Function at 0x10049570
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push 0x10048480
push 0x4d6ea5
mov bl, 0xe8
call fcn.10056900
push 0x10048480
push 0x4d7787
call fcn.10056900
push 0x10048480
push 0x4d9568
call fcn.10056900
push 0x100481a0
push 0x4d7348
call fcn.10056900
push 0x100481a0
push 0x4d7a98
call fcn.10056900
push 0x100481a0
push 0x4d9a65
call fcn.10056900
push 0x100489b0
push 0x641777
call fcn.10056900
push 0x10048990
push 0x5604ca
call fcn.10056900
add esp, 0x40
push 0x10048990
push 0x56f5b3
call fcn.10056900
push 0x10048850
push 0x4e17f3
call fcn.10056900
push 0x10048850
push 0x4f6e1f
call fcn.10056900
push 0x10048850
push 0x63d4ac
call fcn.10056900
push 0x10048850
push 0x63d626
call fcn.10056900
push 0x10048850
push 0x64365b
call fcn.10056900
push 0x10048710
push 0x4d7955
call fcn.10056900
push 0x10048710
push 0x4ef6a1
call fcn.10056900
add esp, 0x40
push 0x10048710
push 0x62eac3
call fcn.10056900
push 0x10048710
push 0x6312d3
call fcn.10056900
push 0x10048710
push 0x6316b4
call fcn.10056900
push 0x10048710
push 0x634659
call fcn.10056900
push 0x10048710
push 0x63ec49
call fcn.10056900
push 0x10048710
push 0x640bf5
call fcn.10056900
push 0x10048b40
push 0x66424b
call fcn.10056900
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x38
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x64209b
call esi
mov bl, 0x2a
lea ecx, [ebp - 4]
push ecx
mov byte [0x64209b], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x64209b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6420ae
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6420ae], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6420ae
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x642086
call esi
mov bl, 0x29
lea ecx, [ebp - 4]
push ecx
mov byte [0x642086], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x642086
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6420de
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6420de], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6420de
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6420e7
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x6420e7], 0x3a
mov edx, dword [ebp - 4]
push edx
push 4
push 0x6420e7
call esi
push 0x10048da0
push 0x66419e
mov bl, 0xe8
call fcn.10056900
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6423cf
call esi
mov bl, 0x2c
mov byte [0x6423cf], bl
lea ecx, [ebp - 4]
mov edx, dword [ebp - 4]
push ecx
push edx
push 1
push 0x6423cf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6423bc
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6423bc], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6423bc
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6423a7
call esi
mov bl, 0x2b
lea ecx, [ebp - 4]
push ecx
mov byte [0x6423a7], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6423a7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6425a6
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6425a6], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6425a6
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6425af
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x6425af], 0x3c
mov edx, dword [ebp - 4]
push edx
push 4
push 0x6425af
call esi
push 0x10048fa0
push 0x6641d1
mov bl, 0xe8
call fcn.10056900
push 0x10048ad0
push 0x788fc0
mov bl, 0xe9
call fcn.10056900
push 0x10048af0
push 0x78bfe0
call fcn.10056900
push 0x10049470
push 0x7df83e
mov bl, 0xe8
call fcn.10056900
add esp, 0x20
pop esi
pop ebx
mov esp, ebp
pop ebp
ret