Function at 0x1004ae00
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [0x102e189c], 1
jne 0x1004afd4
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x501957
call esi
lea eax, [ebp - 4]
mov byte [0x501957], 0
push eax
push dword [ebp - 4]
push 1
push 0x501957
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x54eae1
call esi
mov eax, 0x54eae1
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 6
push 0x54eae1
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x54fc92
call esi
mov eax, 0x54fc92
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 6
push 0x54fc92
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x50226b
call esi
lea eax, [ebp - 4]
mov byte [0x50226b], 0
push eax
push dword [ebp - 4]
push 1
push 0x50226b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x54eca3
call esi
mov eax, 0x54eca3
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 6
push 0x54eca3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x54fcec
call esi
mov eax, 0x54fcec
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 6
push 0x54fcec
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x502c4d
call esi
lea eax, [ebp - 4]
mov byte [0x502c4d], 0
push eax
push dword [ebp - 4]
push 1
push 0x502c4d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x54ed6d
call esi
mov eax, 0x54ed6d
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 6
push 0x54ed6d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x54fd5f
call esi
mov eax, 0x54fd5f
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 6
push 0x54fd5f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x54fe3e
call esi
mov eax, 0x54fe3e
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 6
push 0x54fe3e
call esi
pop esi
cmp dword [0x102e1770], 0
je 0x1004b56e
push 0x10047de0
push 0x7df8bb
push 0xe8
call fcn.100d0e40
push 0x10047ea0
push 0x7dd304
push 0xe8
call fcn.100d0e40
push 0x10047ea0
push 0x833b08
push 0xe8
call fcn.100d0e40
push 0x10048120
push 0x48f918
push 0xe8
call fcn.100d0e40
push 0x10048120
push 0x48f94b
push 0xe8
call fcn.100d0e40
push 0x10048120
push 0x48f97e
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x10048120
push 0x48f9b1
push 0xe8
call fcn.100d0e40
push 0x10048120
push 0x48f9f3
push 0xe8
call fcn.100d0e40
push 0x10048120
push 0x48fa35
push 0xe8
call fcn.100d0e40
push 0x10048120
push 0x48fa74
push 0xe8
call fcn.100d0e40
push 0x10048120
push 0x48faa4
push 0xe8
call fcn.100d0e40
push 0x10048120
push 0x501777
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x10048120
push 0x580178
push 0xe8
call fcn.100d0e40
push 0x10048120
push 0x58035a
push 0xe8
call fcn.100d0e40
push 0x10048120
push 0x5803c9
push 0xe8
call fcn.100d0e40
push 0x10048120
push 0x58046f
push 0xe8
call fcn.100d0e40
push 0x10048120
push 0x5804c5
push 0xe8
call fcn.100d0e40
push 0x10048120
push 0x58051b
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x10048120
push 0x580567
push 0xe8
call fcn.100d0e40
push 0xe8
push 0x10047ef0
push 0x664267
push 0xe8
call fcn.100d0e40
push 0x10048940
push 0x5f820c
push 0xe8
call fcn.100d0e40
push 0x10048940
push 0x5f847d
push 0xe8
call fcn.100d0e40
push 0x10048a00
push 0x50186c
push 0xe9
call fcn.100d0e40
add esp, 0x40
push 0x10048a90
push 0x551920
push 0xe9
call fcn.100d0e40
push 0x10048b40
push 0x54ead2
push 0xe9
call fcn.100d0e40
push 0x10048c30
push 0x54f6b8
push 0xe9
call fcn.100d0e40
push 0x10048c90
push 0x54f8f4
push 0xe9
call fcn.100d0e40
push 0x10048cf0
push 0x54fc87
push 0xe9
call fcn.100d0e40
push 0x10048de0
push 0x550710
push 0xe9
call fcn.100d0e40
add esp, 0x48
push 0x10048ed0
push 0x550771
push 0xe9
call fcn.100d0e40
push 0x10048f90
push 0x5507d7
push 0xe9
call fcn.100d0e40
push 0x10049050
push 0x55083d
push 0xe9
call fcn.100d0e40
push 0x10049110
push 0x552781
push 0xe9
call fcn.100d0e40
push 0x100491a0
push 0x55299f
push 0xe9
call fcn.100d0e40
push 0x10049200
push 0x552b92
push 0xe9
call fcn.100d0e40
add esp, 0x48
push 0x10049260
push 0x5531e2
push 0xe9
call fcn.100d0e40
push 0x100492c0
push 0x55d211
push 0xe9
call fcn.100d0e40
push 0x10049350
push 0x564bac
push 0xe9
call fcn.100d0e40
push 0x100493d0
push 0x48e61b
push 0xe9
call fcn.100d0e40
push 0x10049450
push 0x59b663
push 0xe9
call fcn.100d0e40
push 0x100494b0
push 0x5b6ece
push 0xe9
call fcn.100d0e40
add esp, 0x48
push 0x10049570
push 0x5517ae
push 0xe9
call fcn.100d0e40
push 0x100495d0
push 0x55d1e3
push 0xe9
call fcn.100d0e40
push 0x10049660
push 0x564c26
push 0xe9
call fcn.100d0e40
push 0x100496f0
push 0x5964e0
push 0xe9
call fcn.100d0e40
push 0x10049750
push 0x5a3821
push 0xe9
call fcn.100d0e40
push 0x100497d0
push 0x8140cf
push 0xe9
call fcn.100d0e40
add esp, 0x48
push 0x10049830
push 0x5af273
push 0xe9
call fcn.100d0e40
push 0x10049890
push 0x501860
push 0xe9
call fcn.100d0e40
push 0x10049950
push 0x502d1d
push 0xe9
call fcn.100d0e40
push 0x100499a0
push 0x502e4c
push 0xe9
call fcn.100d0e40
push 0x100499f0
push 0x5030d3
push 0xe9
call fcn.100d0e40
push 0x10049a40
push 0x50313f
push 0xe9
call fcn.100d0e40
add esp, 0x48
push 0x10049a90
push 0x4d72f2
push 0xe9
call fcn.100d0e40
push 0x10049ae0
push 0x48e4d8
push 0xe9
call fcn.100d0e40
push 0x10049b30
push 0x48e542
push 0xe9
call fcn.100d0e40
push 0x10049b80
push 0x57e112
push 0xe9
call fcn.100d0e40
push 0x10049c00
push 0x63edd2
push 0xe9
call fcn.100d0e40
push 0x10049c80
push 0x640a96
push 0xe9
call fcn.100d0e40
add esp, 0x48
push 0x10049d00
push 0x640ddb
push 0xe9
call fcn.100d0e40
push 0x10049d90
push 0x564e78
push 0xe9
call fcn.100d0e40
push 0x10049e10
push 0x5e0b4b
push 0xe9
call fcn.100d0e40
push 0x10049e80
push 0x5e03d6
push 0xe9
call fcn.100d0e40
push 0x10049ef0
push 0x5e0370
push 0xe9
call fcn.100d0e40
push 0x1004a150
push 0x48e17d
push 0xe8
call fcn.100d0e40
add esp, 0x48
push 0x1004a150
push 0x503756
push 0xe8
call fcn.100d0e40
push 0x10049f60
push 0x5b5409
push 0xe9
call fcn.100d0e40
push 0x1004a090
push 0x813eab
push 0xe9
call fcn.100d0e40
push 0x1004a0f0
push 0x813ef8
push 0xe9
call fcn.100d0e40
add esp, 0x30
mov esp, ebp
pop ebp
ret