Function at 0x406d2f
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
jmp 0x4aba50
sub esp, 0x12c
mov eax, dword [0x589780]
xor eax, esp
mov dword [esp + 0x128], eax
cmp byte [0x58e540], 0
jne 0x4abf2d
cmp dword [0x58e548], 0
mov dword [0x58e54c], 0
mov dword [0x58e550], 0
mov dword [0x58e554], 0
jne 0x4abaa9
push 0
push 0x566c90
call fcn.004072fc
mov dword [0x58e548], eax
cmp byte [0x58e541], 0
jne 0x4abe9f
push 0x12
mov byte [0x58e541], 1
call fcn.004018ed
test eax, eax
jne 0x4abe9f
push ebp
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, eax
lea eax, [esp + 0xf0]
push 0x20
push eax
push 0x566ccc
call fcn.0040a290
push esi
push eax
push str._s__x
lea eax, [esp + 0x11c]
push 0x20
push eax
call fcn.00409a8e
add esp, 0x14
lea eax, [esp + 0x110]
push eax
push 0xc
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ebp, eax
test ebp, ebp
je 0x4abe9d
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push 0
push 0
push 0xf001f
push ebp
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov esi, eax
test esi, esi
je 0x4abe94
xor edi, edi
cmp ebx, 0xb7
jne 0x4abba7
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esp + 0xf8]
cmp dword [esi], eax
jne 0x4abb72
mov ecx, dword [esp + 0xfc]
cmp dword [esi + 4], ecx
je 0x4abb8a
push 0x32
call ebx
inc edi
cmp edi, 0x32
jl 0x4abb5b
mov ecx, dword [esp + 0xfc]
mov eax, dword [esp + 0xf8]
cmp dword [esi], eax
jne 0x4abba7
cmp dword [esi + 4], ecx
jne 0x4abba7
mov eax, dword [esi + 8]
push esi
mov dword [0x58e544], eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
jmp 0x4abe94
push 1
push 0x566cbc
call fcn.00403887
mov ebx, eax
push ebx
mov ecx, dword [ebx]
mov edx, dword [ebx + 4]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], edx
call fcn.00401730
test eax, eax
jne 0x4abbd5
xorps xmm0, xmm0
movlpd qword [esp + 0x1c], xmm0
push ebx
lea ecx, [esp + 0x2c]
call fcn.00408b89
push 1
push 0x566c84
call fcn.004072fc
push dword [esp + 0x84]
mov dword [esp + 0x1c], eax
push 0xe
call fcn.004049b2
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 8
mov dword [esp + 0x14], eax
xor ecx, ecx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xdc]
test eax, eax
jle 0x4abdfb
mov edx, dword [esp + 0xd8]
add edx, 0xc
nop dword [eax]
mov eax, dword [esp + 0x18]
cmp dword [edx], eax
mov eax, dword [esp + 0xdc]
je 0x4abc4c
inc ecx
add edx, 0x1c
cmp ecx, eax
jl 0x4abc30
jmp 0x4abdfb
mov eax, dword [esp + 0xd8]
lea edi, [ecx*8]
sub edi, ecx
shl edi, 2
cmp dword [edi + eax + 0x14], 0
jne 0x4abc71
cmp dword [edi + eax + 0x18], 0
je 0x4abdf5
mov eax, dword [esp + 0x14]
mov byte [eax], 0xff
mov eax, dword [esp + 0x10]
mov byte [eax + 1], 0x25
mov ecx, dword [esp + 0x10]
lea eax, [ecx + 6]
mov dword [ecx + 2], eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov dword [eax + 6], ecx
mov eax, dword [esp + 0x10]
mov dword [eax + 0xa], eax
lea eax, [esp + 0x24]
push eax
push 0x20
push 0xe
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [esp + 0x10]
mov dword [esi + 8], eax
mov eax, dword [esp + 0xd8]
add eax, edi
cmp dword [eax + 0x10], 0
je 0x4abd1a
lea ecx, [esp + 0x14]
push ecx
push 0x40
push 8
push dword [eax + 0x14]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x4abdf5
mov ecx, dword [esp + 0xd8]
mov eax, dword [esp + 0x10]
push 4
sub eax, dword [ecx + edi + 4]
sub eax, 5
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push dword [ecx + edi + 0x14]
push eax
call fcn.004094b7
test eax, eax
jne 0x4abd65
mov eax, dword [esp + 0xd8]
mov ecx, dword [edi + eax + 0x14]
mov eax, dword [esp + 0x18]
jmp 0x4abd63
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x4abd90
lea eax, [esp + 0x14]
push eax
push 0x40
push 8
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x4abdf5
mov eax, dword [esp + 0xd8]
push 4
push dword [edi + eax + 0x14]
lea eax, [esp + 0x18]
push eax
call fcn.004094b7
test eax, eax
jne 0x4abd65
mov eax, dword [esp + 0xd8]
mov ecx, dword [edi + eax + 0x14]
mov eax, dword [esp + 0x10]
mov dword [ecx], eax
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
mov eax, dword [esp + 0xe0]
push 8
push dword [edi + eax + 0x14]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call edi
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov dword [0x58e544], eax
jmp 0x4abdfb
lea ecx, [esp + 0x18]
push ecx
push 0x40
push 8
push dword [eax + 0x18]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x4abdf5
mov eax, dword [esp + 0x10]
add eax, 0xa
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xd8]
push 4
push dword [edi + eax + 0x18]
lea eax, [esp + 0x1c]
push eax
call fcn.004094b7
test eax, eax
jne 0x4abddd
mov eax, dword [esp + 0xd8]
mov ecx, dword [edi + eax + 0x18]
mov eax, dword [esp + 0x14]
mov dword [ecx], eax
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x1c]
mov eax, dword [esp + 0xe0]
push 8
push dword [edi + eax + 0x18]
jmp 0x4abd7b
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [esp + 0x1c]
or eax, dword [esp + 0x20]
je 0x4abe51
lea eax, [esp + 0x14]
push eax
push 0x40
push 8
push ebx
call edi
test eax, eax
je 0x4abe51
push 8
push ebx
lea eax, [esp + 0x24]
push eax
call fcn.004094b7
test eax, eax
jne 0x4abe33
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [ebx], eax
mov dword [ebx + 4], ecx
push 8
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 8
push ebx
call edi
cmp dword [0x58e544], 0
jne 0x4abe74
push esi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push 0x8000
push 0
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x4abe87
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xfc]
mov dword [esi], eax
mov dword [esi + 4], ecx
lea ecx, [esp + 0x28]
call fcn.004032b5
test ebp, ebp
je 0x4abe9b
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop ebx
pop esi
pop ebp
mov eax, dword [0x58e544]
push 0
push 0
test eax, eax
je 0x4abeb8
push 0x58e538
push 0x4ac0f0
jmp 0x4abed4
push 0x58e534
push 0x4ac3c0
push 1
push 0x566cbc
call fcn.00403887
push eax
call fcn.0040ad58
push eax
push 0
push 0x562201
push 0x562201
push 0
push 0
call fcn.004ab5e0
add esp, 0x28
push 0
push 0
push 0x58e53c
push 0x4ac1f0
push 1
push 0x566ca0
call fcn.004072fc
push eax
call fcn.0040ad58
push eax
push 0
push 0x562201
push 0x562201
push 0
push 0
call fcn.004ab5e0
add esp, 0x28
mov byte [0x58e540], 1
mov ecx, dword [esp + 0x128]
xor ecx, esp
call fcn.0040512d
add esp, 0x12c
ret