Function at 0x4624dc
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff390
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
xor eax, eax
push ebp
push 0x462a81
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
push 0x46253d
push dword fs:[0]
mov dword fs:[0], esp
mov eax, 0x461dd4
add eax, 2
mov eax, dword [eax]
mov ebx, dword [eax]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x462790
mov eax, 0x461e18
mov dword [ebp - 0x24], eax
lea eax, [ebx + 5]
mov edx, dword [ebp - 0x24]
sub edx, eax
push edx
push 0x46c194
push 0xa
mov byte [ebp - 0xc70], 0xe9
lea edx, [ebp - 0xc70]
xor ecx, ecx
mov eax, ebx
call fcn.00462438
test eax, eax
jne 0x462a07
mov esi, 0x466984
lea eax, [ebp - 0x14]
xor edx, edx
call fcn.004055a8
mov eax, 2
mov edx, eax
sub edx, eax
movzx edx, byte [esi + edx]
imul edx, eax
inc edx
mov dword [ebp - 0x54], edx
lea edx, [eax + 1]
cmp edx, dword [ebp - 0x54]
jg 0x4628d8
cmp dword [ebp - 0x54], 0xff
jg 0x4628d8
mov edx, eax
sub edx, eax
movzx ecx, byte [esi + edx]
mov dword [ebp - 0x54], ecx
mov byte [ebp - 0x55], dl
mov ecx, eax
sub ecx, eax
add ecx, edx
mov ebx, dword [ebp - 0x54]
dec ebx
sub ebx, ecx
jl 0x462864
inc ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x50], ecx
mov ecx, dword [ebp - 0x50]
lea ecx, [ebp + ecx - 0x76c]
add edx, eax
cmp byte [esi + edx], 1
jne 0x462847
mov ebx, eax
dec ebx
mov edi, edx
sub edi, ebx
movzx ebx, byte [esi + edi]
add byte [ebp - 0x55], bl
jmp 0x462855
mov ebx, eax
dec ebx
mov edi, edx
sub edi, ebx
movzx ebx, byte [esi + edi]
sub byte [ebp - 0x55], bl
movzx ebx, byte [ebp - 0x55]
mov byte [ecx], bl
inc dword [ebp - 0x50]
inc ecx
dec dword [ebp - 0x5c]
jne 0x46282f
mov edx, eax
sub dl, al
mov eax, dword [ebp - 0x50]
mov byte [ebp + eax - 0x76c], dl
mov edi, 2
xor esi, esi
lea ecx, [ebp - 0x96c]
lea eax, [ebp - 0x76c]
movzx ebx, byte [eax + esi]
test bl, bl
je 0x4628ad
movzx eax, bl
lea edx, [esi + 1]
add eax, edx
cdq
idiv edi
mov edx, esi
inc edx
add ax, dx
mov word [ecx], ax
inc esi
add ecx, 2
cmp esi, 0x100
jne 0x46287f
mov eax, edi
sub ax, di
mov word [ebp + esi*2 - 0x96c], ax
lea eax, [ebp - 0x18]
lea edx, [ebp - 0x96c]
mov ecx, pe_nt_image_headers32
call fcn.0040570c
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x18]
call fcn.004055a8
mov esi, 0x4669d0
lea eax, [ebp - 0x1c]
xor edx, edx
call fcn.004055a8
mov eax, 2
mov edx, eax
sub edx, eax
movzx edx, byte [esi + edx]
imul edx, eax
inc edx
mov dword [ebp - 0x64], edx
lea edx, [eax + 1]
cmp edx, dword [ebp - 0x64]
jg 0x4629ea
cmp dword [ebp - 0x64], 0xff
jg 0x4629ea
mov edx, eax
sub edx, eax
movzx ecx, byte [esi + edx]
mov dword [ebp - 0x64], ecx
mov byte [ebp - 0x65], dl
mov ecx, eax
sub ecx, eax
add ecx, edx
mov ebx, dword [ebp - 0x64]
dec ebx
sub ebx, ecx
jl 0x462976
inc ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x60], ecx
mov ecx, dword [ebp - 0x60]
lea ecx, [ebp + ecx - 0xa6c]
add edx, eax
cmp byte [esi + edx], 1
jne 0x462959
mov ebx, eax
dec ebx
mov edi, edx
sub edi, ebx
movzx ebx, byte [esi + edi]
add byte [ebp - 0x65], bl
jmp 0x462967
mov ebx, eax
dec ebx
mov edi, edx
sub edi, ebx
movzx ebx, byte [esi + edi]
sub byte [ebp - 0x65], bl
movzx ebx, byte [ebp - 0x65]
mov byte [ecx], bl
inc dword [ebp - 0x60]
inc ecx
dec dword [ebp - 0x6c]
jne 0x462941
mov edx, eax
sub dl, al
mov eax, dword [ebp - 0x60]
mov byte [ebp + eax - 0xa6c], dl
mov edi, 2
xor esi, esi
lea ecx, [ebp - 0xc6c]
lea eax, [ebp - 0xa6c]
movzx ebx, byte [eax + esi]
test bl, bl
je 0x4629bf
movzx eax, bl
lea edx, [esi + 1]
add eax, edx
cdq
idiv edi
mov edx, esi
inc edx
add ax, dx
mov word [ecx], ax
inc esi
add ecx, 2
cmp esi, 0x100
jne 0x462991
mov eax, edi
sub ax, di
mov word [ebp + esi*2 - 0xc6c], ax
lea eax, [ebp - 0x20]
lea edx, [ebp - 0xc6c]
mov ecx, pe_nt_image_headers32
call fcn.0040570c
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
call fcn.004055a8
push 0x10
mov eax, dword [ebp - 0x1c]
call fcn.004055e0
push eax
mov eax, dword [ebp - 0x14]
call fcn.004055e0
push eax
push 0
call sub.user32.dll_MessageBoxW
jmp 0x462a66
cmp byte [0x46c194], 0xe9
jne 0x462a2e
mov eax, 0x46c195
mov edx, dword [eax]
add edx, ebx
add edx, 5
mov dword [ebp - 0x2c], edx
mov edx, 0x46c194
add edx, 5
mov ecx, dword [ebp - 0x2c]
sub ecx, edx
mov dword [eax], ecx
lea eax, [ebp - 0x28]
push eax
push 0x40
push 0xb
push 0x46c194
call sub.kernel32.dll_VirtualProtect
add ebx, 5
mov byte [0x46c199], 0xe9
mov eax, 0x46c19a
mov edx, 0x46c199
add edx, 5
sub ebx, edx
mov dword [eax], ebx
mov eax, dword [0x466a04]
mov dword [eax], 0xabcdef1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x462a88
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.0040554c
ret