Function at 0x100148b0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
mov ax, word [0x10113d78]
sub esp, 8
cmp ax, 2
jne 0x100148df
push 0x10012270
push 0x4d712a
push 0xe8
call fcn.10063f10
mov ax, word [0x10113d78]
add esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
cmp ax, 3
jne 0x10014b00
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x5b993a
call esi
mov eax, 0x5b993a
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 5
push 0x5b993a
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 4
push 0x63d160
call esi
test eax, eax
je 0x10014965
mov eax, 0x63d160
mov dword [eax], 0
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 4
push 0x63d160
call esi
test eax, eax
jne 0x10014967
call edi
push 0x10012270
push 0x4d712a
push 0xe8
call fcn.10063f10
add esp, 8
mov edx, 5
mov ecx, 0x63d1ce
call fcn.10063b20
push 0xe9
mov edx, 0x100146d0
mov ecx, 0x63d1ce
call fcn.10063ab0
add esp, 4
mov edx, 5
mov ecx, 0x63d40f
call fcn.10063b20
push 0xe9
mov edx, 0x10014700
mov ecx, 0x63d40f
call fcn.10063ab0
add esp, 4
mov edx, 5
mov ecx, 0x63d1eb
call fcn.10063b20
push 0xe9
mov edx, 0x10014730
mov ecx, 0x63d1eb
call fcn.10063ab0
add esp, 4
mov edx, 5
mov ecx, 0x63d42c
call fcn.10063b20
push 0xe9
mov edx, 0x10014760
mov ecx, 0x63d42c
call fcn.10063ab0
add esp, 4
mov edx, 5
mov ecx, 0x63d208
call fcn.10063b20
push 0xe9
mov edx, 0x10014790
mov ecx, 0x63d208
call fcn.10063ab0
add esp, 4
mov edx, 5
mov ecx, 0x63d449
call fcn.10063b20
push 0xe9
mov edx, 0x100147c0
mov ecx, 0x63d449
call fcn.10063ab0
add esp, 4
mov edx, 5
mov ecx, 0x63d225
call fcn.10063b20
push 0xe9
mov edx, 0x100147f0
mov ecx, 0x63d225
call fcn.10063ab0
add esp, 4
mov edx, 5
mov ecx, 0x63d466
call fcn.10063b20
push 0xe9
mov edx, 0x10014820
mov ecx, 0x63d466
call fcn.10063ab0
add esp, 4
mov edx, 5
mov ecx, 0x63d242
call fcn.10063b20
push 0xe9
mov edx, 0x10014850
mov ecx, 0x63d242
call fcn.10063ab0
add esp, 4
mov edx, 5
mov ecx, 0x63d483
call fcn.10063b20
push 0xe9
mov edx, 0x10014880
mov ecx, 0x63d483
call fcn.10063ab0
mov ax, word [0x10113d78]
add esp, 8
cmp ax, 4
jne 0x10014c4e
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 4
push 0x4d75f0
call esi
test eax, eax
je 0x10014b4a
mov eax, 0x4d75f0
mov dword [eax], 0x5e
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 4
push 0x4d75f0
call esi
test eax, eax
jne 0x10014b4c
call edi
cmp word [0x10113d7a], 1
lea eax, [ebp - 4]
push eax
push 0x40
push 4
mov dword [ebp - 4], 0
push 0x4d6c2c
jne 0x10014b7d
call esi
test eax, eax
je 0x10014ba9
mov eax, 0x4d6c2c
mov dword [eax], 0x7c
jmp 0x10014b8e
call esi
test eax, eax
je 0x10014ba9
mov eax, 0x4d6c2c
mov dword [eax], 0x5d
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push dword [ebp - 4]
push 4
push 0x4d6c2c
call esi
test eax, eax
jne 0x10014bab
call edi
push 0x10012270
push 0x4d76fb
push 0xe8
call fcn.10063f10
push 0x10012270
push 0x4d79c3
push 0xe8
call fcn.10063f10
push 0x10012270
push 0x4d712a
push 0xe8
call fcn.10063f10
push 0x10012620
push 0x5edda9
push 0xe8
call fcn.10063f10
push 0xe9
mov edx, 0x10013b10
mov ecx, 0x4d87c8
call fcn.10063ab0
push 0xe9
mov edx, 0x10013b30
mov ecx, 0x4d87fc
call fcn.10063ab0
push 0xe9
mov edx, 0x10013b50
mov ecx, 0x5db52b
call fcn.10063ab0
push 0x100146c0
push 0x4d7eb1
push 0xe8
call fcn.10063f10
add esp, 0x48
pop edi
pop esi
mov esp, ebp
pop ebp
ret