Function at 0x10470bc
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff24
xor edx, edx
mov dword [ebp - 0x64], edx
push ebx
lea eax, [edx - 0x78]
xor ecx, ecx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0x6c], ecx
push esi
sub edx, eax
mov ebx, dword [ebp - 0xc8]
add edx, edx
or edx, ecx
xor esi, esi
mov dword [ebp - 0x38], ebx
and esi, ecx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x34], esi
push edi
xor ebx, ebx
mov dword [ebp - 0x8c], ebx
lea edx, [ebx + ecx*2 + 3]
mov dword [ebp - 0xb4], edx
push pe_nt_image_headers32
push 0x3000
push 0x86984
push 0
call dword [sym.imp.KERNEL32.DLL_VirtualAlloc]
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x14], eax
cmp eax, dword [ebp - 0x24]
jne 0x1047149
xor esi, esi
lea ebx, [eax - 0x4d]
mov dword [ebp - 0xac], ebx
add esi, ebx
cmp esi, eax
jne 0x1047149
mov eax, esi
mov edi, 0xbe
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x94], 0x108a60e
xor edx, edx
mov dword [ebp - 0xc4], ebx
sub eax, ebx
lea ecx, [ebx + 0xefb1]
cmp ecx, dword [ebp - 0xac]
je 0x1047185
mov esi, dword [ebp - 0x5c]
mov ebx, dword [0x1061e6b]
mov dword [ebp - 0x80], ecx
sub esi, eax
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x4c], edx
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x1c], edi
mov eax, edx
mov ecx, eax
mov dword [ebp - 0x78], ecx
mov ebx, dword [ebp - 0x94]
lea esi, [ebx + ecx*4 + 0x2a3e]
mov dword [ebp - 0xd0], esi
mov esi, dword [ebx]
cmp esi, 0xffffffea
je 0x10471af
mov dword [ebp - 4], eax
mov ecx, dword [ebx + 4]
mov dword [ebp - 0x98], ecx
or esi, esi
je 0x10471ea
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x40], eax
repne movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x18], ecx
add dword [ebp - 0x94], 8
cmp edi, 0x7a
je 0x10471e8
mov ecx, dword [0x1061ea1]
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x2c], ebx
jmp 0x1047188
mov edx, eax
mov esi, dword [0x1061e42]
mov dword [ebp - 0xb0], edi
add edx, edx
add esi, edi
mov dword [ebp - 0xd8], eax
sub esi, edi
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x74], edx
cmp esi, dword [0x1061e42]
jne 0x1047246
mov ebx, dword [0x1061e6b]
test edi, 0xf501849
jne 0x1047246
mov eax, dword [0x1061e6b]
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xa0], esi
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0xbc], eax
sub edx, eax
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 4]
je 0x1047276
mov ebx, esi
test eax, 0xf6
je 0x1047276
xor edx, edx
add ebx, esi
mov esi, ebx
mov dword [ebp - 0x50], esi
cmp ebx, 0x45
je 0x1047276
mov dword [ebp - 0xa4], eax
mov esi, edx
mov dword [ebp - 0x7c], esi
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 8], esi
pop edi
lea ecx, [edx - 0x44]
mov ebx, dword [ebp - 0xd0]
sub ebx, ecx
mov dword [ebp - 0x58], ebx
pop esi
mov ebx, 0xd9
lea ecx, [ebx + 0x22]
cmp edi, dword [ebp - 0x38]
jne 0x10472de
mov edx, eax
mov ebx, 0xf
mov dword [ebp - 0x10], edi
test edx, 0xfd
jne 0x10472de
mov dword [ebp - 0x88], edx
mov dword [ebp - 0xdc], esi
mov dword [ebp - 0xc], ecx
mov ecx, dword [0x1061e9d]
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0x48], edi
add ebx, esi
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 0x20], ebx
pop ebx
mov dword [ebp - 0x30], ebx
leave
ret