Function at 0x464910
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
mov eax, dword [0x56a040]
xor eax, esp
mov dword [esp + 0x10], eax
push ebx
push esi
vxorpd xmm0, xmm0, xmm0
push edi
push str.demarrage_r4300_n
mov byte [0x61d254], 1
vmovlpd qword [esp + 0x14], xmm0
vmovlpd qword [0x22c3228], xmm0
call fcn.00403a40
mov esi, dword [0x27c3c80]
mov ecx, 0x3ef
add esi, 0x40
mov dword [0x22c318c], 0
mov edi, 0x67b600
mov dword [esp + 0x1c], 8
rep movsd dword es:[edi], dword [esi]
xor esi, esi
mov dword [0x27c3b44], 0
add esp, 4
xor ecx, ecx
xor edx, edx
xor eax, eax
lea edi, [esi + 0x34]
lea ebx, [esi + 4]
nop dword [eax]
mov dword [eax + 0x27c3280], 0
inc esi
mov dword [eax + 0x27c3284], 0
lea eax, [eax + 0x27c33a0]
mov dword [eax], 0
mov dword [edx + 0x27c3be0], eax
mov dword [edx + 0x27c3b60], eax
mov dword [eax + 4], 0
xor eax, eax
mov word [ecx + 0x27c34a0], ax
mov dword [ecx + 0x27c34a4], eax
mov word [ecx + 0x27c34a8], ax
mov dword [ecx + 0x27c34ac], eax
mov word [ecx + 0x27c34b0], ax
mov byte [ecx + 0x27c34b2], al
mov dword [ecx + 0x27c34b4], eax
mov dword [ecx + 0x27c34b8], eax
mov dword [ecx + 0x27c34bc], eax
mov dword [ecx + 0x27c34c0], eax
mov dword [ecx + 0x27c34c4], eax
mov dword [ecx + 0x27c34c8], eax
mov dword [ecx + 0x27c34cc], eax
mov dword [ecx + 0x27c34d0], eax
mov ecx, edi
mov eax, dword [esp + 0x18]
add edi, 0x34
add dword [esp + 0x18], 8
mov dword [edx + 0x22c31a0], 0
mov dword [edx + 0x22c3100], 0
mov edx, ebx
add ebx, 4
cmp esi, 0x20
jb 0x464990
push 0x400000
push 0
push 0x1ec0b80
call fcn.004dbbb0
mov eax, dword [esp + 0x20]
mov edx, 0x10
mov ecx, dword [esp + 0x1c]
add esp, 0xc
vxorpd xmm0, xmm0, xmm0
mov dword [0x27c3b38], 0
mov edi, 0x40
vmovlpd qword [0x27c3b20], xmm0
vmovlpd qword [0x27c3388], xmm0
mov dword [0x27c3b34], 0x511
lea esi, [edx + 0x34]
mov dword [0x27c3b2c], 0
mov dword [0x27c32b0], 0xa4001f0c
mov dword [0x27c32b4], 0xffffffff
mov dword [0x27c32b8], 0xa4001f08
mov dword [0x27c32bc], 0xffffffff
mov dword [0x27c32c0], 0xc0
mov dword [0x27c32c4], 0
mov dword [0x27c32d0], 0x40
mov dword [0x27c32d4], 0
mov dword [0x27c32d8], 0xa4000040
mov dword [0x27c32dc], 0xffffffff
mov dword [0x27c3368], 0xa4001ff0
mov dword [0x27c336c], 0xffffffff
mov dword [0x22c31a4], 0x1f
mov dword [0x22c31d0], 0x34000000
mov dword [0x22c31e0], 0x6e463
mov dword [0x22c31dc], 0xb00
mov dword [0x22c31c4], 0x5000
mov dword [0x22c31d4], 0x5c
mov dword [0x22c31b0], 0x7ffff0
mov dword [0x22c31d8], 0xffffffff
mov dword [0x22c31c0], 0xffffffff
mov dword [0x22c3218], 0xffffffff
add ecx, dword [edi + 0x67b5c0]
mov edi, esi
adc eax, 0
inc edx
add esi, 4
cmp edx, 0x400
jb 0x464b84
mov dword [0x22c30f0], edx
cmp eax, 0xd6
jg 0x464bed
jl 0x464bb2
cmp ecx, 0x497e414b
ja 0x464bed
cmp ecx, 0x497e414b
jne 0x464bc8
cmp eax, 0xd6
jne 0x464bc8
mov ecx, 3
jmp 0x464c1c
cmp ecx, 0xfb631223
jne 0x464bd7
cmp eax, 0xcf
je 0x464be6
cmp ecx, 0x27fdf31
jne 0x464c17
cmp eax, 0xd0
jne 0x464c17
mov ecx, 1
jmp 0x464c1c
cmp ecx, 0xd5be5580
jne 0x464c03
cmp eax, 0xd6
jne 0x464c03
mov ecx, 6
jmp 0x464c1c
cmp ecx, 0x49f60e96
jne 0x464c17
mov ecx, 5
cmp eax, 0x11a
je 0x464c1c
mov ecx, 2
movzx eax, word [0x27c3d1e]
movzx eax, al
add eax, 0xffffffc9
mov dword [0x23c3240], ecx
cmp eax, 0x22
ja case.0x464c3f.55
movzx eax, byte [eax + 0x4653e0]
jmp dword [eax*4 + 0x4653d4]
mov eax, dword [0x56ac10]
lea edx, [ecx - 2]
cmp edx, 4
ja case.0x464c57.4
jmp dword [edx*4 + 0x465404]
mov dword [0x27c32a8], 0xc0f1d859
mov dword [0x27c32f0], 0x2de108ea
jmp 0x464cd9
mov dword [0x27c32a8], 0xd4646273
jmp 0x464ccf
mov dword [eax + 4], 0xbda807fc
mov dword [0x27c32a8], 0xdecaaad1
mov dword [0x27c32f0], 0xcf85c13
mov dword [0x27c3340], 2
mov dword [0x27c3344], 0
jmp 0x464cd9
mov dword [0x27c32a8], 0xb04dc903
mov dword [0x27c3340], 2
mov dword [0x27c3344], 0
mov dword [0x27c32f0], 0x1af99984
mov dword [0x27c32f4], 0
mov dword [0x27c32ac], 0xffffffff
mov dword [0x27c3338], 6
mov dword [0x27c333c], 0
mov dword [0x27c3378], 0xa4001554
jmp 0x464ddf
mov eax, dword [0x56ac10]
lea edx, [ecx - 2]
cmp edx, 4
ja case.0x464d21.4
jmp dword [edx*4 + 0x465418]
mov dword [0x27c32a8], 0xc95973d5
mov dword [0x27c32f0], 0x2449a366
jmp 0x464d99
mov dword [0x27c32a8], 0x95315a28
mov dword [0x27c32f0], 0x5baca1df
jmp 0x464d99
mov dword [eax + 4], 0x8da807fc
mov dword [0x27c32a8], 0x5493fb9a
mov dword [0x27c32ac], 0
mov dword [0x27c32f0], 0xc2c20384
mov dword [0x27c32f4], 0xffffffff
jmp case.0x464d21.4
mov dword [0x27c32a8], 0xe067221f
mov dword [0x27c32f0], 0x5cd2b70f
mov dword [0x27c32ac], 0xffffffff
mov dword [0x27c32f4], 0
mov dword [0x27c3320], 1
mov dword [0x27c3324], 0
mov dword [0x27c3340], 3
mov dword [0x27c3344], 0
mov dword [0x27c3378], 0xa4001550
dec ecx
mov dword [0x27c337c], 0xffffffff
cmp ecx, 5
ja case.0x464df3.4
jmp dword [ecx*4 + 0x46542c]
mov dword [0x27c3330], 0x3f
jmp 0x465061
mov dword [0x27c3288], 1
mov dword [0x27c328c], 0
mov dword [0x27c3290], 0xebda536
mov dword [0x27c3294], 0
mov dword [0x27c3298], 0xebda536
mov dword [0x27c329c], 0
mov dword [0x27c32a0], 0xa536
mov dword [0x27c32e0], 0xed10d0b3
mov dword [0x27c32e8], 0x1402a4cc
mov dword [0x27c32ec], 0
mov dword [0x27c32f8], 0x3103e121
mov dword [0x27c3330], 0x3f
mov dword [0x27c3348], 0x9debb54f
mov dword [0x27c334c], 0xffffffff
jmp 0x465043
mov dword [0x27c3288], 1
mov dword [0x27c328c], 0
mov dword [0x27c3290], 0x49a5ee96
mov dword [0x27c3294], 0
mov dword [0x27c3298], 0x49a5ee96
mov dword [0x27c329c], 0
mov dword [0x27c32a0], 0xee96
mov dword [0x27c32e0], 0xce9dfbf7
mov dword [0x27c32e8], 0xce9dfbf7
mov dword [0x27c32f8], 0x18b63d28
mov dword [0x27c3330], 0x78
mov dword [0x27c3348], 0x825b21c9
mov dword [0x27c334c], 0xffffffff
jmp 0x465039
mov dword [eax], 0x3c0dbfc0
mov dword [eax + 8], 0x25ad07c0
mov dword [eax + 0xc], 0x31080080
mov dword [eax + 0x10], 0x5500fffc
mov dword [eax + 0x14], 0x3c0dbfc0
mov dword [eax + 0x18], 0x8da80024
mov dword [eax + 0x1c], 0x3c0bb000
mov dword [0x27c3290], 0xf58b0fbf
mov dword [0x27c3294], 0xffffffff
mov dword [0x27c3298], 0xf58b0fbf
mov dword [0x27c329c], 0xffffffff
mov dword [0x27c32a0], 0xfbf
mov dword [0x27c32e0], 0x9651f81e
mov dword [0x27c32e8], 0x2d42aac5
mov dword [0x27c32ec], 0
mov dword [0x27c32f8], 0x56584d60
mov dword [0x27c3330], 0x91
mov dword [0x27c3348], 0xcdce565f
mov dword [0x27c334c], 0xffffffff
jmp 0x465043
mov dword [0x27c3290], 0xa95930a4
mov dword [0x27c3294], 0xffffffff
mov dword [0x27c3298], 0xa95930a4
mov dword [0x27c329c], 0xffffffff
mov dword [0x27c32a0], 0x30a4
mov dword [0x27c32e0], 0xbcb59510
mov dword [0x27c32e8], 0xbcb59510
mov dword [0x27c32f8], 0x7a3c07f4
mov dword [0x27c3330], 0x85
mov dword [0x27c3348], 0x465e3f72
mov dword [0x27c334c], 0
mov dword [0x27c32ec], 0xffffffff
mov dword [0x27c32fc], 0
mov dword [0x27c32e4], 0xffffffff
mov dword [0x27c32a4], 0
mov dword [0x27c3334], 0
mov dword [0x56ce6c], 0x23f
fldcw word [0x56ce6c]
mov eax, dword [0x281779c]
mov edx, 0x1388
mov dword [0x27c3b30], 0xa4000040
mov dword [0x28577fc], 1
mov dword [0x27c3264], 0x1388
mov dword [0x22c2d94], edx
mov dword [0x81debc], edx
mov dword [0x22c2d90], 0
test eax, eax
je 0x4650dd
nop dword [eax]
mov esi, dword [eax + 8]
push eax
call fcn.004df21f
add esp, 4
mov eax, esi
mov dword [0x281779c], eax
test esi, esi
jne 0x4650c0
mov edx, dword [0x22c2d94]
sub edx, dword [0x22c31c4]
mov ecx, 1
call fcn.004555f0
mov edx, dword [0x22c31c4]
mov ecx, 0x20
neg edx
call fcn.004555f0
mov eax, dword [0x27c3380]
mov dword [0x22c3220], 0
test eax, eax
jne 0x46515e
push str.interpreter_n
call fcn.00403a40
add esp, 4
call fcn.00464880
cmp dword [0x22c318c], 0
mov eax, dword [0x27c3b28]
mov eax, dword [eax + 0x14]
mov dword [0x27c3b30], eax
jne 0x4651ea
nop
mov eax, dword [0x27c3b28]
mov eax, dword [eax]
call eax
cmp dword [0x22c318c], 0
mov byte [0x61d24e], 0
je 0x465140
jmp 0x4651ea
cmp eax, 2
jne 0x46517e
mov dword [0x27c3380], 0
mov dword [0x22c3220], 1
call fcn.00460fc0
jmp 0x4651ea
push str.dynamic_recompiler_n
mov dword [0x27c3380], 1
call fcn.00403a40
add esp, 4
call fcn.00464880
mov ecx, dword [0x22c30ec]
mov eax, dword [ecx]
mov esi, dword [ecx + 0x10]
mov edi, dword [eax + 0x8d8]
add edi, dword [ecx + 0xc]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea ecx, [esp + 0x18]
push ecx
push 0x40
push esi
push edi
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
test eax, eax
jne 0x4651d5
push str.VirtualProtectEx_failed_n
call fcn.00403a40
add esp, 4
mov dword [0x22c3188], edi
call fcn.004869a0
add dword [0x27c3b28], 0x8c
mov eax, dword [0x22c31c4]
add dword [0x22c3228], eax
mov eax, dword [0x27c3b28]
adc dword [0x22c322c], 0
mov ecx, dword [eax + 0x14]
mov eax, ecx
shr eax, 2
and eax, 0x3fffff
push dword [eax*4 + 0x8bdfc0]
push ecx
push str.PC_x:_x_n
call fcn.00403a40
add esp, 0xc
xor esi, esi
nop word [eax + eax]
push dword [esi*8 + 0x27c3300]
mov eax, dword [esi*8 + 0x27c3300]
mov cl, 0x20
mov edx, dword [esi*8 + 0x27c3304]
call fcn.00509e40
mov edx, dword [esi*8 + 0x27c3284]
mov cl, 0x20
push eax
lea eax, [esi + 0x10]
push eax
push dword [esi*8 + 0x27c3280]
mov eax, dword [esi*8 + 0x27c3280]
call fcn.00509e40
push eax
push esi
push str.reg__2d_:_8x_8x________reg__d_:_8x_8x_n
call fcn.00403a40
inc esi
add esp, 0x1c
cmp esi, 0x10
jl 0x465230
push dword [0x27c3388]
push dword [0x27c338c]
push dword [0x27c3b20]
push dword [0x27c3b24]
push str.hi:_8x_8x________lo:_8x_8x_n
call fcn.00403a40
mov ecx, dword [0x22c322c]
add esp, 0x14
mov eax, dword [0x22c3228]
push ecx
push eax
push ecx
push eax
push str.Executed__llu___x__instructions_n
call fcn.00403a40
xor ecx, ecx
add esp, 0x14
mov dword [0x22c30f0], ecx
xor eax, eax
nop dword [eax]
mov eax, dword [eax*4 + 0x23c3260]
test eax, eax
je 0x465386
mov eax, dword [eax]
test eax, eax
je 0x465306
push eax
call fcn.004df21f
mov eax, dword [0x22c30f0]
add esp, 4
mov eax, dword [eax*4 + 0x23c3260]
mov dword [eax], 0
mov ecx, dword [0x22c30f0]
mov eax, dword [ecx*4 + 0x23c3260]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x465336
push eax
call fcn.004df21f
mov eax, dword [0x22c30f0]
add esp, 4
mov eax, dword [eax*4 + 0x23c3260]
mov dword [eax + 0xc], 0
mov ecx, dword [0x22c30f0]
mov eax, dword [ecx*4 + 0x23c3260]
mov eax, dword [eax + 0x18]
test eax, eax
je 0x465366
push eax
call fcn.004df21f
mov eax, dword [0x22c30f0]
add esp, 4
mov eax, dword [eax*4 + 0x23c3260]
mov dword [eax + 0x18], 0
mov ecx, dword [0x22c30f0]
push dword [ecx*4 + 0x23c3260]
call fcn.004df21f
mov ecx, dword [0x22c30f0]
add esp, 4
mov dword [ecx*4 + 0x23c3260], 0
inc ecx
mov eax, ecx
mov dword [0x22c30f0], ecx
cmp eax, 0x100000
jb 0x4652d0
cmp dword [0x27c3380], 0
jne 0x4653ba
cmp dword [0x22c3220], 0
je 0x4653ba
push dword [0x27c3b28]
call fcn.004df21f
add esp, 4
pop edi
pop esi
mov byte [0x61d254], 0
mov ecx, dword [esp + 0x14]
pop ebx
xor ecx, esp
call fcn.004d7bf5
mov esp, ebp
pop ebp
ret