Function at 0x1005d9c0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x88
mov eax, dword [0x1014200c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 0x48
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
je 0x1005da07
mov eax, dword [0x10520738]
mov byte [eax + 0x29], 0
mov eax, dword [0x10520738]
cmp byte [eax + 0x29], 0
jne 0x1005da27
xor al, al
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d9dfe
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x2c
mov ecx, 0x10154cf0
call fcn.10042840
push eax
push dword [0x10520738]
push 0x102e9b44
call fcn.100101d0
mov ecx, dword [0x10520738]
add esp, 0xc
mov byte [ebp - 0x51], al
movss xmm0, dword [ecx + 4]
addss xmm0, dword [0x10138d58]
push 0x101324e7
sub esp, 8
movss dword [esp + 4], xmm0
movss xmm0, dword [ecx]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x10138a20]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push dword [0x10520730]
push 0x102e9b44
call fcn.10010bf0
add esp, 0x14
test al, al
je 0x1005daa3
mov eax, dword [0x10520738]
mov byte [eax + 0x29], 0
push 0x4e
mov ecx, 0x10154cf0
call fcn.10042840
push 0x4f
mov ecx, 0x10154cf0
mov dword [ebp - 0x48], eax
call fcn.10042840
push 0x50
mov ecx, 0x10154cf0
mov dword [ebp - 0x44], eax
call fcn.10042840
push 0x51
mov ecx, 0x10154cf0
mov dword [ebp - 0x40], eax
call fcn.10042840
push 0x52
mov ecx, 0x10154cf0
mov dword [ebp - 0x3c], eax
call fcn.10042840
push 0x5b
mov ecx, 0x10154cf0
mov dword [ebp - 0x38], eax
call fcn.10042840
push 0x57
mov ecx, 0x10154cf0
mov dword [ebp - 0x34], eax
call fcn.10042840
push 0x54
mov ecx, 0x10154cf0
mov dword [ebp - 0x30], eax
call fcn.10042840
push 0x55
mov ecx, 0x10154cf0
mov dword [ebp - 0x2c], eax
call fcn.10042840
push 0x56
mov ecx, 0x10154cf0
mov dword [ebp - 0x28], eax
call fcn.10042840
push 0x58
mov ecx, 0x10154cf0
mov dword [ebp - 0x24], eax
call fcn.10042840
push 0x5c
mov ecx, 0x10154cf0
mov dword [ebp - 0x20], eax
call fcn.10042840
push 0x5d
mov ecx, 0x10154cf0
mov dword [ebp - 0x1c], eax
call fcn.10042840
push 0x59
mov ecx, 0x10154cf0
mov dword [ebp - 0x18], eax
call fcn.10042840
push 0x5a
mov ecx, 0x10154cf0
mov dword [ebp - 0x14], eax
call fcn.10042840
push 0x157
mov ecx, 0x10154cf0
mov dword [ebp - 0x10], eax
call fcn.10042840
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
xor cl, cl
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x49], cl
nop word [eax + eax]
movsx ecx, cl
push dword [ebp + ecx*4 - 0x48]
lea eax, [ecx + ecx*4]
shl eax, 2
sub esp, 8
movd xmm1, eax
mov eax, dword [0x10520738]
cvtdq2ps xmm1, xmm1
movss xmm0, dword [eax + 4]
addss xmm0, dword [0x10138de8]
addss xmm1, xmm0
movss xmm0, dword [eax]
addss xmm0, dword [0x10138d40]
movss dword [esp + 4], xmm1
movss dword [esp], xmm0
push dword [ecx*4 + 0x1052073c]
push 0x102e9b44
call fcn.1000fca0
mov cl, byte [ebp - 0x49]
add esp, 0x14
test al, al
je 0x1005e0c7
test cl, cl
jne 0x1005dc29
cmp byte [0x10142e4c], cl
sete byte [0x10142e4c]
jmp 0x1005e0c7
cmp cl, 1
jne 0x1005dc43
xor eax, eax
cmp dword [0x102bba10], eax
sete al
mov dword [0x102bba10], eax
jmp 0x1005e0c7
cmp cl, 2
jne 0x1005dc5b
cmp byte [0x1018cc3d], 1
setne byte [0x1018cc3d]
jmp 0x1005e0c7
cmp cl, 3
jne 0x1005dc75
xor eax, eax
cmp dword [0x102bba40], eax
sete al
mov dword [0x102bba40], eax
jmp 0x1005e0c7
cmp cl, 4
jne 0x1005dc8d
cmp byte [0x1018d03d], 1
setne byte [0x1018d03d]
jmp 0x1005e0c7
cmp cl, 5
jne 0x1005dd36
cmp dword [0x102bba3c], 0
je 0x1005dcf9
lea eax, [ebp - 0x50]
mov byte [ebp - 0x5c], 0xe8
push eax
push 0x40
push 5
push 0x57655b
mov dword [ebp - 0x5b], 0x93250
mov dword [ebp - 0x50], 0
call esi
test eax, eax
je 0x1005dceb
mov eax, dword [ebp - 0x5c]
mov ecx, 0x57655b
mov dword [ecx], eax
mov al, byte [ebp - 0x58]
mov byte [ecx + 4], al
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x50]
mov dword [ebp - 0x78], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005dced
call edi
xor eax, eax
mov dword [0x102bba3c], eax
jmp 0x1005e0c4
lea eax, [ebp - 0x68]
push eax
push 0x40
push 5
push 0x57655b
call esi
mov eax, 0x57655b
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x68]
push eax
push dword [ebp - 0x68]
push 5
push 0x57655b
call esi
mov eax, 1
mov dword [0x102bba3c], eax
jmp 0x1005e0c4
cmp cl, 6
jne 0x1005ddd1
cmp dword [0x102bba38], 0
lea eax, [ebp - 0x50]
push eax
push 0x40
push 1
mov dword [ebp - 0x50], 0
push 0x5de2b2
je 0x1005dd95
mov byte [ebp - 0x4a], 0
call esi
test eax, eax
je 0x1005dd87
mov al, byte [ebp - 0x4a]
mov ecx, 0x5de2b2
mov byte [ecx], al
lea eax, [ebp - 0x7c]
push eax
push dword [ebp - 0x50]
mov dword [ebp - 0x7c], 0
push 1
push ecx
call esi
test eax, eax
jne 0x1005dd89
call edi
xor eax, eax
mov dword [0x102bba38], eax
jmp 0x1005e0c4
mov byte [ebp - 0x4a], 1
call esi
test eax, eax
je 0x1005ddc0
mov al, byte [ebp - 0x4a]
mov ecx, 0x5de2b2
mov byte [ecx], al
lea eax, [ebp - 0x80]
push eax
push dword [ebp - 0x50]
mov dword [ebp - 0x80], 0
push 1
push ecx
call esi
test eax, eax
jne 0x1005ddc2
call edi
mov eax, 1
mov dword [0x102bba38], eax
jmp 0x1005e0c4
cmp cl, 7
jne 0x1005de2d
cmp dword [0x102bba34], 0
je 0x1005de07
push 0x1002e4f0
push 0x60b36a
push 0xe9
call fcn.100caf90
add esp, 0xc
call fcn.1002e5b0
xor eax, eax
mov dword [0x102bba34], eax
jmp 0x1005e0c4
push 0x1002e3a0
push 0x60b36a
push 0xe9
call fcn.100caf90
mov eax, 1
add esp, 0xc
mov dword [0x102bba34], eax
jmp 0x1005e0c4
cmp cl, 8
jne 0x1005de60
cmp dword [0x102bba30], 0
je 0x1005de4c
call fcn.1002e650
xor eax, eax
mov dword [0x102bba30], eax
jmp 0x1005e0c4
call fcn.1002e5e0
mov eax, 1
mov dword [0x102bba30], eax
jmp 0x1005e0c4
cmp cl, 9
jne 0x1005df0f
cmp dword [0x102bba2c], 0
je 0x1005ded2
lea eax, [ebp - 0x50]
mov byte [ebp - 0x64], 0xe8
push eax
push 0x40
push 5
push 0x588661
mov dword [ebp - 0x63], 0xfffdcf5a
mov dword [ebp - 0x50], 0
call esi
test eax, eax
je 0x1005dec4
mov eax, dword [ebp - 0x64]
mov ecx, 0x588661
mov dword [ecx], eax
mov al, byte [ebp - 0x60]
mov byte [ecx + 4], al
lea eax, [ebp - 0x84]
push eax
push dword [ebp - 0x50]
mov dword [ebp - 0x84], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005dec6
call edi
xor eax, eax
mov dword [0x102bba2c], eax
jmp 0x1005e0c4
lea eax, [ebp - 0x6c]
push eax
push 0x40
push 5
push 0x588661
call esi
mov eax, 0x588661
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0x6c]
push 5
push 0x588661
call esi
mov eax, 1
mov dword [0x102bba2c], eax
jmp 0x1005e0c4
cmp cl, 0xa
jne 0x1005df54
cmp dword [0x102bba28], 0
je 0x1005df26
xor edi, edi
mov eax, 0x1002e7d0
jmp 0x1005df30
mov edi, 1
mov eax, 0x1002e7c0
push eax
push 0x57d278
push 0xe9
call fcn.100caf90
mov dword [0x102bba28], edi
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1005e0c4
cmp cl, 0xb
jne 0x1005df99
cmp dword [0x102bba24], 0
je 0x1005df6b
xor edi, edi
mov eax, 0x1002e830
jmp 0x1005df75
mov edi, 1
mov eax, 0x1002e820
push eax
push 0x771328
push 0xe9
call fcn.100caf90
mov dword [0x102bba24], edi
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1005e0c4
cmp cl, 0xc
jne 0x1005dfde
cmp dword [0x102bba20], 0
je 0x1005dfb0
xor edi, edi
mov eax, 0x1002e850
jmp 0x1005dfba
mov edi, 1
mov eax, 0x1002e840
push eax
push 0x74cd50
push 0xe9
call fcn.100caf90
mov dword [0x102bba20], edi
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1005e0c4
cmp cl, 0xd
jne 0x1005e050
cmp dword [0x102bba1c], 0
je 0x1005e01e
lea eax, [ebp - 0x70]
push eax
push 0x40
push 1
push 0x54a270
call esi
lea eax, [ebp - 0x70]
mov byte [0x54a270], 0x55
push eax
push dword [ebp - 0x70]
push 1
push 0x54a270
call esi
xor eax, eax
mov dword [0x102bba1c], eax
jmp 0x1005e0c4
lea eax, [ebp - 0x74]
push eax
push 0x40
push 1
push 0x54a270
call esi
lea eax, [ebp - 0x74]
mov byte [0x54a270], 0xc3
push eax
push dword [ebp - 0x74]
push 1
push 0x54a270
call esi
mov eax, 1
mov dword [0x102bba1c], eax
jmp 0x1005e0c4
cmp cl, 0xe
jne 0x1005e07d
cmp dword [0x102bba18], 0
je 0x1005e06c
call fcn.1002e940
xor eax, eax
mov dword [0x102bba18], eax
jmp 0x1005e0c4
call fcn.1002e8e0
mov eax, 1
mov dword [0x102bba18], eax
jmp 0x1005e0c4
cmp cl, 0xf
jne 0x1005e0c7
cmp dword [0x102bba6c], 0
mov ecx, 0x5f8924
je 0x1005e0ab
push 0xe8
mov edx, 0x95a1e0
call fcn.100ca660
mov dword [0x102bba6c], 0
jmp 0x1005e0c1
push 5
mov edx, 0x90
call fcn.100cb010
mov dword [0x102bba6c], 1
add esp, 4
mov cl, byte [ebp - 0x49]
inc cl
mov byte [ebp - 0x49], cl
cmp cl, 0x10
jl 0x1005dbb0
mov ecx, dword [ebp - 4]
mov al, byte [ebp - 0x51]
xor ecx, ebp
pop edi
pop esi
call fcn.100d9dfe
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret