Function at 0x402b30
Capabilities:
Allocate or change rwx memory
Check for time delay via gettickcount
Execute shellcode via indirect call

Disassembly:
sub esp, 8
mov eax, dword [0x45fbac]
push ebp
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push edi
xor ebp, ebp
push ebp
push eax
mov dword [0x462624], eax
mov eax, dword [0x45fb58]
push 0x1013
push eax
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], ebp
mov dword [0x462634], 0x452020
call esi
mov ecx, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push ecx
call esi
mov eax, dword [0x45fbac]
mov edx, dword [0x45fb58]
push ebp
mov edi, 1
add eax, edi
push eax
push 0x1013
push edx
mov dword [0x45fbac], eax
mov dword [0x462634], 0x448874
mov dword [0x462624], eax
call esi
mov eax, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push eax
call esi
mov ecx, dword [esp + 0x18]
add dword [0x45fbac], edi
push ecx
call fcn.00401160
add esp, 4
test eax, eax
mov eax, dword [0x45fbac]
mov dword [0x462624], eax
jne 0x402c1b
mov edx, dword [0x45fb58]
push ebp
push eax
push 0x1013
push edx
mov dword [0x462634], 0x448894
call esi
mov eax, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push eax
call esi
add dword [0x45fbac], edi
pop edi
pop esi
pop ebp
add esp, 8
ret
mov ecx, dword [0x45fb58]
push ebx
push ebp
push eax
push 0x1013
push ecx
mov dword [0x462634], 0x4488ac
call esi
mov edx, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push edx
call esi
add dword [0x45fbac], edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x462788], ebp
xor edi, edi
mov dword [0x462794], ebp
call ebx
mov dword [0x45fba8], eax
jmp 0x402c70
mov eax, dword [0x46289c]
cmp byte [eax + edi], 0xe9
jne 0x402cb4
mov ecx, dword [0x4535d0]
mov eax, dword [eax + edi + 1]
mov edx, dword [0x453630]
add ecx, edi
lea eax, [ecx + eax + 5]
cmp eax, edx
jb 0x402cb4
mov ebp, dword [0x45fb30]
add ebp, edx
cmp eax, ebp
jae 0x402cb2
push eax
push ecx
call fcn.00402400
add esp, 8
add dword [0x462794], 1
xor ebp, ebp
add edi, 1
call ebx
sub eax, dword [0x45fba8]
cmp eax, 0x12c
jbe 0x402d43
call ebx
mov edx, dword [0x45fbac]
push ebp
push edx
mov dword [0x45fba8], eax
mov eax, dword [0x45fb58]
push 0x1008
push eax
call esi
mov ecx, dword [0x462794]
push 0xa
push 0x4612a8
push ecx
call fcn.004231b8
push 0x4612a8
push 0x4488c8
push 0x45fbb0
call fcn.00415641
mov eax, dword [0x45fbac]
mov edx, dword [0x45fb58]
add esp, 0x18
push ebp
push eax
push 0x1013
push edx
mov dword [0x462634], 0x45fbb0
mov dword [0x462624], eax
call esi
mov eax, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push eax
call esi
cmp edi, dword [0x46278c]
jbe 0x402c70
cmp dword [0x462794], ebp
mov eax, dword [0x45fbac]
mov ecx, dword [0x45fb58]
push ebp
push eax
jne 0x402d9e
push 0x1013
push ecx
mov dword [0x462634], 0x4488e0
mov dword [0x462624], eax
call esi
mov edx, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push edx
call esi
add dword [0x45fbac], 1
pop ebx
pop edi
pop esi
pop ebp
add esp, 8
ret
push 0x1008
push ecx
call esi
mov edx, dword [0x462794]
push 0xa
push 0x4612a8
push edx
call fcn.004231b8
push 0x4612a8
push str._s_splices_repaired...
push 0x45fbb0
call fcn.00415641
mov eax, dword [0x45fbac]
add esp, 0x18
push ebp
push eax
mov dword [0x462624], eax
mov eax, dword [0x45fb58]
push 0x1013
push eax
mov dword [0x462634], 0x45fbb0
call esi
mov ecx, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push ecx
call esi
mov eax, dword [0x45fbac]
mov edx, dword [0x45fb58]
add eax, 1
push ebp
push eax
push 0x1013
push edx
mov dword [0x45fbac], eax
mov dword [0x462634], 0x44890c
mov dword [0x462624], eax
call esi
mov eax, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push eax
call esi
mov eax, dword [0x45fbac]
mov ecx, dword [0x45fb58]
add eax, 1
push ebp
push eax
push 0x1013
push ecx
mov dword [0x45fbac], eax
mov dword [0x462634], 0x448928
mov dword [0x462624], eax
call esi
mov edx, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push edx
call esi
mov ecx, dword [0x46278c]
mov edx, dword [0x4535d0]
mov ebx, dword [esp + 0x1c]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
add dword [0x45fbac], 1
lea eax, [esp + 0x14]
push eax
push 0x40
push ecx
push edx
push ebx
mov dword [esp + 0x24], 0x40
call edi
test eax, eax
jne 0x402f01
mov eax, dword [0x45fbac]
push ebp
push eax
mov dword [0x462624], eax
mov eax, dword [0x45fb58]
push 0x1013
push eax
mov dword [0x462634], 0x44893c
call esi
mov ecx, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push ecx
call esi
add dword [0x45fbac], 1
pop ebx
pop edi
pop esi
pop ebp
add esp, 8
ret
mov edx, dword [0x46278c]
mov eax, dword [0x46289c]
mov ecx, dword [0x4535d0]
push 0x460f20
push edx
push eax
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x402f31
mov dword [0x462634], str.Unable_to_write_target_memory.
jmp 0x402f59
mov edx, dword [esp + 0x14]
mov eax, dword [0x46278c]
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [0x4535d0]
push edx
push eax
push ecx
push ebx
call edi
test eax, eax
jne 0x402f95
mov dword [0x462634], str.Unable_to_reprotect_process_memory.
mov eax, dword [0x45fbac]
mov edx, dword [0x45fb58]
push ebp
push eax
push 0x1013
push edx
mov dword [0x462624], eax
call esi
mov eax, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push eax
call esi
add dword [0x45fbac], 1
pop ebx
pop edi
pop esi
pop ebp
add esp, 8
ret
cmp dword [0x462788], ebp
mov eax, dword [0x45fbac]
push ebp
push eax
mov dword [0x462624], eax
push 0x1013
je 0x403097
mov ecx, dword [0x45fb58]
push ecx
mov dword [0x462634], 0x4489ac
call esi
mov edx, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push edx
call esi
mov eax, dword [0x45fbac]
add eax, 1
push ebp
push eax
mov dword [0x45fbac], eax
mov dword [0x462624], eax
mov eax, dword [0x45fb58]
push 0x1013
push eax
mov dword [0x462634], 0x4489d8
call esi
mov ecx, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push ecx
call esi
mov eax, dword [0x45fbac]
mov edx, dword [0x45fb58]
add eax, 1
push ebp
push eax
push 0x1013
push edx
mov dword [0x45fbac], eax
mov dword [0x462634], 0x4489f8
mov dword [0x462624], eax
call esi
mov eax, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push eax
call esi
mov eax, dword [0x45fbac]
mov ecx, dword [0x45fb58]
add eax, 1
push ebp
push eax
push 0x1013
push ecx
mov dword [0x45fbac], eax
mov dword [0x462634], 0x448a1c
mov dword [0x462624], eax
call esi
mov edx, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push edx
jmp 0x4030bb
mov eax, dword [0x45fb58]
push eax
mov dword [0x462634], 0x448a38
call esi
mov ecx, dword [0x45fb58]
push 0x462620
push ebp
push 0x1007
push ecx
call esi
mov eax, dword [0x462898]
add dword [0x45fbac], 1
cmp eax, ebp
je 0x4030dc
push eax
call fcn.00415d0a
add esp, 4
mov dword [0x462898], ebp
mov eax, dword [0x46289c]
cmp eax, ebp
je 0x4030f4
push eax
call fcn.00415d0a
add esp, 4
mov dword [0x46289c], ebp
pop ebx
pop edi
pop esi
pop ebp
add esp, 8
ret