Function at 0x4623e8
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x23
push 0
push 0
dec ecx
jne 0x4623f0
push ecx
push ebx
push esi
push edi
mov byte [ebp - 0x81], al
lea eax, [ebp - 0x40]
mov edx, dword [0x41bf84]
call fcn.0040b244
lea eax, [ebp - 0x80]
mov edx, dword [0x41bf84]
call fcn.0040b244
xor eax, eax
push ebp
push 0x462bce
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7635b8], 0
je 0x462441
mov eax, dword [0x7635b8]
cmp eax, dword [0x7635bc]
jne 0x4624ad
push 0x462bdc
call sub.kernel32.dll_GetModuleHandleW_2
mov ebx, eax
test ebx, ebx
jne 0x46245d
push 0x462bf8
call sub.kernel32.dll_GetModuleHandleW_2
mov ebx, eax
push 0x462c10
push ebx
call fcn.00411010
mov dword [0x7635b8], eax
push 0x462c3c
push ebx
call fcn.00411010
mov dword [0x7635bc], eax
push 0x462c90
push ebx
call fcn.00411010
mov dword [0x7635c4], eax
push 0x462ca0
push ebx
call fcn.00411010
mov dword [0x7635cc], eax
push 0x462cc0
push ebx
call fcn.00411010
mov dword [0x7635d0], eax
cmp dword [0x7635b8], 0
je 0x462b8d
cmp dword [0x7635bc], 0
je 0x462b8d
cmp dword [0x7635c4], 0
je 0x462b8d
cmp dword [0x7635cc], 0
jne 0x4624ea
cmp dword [0x7635c8], 0
je 0x462b8d
mov eax, dword [0x768d3c]
mov edx, dword [0x7635c0]
mov dword [eax], edx
lea edx, [ebp - 0xb8]
mov eax, dword [0x7635b8]
call fcn.0041d5d4
lea edx, [ebp - 0x40]
mov eax, dword [0x7635b8]
call fcn.0041e91c
mov eax, dword [ebp - 0x20]
call fcn.0040bc90
mov esi, eax
dec esi
test esi, esi
jl 0x4625b8
inc esi
xor ebx, ebx
mov edi, ebx
add edi, edi
add edi, edi
add edi, edi
sub edi, ebx
mov eax, dword [ebp - 0x20]
cmp dword [eax + edi*4 + 0xc], 0
je 0x4625b0
mov eax, ebx
add eax, eax
add eax, eax
add eax, eax
sub eax, ebx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + eax*4 + 0xc]
mov edx, dword [ebp - 0x20]
cmp eax, dword [edx + edi*4 + 0x28]
jne 0x4625b0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + edi*4 + 8]
lea edx, [ebp - 0xb8]
call fcn.0041d5d4
cmp word [ebp - 0xb6], 0x8b
jne 0x4625b0
movzx eax, byte [ebp - 0xb4]
sub al, 0x80
je 0x462588
sub al, 8
je 0x462588
sub al, 8
jne 0x4625b0
mov eax, dword [ebp - 0x9c]
add eax, 2
mov eax, dword [eax]
mov dword [0x763684], eax
mov eax, ebx
add eax, eax
add eax, eax
add eax, eax
sub eax, ebx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + eax*4 + 0xc]
mov dword [0x763688], eax
jmp 0x4625b8
inc ebx
dec esi
jne 0x46252a
cmp dword [0x763688], 0
je 0x462924
lea edx, [ebp - 0x40]
mov eax, dword [0x7635bc]
call fcn.0041e91c
mov eax, dword [ebp - 0x20]
call fcn.0040bc88
dec eax
jne 0x462924
lea edx, [ebp - 0xf8]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xc]
call fcn.0041e91c
lea edx, [ebp - 0xf8]
lea eax, [ebp - 0x40]
mov ecx, dword [0x41bf84]
call fcn.0040b5b0
mov eax, sub.kernel32.dll_RaiseException_2
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
cmp word [eax], 0x25ff
jne 0x462631
mov eax, dword [ebp - 0x90]
add eax, 2
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x90], eax
xor eax, eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x20]
call fcn.0040bc90
mov esi, eax
test esi, esi
jl 0x46278e
inc esi
xor ebx, ebx
mov edi, ebx
add edi, edi
add edi, edi
add edi, edi
sub edi, ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + edi*4 + 0xc]
cmp eax, dword [ebp - 0x90]
jne 0x4626cf
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + edi*4 + 4]
sub eax, 4
cmp dword [eax], 0xeefface
jne 0x462786
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + edi*4 + 4]
lea edx, [ebp - 0xb8]
call fcn.0041d5d4
cmp dword [ebp - 0xa4], 4
jne 0x462786
cmp byte [ebp - 0xb1], 0
je 0x462786
mov eax, dword [ebp - 0xb0]
mov dword [0x76f174], eax
mov edx, 0x462208
sub edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0xac]
call fcn.00492768
jmp 0x462786
mov eax, ebx
add eax, eax
add eax, eax
add eax, eax
sub eax, ebx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + eax*4 + 0xc]
lea edx, [ebp - 0xb8]
call fcn.0041d5d4
jmp 0x462770
mov eax, dword [ebp - 0xb0]
cmp eax, dword [0x7635c4]
jne 0x46274a
mov eax, ebx
add eax, eax
add eax, eax
add eax, eax
sub eax, ebx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + eax*4 + 0xc]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0xa4], 4
jne 0x462786
cmp byte [ebp - 0xb1], 0
je 0x462786
mov eax, dword [ebp - 0xb0]
mov dword [0x76f16c], eax
mov edx, 0x4620a8
sub edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0xac]
call fcn.00492768
jmp 0x462786
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 0x98]
call fcn.0041d5d4
push esi
lea esi, [ebp - 0x11c]
lea edi, [ebp - 0xb8]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
pop esi
movzx eax, word [ebp - 0xb6]
add eax, 0xffffff3e
sub ax, 2
jae 0x4626f0
inc ebx
dec esi
jne 0x46264e
cmp dword [ebp - 0x88], 0
je 0x462924
lea edx, [ebp - 0x40]
mov eax, dword [0x7635b8]
call fcn.0041e91c
mov eax, dword [ebp - 0x20]
call fcn.0040bc90
mov esi, eax
test esi, esi
jl 0x462924
inc esi
xor ebx, ebx
mov eax, ebx
add eax, eax
add eax, eax
add eax, eax
sub eax, ebx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + eax*4 + 0xc]
lea edx, [ebp - 0x80]
call fcn.0041e91c
mov eax, dword [ebp - 0x60]
call fcn.0040bc90
mov edi, eax
test edi, edi
jl 0x46291c
inc edi
mov dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x8c]
mov edx, eax
add eax, eax
add eax, eax
add eax, eax
sub eax, edx
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + eax*4 + 0xc]
cmp eax, dword [ebp - 0x88]
jne 0x46290f
mov eax, ebx
add eax, eax
add eax, eax
add eax, eax
sub eax, ebx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + eax*4 + 8]
lea edx, [ebp - 0xb8]
call fcn.0041d5d4
cmp word [ebp - 0xb6], 0x83
jne 0x46290f
cmp byte [ebp - 0xb4], 0xc4
jne 0x46290f
mov eax, dword [ebp - 0x9c]
movzx eax, byte [eax + 2]
sub al, 0x10
je 0x462865
sub al, 8
je 0x4628be
jmp 0x46290f
mov eax, ebx
add eax, eax
add eax, eax
add eax, eax
sub eax, ebx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + eax*4 + 4]
lea edx, [ebp - 0xb8]
call fcn.0041d5d4
cmp dword [ebp - 0xa4], 4
jne 0x46291c
cmp byte [ebp - 0xb1], 0
je 0x46291c
mov eax, dword [ebp - 0xb0]
mov dword [0x76f170], eax
mov edx, 0x462188
sub edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0xac]
call fcn.00492768
jmp 0x46291c
mov eax, ebx
add eax, eax
add eax, eax
add eax, eax
sub eax, ebx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + eax*4 + 4]
lea edx, [ebp - 0xb8]
call fcn.0041d5d4
cmp dword [ebp - 0xa4], 4
jne 0x46291c
cmp byte [ebp - 0xb1], 0
je 0x46291c
mov eax, dword [ebp - 0xb0]
mov dword [0x76f178], eax
mov edx, 0x462290
sub edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0xac]
call fcn.00492768
jmp 0x46291c
inc dword [ebp - 0x8c]
dec edi
jne 0x4627f3
inc ebx
dec esi
jne 0x4627bd
cmp byte [ebp - 0x81], 0
je 0x462aac
call fcn.004623d4
lea edx, [ebp - 0xb8]
call fcn.0041d5d4
jmp 0x462967
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 0x98]
call fcn.0041d5d4
lea esi, [ebp - 0x11c]
lea edi, [ebp - 0xb8]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0xb8], 0
je 0x4629ad
movzx eax, word [ebp - 0xb6]
add eax, 0xffffff3e
sub ax, 2
jb 0x4629ad
cmp word [ebp - 0xb6], 0x89
jne 0x462943
mov eax, dword [ebp - 0x9c]
inc eax
cmp dword [eax], 0x24448bc2
jne 0x462943
mov eax, dword [ebp - 0x9c]
add eax, 5
cmp dword [eax], 0xc488b04
jne 0x462943
cmp byte [ebp - 0xb8], 0
je 0x462aac
movzx eax, word [ebp - 0xb6]
add eax, 0xffffff3e
sub ax, 2
jb 0x462aac
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x90], eax
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 0x98]
call fcn.0041d5d4
lea esi, [ebp - 0x11c]
lea edi, [ebp - 0xb8]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
jmp 0x462a26
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 0x98]
call fcn.0041d5d4
lea esi, [ebp - 0x11c]
lea edi, [ebp - 0xb8]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0xb8], 0
je 0x462a6c
movzx eax, word [ebp - 0xb6]
add eax, 0xffffff3e
sub ax, 2
jb 0x462a6c
cmp word [ebp - 0xb6], 0x89
jne 0x462a02
mov eax, dword [ebp - 0x9c]
inc eax
cmp dword [eax], 0x24448bc2
jne 0x462a02
mov eax, dword [ebp - 0x9c]
add eax, 5
cmp dword [eax], 0xc488b04
jne 0x462a02
cmp byte [ebp - 0xb8], 0
je 0x462a93
movzx eax, word [ebp - 0xb6]
add eax, 0xffffff3e
sub ax, 2
jb 0x462a93
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x462aac
mov edx, 0x462330
mov eax, dword [ebp - 0x90]
call fcn.00492744
cmp dword [0x7635cc], 0
je 0x462ac2
mov eax, dword [0x7635cc]
mov dword [eax], 0x462354
jmp 0x462ad1
mov edx, 0x462354
mov eax, dword [0x7635c8]
call fcn.00492710
cmp dword [0x7635d0], 0
je 0x462b8d
lea edx, [ebp - 0xb8]
mov eax, dword [0x7635d0]
call fcn.0041d5d4
mov ebx, 5
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 0x98]
call fcn.0041d5d4
lea esi, [ebp - 0x11c]
lea edi, [ebp - 0xb8]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
dec ebx
jne 0x462af3
cmp byte [ebp - 0xb8], 0
je 0x462b8d
mov eax, dword [ebp - 0x9c]
cmp word [eax], 0x33ff
jne 0x462b8d
mov eax, dword [ebp - 0x98]
add eax, 6
cmp byte [eax], 0x59
jne 0x462b8d
lea eax, [ebp - 0x94]
push eax
push 0x40
mov esi, dword [ebp - 0x98]
mov edi, esi
add edi, 7
mov eax, edi
sub eax, dword [0x7635d0]
push eax
mov ebx, dword [ebp - 0x9c]
push ebx
call sub.kernel32.dll_VirtualProtect
mov word [ebx], 0x38b
add esi, 6
mov byte [esi], 0x90
lea eax, [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x94]
push eax
sub edi, dword [0x7635d0]
push edi
push ebx
call sub.kernel32.dll_VirtualProtect
push 0
push 0
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.kernel32.dll_FlushInstructionCache
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x462bd5
lea eax, [ebp - 0xf8]
mov edx, dword [0x41bf84]
call fcn.0040b31c
lea eax, [ebp - 0x80]
mov edx, dword [0x41bf84]
mov ecx, 2
call fcn.0040b36c
ret