Function at 0x6055f4
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x18], 0
call fcn.005268b4
push 0xa13344
mov ebx, dword [ebp + 0x10]
push dword [ebx]
call fcn.004f1030
add esp, 8
cmp eax, 0
je 0x605712
push 0x80000301
push 0
push 1
push OleUIBusyA
push 0
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x605668
mov eax, 0xa13344
push eax
push 2
mov ebx, 0x138
call fcn.00647230
add esp, 0x1c
mov dword [ebp - 0x1c], eax
push 0xa13700
push dword [ebp - 0x1c]
call fcn.004f1030
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x6056ac
push ebx
call fcn.00645a87
add esp, 4
cmp dword [ebp - 0x20], 0
je 0x6056c0
mov eax, 0xa13344
jmp 0x6056c5
mov eax, 0xa13700
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push dword [ebp - 0x24]
mov ebx, dword [ebp + 0x10]
push dword [ebx]
mov ecx, 3
call fcn.004f1344
add esp, 0xc
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x6056f5
push ebx
call fcn.00645a87
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x605709
push ebx
call fcn.00645a87
add esp, 4
pop eax
mov dword [ebp - 4], eax
jmp 0x60576c
push 0
mov ebx, 0x104
call fcn.0064b3c0
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push 0xa13700
push dword [ebp - 0x1c]
mov ecx, 3
call fcn.004f1344
add esp, 0xc
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x605754
push ebx
call fcn.00645a87
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x605768
push ebx
call fcn.00645a87
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], esp
push dword [ebp - 4]
xor eax, eax
call dword [sym.imp.kernel32.dll_GetModuleHandleA]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x605798
push 0x1fc
push 0x436a934
push 6
call fcn.00645a6f
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x6057ad
mov eax, dword [ebp - 8]
jmp 0x605ea8
mov dword [ebp - 0x1c], esp
push 0x40
push 0x1000
push 0x200
push 0
xor eax, eax
call dword [sym.imp.kernel32.dll_VirtualAlloc]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x6057ea
push 0x2cb
push 0x436a934
push 6
call fcn.00645a6f
add esp, 0xc
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x605801
mov eax, 0
jmp 0x605ea8
mov dword [ebp - 0x1c], esp
push dword [0xa82638]
xor eax, eax
call dword [0xa82934]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x605830
push 0x39b
push 0x436a934
push 6
call fcn.00645a6f
add esp, 0xc
cmp dword [0xa826f8], 0
je 0x6058b4
mov dword [ebp - 0x1c], esp
xor eax, eax
call dword [sym.imp.kernel32.dll_GetProcessHeap]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x605866
push 0x437
push 0x436a934
push 6
call fcn.00645a6f
add esp, 0xc
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], esp
push dword [0xa826f8]
push 0
push dword [ebp - 0x20]
xor eax, eax
call dword [0xa82938]
nop
nop
cmp dword [ebp - 0x24], esp
je 0x6058a0
push 0x437
push 0x436a934
push 6
call fcn.00645a6f
add esp, 0xc
mov dword [0xa826f8], 0
mov dword [0xa826fc], 0
push dword [ebp - 4]
push 0xa81108
mov ecx, 2
call fcn.004f1344
add esp, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 0xa826fc
lea eax, [ebp - 0x1c]
push eax
call fcn.00605ec0
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x6058f9
push ebx
call fcn.00645a87
add esp, 4
mov eax, dword [ebp - 0x24]
mov dword [0xa826f8], eax
mov eax, dword [ebp + 0x18]
mov dword [0xa82700], eax
push dword [ebp - 0xc]
push 0x606d4a
mov eax, str.NtQueryAttributesFile
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push 0xa82704
call fcn.006060c0
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x60593a
push ebx
call fcn.00645a87
add esp, 4
cmp dword [ebp - 0x20], 0
jne 0x605949
jmp 0x605db9
fild dword [ebp - 0xc]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fadd qword [0xa80718]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.004ef9d0
push eax
push 0x60703e
mov eax, str.NtOpenFile
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0xa82708
call fcn.006060c0
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x605992
push ebx
call fcn.00645a87
add esp, 4
cmp dword [ebp - 0x30], 0
jne 0x6059a1
jmp 0x605db9
fild dword [ebp - 0xc]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fadd qword [0xa6cdc0]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.004ef9d0
push eax
push 0x6070f2
mov eax, str.NtClose
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0xa8270c
call fcn.006060c0
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x6059ea
push ebx
call fcn.00645a87
add esp, 4
cmp dword [ebp - 0x30], 0
jne 0x6059f9
jmp 0x605db9
fild dword [ebp - 0xc]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fadd qword [0xa1333c]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.004ef9d0
push eax
push 0x6071f2
mov eax, str.NtCreateSection
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0xa82710
call fcn.006060c0
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x605a42
push ebx
call fcn.00645a87
add esp, 4
cmp dword [ebp - 0x30], 0
jne 0x605a51
jmp 0x605db9
fild dword [ebp - 0xc]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fadd qword [0xa8114c]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.004ef9d0
push eax
push 0x6072fe
mov eax, 0xa81154
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0xa82714
call fcn.006060c0
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x605a9a
push ebx
call fcn.00645a87
add esp, 4
cmp dword [ebp - 0x30], 0
jne 0x605aa9
jmp 0x605db9
cmp dword [ebp + 0x18], 0
je 0x605c6b
fild dword [ebp - 0xc]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fadd qword [0xa81168]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.004ef9d0
push eax
push 0x607476
mov eax, 0xa81170
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0xa82718
call fcn.006060c0
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x605afc
push ebx
call fcn.00645a87
add esp, 4
cmp dword [ebp - 0x30], 0
jne 0x605b0b
jmp 0x605db9
fild dword [ebp - 0xc]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fadd qword [0xa6ccd4]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.004ef9d0
push eax
push 0x6075b2
mov eax, str.NtQueryVolumeInformationFile
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0xa8271c
call fcn.006060c0
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x605b54
push ebx
call fcn.00645a87
add esp, 4
cmp dword [ebp - 0x30], 0
jne 0x605b63
jmp 0x605db9
fild dword [ebp - 0xc]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fadd qword [0xa811a0]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.004ef9d0
push eax
push 0x60779e
mov eax, 0xa811a8
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0xa82720
call fcn.006060c0
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x605bac
push ebx
call fcn.00645a87
add esp, 4
cmp dword [ebp - 0x30], 0
jne 0x605bbb
jmp 0x605db9
fild dword [ebp - 0xc]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fadd qword [0xa811c0]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.004ef9d0
push eax
push 0x6078d2
mov eax, 0xa811c8
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0xa82724
call fcn.006060c0
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x605c04
push ebx
call fcn.00645a87
add esp, 4
cmp dword [ebp - 0x30], 0
jne 0x605c13
jmp 0x605db9
fild dword [ebp - 0xc]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fadd qword [0xa6ccc4]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.004ef9d0
push eax
push 0x607a72
mov eax, str.NtReadFile
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0xa82728
call fcn.006060c0
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x605c5c
push ebx
call fcn.00645a87
add esp, 4
cmp dword [ebp - 0x30], 0
jne 0x605c6b
jmp 0x605db9
lea eax, [ebp - 4]
push eax
call fcn.00606960
mov dword [0xa8272c], eax
push dword [ebp + 8]
call fcn.0060697c
mov dword [0xa82730], eax
push reloc.WS2_32.dll_getpeername
push 0
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
jne 0x605c9b
mov eax, 0xa13348
push eax
push 1
mov ebx, 0x194
call fcn.00646e60
add esp, 0x10
mov dword [0xa82734], eax
mov dword [ebp - 0x1c], esp
push dword [ebp - 4]
lea eax, [ebp - 0x14]
push eax
xor eax, eax
call dword [0xa8293c]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x605ce3
push 0xc7a
push 0x436a934
push 6
call fcn.00645a6f
add esp, 0xc
test eax, eax
je 0x605d6e
cmp dword [ebp + 0x20], 0
je 0x605cff
mov eax, 2
jmp 0x605d04
mov eax, 0
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], esp
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0
xor eax, eax
call dword [0xa82940]
nop
nop
cmp dword [ebp - 0x20], esp
je 0x605d41
push 0xcb7
push 0x436a934
push 6
call fcn.00645a6f
add esp, 0xc
mov dword [ebp - 0x1c], esp
lea eax, [ebp - 0x14]
push eax
xor eax, eax
call dword [0xa82944]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x605d6e
push 0xcf2
push 0x436a934
push 6
call fcn.00645a6f
add esp, 0xc
cmp dword [0xa82738], 0
je 0x605db9
mov eax, dword [0xa82738]
mov dword [ebp - 0x18], eax
mov dword [0xa82738], 0
mov dword [ebp - 0x1c], esp
push dword [ebp - 0x18]
xor eax, eax
call dword [0xa82948]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x605db9
push 0xd88
push 0x436a934
push 6
call fcn.00645a6f
add esp, 0xc
push 0xa82704
call fcn.006069a0
push 0xa82708
call fcn.006069a0
push 0xa8270c
call fcn.006069a0
push 0xa82710
call fcn.006069a0
push 0xa82714
call fcn.006069a0
cmp dword [ebp + 0x18], 0
je 0x605e27
push 0xa82718
call fcn.006069a0
push 0xa8271c
call fcn.006069a0
push 0xa82720
call fcn.006069a0
push 0xa82724
call fcn.006069a0
push 0xa82728
call fcn.006069a0
mov dword [0xa8272c], 0
mov dword [ebp - 0x1c], esp
push dword [0xa82638]
xor eax, eax
call dword [0xa8294c]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x605e60
push 0xf8c
push 0x436a934
push 6
call fcn.00645a6f
add esp, 0xc
cmp dword [ebp - 0xc], 0
je 0x605ea0
mov dword [ebp - 0x1c], esp
push 0x8000
push 0
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.kernel32.dll_VirtualFree]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x605ea0
push 0xff8
push 0x436a934
push 6
call fcn.00645a6f
add esp, 0xc
mov eax, dword [ebp - 8]
jmp 0x605ea8
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x605eb9
push ebx
call fcn.00645a87
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x20