Function at 0x1005df10
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push esi
push edi
nop
push str.samp.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0xa
mov esi, eax
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
test esi, esi
jne 0x1005df46
cmp dword [0xc8d4c0], 6
jl 0x1005df20
jmp 0x1005df6d
add esi, 0x8643
xor eax, eax
cmp dword [esi], 0xbb8
cmovne esi, eax
cmp esi, 1
jbe 0x1005df6d
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push esi
call edi
mov dword [esi], 0
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xc8d4c0
call edi
lea eax, [ebp - 8]
mov dword [0xc8d4c0], 5
push eax
push 0x20
push 1
push 0x748c2b
call edi
mov bl, byte [0x748c2b]
lea eax, [ebp - 4]
push eax
push dword [ebp - 8]
push 1
push 0x748c2b
call edi
lea eax, [ebp - 8]
push eax
cmp bl, 0xe8
jne 0x1005dfde
push 0x40
push 5
push 0x748c2b
call edi
mov eax, 0x748c2b
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 8]
push 5
push 0x748c2b
jmp 0x1005e030
push 0x20
push 1
push 0x748c7b
call edi
mov bl, byte [0x748c7b]
lea eax, [ebp - 4]
push eax
push dword [ebp - 8]
push 1
push 0x748c7b
call edi
cmp bl, 0xe8
jne 0x1005e032
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x748c7b
call edi
mov eax, 0x748c7b
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 8]
push 5
push 0x748c7b
call edi
lea eax, [ebp - 8]
push eax
push 0x20
push 1
push 0x5909aa
call edi
mov bl, byte [0x5909aa]
lea eax, [ebp - 4]
push eax
push dword [ebp - 8]
push 1
push 0x5909aa
call edi
cmp bl, 0xbe
jne 0x1005e075
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5909ab
call edi
mov dword [0x5909ab], 1
lea eax, [ebp - 8]
push eax
push 0x20
push 1
push 0x590a1d
call edi
mov bl, byte [0x590a1d]
lea eax, [ebp - 4]
push eax
push dword [ebp - 8]
push 1
push 0x590a1d
call edi
cmp bl, 0xbe
jne 0x1005e0ce
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x590a1d
call edi
lea eax, [ebp - 8]
mov byte [0x590a1d], 0xe9
push eax
push 0x40
push 4
push 0x590a1e
call edi
mov dword [0x590a1e], 0x8d
lea eax, [ebp - 8]
push eax
push 0x20
push 1
push 0x5737e0
call edi
mov bl, byte [0x5737e0]
lea eax, [ebp - 4]
push eax
push dword [ebp - 8]
push 1
push 0x5737e0
call edi
cmp bl, 0x74
jne 0x1005e10e
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x5737e0
call edi
mov byte [0x5737e0], 0x75
lea eax, [ebp - 8]
push eax
push 0x20
push 1
push 0x590af0
call edi
mov bl, byte [0x590af0]
lea eax, [ebp - 4]
push eax
push dword [ebp - 8]
push 1
push 0x590af0
call edi
cmp bl, 0xa1
jne 0x1005e167
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x590af0
call edi
lea eax, [ebp - 8]
mov byte [0x590af0], 0xe9
push eax
push 0x40
push 4
push 0x590af1
call edi
mov dword [0x590af1], 0x140
lea eax, [ebp - 8]
push eax
push 0x20
push 1
push 0x748e52
call edi
mov bl, byte [0x748e52]
lea eax, [ebp - 4]
push eax
push dword [ebp - 8]
push 1
push 0x748e52
call edi
cmp bl, 0x74
jne 0x1005e19a
mov word [0x748e52], 0x1275
lea eax, [ebp - 8]
push eax
push 0x20
push 1
push 0x619440
call edi
mov bl, byte [0x619440]
lea eax, [ebp - 4]
push eax
push dword [ebp - 8]
push 1
push 0x619440
call edi
cmp bl, 0xe9
jne 0x1005e1f3
mov eax, dword [0x619441]
mov esi, 0x1005de80
add eax, 0x619445
sub esi, 0x619445
mov dword [0x1018b368], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x619441
call edi
mov dword [0x619441], esi
lea eax, [ebp - 8]
push eax
push 0x20
push 1
push 0x748d1a
call edi
mov bl, byte [0x748d1a]
lea eax, [ebp - 4]
push eax
push dword [ebp - 8]
push 1
push 0x748d1a
call edi
cmp bl, 0xe9
jne 0x1005e24e
mov eax, dword [0x748d1b]
mov esi, 0x1005deb0
add eax, 0x748d1f
sub esi, 0x748d1f
mov dword [0x1018b370], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x748d1b
call edi
mov dword [0x748d1b], esi
jmp 0x1005e2a7
lea eax, [ebp - 8]
push eax
push 0x20
push 1
push 0x748d6a
call edi
mov bl, byte [0x748d6a]
lea eax, [ebp - 4]
push eax
push dword [ebp - 8]
push 1
push 0x748d6a
call edi
cmp bl, 0xe9
jne 0x1005e2a7
mov eax, dword [0x748d6b]
mov esi, 0x1005deb0
add eax, 0x748d6f
sub esi, 0x748d6f
mov dword [0x1018b370], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x748d6b
call edi
mov dword [0x748d6b], esi
lea eax, [ebp - 8]
push eax
push 0x20
push 1
push 0x573683
call edi
mov bl, byte [0x573683]
lea eax, [ebp - 4]
push eax
push dword [ebp - 8]
push 1
push 0x573683
call edi
cmp bl, 0x8a
jne 0x1005e307
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x573683
call edi
lea eax, [ebp - 8]
mov byte [0x573683], 0xe9
push eax
push 0x40
push 4
mov esi, 0x1005de10
push 0x573684
sub esi, 0x573688
call edi
mov dword [0x573684], esi
pop edi
pop esi
mov al, 1
pop ebx
mov esp, ebp
pop ebp
ret