Function at 0x4e3706
Capabilities:
Execute shellcode via indirect call

Disassembly:
mov eax, dword [esp + 8]
sub esp, 8
push esi
cmp eax, 1
jne 0x4e367e
mov eax, dword [esp + 0x18]
add eax, 0xfffffffe
cmp eax, 4
ja case.default.0x4e3d32
jmp dword [eax*4 + 0x4e3ec4]
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x7494
push 0x7248
push esi
call fcn.004454c0
push 0
push 0
push 0x3fa8
push 0x3f4c
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
push 0x5a
push 0x3c
push 0x7544
push 0x7248
push dword [esp + 0x20]
call fcn.004454c0
add esp, 0x14
call fcn.004ddce0
mov dword [eax], 2
call fcn.004ddd70
mov ecx, eax
pop esi
add esp, 8
jmp fcn.0045ae60
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x7544
push 0x7248
push esi
call fcn.004454c0
push 0
push 0
push 0x40fc
push 0x4098
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
push 0x5a
push 0x3c
push 0x75f8
push 0x7248
push dword [esp + 0x20]
call fcn.004454c0
add esp, 0x14
call fcn.004ddce0
mov dword [eax], 5
call fcn.004ddd70
mov ecx, eax
pop esi
add esp, 8
jmp fcn.0045ae60
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x75f8
push 0x7248
push esi
call fcn.004454c0
push 0
push 0
push 0x41b8
push 0x4150
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
cmp eax, 2
jne 0x4e37a3
mov eax, dword [esp + 0x18]
add eax, 0xfffffffe
cmp eax, 4
ja case.default.0x4e3d32
jmp dword [eax*4 + 0x4e3ed8]
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x76ec
push 0x74a0
push esi
call fcn.004454c0
push 0
push 0
push 0x4354
push 0x42b4
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x76ec
push 0x74a0
push esi
call fcn.004454c0
push 0
push 0
push 0x43d4
push 0x42b4
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
push 0x1d
push 0x3c
push 0x778c
push 0x74a0
push dword [esp + 0x20]
call fcn.004454c0
add esp, 0x14
call fcn.004ddce0
mov dword [eax], 4
call fcn.004ddd70
mov ecx, eax
pop esi
add esp, 8
jmp fcn.0045ae60
mov esi, dword [esp + 0x10]
push 0
push 0x3c
push 0x778c
push 0x74a0
push esi
call fcn.004454c0
push 0
push 0
push 0x448c
push 0x443c
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x778c
push 0x74a0
push esi
call fcn.004454c0
push 0
push 0
push 0x450c
push 0x443c
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
cmp eax, 3
jne 0x4e38aa
mov eax, dword [esp + 0x18]
add eax, 0xfffffffe
cmp eax, 4
ja case.default.0x4e3d32
jmp dword [eax*4 + 0x4e3eec]
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0xa4cc
push 0xa280
push esi
call fcn.004454c0
push 0
push 0
push 0x5c00
push 0x5b6c
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x1e
push 0x3c
push 0xa4cc
push 0xa280
push esi
call fcn.004454c0
push 0
push 0
push 0x5c6c
push 0x5b6c
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
push 0x32
push 0x3c
push 0xa56c
push 0xa280
push dword [esp + 0x20]
jmp 0x4e3718
mov esi, dword [esp + 0x10]
push 0x14
push 0x3c
push 0xa56c
push 0xa280
push esi
call fcn.004454c0
push 0
push 0
push 0x5d70
push 0x5d0c
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0xa56c
push 0xa280
push esi
call fcn.004454c0
push 0
push 0
push 0x5df0
push 0x5d0c
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
cmp eax, 4
jne 0x4e39e4
mov eax, dword [esp + 0x18]
add eax, 0xfffffffe
cmp eax, 4
ja case.default.0x4e3d32
jmp dword [eax*4 + 0x4e3f00]
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x8880
push 0x8634
push esi
call fcn.004454c0
push 0
push 0
push 0x40ec
push 0x406c
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x8880
push 0x8634
push esi
call fcn.004454c0
push 0
push 0
push 0x4158
push 0x406c
push esi
call fcn.004454c0
add esp, 0x28
mov ecx, esi
push 0
push 0x5cc4
call fcn.00440300
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x8930
push 0x8634
push esi
call fcn.004454c0
add esp, 0x14
mov ecx, esi
push 0
push 0x6bc0
call fcn.00440300
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x8930
push 0x8634
push esi
call fcn.004454c0
push 0
push 0
push 0x4244
push 0x41e0
push esi
call fcn.004454c0
add esp, 0x28
mov ecx, esi
push 0
push 0x6e74
call fcn.00440300
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x8930
push 0x8634
push esi
call fcn.004454c0
push 0
push 0
push 0x42c4
push 0x41e0
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
cmp eax, 5
jne 0x4e3c2f
mov eax, dword [esp + 0x18]
add eax, 0xfffffffe
cmp eax, 8
ja case.default.0x4e3d32
jmp dword [eax*4 + 0x4e3f14]
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0xa180
push 0x9f34
push esi
call fcn.004454c0
push 0
push 0
push 0x6f58
push 0x6ed8
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0xa180
push 0x9f34
push esi
call fcn.004454c0
push 0
push 0
push 0x7040
push 0x6ed8
push esi
call fcn.004454c0
add esp, 0x28
mov ecx, esi
push 0
push 0x7ba0
call fcn.00440300
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0xa180
push 0x9f34
push esi
call fcn.004454c0
push 0
push 0
push 0x7098
push 0x6ed8
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0xa1a0
push 0x9f34
push esi
call fcn.004454c0
add esp, 0x14
xor eax, eax
mov word [esp + 8], ax
mov ecx, esi
push dword [esp + 8]
push 0x70f0
call fcn.004402d0
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0xa1a0
push 0x9f34
push esi
call fcn.004454c0
push 0
push 0
push 0x716c
push 0x70ec
push esi
call fcn.004454c0
add esp, 0x28
mov ecx, esi
push 0
push 0x81c0
call fcn.00440300
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0xa1a0
push 0x9f34
push esi
call fcn.004454c0
push 0
push 0
push 0x71ec
push 0x70ec
push esi
call fcn.004454c0
add esp, 0x28
mov ecx, esi
push 0
push 0x845c
call fcn.00440300
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0xa1a0
push 0x9f34
push esi
call fcn.004454c0
push 0
push 0
push 0x726c
push 0x70ec
push esi
call fcn.004454c0
add esp, 0x28
mov ecx, esi
push 0
push 0x87e0
call fcn.00440300
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0xa1a0
push 0x9f34
push esi
call fcn.004454c0
push 0
push 0
push 0x72ec
push 0x70ec
push esi
call fcn.004454c0
add esp, 0x28
mov ecx, esi
push 0
push 0x8ce8
call fcn.00440300
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0xa1a0
push 0x9f34
push esi
call fcn.004454c0
push 0
push 0
push 0x736c
push 0x70ec
push esi
call fcn.004454c0
add esp, 0x28
mov ecx, esi
push 0
push 0x9a50
call fcn.00440300
pop esi
add esp, 8
ret
cmp eax, 6
jne 0x4e3d19
mov eax, dword [esp + 0x18]
sub eax, 2
je 0x4e3cd7
sub eax, 1
je 0x4e3c95
sub eax, 1
jne case.default.0x4e3d32
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x93e0
push 0x91f8
push esi
call fcn.004454c0
push 0
push 0
push 0x2ce8
push 0x2b34
push esi
call fcn.004454c0
add esp, 0x28
mov ecx, esi
push 0
push 0x43b0
call fcn.00440300
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x93e0
push 0x91f8
push esi
call fcn.004454c0
push 0
push 0
push 0x2c68
push 0x2b34
push esi
call fcn.004454c0
add esp, 0x28
mov ecx, esi
push 0
push 0x40ac
call fcn.00440300
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x93e0
push 0x91f8
push esi
call fcn.004454c0
push 0
push 0
push 0x2be8
push 0x2b34
push esi
call fcn.004454c0
add esp, 0x28
mov ecx, esi
push 0
push 0x38d0
call fcn.00440300
pop esi
add esp, 8
ret
cmp eax, 7
jne case.default.0x4e3d32
mov eax, dword [esp + 0x18]
add eax, 0xfffffffe
cmp eax, 7
ja case.default.0x4e3d32
jmp dword [eax*4 + 0x4e3f38]
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x9208
push 0x8f94
push esi
call fcn.004454c0
push 0
push 0
push 0x5d88
push 0x5d08
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x9208
push 0x8f94
push esi
call fcn.004454c0
push 0
push 0
push 0x5e08
push 0x5d08
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x9208
push 0x8f94
push esi
call fcn.004454c0
push 0
push 0
push 0x5e9c
push 0x5d08
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x9208
push 0x8f94
push esi
call fcn.004454c0
push 0
push 0
push 0x5f30
push 0x5d08
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
push 0x5a
push 0x3c
push 0x9338
push 0x8f94
push dword [esp + 0x20]
call fcn.004454c0
add esp, 0x14
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0xa
push 0x3c
push 0x9338
push 0x8f94
push esi
call fcn.004454c0
push 0
push 0
push 0x6018
push 0x5f84
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x9338
push 0x8f94
push esi
call fcn.004454c0
push 0
push 0
push 0x60c0
push 0x5f84
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret
mov esi, dword [esp + 0x10]
push 0x5a
push 0x3c
push 0x9338
push 0x8f94
push esi
call fcn.004454c0
push 0
push 0
push 0x6154
push 0x5f84
push esi
call fcn.004454c0
add esp, 0x28
pop esi
add esp, 8
ret