, 0x10005890
sub eax, 0x10af0448
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x20]
push eax
push 0x40
push 5
push 0x10af0443
call esi
test eax, eax
je 0x10005f03
mov eax, dword [ebp - 0x38]
mov byte [0x10af0443], 0xe9
mov dword [0x10af0444], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 5
push 0x10af0443
call esi
test eax, eax
je 0x10005f03
push 5
push 0x10af0443
call ebx
push eax
call edi
mov edx, 0x100058b0
mov ecx, 0x10bfac14
call fcn.10004280
mov eax, 0x100045d0
sub eax, 0x109adfb8
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x24]
push eax
push 0x40
push 5
push 0x109adfb3
call esi
test eax, eax
je 0x10005f61
mov eax, dword [ebp - 0x38]
mov byte [0x109adfb3], 0xe9
mov dword [0x109adfb4], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
push 5
push 0x109adfb3
call esi
test eax, eax
je 0x10005f61
push 5
push 0x109adfb3
call ebx
push eax
call edi
mov eax, 0x10004f50
sub eax, 0x109f1fc8
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x28]
push eax
push 0x40
push 5
push 0x109f1fc3
call esi
test eax, eax
je 0x10005fb0
mov eax, dword [ebp - 0x38]
mov byte [0x109f1fc3], 0xe9
mov dword [0x109f1fc4], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
push 5
push 0x109f1fc3
call esi
test eax, eax
je 0x10005fb0
push 5
push 0x109f1fc3
call ebx
push eax
call edi
mov eax, 0x100057f0
sub eax, 0x10912905
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2c]
push eax
push 0x40
push 5
push 0x10912900
call esi
test eax, eax
je 0x10005fff
mov eax, dword [ebp - 0x38]
mov byte [0x10912900], 0xe9
mov dword [0x10912901], eax
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x2c]
push 5
push 0x10912900
call esi
test eax, eax
je 0x10005fff
push 5
push 0x10912900
call ebx
push eax
call edi
mov edx, 0x10004a50
mov ecx, 0x10c02c58
call fcn.10004280
mov edx, 0x10004a50
mov ecx, 0x10c02d08
call fcn.10004280
mov eax, 0x10004c10
sub eax, 0x10a6674b
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x30]
push eax
push 0x40
push 5
push 0x10a66746
call esi
test eax, eax
je 0x1000606c
mov eax, dword [ebp - 0x38]
mov byte [0x10a66746], 0xe9
mov dword [0x10a66747], eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x30]
push 5
push 0x10a66746
call esi
test eax, eax
je 0x1000606c
push 5
push 0x10a66746
call ebx
push eax
call edi
mov eax, 0x10004b00
sub eax, 0x10aef54b
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push 0x40
push 5
push 0x10aef546
call esi
test eax, eax
je 0x100060bb
mov eax, dword [ebp - 0x38]
mov byte [0x10aef546], 0xe9
mov dword [0x10aef547], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x34]
push 5
push 0x10aef546
call esi
test eax, eax
je 0x100060bb
push 5
push 0x10aef546
call ebx
push eax
call edi
mov edx, 0x10005a10
mov ecx, 0x10aaaa32
call fcn.100043e0
mov edx, 0x10005a80
mov ecx, 0x1099b222
call fcn.100043e0
mov edx, 0x10005b40
mov ecx, 0x10a96327
call fcn.100043e0
mov edx, 0x10005b80
mov ecx, 0x10a963e3
call fcn.100043e0
mov edx, 0x10005c00
mov ecx, 0x10ab2df0
call fcn.100043e0
mov edx, 0x10005c30
mov ecx, 0x10ab4015
call fcn.100043e0
mov edx, 0x10005c50
mov ecx, 0x10ab35e7
call fcn.100043e0
mov edx, 0x10005cd0
mov ecx, 0x10ab3b9f
call fcn.100043e0
cmp byte [0x1008032d], 0
je 0x10006160
mov edx, 0x10004fc0
mov ecx, 0x10b2d1c0
call fcn.100043e0
push ecx
lea edx, [ebp - 0x39]
mov byte [ebp - 0x39], 0xeb
mov ecx, 0x10b2ce1b
call fcn.10004120
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10045a07
mov esp, ebp
pop ebp
ret