Function at 0x45359c
Capabilities:
Allocate or change rwx memory
Check for software breakpoints
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9c
mov eax, dword [0x57254c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, ecx
push edi
mov dword [ebp - 0x98], ebx
xor edi, edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x576520], eax
je 0x4535d3
mov eax, 0x10dd
jmp 0x4538c2
mov eax, dword [0x57651c]
test eax, eax
jne 0x4538c2
test ebx, ebx
jne 0x4535ec
push 6
pop eax
jmp 0x4538c2
mov ecx, dword [ebx]
test ecx, ecx
jne 0x453605
push 6
pop eax
mov dword [0x57651c], eax
mov dword [0x576528], ebx
jmp 0x4538c2
push esi
mov ebx, edi
mov esi, edi
call fcn.0045315b
mov ecx, 0x41b850
mov dword [ebp - 0x7c], eax
call fcn.0045315b
mov dword [ebp - 0x9c], eax
cmp eax, dword [ebp - 0x7c]
jne 0x453638
cmp dword [0x5764a0], ebx
jne 0x4538b4
jmp 0x453895
push 0x18
call fcn.004f8c17
pop ecx
mov ecx, dword [ebp - 0x7c]
mov esi, eax
mov dword [ebp - 0x90], esi
call fcn.00452ff4
mov ebx, eax
test ebx, ebx
jne 0x45365e
push 8
pop edi
jmp 0x453895
mov eax, dword [ebp - 0x7c]
mov dword [ebx + 0x38], edi
mov dword [ebx + 0x3c], edi
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x8c], edi
push 0x6c
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x74]
push edi
push eax
call fcn.004fb730
mov ecx, dword [ebp - 0x80]
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x58], eax
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x78]
mov dword [ebp - 0x4c], edi
add esp, 0xc
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x84]
test eax, eax
mov dword [ebp - 0x78], edi
cmovne edx, eax
test ecx, ecx
jne 0x4536c1
push 0xd
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, edi
mov dword [ebp - 0x80], ecx
jmp 0x4536d9
movzx eax, byte [ecx]
push ecx
push edx
lea ecx, [ebp - 0x74]
lea eax, [eax*8 + 0x533010]
push eax
call dword [eax + 4]
mov ecx, eax
mov dword [ebp - 0x80], eax
mov eax, ecx
mov edx, ecx
sub eax, dword [ebp - 0x94]
add eax, dword [ebp - 0x78]
add dword [ebp - 0x84], eax
sub edx, dword [ebp - 0x7c]
mov cl, byte [ebp - 0x84]
mov al, dl
sub cl, bl
mov dword [ebp - 0x88], edx
and al, 7
shl cl, 3
or cl, al
mov eax, dword [ebp - 0x8c]
mov byte [ebx + eax + 0x38], cl
inc eax
mov dword [ebp - 0x8c], eax
cmp eax, 8
jae 0x453781
mov ecx, dword [ebp - 0x94]
mov al, byte [ecx]
cmp al, 0xeb
je 0x453781
cmp al, 0xe9
je 0x453781
cmp al, 0xe0
je 0x453781
cmp al, 0xc2
je 0x453781
cmp al, 0xc3
je 0x453781
cmp al, 0xcc
je 0x453781
cmp al, 0xf3
jne 0x453746
cmp byte [ecx + 1], 0xc3
je 0x453781
cmp al, 0xff
jne 0x453750
cmp byte [ecx + 1], 0x25
je 0x453781
cmp al, 0x26
je 0x453768
cmp al, 0x2e
je 0x453768
cmp al, 0x36
je 0x453768
cmp al, 0x3e
je 0x453768
cmp al, 0x64
je 0x453768
cmp al, 0x65
jne 0x453774
cmp byte [ecx + 1], 0xff
jne 0x453774
cmp byte [ecx + 2], 0x25
je 0x453781
cmp edx, 5
jae 0x4537bd
mov eax, dword [ebp - 0x80]
jmp 0x453676
cmp edx, 5
jae 0x4537bd
mov esi, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
call fcn.00452c6c
test eax, eax
je 0x4537a8
add ecx, eax
mov edx, ecx
sub edx, esi
mov dword [ebp - 0x88], edx
cmp edx, 5
jb 0x45378c
jmp 0x4537ae
mov edx, dword [ebp - 0x88]
mov esi, dword [ebp - 0x90]
cmp edx, 5
jb 0x453889
cmp dword [ebp - 0x8c], 8
ja 0x453889
mov eax, dword [ebp - 0x84]
lea ecx, [ebx + 0x1e]
cmp eax, ecx
jbe 0x4537d8
int3
sub al, bl
mov byte [ebx + 0x36], dl
push edx
push dword [ebp - 0x7c]
mov byte [ecx], al
lea eax, [ebx + 0x20]
push eax
call fcn.004fb890
mov eax, dword [ebp - 0x88]
add esp, 0xc
cmp eax, 0x19
jbe 0x453801
push 6
jmp 0x453658
mov esi, dword [ebp - 0x7c]
lea edx, [ebx + 0x1e]
movzx ecx, byte [edx]
add esi, eax
mov eax, dword [ebp - 0x9c]
add ecx, ebx
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x40], esi
lea eax, [ecx + 5]
mov byte [ecx], 0xe9
sub esi, eax
mov dword [ecx + 1], esi
add ecx, 5
call fcn.00452c43
mov esi, dword [ebp - 0x7c]
lea eax, [ebp - 8]
push eax
push 0x40
push dword [ebp - 0x88]
mov dword [ebp - 8], edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x45385a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebp - 0x90]
mov edi, eax
jmp 0x453895
mov ecx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x98]
mov dword [ecx + 8], eax
mov dword [ecx + 4], edi
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0xc], esi
mov eax, dword [ebp - 8]
mov dword [ecx + 0x14], eax
mov eax, dword [0x576534]
mov dword [ecx], eax
xor eax, eax
mov dword [0x576534], ecx
jmp 0x4538c1
cmp dword [0x5764a0], 0
push 9
pop edi
jne 0x45389b
mov dword [0x57651c], edi
test ebx, ebx
je 0x4538a6
mov ecx, ebx
call fcn.00453136
test esi, esi
je 0x4538b4
push 0x18
push esi
call fcn.004f8ec4
pop ecx
pop ecx
mov eax, dword [ebp - 0x98]
mov dword [0x576528], eax
mov eax, edi
pop esi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.004f8955
leave
ret 0xc