Function at 0x1004d2e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
push edi
push 0x1004b5c0
push 0x5cd07d
push 0xe9
call fcn.10063f10
push 0x1004c8d0
push 0x5cf11d
push 0xe9
call fcn.10063f10
push 0x1004b560
push 0x5914ab
push 0xe8
call fcn.10063f10
push 0x1004b560
push 0x5914c7
push 0xe8
call fcn.10063f10
push 0x1004b560
push 0x5a0652
push 0xe8
call fcn.10063f10
push 0x1004b560
push 0x5a0775
push 0xe8
call fcn.10063f10
add esp, 0x48
push 0x1004b560
push 0x5b6cf4
push 0xe8
call fcn.10063f10
push 0x1004b560
push 0x7e05a8
push 0xe8
call fcn.10063f10
add esp, 0x14
mov edx, 6
mov ecx, 0x74a128
call fcn.10063b20
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 4
mov eax, 0x1004a6d0
mov byte [ebp - 0x10], 0xe9
sub eax, 0x74a12d
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x74a128
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1004d3fe
mov eax, dword [ebp - 0x10]
mov ecx, 0x74a128
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1004d400
call esi
push ebx
push 0x1004a830
push 0x5cc8e4
push 0xe9
call fcn.10063f10
add esp, 0xc
mov ebx, 0x56595e
mov esi, 6
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push ebx
call edi
lea eax, [ebp - 4]
mov byte [ebx], 0x90
push eax
push dword [ebp - 4]
push 1
push ebx
call edi
inc ebx
sub esi, 1
jne 0x1004d422
push 7
call fcn.10064b54
mov ebx, eax
mov dword [ebp - 4], esi
mov eax, 0x90909090
add esp, 4
mov dword [ebx], eax
mov word [ebx + 4], ax
mov byte [ebx + 6], al
lea eax, [ebp - 4]
push eax
push 0x40
push 7
push 0x566178
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1004d4a6
mov eax, dword [ebx]
mov ecx, 0x566178
mov dword [ecx], eax
mov ax, word [ebx + 4]
mov word [ecx + 4], ax
mov al, byte [ebx + 6]
mov byte [ecx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 7
push ecx
call edi
test eax, eax
jne 0x1004d4a8
call esi
mov eax, 0x1004a8a0
mov byte [ebp - 0x10], 0xe9
sub eax, 0x56617d
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x566178
call edi
test eax, eax
je 0x1004d4fa
mov eax, dword [ebp - 0x10]
mov ecx, 0x566178
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1004d4fc
call esi
push 6
call fcn.10064b54
mov ebx, eax
mov dword [ebp - 4], 0
add esp, 4
mov eax, 0x90909090
mov dword [ebx], eax
mov word [ebx + 4], ax
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x749dcc
call edi
test eax, eax
je 0x1004d555
mov eax, dword [ebx]
mov ecx, 0x749dcc
mov dword [ecx], eax
mov ax, word [ebx + 4]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call edi
test eax, eax
jne 0x1004d557
call esi
mov eax, 0x1004a780
mov byte [ebp - 0x10], 0xe9
sub eax, 0x749dd1
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x749dcc
call edi
test eax, eax
je 0x1004d5a9
mov eax, dword [ebp - 0x10]
mov ecx, 0x749dcc
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1004d5ab
call esi
push 6
call fcn.10064b54
mov ebx, eax
mov dword [ebp - 4], 0
add esp, 4
mov eax, 0x90909090
mov dword [ebx], eax
mov word [ebx + 4], ax
lea eax, [ebp - 4]
push eax
push 0x40
push 6
push 0x56595e
call edi
test eax, eax
je 0x1004d604
mov eax, dword [ebx]
mov ecx, 0x56595e
mov dword [ecx], eax
mov ax, word [ebx + 4]
mov word [ecx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 6
push ecx
call edi
test eax, eax
jne 0x1004d606
call esi
mov eax, 0x1004b4e0
mov byte [ebp - 0x10], 0xe9
sub eax, 0x565963
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x56595e
call edi
pop ebx
test eax, eax
je 0x1004d659
mov eax, dword [ebp - 0x10]
mov ecx, 0x56595e
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1004d65b
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret