Function at 0x403446
Capabilities:
Accept command line arguments
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
sub eax, eax
lea eax, [ebp - 0xc]
mov dword [ebp - 8], eax
sub edx, edx
xor eax, eax
cmp eax, 0x34
jbe 0x40346a
mov edx, dword [ebp - 8]
xor dword [ebp - 8], 0xff00ff
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0x2a
mov dword [ebp - 0xc], 0x20
call fcn.00401480
call dword [sym.imp.KERNEL32.dll_GetACP]
mov si, 0x20
mov edi, 0x20
mov edi, 4
mov edi, 0x20
mov edi, eax
mov edx, dword [ebp]
mov ecx, dword [esp]
lea edx, [ebp - 8]
mov eax, dword [ebp - 0xc]
mov edi, dword [ebp]
mov ecx, 0xb9
mov eax, edx
mov edx, dword [esp]
mov edi, dword [ebp]
mov esi, edi
lea eax, [ebp]
mov dword [ebp - 0xc], edi
mov ecx, dword [esp]
mov edi, dword [ebp - 8]
lea ecx, [ebp]
mov dword [ebp - 0xc], ecx
lea edx, [ebp]
mov edx, edi
mov esi, dword [ebp - 4]
mov ecx, eax
mov edx, ecx
mov dx, 0xfa
mov edx, 0x41
lea edx, [ebp]
lea edx, [esp]
lea eax, [ebp]
lea edx, [esp]
mov esi, 1
lea esi, [ebp]
mov dword [ebp - 4], eax
lea edi, [ebp]
mov edx, esi
mov edi, edx
lea ecx, [ebp]
push 2
push 0x2000
push 0xa00
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov edx, 2
mov ax, 0x63
lea eax, [esp]
lea eax, [ebp]
lea eax, [ebp]
mov dword [ebp - 4], edi
mov edi, esi
mov di, 0x53
mov edx, 8
mov edi, dword [esp]
mov ecx, dword [ebp - 8]
mov edi, dword [ebp - 4]
lea esi, [esp]
lea ecx, [esp]
lea eax, [ebp - 0xc]
mov edx, dword [esp]
mov edx, edi
lea edi, [ebp - 8]
mov esi, dword [esp]
mov dword [ebp - 8], eax
mov edx, 0x31
mov edi, dword [ebp]
mov esi, dword [ebp - 8]
mov edx, dword [ebp]
lea ecx, [esp]
mov si, 0xaf
mov esi, ecx
lea ecx, [esp]
mov edx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov edi, ecx
mov edx, edi
mov dx, 0xd2
lea edi, [esp]
mov edx, 0x48
lea eax, [ebp - 0xc]
lea edi, [ebp - 0xc]
lea esi, [ebp - 4]
mov edx, dword [ebp]
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 4]
test ecx, ecx
jae 0x4035a4
mov edx, 0xc8
cmp dword [ebp - 4], ecx
jb 0x4035a4
push 4
push 0x8000
push 0xf00
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov edi, 0xfb
mov edi, dword [ebp - 8]
lea edi, [ebp - 8]
mov edi, dword [ebp]
mov dword [ebp - 4], edi
mov ecx, 0xdb
lea edx, [ebp - 8]
mov dword [ebp - 4], edi
mov di, 0x58
mov edi, 1
lea edx, [esp]
mov ecx, dword [ebp]
mov cx, 2
lea edi, [ebp]
mov dword [ebp - 0xc], eax
lea esi, [ebp]
mov edi, dword [esp]
mov dx, 0x83
mov dword [ebp - 4], eax
mov dx, 1
lea ecx, [ebp - 8]
mov cx, 0x40
mov edx, dword [esp]
lea eax, [ebp]
mov dword [ebp - 4], edi
lea eax, [ebp]
mov ecx, dword [esp]
mov ecx, 0x80
mov ecx, dword [esp]
mov edi, dword [esp]
mov edi, eax
mov edi, dword [esp]
mov cx, 2
mov di, 0x53
mov eax, dword [ebp]
lea eax, [ebp]
mov dword [ebp - 0xc], ecx
lea edi, [esp]
mov di, 0x80
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov ecx, dword [ebp]
mov edx, 0x58
lea edi, [esp]
mov si, 0xd
mov edi, dword [ebp]
mov edx, dword [ebp]
lea esi, [esp]
mov edi, dword [esp]
mov edi, dword [ebp]
mov edi, dword [ebp]
lea esi, [ebp - 0xc]
mov dword [ebp - 8], ecx
lea edi, [esp]
lea edi, [esp]
lea edi, [ebp]
mov edi, 4
mov edx, dword [esp]
lea esi, [ebp]
mov esi, 0x40
mov eax, dword [ebp]
lea ecx, [esp]
mov si, 0xd2
lea ecx, [esp]
mov dword [ebp - 8], edx
lea edi, [ebp - 0xc]
mov ecx, dword [ebp]
mov edi, 0xf1
lea edi, [ebp]
lea edi, [ebp - 8]
mov eax, dword [esp]
mov dword [ebp - 4], ecx
mov eax, dword [ebp]
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], ecx
mov eax, dword [esp]
lea esi, [ebp - 0xc]
mov esi, dword [ebp - 4]
lea edx, [ebp - 8]
mov esi, edx
lea edx, [ebp]
lea edx, [ebp - 0xc]
mov edi, dword [esp]
mov dx, 0x2b
lea edx, [ebp - 0xc]
sub ecx, ecx
or dword [ebp - 4], 0xffffff
sub eax, eax
call fcn.00407dc9
xor eax, eax
xor dword [ebp - 8], 0xff00ff
sub eax, eax
cmp eax, 0x55f
jne 0x403709
xor ecx, ecx
and dword [ebp - 4], 0xffffff
add dword [ebp - 0xc], 0x10
cmp dword [ebp - 4], eax
je 0x403709
mov cx, 0x42
sub dword [ebp - 0xc], 0x15
leave
ret