Function at 0x10049fc0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [0x1028ad5c], 1
jne 0x1004a876
movaps xmm0, xmmword [0x100bd170]
movups xmmword [0x1023f340], xmm0
mov dword [0x1023f358], 0
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f3a0], xmm0
mov word [0x1023f35c], 0
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f400], xmm0
mov dword [0x1023f33c], 0xc942
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f460], xmm0
mov dword [0x1023f350], 0x43980000
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f4c0], xmm0
mov dword [0x1023f354], 0x43a40000
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f520], xmm0
mov byte [0x1023f35e], 0
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f580], xmm0
mov dword [0x1023f3b8], 0
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f5e0], xmm0
mov word [0x1023f3bc], 0
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f640], xmm0
mov dword [0x1023f39c], 0xc93f
movaps xmm0, xmmword [0x100bd230]
mov dword [0x1023f3b0], 0x43150000
mov dword [0x1023f3b4], 0x42080000
mov byte [0x1023f3be], 0
mov dword [0x1023f418], 0
mov word [0x1023f41c], 0
mov dword [0x1023f3fc], 0xc940
mov dword [0x1023f410], 0x43150000
mov dword [0x1023f414], 0x42080000
mov byte [0x1023f41e], 0
mov dword [0x1023f478], 0
mov word [0x1023f47c], 0
mov dword [0x1023f45c], 0xc941
mov dword [0x1023f470], 0x43150000
mov dword [0x1023f474], 0x42080000
mov byte [0x1023f47e], 0
mov dword [0x1023f4d8], 0
mov word [0x1023f4dc], 0
mov dword [0x1023f4bc], 0xc93f
mov dword [0x1023f4d0], 0x43150000
mov dword [0x1023f4d4], 0x42080000
mov byte [0x1023f4de], 0
mov dword [0x1023f538], 0
mov word [0x1023f53c], 0
mov dword [0x1023f51c], 0xc940
mov dword [0x1023f530], 0x43150000
mov dword [0x1023f534], 0x42080000
mov byte [0x1023f53e], 0
mov dword [0x1023f598], 0
mov word [0x1023f59c], 0
mov dword [0x1023f57c], 0xc941
mov dword [0x1023f590], 0x43150000
mov dword [0x1023f594], 0x42080000
mov byte [0x1023f59e], 0
mov dword [0x1023f5f8], 0
mov word [0x1023f5fc], 0
mov dword [0x1023f5dc], 0xc93f
mov dword [0x1023f5f0], 0x43150000
mov dword [0x1023f5f4], 0x42080000
mov byte [0x1023f5fe], 0
mov dword [0x1023f658], 0
mov word [0x1023f65c], 0
mov dword [0x1023f63c], 0xc940
mov dword [0x1023f650], 0x43150000
mov dword [0x1023f654], 0x42080000
mov byte [0x1023f65e], 0
mov dword [0x1023f6b8], 0
mov word [0x1023f6bc], 0
mov dword [0x1023f69c], 0xc941
movups xmmword [0x1023f6a0], xmm0
mov dword [0x1023f6b0], 0x43150000
mov dword [0x1023f6b4], 0x42080000
mov byte [0x1023f6be], 0
mov dword [0x1023f718], 0
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f700], xmm0
mov word [0x1023f71c], 0
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f760], xmm0
mov dword [0x1023f6fc], 0xc93f
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f7c0], xmm0
mov dword [0x1023f710], 0x43150000
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f820], xmm0
mov dword [0x1023f714], 0x42080000
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f880], xmm0
mov byte [0x1023f71e], 0
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f8e0], xmm0
mov dword [0x1023f778], 0
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f940], xmm0
mov word [0x1023f77c], 0
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023f9a0], xmm0
mov dword [0x1023f75c], 0xc940
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023fa00], xmm0
mov dword [0x1023f770], 0x43150000
movaps xmm0, xmmword [0x100bd230]
mov dword [0x1023f774], 0x42080000
mov byte [0x1023f77e], 0
mov dword [0x1023f7d8], 0
mov word [0x1023f7dc], 0
mov dword [0x1023f7bc], 0xc941
mov dword [0x1023f7d0], 0x43150000
mov dword [0x1023f7d4], 0x42080000
mov byte [0x1023f7de], 0
mov dword [0x1023f838], 0
mov word [0x1023f83c], 0
mov dword [0x1023f81c], 0xc93f
mov dword [0x1023f830], 0x43150000
mov dword [0x1023f834], 0x42080000
mov byte [0x1023f83e], 0
mov dword [0x1023f898], 0
mov word [0x1023f89c], 0
mov dword [0x1023f87c], 0xc940
mov dword [0x1023f890], 0x43150000
mov dword [0x1023f894], 0x42080000
mov byte [0x1023f89e], 0
mov dword [0x1023f8f8], 0
mov word [0x1023f8fc], 0
mov dword [0x1023f8dc], 0xc941
mov dword [0x1023f8f0], 0x43150000
mov dword [0x1023f8f4], 0x42080000
mov byte [0x1023f8fe], 0
mov dword [0x1023f958], 0
mov word [0x1023f95c], 0
mov dword [0x1023f93c], 0xc93f
mov dword [0x1023f950], 0x43150000
mov dword [0x1023f954], 0x42080000
mov byte [0x1023f95e], 0
mov dword [0x1023f9b8], 0
mov word [0x1023f9bc], 0
mov dword [0x1023f99c], 0xc940
mov dword [0x1023f9b0], 0x43150000
mov dword [0x1023f9b4], 0x42080000
mov byte [0x1023f9be], 0
mov dword [0x1023fa18], 0
mov word [0x1023fa1c], 0
mov dword [0x1023f9fc], 0xc941
mov dword [0x1023fa10], 0x43150000
mov dword [0x1023fa14], 0x42080000
mov byte [0x1023fa1e], 0
mov dword [0x1023fa78], 0
mov word [0x1023fa7c], 0
mov dword [0x1023fa5c], 0xc93f
movups xmmword [0x1023fa60], xmm0
mov dword [0x1023fa70], 0x43150000
mov dword [0x1023fa74], 0x42080000
mov byte [0x1023fa7e], 0
mov dword [0x1023fad8], 0
mov word [0x1023fadc], 0
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023fac0], xmm0
mov dword [0x1023fabc], 0xc940
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023fb20], xmm0
mov dword [0x1023fad0], 0x43150000
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023fb80], xmm0
mov dword [0x1023fad4], 0x42080000
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023fbe0], xmm0
mov byte [0x1023fade], 0
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023fc40], xmm0
mov dword [0x1023fb38], 0
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023fca0], xmm0
mov word [0x1023fb3c], 0
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023fd00], xmm0
mov dword [0x1023fb1c], 0xc941
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023fd60], xmm0
mov dword [0x1023fb30], 0x43150000
movaps xmm0, xmmword [0x100bd230]
movups xmmword [0x1023fdc0], xmm0
mov dword [0x1023fb34], 0x42080000
movaps xmm0, xmmword [0x100bd230]
mov byte [0x1023fb3e], 0
mov dword [0x1023fb98], 0
mov word [0x1023fb9c], 0
mov dword [0x1023fb7c], 0xc93f
mov dword [0x1023fb90], 0x43150000
mov dword [0x1023fb94], 0x42080000
mov byte [0x1023fb9e], 0
mov dword [0x1023fbf8], 0
mov word [0x1023fbfc], 0
mov dword [0x1023fbdc], 0xc940
mov dword [0x1023fbf0], 0x43150000
mov dword [0x1023fbf4], 0x42080000
mov byte [0x1023fbfe], 0
mov dword [0x1023fc58], 0
mov word [0x1023fc5c], 0
mov dword [0x1023fc3c], 0xc941
mov dword [0x1023fc50], 0x43150000
mov dword [0x1023fc54], 0x42080000
mov byte [0x1023fc5e], 0
mov dword [0x1023fcb8], 0
mov word [0x1023fcbc], 0
mov dword [0x1023fc9c], 0xc93f
mov dword [0x1023fcb0], 0x43150000
mov dword [0x1023fcb4], 0x42080000
mov byte [0x1023fcbe], 0
mov dword [0x1023fd18], 0
mov word [0x1023fd1c], 0
mov dword [0x1023fcfc], 0xc940
mov dword [0x1023fd10], 0x43150000
mov dword [0x1023fd14], 0x42080000
mov byte [0x1023fd1e], 0
mov dword [0x1023fd78], 0
mov word [0x1023fd7c], 0
mov dword [0x1023fd5c], 0xc941
mov dword [0x1023fd70], 0x43150000
mov dword [0x1023fd74], 0x42080000
mov byte [0x1023fd7e], 0
mov dword [0x1023fdd8], 0
mov word [0x1023fddc], 0
mov dword [0x1023fdbc], 0xc93f
mov dword [0x1023fdd0], 0x43150000
mov dword [0x1023fdd4], 0x42080000
mov byte [0x1023fdde], 0
mov dword [0x1023fe38], 0
mov word [0x1023fe3c], 0
mov dword [0x1023fe1c], 0xc940
movups xmmword [0x1023fe20], xmm0
mov dword [0x1023fe30], 0x43150000
mov dword [0x1023fe34], 0x42080000
mov byte [0x1023fe3e], 0
mov dword [0x1023fe98], 0
mov word [0x1023fe9c], 0
mov dword [0x1023fe7c], 0xc941
movaps xmm0, xmmword [0x100bd230]
push 0x4ddde3
push 0x4dddd0
push 0xe9
movups xmmword [0x1023fe80], xmm0
mov dword [0x1023fe90], 0x43150000
mov dword [0x1023fe94], 0x42080000
mov byte [0x1023fe9e], 0
call fcn.10085ba0
push 0x4dd9a4
push 0x4dd99d
push 0xe9
call fcn.10085ba0
add esp, 0x18
push ebx
push esi
push 0x1004c520
push 0x43ff6b
push 0xe8
call fcn.10085ba0
push 0x1004c520
push 0x4aa66c
push 0xe8
call fcn.10085ba0
push 0x1004c520
push 0x635fcf
push 0xe8
call fcn.10085ba0
push 0x1004b100
push 0x4dccc2
push 0xff
call fcn.10085ba0
push 0x10049ec0
push 0x5cf40e
push 0xe9
call fcn.10085ba0
push 0x1004c710
push 0x4ab4ef
push 0xe8
call fcn.10085ba0
add esp, 0x48
push 0x1004cf70
push 0x4dd96e
push 0xe8
call fcn.10085ba0
push 0x10049df0
push 0x436773
push 0xe9
call fcn.10085ba0
mov bl, byte [0x1020400c]
lea eax, [ebp - 4]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x18
push eax
push 0x40
push 1
push 0x4dd95e
call esi
lea eax, [ebp - 4]
mov byte [0x4dd95e], bl
push eax
push dword [ebp - 4]
push 1
push 0x4dd95e
call esi
mov bl, byte [0x1028adbc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4371bf
call esi
lea eax, [ebp - 4]
mov byte [0x4371bf], bl
push eax
push dword [ebp - 4]
push 1
push 0x4371bf
call esi
mov bl, byte [0x1028adbc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4371ce
call esi
lea eax, [ebp - 4]
mov byte [0x4371ce], bl
push eax
push dword [ebp - 4]
push 1
push 0x4371ce
call esi
mov bl, byte [0x1028adbc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x437212
call esi
lea eax, [ebp - 4]
mov byte [0x437212], bl
push eax
push dword [ebp - 4]
push 1
push 0x437212
call esi
mov bl, byte [0x1028adbc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x439db1
call esi
lea eax, [ebp - 4]
mov byte [0x439db1], bl
push eax
push dword [ebp - 4]
push 1
push 0x439db1
call esi
mov bl, byte [0x1028adbc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x439e47
call esi
lea eax, [ebp - 4]
mov byte [0x439e47], bl
push eax
push dword [ebp - 4]
push 1
push 0x439e47
call esi
mov bl, byte [0x1028adbc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4ddc8e
call esi
lea eax, [ebp - 4]
mov byte [0x4ddc8e], bl
push eax
push dword [ebp - 4]
push 1
push 0x4ddc8e
call esi
mov bl, byte [0x1028adbc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4ddd96
dec bl
call esi
lea eax, [ebp - 4]
mov byte [0x4ddd96], bl
push eax
push dword [ebp - 4]
push 1
push 0x4ddd96
call esi
mov bl, byte [0x1028adbc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4dddcd
dec bl
call esi
lea eax, [ebp - 4]
mov byte [0x4dddcd], bl
push eax
push dword [ebp - 4]
push 1
push 0x4dddcd
call esi
mov bl, byte [0x1028adbc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4ddf0b
call esi
lea eax, [ebp - 4]
mov byte [0x4ddf0b], bl
push eax
push dword [ebp - 4]
push 1
push 0x4ddf0b
call esi
mov bl, byte [0x1028adbc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4ddfeb
call esi
lea eax, [ebp - 4]
mov byte [0x4ddfeb], bl
push eax
push dword [ebp - 4]
push 1
push 0x4ddfeb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4371a3
call esi
lea eax, [ebp - 4]
mov byte [0x4371a3], 0x68
push eax
push dword [ebp - 4]
push 1
push 0x4371a3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4371a4
call esi
lea eax, [ebp - 4]
mov byte [0x4371a4], 0xe
push eax
push dword [ebp - 4]
push 1
push 0x4371a4
call esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret