Function at 0x464f18
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebx
push esi
push edi
push ebp
push ecx
mov edi, esp
mov esi, 0x4bac58
mov bl, 1
sub eax, 0xffffffff
je 0x464f3e
dec eax
je 0x4653f6
dec eax
je 0x4658b0
jmp 0x465df8
push edi
push 0x40
push 4
mov ebp, dword [0x4b8bf4]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8bf4]
mov eax, dword [ebp + 4]
mov dword [esi + 8], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8bf4]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8ff8]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8ff8]
mov eax, dword [ebp + 4]
mov dword [esi + 0xc], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8ff8]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8df4]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8df4]
mov eax, dword [ebp + 4]
mov dword [esi], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8df4]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b901c]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b901c]
mov eax, dword [ebp + 4]
mov dword [esi + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b901c]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8e8c]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8e8c]
mov eax, dword [ebp + 4]
mov dword [esi + 0x28], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e8c]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8dc0]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8dc0]
mov eax, dword [ebp + 4]
mov dword [esi + 0x2c], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8dc0]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8c34]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8c34]
mov eax, dword [ebp + 4]
mov dword [esi + 0x18], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8c34]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8bc8]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8bc8]
mov eax, dword [ebp + 4]
mov dword [esi + 0x14], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8bc8]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8ccc]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8ccc]
mov eax, dword [ebp + 4]
mov dword [esi + 0x10], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8ccc]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8d8c]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8d8c]
mov eax, dword [ebp + 4]
mov dword [esi + 0x30], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8d8c]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8dbc]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8dbc]
mov eax, dword [ebp + 4]
mov dword [esi + 0x34], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8dbc]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8fcc]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8fcc]
mov eax, dword [ebp + 4]
mov dword [esi + 0x38], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8fcc]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8f84]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8f84]
mov eax, dword [ebp + 4]
mov dword [esi + 0x3c], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8f84]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8c28]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8c28]
mov eax, dword [ebp + 4]
mov dword [esi + 0x40], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8c28]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b9024]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b9024]
mov eax, dword [ebp + 4]
mov dword [esi + 0x44], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b9024]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8d74]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8d74]
mov eax, dword [ebp + 4]
mov dword [esi + 0x48], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8d74]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e24]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8e24]
mov eax, dword [eax + 4]
mov dword [esi + 0x4c], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e24]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8d40]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8d40]
mov eax, dword [eax + 4]
mov dword [esi + 0x50], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8d40]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8be0]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8be0]
mov eax, dword [eax + 4]
mov dword [esi + 0x54], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8be0]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e04]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8e04]
mov eax, dword [eax + 4]
mov dword [esi + 0x58], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e04]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b9010]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b9010]
mov eax, dword [eax + 4]
mov dword [esi + 0x5c], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b9010]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8f1c]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8f1c]
mov eax, dword [eax + 4]
mov dword [esi + 0x60], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8f1c]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e08]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8e08]
mov eax, dword [eax + 4]
mov dword [esi + 0x64], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e08]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e78]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8e78]
mov eax, dword [eax + 4]
mov dword [esi + 0x68], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e78]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8fa4]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8fa4]
mov eax, dword [eax + 4]
mov dword [esi + 0x6c], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8fa4]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8ba4]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8ba4]
mov eax, dword [eax + 4]
mov dword [esi + 0x70], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8ba4]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e50]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8e50]
mov eax, dword [eax + 4]
mov dword [esi + 0x74], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e50]
push eax
call sub.kernel32.dll_VirtualProtect
jmp 0x465dfa
push edi
push 0x40
push 4
mov ebp, dword [0x4b8bf4]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8bf4]
mov eax, dword [esi + 8]
mov dword [ebp + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8bf4]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8ff8]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8ff8]
mov eax, dword [esi + 0xc]
mov dword [ebp + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8ff8]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8df4]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8e5c]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8df4]
mov dword [ebp + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8df4]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b901c]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b901c]
mov eax, dword [esi + 4]
mov dword [ebp + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b901c]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8e8c]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8e8c]
mov eax, dword [esi + 0x28]
mov dword [ebp + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e8c]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8dc0]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8dc0]
mov eax, dword [esi + 0x2c]
mov dword [ebp + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8dc0]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8c34]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8c34]
mov eax, dword [esi + 0x18]
mov dword [ebp + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8c34]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8bc8]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8bc8]
mov eax, dword [esi + 0x14]
mov dword [ebp + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8bc8]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8ccc]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8ccc]
mov eax, dword [esi + 0x10]
mov dword [ebp + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8ccc]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8d8c]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8d8c]
mov eax, dword [esi + 0x1c]
mov dword [ebp + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8d8c]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov ebp, dword [0x4b8dbc]
push ebp
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8dbc]
mov eax, dword [esi + 0x34]
mov dword [ebp + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8dbc]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8fcc]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8fcc]
mov edx, dword [esi + 0x38]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8fcc]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8f84]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8f84]
mov edx, dword [esi + 0x3c]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8f84]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8c28]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8c28]
mov edx, dword [esi + 0x40]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8c28]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b9024]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b9024]
mov edx, dword [esi + 0x44]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b9024]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8d74]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8d74]
mov edx, dword [esi + 0x48]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8d74]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e24]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8e24]
mov edx, dword [esi + 0x4c]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e24]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8d40]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8d40]
mov edx, dword [esi + 0x50]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8d40]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8be0]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8be0]
mov edx, dword [esi + 0x54]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8be0]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e04]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8e04]
mov edx, dword [esi + 0x58]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e04]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b9010]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b9010]
mov edx, dword [esi + 0x5c]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b9010]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8f1c]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8f1c]
mov edx, dword [esi + 0x60]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8f1c]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e08]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8e08]
mov edx, dword [esi + 0x64]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e08]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e78]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8e78]
mov edx, dword [esi + 0x68]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e78]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8fa4]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8fa4]
mov edx, dword [esi + 0x6c]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8fa4]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8ba4]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8ba4]
mov edx, dword [esi + 0x70]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8ba4]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e50]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8e50]
mov edx, dword [esi + 0x74]
mov dword [eax + 4], edx
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e50]
push eax
call sub.kernel32.dll_VirtualProtect
jmp 0x465dfa
push edi
push 0x40
push 4
mov eax, dword [0x4b8bf4]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8bf4]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8bf4]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8bf4]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8ff8]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8ecc]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8ff8]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8ff8]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8df4]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8cb4]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8df4]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8df4]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b901c]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8f04]
mov eax, dword [eax + 4]
mov edx, dword [0x4b901c]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b901c]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e8c]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8d70]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8e8c]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e8c]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8dc0]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8c7c]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8dc0]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8dc0]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8c34]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b9014]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8c34]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8c34]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8bc8]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8f80]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8bc8]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8bc8]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8ccc]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8bc4]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8ccc]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8ccc]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8d8c]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8c50]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8d8c]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8d8c]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8dbc]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8c74]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8dbc]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8dbc]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8fcc]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8eb4]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8fcc]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8fcc]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8f84]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8e80]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8f84]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8f84]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8c28]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b9008]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8c28]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8c28]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b9024]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8f14]
mov eax, dword [eax + 4]
mov edx, dword [0x4b9024]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b9024]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8d74]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8c44]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8d74]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8d74]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e24]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8cf0]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8e24]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e24]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8d40]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8c20]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8d40]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8d40]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8be0]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8f8c]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8be0]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8be0]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e04]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8cc8]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8e04]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e04]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b9010]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8eec]
mov eax, dword [eax + 4]
mov edx, dword [0x4b9010]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b9010]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8f1c]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8df8]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8f1c]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8f1c]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e08]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8cc4]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8e08]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e08]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e78]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8d5c]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8e78]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e78]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8fa4]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8e94]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8fa4]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8fa4]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8ba4]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8f5c]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8ba4]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8ba4]
push eax
call sub.kernel32.dll_VirtualProtect
push edi
push 0x40
push 4
mov eax, dword [0x4b8e50]
push eax
call sub.kernel32.dll_VirtualProtect
mov eax, dword [0x4b8d4c]
mov eax, dword [eax + 4]
mov edx, dword [0x4b8e50]
mov dword [edx + 4], eax
push edi
mov eax, dword [edi]
push eax
push 4
mov eax, dword [0x4b8e50]
push eax
call sub.kernel32.dll_VirtualProtect
jmp 0x465dfa
xor ebx, ebx
mov eax, ebx
pop edx
pop ebp
pop edi
pop esi
pop ebx
ret