Function at 0x4015b0
Capabilities:
Allocate or change rwx memory

Disassembly:
sub esp, 0xd0
mov eax, dword [section.noname_3]
xor eax, esp
mov dword [esp + 0xcc], eax
push ebp
push esi
mov esi, dword [ecx + 0x3c]
mov eax, 0xcccccccd
mov dword [esp + 8], ecx
mul dword [esi + ecx + 0x84]
mov ebp, dword [esi + ecx + 0x80]
mov eax, edx
add ebp, ecx
shr eax, 4
test eax, eax
je 0x4017be
nop
cmp dword [ebp], 0
je 0x401613
add ebp, 0x14
dec eax
jne 0x4015f0
pop esi
pop ebp
mov ecx, dword [esp + 0xcc]
xor ecx, esp
call fcn.00401ab4
add esp, 0xd0
ret
add ebp, 0x14
dec eax
mov dword [esp + 0x14], ebp
mov dword [esp + 0xc], eax
je 0x4017be
push ebx
push edi
jmp 0x401630
cmp dword [ebp], 0
je 0x4017bc
mov esi, dword [ebp + 0xc]
lea edi, [esp + 0x2c]
mov ebx, dword [0x413e5c]
add esi, ecx
mov ecx, dword [0x413e60]
xor edx, edx
movzx eax, byte [esi]
lea esi, [esi + 1]
xor edx, eax
test ecx, ecx
jns 0x401663
add ecx, ecx
xor ecx, ebx
jmp 0x401665
add ecx, ecx
movzx eax, cl
xor edx, eax
mov dword [0x413e60], ecx
mov byte [edi], dl
inc edi
test edx, edx
jne 0x401651
push 0x10
lea eax, [esp + 0x40]
push eax
push 0xffffffffffffffff
lea eax, [esp + 0x38]
push eax
push edx
push edx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, eax
mov dword [esp + 0x18], edi
test edi, edi
jne 0x4016bb
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, eax
mov dword [esp + 0x18], eax
test edi, edi
je 0x4017a7
mov ebx, dword [ebp]
mov ecx, 1
mov edx, dword [esp + 0x10]
add ebx, edx
mov eax, ebx
cmp dword [eax], 0
je 0x4016d9
lea eax, [eax + 4]
inc ecx
cmp dword [eax], 0
jne 0x4016d0
mov esi, dword [ebp + 0x10]
lea eax, [ecx*4]
lea ecx, [esp + 0x28]
mov dword [esp + 0x24], eax
push ecx
push 0x40
add esi, edx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [ebx]
test eax, eax
je 0x40177c
sub esi, ebx
test eax, eax
mov dword [esp + 0x20], esi
jns 0x401719
movzx eax, ax
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x40176c
mov edi, dword [esp + 0x10]
lea esi, [esp + 0x5c]
mov ebp, dword [0x413e5c]
add edi, 2
add edi, eax
mov eax, dword [0x413e60]
xor edx, edx
movzx ecx, byte [edi]
lea edi, [edi + 1]
xor edx, ecx
test eax, eax
jns 0x401745
add eax, eax
xor eax, ebp
jmp 0x401747
add eax, eax
movzx ecx, al
xor edx, ecx
mov dword [0x413e60], eax
mov byte [esi], dl
inc esi
test edx, edx
jne 0x401733
mov edi, dword [esp + 0x18]
lea eax, [esp + 0x5c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, dword [esp + 0x20]
mov dword [esi + ebx], eax
add ebx, 4
mov eax, dword [ebx]
test eax, eax
jne 0x40170a
mov ebp, dword [esp + 0x1c]
mov esi, dword [ebp + 0x10]
lea eax, [esp + 0x28]
mov edi, dword [esp + 0x24]
add esi, dword [esp + 0x10]
push eax
push dword [esp + 0x2c]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov ecx, dword [esp + 0x10]
add ebp, 0x14
dec dword [esp + 0x14]
mov dword [esp + 0x1c], ebp
jne 0x401630
pop edi
pop ebx
mov ecx, dword [esp + 0xd4]
pop esi
pop ebp
xor ecx, esp
call fcn.00401ab4
add esp, 0xd0
ret